Password does not work

densan · August 17, 2023, 11:20am

Checklist
I have read intro post: About the Installation Issues category
I have read the tutorials, help and searched for similar issues
I provide relevant information about my server (component names and versions, etc.)
I provide a copy of my logs and healthcheck
I describe the steps I have taken to trouble shoot the problem
I describe the steps on how to reproduce the issue

Passbolt has been installed for a long time. We switched to docker 2 years ago.

www-data@4c1e7db33c8a:/usr/share/php/passbolt$ ./bin/cake passbolt healthcheck

     ____                  __          ____
    / __ \____  _____ ____/ /_  ____  / / /_
   / /_/ / __ `/ ___/ ___/ __ \/ __ \/ / __/
  / ____/ /_/ (__  |__  ) /_/ / /_/ / / /
 /_/    \__,_/____/____/_.___/\____/_/\__/

 Open source password manager for teams
-------------------------------------------------------------------------------
 Healthcheck shell
-------------------------------------------------------------------------------

 Environment

 [PASS] PHP version 8.2.7.
 [PASS] PCRE compiled with unicode support.
 [PASS] The temporary directory and its content are writable and not executable.
 [PASS] The logs directory and its content are writable.
 [PASS] GD or Imagick extension is installed.
 [PASS] Intl extension is installed.
 [PASS] Mbstring extension is installed.

 Config files

 [PASS] The application config file is present
 [WARN] The passbolt config file is missing in /etc/passbolt/
 [HELP] Copy /etc/passbolt/passbolt.default.php to /etc/passbolt/passbolt.php
 [HELP] The passbolt config file is not required if passbolt is configured with environment variables

 Core config

 [PASS] Debug mode is off.
 [PASS] Cache is working.
 [PASS] Unique value set for security.salt
 [PASS] Full base url is set to https://urt-passbolt.domain.local
 [PASS] App.fullBaseUrl validation OK.
 [PASS] /healthcheck/status is reachable.

 SSL Certificate

 [PASS] SSL peer certificate validates
 [PASS] Hostname is matching in SSL certificate.
 [PASS] Not using a self-signed certificate

 Database

 [PASS] The application is able to connect to the database
 [PASS] 33 tables found
 [PASS] Some default content is present
 [PASS] The database schema up to date.

 GPG Configuration

 [PASS] PHP GPG Module is installed and loaded.
 [PASS] The environment variable GNUPGHOME is set to /var/lib/passbolt/.gnupg.
 [PASS] The directory /var/lib/passbolt/.gnupg containing the keyring is writable by the webserver user.
 [PASS] The server OpenPGP key is not the default one
 [PASS] The public key file is defined in /etc/passbolt/passbolt.php and readable.
 [PASS] The private key file is defined in /etc/passbolt/passbolt.php and readable.
 [PASS] The server key fingerprint matches the one defined in /etc/passbolt/passbolt.php.
 [PASS] The server public key defined in the /etc/passbolt/passbolt.php (or environment variables) is in the keyring.
 [PASS] There is a valid email id defined for the server key.
 [PASS] The public key can be used to encrypt a message.
 [PASS] The private key can be used to sign a message.
 [PASS] The public and private keys can be used to encrypt and sign a message.
 [PASS] The private key can be used to decrypt a message.
 [PASS] The private key can be used to decrypt and verify a message.
 [PASS] The public key can be used to verify a signature.
 [PASS] The server public key format is Gopengpg compatible.
 [PASS] The server private key format is Gopengpg compatible.

 Application configuration

 [FAIL] Could not connect to passbolt repository to check versions It is not possible check if your version is up to date.
 [HELP] Check the network configuration to allow this script to check for updates.
 [PASS] Passbolt is configured to force SSL use.
 [PASS] App.fullBaseUrl is set to HTTPS.
 [PASS] Selenium API endpoints are disabled.
 [PASS] Search engine robots are told not to index content.
 [INFO] The Self Registration plugin is enabled.
 [INFO] Registration is closed, only administrators can add users.
 [PASS] The deprecated self registration public setting was not found in /etc/passbolt/passbolt.php.
 [WARN] Host availability checking is disabled.
 [HELP] Make sure this instance is not publicly available on the internet.
 [HELP] Or set the PASSBOLT_EMAIL_VALIDATE_MX environment variable to true.
 [HELP] Or set passbolt.email.validate.mx to true in /etc/passbolt/passbolt.php.
 [PASS] Serving the compiled version of the javascript app.
 [WARN] Some email notifications are disabled by the administrator.

