Problem connecting Nextcloud with onlyoffice via connector

Connectors
, , ,
1

Well hello there. It seems I’m a bit of a pickle… I’m trying to connect my Nextcloud server (version 24 the latest) to Onlyoffice (latest) both running on the same server Inside a Ubuntu server 22.04 VM in proxmox but get this weird error everytime.

My nextcloud server runs natively on apache2 with ufw allowing all ports I need) but I decided to run OnlyOffice inside a docker using a different port than the default one since 443 is already used by my NC. I can access both server with my domain name and both can be accessed using SSL/HTTPS from outside my network. Using a rapidssl cert.

Whenever I try to link both server together, I get this error:

Error while downloading the document file to be converted.) (version 7.3.3.49)

Not sure what’s going on as both servers runs just fine on their own and can be accessed from outside. Heres what I get in logs.

Screenshot_20230503_151016
Screenshot_20230503_1510161638×1000 141 KB

2

I get this error in my var/logs/nextcloud

Screenshot_20230503_165123
Screenshot_20230503_1651231757×206 114 KB

3

Hello @TotallyNotHax

Please share logs of Document Server too. They are located in /var/log/onlyoffice/documentserver/ inside the container.

4

Ok, I’ve been able to fix my issue. Always verify your SSL Certificate. Mine was missing the CA Authority and by not having it configured in Apache, blocked the connexion.

A good tools to check if your ssl certificates is properly installed and configured.
https://www.digicert.com/help/

5

Good job! I’m glad to hear that you’ve managed the issue.

6

Dear Constantine, i got same problem. My Nextcloud running on apache and onlyoffice ds running on nginx.

onlyoffice error
onlyoffice error796×440 41 KB

7

Hello @parolnix

I can see that you have replied to several threads, please do not duplicate identical posts in multiple threads.

First of all, you are using an outdated version of Document Server. Please consider updating for better results.

In general, please refer to this thread where similar issue is described for possible solution:

If information there doesn’t help, please provide logs of Document Server from /var/log/onlyoffice/documentserver for analysis here in this thread.

8

Hello, i upgraded onlyoffice-ds to 7.3.3-49 and postgresql version 13 on centos 7, but error not fixed yet. Kindly see some of my config and error screen.

onlyoffice error (7.3.3-49)
onlyoffice error (7.3.3-49)794×442 43.7 KB

##local.json##

        "inbox": {
          "header": "AuthorizationJwt",
          "inBody": false
        },
        "outbox": {
          "header": "AuthorizationJwt",
          "inBody": false
        }
      },
      "secret": {
        "inbox": {
          "string": "F6VvPqYrGmK8Rb8msfcyfGx5TD9AP68P"
        },
        "outbox": {
          "string": "F6VvPqYrGmK8Rb8msfcyfGx5TD9AP68P"
        },
        "session": {
          "string": "F6VvPqYrGmK8Rb8msfcyfGx5TD9AP68P"
        }
      }
    }
  },
  "queue": {
    "type": "rabbitmq"
  },
  "rabbitmq": {
    "url": "amqp://guest:guest@localhost"
  },
  "storage": {
    "fs": {
      "secretString": "Ugnvzl7RoW0LdXoj1d7X"
    }

#Default.json#

"requestDefaults": {
                                "headers": {
                                        "User-Agent": "Node.js/6.13",
                                        "Connection": "Keep-Alive"
                                },
                                "gzip": true,
                                "rejectUnauthorized": false
                        },

nextcloud Config#

'installed' => true,
  'allow_local_remote_servers' => true,
  'onlyoffice' =>
  array (
    'verify_peer_off' => true,
    'jwt_secret' => 'F6VvPqYrGmK8Rb8msfcyfGx5TD9AP68P',
    'jwt_header' => 'AuthorizationJwt',
  ),

