[jboss-jira] [JBoss JIRA] (AS7-3042) IPv6: Invalid redirect to Admin console (wrong IP address)

Darran Lofthouse (JIRA) jira-events at lists.jboss.org
Wed Feb 15 06:50:38 EST 2012


    [ https://issues.jboss.org/browse/AS7-3042?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12666714#comment-12666714 ] 

Darran Lofthouse commented on AS7-3042:
---------------------------------------

I have just tried starting AS7 and bind the management interfaces to the public interface and the remainder to loopback - connecting to localhost:8080 and trying to connect to the console I get an error: -

"It is not possible to redirect to the console, please contact the system administrator for the correct address to access the console."

This is the correct behaviour.

End users WILL go into production with the welcome context enabled, this is the reason the redirect is only possible for simple scenarios where the same NIC is used by both and in those scenarios there is no guarantee that just because a user can connect to one they will be able to connect to the other.

The only other option would be that where the welcome context is enabled we actually add a config option to specify the redirect address to use but that will still be error prone.

                
> IPv6: Invalid redirect to Admin console (wrong IP address)
> ----------------------------------------------------------
>
>                 Key: AS7-3042
>                 URL: https://issues.jboss.org/browse/AS7-3042
>             Project: Application Server 7
>          Issue Type: Bug
>          Components: Console, Web
>    Affects Versions: 7.1.0.Beta1b
>            Reporter: Pavel Janousek
>            Assignee: Darran Lofthouse
>             Fix For: Open To Community
>
>
> This issue is some derivation from AS7-3040. Lets imagine starting server like this:
> {code}./standalone.sh -Djava.net.preferIPv4Stack=false -Djboss.bind.address=::1{code}
> So by default the admin/management is bound to _::ffff:127.0.0.1:9990_ and _::ffff:127.0.0.1:9999_, but it isn't accessible from Web WelcomePage at _::1:8080_ because the URL is specified as: {code}<a href="/console">{code} and so the next request is http://[::1]:8080/console which redirect requester to http://[::1]:9990, but there isn't any console because it is here - http://[::ffff:127.0.0.1]:9990.
> This is not good as it could lead to integration issues between components (X trying to connect to Y on ::1; Y listening on ::ffff:127.0.0.1).

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        


More information about the jboss-jira mailing list