[one-users] ONE 3.8.3: Question about scheduling / Permission problen on Self Service UI

[Dietrich, Stefan]

On Di, 2013-01-29 at 11:40 +0100, Daniel Molina wrote:
> >
> >> > 2. If I use the OCCI self service ui, right after loggin in, I get an
> >> > red "Error: Forbidden" message. It looks like, this has to do with the
> >> > usage plots on the starting page. They are not shown to the user and
> >> > clicking on update, results in another "Forbidden" message.
> >> > This also happens with the oneadmin account, but it should have all the
> >> > rights? I am not sure which ACL bits I have to tweak.
> >>
> >> I think this error is not related to ACL rules since oneadmin bypass
> >> that module. Myabe it's just a cache problem, try restarting the
> >> occi-server and cleaning the browser cache.
> >
> > I tried to restart the occi-server and cleared the browser cache, but it
> > did not help. I have attached a part of oned.log, when I click on the
> > update button on the self service ui.
> > Not sure if this helps.
> 
> Everything seems to be correct in the logs.
> 
> Could you check, using the browser developer tools, what is exactly
> the request that gets the 403 error. It should contain a message in
> the body with more information. Could you also attach the
> /var/log/one/occi-server.log file?


I have fixed the problem.

It was a problem with the SSL reverse proxy running in front of the OCCI
service. The HTTP host header was not correctly set on it.

This was one of the 3 URLs which failed with the wrong Host header:
https://<OCCI Host>:8443/ui/accounting?title=Net+transfer
+rates&monitor_resources=NETTX%
2CNETRX&humanize_figures=true&start=1359846000&end=1359932400&interval=3600&show_date=false

The host header included the proxy host. After configuring it to no
longer do this, the graphs are displayed and the permission denied no
longer appears.

Sorry for the trouble, as this seems like a configuration problem on my
side.

Regards,
Stefan