[midPoint] Trying to Setup a Https Reverse Proxy

[Luke Novak]

It was set to:


location /midpoint/ {
    proxy_pass http://x.x.x.x:8080/midpoint/<https://nam10.safelinks.protection.outlook.com/?url=http%3A%2F%2Fx.x.x.x%3A8080%2Fmidpoint%2F&data=05%7C01%7Clnovak%40oaisd.org%7C2bd342a4304d4df156f708daa18b7d13%7C890799fcedbe4257be1d088a46a75a53%7C0%7C0%7C637999917746121105%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C7000%7C%7C%7C&sdata=85Wey3XpDu0I%2BdkOls2R4OcfFlAvfanrNuvJewWzhP8%3D&reserved=0>;}

}

I just changed it to:

location /midpoint/ {

    proxy_pass http://x.x.x.x:8080/midpoint/<https://nam10.safelinks.protection.outlook.com/?url=http%3A%2F%2Fx.x.x.x%3A8080%2Fmidpoint%2F&data=05%7C01%7Clnovak%40oaisd.org%7C2bd342a4304d4df156f708daa18b7d13%7C890799fcedbe4257be1d088a46a75a53%7C0%7C0%7C637999917746121105%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C7000%7C%7C%7C&sdata=85Wey3XpDu0I%2BdkOls2R4OcfFlAvfanrNuvJewWzhP8%3D&reserved=0>;

}

And now I am getting the welcome nginx page.

Thanks,
Luke
________________________________
From: Davy Priem <davy.priem at vives.be>
Sent: Wednesday, September 28, 2022 3:56 PM
To: Luke Novak <lnovak at oaisd.org>
Cc: midPoint General Discussion <midpoint at lists.evolveum.com>
Subject: Re: [midPoint] Trying to Setup a Https Reverse Proxy

Which location are you using?

You should have something like this:


location /midpoint/ {
    proxy_pass http://x.x.x.x:8080/midpoint/<https://nam10.safelinks.protection.outlook.com/?url=http%3A%2F%2Fx.x.x.x%3A8080%2Fmidpoint%2F&data=05%7C01%7Clnovak%40oaisd.org%7C2bd342a4304d4df156f708daa18b7d13%7C890799fcedbe4257be1d088a46a75a53%7C0%7C0%7C637999917746121105%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C7000%7C%7C%7C&sdata=85Wey3XpDu0I%2BdkOls2R4OcfFlAvfanrNuvJewWzhP8%3D&reserved=0>;

}



Davy Priem




Op 28 sep. 2022, om 21:48 heeft Luke Novak <lnovak at oaisd.org<mailto:lnovak at oaisd.org>> het volgende geschreven:

Below is what I have in the configuration file for nginx.  I tried adding the slash after midpoint after your email and now I am getting a too many redirects error.  So I am thinking I am not exactly understanding the nginx settings.

proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_pass http://x.x.x.x:8080/midpoint/<https://nam10.safelinks.protection.outlook.com/?url=http%3A%2F%2Fx.x.x.x%3A8080%2Fmidpoint%2F&data=05%7C01%7Clnovak%40oaisd.org%7C2bd342a4304d4df156f708daa18b7d13%7C890799fcedbe4257be1d088a46a75a53%7C0%7C0%7C637999917746121105%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C7000%7C%7C%7C&sdata=85Wey3XpDu0I%2BdkOls2R4OcfFlAvfanrNuvJewWzhP8%3D&reserved=0>;
proxy_cookie_path /midpoint/ /;
#proxy_pass unix:/path/to/php7.3.sock # This is an example of how to define a unix socket.
proxy_read_timeout 90;

Let me know if there is a different section of the config file what would be more helpful.

Thanks,
Luke


________________________________
From: Davy Priem <davy.priem at vives.be<mailto:davy.priem at vives.be>>
Sent: Wednesday, September 28, 2022 3:29 PM
To: midPoint General Discussion <midpoint at lists.evolveum.com<mailto:midpoint at lists.evolveum.com>>
Cc: Luke Novak <lnovak at oaisd.org<mailto:lnovak at oaisd.org>>
Subject: Re: [midPoint] Trying to Setup a Https Reverse Proxy

Hi,

I think there’s an error in your nginx config. In the error message you can see nginx is sending the request to <midpointhostname>/midpointmidpoint and this should be <midpointhostname>/midpoint

Davy Priem




Op 28 sep. 2022, om 21:26 heeft Luke Novak via midPoint <midpoint at lists.evolveum.com<mailto:midpoint at lists.evolveum.com>> het volgende geschreven:

Hey All,

I am working on setting up a HTTPS Reverse proxy for Midpoint using NGINX running on Ubuntu.  I am getting the error in the picture. It looks like it is coming from Apache on our Linux Midpoint server.  Is there a setting change I need to make on our Midpoint server for this to work?

Any tips, suggestions, or help would be appreciated.

Thanks,
Luke

Lucas Novak
Systems Engineer
OAISD
<RP_Error.jpg>_______________________________________________
midPoint mailing list
midPoint at lists.evolveum.com<mailto:midPoint at lists.evolveum.com>
https://lists.evolveum.com/mailman/listinfo/midpoint<https://nam10.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.evolveum.com%2Fmailman%2Flistinfo%2Fmidpoint&data=05%7C01%7Clnovak%40oaisd.org%7C2bd342a4304d4df156f708daa18b7d13%7C890799fcedbe4257be1d088a46a75a53%7C0%7C0%7C637999917746121105%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C7000%7C%7C%7C&sdata=n2gCbcKwWCQnX2wLuyDK6XaipViGLxOKVvCS3rWxZ7I%3D&reserved=0>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20220928/a8564c16/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Welcom_nginx.jpg
Type: image/jpeg
Size: 43398 bytes
Desc: Welcom_nginx.jpg
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20220928/a8564c16/attachment-0001.jpg>