Posted by
elphin.stenner on
Dec 17, 2010; 10:21am
URL: https://discuss.orbeon.com/Orbeon-and-apache-front-end-tp3085274p3092328.html
We changed the regexp on mod_security. That removed the error. However,
searching the application logs, I found that we get the following error
when clicking the 'search' button :
2010-12-17 11:13:44,817 ERROR
[org.orbeon.oxf.xforms.processor.XFormsServer] - XForms - submission -
xforms-submit-error throwable:
org.orbeon.oxf.xforms.XFormsModelSubmission$XFormsSubmissionException:
line 29 of oxf:/config/xforms-widgets.xsl (processing submission
response): xforms:submission for submission id: search-submission,
error code received when submitting instance: 403
oxf:/config/xforms-widgets.xsl, line 29, column -1: xforms:submission
for submission id: search-submission, error code received when
submitting instance: 403
at
org.orbeon.oxf.xforms.XFormsModelSubmission.performDefaultAction(XFormsModelSubmission.java:1052)
at
org.orbeon.oxf.xforms.XFormsContainer.dispatchEvent(XFormsContainer.java:776)
at
org.orbeon.oxf.xforms.XFormsContainingDocument.dispatchEvent(XFormsContainingDocument.java:1020)
at
org.orbeon.oxf.xforms.action.actions.XFormsSendAction.execute(XFormsSendAction.java:53)
at
org.orbeon.oxf.xforms.action.XFormsActionInterpreter.runSingleIteration(XFormsActionInterpreter.java:270)
at
org.orbeon.oxf.xforms.action.XFormsActionInterpreter.runAction(XFormsActionInterpreter.java:230)
at
org.orbeon.oxf.xforms.event.XFormsEventHandlerImpl.handleEvent(XFormsEventHandlerImpl.java:161)
at
org.orbeon.oxf.xforms.XFormsContainer.dispatchEvent(XFormsContainer.java:757)
at
org.orbeon.oxf.xforms.XFormsContainingDocument.dispatchEvent(XFormsContainingDocument.java:1020)
at
org.orbeon.oxf.xforms.XFormsContainingDocument.executeExternalEvent(XFormsContainingDocument.java:1007)
at
org.orbeon.oxf.xforms.processor.XFormsServer.doIt(XFormsServer.java:384)
at
org.orbeon.oxf.xforms.processor.XFormsServer.access$000(XFormsServer.java:56)
at
org.orbeon.oxf.xforms.processor.XFormsServer$1.readImpl(XFormsServer.java:82)
at
org.orbeon.oxf.processor.ProcessorImpl$6.read(ProcessorImpl.java:995)
at
org.orbeon.oxf.processor.ProcessorImpl$ProcessorOutputImpl.read(ProcessorImpl.java:1178)
at
org.orbeon.oxf.processor.ProcessorImpl.readInputAsSAX(ProcessorImpl.java:350)
at
org.orbeon.oxf.processor.pipeline.TeeProcessor.access$000(TeeProcessor.java:36)
at
org.orbeon.oxf.processor.pipeline.TeeProcessor$1.readImpl(TeeProcessor.java:59)
at
org.orbeon.oxf.processor.ProcessorImpl$6.read(ProcessorImpl.java:995)
at
org.orbeon.oxf.processor.ProcessorImpl$ProcessorOutputImpl.read(ProcessorImpl.java:1178)
at
org.orbeon.oxf.processor.ProcessorImpl.readInputAsSAX(ProcessorImpl.java:350)
at
org.orbeon.oxf.processor.ProcessorImpl.readInputAsTinyTree(ProcessorImpl.java:377)
at
org.orbeon.oxf.processor.ProcessorImpl$4.read(ProcessorImpl.java:410)
at
org.orbeon.oxf.processor.ProcessorImpl.readCacheInputAsObject(ProcessorImpl.java:453)
at
org.orbeon.oxf.processor.ProcessorImpl.readCacheInputAsTinyTree(ProcessorImpl.java:408)
at
org.orbeon.oxf.processor.pipeline.choose.ConcreteChooseProcessor.start(ConcreteChooseProcessor.java:189)
at
org.orbeon.oxf.processor.pipeline.PipelineProcessor$11.run(PipelineProcessor.java:644)
at
org.orbeon.oxf.processor.ProcessorImpl.executeChildren(ProcessorImpl.java:519)
at
org.orbeon.oxf.processor.pipeline.PipelineProcessor.start(PipelineProcessor.java:641)
at
org.orbeon.oxf.processor.pipeline.choose.ConcreteChooseProcessor.start(ConcreteChooseProcessor.java:242)
at
org.orbeon.oxf.processor.pipeline.PipelineProcessor$11.run(PipelineProcessor.java:644)
at
org.orbeon.oxf.processor.ProcessorImpl.executeChildren(ProcessorImpl.java:519)
at
org.orbeon.oxf.processor.pipeline.PipelineProcessor.start(PipelineProcessor.java:641)
at
org.orbeon.oxf.pipeline.InitUtils.runProcessor(InitUtils.java:92)
at
org.orbeon.oxf.webapp.ProcessorService.service(ProcessorService.java:96)
