Login  Register

Re: Re: Orbeon and apache front-end

Posted by elphin.stenner on Dec 17, 2010; 10:21am
URL: https://discuss.orbeon.com/Orbeon-and-apache-front-end-tp3085274p3092328.html

We changed the regexp on mod_security. That removed the error. However, searching the application logs, I found that we get the following error when clicking the 'search' button :
2010-12-17 11:13:44,817 ERROR [org.orbeon.oxf.xforms.processor.XFormsServer] - XForms - submission - xforms-submit-error throwable: org.orbeon.oxf.xforms.XFormsModelSubmission$XFormsSubmissionException: line 29 of oxf:/config/xforms-widgets.xsl (processing submission response): xforms:submission for submission id: search-submission, error code received when submitting instance: 403
oxf:/config/xforms-widgets.xsl, line 29, column -1: xforms:submission for submission id: search-submission, error code received when submitting instance: 403
        at org.orbeon.oxf.xforms.XFormsModelSubmission.performDefaultAction(XFormsModelSubmission.java:1052)
        at org.orbeon.oxf.xforms.XFormsContainer.dispatchEvent(XFormsContainer.java:776)
        at org.orbeon.oxf.xforms.XFormsContainingDocument.dispatchEvent(XFormsContainingDocument.java:1020)
        at org.orbeon.oxf.xforms.action.actions.XFormsSendAction.execute(XFormsSendAction.java:53)
        at org.orbeon.oxf.xforms.action.XFormsActionInterpreter.runSingleIteration(XFormsActionInterpreter.java:270)
        at org.orbeon.oxf.xforms.action.XFormsActionInterpreter.runAction(XFormsActionInterpreter.java:230)
        at org.orbeon.oxf.xforms.event.XFormsEventHandlerImpl.handleEvent(XFormsEventHandlerImpl.java:161)
        at org.orbeon.oxf.xforms.XFormsContainer.dispatchEvent(XFormsContainer.java:757)
        at org.orbeon.oxf.xforms.XFormsContainingDocument.dispatchEvent(XFormsContainingDocument.java:1020)
        at org.orbeon.oxf.xforms.XFormsContainingDocument.executeExternalEvent(XFormsContainingDocument.java:1007)
        at org.orbeon.oxf.xforms.processor.XFormsServer.doIt(XFormsServer.java:384)
        at org.orbeon.oxf.xforms.processor.XFormsServer.access$000(XFormsServer.java:56)
        at org.orbeon.oxf.xforms.processor.XFormsServer$1.readImpl(XFormsServer.java:82)
        at org.orbeon.oxf.processor.ProcessorImpl$6.read(ProcessorImpl.java:995)
        at org.orbeon.oxf.processor.ProcessorImpl$ProcessorOutputImpl.read(ProcessorImpl.java:1178)
        at org.orbeon.oxf.processor.ProcessorImpl.readInputAsSAX(ProcessorImpl.java:350)
        at org.orbeon.oxf.processor.pipeline.TeeProcessor.access$000(TeeProcessor.java:36)
        at org.orbeon.oxf.processor.pipeline.TeeProcessor$1.readImpl(TeeProcessor.java:59)
        at org.orbeon.oxf.processor.ProcessorImpl$6.read(ProcessorImpl.java:995)
        at org.orbeon.oxf.processor.ProcessorImpl$ProcessorOutputImpl.read(ProcessorImpl.java:1178)
        at org.orbeon.oxf.processor.ProcessorImpl.readInputAsSAX(ProcessorImpl.java:350)
        at org.orbeon.oxf.processor.ProcessorImpl.readInputAsTinyTree(ProcessorImpl.java:377)
        at org.orbeon.oxf.processor.ProcessorImpl$4.read(ProcessorImpl.java:410)
        at org.orbeon.oxf.processor.ProcessorImpl.readCacheInputAsObject(ProcessorImpl.java:453)
        at org.orbeon.oxf.processor.ProcessorImpl.readCacheInputAsTinyTree(ProcessorImpl.java:408)
        at org.orbeon.oxf.processor.pipeline.choose.ConcreteChooseProcessor.start(ConcreteChooseProcessor.java:189)
        at org.orbeon.oxf.processor.pipeline.PipelineProcessor$11.run(PipelineProcessor.java:644)
        at org.orbeon.oxf.processor.ProcessorImpl.executeChildren(ProcessorImpl.java:519)
        at org.orbeon.oxf.processor.pipeline.PipelineProcessor.start(PipelineProcessor.java:641)
        at org.orbeon.oxf.processor.pipeline.choose.ConcreteChooseProcessor.start(ConcreteChooseProcessor.java:242)
        at org.orbeon.oxf.processor.pipeline.PipelineProcessor$11.run(PipelineProcessor.java:644)
        at org.orbeon.oxf.processor.ProcessorImpl.executeChildren(ProcessorImpl.java:519)
        at org.orbeon.oxf.processor.pipeline.PipelineProcessor.start(PipelineProcessor.java:641)
        at org.orbeon.oxf.pipeline.InitUtils.runProcessor(InitUtils.java:92)
        at org.orbeon.oxf.webapp.ProcessorService.service(ProcessorService.java:96)
        at org.orbeon.oxf.servlet.OrbeonServletDelegate.service(OrbeonServletDelegate.java:138)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
        at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233)
        at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)
        at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127)
        at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
        at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
        at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:298)
        at org.apache.jk.server.JkCoyoteHandler.invoke(JkCoyoteHandler.java:190)
        at org.apache.jk.common.HandlerRequest.invoke(HandlerRequest.java:291)
        at org.apache.jk.common.ChannelSocket.invoke(ChannelSocket.java:769)
        at org.apache.jk.common.ChannelSocket.processConnection(ChannelSocket.java:698)
        at org.apache.jk.common.ChannelSocket$SocketConnection.runIt(ChannelSocket.java:891)
        at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:690)
        at java.lang.Thread.run(Thread.java:619)


