Dear Community, perhaps you can help me.
First, my question:
Has anyone here successfully opened files stored on your Nethserver8 SMB shares using a Nextcloud Office/Collabora CODE Server combination?
If so, what obstacles did you encounter?
If not, what have you tried so far, and what ultimately led to your failure?
I’m running Nextcloud alongside Nethserver8 (not as a Podman container). Nethserver8 is the Active Directory master and provides files via SMB. Nextcloud is connected to Active Directory via LDAP (Nextcloud app) and provides access to the SMB shares. This generally works quite well (with minor limitations).
Our initial attempts with Nextcloud Office in combination with the Collabora CODE Server were some time ago and were unfortunately unsuccessful. Nextcloud Office could only open local files and not files from SMB shares (External Storage Nextcloud app). The error message was “Unauthorized WOPI host,” and we couldn’t… Finding a “quick” solution was the goal. Instead, the “solution” was to rely on “ONLYOFFICE” (Nextcloud app) and the “Community Document Server” (Nextcloud app), because ONLYOFFICE could open and save SMB files without any problems.
Unfortunately, in practice, it turned out that in some cases, files “lost” previously applied changes, as if the changes had never been made. Only the modification date indicated that work had been done. I couldn’t find a cause for this.
After upgrading to version 33.03 on a Nextcloud test instance, the “Community Document Server” stopped working. Therefore, I considered trying again with “Nextcloud Office” and the Collabora CODE Server.
This time, I first installed the corresponding Collabora container on Nethserver8, configured everything, and entered it into Nextcloud. Nextcloud Office now opens local files (as in previous attempts) but not SMB-stored files. I’ve already tried everything imaginable, including possible and impossible entries in… The coolwsd.xml file changes absolutely nothing.
The most specific message I could get from the “Collabora Server” container looks like this:
wsd-00001-00029 2026-06-01 21:28:44.039986 +0000 [ websrv_poll ] ERR #25: WOPI::CheckFileInfo returned403 (Forbidden) Forbidden for URI [``https://nextcloud.domain.tld/index.php/apps/richdocuments/wopi/files/42436_oct9dn7pvtxh?access_token=iUzikAuBnld992lkQueP8Ub8PaLZ3BQ5&access_token_ttl=0``]. Headers: Server: nginx/1.26.1 / Date: Mon, 01 Jun 2026 21:29:00 GMT / Content-Type: application/json; charset=utf-8 / Content-Length: 2 / Connection: keep-alive / Strict-Transport-Security: max-age=15552000; includeSubDomains / X-Content-Type-Options: nosniff / X-Frame-Options: SAMEORIGIN / X-Permitted-Cross-Domain-Policies: none / X-Robots-Tag: noindex, nofollow / Referrer-Policy: no-referrer / Upgrade: h2 / Set-Cookie: oct9dn7pvtxh=s3gpcb30mv5vjot7jn3ok3gt9b; path=/; secure; HttpOnly; SameSite=Lax / Content-Security-Policy: default-src ‘none’;base-uri ‘none’;manifest-src ‘self’;frame-ancestors ‘none’ / X-Request-Id: ah35m-7kUwTXbaKbNqn6LQAAAAc / Cache-Control: no-cache, no-store, must-revalidate / Feature-Policy: autoplay ‘none’;camera ‘none’;fullscreen ‘none’;geolocation ‘none’;microphone ‘none’;payment ‘none’ / X-User-Id: D3C54344-67A0-4264-B5AE-8669462A5638 Body: []| wsd/wopi/CheckFileInfo.cpp:103
wsd-00001-00029 2026-06-01 21:28:44.040049 +0000 [ websrv_poll ] ERR #25: Access denied to CheckFileInfo [``https://nextcloud.domain.tld/index.php/apps/richdocuments/wopi/files/42436_oct9dn7pvtxh?access_token=iUzikAuBnld992lkQueP8Ub8PaLZ3BQ5&access_token_ttl=0``]| wsd/wopi/CheckFileInfo.cpp:115
Nextcloud and Collabora can communicate freely via port 443.
The local Collabora server is (currently) publicly accessible via all paths.
I can also connect the local Collabora server to a remote Nextcloud instance (version 32), but even there it only opens local files and not files from the Nethserver8 SMB share.
Thanks to mrmarkuz’s instructions, I also made the necessary adjustments in coolwsd to extend the list of allowed hosts to include alternative names:
(as the external and internal hostnames of Nextcloud are different)
<alias_groups desc="default mode is 'first' it allows only the first host connecting to coolwsd when groups are not defined. set mode to 'groups' and define group to allow multiple host and its aliases" mode="groups">
<group>
<host desc="hostname to allow or deny." allow="true">scheme://nextcloud.domain.tld:443</host>
<alias desc="regex pattern of aliasname">scheme://nextcloud.domain.internal:443</alias>
<alias desc="regex pattern of aliasname">scheme://nxtcl1.domain.internal:443</alias>
</group>
<group>
<host desc="hostname to allow or deny." allow="true">scheme://domainsrv.domain.tld:443</host>
<alias desc="regex pattern of aliasname">scheme://domainsrv.domain.internal:443</alias>
<alias desc="regex pattern of aliasname">scheme://neth81.domain.internal:443</alias>
</group>
</alias_groups>
But none of that helped, and I’m out of ideas on where else to look or what else I could try.
Hence my initial question:
Has anyone here successfully opened files stored on your Nethserver8 SMB shares using a Nextcloud Office/Collabora CODE Server combination?
Regards
Yummiweb