 JWT Authentication

 [PASS] The JWT Authentication plugin is enabled
 [PASS] The /etc/passbolt/jwt/ directory is not writable.
 [PASS] A valid JWT key pair was found

 SMTP Settings

 [PASS] The SMTP Settings plugin is enabled.
 [PASS] SMTP Settings coherent. You may send a test email to validate them.
 [WARN] The SMTP Settings source is: env variables.
 [HELP] It is recommended to set the SMTP Settings in the database through the administration section.
 [WARN] The SMTP Settings plugin endpoints are enabled.
 [HELP] It is recommended to disable the plugin endpoints.
 [HELP] Set the PASSBOLT_SECURITY_SMTP_SETTINGS_ENDPOINTS_DISABLED environment variable to true.
 [HELP] Or set passbolt.security.smtpSettings.endpointsDisabled to true in /etc/passbolt/passbolt.php.

 [FAIL] 1 error(s) found. Hang in there!

version: "3.9"
services:
  db:
    image: mariadb:10.11
    restart: unless-stopped
    environment:
      MYSQL_RANDOM_ROOT_PASSWORD: "true"
      MYSQL_DATABASE: "passbolt"
      MYSQL_USER: "passbolt"
      MYSQL_PASSWORD: "bOltpAss"
    volumes:
      - database_volume:/var/lib/mysql
      - ./conf/mariadb.cnf:/etc/mysql/conf.d/mariadb.cnf
#      - ./backup_db/passbolt.sql:/docker-entrypoint-initdb.d/dump.sql


  passbolt:
    image: passbolt/passbolt:4.1.2-1-ce
    #Alternatively you can use rootless:
    #image: passbolt/passbolt:latest-ce-non-root
    restart: unless-stopped
    depends_on:
      - db
    environment:
      APP_FULL_BASE_URL: https://urt-passbolt.domain.local
      DATASOURCES_DEFAULT_HOST: "db"
      DATASOURCES_DEFAULT_USERNAME: "passbolt"
      DATASOURCES_DEFAULT_PASSWORD: "bOltpAss"
      DATASOURCES_DEFAULT_DATABASE: "passbolt"
      PASSBOLT_GPG_SERVER_KEY_FINGERPRINT: "ED30C7DA9486AE790FFFBCD2D43E7DC00BBC10DE"
      PASSBOLT_KEY_EMAIL: "passbolt_adm@domain.local"
      PASSBOLT_SSL_FORCE: "true"
      PASSBOLT_PLUGINS_MOBILE_ENABLED: "false"
      PASSBOLT_REGISTRATION_PUBLIC: "false"

    volumes:
      - gpg_volume:/etc/passbolt/gpg
      - jwt_volume:/etc/passbolt/jwt

      - ./ssl/urt-passbolt.domain.local.crt:/etc/ssl/certs/certificate.crt:ro
      - ./ssl/urt-passbolt.domain.local.key:/etc/ssl/certs/certificate.key:ro
      - ./ssl/WHQ-SUBCA01.crt:/etc/ssl/certs/WHQ-SUBCA01.crt:ro
      - ./ssl/SCBRootCA.crt:/etc/ssl/certs/SCBRootCA.crt:ro


    command:
      [
        "/usr/bin/wait-for.sh",
        "-t",
        "0",
        "db:3306",
        "--",
        "/docker-entrypoint.sh",
      ]
    ports:
      - 80:80
      - 443:443
    #Alternatively for non-root images:
    # - 80:8080
    # - 443:4433

volumes:
  database_volume:
  gpg_volume:
  jwt_volume:

www-data@4c1e7db33c8a:/usr/share/php/passbolt$ ./bin/cake passbolt datacheck --hide-success-details

     ____                  __          ____
    / __ \____  _____ ____/ /_  ____  / / /_
   / /_/ / __ `/ ___/ ___/ __ \/ __ \/ / __/
  / ____/ /_/ (__  |__  ) /_/ / /_/ / / /
 /_/    \__,_/____/____/_.___/\____/_/\__/

 Open source password manager for teams
-------------------------------------------------------------------------------
Data check shell
[PASS] Data integrity for AuthenticationTokens.
  [PASS] Can validate: 242073/242073
[PASS] Data integrity for Comments.
  [PASS] Can validate: 215/215
[PASS] Data integrity for Favorites.
  [PASS] Can validate: 1494/1494
[PASS] Data integrity for Gpgkeys.
  [PASS] Can encrypt: 2712/2712
  [PASS] Pass validation service checks: 2712/2712
  [PASS] Entity data and armored key data matches: 2712/2712
  [PASS] Is not expired: 2712/2712
  [PASS] Is armored key format valid: 2712/2712
[PASS] Data integrity for Groups.
  [PASS] Can validate: 204/204
[PASS] Data integrity for Profiles.
  [PASS] Can validate: 4825/4825
[PASS] Data integrity for Resources.
  [PASS] Can validate: 28548/28548
[PASS] Data integrity for Secrets.
  [PASS] Can validate: 264562/264562
[PASS] Data integrity for Users.
  [PASS] Can validate: 4829/4829

clayton · August 17, 2023, 11:30am

Hey,

Thanks for providing the healthcheck, datacheck, and your compose file those will likely be useful here!

