[KNOX-913] Invalid login.jsp redirect for Ranger Admin UI

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 0.11.0
• Fix Version/s: 0.13.0
• Assignee: Attila Kanto
• Reporter: Attila Kanto
• Created: 24/Mar/17 11:01
• Updated: 28/Mar/19 14:09
• Resolved: 25/Apr/17 19:42

Description

I do not have an active Ranger session and I open the https://my.domain/gateway/mydatal/ranger/ url then I expect that I am redirected to https://my.domain/gateway/mydatal/ranger/login.jsp, but Knox redirects me to https://my.domain/login.jsp.

2017-03-24 10:43:27,616 TRACE http.request (TraceRequest.java:traceRequestDetails(66)) - ||c383e5a3-61dc-4512-841b-f1e83a96e589|Request=GET /gateway/mydatal/ranger/
	Header[Cookie]=RANGERADMINSESSIONID=ABF32454952CA12E81F7B546C7244AD4; uluwatu.sid=s%3AcQRDydsJG5LvB19dREn6rBzljUqxbz.3U%2B1fRb8ystsOuPq2jp05rRFlcKX2D%2B3l%2B8pfAfEpPk; sultans.sid=s%3AO3upEx2Llfo0Z6DT5xoe6Po6IzqCdW.XRDuDKlpdTCRu%2FLvPl90rP1qgPeGkx1ryC5rIbZ7Nhc; source=undefined; _ga=GA1.2.630355210.1490351415; _gat=1
	Header[Accept]=text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
	Header[Upgrade-Insecure-Requests]=1
	Header[User-Agent]=Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36
	Header[X-Forwarded-Host]=local.sequenceiq.com
	Header[X-Forwarded-Proto]=https
	Header[X-Forwarded-For]=192.168.99.1
	Header[Host]=local.sequenceiq.com
	Header[Accept-Encoding]=gzip, deflate, sdch, br
	Header[Accept-Language]=en-US,en;q=0.8,de;q=0.6,hu;q=0.4,tr;q=0.2
	Header[X-Forwarded-Server]=da3bcf70b3e6
2017-03-24 10:43:27,867 ERROR hadoop.gateway (UrlRewriteProcessor.java:rewrite(169)) - Failed to rewrite URL: http://local.sequenceiq.com/login.jsp, direction: OUT via rule: RANGERUI/rangerui/outbound/login/headers/location, status: FAILURE
2017-03-24 10:43:27,868 TRACE http.response (TraceResponse.java:traceResponseDetails(61)) - ||c383e5a3-61dc-4512-841b-f1e83a96e589|Response=302
	Header[X-Frame-Options]=DENY
	Header[Server]=Apache-Coyote/1.1
	Header[Date]=Fri, 24 Mar 2017 10:43:27 GMT
	Header[Date]=Fri, 24 Mar 2017 10:43:27 GMT
	Header[Location]=http://local.sequenceiq.com/login.jsp

This bug only occurs when I use the default port 443 is used. As you can see in this case the Header[X-Forwarded-Host] is set to local.sequenceiq.com without port information.