> We changed the regexp on mod_security. That removed the error. However,
> searching the application logs, I found that we get the following error when
> clicking the 'search' button :
> 2010-12-17 11:13:44,817 ERROR [org.orbeon.oxf.xforms.processor.XFormsServer]
> - XForms - submission - xforms-submit-error throwable:
> org.orbeon.oxf.xforms.XFormsModelSubmission$XFormsSubmissionException: line
> 29 of oxf:/config/xforms-widgets.xsl (processing submission response):
> xforms:submission for submission id: search-submission, error code received
> when submitting instance: 403
> oxf:/config/xforms-widgets.xsl, line 29, column -1: xforms:submission for
> submission id: search-submission, error code received when submitting
> instance: 403
>         at
> org.orbeon.oxf.xforms.XFormsModelSubmission.performDefaultAction(XFormsModelSubmission.java:1052)
>         at
> org.orbeon.oxf.xforms.XFormsContainer.dispatchEvent(XFormsContainer.java:776)
>         at
> org.orbeon.oxf.xforms.XFormsContainingDocument.dispatchEvent(XFormsContainingDocument.java:1020)
>         at
> org.orbeon.oxf.xforms.action.actions.XFormsSendAction.execute(XFormsSendAction.java:53)
>         at
> org.orbeon.oxf.xforms.action.XFormsActionInterpreter.runSingleIteration(XFormsActionInterpreter.java:270)
>         at
> org.orbeon.oxf.xforms.action.XFormsActionInterpreter.runAction(XFormsActionInterpreter.java:230)
>         at
> org.orbeon.oxf.xforms.event.XFormsEventHandlerImpl.handleEvent(XFormsEventHandlerImpl.java:161)
>         at
> org.orbeon.oxf.xforms.XFormsContainer.dispatchEvent(XFormsContainer.java:757)
>         at
> org.orbeon.oxf.xforms.XFormsContainingDocument.dispatchEvent(XFormsContainingDocument.java:1020)
>         at
> org.orbeon.oxf.xforms.XFormsContainingDocument.executeExternalEvent(XFormsContainingDocument.java:1007)
>         at
> org.orbeon.oxf.xforms.processor.XFormsServer.doIt(XFormsServer.java:384)
>         at
> org.orbeon.oxf.xforms.processor.XFormsServer.access$000(XFormsServer.java:56)
>         at
> org.orbeon.oxf.xforms.processor.XFormsServer$1.readImpl(XFormsServer.java:82)
>         at
> org.orbeon.oxf.processor.ProcessorImpl$6.read(ProcessorImpl.java:995)
>         at
> org.orbeon.oxf.processor.ProcessorImpl$ProcessorOutputImpl.read(ProcessorImpl.java:1178)
>         at
> org.orbeon.oxf.processor.ProcessorImpl.readInputAsSAX(ProcessorImpl.java:350)
>         at
> org.orbeon.oxf.processor.pipeline.TeeProcessor.access$000(TeeProcessor.java:36)
>         at
> org.orbeon.oxf.processor.pipeline.TeeProcessor$1.readImpl(TeeProcessor.java:59)
>         at
> org.orbeon.oxf.processor.ProcessorImpl$6.read(ProcessorImpl.java:995)
>         at
> org.orbeon.oxf.processor.ProcessorImpl$ProcessorOutputImpl.read(ProcessorImpl.java:1178)
>         at
> org.orbeon.oxf.processor.ProcessorImpl.readInputAsSAX(ProcessorImpl.java:350)
>         at
> org.orbeon.oxf.processor.ProcessorImpl.readInputAsTinyTree(ProcessorImpl.java:377)
>         at
> org.orbeon.oxf.processor.ProcessorImpl$4.read(ProcessorImpl.java:410)
>         at
> org.orbeon.oxf.processor.ProcessorImpl.readCacheInputAsObject(ProcessorImpl.java:453)
>         at
> org.orbeon.oxf.processor.ProcessorImpl.readCacheInputAsTinyTree(ProcessorImpl.java:408)
>         at
> org.orbeon.oxf.processor.pipeline.choose.ConcreteChooseProcessor.start(ConcreteChooseProcessor.java:189)
>         at
> org.orbeon.oxf.processor.pipeline.PipelineProcessor$11.run(PipelineProcessor.java:644)
>         at
> org.orbeon.oxf.processor.ProcessorImpl.executeChildren(ProcessorImpl.java:519)
>         at
> org.orbeon.oxf.processor.pipeline.PipelineProcessor.start(PipelineProcessor.java:641)
>         at
> org.orbeon.oxf.processor.pipeline.choose.ConcreteChooseProcessor.start(ConcreteChooseProcessor.java:242)
>         at
> org.orbeon.oxf.processor.pipeline.PipelineProcessor$11.run(PipelineProcessor.java:644)
>         at
> org.orbeon.oxf.processor.ProcessorImpl.executeChildren(ProcessorImpl.java:519)
>         at
> org.orbeon.oxf.processor.pipeline.PipelineProcessor.start(PipelineProcessor.java:641)
>         at org.orbeon.oxf.pipeline.InitUtils.runProcessor(InitUtils.java:92)
>         at
> org.orbeon.oxf.webapp.ProcessorService.service(ProcessorService.java:96)
>         at
> org.orbeon.oxf.servlet.OrbeonServletDelegate.service(OrbeonServletDelegate.java:138)
>         at javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
>         at
> org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
>         at
> org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
>         at
> org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233)
>         at
> org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)
>         at
> org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127)
>         at
> org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
>         at
> org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
>         at
> org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:298)
>         at
> org.apache.jk.server.JkCoyoteHandler.invoke(JkCoyoteHandler.java:190)
>         at
> org.apache.jk.common.HandlerRequest.invoke(HandlerRequest.java:291)
>         at org.apache.jk.common.ChannelSocket.invoke(ChannelSocket.java:769)
>         at
> org.apache.jk.common.ChannelSocket.processConnection(ChannelSocket.java:698)
>         at
> org.apache.jk.common.ChannelSocket$SocketConnection.runIt(ChannelSocket.java:891)
>         at
> org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:690)
>         at java.lang.Thread.run(Thread.java:619)
>
> A similar error occurs when trying to add a form.