Could you elaborate a bit on what exactly the issue you are running into is? Like could you let us know which page you are running into an issue on or what steps you took before running into the issue?

densan · August 17, 2023, 11:38am

does not show who to pass the password to

densan · August 17, 2023, 12:18pm

10.17.242.163 - - [17/Aug/2023:12:15:17 +0000] "GET /users.json?api-version=v2&contain%5Bprofile%5D=1&contain%5Bgpgkey%5D=0&contain%5Bgroups_users%5D=0&contain%5Bpending_account_recovery_request%5D=1&contain%5Baccount_recovery_user_setting%5D=1&contain%5Bis_mfa_enabled%5D=1&contain%5BLastLoggedIn%5D=1 HTTP/2.0" 200 2446832 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36"
10.17.242.163 - - [17/Aug/2023:12:15:28 +0000] "GET /resources.json?api-version=v2&filter%5Bhas-id%5D%5B%5D=b7b9a1fe-4aa6-4045-b8de-4bce9c2bf030&contain%5Bpermission%5D=1&contain%5Bpermissions.user.profile%5D=1&contain%5Bpermissions.group%5D=1&contain%5Bsecret%5D=1 HTTP/2.0" 200 3502 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36"
2023/08/17 12:15:32 [warn] 179#179: *44 an upstream response is buffered to a temporary file /var/lib/nginx/fastcgi/3/00/0000000003 while reading upstream, client: 10.17.242.163, server: _, request: "GET /gpgkeys.json?api-version=v2 HTTP/2.0", upstream: "fastcgi://unix:/run/php/php8.2-fpm.sock:", host: "urt-passbolt.domain.local"
2023/08/17 12:15:32 [warn] 179#179: *44 an upstream response is buffered to a temporary file /var/lib/nginx/fastcgi/4/00/0000000004 while reading upstream, client: 10.17.242.163, server: _, request: "GET /gpgkeys.json?api-version=v2 HTTP/2.0", upstream: "fastcgi://unix:/run/php/php8.2-fpm.sock:", host: "urt-passbolt.domain.local"
2023/08/17 12:15:33 [warn] 179#179: *44 an upstream response is buffered to a temporary file /var/lib/nginx/fastcgi/5/00/0000000005 while reading upstream, client: 10.17.242.163, server: _, request: "GET /gpgkeys.json?api-version=v2 HTTP/2.0", upstream: "fastcgi://unix:/run/php/php8.2-fpm.sock:", host: "urt-passbolt.domain.local"
2023/08/17 12:15:34 [warn] 179#179: *44 an upstream response is buffered to a temporary file /var/lib/nginx/fastcgi/6/00/0000000006 while reading upstream, client: 10.17.242.163, server: _, request: "GET /gpgkeys.json?api-version=v2 HTTP/2.0", upstream: "fastcgi://unix:/run/php/php8.2-fpm.sock:", host: "urt-passbolt.domain.local"
2023/08/17 12:15:35 [warn] 179#179: *44 an upstream response is buffered to a temporary file /var/lib/nginx/fastcgi/7/00/0000000007 while reading upstream, client: 10.17.242.163, server: _, request: "GET /gpgkeys.json?api-version=v2 HTTP/2.0", upstream: "fastcgi://unix:/run/php/php8.2-fpm.sock:", host: "urt-passbolt.domain.local"
2023/08/17 12:15:36 [warn] 179#179: *44 an upstream response is buffered to a temporary file /var/lib/nginx/fastcgi/8/00/0000000008 while reading upstream, client: 10.17.242.163, server: _, request: "GET /gpgkeys.json?api-version=v2 HTTP/2.0", upstream: "fastcgi://unix:/run/php/php8.2-fpm.sock:", host: "urt-passbolt.domain.local"
2023/08/17 12:15:37 [warn] 179#179: *44 an upstream response is buffered to a temporary file /var/lib/nginx/fastcgi/9/00/0000000009 while reading upstream, client: 10.17.242.163, server: _, request: "GET /gpgkeys.json?api-version=v2 HTTP/2.0", upstream: "fastcgi://unix:/run/php/php8.2-fpm.sock:", host: "urt-passbolt.domain.local"
2023/08/17 12:15:38 [warn] 179#179: *44 an upstream response is buffered to a temporary file /var/lib/nginx/fastcgi/0/01/0000000010 while reading upstream, client: 10.17.242.163, server: _, request: "GET /gpgkeys.json?api-version=v2 HTTP/2.0", upstream: "fastcgi://unix:/run/php/php8.2-fpm.sock:", host: "urt-passbolt.domain.local"
2023/08/17 12:15:39 [warn] 179#179: *44 an upstream response is buffered to a temporary file /var/lib/nginx/fastcgi/1/01/0000000011 while reading upstream, client: 10.17.242.163, server: _, request: "GET /gpgkeys.json?api-version=v2 HTTP/2.0", upstream: "fastcgi://unix:/run/php/php8.2-fpm.sock:", host: "urt-passbolt.domain.local"
2023/08/17 12:15:40 [warn] 179#179: *44 an upstream response is buffered to a temporary file /var/lib/nginx/fastcgi/2/01/0000000012 while reading upstream, client: 10.17.242.163, server: _, request: "GET /gpgkeys.json?api-version=v2 HTTP/2.0", upstream: "fastcgi://unix:/run/php/php8.2-fpm.sock:", host: "urt-passbolt.domain.local"
