The client requests to sign in every time it is opened, hammering the server and disabling the account.
Only sign in once.
Minor version update (i.e. 33.0.0 → 33.0.1)
{"reqId":"vQtdRPzFGKm1daDY3kwt","level":3,"time":"2026-08-15T15:37:22+00:00","remoteAddr":"172.18.0.1","user":"--","app":"webdav","method":"OPTIONS","url":"/remote.php/webdav/","scriptName":"/remote.php","message":"OC\\User\\DisabledUserException: Account disabled","userAgent":"gnome-online-accounts/3.58.1 libsoup/3.6.6","version":"34.0.3.2","exception":{"Exception":"Sabre\\DAV\\Exception\\ServiceUnavailable","Message":"OC\\User\\DisabledUserException: Account disabled","Code":0,"Trace":[{"file":"/var/www/html/3rdparty/sabre/dav/lib/DAV/Auth/Plugin.php","line":179,"function":"check","class":"OCA\\DAV\\Connector\\Sabre\\Auth","type":"->","args":[{"__class__":"Sabre\\HTTP\\Request"},{"__class__":"Sabre\\HTTP\\Response"}]},{"file":"/var/www/html/3rdparty/sabre/dav/lib/DAV/Auth/Plugin.php","line":135,"function":"check","class":"Sabre\\DAV\\Auth\\Plugin","type":"->","args":[{"__class__":"Sabre\\HTTP\\Request"},{"__class__":"Sabre\\HTTP\\Response"}]},{"file":"/var/www/html/3rdparty/sabre/event/lib/WildcardEmitterTrait.php","line":89,"function":"beforeMethod","class":"Sabre\\DAV\\Auth\\Plugin","type":"->","args":[{"__class__":"Sabre\\HTTP\\Request"},{"__class__":"Sabre\\HTTP\\Response"}]},{"file":"/var/www/html/3rdparty/sabre/dav/lib/DAV/Server.php","line":456,"function":"emit","class":"Sabre\\DAV\\Server","type":"->","args":["beforeMethod:OPTIONS",[{"__class__":"Sabre\\HTTP\\Request"},{"__class__":"Sabre\\HTTP\\Response"}]]},{"file":"/var/www/html/apps/dav/lib/Connector/Sabre/Server.php","line":215,"function":"invokeMethod","class":"Sabre\\DAV\\Server","type":"->","args":[{"__class__":"Sabre\\HTTP\\Request"},{"__class__":"Sabre\\HTTP\\Response"}]},{"file":"/var/www/html/apps/dav/appinfo/v1/webdav.php","line":87,"function":"start","class":"OCA\\DAV\\Connector\\Sabre\\Server","type":"->","args":[]},{"file":"/var/www/html/remote.php","line":152,"args":["/var/www/html/apps/dav/appinfo/v1/webdav.php"],"function":"require_once"}],"File":"/var/www/html/apps/dav/lib/Connector/Sabre/Auth.php","Line":118,"message":"OC\\User\\DisabledUserException: Account disabled","exception":"{\"class\":\"Sabre\\DAV\\Exception\\ServiceUnavailable\",\"message\":\"OC\\User\\DisabledUserException: Account disabled\",\"code\":0,\"file\":\"/var/www/html/apps/dav/lib/Connector/Sabre/Auth.php:118\",\"trace\":\"#0 /var/www/html/3rdparty/sabre/dav/lib/DAV/Auth/Plugin.php(179): OCA\\DAV\\Connector\\Sabre\\Auth->check(Object(Sabre\\HTTP\\Request), Object(Sabre\\HTTP\\Response))\\n#1 /var/www/html/3rdparty/sabre/dav/lib/DAV/Auth/Plugin.php(135): Sabre\\DAV\\Auth\\Plugin->check(Object(Sabre\\HTTP\\Request), Object(Sabre\\HTTP\\Response))\\n#2 /var/www/html/3rdparty/sabre/event/lib/WildcardEmitterTrait.php(89): Sabre\\DAV\\Auth\\Plugin->beforeMethod(Object(Sabre\\HTTP\\Request), Object(Sabre\\HTTP\\Response))\\n#3 /var/www/html/3rdparty/sabre/dav/lib/DAV/Server.php(456): Sabre\\DAV\\Server->emit('beforeMethod:OP...', Array)\\n#4 /var/www/html/apps/dav/lib/Connector/Sabre/Server.php(215): Sabre\\DAV\\Server->invokeMethod(Object(Sabre\\HTTP\\Request), Object(Sabre\\HTTP\\Response))\\n#5 /var/www/html/apps/dav/appinfo/v1/webdav.php(87): OCA\\DAV\\Connector\\Sabre\\Server->start()\\n#6 /var/www/html/remote.php(152): require_once('/var/www/html/a...')\\n#7 {main}\"}","CustomMessage":"OC\\User\\DisabledUserException: Account disabled"}}
