[APLO-347] Action not Authorized Errors when viewing admin interface over HTTPS

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.6
• Fix Version/s: 1.7
• Component/s: apollo-website
• Environment: CentOS 6, RHEL 5.5
• Assignee: Hiram R. Chirino
• Reporter: Craig W
• Created: 24/Jan/14 17:41
• Updated: 03/Feb/14 16:20
• Resolved: 03/Feb/14 16:20

Description

I've setup Apollo 1.6 and I've enabled the web admin interface over http and https:

<web_admin bind="http://0.0.0.0:8161" />
<web_admin bind="https://0.0.0.0:8162" />

If I access the interface over HTTP, I get the login form, which I fill-out and can then access the page.

If I logout of the HTTP session, and then try to access the interface over HTTPS, I immediately get into the web admin interface, but the "Action not authorized" banner is shown, over and over (I guess for each failed request).

The workaround to avoid seeing those errors when accessing the web admin over HTTPS is to first login via HTTP, then go to the https URL.