Blog Jurišić

Last stable version of Nextcloud server is 11.0.3 , this version brings lots improvements. If using my Debian Repository I update packages and all is ready for upgrade on last stable version(example how to upgrade).

Enjoy in great Nextcloud !!!

 

Screenshot after upgrade:

 

Changelogs (Source: https://nextcloud.com/changelog/):

Server

• Use the correct principal for shared addressbooks (server/3608)
• Fix saving backup codes by using a correct data uri (server/3652)
• Update icewind/streams to 0.5.2 (server/32931)
• Fix string comparison and return docs (server/3665)
• Typecast shared mount's storage_id to int as documented + some refactor to avoid similar bugs (server/3658)
• Use a proper date format for transfer ownership (server/3700)
• DAV sharing permissions should not depend on the order (server/3722)
• Add new user agent of windows 10 dav backend (server/37641)
• Add back appstoreenabled config switch (server/37671)
• Call right function after sudo mode (server/3820)
• Dont allow empty wildcard search (server/3842)
• Remove single quotes around search query like in user search (server/3849)
• Fix mimetype detection on public uploads for the workflow engine (server/3765)
• Fix branding and show Nextcloud (server/39691)
• Fix reshare with user activity message (server/39812)
• Create correct VCard and return correct error codes (server/4029)
• Prevent migration from ownCloud 10 to Nextcloud 11 (server/34151)
• Make sure transparency is an integer when saving a calendar (server/4167)
• Make public links work with master key (server/42071)
• Don't try to render the avatars if avatars are disabled (server/4214)
• Reduce error message text (server/42281)
• Don't list on public calendar endpoints (server/4229)
• Fix upload of folders in Chrome (server/4154)
• Make sure blob columns are correctly converted as parameters (server/4233)
• Save the scope of an auth token in the session (server/4225)
• Take share by mail into consideration if we calculate the access list (server/4242)
• Also add the root of external storages to the file id list (server/4237)
• Fix LDAP description (server/42382)
• Remove the double password confirmation on changing cron (server/4236)
• Fix scheduling plugin on legacy caldav endpoint (server/4235)
• Directly fix invalid values of DTEND and DTSTART (server/4234)
• Make JobList::next() lock free (server/4254)
• Don't remove owner property for public calendars (server/4272)
• Add capabilities for share by mail (server/42511)
• Dont use the permissions mask while scanning (server/4278)
• Add missing maintenance plugin to new DAV endpoint (server/4290)
• Fix bug with shared_by for own calendars if shared (server/4301)
• Translation string corrected > 1 user (server/4377)

Activity

• Fix activities for "Files drop" on external storages (activity/118)

User_SAML

• Bump to php-saml 2.10.5 (user_saml/1001)

Logreader

• Small screen layout improvements (logreader/2bcd915969386ceb77c7f91dfd5fc19fd3212346
• Fix log filtering (logreader/4095dfc62dcceb3c59a3f581baa5589737d0e6f3)
• Greatly speedup log iteration (logreader/71a4c6849641f821e80d96674c57a69fe7a8aa9e)
• Search more rows (logreader/b9d00b5599ac8a76862895266f1c23096391aad8)
• Stop iterating if we dont have a valid file handle (logreader/a87a8e653ecae5efef6342e645b98f2878219c87)
• Don't return a LogIterator on a broken handle (logreader/39069108f99d463b1cb8bc944f3ef24324b9f43d)
• More robust log iteration (logreader/c0eb04d55bf1dee94ef523dae0e3b0e6afc272a6)
• Use proper iso date format (logreader/13a31181a6d72d084797a71f49f2c5edee8c8dae)
• Automatically try to fix some common escape errors from copy-pasted log entries (logreader/031db2a7f9b9f8cee42acf6eae7d993d31d4660a)
• Fix stack trace parsing of incorrectly escaped logentries (logreader/538667770edfdd48374ef33e9c15498ed98ece60)
• Highlight entries from the same request when clicking on an entry (logreader/2d1ccd0e4cca32220fcbe0b4d79d1cd23f0e73a5)
• Fix copy paste info searchfield (logreader/0e91b2f46649a720feb7c3b6b8266b8657db5574)
• Fix reset search after 0 results (logreader/50bec8ecf7edd81cfb96a35089283c0d879b41f3)
• Allow searching for requestId and user (logreader/7f84e55bb4a1e4086ab0918a6bf58ad3885bbd91)
• Allow searching in url (logreader/7833d97cf85fd351d2f7550d67d21bd0c2a815f4)
• Fix infinite scroll (logreader/cbe874c6c068b9156ad8456edf31d112da40cbc9)
• Dont show loading indicator if we already have entries (logreader/d26a08dc0540126177e8d20c3e243b44c5a399c4)

Gallery

• Fix upload after core changes (gallery/b4ac4429841cfe2b7ea260dfb37fcde25580143c2)
• Update JavaScript libraries (gallery/247)

 

Nextcloud have excelent Apps for integration user and group by LDAP / AD. If don't have LDAP server check "How to Install and configure a Basic LDAP Server on an Debian 8 Jessie" and continue reading this short example of integration LDAP and Nextcloud.