{"reqId":"QD8R80JDvBOrJAdYUz7u","level":2,"time":"2026-08-15T15:42:32+00:00","remoteAddr":"172.18.0.1","user":"--","app":"core","method":"OPTIONS","url":"/remote.php/dav/calendars/admin","scriptName":"/remote.php","message":"Login failed: 'admin' (Remote IP: '172.18.0.1')","userAgent":"curl/7.54","version":"34.0.3.2","data":{"app":"core"}}
{"reqId":"AMT8UtmMWWBg0YwqIHqW","level":2,"time":"2026-08-15T15:53:35+00:00","remoteAddr":"172.18.0.1","user":"--","app":"core","method":"GET","url":"/index.php/apps/notes/api/v1/notes?pruneBefore=1786670926","scriptName":"/index.php","message":"Login failed: 'admin' (Remote IP: '172.18.0.1')","userAgent":"Mozilla/5.0 (Android) Nextcloud-android/34.1.0","version":"34.0.3.2","data":{"app":"core"}}
{"reqId":"u26p0TYyWBymJ7PFIdFU","level":2,"time":"2026-08-15T15:53:35+00:00","remoteAddr":"172.18.0.1","user":"--","app":"core","method":"GET","url":"/index.php/apps/notes/api/v1/notes?pruneBefore=1786670926","scriptName":"/index.php","message":"Login failed: 'admin' (Remote IP: '172.18.0.1')","userAgent":"Mozilla/5.0 (Android) Nextcloud-android/34.1.0","version":"34.0.3.2","data":{"app":"core"}}
{"reqId":"QXcDsRtetfhDmxhesUEL","level":2,"time":"2026-08-15T15:53:35+00:00","remoteAddr":"172.18.0.1","user":"--","app":"core","method":"PROPFIND","url":"/remote.php/dav/files/admin/","scriptName":"/remote.php","message":"Login failed: 'admin' (Remote IP: '172.18.0.1')","userAgent":"Mozilla/5.0 (Android) Nextcloud-android/34.1.0","version":"34.0.3.2","data":{"app":"core"}}
{"reqId":"QXcDsRtetfhDmxhesUEL","level":2,"time":"2026-08-15T15:53:35+00:00","remoteAddr":"172.18.0.1","user":"--","app":"password_policy","method":"PROPFIND","url":"/remote.php/dav/files/admin/","scriptName":"/remote.php","message":"Too many consecutive failed login attempts, disabling user","userAgent":"Mozilla/5.0 (Android) Nextcloud-android/34.1.0","version":"34.0.3.2","data":{"app":"password_policy","uid":"admin"}}
{"reqId":"wQXxQkSXgBk25jV8nibo","level":2,"time":"2026-08-15T15:53:35+00:00","remoteAddr":"172.18.0.1","user":"--","app":"core","method":"PROPFIND","url":"/remote.php/dav/files/admin/Papers/","scriptName":"/remote.php","message":"Login failed: 'admin' (Remote IP: '172.18.0.1')","userAgent":"Mozilla/5.0 (Android) Nextcloud-android/34.1.0","version":"34.0.3.2","data":{"app":"core"}}
{"reqId":"XhzMc1c2zNP2BkS1OHID","level":2,"time":"2026-08-15T15:53:36+00:00","remoteAddr":"172.18.0.1","user":"--","app":"core","method":"PROPFIND","url":"/remote.php/dav/files/admin/Notes/","scriptName":"/remote.php","message":"Login failed: 'admin' (Remote IP: '172.18.0.1')","userAgent":"Mozilla/5.0 (Android) Nextcloud-android/34.1.0","version":"34.0.3.2","data":{"app":"core"}}
