{"id":2916,"date":"2021-01-11T20:48:33","date_gmt":"2021-01-11T11:48:33","guid":{"rendered":"http:\/\/matoken.org\/blog\/?p=2916"},"modified":"2021-01-11T20:53:05","modified_gmt":"2021-01-11T11:53:05","slug":"fixed-nextcloud-20-0-4-security-setup-warnings","status":"publish","type":"post","link":"https:\/\/matoken.org\/blog\/2021\/01\/11\/fixed-nextcloud-20-0-4-security-setup-warnings\/","title":{"rendered":"Nextcloud 20.0.4\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\uff06\u30bb\u30c3\u30c8\u30a2\u30c3\u30d7\u8b66\u544a\u306b\u5bfe\u5fdc"},"content":{"rendered":"
\n
\n
\n

\u5148\u65e5 Nextcloud 19.0.6 \u304b\u3089 20.0.4 \u306b\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3057\u307e\u3057\u305f\uff0e
\n\u3059\u308b\u3068\u300c\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\uff06\u30bb\u30c3\u30c8\u30a2\u30c3\u30d7\u8b66\u544a\u300d\u753b\u9762\u306b\u3044\u304f\u3064\u304b\u8b66\u544a\u304c\u51fa\u3066\u304d\u305f\u306e\u3067\u305d\u306e\u5bfe\u5fdc\u30e1\u30e2\u3067\u3059\uff0e<\/p>\n<\/div>\n

\n

\"20201227<\/span><\/p>\n<\/div>\n

\n
\n
\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\uff06\u30bb\u30c3\u30c8\u30a2\u30c3\u30d7\u8b66\u544a\n\u30b5\u30fc\u30d0\u30fc\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u3068\u30d1\u30d5\u30a9\u30fc\u30de\u30f3\u30b9\u306b\u3068\u3063\u3066\u91cd\u8981\u306a\u3053\u3068\u306f\u3001\u3059\u3079\u3066\u304c\u6b63\u78ba\u306b\u8a2d\u5b9a\u3055\u308c\u3066\u3044\u308b\u3053\u3068\u3067\u3059\u3002\u3042\u306a\u305f\u306e\u52a9\u3051\u3068\u306a\u308b\u3088\u3046\u3001Nextcloud\u3067\u306f\u4e00\u90e8\u306e\u81ea\u52d5\u30c1\u30a7\u30c3\u30af\u3092\u884c\u3063\u3066\u3044\u307e\u3059\u3002\u8a73\u7d30\u306a\u60c5\u5831\u306f\u3001\u30ea\u30f3\u30af\u5148\u306e\u30c9\u30ad\u30e5\u30e1\u30f3\u30c8\u3092\u53c2\u7167\u3057\u3066\u304f\u3060\u3055\u3044\u3002\n\n\u30bb\u30c3\u30c8\u30a2\u30c3\u30d7\u306b\u95a2\u3057\u3066\u8b66\u544a\u304c\u3044\u304f\u3064\u304b\u3042\u308a\u307e\u3059\u3002\nThe old server-side-encryption format is enabled. We recommend disabling this. For more details see the documentation.\n\u30c7\u30fc\u30bf\u30d9\u30fc\u30b9\u306b\u3044\u304f\u3064\u304b\u306e\u30a4\u30f3\u30c7\u30c3\u30af\u30b9\u304c\u3042\u308a\u307e\u305b\u3093\u3002 \u5927\u304d\u306a\u30c6\u30fc\u30d6\u30eb\u306b\u30a4\u30f3\u30c7\u30c3\u30af\u30b9\u3092\u8ffd\u52a0\u3059\u308b\u3068\u3001\u81ea\u52d5\u7684\u306b\u8ffd\u52a0\u3055\u308c\u306a\u3044\u307e\u3067\u306b\u6642\u9593\u304c\u304b\u304b\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u305f\u3081\u3067\u3059\u3002 \"occ db\uff1aadd-missing-indices\"\u3092\u5b9f\u884c\u3059\u308b\u3053\u3068\u306b\u3088\u3063\u3066\u3001\u30a4\u30f3\u30b9\u30bf\u30f3\u30b9\u304c\u5b9f\u884c\u3057\u7d9a\u3051\u3066\u3044\u308b\u9593\u306b\u305d\u308c\u3089\u306e\u6b20\u3051\u3066\u3044\u308b\u30a4\u30f3\u30c7\u30c3\u30af\u30b9\u3092\u624b\u52d5\u3067\u8ffd\u52a0\u3059\u308b\u3053\u3068\u304c\u3067\u304d\u307e\u3059\u3002 \u30a4\u30f3\u30c7\u30c3\u30af\u30b9\u304c\u8ffd\u52a0\u3055\u308c\u308b\u3068\u3001\u305d\u308c\u3089\u306e\u30c6\u30fc\u30d6\u30eb\u3078\u306e\u30af\u30a8\u30ea\u306f\u901a\u5e38\u306f\u308b\u304b\u306b\u901f\u304f\u306a\u308a\u307e\u3059\u3002\n\u30c6\u30fc\u30d6\u30eb \"oc_cards\"\u306e\u30a4\u30f3\u30c7\u30c3\u30af\u30b9 \"cards_abiduri\"\u304c\u898b\u3064\u304b\u308a\u307e\u305b\u3093\u3002\nThe database is missing some primary keys. Due to the fact that adding primary keys on big tables could take some time they were not added automatically. By running \"occ db:add-missing-primary-keys\" those missing primary keys could be added manually while the instance keeps running.