PacketFence - BTS - PacketFence
View Issue Details
0001024PacketFencepublic2010-07-01 12:372011-01-26 15:42
obilodeau 
obilodeau 
normalminorhave not tried
closedfixed 
 
2.0.0 
ff51e33edac632f13854c0f859f945ec832ea817
0001024: absolute violation URLs are not proxied appropriately with apache 2.2
To reproduce:
1. set trapping.passthrough=proxy
2. set an absolute url in a violation. ex:
   [1100001]
   desc=Scan
   priority=10
   url=http://www.inverse.ca/content/index.php?template=failed_scan [^]

3. restart packetfence

Apache won't start complaining about:
Syntax error on line 247 of /usr/local/pf/conf/httpd.conf:
Invalid command 'ProxyHTMLURLMap', perhaps misspelled or defined by a module not included in the server configuration

Probably something that was changed between 2.0 and 2.2 or a missing module.

Once this is fixed, test if the feature even works.
No tags attached.
related to 0001100closed  not reaching proper external remediation pages if multiple from same domain 
Issue History
2010-07-01 12:37obilodeauNew Issue
2010-07-01 12:37obilodeauStatusnew => assigned
2010-07-01 12:37obilodeauAssigned To => obilodeau
2010-09-15 11:37obilodeauTarget Version1.9.1 => 1.9.2
2010-09-22 16:02obilodeauTarget Version1.9.2 => 1.9.3
2010-10-25 15:06obilodeaumtn revision => ff51e33edac632f13854c0f859f945ec832ea817
2010-10-25 15:06obilodeauNote Added: 0001733
2010-10-25 15:06obilodeauStatusassigned => resolved
2010-10-25 15:06obilodeauFixed in Version => 1.9.2
2010-10-25 15:06obilodeauResolutionopen => fixed
2010-10-25 15:07obilodeauRelationship addedrelated to 0001100
2010-11-19 14:23obilodeauFixed in Version1.9.2 => trunk
2010-12-15 11:37obilodeauFixed in Versiontrunk => 2.0.0
2011-01-26 15:42obilodeauStatusresolved => closed

Notes
(0001733)
obilodeau   
2010-10-25 15:06   
Repaired the absolute violation URLs. We fixed it by adding mod_rewrite proxy statements that match for the absolute URLs mentioned in violations. The implementation is quite different from the previous one so the appropriate warnings were added.

Old (alternative) implementation resembled what this guide describes (keeping link for reference):
http://www.apachetutor.org/admin/reverseproxies [^]