Uploaded image for project: 'OpenAM'
  1. OpenAM
  2. OPENAM-5304

XUI does not work behind HTTP reverse proxy if HTTP host header is not preserved

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 12.0.0, 13.0.0
    • Fix Version/s: 12.0.1, 13.0.0
    • Component/s: XUI
    • Environment:
      java version "1.7.0_72"
      Apache Tomcat 7.0.37
      OpenAM 13.0.0-SNAPSHOT Build 11848 (2014-December-12 02:37)
      Apache http server 2.2.26
    • Sprint:
      Sprint 77 - Sustaining
    • Support Ticket IDs:

      Description

      Setting up a http reverse proxy using mod_proxy/mod_proxy_http and proxy rule

      ProxyPass /openam http://openam-nightly.test.xyz:8080/openam
      ProxyPassReverse /openam http://openam-nightly.test.xyz:8080/openam
      ProxyPreserveHost Off
      

      and requesting the RP-URL for OpenAM console (e.g. http://login.test.net/openam/console) will end up in a redirect to the actual OpenAM instance URL.

      Workarounds

      • use mod_proxy_ajp or
        ProxyPass /openam http://openam-nightly.test.xyz:8080/openam
        ProxyPassReverse /openam http://openam-nightly.test.xyz:8080/openam
        ProxyPreserveHost On
        

      and configure OpenAM site or FqdnMapping (here com.sun.identity.server.fqdnMap[login.test.net]=login.test.net), set up DNS-alias mapping and update cookie domain setting in platform service if domain cookies are used.

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                peter.major Peter Major [X] (Inactive)
                Reporter:
                bthalmayr Bernhard Thalmayr
              • Votes:
                2 Vote for this issue
                Watchers:
                9 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved:

                  Time Tracking

                  Estimated:
                  Original Estimate - Not Specified
                  Not Specified
                  Remaining:
                  Remaining Estimate - Not Specified
                  Not Specified
                  Logged:
                  Time Spent - 4h
                  4h