 

Activate LDAP user and group backend for Nextcloud

Login in Nextcloud as Administrator and click on top left dropdown list and select "Apps", then click on "Not enabled" and search " LDAP user and group backend".

Click on button "Enable" and wait 5-10 sec, then click on top right dropdown list.

Click on "Admin", and select "LDAP / AD integration"

Enter LDAP connection data and go in section Users.

Hostname:            localhost
LDAP bind user:  cn=admin,dc=test,dc=com
Password:            The password that you have choosen.
Base DN:              dc=test,dc=com

Under selection "Only these object class" select "inetOrgPerson". Now go in section Login Attributes.

Select checkbox "LDAP / AD Username" and "LDAP / AD Email Address" (users can login with username or e-mail), then go in section Groups.

Under selection "Only these object class" select "posixGroup" and under "Only from these groups" select "nextcloud" then go in Advanced settings.

Under Advanced set Special Attributes. 

Email Field:             mail
User Home Folder: uid

Now can check users, click on top-right dropdown list and select "Users"

 

LDAP Expert

Under Username system generate UUID attribute automatically and that value need to be unique. You can change Internal Username from UUID to uid but that option is open only for expert users.

You can change "Internal Username" for example in "uid", and result is:

That is all, enjoy in Nextcloud with LDAP integration.

 

 

 

 

What is Nextcloud? Nextcloud is a forked by founder of ownCloud. Nextcloud move focus on apps as Calendar, Contacts, Documents, Video Chat, Email, and more.

I make package for Debian 8 Jessie for easy way of installation Nextcloud, in my example I use PostgreSQL database but supported is My SQL / MariaDB and SQLite by this repository.

 

Add Nextcloud Repository

Add the Nextcloud repository in the /etc/apt/sources.d/nextcloud.list

echo 'deb http://apt.jurisic.org/debian/ jessie main contrib non-free' >> /etc/apt/sources.list.d/nextcloud.list

Install release key of Nextcloud repository:

wget -q http://apt.jurisic.org/Release.key -O- | apt-key add -

And run apt-get update to download the list of packages.

apt-get update

 

Check out available Nextcloud packages

Let's check which packages we have for nextcloud now:

apt-cache search nextcloud

 

Choice database for Nextcloud

We can to use My SQL / MariaDB , PostgreSQL and SQLite, my choice is PostgreSQL but Nextcloud work excelent with other databases. 

Install PostgreSQL and setup new user & database

Install PostgreSQL with:

apt-get install postgresql

The PostgreSQL package will install all required dependencies.

Choose "y" to start the installation.

Add a PostgreSQL database

The next step is to create a PostgreSQL database for nextcloud.

Login to PostgreSQL on the commandline by running this command:

su - postgres
psql

Enter the following commands to create a database user with the name "nextuser" and and a database name "nextcloud". Replace the word "StorngPasswordHere" with your own password in the commands.

CREATE DATABASE nextcloud;
CREATE USER nextuser WITH PASSWORD 'StorngPasswordHere';
GRANT ALL PRIVILEGES ON DATABASE nextcloud to nextuser;

 

Install Nextcloud server

Install Nextcloud server with:

apt-get install nextcloud-server

When the shell part of the installation is finished, proceed by opening the Nextcloud web installer in your browser. The URL is http://[YOURIP]/nextcloud. In my case the IP is 192.168.1.100 so I enter http://192.168.1.100/nextcloud in my browser to get the installer:

Enter the desired administrator username and password in the login fields. Please choose a secure password and also a username that is not "admin" or "administrator" might be a good choice to make it less easy for attackers to guess your admin login.

Nextcloud is using sqlite as storage engine by default. This is not a good choice performace wise, so I will choose PostgreSQL as database backend. We have created a PostgreSQL database above, enter the details of that database now:

• Username:         nextuser
• Password:          The password that you have choosen for the database.
• Database name: nextcloud
• Hostname:         localhost

Then click on the button to finish the installation. You will get greeted with a welcome screen in your language.

 

Access Nextcloud with SSL (https)

The default installation of Nextcloud is not secured by SSL. To enable SSL in your webserver, run these commands:

a2enmod ssl
a2ensite default-ssl
service apache2 restart

Now you can access the web interface with https://[YOURIP]/nextcloud. You will probably get a SSL warning, this warning should be accepted. To avoid such warnings, get a free officially signed SSL certificate e.g. from Startssl (or check LetsEncrypt).