>
> Furthermore, the front end indicates "client connexion refused by server
> configuration."
> My guess is that there is something I need to configure to allow orbeon to
> be accessed via the front-end, but I don't quite know what.
> I found a suspisions "HTTP/1.1" in
> orbeon/apps/doc/pages/processors-generators-request.xml, but I'm not sure
> about that.
> Should it be changed to AJP/1.3 ?
>
> This is what we have :
>                     <protocol>HTTP/1.1</protocol>
>                     <remote-addr>127.0.0.1</remote-addr>
>                     <remote-host>localhost</remote-host>
>                     <scheme>http</scheme>
>                     <server-name>localhost</server-name>
>                     <server-port>8080</server-port>
>
> thanks.
>
> P.S. : answers should primarily be sent to Eric Roze, since my job ends
> today.
>
> Le 14/12/2010 03:29, Erik Bruchez a écrit :
>
> When does this occur? Upon the client sending an Ajax request?
>
> Looking with Firebug, I see we send: application/xml; charset=UTF-8
>
> Not sure why the charset is there, but application/xml tends to be the
> recommended Content-Type for XML.
>
> It seems your regexp is only allowing text/xml, not application/xml,
> if I am not mistaken.
>
> -Erik
>
> On Mon, Dec 13, 2010 at 2:55 AM, elphin.stenner
> <[hidden email]> wrote:
>
>
> Hi,
>
> I am currently using Orbeon Forms bundled with a java web application.
>
> Orbeon works fine when accessing the tomcat, but when I configure an access
> via an apache front-end, I get the following error :
>
> [10/Dec/2010:09:55:26 +0100]
> [candidatures.univ-ubs.fr/sid#835a0f8][rid#8836b78][/candidatures/xforms-server][1]
> Access denied with code 501 (phase 2). Match of "rx
> (?:^(?:application\\/x-www-form-urlencoded(?:;(?:\\s?charset\\s?=\\s?[\\w\\d\\-]{1,18})?)??$|multipart/form-data;)|text/xml)"
> against "REQUEST_HEADERS:Content-Type" required. [file
> "/var/lib/modsecurity2/modsecurity_crs_30_http_policy.conf"] [line "69"] [id
> "960010"] [msg "Request content type is not allowed by policy"] [severity
> "WARNING"] [tag "POLICY/ENCODING_NOT_ALLOWED"]
>
>
> As far as I understand, the front-end has a security rule that requests a
> content-type element and denies access if there isn't one.
>
> The front-end security rules can't be loosened (University security polocy),
> so I guess I'll have to add the content-type to orbeon.
> The thing is : I'm completely new to Orbeon, and haven't got a clue as to
> how that is done.
>
> Can anyone help me ?
>
> Thanks,
>
> P.S. : please add [hidden email] to any replies
>
> --
> Elphin STENNER
> courriel: [hidden email]
> UNIVERSITE DE BRETAGNE SUD
>
>
>
> --
> You receive this message as a subscriber of the [hidden email] mailing
> list.
> To unsubscribe: mailto:[hidden email]
> For general help: mailto:[hidden email]?subject=help
> OW2 mailing lists service home page: http://www.ow2.org/wws
>
>
>
>
> --
> Elphin STENNER
> courriel: [hidden email]
> UNIVERSITE DE BRETAGNE SUD
>
>
> --
> You receive this message as a subscriber of the [hidden email] mailing
> list.
> To unsubscribe: mailto:[hidden email]
> For general help: mailto:[hidden email]?subject=help
> OW2 mailing lists service home page: http://www.ow2.org/wws
>
>