Repository: nilsteampassnet/TeamPass

Issue #2373: Internal Server Error 500 Profile Window
Created: 2018-08-09T14:14:49Z
Steps to reproduce

Creating an User
Log In with that User
Go to the Profile Window

Expected behaviour
The Window should open and I can choose some options (change password language etc.)
Actual behaviour
all users are getting an Internal Server Error 500 popup. You can click it away and it seems like nothing is wrong. Just the Error Message pops up and the functions in the Window are still working
Server configuration
Operating system: CentOS 7
Web server: Apache 2.4.6
Database: MariaDB 5.5.56
PHP version: 7.2
Teampass version: 2.1.27.17
Teampass configuration file:
Updated from an older Teampass or fresh install:
PLEASE attach to this issue the file /includes/config/tp.config.php.
Fresh Installation
Client configuration
Browser: FireFox, Chrome
Operating system: Windows 10
Logs
Web server error log
Insert your webserver log here

Log from the web-browser developer console (CTRL + SHIFT + i)
Insert the log here and especially the answer of the query that failed.

[php7:error] [pid 14157] PHP Fatal error:  Uncaught InvalidArgumentException: Expected positive                                                                              integer in /var/www/html/teampass/includes/libraries/PasswordGenerator/Generator                                                                             /ComputerPasswordGenerator.php:128\nStack trace:\n#0 /var/www/html/teampass/sour                                                                             ces/main.queries.php(1007): PasswordGenerator\Generator\ComputerPasswordGenera                                                                             tor->setLength(0)\n#1 /var/www/html/teampass/sources/main.queries.php(53): mainQ                                                                             uery()\n#2 {main}\n  thrown in /var/www/html/teampass/includes/libraries/Passwor                                                                             dGenerator/Generator/ComputerPasswordGenerator.php on line 128, referer: http://                                                                             test.local/teampass/index.php?page=items

Duplicate issue #2400: Error on several functions
Created: 2018-08-29T13:20:06Z
Steps to reproduce

Login as manager
Click on "Manage Users"
message "Error while loading https://.......fritz.box/teampass/profile.php?key=XBu......" appears

