SSO login failing

[ntnsndr]

I just discovered that our Dokuwiki installation is not letting me log in. We use the Cloudron SSO for this app. Is anyone else having this issue? Here are the errors I'm seeing:

Aug 18 09:30:50 128.138.65.244 - - [18/Aug/2025:15:30:50 +0000] "GET /start?do=login&sectok= HTTP/1.1" 200 3788 "https://handbook.medlab.host/doku.php?error=access_denied&iss=https%3A%2F%2Fmy.medlab.host%2Fopenid" "Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0"
Aug 18 09:30:50 128.138.65.244 - - [18/Aug/2025:15:30:50 +0000] "GET /lib/exe/js.php?t=dokuwiki&tseed=036a9200978e727d84cf7845cf2cdc2a HTTP/1.1" 200 27334 "https://handbook.medlab.host/start?do=login&sectok=" "Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0"
Aug 18 09:30:50 128.138.65.244 - - [18/Aug/2025:15:30:50 +0000] "GET /lib/exe/taskrunner.php?id=start&1755531050 HTTP/1.1" 200 42 "https://handbook.medlab.host/start?do=login&sectok=" "Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0"
Aug 18 09:30:52 128.138.65.244 - - [18/Aug/2025:15:30:52 +0000] "GET /start?oauthlogin=generic HTTP/1.1" 302 - "https://handbook.medlab.host/start?do=login&sectok=" "Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0"
Aug 18 09:30:54 128.138.65.244 - - [18/Aug/2025:15:30:54 +0000] "GET /doku.php?error=access_denied&iss=https%3A%2F%2Fmy.medlab.host%2Fopenid HTTP/1.1" 200 3929 "https://my.medlab.host/" "Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0"
Aug 18 09:30:54 128.138.65.244 - - [18/Aug/2025:15:30:54 +0000] "GET /lib/exe/taskrunner.php?id=start&1755531054 HTTP/1.1" 200 42 "https://handbook.medlab.host/doku.php?error=access_denied&iss=https%3A%2F%2Fmy.medlab.host%2Fopenid" "Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0"

Just to confirm that the user being rejected is indeed permissioned:

And in local.php:

Thanks in advance for any insights!

[nebulon]

Seems to work as expected for me here on a fresh doku wiki instance. Also the superuser config works.

Is this a fresh installation and if not, can you try with a fresh one to narrow down the issue?

[ntnsndr]

Yep, it works fine on a fresh install.

On the bad one, I'm also seeing this error show up in the DokuWiki public UX: OAuth: An error occured during the request to the oauth provider: [HTTP 400]

[joseph]

@ntnsndr maybe https://forum.dokuwiki.org/d/20751-oauth-generic-plugin-no-connection-http-400 ? Is that plugin activated?

[ntnsndr]

I can't confirm it is activated because I can't log into the system. But that plugin is in the filesystem:

I also have this in my conf/local.php file: $conf['plugin']['oauthgeneric']['scopes'] = array();

I don't know, might need to just reinstall.

[ntnsndr]

Ended up just reinstalling and migrating. Works fine. Thank goodness it is a relatively simple wiki!

[ntnsndr]

Update: one the new reinstallation, login worked once, and I thought it was fixed. But when I tried logging in on another computer, or logging out and logging in again, the error came back. l'm back where I started with a fresh install.

Any other ideas about how I can diagnose this? Thank you for your help.

[nebulon]

Since you migrated the old wiki into the new instance, what all was copied over there? Were there .php files maybe which could cause this as a side-effect?

[ntnsndr]

I'm afraid that's not it; I just transferred the pages/ directory. Nothing else.

[nebulon]

Do you see any errors anywhere? I tried to reproduce the issue with migrating one wiki instance to another, but the login always works here. So I am a bit out of ideas without any errors to work with. I can't quite see how just moving around the document files but not touching any php code or config would somehow end up breaking login.

[ntnsndr]

Here's the latest I'm seeing in the logs:

ug 21 11:55:17 128.138.65.244 - - [21/Aug/2025:17:55:17 +0000] "GET / HTTP/1.1" 200 3875 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:141.0) Gecko/20100101 Firefox/141.0"
Aug 21 11:55:17 128.138.65.244 - - [21/Aug/2025:17:55:17 +0000] "GET /_media/wiki/logo.png HTTP/1.1" 200 45912 "https://handbook.medlab.host/" "Mozilla/5.0 (X11; Linux x86_64; rv:141.0) Gecko/20100101 Firefox/141.0"
Aug 21 11:55:17 128.138.65.244 - - [21/Aug/2025:17:55:17 +0000] "GET /lib/exe/css.php?t=dokuwiki&tseed=ef7ebc214c4220eb1d63337ef774614f HTTP/1.1" 200 22131 "https://handbook.medlab.host/" "Mozilla/5.0 (X11; Linux x86_64; rv:141.0) Gecko/20100101 Firefox/141.0"
Aug 21 11:55:17 128.138.65.244 - - [21/Aug/2025:17:55:17 +0000] "GET /lib/exe/jquery.php?tseed=8faf3dc90234d51a499f4f428a0eae43 HTTP/1.1" 200 96922 "https://handbook.medlab.host/" "Mozilla/5.0 (X11; Linux x86_64; rv:141.0) Gecko/20100101 Firefox/141.0"
Aug 21 11:55:17 128.138.65.244 - - [21/Aug/2025:17:55:17 +0000] "GET /lib/exe/js.php?t=dokuwiki&tseed=ef7ebc214c4220eb1d63337ef774614f HTTP/1.1" 200 27334 "https://handbook.medlab.host/" "Mozilla/5.0 (X11; Linux x86_64; rv:141.0) Gecko/20100101 Firefox/141.0"
Aug 21 11:55:17 128.138.65.244 - - [21/Aug/2025:17:55:17 +0000] "GET /lib/exe/taskrunner.php?id=start&1755798917 HTTP/1.1" 200 42 "https://handbook.medlab.host/" "Mozilla/5.0 (X11; Linux x86_64; rv:141.0) Gecko/20100101 Firefox/141.0"
Aug 21 11:55:17 128.138.65.244 - - [21/Aug/2025:17:55:17 +0000] "GET /lib/images/license/button/cc-by-nc-sa.png HTTP/1.1" 200 396 "https://handbook.medlab.host/" "Mozilla/5.0 (X11; Linux x86_64; rv:141.0) Gecko/20100101 Firefox/141.0"
Aug 21 11:55:17 128.138.65.244 - - [21/Aug/2025:17:55:17 +0000] "GET /lib/tpl/dokuwiki/images/apple-touch-icon.png HTTP/1.1" 200 6336 "https://handbook.medlab.host/" "Mozilla/5.0 (X11; Linux x86_64; rv:141.0) Gecko/20100101 Firefox/141.0"
Aug 21 11:55:17 128.138.65.244 - - [21/Aug/2025:17:55:17 +0000] "GET /lib/tpl/dokuwiki/images/button-css.png HTTP/1.1" 200 297 "https://handbook.medlab.host/" "Mozilla/5.0 (X11; Linux x86_64; rv:141.0) Gecko/20100101 Firefox/141.0"
Aug 21 11:55:17 128.138.65.244 - - [21/Aug/2025:17:55:17 +0000] "GET /lib/tpl/dokuwiki/images/button-donate.gif HTTP/1.1" 200 187 "https://handbook.medlab.host/" "Mozilla/5.0 (X11; Linux x86_64; rv:141.0) Gecko/20100101 Firefox/141.0"
Aug 21 11:55:17 128.138.65.244 - - [21/Aug/2025:17:55:17 +0000] "GET /lib/tpl/dokuwiki/images/button-dw.png HTTP/1.1" 200 398 "https://handbook.medlab.host/" "Mozilla/5.0 (X11; Linux x86_64; rv:141.0) Gecko/20100101 Firefox/141.0"
Aug 21 11:55:17 128.138.65.244 - - [21/Aug/2025:17:55:17 +0000] "GET /lib/tpl/dokuwiki/images/button-html5.png HTTP/1.1" 200 305 "https://handbook.medlab.host/" "Mozilla/5.0 (X11; Linux x86_64; rv:141.0) Gecko/20100101 Firefox/141.0"
Aug 21 11:55:17 128.138.65.244 - - [21/Aug/2025:17:55:17 +0000] "GET /lib/tpl/dokuwiki/images/button-php.gif HTTP/1.1" 200 207 "https://handbook.medlab.host/" "Mozilla/5.0 (X11; Linux x86_64; rv:141.0) Gecko/20100101 Firefox/141.0"
Aug 21 11:55:17 128.138.65.244 - - [21/Aug/2025:17:55:17 +0000] "GET /lib/tpl/dokuwiki/images/favicon.ico HTTP/1.1" 200 7406 "https://handbook.medlab.host/" "Mozilla/5.0 (X11; Linux x86_64; rv:141.0) Gecko/20100101 Firefox/141.0"
Aug 21 11:55:17 128.138.65.244 - - [21/Aug/2025:17:55:17 +0000] "GET /lib/tpl/dokuwiki/images/page-gradient.png HTTP/1.1" 200 209 "https://handbook.medlab.host/lib/exe/css.php?t=dokuwiki&tseed=ef7ebc214c4220eb1d63337ef774614f" "Mozilla/5.0 (X11; Linux x86_64; rv:141.0) Gecko/20100101 Firefox/141.0"

Thanks!

[nebulon]

that doesnt really show any errors. Can you clear the settings string $conf['dontlog'] = ''; (remove debug) in the dokuwiki.php file and then login as any admin user (probably some local user which you may have to register directly in dokuwiki and grant admin rights. Then head over to the admin section and the logsviewer there. Now when you try to login with your Cloudron user, something should appear there.