Project

General

Profile

Bug #4113

CN http redirect uses specific hostname instead of RR

Added by Ben Leinfelder over 10 years ago. Updated over 10 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Chris Jones
Category:
d1_cn_buildout
Target version:
-
Start date:
Due date:
% Done:

100%

Milestone:
None
Product Version:
*
Story Points:
Sprint:

Description

When users navigate to http://cn.dataone.org/portal/ they are redirected to https://cn-ucsb-1.dataone.org/portal/ (or other hosts).
It should redirect to the RR hostname, not the specific hostname of any one CN. Otherwise, the shared session cookies will not be correct and the CILogon callback will not succeed.

All three CNs are configured in this manner.

Redirect permanent / https://cn-orc-1.dataone.org/
Redirect permanent / https://cn-ucsb-1.dataone.org/
Redirect permanent / https://cn-unm-1.dataone.org/

Related issues

Duplicated by Infrastructure - Bug #4174: Accessing cn.dataone.org through http causes redirect to https of specific machine hostname Closed

Associated revisions

Revision 39ef1dd2
Added by Chris Jones over 10 years ago

For Apache configurations on the CNs, use the cn.router.hostname value rather than the cn.hostname value. This allows the HTTP to HTTPS redirect to work correctly. All other services still get configured with cn.hostname.
Refs and closes #4174 , #4113

Revision 12924
Added by Chris Jones over 10 years ago

For Apache configurations on the CNs, use the cn.router.hostname value rather than the cn.hostname value. This allows the HTTP to HTTPS redirect to work correctly. All other services still get configured with cn.hostname.
Refs and closes #4174 , #4113

Revision 12924
Added by Chris Jones over 10 years ago

For Apache configurations on the CNs, use the cn.router.hostname value rather than the cn.hostname value. This allows the HTTP to HTTPS redirect to work correctly. All other services still get configured with cn.hostname.
Refs and closes #4174 , #4113

History

#1 Updated by Chris Jones over 10 years ago

  • Category set to d1_cn_buildout
  • Status changed from New to Closed

I've updated the postinst to use cn.router.hostname in the Apache cn-ssl config file. I've also manually changed this on the 3 production CNs, and have issued /etc/init.d/apache2 reload on UCSB and UNM. The reload on ORC (in the round robin) will happen upon upgrade this week.

Also available in: Atom PDF

Add picture from clipboard (Maximum size: 14.8 MB)