2023/08/17 12:15:41 [warn] 179#179: *44 an upstream response is buffered to a temporary file /var/lib/nginx/fastcgi/3/01/0000000013 while reading upstream, client: 10.17.242.163, server: _, request: "GET /gpgkeys.json?api-version=v2 HTTP/2.0", upstream: "fastcgi://unix:/run/php/php8.2-fpm.sock:", host: "urt-passbolt.domain.local"
2023/08/17 12:15:42 [warn] 179#179: *44 an upstream response is buffered to a temporary file /var/lib/nginx/fastcgi/4/01/0000000014 while reading upstream, client: 10.17.242.163, server: _, request: "GET /gpgkeys.json?api-version=v2 HTTP/2.0", upstream: "fastcgi://unix:/run/php/php8.2-fpm.sock:", host: "urt-passbolt.domain.local"
2023/08/17 12:15:43 [warn] 179#179: *44 an upstream response is buffered to a temporary file /var/lib/nginx/fastcgi/5/01/0000000015 while reading upstream, client: 10.17.242.163, server: _, request: "GET /gpgkeys.json?api-version=v2 HTTP/2.0", upstream: "fastcgi://unix:/run/php/php8.2-fpm.sock:", host: "urt-passbolt.domain.local"
2023/08/17 12:15:44 [warn] 179#179: *44 an upstream response is buffered to a temporary file /var/lib/nginx/fastcgi/6/01/0000000016 while reading upstream, client: 10.17.242.163, server: _, request: "GET /gpgkeys.json?api-version=v2 HTTP/2.0", upstream: "fastcgi://unix:/run/php/php8.2-fpm.sock:", host: "urt-passbolt.domain.local"
2023/08/17 12:15:45 [warn] 179#179: *44 an upstream response is buffered to a temporary file /var/lib/nginx/fastcgi/7/01/0000000017 while reading upstream, client: 10.17.242.163, server: _, request: "GET /gpgkeys.json?api-version=v2 HTTP/2.0", upstream: "fastcgi://unix:/run/php/php8.2-fpm.sock:", host: "urt-passbolt.domain.local"
2023/08/17 12:15:46 [warn] 179#179: *44 an upstream response is buffered to a temporary file /var/lib/nginx/fastcgi/8/01/0000000018 while reading upstream, client: 10.17.242.163, server: _, request: "GET /gpgkeys.json?api-version=v2 HTTP/2.0", upstream: "fastcgi://unix:/run/php/php8.2-fpm.sock:", host: "urt-passbolt.domain.local"
2023/08/17 12:15:47 [warn] 179#179: *44 an upstream response is buffered to a temporary file /var/lib/nginx/fastcgi/9/01/0000000019 while reading upstream, client: 10.17.242.163, server: _, request: "GET /gpgkeys.json?api-version=v2 HTTP/2.0", upstream: "fastcgi://unix:/run/php/php8.2-fpm.sock:", host: "urt-passbolt.domain.local"
2023/08/17 12:15:48 [warn] 179#179: *44 an upstream response is buffered to a temporary file /var/lib/nginx/fastcgi/0/02/0000000020 while reading upstream, client: 10.17.242.163, server: _, request: "GET /gpgkeys.json?api-version=v2 HTTP/2.0", upstream: "fastcgi://unix:/run/php/php8.2-fpm.sock:", host: "urt-passbolt.domain.local"
10.17.242.163 - - [17/Aug/2023:12:15:49 +0000] "GET /gpgkeys.json?api-version=v2 HTTP/2.0" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36"
2023/08/17 12:15:49 [info] 179#179: *44 client timed out (110: Connection timed out) while sending to client, client: 10.17.242.163, server: _, request: "GET /gpgkeys.json?api-version=v2 HTTP/2.0", upstream: "fastcgi://unix:/run/php/php8.2-fpm.sock", host: "urt-passbolt.domain.local"
2023/08/17 12:15:49 [warn] 179#179: *44 an upstream response is buffered to a temporary file /var/lib/nginx/fastcgi/1/02/0000000021 while reading upstream, client: 10.17.242.163, server: _, request: "GET /gpgkeys.json?api-version=v2 HTTP/2.0", upstream: "fastcgi://unix:/run/php/php8.2-fpm.sock:", host: "urt-passbolt.domain.local"
2023/08/17 12:15:50 [info] 179#179: *44 client timed out (110: Connection timed out) while sending to client, client: 10.17.242.163, server: _, request: "GET /gpgkeys.json?api-version=v2 HTTP/2.0", upstream: "fastcgi://unix:/run/php/php8.2-fpm.sock", host: "urt-passbolt.domain.local"
10.17.242.163 - - [17/Aug/2023:12:15:50 +0000] "GET /gpgkeys.json?api-version=v2 HTTP/2.0" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36"
2023/08/17 12:15:51 [warn] 179#179: *44 an upstream response is buffered to a temporary file /var/lib/nginx/fastcgi/2/02/0000000022 while reading upstream, client: 10.17.242.163, server: _, request: "GET /gpgkeys.json?api-version=v2 HTTP/2.0", upstream: "fastcgi://unix:/run/php/php8.2-fpm.sock:", host: "urt-passbolt.domain.local"