{"reqId":"IAqJvcq0S3xYQOjJTmEt","level":2,"time":"2026-08-15T15:53:36+00:00","remoteAddr":"172.18.0.1","user":"--","app":"core","method":"PROPFIND","url":"/remote.php/dav/files/admin/Books/","scriptName":"/remote.php","message":"Login failed: 'admin' (Remote IP: '172.18.0.1')","userAgent":"Mozilla/5.0 (Android) Nextcloud-android/34.1.0","version":"34.0.3.2","data":{"app":"core"}}
{"reqId":"qnS6fNXn0NFNmsDmZOYw","level":2,"time":"2026-08-15T15:55:21+00:00","remoteAddr":"172.18.0.1","user":"admin","app":"core","method":"GET","url":"/","scriptName":"/index.php","message":"Session token credentials are invalid","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:153.0) Gecko/20100101 Firefox/153.0","version":"34.0.3.2","data":{"app":"core","user":"[unknown(NULL)]"}}
{"reqId":"lcc9sS1onLIfHZVEAT0A","level":2,"time":"2026-08-15T15:55:28+00:00","remoteAddr":"172.18.0.1","user":"--","app":"no app in context","method":"POST","url":"/login","scriptName":"/index.php","message":"Login failed: my_user disabled (Remote IP: 172.18.0.1)","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:153.0) Gecko/20100101 Firefox/153.0","version":"34.0.3.2","data":[]}
Bug description
The client requests to sign in every time it is opened, hammering the server and disabling the account.
Steps to reproduce
Expected behavior
Only sign in once.
Which files are affected by this bug
No files
Operating system
Linux
Which version of the operating system you are running.
Arch Linux (Linux 7.1.8-1-cachyos) GNOME 50.4
Installation method
Distro package manager (please test with the AppImage package ?)
Nextcloud Server version
34.0.3
Nextcloud Desktop Client version
34.0.1
Did this occur after an update or on a clean installation?
Minor version update (i.e. 33.0.0 → 33.0.1)
Are you using the Nextcloud Server Encryption module?
No
Are you using an external user-backend?
Nextcloud Server logs
{"reqId":"vQtdRPzFGKm1daDY3kwt","level":3,"time":"2026-08-15T15:37:22+00:00","remoteAddr":"172.18.0.1","user":"--","app":"webdav","method":"OPTIONS","url":"/remote.php/webdav/","scriptName":"/remote.php","message":"OC\\User\\DisabledUserException: Account disabled","userAgent":"gnome-online-accounts/3.58.1 libsoup/3.6.6","version":"34.0.3.2","exception":{"Exception":"Sabre\\DAV\\Exception\\ServiceUnavailable","Message":"OC\\User\\DisabledUserException: Account disabled","Code":0,"Trace":[{"file":"/var/www/html/3rdparty/sabre/dav/lib/DAV/Auth/Plugin.php","line":179,"function":"check","class":"OCA\\DAV\\Connector\\Sabre\\Auth","type":"->","args":[{"__class__":"Sabre\\HTTP\\Request"},{"__class__":"Sabre\\HTTP\\Response"}]},{"file":"/var/www/html/3rdparty/sabre/dav/lib/DAV/Auth/Plugin.php","line":135,"function":"check","class":"Sabre\\DAV\\Auth\\Plugin","type":"->","args":[{"__class__":"Sabre\\HTTP\\Request"},{"__class__":"Sabre\\HTTP\\Response"}]},{"file":"/var/www/html/3rdparty/sabre/event/lib/WildcardEmitterTrait.php","line":89,"function":"beforeMethod","class":"Sabre\\DAV\\Auth\\