2:54 p.m.
--========GMXBoundary143451375358095437361
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 8bit
Hello,
thank you... solved....
Hans-Joachim
----- Original Message -----
From: Juan Hernandez
Sent: 08/01/13 12:58 PM
To: Hans-Joachim
Subject: Re: [Users] 3.3 Nightly Built July 31st: Still problems with gwt.rpc
On 08/01/2013 10:48 AM, Hans-Joachim wrote: > Hello, > > I'm just installing
3.3 Nightly as of July 31st on my CentOS 6.4 server. > > When I try to login to the
Web I got 'Error 500' > > Here the part of server.log > > ...... >
2013-08-01 10:40:05,098 ERROR >
[org.apache.catalina.core.ContainerBase.[jboss.web].[default-host].[/webadmin]] >
(ajp--127.0.0.1-8702-6) Exception while dispatching incoming RPC call: >
java.lang.SecurityException: Blocked request without GWT base path > header (XSRF
attack?) > at >
com.google.gwt.rpc.server.RpcServlet.getClientOracle(RpcServlet.java:95) >
[gwt-servlet.jar:] > at >
com.google.gwt.rpc.server.RpcServlet.processPost(RpcServlet.java:205) >
[gwt-servlet.jar:] > at >
com.google.gwt.user.server.rpc.AbstractRemoteServiceServlet.doPost(AbstractRemoteServiceServlet.java:62)
> [gwt-servlet.jar:] > at
javax.servlet.http.HttpServlet.service(HttpServlet.java:754) >
[jboss-servlet-api_3.0_spec-1.0.0.Final.jar:1.0.0.Final] > ....... > >
Hans-Joachim > Actually this isn't a problem with GWT RPC, but with the redirection
that is performed from / to /ovirt-engine in the web server. You probably ended up with
the following URL: https://whatever/ovirt-engine/webadmin/webadmin/WebAdmin.html This adds
an extra "ovirt-engine" path element to the request, that the server side
doesn't expect, so it assumes that there is a XSFR attach going on. Type an URL like
this manually in the browser and it should work:
https://whatever/webadmin/webadmin/WebAdmin.html -- Dirección Comercial: C/Jose Bardasano
Baos, 9, Edif. Gorbea 3, planta 3ºD, 28016 Madrid, Spain Inscrita en el Reg. Mercantil de
Madrid – C.I.F. B82657941 - Red Hat S.L.
--========GMXBoundary143451375358095437361
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
<span style=3D'font-family:Verdana'><span
style=3D'font-size:12px'>Hello,<b=
r /><br />thank you... solved....<br /><br />Hans-Joachim<p
style=3D"margin=
:0px; padding:0px;" >=C2=A0</p><blockquote style=3D"border-left: 1px
solid =
#CCC; padding-left: 5px; margin-left: 5px; margin-bottom: 0px; margin-top: =
0px; margin-right: 0px;" type=3D"cite"><p style=3D"margin:0px;
padding:0px;=
" ><span style=3D"font-family:Verdana"><span
style=3D"font-size:12px">-----=
Original Message -----</span></span></p><p style=3D"margin:0px;
padding:0p=
x;" ><span style=3D"font-family:Verdana"><span
style=3D"font-size:12px">Fro=
m: Juan Hernandez</span></span></p><p style=3D"margin:0px;
padding:0px;" ><=
span style=3D"font-family:Verdana"><span
style=3D"font-size:12px">Sent: 08/=
01/13 12:58 PM</span></span></p><p style=3D"margin:0px;
padding:0px;" ><spa=
n style=3D"font-family:Verdana"><span
style=3D"font-size:12px">To: Hans-Joa=
chim</span></span></p><p style=3D"margin:0px; padding:0px;"
><span style=3D=
"font-family:Verdana"><span style=3D"font-size:12px">Subject:
Re: [Users] 3=
.3 Nightly Built July 31st: Still problems with
gwt.rpc</span></span></p>=
=C2=A0<div><div><pre style=3D"white-space: pre-wrap; word-wrap:
break-word;=
font-size:11;pre">On 08/01/2013 10:48 AM, Hans-Joachim wrote:=20
> Hello,=20
>=20
> I'm just installing 3.3 Nightly as of July 31st on my CentOS 6.4 serve=
r.=20
>=20
> When I try to login to the Web I got 'Error 500'=20
>=20
> Here the part of server.log=20
>=20
> ......=20
> 2013-08-01 10:40:05,098 ERROR=20
> [org.apache.catalina.core.ContainerBase.[jboss.web].[default-host].[/w=
ebadmin]]=20
> (ajp--127.0.0.1-8702-6) Exception while dispatching incoming RPC call:=
=20
> java.lang.SecurityException: Blocked request without GWT base path=20
> header (XSRF attack?)=20
> at=20
> com.google.gwt.rpc.server.RpcServlet.getClientOracle(RpcServlet.java:9=
5)=20
> [gwt-servlet.jar:]=20
> at=20
> com.google.gwt.rpc.server.RpcServlet.processPost(RpcServlet.java:205)=
=20
> [gwt-servlet.jar:]=20
> at=20
> com.google.gwt.user.server.rpc.AbstractRemoteServiceServlet.doPost(Abs=
tractRemoteServiceServlet.java:62)=20
> [gwt-servlet.jar:]=20
> at javax.servlet.http.HttpServlet.service(HttpServlet.java:75=
4)=20
> [jboss-servlet-api_3.0_spec-1.0.0.Final.jar:1.0.0.Final]=20
> .......=20
>=20
> Hans-Joachim=20
>=20
Actually this isn't a problem with GWT RPC, but with the redirection=20
that is performed from / to /ovirt-engine in the web server. You=20
probably ended up with the following URL:=20
https://whatever/ovirt-engine/webadmin/webadmin/WebAdmin.html=20
This adds an extra "ovirt-engine" path element to the request, that the=20
server side doesn't expect, so it assumes that there is a XSFR attach=20
going on. Type an URL like this manually in the browser and it should work:=
=20
https://whatever/webadmin/webadmin/WebAdmin.html=20
--=20
Direcci=C3=B3n Comercial: C/Jose Bardasano Baos, 9, Edif. Gorbea 3, planta=
=20
3=C2=BAD, 28016 Madrid, Spain=20
Inscrita en el Reg. Mercantil de Madrid =E2=80=93 C.I.F. B82657941 - Red Ha=
t S.L.</pre></div></div></blockquote><p
style=3D"margin:0px; padding:0px;" =
=C2=A0</p></span></span>
--========GMXBoundary143451375358095437361--