10.17.242.163 - - [17/Aug/2023:12:15:51 +0000] "GET /gpgkeys.json?api-version=v2 HTTP/2.0" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36"
2023/08/17 12:15:51 [info] 179#179: *44 client timed out (110: Connection timed out) while sending to client, client: 10.17.242.163, server: _, request: "GET /gpgkeys.json?api-version=v2 HTTP/2.0", upstream: "fastcgi://unix:/run/php/php8.2-fpm.sock", host: "urt-passbolt.domain.local"
2023/08/17 12:15:52 [warn] 179#179: *44 an upstream response is buffered to a temporary file /var/lib/nginx/fastcgi/3/02/0000000023 while reading upstream, client: 10.17.242.163, server: _, request: "GET /gpgkeys.json?api-version=v2 HTTP/2.0", upstream: "fastcgi://unix:/run/php/php8.2-fpm.sock:", host: "urt-passbolt.domain.local"
10.17.242.163 - - [17/Aug/2023:12:15:52 +0000] "GET /gpgkeys.json?api-version=v2 HTTP/2.0" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36"
2023/08/17 12:15:52 [info] 179#179: *44 client timed out (110: Connection timed out) while sending to client, client: 10.17.242.163, server: _, request: "GET /gpgkeys.json?api-version=v2 HTTP/2.0", upstream: "fastcgi://unix:/run/php/php8.2-fpm.sock", host: "urt-passbolt.domain.local"
2023/08/17 12:15:53 [warn] 179#179: *44 an upstream response is buffered to a temporary file /var/lib/nginx/fastcgi/4/02/0000000024 while reading upstream, client: 10.17.242.163, server: _, request: "GET /gpgkeys.json?api-version=v2 HTTP/2.0", upstream: "fastcgi://unix:/run/php/php8.2-fpm.sock:", host: "urt-passbolt.domain.local"
10.17.242.163 - - [17/Aug/2023:12:15:53 +0000] "GET /gpgkeys.json?api-version=v2 HTTP/2.0" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36"
2023/08/17 12:15:53 [info] 179#179: *44 client timed out (110: Connection timed out) while sending to client, client: 10.17.242.163, server: _, request: "GET /gpgkeys.json?api-version=v2 HTTP/2.0", upstream: "fastcgi://unix:/run/php/php8.2-fpm.sock", host: "urt-passbolt.domain.local"
2023/08/17 12:15:54 [warn] 179#179: *44 an upstream response is buffered to a temporary file /var/lib/nginx/fastcgi/5/02/0000000025 while reading upstream, client: 10.17.242.163, server: _, request: "GET /gpgkeys.json?api-version=v2 HTTP/2.0", upstream: "fastcgi://unix:/run/php/php8.2-fpm.sock:", host: "urt-passbolt.domain.local"
2023/08/17 12:15:54 [info] 179#179: *44 client timed out (110: Connection timed out) while sending to client, client: 10.17.242.163, server: _, request: "GET /gpgkeys.json?api-version=v2 HTTP/2.0", upstream: "fastcgi://unix:/run/php/php8.2-fpm.sock", host: "urt-passbolt.domain.local"
10.17.242.163 - - [17/Aug/2023:12:15:54 +0000] "GET /gpgkeys.json?api-version=v2 HTTP/2.0" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36"
2023/08/17 12:15:54 [info] 179#179: *44 client timed out (110: Connection timed out) while sending to client, client: 10.17.242.163, server: _, request: "GET /gpgkeys.json?api-version=v2 HTTP/2.0", upstream: "fastcgi://unix:/run/php/php8.2-fpm.sock", host: "urt-passbolt.domain.local"
10.17.242.163 - - [17/Aug/2023:12:15:54 +0000] "GET /gpgkeys.json?api-version=v2 HTTP/2.0" 200 40960 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36"
2023/08/17 12:15:55 [warn] 179#179: *44 an upstream response is buffered to a temporary file /var/lib/nginx/fastcgi/6/02/0000000026 while reading upstream, client: 10.17.242.163, server: _, request: "GET /gpgkeys.json?api-version=v2 HTTP/2.0", upstream: "fastcgi://unix:/run/php/php8.2-fpm.sock:", host: "urt-passbolt.domain.local"
10.17.242.163 - - [17/Aug/2023:12:15:55 +0000] "GET /gpgkeys.json?api-version=v2 HTTP/2.0" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36"
2023/08/17 12:15:55 [info] 179#179: *44 client timed out (110: Connection timed out) while sending to client, client: 10.17.242.163, server: _, request: "GET /gpgkeys.json?api-version=v2 HTTP/2.0", upstream: "fastcgi://unix:/run/php/php8.2-fpm.sock", host: "urt-passbolt.domain.local"
2023/08/17 12:15:56 [info] 179#179: *44 client timed out (110: Connection timed out) while sending to client, client: 10.17.242.163, server: _, request: "GET /gpgkeys.json?api-version=v2 HTTP/2.0", upstream: "fastcgi://unix:/run/php/php8.2-fpm.sock", host: "urt-passbolt.domain.local"
10.17.242.163 - - [17/Aug/2023:12:15:56 +0000] "GET /gpgkeys.json?api-version=v2 HTTP/2.0" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36"
