Bug 39577 – Jump from HTTPS to HTTP

Bug 39577 - Jump from HTTPS to HTTP


Summary:	Jump from HTTPS to HTTP

Status:	CLOSED FIXED

Product:	UCS
Classification:	Unclassified
Component:	UMC (Generic)
Version:	UCS 4.1
Hardware:	Other Linux

Importance:	P5 normal (vote)
Target Milestone:	UCS 4.1
Assigned To:	Florian Best
QA Contact:	Stefan Gohmann

URL:
Keywords:	interim-2

Depends on:
Blocks:
	Show dependency tree / graph

Reported:	2015-10-16 21:30 CEST by Stefan Gohmann
Modified:	2015-11-17 12:12 CET (History)
CC List:	1 user (show)

See Also:
What kind of report is it?:	---
What type of bug is this?:	---
Who will be affected by this bug?:	---
How will those affected feel about the bug?:	---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:

Attachments
syslog (119.09 KB, text/plain) 2015-10-16 21:30 CEST, Stefan Gohmann	Details
SAMLServiceProviderIdentifier.ldif (43.37 KB, text/plain) 2015-10-16 21:31 CEST, Stefan Gohmann	Details
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Stefan Gohmann

2015-10-16 21:30:47 CEST

Created attachment 7212 [details]
syslog

I use the following entries in my /etc/hosts:
 10.201.44.1 master441.deadlock44.intranet
 10.201.44.2 ucs-sso.deadlock44.intranet backup442.deadlock44.intranet

After opening https://backup442.deadlock44.intranet/umc, I click on "Single Sign On", https://ucs-sso is opened and I login as Administrator. Afterwards, the browser shows http://backup442.deadlock44.intranet as URI. That means I've lost the HTTPS connection.

Comment 1 Stefan Gohmann

2015-10-16 21:31:19 CEST

Created attachment 7213 [details]
SAMLServiceProviderIdentifier.ldif

Comment 2 Florian Best

2015-10-16 22:24:19 CEST

Fixed (also on your system).
The problem has nothing to do with SAML. It was the redirection of cherrypy (with a relative URI) because through the proxy cherrypy didn't knew about the scheme.

Comment 3 Stefan Gohmann

2015-11-04 09:16:02 CET

Yes, it works now.

Comment 4 Stefan Gohmann

2015-11-17 12:12:40 CET

UCS 4.1 has been released:
 https://docs.software-univention.de/release-notes-4.1-0-en.html
 https://docs.software-univention.de/release-notes-4.1-0-de.html

If this error occurs again, please use "Clone This Bug".