Opened 3 months ago

Closed 3 months ago

Last modified 3 months ago

#3248 closed task (fixed)

Cannot login into staging trac

Reported by: strk Owned by: strk
Priority: normal Milestone: Sysadmin Contract 2024-III (strk)
Component: SysAdmin/Trac Keywords:
Cc:

Description

When I try going to https://dev.trac.osgeo.org/osgeo/login I get the error: The page isn’t redirecting properly

Change History (5)

comment:1 by strk, 3 months ago

I found out about this problem while trying to test the cross-reference plugin asked for in #2105 (and this is a test for that :)

comment:2 by robe, 3 months ago

As mentioned on matrix, it looks like tracsvn-dev is set to use production ldap.osgeo.org so you shouldn't be having issues logging in related to ldap.

Also I can log in fine via https://dev.git.osgeo.org/gitea/

I vaguely recall there being some crazy https redirect issues we had I forget how we fixed that but possibly was only fixed on production. I'd check the osgeo4-nginx config for dev.trac.osgeo.org as well as the apache config in tracsvn-dev.

comment:3 by strk, 3 months ago

This is another case in which having the ansible service role ALSO deploy to the http-proxy sounds like a sensible thing to do (like I was proposing in https://git.osgeo.org/gitea/sac/ansible-deployment/pulls/61 for Gitea

comment:4 by strk, 3 months ago

Resolution: fixed
Status: newclosed

The problem was fixed by proxying to https instead of http:

diff --git a/etc/nginx/sites-available/dev.trac.osgeo.org b/etc/nginx/sites-available/dev.trac.osgeo.org
index 278a9af..9bef7b4 100644
--- a/etc/nginx/sites-available/dev.trac.osgeo.org
+++ b/etc/nginx/sites-available/dev.trac.osgeo.org
@@ -21,7 +21,7 @@ server {
                 }
                 client_max_body_size 0;
                 include /etc/nginx/proxy_protocol_params;
-                proxy_pass http://tracsvn-dev.lxd;
+                proxy_pass https://tracsvn-dev.lxd;
                 proxy_redirect off;
         }

This was already https in production. I'll see about deploying these proxy configs via ansible too

Note: See TracTickets for help on using tickets.