10.17.242.163 - - [17/Aug/2023:12:15:57 +0000] "GET /gpgkeys.json?api-version=v2 HTTP/2.0" 200 7122892 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36"
2023/08/17 12:15:57 [info] 179#179: *44 client timed out (110: Connection timed out) while sending to client, client: 10.17.242.163, server: _, request: "GET /gpgkeys.json?api-version=v2 HTTP/2.0", upstream: "fastcgi://unix:/run/php/php8.2-fpm.sock", host: "urt-passbolt.domain.local"
10.17.242.163 - - [17/Aug/2023:12:15:57 +0000] "GET /gpgkeys.json?api-version=v2 HTTP/2.0" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36"
2023/08/17 12:15:58 [info] 179#179: *44 client timed out (110: Connection timed out) while sending to client, client: 10.17.242.163, server: _, request: "GET /gpgkeys.json?api-version=v2 HTTP/2.0", upstream: "fastcgi://unix:/run/php/php8.2-fpm.sock", host: "urt-passbolt.domain.local"
10.17.242.163 - - [17/Aug/2023:12:15:58 +0000] "GET /gpgkeys.json?api-version=v2 HTTP/2.0" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36"
2023/08/17 12:16:01 [info] 179#179: *44 client timed out (110: Connection timed out) while sending to client, client: 10.17.242.163, server: _, request: "GET /gpgkeys.json?api-version=v2 HTTP/2.0", upstream: "fastcgi://unix:/run/php/php8.2-fpm.sock", host: "urt-passbolt.domain.local"
10.17.242.163 - - [17/Aug/2023:12:16:01 +0000] "GET /gpgkeys.json?api-version=v2 HTTP/2.0" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36"
10.17.242.163 - - [17/Aug/2023:12:16:02 +0000] "GET /gpgkeys.json?api-version=v2 HTTP/2.0" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36"
2023/08/17 12:16:02 [info] 179#179: *44 client timed out (110: Connection timed out) while sending to client, client: 10.17.242.163, server: _, request: "GET /gpgkeys.json?api-version=v2 HTTP/2.0", upstream: "fastcgi://unix:/run/php/php8.2-fpm.sock", host: "urt-passbolt.domain.local"
10.17.242.163 - - [17/Aug/2023:12:16:03 +0000] "GET /gpgkeys.json?api-version=v2 HTTP/2.0" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36"
2023/08/17 12:16:03 [info] 179#179: *44 client timed out (110: Connection timed out) while sending to client, client: 10.17.242.163, server: _, request: "GET /gpgkeys.json?api-version=v2 HTTP/2.0", upstream: "fastcgi://unix:/run/php/php8.2-fpm.sock", host: "urt-passbolt.domain.local"
10.17.242.163 - - [17/Aug/2023:12:16:04 +0000] "GET /gpgkeys.json?api-version=v2 HTTP/2.0" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36"
2023/08/17 12:16:04 [info] 179#179: *44 client timed out (110: Connection timed out) while sending to client, client: 10.17.242.163, server: _, request: "GET /gpgkeys.json?api-version=v2 HTTP/2.0", upstream: "fastcgi://unix:/run/php/php8.2-fpm.sock", host: "urt-passbolt.domain.local"
10.17.242.163 - - [17/Aug/2023:12:16:05 +0000] "GET /gpgkeys.json?api-version=v2 HTTP/2.0" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36"
2023/08/17 12:16:05 [info] 179#179: *44 client timed out (110: Connection timed out) while sending to client, client: 10.17.242.163, server: _, request: "GET /gpgkeys.json?api-version=v2 HTTP/2.0", upstream: "fastcgi://unix:/run/php/php8.2-fpm.sock", host: "urt-passbolt.domain.local"
10.17.242.163 - - [17/Aug/2023:12:16:09 +0000] "GET /gpgkeys.json?api-version=v2 HTTP/2.0" 200 7122892 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36"
10.17.242.163 - - [17/Aug/2023:12:16:10 +0000] "GET /gpgkeys.json?api-version=v2 HTTP/2.0" 200 7122892 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36"
10.17.242.163 - - [17/Aug/2023:12:16:11 +0000] "GET /gpgkeys.json?api-version=v2 HTTP/2.0" 200 7122892 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36"
10.17.242.163 - - [17/Aug/2023:12:16:17 +0000] "GET /gpgkeys.json?api-version=v2 HTTP/2.0" 200 7122892 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36"
10.17.242.163 - - [17/Aug/2023:12:16:24 +0000] "GET /gpgkeys.json?api-version=v2 HTTP/2.0" 200 7122892 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36"
10.17.242.163 - - [17/Aug/2023:12:16:26 +0000] "GET /gpgkeys.json?api-version=v2 HTTP/2.0" 200 7122892 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36"
10.17.242.163 - - [17/Aug/2023:12:16:29 +0000] "GET /gpgkeys.json?api-version=v2 HTTP/2.0" 200 7122892 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36"

