Server timeout when adding a user to a group

Installation Issues
1

Hello,

When adding a user to an existing group, Passbolt goes through the process of decrypting all the password envelopes and updating the group as expected. However, when it gets to the final stage (Updating the Group), it will hang at 100% for some time until a server error is received:

image

Originally, the logs showed an upstream timeout that we traced to our nginx and php-fpm timeout settings. Note, we are running Passbolt behind a separate nginx reverse-proxy host:

2021/07/08 14:10:56 [warn] 27564#27564: *47679 a client request body is buffered to a temporary file /var/lib/nginx/body/0000001387, client: 192.168.10.6, server: passbolt.domain.net, request: "PUT /groups/f1e5378chb-2174-j28f-f83j-84nv902375.json?api-version=v2 HTTP/1.1", host: "passbolt.domain.net"
2021/07/08 14:11:56 [error] 27564#27564: *47679 upstream timed out (110: Connection timed out) while reading response header from upstream, client: 192.168.10.6, server: passbolt.domain.net, request: "PUT /groups/f1e5378chb-2174-j28f-f83j-84nv902375.json?api-version=v2 HTTP/1.1", upstream: "fastcgi://unix:/run/php/php7.4-fpm.sock", host: "passbolt.domain.net"

We then updated the webserver and php settings to 300 second timeouts. We are still getting the UI-side internal error message, but the logged error has changed:

2021/07/08 15:12:08 [warn] 30594#30594: *48119 a client request body is buffered to a temporary file /var/lib/nginx/body/0000001395, client: 192.168.10.6, server: passbolt.domain.net, request: "PUT /groups/f1e5378chb-2174-j28f-f83j-84nv902375.json?api-version=v2 HTTP/1.1", host: "passbolt.domain.net"
2021/07/08 15:17:08 [info] 30594#30594: *48119 epoll_wait() reported that client prematurely closed connection, so upstream connection is closed too while sending request to upstream, client: 192.168.10.6, server: passbolt.domain.net, request: "PUT /groups/f1e5378chb-2174-j28f-f83j-84nv902375.json?api-version=v2 HTTP/1.1", upstream: "fastcgi://unix:/run/php/php7.4-fpm.sock:",
host: "passbolt.domain.net"

It appears someone else had this issue, but were directed to the “Passbolt Pro Support Channel” which I am unable to locate. I am a Passbolt Pro license subscriber–where can I find the support channel being referenced?

Thanks,
Ted

2

@tsadler Hi Ted

I’m really sorry you are seeing this result and your notes regarding steps taken are very helpful. If you have not already resolved the problem we invite you to write to support@passbolt.com with the details provided so we can open a service ticket for you that can be handled by a team member.

And thank you for being a pro subscriber.

Garrett

1 Like