A similar error occurs when trying to add a form.

Furthermore, the front end indicates "client connexion refused by server configuration."
My guess is that there is something I need to configure to allow orbeon to be accessed via the front-end, but I don't quite know what.
I found a suspisions "HTTP/1.1" in orbeon/apps/doc/pages/processors-generators-request.xml, but I'm not sure about that.
Should it be changed to AJP/1.3 ?

This is what we have :
                    <protocol>HTTP/1.1</protocol>
                    <remote-addr>127.0.0.1</remote-addr>
                    <remote-host>localhost</remote-host>
                    <scheme>http</scheme>
                    <server-name>localhost</server-name>
                    <server-port>8080</server-port>

thanks.

P.S. : answers should primarily be sent to Eric Roze, since my job ends today.

Le 14/12/2010 03:29, Erik Bruchez a écrit :
When does this occur? Upon the client sending an Ajax request?

Looking with Firebug, I see we send: application/xml; charset=UTF-8

Not sure why the charset is there, but application/xml tends to be the
recommended Content-Type for XML.

It seems your regexp is only allowing text/xml, not application/xml,
if I am not mistaken.

-Erik

On Mon, Dec 13, 2010 at 2:55 AM, elphin.stenner
[hidden email] wrote:
  
Hi,

I am currently using Orbeon Forms bundled with a java web application.

Orbeon works fine when accessing the tomcat, but when I configure an access
via an apache front-end, I get the following error :

[10/Dec/2010:09:55:26 +0100]
[candidatures.univ-ubs.fr/sid#835a0f8][rid#8836b78][/candidatures/xforms-server][1]
Access denied with code 501 (phase 2). Match of "rx
(?:^(?:application\\/x-www-form-urlencoded(?:;(?:\\s?charset\\s?=\\s?[\\w\\d\\-]{1,18})?)??$|multipart/form-data;)|text/xml)"
against "REQUEST_HEADERS:Content-Type" required. [file
"/var/lib/modsecurity2/modsecurity_crs_30_http_policy.conf"] [line "69"] [id
"960010"] [msg "Request content type is not allowed by policy"] [severity
"WARNING"] [tag "POLICY/ENCODING_NOT_ALLOWED"]


As far as I understand, the front-end has a security rule that requests a
content-type element and denies access if there isn't one.

The front-end security rules can't be loosened (University security polocy),
so I guess I'll have to add the content-type to orbeon.
The thing is : I'm completely new to Orbeon, and haven't got a clue as to
how that is done.

Can anyone help me ?

Thanks,

P.S. : please add [hidden email] to any replies

--
Elphin STENNER
courriel: [hidden email]
UNIVERSITE DE BRETAGNE SUD



--
You receive this message as a subscriber of the [hidden email] mailing
list.
To unsubscribe: [hidden email]
For general help: [hidden email]
OW2 mailing lists service home page: http://www.ow2.org/wws


    


-- 
Elphin STENNER
courriel: [hidden email]
UNIVERSITE DE BRETAGNE SUD


--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
OW2 mailing lists service home page: http://www.ow2.org/wws