Expected behaviour
User manager dialog opens with data
Actual behaviour
only error messgae
Server configuration
Operating system: Linux dien-tpass 4.15.18-1-pve #1 SMP PVE 4.15.18-16 (Mon, 23 Jul 2018 15:59:19 +0200) x86_64
Web server: Apache/2.4.25 (Debian)
Database: 5.5.5-10.1.26-MariaDB-0+deb9u1
PHP version: 7.0.30-0+deb9u1
Teampass version: 2.1.27.16
Teampass configuration file:
'max_latest_items' => '10',
'enable_favourites' => '1',
'show_last_items' => '1',
'enable_pf_feature' => '1',
'log_connections' => '0',
'log_accessed' => '0',
'time_format' => 'H:i:s',
'date_format' => 'd/m/Y',
'duplicate_folder' => '1',
'item_duplicate_in_same_folder' => '1',
'duplicate_item' => '1',
'number_of_used_pw' => '3',
'manager_edit' => '1',
'cpassman_dir' => '/var/www/html/teampass',
'cpassman_url' => 'https://<anonym_url>/teampass
'favicon' => 'https://<anonym_url>/teampass/favicon.ico',
'path_to_upload_folder' => '/var/www/html/teampass/upload',
'url_to_upload_folder' => 'https://<anonym_url>/teampass/upload',
'path_to_files_folder' => '/var/www/html/teampass/files',
'url_to_files_folder' => 'https://<anonym_url>/teampass/files',
'activate_expiration' => '0',
'pw_life_duration' => '0',
'maintenance_mode' => '0',
'enable_sts' => '0',
'encryptClientServer' => '1',
'cpassman_version' => '2.1.27',
'ldap_mode' => '0',
'ldap_type' => '0',
'ldap_suffix' => '0',
'ldap_domain_dn' => '0',
'ldap_domain_controler' => '0',
'ldap_user_attribute' => '0',
'ldap_ssl' => '0',
'ldap_tls' => '0',
'ldap_elusers' => '0',
'ldap_search_base' => '0',
'ldap_port' => '389',
'richtext' => '0',
'allow_print' => '1',
'roles_allowed_to_print' => '2;3',
'show_description' => '1',
'anyone_can_modify' => '0',
'anyone_can_modify_bydefault' => '0',
'nb_bad_authentication' => '0',
'utf8_enabled' => '1',
'restricted_to' => '0',
'restricted_to_roles' => '0',
'enable_send_email_on_user_login' => '0',
'enable_user_can_create_folders' => '0',
'insert_manual_entry_item_history' => '0',
'enable_kb' => '1',
'enable_email_notification_on_item_shown' => '0',
'enable_email_notification_on_user_pw_change' => '0',
'custom_logo' => '',
'custom_login_text' => '',
'default_language' => 'german',
'send_stats' => '0',
'send_statistics_items' => 'stat_country;stat_users;stat_items;stat_items_shared;stat_folders;stat_folders_shared;stat_admins;stat_managers;stat_ro;stat_mysqlversion;stat_phpversion;stat_teampassversion;stat_languages;stat_kb;stat_suggestion;stat_customfields;stat_api;stat_2fa;stat_agses;stat_duo;stat_ldap;stat_syslog;stat_stricthttps;stat_fav;stat_pf;',
'send_stats_time' => '1530099919',
'get_tp_info' => '1',
'send_mail_on_user_login' => '0',
'sending_emails' => '0',
'nb_items_by_query' => 'auto',
'enable_delete_after_consultation' => '0',
'enable_personal_saltkey_cookie' => '0',
'personal_saltkey_cookie_duration' => '31',
'email_smtp_server' => 'smtp.gmail.com',
'email_smtp_auth' => '1',
'email_auth_username' => 'kerkhc@gmail.com',
'email_auth_pwd' => '05Dolo#2014',
'email_port' => '587',
'email_security' => 'tls',
'email_server_url' => '',
'email_from' => 'kerkhc@gmail.com',
'email_from_name' => 'Carsten Kerkhoff',
'pwd_maximum_length' => '40',
'google_authentication' => '0',
'delay_item_edition' => '0',
'allow_import' => '1',
'proxy_ip' => '',
'proxy_port' => '',
'upload_maxfilesize' => '10mb',
'upload_docext' => 'doc,docx,dotx,xls,xlsx,xltx,rtf,csv,txt,pdf,ppt,pptx,pot,dotx,xltx',
'upload_imagesext' => 'jpg,jpeg,gif,png',
'upload_pkgext' => '7z,rar,tar,zip',
'upload_otherext' => 'sql,xml',
'upload_imageresize_options' => '1',
'upload_imageresize_width' => '800',
'upload_imageresize_height' => '600',
'upload_imageresize_quality' => '90',
'use_md5_password_as_salt' => '0',
'ga_website_name' => 'TeamPass for ChangeMe',
'api' => '0',
'subfolder_rights_as_parent' => '1',
'show_only_accessible_folders' => '0',
'enable_suggestion' => '0',
'otv_expiration_period' => '7',
'default_session_expiration_time' => '60',
'duo' => '0',
'enable_server_password_change' => '0',
'ldap_object_class' => '0',
'bck_script_path' => '/var/www/html/teampass/backups',
'bck_script_filename' => 'bck_teampass',
'syslog_enable' => '0',
'syslog_host' => 'localhost',
'syslog_port' => '514',
'manager_move_item' => '1',
'create_item_without_password' => '1',
'otv_is_enabled' => '0',
'agses_authentication_enabled' => '0',
'item_extra_fields' => '0',
'saltkey_ante_2127' => 'none',
'migration_to_2127' => 'done',
'files_with_defuse' => 'done',
'timezone' => 'Europe/Berlin',
'enable_attachment_encryption' => '1',
'personal_saltkey_security_level' => '0',
'ldap_new_user_is_administrated_by' => '0',
'disable_show_forgot_pwd_link' => '0',
'offline_key_level' => '0',
'enable_http_request_login' => '0',
'ldap_and_local_authentication' => '0',
'secure_display_image' => '1',
'upload_zero_byte_file' => '0',
'upload_all_extensions_file' => '0',
'enable_massive_move_delete' => '1',