#Converter out.log#

[2023-05-25T12:44:58.214] [ERROR] [localhost] [conv_check_2138923349_docx] [userId] nodeJS - error downloadFile:url=http://10.1.0.10/index.php/apps/onlyoffice/empty?doc=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJhY3Rpb24iOiJlbXB0eSJ9.FOJRL4ndbhPKFjikyAiMMKoFhs_-JMztyuOyGOD205g;attempt=2;code:undefined;connect:undefined Error: Error response: statusCode:403; headers:{"date":"Thu, 25 May 2023 12:46:59 GMT","server":"Apache/2.4.6 (CentOS) PHP/8.1.19","referrer-policy":"no-referrer","x-content-type-options":"nosniff","x-frame-options":"SAMEORIGIN","x-permitted-cross-domain-policies":"none","x-robots-tag":"noindex, nofollow","x-xss-protection":"1; mode=block","x-powered-by":"PHP/8.1.19","set-cookie":["ocozz0ort8xk=uq316tu7ed0700n2c8akrbjhd3; path=/; HttpOnly; SameSite=Lax","oc_sessionPassphrase=i1jzGuYZFiWDDi0mcLD7Rg1V2H0SGVg9mL%2F8Cc3RiB3YF3iNHZoX8Tk8%2Bm3Xl9AgdwSilSI8VTvm7%2FIC0MjMz%2BKERLjYvf8aZzkZI8p15JGgWpbVsguW8iDY1VRAwaRi; path=/; HttpOnly; SameSite=Lax","ocozz0ort8xk=ecmv0a6ih06qmp4bigheolni6b; path=/; HttpOnly; SameSite=Lax","ocozz0ort8xk=ecmv0a6ih06qmp4bigheolni6b; path=/; HttpOnly; SameSite=Lax","nc_sameSiteCookielax=true; path=/; httponly;expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=lax","nc_sameSiteCookiestrict=true; path=/; httponly;expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=strict","ocozz0ort8xk=ecmv0a6ih06qmp4bigheolni6b; path=/; HttpOnly; SameSite=Lax"],"expires":"Thu, 19 Nov 1981 08:52:00 GMT","cache-control":"no-cache, no-store, must-revalidate","pragma":"no-cache","content-security-policy":"default-src 'none';base-uri 'none';manifest-src 'self';frame-ancestors 'none'","x-request-id":"ZG9Yww-1OtSq2k7Q5BbR0AAAAAs","feature-policy":"autoplay 'none';camera 'none';fullscreen 'none';geolocation 'none';microphone 'none';payment 'none'","content-length":"27","keep-alive":"timeout=5, max=100","connection":"Keep-Alive","content-type":"application/json; charset=utf-8"};
    at Request.fResponse (/snapshot/server/build/server/Common/sources/utils.js)
    at Request.emit (events.js:400:28)
    at Request.onRequestResponse (/snapshot/server/build/server/Common/node_modules/request/request.js:1059:10)
    at ClientRequest.emit (events.js:400:28)
    at HTTPParser.parserOnIncomingClient (_http_client.js:647:27)
    at HTTPParser.parserOnHeadersComplete (_http_common.js:126:17)
    at Socket.socketOnData (_http_client.js:515:22)
    at Socket.emit (events.js:400:28)
    at addChunk (internal/streams/readable.js:290:12)
    at readableAddChunk (internal/streams/readable.js:265:9)
    at Socket.Readable.push (internal/streams/readable.js:204:10)
    at TCP.onStreamRead (internal/stream_base_commons.js:188:23)
