Posted by elphin.stenner on Dec 13, 2010; 10:55am
URL: https://discuss.orbeon.com/Orbeon-and-apache-front-end-tp3085274.html

Hi,

I am currently using Orbeon Forms bundled with a java web application.

Orbeon works fine when accessing the tomcat, but when I configure an
access via an apache front-end, I get the following error :

[10/Dec/2010:09:55:26 +0100] [candidatures.univ-ubs.fr/sid#835a0f8][rid#8836b78][/candidatures/xforms-server][1] Access denied with code 501 (phase 2). Match of "rx (?:^(?:application\\/x-www-form-urlencoded(?:;(?:\\s?charset\\s?=\\s?[\\w\\d\\-]{1,18})?)??$|multipart/form-data;)|text/xml)" against "REQUEST_HEADERS:Content-Type" required. [file "/var/lib/modsecurity2/modsecurity_crs_30_http_policy.conf"] [line "69"] [id "960010"] [msg "Request content type is not allowed by policy"] [severity "WARNING"] [tag "POLICY/ENCODING_NOT_ALLOWED"]


As far as I understand, the front-end has a security rule that requests
a content-type element and denies access if there isn't one.

The front-end security rules can't be loosened (University security
polocy), so I guess I'll have to add the content-type to orbeon.
The thing is : I'm completely new to Orbeon, and haven't got a clue as
to how that is done.

Can anyone help me ?

Thanks,

P.S. : please add [hidden email] to any replies

--
Elphin STENNER
courriel: [hidden email]
UNIVERSITE DE BRETAGNE SUD



--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
OW2 mailing lists service home page: http://www.ow2.org/wws