Private Cloud Licensed Version Error: "Security Problem

Posted by Rollbase User on 08-Aug-2013 19:06

We have installed our licence. Now, when navigating to the User management page or many other pages/objects with /m/ in the path: /master/m/main.jsp?pageId=2055&tabId=2556 we get this error: "Security Problem Illegal HTTP redirection" No other errors in the logs I'm afraid. When we remove the license.xml file and restart Tomcat it works again so only a problem when the licence is enabled.

All Replies

Posted by Admin on 08-Aug-2013 19:13

It seems to be any URL with a ? and GET variables after if that helps?

Posted by Admin on 08-Aug-2013 19:48

Hi surferking. We are another Private Cloud customer with RollBase. I seem to recall this error occurring when the system tries to redirect from one Host-Name to another. Is it possible that the url you are using for your site doesn't exactly match the one identified in the license?



Also, there is a very helpful tool called Fiddler (http://fiddler2.com/) which is very useful for diagnosing these types of issues - it will show the traffic between your browser and server, including urls and redirects.

Posted by Admin on 09-Aug-2013 05:27

Thanks, much appreciated, will post if we can find the cause for future reference.

Posted by Admin on 09-Aug-2013 06:38

Looks like it was that we had our 'http' site automatically redirecting to 'https' in the Apache config. It was...



Redirect / https://erp.ourdomain.com/



Updated to...



ProxyPass / http://localhost:8080/

ProxyPassReverse / http://localhost:8080/



--

Ross

Posted by Admin on 12-Aug-2013 08:50

FTR, this wasn't resolved by the above in the end. I was setting it up using some simple 'mod_proxy' like I have with all my other Tomcat-based servers, which seemed to work in evaluation mode, but only half-work with the license installed.



Further RTFM'ing showed that it's best to set it up using 'mod_jk' with two worker processes. Having done this, it now seems to be working fully as expected.



I suspect it's probably possible to set it up using 'mod_proxy' with a slightly more complicated set of proxy rules than I was using, but I haven't gone there with this.

This thread is closed