[nikesh mohanlal]

Hi All,

Version: 5.5 CU4
Urgency:Yes

The client is using reverse proxy.When we click on the 'new' button from the finder screen,we are unable to get the new screen.We get some error like:'
Forbidden

You don't have permission to access /sci/sci/servlets/ShipmentCustManagement/1219759439747 on this server.
Additionally, a 403 Forbidden error was encountered while trying to use an ErrorDocument to handle the request'

The '/sci' is used as a 'glog.webserver.urlprefix' property.
What I see is that the above property entry comes two times,instead of once. and thus the user is unable to view the correct screen.This behavior is for all the screens which uses manager layouts only.

Kindly let me know what would be the cause of the issue.

Thanking and regards,
Nikesh.

[chrisplough]

Nikesh,

This is a common issue when working with the reverse-proxy feature of OTM. Your reverse proxy is not configured correctly to work with OTM and is failing to strip out the URL prefix before passing the URL back to OTM. The reverse-proxy needs to be configured so that the chain of communication is as follows:

• Browser sends
  • GET /sci/servlets/ShipmentCustManagement
• Reverse proxy receives
  • GET /sci/servlets/ShipmentCustManagement
• Reverse Proxy sends
  • GET /servlets/ShipmentCustManagement
• OTM receives
  • GET /servlets/ShipmentCustManagement

Alternately, if your reverse-proxy supports it - you can try to access OTM without using the URL prefix (glog.webserver.urlprefix).

--Chris

[nikesh mohanlal]

Hi Chris,

Many thanks for the reply.

Can you please let me know what should be done.
The client use this entry:'glog.webserver.urlprefix=/sci' and 'glog.webserver.context=/servlets/'.
Is that could be the problem or any other configurations needs to be done so that the reverse proxy supports it.
Please let me know at the earliest.

Thanking and Regards,
Nikesh.

[chrisplough]

Nikesh,

I'm not able to resolve this for you, as the configuration changes required exist within your reverse proxy server. You'll need to make whatever changes are necessary for your specific reverse proxy in order to allow the communications flow as I noted above. Basically the reverse-proxy should strip out the URL Prefix (/sci) before passing the URL back to OTM.

--Chris