\nMissing primary key on table \"oc_federated_reshares\".\nMissing primary key on table \"oc_systemtag_object_mapping\".\nMissing primary key on table \"oc_comments_read_markers\".\nMissing primary key on table \"oc_collres_resources\".\nMissing primary key on table \"oc_collres_accesscache\".\nMissing primary key on table \"oc_filecache_extended\".\n\u30c7\u30fc\u30bf\u30d9\u30fc\u30b9\u5185\u306e\u3044\u304f\u3064\u304b\u306e\u5217\u3067\u3001big int\u3078\u306e\u5909\u63db\u304c\u884c\u308f\u308c\u3066\u3044\u307e\u305b\u3093\u3002 \u5927\u304d\u306a\u30c6\u30fc\u30d6\u30eb\u3067\u30ab\u30e9\u30e0\u30bf\u30a4\u30d7\u3092\u5909\u66f4\u3059\u308b\u3068\u6642\u9593\u304c\u304b\u304b\u308b\u3053\u3068\u304c\u3042\u308b\u305f\u3081\u3001\u81ea\u52d5\u7684\u306b\u306f\u5909\u66f4\u3055\u308c\u307e\u305b\u3093\u3067\u3057\u305f\u3002 'occ db\uff1aconvert-filecache-bigint'\u3092\u5b9f\u884c\u3059\u308b\u3053\u3068\u306b\u3088\u3063\u3066\u3001\u305d\u308c\u3089\u306e\u4fdd\u7559\u4e2d\u306e\u5909\u66f4\u306f\u624b\u52d5\u3067\u9069\u7528\u3067\u304d\u307e\u3059\u3002 \u3053\u306e\u64cd\u4f5c\u306f\u3001\u30a4\u30f3\u30b9\u30bf\u30f3\u30b9\u304c\u30aa\u30d5\u30e9\u30a4\u30f3\u306e\u9593\u306b\u884c\u3046\u5fc5\u8981\u304c\u3042\u308a\u307e\u3059\u3002 \u8a73\u7d30\u306b\u3064\u3044\u3066\u306f\u3053\u308c\u306b\u95a2\u3059\u308b\u30c9\u30ad\u30e5\u30e1\u30f3\u30c8\u30da\u30fc\u30b8\u3092\u8aad\u3093\u3067\u304f\u3060\u3055\u3044\u3002\nfederated_reshares.share_id\nfilecache_extended.fileid\nshare_external.id\nshare_external.parent\n\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u30ac\u30a4\u30c9 ↗\u3092\u518d\u78ba\u8a8d\u3057\u3066\u3001 \u30ed\u30b0 \u306b\u3042\u308b\u3059\u3079\u3066\u306e\u30a8\u30e9\u30fc\u3084\u8b66\u544a\u3092\u78ba\u8a8d\u3057\u3066\u304f\u3060\u3055\u3044\u3002<\/pre>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n
\n
\u30c7\u30fc\u30bf\u30d9\u30fc\u30b9\u306b\u3044\u304f\u3064\u304b\u306e\u30a4\u30f3\u30c7\u30c3\u30af\u30b9\u304c\u3042\u308a\u307e\u305b\u3093\u3002<\/h2>\n
\n
\n
\u30c7\u30fc\u30bf\u30d9\u30fc\u30b9\u304b\u3089\u4fee\u6b63\u3057\u3066\u3044\u304d\u307e\u3059\uff0e\u307e\u3042\u66f8\u3044\u3066\u3042\u308b\u30b3\u30de\u30f3\u30c9\u3092\u53e9\u304f\u3060\u3051\u3067\u3059\u304c\uff0e<\/p>\n<\/div>\n
\n
\n
$ sudo -u www-data php ${NEXTCLOUDPATH}\/occ db:add-missing-indices\nCheck indices of the share table.\nCheck indices of the filecache table.\nCheck indices of the twofactor_providers table.\nCheck indices of the login_flow_v2 table.\nCheck indices of the whats_new table.\nCheck indices of the cards table.\nAdding cards_abiduri index to the cards table, this can take some time...\ncards table updated successfully.\nCheck indices of the cards_properties table.\nCheck indices of the calendarobjects_props table.\nCheck indices of the schedulingobjects table.\nCheck indices of the oc_properties table.<\/pre>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n
\n
The database is missing some primary keys.<\/h2>\n
\n
\n
\n
\n
The database is missing some primary keys. Due to the fact that adding primary keys on big tables could take some time they were not added automatically. By running “occ db:add-missing-primary-keys” those missing primary keys could be added manually while the instance keeps running.