Plugin","type":"->","args":[{"__class__":"Sabre\\HTTP\\Request"},{"__class__":"Sabre\\HTTP\\Response"}]},{"file":"/var/www/html/3rdparty/sabre/dav/lib/DAV/Server.php","line":456,"function":"emit","class":"Sabre\\DAV\\Server","type":"->","args":["beforeMethod:OPTIONS",[{"__class__":"Sabre\\HTTP\\Request"},{"__class__":"Sabre\\HTTP\\Response"}]]},{"file":"/var/www/html/apps/dav/lib/Connector/Sabre/Server.php","line":215,"function":"invokeMethod","class":"Sabre\\DAV\\Server","type":"->","args":[{"__class__":"Sabre\\HTTP\\Request"},{"__class__":"Sabre\\HTTP\\Response"}]},{"file":"/var/www/html/apps/dav/appinfo/v1/webdav.php","line":87,"function":"start","class":"OCA\\DAV\\Connector\\Sabre\\Server","type":"->","args":[]},{"file":"/var/www/html/remote.php","line":152,"args":["/var/www/html/apps/dav/appinfo/v1/webdav.php"],"function":"require_once"}],"File":"/var/www/html/apps/dav/lib/Connector/Sabre/Auth.php","Line":118,"message":"OC\\User\\DisabledUserException: Account disabled","exception":"{\"class\":\"Sabre\\DAV\\Exception\\ServiceUnavailable\",\"message\":\"OC\\User\\DisabledUserException: Account disabled\",\"code\":0,\"file\":\"/var/www/html/apps/dav/lib/Connector/Sabre/Auth.php:118\",\"trace\":\"#0 /var/www/html/3rdparty/sabre/dav/lib/DAV/Auth/Plugin.php(179): OCA\\DAV\\Connector\\Sabre\\Auth->check(Object(Sabre\\HTTP\\Request), Object(Sabre\\HTTP\\Response))\\n#1 /var/www/html/3rdparty/sabre/dav/lib/DAV/Auth/Plugin.php(135): Sabre\\DAV\\Auth\\Plugin->check(Object(Sabre\\HTTP\\Request), Object(Sabre\\HTTP\\Response))\\n#2 /var/www/html/3rdparty/sabre/event/lib/WildcardEmitterTrait.php(89): Sabre\\DAV\\Auth\\Plugin->beforeMethod(Object(Sabre\\HTTP\\Request), Object(Sabre\\HTTP\\Response))\\n#3 /var/www/html/3rdparty/sabre/dav/lib/DAV/Server.php(456): Sabre\\DAV\\Server->emit('beforeMethod:OP...', Array)\\n#4 /var/www/html/apps/dav/lib/Connector/Sabre/Server.php(215): Sabre\\DAV\\Server->invokeMethod(Object(Sabre\\HTTP\\Request), Object(Sabre\\HTTP\\Response))\\n#5 /var/www/html/apps/dav/appinfo/v1/webdav.php(87): OCA\\DAV\\Connector\\Sabre\\Server->start()\\n#6 /var/www/html/remote.php(152): require_once('/var/www/html/a...')\\n#7 {main}\"}","CustomMessage":"OC\\User\\DisabledUserException: Account disabled"}} {"reqId":"QD8R80JDvBOrJAdYUz7u","level":2,"time":"2026-08-15T15:42:32+00:00","remoteAddr":"172.18.0.1","user":"--","app":"core","method":"OPTIONS","url":"/remote.php/dav/calendars/admin","scriptName":"/remote.php","message":"Login failed: 'admin' (Remote IP: '172.18.0.1')","userAgent":"curl/7.54","version":"34.0.3.2","data":{"app":"core"}} {"reqId":"AMT8UtmMWWBg0YwqIHqW","level":2,"time":"2026-08-15T15:53:35+00:00","remoteAddr":"172.18.0.1","user":"--","app":"core","method":"GET","url":"/index.php/apps/notes/api/v1/notes?pruneBefore=1786670926","scriptName":"/index.php","message":"Login failed: 'admin' (Remote IP: '172.18.0.1')","userAgent":"Mozilla/5.0 (Android) Nextcloud-android/34.1.0","version":"34.0.3.2","data":{"app":"core"}} {"reqId":"u26p0TYyWBymJ7PFIdFU","level":2,"time":"2026-08-15T15:53:35+00:00","remoteAddr":"172.18.0.1","user":"--","app":"core","method":"GET","url":"/index.php/apps/notes/api/v1/notes?pruneBefore=1786670926","scriptName":"/index.php","message":"Login failed: 'admin' (Remote IP: '172.18.0.1')","userAgent":"Mozilla/5.0 (Android) Nextcloud-android/34.1.0","version":"34.0.3.2","data":{"app":"core"}} {"reqId":"QXcDsRtetfhDmxhesUEL","level":2,"time":"2026-08-15T15:53:35+00:00","remoteAddr":"172.18.0.1","user":"--","app":"core","method":"PROPFIND","url":"/remote.php/dav/files/admin/","scriptName":"/remote.php","message":"Login failed: 'admin' (Remote IP: '172.18.0.1')","userAgent":"Mozilla/5.0 (Android) Nextcloud-android/34.1.0","version":"34.0.3.2","data":{"app":"core"}} {"reqId":"QXcDsRtetfhDmxhesUEL","level":2,"time":"2026-08-15T15:53:35+00:00","remoteAddr":"172.18.0.1","user":"--","app":"password_policy","method":"PROPFIND","url":"/remote.php/dav/files/admin/","scriptName":"/remote.php","message":"Too many consecutive failed login attempts, disabling user","userAgent":"Mozilla/5.0 (Android) Nextcloud-android/34.1.0","version":"34.0.3.2","data":{"app":"password_policy","uid":"admin"}} {"reqId":"wQXxQkSXgBk25jV8nibo","level":2,"time":"2026-08-15T15:53:35+00:00","remoteAddr":"172.18.0.1","user":"--","app":"core","method":"PROPFIND","url":"/remote.php/dav/files/admin/Papers/","scriptName":"/remote.php","message":"Login failed: 'admin' (Remote IP: '172.18.0.1')","userAgent":"Mozilla/5.0 (Android) Nextcloud-android/34.1.0","version":"34.0.3.2","data":{"app":"core"}} {"reqId":"XhzMc1c2zNP2BkS1OHID","level":2,"time":"2026-08-15T15:53:36+00:00","remoteAddr":"172.18.0.1","user":"--","app":"core","method":"PROPFIND","url":"/remote.php/dav/files/admin/Notes/","scriptName":"/remote.php","message":"Login failed: 'admin' (Remote IP: '172.18.0.1')","userAgent":"Mozilla/5.0 (Android) Nextcloud-android/34.1.0","version":"34.0.3.2","data":{"app":"core"}} {"reqId":"IAqJvcq0S3xYQOjJTmEt","level":2,"time":"2026-08-15T15:53:36+00:00","remoteAddr":"172.18.0.1","user":"--","app":"core","method":"PROPFIND","url":"/remote.php/dav/files/admin/Books/","scriptName":"/remote.php","message":"Login failed: 'admin' (Remote IP: '172.18.0.1')","userAgent":"Mozilla/5.0 (Android) Nextcloud-android/34.1.0","version":"34.0.3.2","data":{"app":"core"}} {"reqId":"qnS6fNXn0NFNmsDmZOYw","level":2,"time":"2026-08-15T15:55:21+00:00","remoteAddr":"172.18.0.1","user":"admin","app":"core","method":"GET","url":"/","scriptName":"/index.php","message":"Session token credentials are invalid","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:153.0) Gecko/20100101 Firefox/153.0","version":"34.0.3.2","data":{"app":"core","user":"[unknown(NULL)]"}} {"reqId":"lcc9sS1onLIfHZVEAT0A","level":2,"time":"2026-08-15T15:55:28+00:00","remoteAddr":"172.18.0.1","user":"--","app":"no app in context","method":"POST","url":"/login","scriptName":"/index.php","message":"Login failed: my_user disabled (Remote IP: 172.18.0.1)","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:153.0) Gecko/20100101 Firefox/153.0","version":"34.0.3.2","data":[]}Additional info