clayton · August 17, 2023, 12:27pm

Could you also run the cleanup?
./bin/cake passbolt cleanup

densan · August 17, 2023, 1:30pm

www-data@3fbe07db46b6:/usr/share/php/passbolt$ ./bin/cake passbolt cleanup

     ____                  __          ____
    / __ \____  _____ ____/ /_  ____  / / /_
   / /_/ / __ `/ ___/ ___/ __ \/ __ \/ / __/
  / ____/ /_/ (__  |__  ) /_/ / /_/ / / /
 /_/    \__,_/____/____/_.___/\____/_/\__/

 Open source password manager for teams
-------------------------------------------------------------------------------
 Cleanup shell (fix mode)
-------------------------------------------------------------------------------
No issue found, data looks squeaky clean!

clayton · August 17, 2023, 1:40pm

Were there any changes before this happened?

For example a large set of users imported or an update

densan · August 17, 2023, 2:20pm

The problem massively manifested itself after the update on 4.1.2

clayton · August 18, 2023, 5:41am

Thanks, it’ll probably be into next week but I’ll take a look again at what we had in 4.1.2 that could be related to this and for some performance tweaks specifically for docker since you have a bit more in there in terms of passwords and users than most

densan · August 18, 2023, 5:49am

Thank you. Waiting for an answer.

densan · August 23, 2023, 5:53am

Waiting for an answer

clayton · August 23, 2023, 1:08pm

So, got a chance to look through things and chat with the team about this. Most likely there is a long running query happening here that we’d need some more info on. There is also a chance that switching to MySQL instead of Maria DB would improve things as some indexing is better on MySQL.