\nMissing primary key on table “oc_federated_reshares”.
\nMissing primary key on table “oc_systemtag_object_mapping”.
\nMissing primary key on table “oc_comments_read_markers”.
\nMissing primary key on table “oc_collres_resources”.
\nMissing primary key on table “oc_collres_accesscache”.
\nMissing primary key on table “oc_filecache_extended”.<\/p>\n<\/div>\n<\/blockquote>\n<\/div>\n
\n
\n
$ sudo -u www-data php ${NEXTCLOUDPATH}\/occ db:add-missing-primary-keys\nCheck primary keys.\nAdding primary key to the federated_reshares table, this can take some time...\nfederated_reshares table updated successfully.\nAdding primary key to the systemtag_object_mapping table, this can take some time...\nsystemtag_object_mapping table updated successfully.\nAdding primary key to the comments_read_markers table, this can take some time...\ncomments_read_markers table updated successfully.\nAdding primary key to the collres_resources table, this can take some time...\ncollres_resources table updated successfully.\nAdding primary key to the collres_accesscache table, this can take some time...\ncollres_accesscache table updated successfully.\nAdding primary key to the filecache_extended table, this can take some time...\nfilecache_extended table updated successfully.<\/pre>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n
\n
\u30c7\u30fc\u30bf\u30d9\u30fc\u30b9\u5185\u306e\u3044\u304f\u3064\u304b\u306e\u5217\u3067\u3001big int\u3078\u306e\u5909\u63db\u304c\u884c\u308f\u308c\u3066\u3044\u307e\u305b\u3093\u3002<\/h2>\n
\n
\n
\n
\n
\u30c7\u30fc\u30bf\u30d9\u30fc\u30b9\u5185\u306e\u3044\u304f\u3064\u304b\u306e\u5217\u3067\u3001big int\u3078\u306e\u5909\u63db\u304c\u884c\u308f\u308c\u3066\u3044\u307e\u305b\u3093\u3002 \u5927\u304d\u306a\u30c6\u30fc\u30d6\u30eb\u3067\u30ab\u30e9\u30e0\u30bf\u30a4\u30d7\u3092\u5909\u66f4\u3059\u308b\u3068\u6642\u9593\u304c\u304b\u304b\u308b\u3053\u3068\u304c\u3042\u308b\u305f\u3081\u3001\u81ea\u52d5\u7684\u306b\u306f\u5909\u66f4\u3055\u308c\u307e\u305b\u3093\u3067\u3057\u305f\u3002 ‘occ db\uff1aconvert-filecache-bigint\u2019\u3092\u5b9f\u884c\u3059\u308b\u3053\u3068\u306b\u3088\u3063\u3066\u3001\u305d\u308c\u3089\u306e\u4fdd\u7559\u4e2d\u306e\u5909\u66f4\u306f\u624b\u52d5\u3067\u9069\u7528\u3067\u304d\u307e\u3059\u3002 \u3053\u306e\u64cd\u4f5c\u306f\u3001\u30a4\u30f3\u30b9\u30bf\u30f3\u30b9\u304c\u30aa\u30d5\u30e9\u30a4\u30f3\u306e\u9593\u306b\u884c\u3046\u5fc5\u8981\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n<\/div>\n<\/blockquote>\n<\/div>\n
\n
\n