at
org.orbeon.oxf.servlet.OrbeonServletDelegate.service(OrbeonServletDelegate.java:138)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
at
org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233)
at
org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)
at
org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127)
at
org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
at
org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
at
org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:298)
at
org.apache.jk.server.JkCoyoteHandler.invoke(JkCoyoteHandler.java:190)
at
org.apache.jk.common.HandlerRequest.invoke(HandlerRequest.java:291)
at
org.apache.jk.common.ChannelSocket.invoke(ChannelSocket.java:769)
at
org.apache.jk.common.ChannelSocket.processConnection(ChannelSocket.java:698)
at
org.apache.jk.common.ChannelSocket$SocketConnection.runIt(ChannelSocket.java:891)
at
org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:690)
at java.lang.Thread.run(Thread.java:619)
A similar error occurs when trying to add a form.
Furthermore, the front end indicates "client connexion refused by
server configuration."
My guess is that there is something I need to configure to allow orbeon
to be accessed via the front-end, but I don't quite know what.
I found a suspisions "HTTP/1.1" in
orbeon/apps/doc/pages/processors-generators-request.xml, but I'm not
sure about that.
Should it be changed to AJP/1.3 ?
This is what we have :
<protocol>HTTP/1.1</protocol>
<remote-addr>127.0.0.1</remote-addr>
<remote-host>localhost</remote-host>
<scheme>http</scheme>
<server-name>localhost</server-name>
<server-port>8080</server-port>
thanks.
P.S. : answers should primarily be sent to Eric Roze, since my job ends
today.
Le 14/12/2010 03:29, Erik Bruchez a écrit :
When does this occur? Upon the client sending an Ajax request?
Looking with Firebug, I see we send: application/xml; charset=UTF-8
Not sure why the charset is there, but application/xml tends to be the
recommended Content-Type for XML.
It seems your regexp is only allowing text/xml, not application/xml,
if I am not mistaken.
-Erik
On Mon, Dec 13, 2010 at 2:55 AM, elphin.stenner
[hidden email] wrote:
Hi,
I am currently using Orbeon Forms bundled with a java web application.
Orbeon works fine when accessing the tomcat, but when I configure an access
via an apache front-end, I get the following error :
[10/Dec/2010:09:55:26 +0100]
[candidatures.univ-ubs.fr/sid#835a0f8][rid#8836b78][/candidatures/xforms-server][1]
Access denied with code 501 (phase 2). Match of "rx
(?:^(?:application\\/x-www-form-urlencoded(?:;(?:\\s?charset\\s?=\\s?[\\w\\d\\-]{1,18})?)??$|multipart/form-data;)|text/xml)"
against "REQUEST_HEADERS:Content-Type" required. [file
"/var/lib/modsecurity2/modsecurity_crs_30_http_policy.conf"] [line "69"] [id
"960010"] [msg "Request content type is not allowed by policy"] [severity
"WARNING"] [tag "POLICY/ENCODING_NOT_ALLOWED"]
As far as I understand, the front-end has a security rule that requests a
content-type element and denies access if there isn't one.
The front-end security rules can't be loosened (University security polocy),
so I guess I'll have to add the content-type to orbeon.
The thing is : I'm completely new to Orbeon, and haven't got a clue as to
how that is done.
Can anyone help me ?
Thanks,
P.S. : please add [hidden email] to any replies
--
Elphin STENNER
courriel: [hidden email]
UNIVERSITE DE BRETAGNE SUD
--
You receive this message as a subscriber of the [hidden email] mailing
list.
To unsubscribe: [hidden email]
For general help: [hidden email]
OW2 mailing lists service home page: http://www.ow2.org/wws
--
Elphin STENNER
courriel: [hidden email]
UNIVERSITE DE BRETAGNE SUD
--
You receive this message as a subscriber of the
[hidden email] mailing list.
To unsubscribe: mailto:
[hidden email]
For general help: mailto:
[hidden email]?subject=help
OW2 mailing lists service home page:
http://www.ow2.org/wws