Uploaded image for project: 'PUBLIC - Liferay Portal Community Edition'
  1. PUBLIC - Liferay Portal Community Edition
  2. LPS-42609

TunnelServlet denies access to IP correctly configured via tunnel.servlet.hosts.allowed

    Details

    • Type: Bug
    • Status: Closed
    • Resolution: Won't Fix
    • Affects Version/s: 6.2.0 CE GA1
    • Fix Version/s: 6.2.0 CE GA1
    • Component/s: Web Services
    • Labels:
      None
    • Environment:
      Windows 7, Tomcat 7, Java SE 7

      Description

      Although property tunnel.servlet.hosts.allowed=127.0.0.1,SERVER_IP looks configured correctly, TunnelServlet nevertheless throws exception:

      Caused by: java.lang.SecurityException: Access denied for 127.0.0.1
      at com.liferay.portal.security.ac.AccessControlAdvisorImpl.checkAllowedHosts(AccessControlAdvisorImpl.java:75)
      at com.liferay.portal.security.ac.AccessControlAdvisorImpl.accept(AccessControlAdvisorImpl.java:44)
      at com.liferay.portal.security.ac.AccessControlAdvice.before(AccessControlAdvice.java:46)

      when accessed from localhost.

      In the debugger I can see that this happens in TunnelServlet on line 79:

      returnObj = methodHandler.invoke(true);

      I've already used this functionality in version 6.1.1 and there it used to work fine.

        Attachments

          Activity

            People

            • Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:
                Days since last comment:
                6 years, 34 weeks, 5 days ago

                Packages

                Version Package
                6.2.0 CE GA1