search

kvspb / nginx-auth-ldap

LDAP authentication module for nginx
BSD 2-Clause "Simplified" License
731 stars 251 forks source link

too_many_redirection error when SSL is on #246

Open dtdt2021 opened 2 years ago

dtdt2021 commented 2 years ago

It works well under HTTP, the LDAP popup and authentication. Once SSL is on, the LDAP popup is still there but it will just return too_many_redirection error in the browser.

server {

       listen         IP:443;
       server_name    domain.com;

      access_log  /var/log/nginx/access.log;
      error_log   /var/log/nginx/error.log;

        ssl on;
        ssl_certificate         /etc/ssl/cert.crt;
        ssl_certificate_key     /etc/ssl/key.key;

  location / {
        auth_ldap "Forbidden";
        auth_ldap_servers LDAPSERVER;
        proxy_pass http://IP;
        proxy_pass http://IP;
        proxy_redirect off;
        proxy_http_version 1.1;
        proxy_set_header   Upgrade $http_upgrade;
        proxy_set_header   Connection $http_connection;
        proxy_set_header   Host $host;
        proxy_cache_bypass $http_upgrade;
        proxy_set_header   X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header   X-Forwarded-Proto $scheme;
        client_max_body_size 50M;

  }
}

Below is the error from the logs which generated incorrect URL:

2021/10/19 16:59:21 [error] 16294#0: *467 upstream sent too big header while reading response header from upstream, , request: "GET /pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676
2021/10/19 17:01:43 [error] 16413#0: *288 upstream sent too big header while reading response header from upstream, , request: "GET /pages/viewpage.action?pageId=1pages/viewpage.action?pageId=1pages/viewpage.action?pageId=1pages/viewpage.action?pageId=1pages/viewpage.action?pageId=1pages/viewpage.action?pageId=1pages/viewpage.action?pageId=1pages/viewpage.action?pageId=1pages/viewpage.action?pageId=1pages/viewpage.action?pageId=1pages/viewpage.action?pageId=1pages/viewpage.action?pageId=1pages/viewpage.action?pageId=1pages/viewpage.action?pageId=1pages/viewpage.action?pageId=1pages/viewpage.action?pageId=1pages/viewpage.action?pageId=1pages/viewpage.action?pageId=1pages/viewpage.action?pageId=1pages/viewpage.action?pageId=1pages/viewpage.action?pageId=1pages/viewpage.action?pageId=1pages/viewpage.action?pageId=1pages/viewpage.action?pageId=1pages/viewpage.action?pageId=1pages/viewpage.action?pageId=1pages/viewpage.action?pageId=1pages/viewpage.action?pageId=1pages/viewpage.action?pageId=1pages/viewpage.action?pageId=1pages/viewpage.action?pageId=1pages/viewpage.action?pageId=1pages/viewpage.action?pageId=1pages/viewpage.action?pageId=1pages/viewpage.action?pageId=1pages/viewpage.action?pageId=1pages/viewpage.action?pageId=1pages/viewpage.action?pageId=1pages/viewpage.action?pageId=1pages/viewpage.action?pageId=1pages/viewpage.action?pageId=1pages/viewpage.action?pageId=1pages/viewpage.action?pageId=1pages/viewpage.action?pageId=1pages/viewpage.action?pageId=1pages/viewpage.action?pageId=1pages/viewpage.action?pageId=1pages/viewpage.action?pageId=1pages/viewpage.action?pageId=1pages/viewpage.action?pageId=1pages/viewpage.action?pageId=1pages/viewpage.action?pageId=1pages/viewpage.action?pageId=1pages/viewpage.action?pageId=1pages/viewpage.action?pageId=1pages/viewpage.action?pageId=1pages/viewpage.action?pageId=1pages/viewpage.action?pageId=1pages/viewpage.action?pageId=1pages/viewpage.action?pageId=1pages/viewpage.action?pageId=1pages/viewpage.action?pag
2021/10/19 17:18:58 [error] 16598#0: *268 upstream sent too big header while reading response header from upstream, , request: "GET /pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676
2021/10/19 17:20:20 [error] 16601#0: *717 upstream sent too big header while reading response header from upstream, , request: "GET /pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676
2021/10/19 17:20:32 [error] 16600#0: *721 upstream sent too big header while reading response header from upstream, , request: "GET /pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676
2021/10/19 17:21:26 [error] 16600#0: *721 upstream sent too big header while reading response header from upstream, , request: "GET /pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676pages/viewpage.action?pageId=6767676