<div dir="ltr"><div>In this case turning off the callback prefix check should be helpful<br><br>Create a new conf file /etc/ovirt-engine/engine.conf.d/99-sso.conf and add the line below to the file. This will turn off the additional security check for the callback prefix.<br></div><div><br>SSO_CALLBACK_PREFIX_CHECK=false<br><br></div><div>Ravi<br><br></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Tue, Aug 22, 2017 at 9:29 AM, Martin Perina <span dir="ltr"><<a href="mailto:mperina@redhat.com" target="_blank">mperina@redhat.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div class="gmail_default" style="font-family:arial,helvetica,sans-serif">Adding Ravi<br></div></div><div class="gmail_extra"><br><div class="gmail_quote"><div><div class="h5">On Mon, Aug 21, 2017 at 10:53 AM, Roy Golan <span dir="ltr"><<a href="mailto:rgolan@redhat.com" target="_blank">rgolan@redhat.com</a>></span> wrote:<br></div></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div class="h5"><div dir="ltr"><div><div><div><div><div><br>When using OST you get an engine on isolated network, that in order to make available you must tunnel. When tunnelling you end up with a URI with a uncommon port or hostname that will result an error while authenticating:<br><br>URL: <a href="https://localhost:9000/ovirt-engine" target="_blank">https://localhost:9000/ovirt-e<wbr>ngine</a><br><br>This displays this error:<br><br><b>" The redirection URI for client is not registered " <a href="http://imgur.com/a/D0edf" target="_blank"> </a></b><a href="http://imgur.com/a/D0edf" target="_blank">See screenshot</a><br></div><div><br></div><div>Can we expose the expected valid redirect urls? Is it used for something else than obscurity? <br></div><div><br></div></div>If we can expose it then at least a message of the form would be better:<br></div><b> " Please make sure to connect to <a href="https://the" target="_blank">https://EXPECTED/URL "</a><span class="m_8172911756764751093HOEnZb"><font color="#888888"><br></font></span></b></div><span class="m_8172911756764751093HOEnZb"><font color="#888888"><b><br></b></font></span></div><span class="m_8172911756764751093HOEnZb"><font color="#888888"><div>\R<br></div><div><b></b></div><div><b></b></div></font></span></div>
<br></div></div>______________________________<wbr>_________________<br>
Devel mailing list<br>
<a href="mailto:Devel@ovirt.org" target="_blank">Devel@ovirt.org</a><br>
<a href="http://lists.ovirt.org/mailman/listinfo/devel" rel="noreferrer" target="_blank">http://lists.ovirt.org/mailman<wbr>/listinfo/devel</a><br></blockquote></div><br></div>
</blockquote></div><br></div>