Updated from an older Teampass or fresh install:
Client configuration
Browser: Firefox - 61.0
Operating system: Windows Server 2008 R2 / 7 - 64bits
Logs
Web server error log
Constant SECUREPATH already defined - /var/www/html/teampass/includes/config/settings.php (15)

Teampass 10 last system errors
 * 14/05/2018 07:44:55 - Query: INSERT INTO `teampass_items` (`label`,`description`,`pw`,`pw_iv`,`email`,`url`,`id_tree`,`login`,`inactif`,`restricted_to`,`perso`,`anyone_can_modify`,`complexity_level`) VALUES ('Wohnwagen-Forum', '', '', '', 'kerkhc@gmail.com', 'http://wohnwagen-forum.de/', '28', 'CarstenK', '0', '', '0', '0', NULL)<br />Error: Column 'complexity_level' cannot be null<br />@ /teampass/sources/items.queries.php

Log from the web-browser developer console (CTRL + SHIFT + i)
15:16:39.988 Password fields present on an insecure (http://) page. This is a security risk that allows user login credentials to be stolen.[Learn More] index.php
15:16:40.500 Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at https://dien-tpass.fritz.box/teampass/profile.php?key=XBucmwm5tjZ9g5qJ8yGxrUH6R5qyzCY58CLa6RK6zpAbuN6LVv. (Reason: CORS header ‘Access-Control-Allow-Origin’ missing).
15:16:40.501 Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at https://dien-tpass.fritz.box/teampass/includes/language/datatables.english.txt. (Reason: CORS header ‘Access-Control-Allow-Origin’ missing).
15:16:40.625 Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at https://dien-tpass.fritz.box/teampass/sources/datatable/datatable.users.php?draw=1&columns%5B0%5D%5Bdata%5D=0&columns%5B0%5D%5Bname%5D=&columns%5B0%5D%5Bsearchable%5D=true&columns%5B0%5D%5Borderable%5D=false&columns%5B0%5D%5Bsearch%5D%5Bvalue%5D=&columns%5B0%5D%5Bsearch%5D%5Bregex%5D=false&columns%5B1%5D%5Bdata%5D=1&columns%5B1%5D%5Bname%5D=&columns%5B1%5D%5Bsearchable%5D=true&columns%5B1%5D%5Borderable%5D=false&columns%5B1%5D%5Bsearch%5D%5Bvalue%5D=&columns%5B1%5D%5Bsearch%5D%5Bregex%5D=false&columns%5B2%5D%5Bdata%5D=2&columns%5B2%5D%5Bname%5D=&columns%5B2%5D%5Bsearchable%5D=true&columns%5B2%5D%5Borderable%5D=false&columns%5B2%5D%5Bsearch%5D%5Bvalue%5D=&columns%5B2%5D%5Bsearch%5D%5Bregex%5D=false&columns%5B3%5D%5Bdata%5D=3&columns%5B3%5D%5Bname%5D=&columns%5B3%5D%5Bsearchable%5D=true&columns%5B3%5D%5Borderable%5D=false&columns%5B3%5D%5Bsearch%5D%5Bvalue%5D=&columns%5B3%5D%5Bsearch%5D%5Bregex%5D=false&columns%5B4%5D%5Bdata%5D=4&columns%5B4%5D%5Bname%5D=&columns%5B4%5D%5Bsearchable%5D=true&columns%5B4%5D%5Borderable%5D=false&columns%5B4%5D%5Bsearch%5D%5Bvalue%5D=&columns%5B4%5D%5Bsearch%5D%5Bregex%5D=false