search

Netflix / lemur-docker

Docker files for the Lemur certificate orchestration tool
170 stars 83 forks source link

403 Forbidden #50

Open ghost opened 3 years ago

ghost commented 3 years ago

Hi deploy lemur on Photon OS.

I need to perform some modifications on redis connection and the system as up and run.

the problem is that when I try to access the interface i have the following error:

2021/01/15 16:05:55 [error] 33#33: *60 "/opt/lemur/lemur/static/dist/index.html" is forbidden (13: Permission denied), client: 192.168.1.53, server: lemurtls, request: "GET / HTTP/1.1", host: "192.168.1.2:447"

jtschladen commented 3 years ago

Hi @ShojinSpear - how exactly are you making the request that's resulting in that error?

And to clarify - were you running the previous version of lemur-docker prior to my changes a couple days ago, or is this your first time running it? If you were running it previously, was the same operation working then?

ghost commented 3 years ago

I, start mounting the system today.

At first I need to change the redis configuration o lemur.conf.py as this make the connection for redis://docker.for.mac.localhost:6379 and so no connection for redis container.

after I change and see the connection to be done I try the access from my laptop by browser (chrome) and I have the access denied, displayed by NGINX server.

jtschladen commented 3 years ago

Thanks for the clarification - and thanks for pointing out the hardcoding for Mac. I just changed the Redis config in lemur.conf.py that I hope will be more generic. I'd appreciate it if you could let me know if that works for you.

I'm still not sure why you're seeing a 403; I'm not able to reproduce from an Ubuntu host machine. I'm actually unsure why your browser is even requesting that path, as I don't see the same. Here's a sample of the requests my browser makes:

Screen Shot 2021-01-15 at 11 14 21 AM

Could you share a similar sample (either a screenshot or a network trace with password removed) of the calls you're seeing?

ghost commented 3 years ago

Hi,

I see whats may be the problem.

When I install on my personal Laptop this installation its ok, and I can connect to the Web UI. The problem is when I install on a remote server and try con access. I think I need to change the allowed hosts on some config file, but I don't see where is the config file to setup the allowed hosts.

Thanks.