$ sudo -u www-data php ${NEXTCLOUDPATH}\/occ db:convert-filecache-bigint\nFollowing columns will be updated:\n\n* federated_reshares.share_id\n* filecache_extended.fileid\n* share_external.id\n* share_external.parent\n\nThis can take up to hours, depending on the number of files in your instance!\nContinue with the conversion (y\/n)? [n] y<\/pre>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n
\n
The old server-side-encryption format is enabled. We recommend disabling this.<\/h2>\n
\n
\n
\u3053\u3053\u306fE2EE\u3067\u4f7f\u3046\u30b5\u30fc\u30d0\u30b5\u30a4\u30c9\u306e\u6697\u53f7\u5316\u5f62\u5f0f\u3067\u53e4\u3044\u5f62\u5f0f\u304c\u6709\u52b9\u306b\u306a\u3063\u3066\u3044\u308b\u306e\u3092\u7121\u52b9\u306b\u3057\u305f\u307b\u3046\u304c\u3044\u3044\u3088\u3063\u3066\u8b66\u544a\u306e\u3088\u3046\u3067\u3059\uff0e<\/p>\n<\/div>\n
\n
\n
\n
The old server-side-encryption format is enabled. We recommend disabling this. For more details see the documentation.<\/p>\n<\/div>\n<\/blockquote>\n<\/div>\n
\n
\u30c9\u30ad\u30e5\u30e1\u30f3\u30c8\u3092\u53c2\u8003\u306b\uff0c
\nhttps:\/\/docs.nextcloud.com\/server\/20\/admin_manual\/configuration_files\/encryption_migration.html<\/a><\/p>\n<\/div>\n
\n
\u53e4\u3044\u5f62\u5f0f\u304c\u4f7f\u308f\u308c\u3066\u3044\u308b\u304b\u3092\u78ba\u8a8d\u3057\u307e\u3059\uff0e<\/p>\n<\/div>\n
\n
\n
$ sudo -u www-data php ${NEXTCLOUDPATH}\/occ encryption:scan:legacy-format\nScanning all files for legacy encryption\nScanning all files for matoken\nScanning all files for hoge\n  :\n\nencryption:scan:legacy-format<\/pre>\n<\/div>\n<\/div>\n
\n
\u53e4\u3044\u5f62\u5f0f\u306f\u4f7f\u308f\u308c\u3066\u3044\u306a\u304b\u3063\u305f\u306e\u3067\u8a2d\u5b9a( ${NEXTCLOUDPATH\/config\/config.php )\u3067\u660e\u793a\u7684\u306b\u7121\u52b9\u306b\u3057\u3066\u3057\u307e\u3044\u307e\u3059\uff0e<\/p>\n<\/div>\n
\n
\n
-  'encryption.legacy_format_support' => false,\n+  'encryption.legacy_format_support' => true,\n<\/pre>\n<\/div>\n<\/div>\n
\n
\u3082\u3057\u53e4\u3044\u5f62\u5f0f\u304c\u6b8b\u3063\u3066\u3044\u3066\u79fb\u884c\u3057\u305f\u3044\u3067\u3082\u30de\u30b9\u30bf\u30fc\u30ad\u30fc\u3092\u8a2d\u5b9a\u3057\u3066\u3044\u306a\u3044\u3068\u3044\u3046\u5834\u5408\u306f\u8a72\u5f53\u30d5\u30a1\u30a4\u30eb\u306e\u6240\u6301\u30e6\u30fc\u30b6\u30fc\u306b\u30c7\u30fc\u30bf\u3092\u30b3\u30d4\u30fc\u3057\u76f4\u3057\u3066\u3082\u3089\u3046\u5fc5\u8981\u304c\u3042\u308a\u305d\u3046\u3067\u3059\uff0e\u3042\u307e\u308a\u3084\u308a\u305f\u304f\u306a\u3044\u4f5c\u696d\u3067\u3059\u306d\uff0e(\u4ee5\u4e0b\u306e\u30da\u30fc\u30b8\u3092\u898b\u308b\u3068\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u304c\u30a2\u30c3\u30d7\u30ed\u30fc\u30c9\u3057\u76f4\u3057\u3092\u3057\u3066\u304f\u308c\u308b\u306e\u304b\u3082\u3057\u308c\u306a\u3044)<\/p>\n<\/div>\n
\n