&columns%5B5%5D%5Bdata%5D=5&columns%5B5%5D%5Bname%5D=&columns%5B5%5D%5Bsearchable%5D=true&columns%5B5%5D%5Borderable%5D=false&columns%5B5%5D%5Bsearch%5D%5Bvalue%5D=&columns%5B5%5D%5Bsearch%5D%5Bregex%5D=false&columns%5B6%5D%5Bdata%5D=6&columns%5B6%5D%5Bname%5D=&columns%5B6%5D%5Bsearchable%5D=true&columns%5B6%5D%5Borderable%5D=false&columns%5B6%5D%5Bsearch%5D%5Bvalue%5D=&columns%5B6%5D%5Bsearch%5D%5Bregex%5D=false&columns%5B7%5D%5Bdata%5D=7&columns%5B7%5D%5Bname%5D=&columns%5B7%5D%5Bsearchable%5D=true&columns%5B7%5D%5Borderable%5D=false&columns%5B7%5D%5Bsearch%5D%5Bvalue%5D=&columns%5B7%5D%5Bsearch%5D%5Bregex%5D=false&columns%5B8%5D%5Bdata%5D=8&columns%5B8%5D%5Bname%5D=&columns%5B8%5D%5Bsearchable%5D=true&columns%5B8%5D%5Borderable%5D=false&columns%5B8%5D%5Bsearch%5D%5Bvalue%5D=&columns%5B8%5D%5Bsearch%5D%5Bregex%5D=false&columns%5B9%5D%5Bdata%5D=9&columns%5B9%5D%5Bname%5D=&columns%5B9%5D%5Bsearchable%5D=true&columns%5B9%5D%5Borderable%5D=false&columns%5B9%5D%5Bsearch%5D%5Bvalue%5D=&columns%5B9%5D%5Bsearch%5D%5Bregex%5D=false&columns%5B10%5D%5Bdata%5D=10&columns%5B10%5D%5Bname%5D=&columns%5B10%5D%5Bsearchable%5D=true&columns%5B10%5D%5Borderable%5D=false&columns%5B10%5D%5Bsearch%5D%5Bvalue%5D=&columns%5B10%5D%5Bsearch%5D%5Bregex%5D=false&columns%5B11%5D%5Bdata%5D=11&columns%5B11%5D%5Bname%5D=&columns%5B11%5D%5Bsearchable%5D=true&columns%5B11%5D%5Borderable%5D=false&columns%5B11%5D%5Bsearch%5D%5Bvalue%5D=&columns%5B11%5D%5Bsearch%5D%5Bregex%5D=false&start=0&length=10&search%5Bvalue%5D=&search%5Bregex%5D=false&letter=&_=1535548599799. (Reason: CORS header ‘Access-Control-Allow-Origin’ missing). ```

Closing comment (2018-08-29T20:36:33Z): Hi Nils,
this was not related to #2373. Maybe I collected wrong log-data.

Meanwhile I discovered the issue: Somehow, the file permissions have gone
wrong.
I changed them to 0755 for all files below ./teampass (chmod -R 0755 *).
plus the "0777" permissions as desribed in the installation docs.

Maybe you can give me a hint how to correct the permissions to lowest
possible?

Best regards,
Carsten

Am Mi., 29. Aug. 2018 um 19:00 Uhr schrieb Nils Laumaillé <
notifications@github.com>:
…
 Please check the changelog
 <https://github.com/nilsteampassnet/TeamPass/blob/master/changelog.txt>
 when not using the last release.

 Duplicate of #2373
 <#2373>

 Please update.

 —
 You are receiving this because you authored the thread.
 Reply to this email directly, view it on GitHub
 <#2400 (comment)>,
 or mute the thread
 <https://github.com/notifications/unsubscribe-auth/Aod0xvnHJapoR0EL8VIUdSuY9mYW1ulaks5uVsjIgaJpZM4WRhze>
 .