[2023-05-25T12:44:59.645] [ERROR] [localhost] [conv_check_2138923349_docx] [userId] nodeJS - error downloadFile:url=http://10.1.0.10/index.php/apps/onlyoffice/empty?doc=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJhY3Rpb24iOiJlbXB0eSJ9.FOJRL4ndbhPKFjikyAiMMKoFhs_-JMztyuOyGOD205g;attempt=3;code:undefined;connect:undefined Error: Error response: statusCode:403; headers:{"date":"Thu, 25 May 2023 12:47:01 GMT","server":"Apache/2.4.6 (CentOS) PHP/8.1.19","referrer-policy":"no-referrer","x-content-type-options":"nosniff","x-frame-options":"SAMEORIGIN","x-permitted-cross-domain-policies":"none","x-robots-tag":"noindex, nofollow","x-xss-protection":"1; mode=block","x-powered-by":"PHP/8.1.19","set-cookie":["ocozz0ort8xk=rffp4enijpquh0r05dv5efa378; path=/; HttpOnly; SameSite=Lax","oc_sessionPassphrase=HPYOFQ4bPvOTDtBXIFwLNAT4RAdp78VWGoPrwxKpeJbST%2FXsl2vrM0LwJEOsEpUf0xTwehjA8FCGGOF8yf3%2FnuE2mP%2BTV6IoNmH9gO8A2eIqZ5ehdYFYDtMh%2BIVEiYxI; path=/; HttpOnly; SameSite=Lax","ocozz0ort8xk=0huso0tu4v8tmnlmb10j801nnu; path=/; HttpOnly; SameSite=Lax","ocozz0ort8xk=0huso0tu4v8tmnlmb10j801nnu; path=/; HttpOnly; SameSite=Lax","nc_sameSiteCookielax=true; path=/; httponly;expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=lax","nc_sameSiteCookiestrict=true; path=/; httponly;expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=strict","ocozz0ort8xk=0huso0tu4v8tmnlmb10j801nnu; path=/; HttpOnly; SameSite=Lax"],"expires":"Thu, 19 Nov 1981 08:52:00 GMT","cache-control":"no-cache, no-store, must-revalidate","pragma":"no-cache","content-security-policy":"default-src 'none';base-uri 'none';manifest-src 'self';frame-ancestors 'none'","x-request-id":"ZG9Yxb-jhkGT633KESDNWwAAAAY","feature-policy":"autoplay 'none';camera 'none';fullscreen 'none';geolocation 'none';microphone 'none';payment 'none'","content-length":"27","keep-alive":"timeout=5, max=100","connection":"Keep-Alive","content-type":"application/json; charset=utf-8"};
    at Request.fResponse (/snapshot/server/build/server/Common/sources/utils.js)
    at Request.emit (events.js:400:28)
    at Request.onRequestResponse (/snapshot/server/build/server/Common/node_modules/request/request.js:1059:10)
    at ClientRequest.emit (events.js:400:28)
    at HTTPParser.parserOnIncomingClient (_http_client.js:647:27)
    at HTTPParser.parserOnHeadersComplete (_http_common.js:126:17)
    at Socket.socketOnData (_http_client.js:515:22)
    at Socket.emit (events.js:400:28)
    at addChunk (internal/streams/readable.js:290:12)
    at readableAddChunk (internal/streams/readable.js:265:9)
    at Socket.Readable.push (internal/streams/readable.js:204:10)
    at TCP.onStreamRead (internal/stream_base_commons.js:188:23)
9

