Wrong use of opennms.web.base-url
Description
Acceptance / Success Criteria
None
Lucidchart Diagrams
Activity
Show:
Jesse White December 9, 2015 at 4:42 PM
Fixed in foundation-2016 with 886395e8bdeca498071ed7412d6ae35d1f90fc7e.
fooker December 2, 2015 at 10:56 AM
Please review and merge: https://github.com/OpenNMS/opennms/pull/481
Fixed
Details
Assignee
fookerfookerReporter
Sven ReissmannSven ReissmannComponents
Fix versions
Affects versions
Priority
Major
Details
Details
Assignee
fookerReporter
Sven ReissmannComponents
Fix versions
Affects versions
Priority
MajorPagerDuty
PagerDuty Incident
PagerDuty
PagerDuty Incident
PagerDuty
PagerDuty Incident
Created December 2, 2015 at 10:51 AM
Updated January 4, 2016 at 3:18 PM
Resolved December 9, 2015 at 4:42 PM
The opennms.web.base-url allows to run OpenNMS behind a proxy, by just rewriting the host part of the URL with the value from the X-Forwarded-Host header. However, this header may contain a comma separated list of hostnames, if multiple proxy severs are used.
As an example, consider this setup:
OpenNMS (127.0.0.1:8089) <-- Local Proxy (opennms.company.local:443) <-- Proxy (opennms.domain.tld:443)
When using "opennms.web.base-url = https://%x%c/", this will result in URLs being rewritten to:
https://opennms.domain.tld%2C%20opennms.local