If possible could you enable the slow query log? Once you’ve done that reproduce the issue and ideally share the logs either here or if there is sensitive information you don’t want to post you can message me directly and I can have you email it to me for us to look into.

densan · August 24, 2023, 7:23am

Enable slow query

MariaDB [passbolt]> SHOW VARIABLES LIKE '%slow_query%';
+---------------------+-------------------------------+
| Variable_name       | Value                         |
+---------------------+-------------------------------+
| log_slow_query      | ON                            |
| log_slow_query_file | /var/log/mysql/mysql-slow.log |
| log_slow_query_time | 2.000000                      |
| slow_query_log      | ON                            |
| slow_query_log_file | /var/log/mysql/mysql-slow.log |
+---------------------+-------------------------------+
5 rows in set (0.001 sec)

test
MariaDB [passbolt]> select sleep(3);
Logged in Passbolt and share password.

root@1391e09fd15a:/# tail -F /var/log/mysql/mysql-slow.log
mariadbd, Version: 10.11.4-MariaDB-1:10.11.4+maria~ubu2204-log (mariadb.org binary distribution). started with:
Tcp port: 0  Unix socket: /run/mysqld/mysqld.sock
Time                Id Command  Argument
# Time: 230824  7:15:45
# User@Host: root[root] @ localhost []
# Thread_id: 11  Schema: passbolt  QC_hit: No
# Query_time: 3.000330  Lock_time: 0.000000  Rows_sent: 1  Rows_examined: 0
# Rows_affected: 0  Bytes_sent: 65
SET timestamp=1692861345;
select sleep(3);
# Time: 230824  7:17:04
# User@Host: passbolt[passbolt] @  [10.6.2.3]
# Thread_id: 180  Schema: passbolt  QC_hit: No
# Query_time: 3.260543  Lock_time: 0.000130  Rows_sent: 3607  Rows_examined: 13519
# Rows_affected: 0  Bytes_sent: 1407640
SET timestamp=1692861424;
SELECT `JoinedUsersLastLoggedIn`.`last_logged_in` AS `last_logged_in`, `Users`.`id` AS `Users__id`, `Users`.`role_id` AS `Users__role_id`, `Users`.`u        sername` AS `Users__username`, `Users`.`active` AS `Users__active`, `Users`.`deleted` AS `Users__deleted`, `Users`.`created` AS `Users__created`, `Us        ers`.`modified` AS `Users__modified`, `Roles`.`id` AS `Roles__id`, `Roles`.`name` AS `Roles__name`, `Roles`.`description` AS `Roles__description`, `R        oles`.`created` AS `Roles__created`, `Roles`.`modified` AS `Roles__modified`, `Profiles`.`id` AS `Profiles__id`, `Profiles`.`user_id` AS `Profiles__u        ser_id`, `Profiles`.`first_name` AS `Profiles__first_name`, `Profiles`.`last_name` AS `Profiles__last_name`, `Profiles`.`created` AS `Profiles__creat        ed`, `Profiles`.`modified` AS `Profiles__modified`, `Avatars`.`id` AS `Avatars__id`, `Avatars`.`profile_id` AS `Avatars__profile_id`, `Avatars`.`crea        ted` AS `Avatars__created`, `Avatars`.`modified` AS `Avatars__modified` FROM `users` `Users` LEFT JOIN (SELECT `user_id` AS `user_id`, (MAX(`ActionLo        gs`.`created`)) AS `last_logged_in` FROM `action_logs` `ActionLogs` WHERE (`ActionLogs`.`action_id` = 'a3c19ad2-8920-5395-86d0-8567cb34f382' AND `Act        ionLogs`.`status` = 1) GROUP BY `user_id` ) `JoinedUsersLastLoggedIn` ON `Users`.`id` = `JoinedUsersLastLoggedIn`.`user_id` INNER JOIN `roles` `Roles        ` ON `Roles`.`id` = `Users`.`role_id` LEFT JOIN `profiles` `Profiles` ON `Users`.`id` = `Profiles`.`user_id` LEFT JOIN `avatars` `Avatars` ON `Profil        es`.`id` = `Avatars`.`profile_id` WHERE (`Users`.`deleted` = 0 AND `Users`.`role_id` <> '49aad81e-4f70-3380-a92e-12292597409f') ORDER BY `Users`.`use        rname` asc LIMIT 1000000 OFFSET 0;

densan · August 24, 2023, 7:25am

Problem with nginx or php?

densan · August 29, 2023, 5:32am

Waiting for an answer

ishan · August 29, 2023, 11:53am

Hey @densan, by looking at the logs it looks like client is unable to process response from the server(nginx). Can you try increasing proxy_buffers and proxy_buffers_size values in nginx config and see if it works?

Ref. https://devcoops.com/nginx-upstream-response-buffered-temporary-file/