[one-users] Sunstone with nginx as reverse-proxy - server exception

[ML mail]

I have found out the problem with the 403 forbidden errors, I needed to pass the following HTTP headers in my nginx reverse proxy configuration:

                proxy_set_header        X-Real-IP $remote_addr;
                proxy_set_header        X-Forwarded-For $proxy_add_x_forwarded_for;
                proxy_set_header        Host $http_host;

Now everything works fine except for VNC. Any clues if it is possible to run VNC in Sunstone through an nginx HTTPS reverse proxy? Note here that my reverse proxy and Sunstone are on the same (frontend) server.

Regards
ML




On Tuesday, February 4, 2014 12:23 PM, ML mail <mlnospam at yahoo.com> wrote:
 
Hi Daniel,

Using Firefox and Firebug I can see that actually the requests which have trouble are those using AJAX, so the design/layout of Sunstone loads but no data, everything is empty. The requests do not give a 50x error but a 403 Forbidden. Here is a few example of them taken from the Network tab of Firebug:

3ms
GET vm?timeout=false
403 Forbidden
sunstone-frontend
9 B
192.168.100.170:443
 
80ms
GET image?timeout=true
403 Forbidden
sunstone-frontend
9 B
192.168.100.170:443
 
41ms
GET vnet?timeout=true
403 Forbidden
sunstone-frontend
9 B
192.168.100.170:443

Do you have any ideas what could be generating that 403?

Cheers,
ML





On Tuesday, February 4, 2014 12:01 PM, Daniel Molina <dmolina at opennebula.org> wrote:
 
Hi,



On 2 February 2014 00:06, ML mail <mlnospam at yahoo.com> wrote:

Hi,
>
>
>I am trying to setup nginx as HTTPS reverse proxy to sunstone as described in the OpenNebula3 book. I can get it to work up to the login screen but once logged I get the following error message from sunstone:
>
>
>It appears there was a server exception. Please check server's log.
>

Could yo check what request is causing this error? If you are using Chrome you can check it in the Network tab of the developer tools, you should look for a request returning a 500 error.

Cheers
 

>Checking sunstone.log or sunstone.error does not show any error. Anyone knows what could be wrong?
>
>
>Below is my nginx server setup:
>
>
>upstream sunstone {
>        server 127.0.0.1:9869;
>}
>
>server {
>        listen 443;
>        server_name
 sunstone-frontend;
>        ssl on;
>        ssl_certificate /etc/ssl/certs/sunstone.crt;
>        ssl_certificate_key /etc/ssl/private/sunstone.key;
>        location / {
>                proxy_pass http://sunstone;
>        }
>}
>
>
>Cheers,
>ML
>
>
>_______________________________________________
>Users mailing list
>Users at lists.opennebula.org
>http://lists.opennebula.org/listinfo.cgi/users-opennebula.org
>
>


-- 

--
Daniel Molina
Project Engineer
OpenNebula - Flexible Enterprise Cloud Made Simple
www.OpenNebula.org | dmolina at opennebula.org | @OpenNebula
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.opennebula.org/pipermail/users-opennebula.org/attachments/20140204/7bbbca53/attachment-0002.htm>