Uploaded image for project: 'PUBLIC - Liferay Portal Community Edition'
  1. PUBLIC - Liferay Portal Community Edition
  2. LPS-42609

TunnelServlet denies access to IP correctly configured via tunnel.servlet.hosts.allowed

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Closed
    • Resolution: Won't Fix
    • Affects Version/s: 6.2.0 CE GA1
    • Fix Version/s: 6.2.0 CE GA1
    • Component/s: Web Services
    • Labels:
      None
    • Environment:
      Windows 7, Tomcat 7, Java SE 7

      Description

      Although property tunnel.servlet.hosts.allowed=127.0.0.1,SERVER_IP looks configured correctly, TunnelServlet nevertheless throws exception:

      Caused by: java.lang.SecurityException: Access denied for 127.0.0.1
      at com.liferay.portal.security.ac.AccessControlAdvisorImpl.checkAllowedHosts(AccessControlAdvisorImpl.java:75)
      at com.liferay.portal.security.ac.AccessControlAdvisorImpl.accept(AccessControlAdvisorImpl.java:44)
      at com.liferay.portal.security.ac.AccessControlAdvice.before(AccessControlAdvice.java:46)

      when accessed from localhost.

      In the debugger I can see that this happens in TunnelServlet on line 79:

      returnObj = methodHandler.invoke(true);

      I've already used this functionality in version 6.1.1 and there it used to work fine.

        Attachments

          Activity

            People

            Assignee:
            tomas.polesovsky Tomáš Polešovský
            Reporter:
            clerch777 Christian Lerch
            Participants of an Issue:
            Recent user:
            Esther Sanz
            Votes:
            0 Vote for this issue
            Watchers:
            4 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved:
              Days since last comment:
              7 years, 6 weeks, 1 day ago

                Packages

                Version Package
                6.2.0 CE GA1