Change to https - no system access

[ERNANDEZ SANTOS]

Dear

I did some tests here, and I changed the security channel to https But I can no longer access the application, as I fail to revert? Would it be through the postgre?

[Herrick, Rick]

You can update this in the database directly with this query:

 

UPDATE xhbm_preference SET value = 'any' WHERE tool = (SELECT id FROM xhbm_tool WHERE tool_id = 'siteConfig') AND name = 'securityChannel';

 

The problem with this setting is that it works fine when Tomcat handles SSL but 99% of the time Tomcat doesn’t handle SSL, which is instead handled by Apache httpd, nginx, HAProxy, etc. That means that Tomcat gets the requests as http, so when the security channel is set to the secure it rejects the requests coming from the front-end proxy. Unfortunately we can’t remove it because there are some cases where it’s required…

 

-- 

Rick Herrick

Sr. Programmer/Analyst

Neuroinformatics Research Group

Washington University School of Medicine

Phone: +1 (314) 273-1645

 

From: "xnat_di...@googlegroups.com" <xnat_di...@googlegroups.com> on behalf of ERNANDEZ SANTOS <ernande...@unifesp.br>
Reply-To: "xnat_di...@googlegroups.com" <xnat_di...@googlegroups.com>
Date: Monday, July 27, 2020 at 9:19 AM
To: "xnat_di...@googlegroups.com" <xnat_di...@googlegroups.com>
Subject: [XNAT Discussion] Change to https - no system access

 

* External Email - Caution *

Dear

 

I did some tests here, and I changed the security channel to https But I can no longer access the application, as I fail to revert? Would it be through the postgre?

--
You received this message because you are subscribed to the Google Groups "xnat_discussion" group.
To unsubscribe from this group and stop receiving emails from it, send an email to xnat_discussi...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/xnat_discussion/06459173-37fe-4d1c-b60d-bff1918c34e3n%40googlegroups.com.

 

---

The materials in this message are private and may contain Protected Healthcare Information or other information of a sensitive nature. If you are not the intended recipient, be advised that any unauthorized use, disclosure, copying or the taking of any action in reliance on the contents of this information is strictly prohibited. If you have received this email in error, please immediately notify the sender via telephone or return mail.

[ERNANDEZ SANTOS]

it worked, thanks

To view this discussion on the web visit https://groups.google.com/d/msgid/xnat_discussion/F2E67469-2608-49EC-A5B5-1E54A657817F%40wustl.edu.