Please check http://<document_server_address>/healthcheck page and share the output.

Additionally, execute this command bash /usr/bin/documentserver-update-securelink.sh and check the situation again.

10

healthcheck
healthcheck796×522 7.05 KB

i used these 2 commands as per your instruction.
#bash /usr/bin/documentserver-update-securelink.sh
#supervisorctl restart all

But nothing change.
Regard with thanks

11

Thank you for the information.
Try adding your Nextcloud address to the trusted in config.php:

  'trusted_domains' => 
  array (
    0 => 'http://10.1.0.10',
  ),

I have taken the address from your reply in another post, use proper one if this is not valid.

Check if it helps afterwards.

By the way, is there any proxy used in your environment?

12

Dear @Constantine , i already added trusted_domains as following:
‘trusted_domains’ =>
array (
0 => ‘10.1.0.10’,
1 => ‘10.1.0.15’,
),
and i don’t use proxy.
i installed as this guide : Installing ONLYOFFICE Docs for CentOS and derivatives - ONLYOFFICE

#nextcloud config##

<?php
$CONFIG = array (
  'instanceid' => 'ocozz0ort8xk',
  'passwordsalt' => 'D+2v4Wq0+xKBJj5sVI39h01VQOF2XY',
  'secret' => 'mxNF0/Gb1r5AHbDHpA9EP9FC0FC7wkjde3kNam8/NnTsLdcR',
  'trusted_domains' =>
  array (
    0 => '10.1.0.10',
    1 => '10.1.0.15',
    ),
  'datadirectory' => '/var/www/html/nextcloud/data',
  'dbtype' => 'mysql',
  'version' => '25.0.6.1',
  'overwrite.cli.url' => 'http://10.1.0.10',
  'dbname' => 'clouddb',
  'dbhost' => '127.0.0.1',
  'dbport' => '',
  'dbtableprefix' => 'oc_',
  'mysql.utf8mb4' => true,
  'dbuser' => 'dbusername',
  'dbpassword' => 'dbpassword',
  'installed' => true,
  'allow_local_remote_servers' => true,
  'onlyoffice' =>
  array (
    'verify_peer_off' => true,
    'jwt_secret' => 'F6VvPqYrGmK8Rb8msfcyfGx5TD9AP68P',
    'jwt_header' => 'AuthorizationJwt',
  ),
  'theme' => '',
  'loglevel' => 2,
  'maintenance' => false,
  'updater.secret' => '$2y$10$oiKdXC07YHEYSdOd4bKaIOS9CmHoAUXNtH6feRr2bCw8.QHBS78RS',
);

#Running Services and Ports on Document Server#

services
services800×527 43.2 KB

Regard with thanks

13

What are the versions of Nextcloud and the connector app?

Also, run an accessibility test:

  • execute wget <document_server_address> from Nextcloud server;
  • execute wget <nextcloud_address> from the server where Document Server is installed.

After that share outputs of these commands.

14

Dear @Constantine , Nextcloud version : 25.0.6 and Connector Version: 7.8.0. Kindly see attached screenshot of wget cross test.
Regard with thanks

wget-from-ds
wget-from-ds801×297 32.2 KB

#wget from nc to ds#

wget-from-nc
wget-from-nc800×309 32 KB

15

Thank you.

Actually, this command is used for Docker installations to restart Document Server services. Did you use it after changing JWT header in local.json? If yes, then try systemctl restart ds-* and check if you can connect afterwards.

16

Dear @Constantine , i also used that command after changing local.json, systemctl restart ds-* and systemctl restart nginx, but error not fixed.
Regard with thanks

17

Please run another test and disable JWT token for Document Server and remove 'jwt_secret' and 'jwt_header' strings from config.php of Nextcloud and retry.

To disable JWT on Document Server side change next parameters in local.json:

      "token": {
        "enable": {
          "request": {
            "inbox": false,
            "outbox": false
          },
          "browser": false
        },

And restart Document Server services with systemctl restart ds-*.

Also, after attempting to connect and if it does not succeed, check logs of Nextcloud and provide them too.

18

Dear @Constantine , after disabling JWT as per your instruction, NC connected to Onlyoffice Document Server.

Thanks you so much for your support.

successful
successful797×443 38 KB

Regard with Thanks

19

Actually, we usually do not recommend disabling JWT for security reasons, I have asked you to check if it connects to make sure that we have a problem with JWT in the first place.
Eventually, if you are fine with disabled JWT, then I was glad to help. However, if you decide to dig down into the problem and resolve the issue with enabled JWT to increase security measures, feel free to contact me back.

20

Dear @Constantine , Thanks you for your suggestion. I would like to enable Jwt and fixed that error. But unicode fonts are display incorrectly now, i will post in relevant topic of forum.

Thanks for your time and support.
Regard with thanks