[ckan-dev] Problem with CKAN instance behind reverse proxy

Tue Feb 5 18:23:45 UTC 2013

Hello,

We have done this many times before and it always needs some tweaking based
on what reverse proxy being used.  It is mostly an issue with repose.who
(the authentication library we use) which gets its url based on the headers
it receives.

If the reverse proxy sends the correct HOST header than there is normally
no problems.

There are ways to put fqdn in /etc/ckan/std/who.ini as the login/logout
urls but the above option is preferable.

Thanks

David

On Tue, Feb 5, 2013 at 5:26 PM, Alex Urbanowicz
<alex.urbanowicz at gmail.com>wrote:

> Hello
>
> I have a CKAN instance that due to local requirements is placed behind
> a reverse proxy and the server has a private class IP address. The DNS
> name assigned to the CKAN server points at the reverse proxy on the
> outside, and at the actual server is defined in hosts as pointing to
> outgoing interface IP address. The front page of the CKAN instance
> loads OK, but when I try to log in from outside, the browser gets a
> redirect request *pointing to private IP address of the server*. Is
> there any rationale behind that?
>
> How can I fix that so it uses only FQDN-s it is told to use?
>
> CKAN version 1.8, fresh package install on Ubuntu.
>
> Alex
>
> _______________________________________________
> ckan-dev mailing list
> ckan-dev at lists.okfn.org
> http://lists.okfn.org/mailman/listinfo/ckan-dev
> Unsubscribe: http://lists.okfn.org/mailman/options/ckan-dev
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.okfn.org/pipermail/ckan-dev/attachments/20130205/4c51a30a/attachment-0001.html>