Evolution #7172
Permettre la configuration du paramètre large_client_header_buffers
Status:
Fermé
Priority:
Normal
Assigned To:
Category:
-
Target version:
Distribution:
EOLE 2.3
Description
Dans le cadre de fédérations SAML entre scribe et seshat (pb rencontré sur l'ent de la réunion et de la martinique), certaines urls peuvent dépasser la taille autorisée par nginx messages SAML de déconnexion avec des requêtes GET).
Le problème a été reglé à la réunion en patchant la configuration de nginx :
large_client_header_buffers 8 8k
doc de l'option : http://wiki.nginx.org/HttpCoreModule#large_client_header_buffers
selon la version de nginx, la taille limite est de 4k ou 8k. A priori c'est 4k sur eole 2.2 et 2.3
Il faudrait:
- soit fixer la taille à 8k par défaut
- soit ajouter une option dans gen_config pour le régler
à vérifier sur eole 2.4, la doc précise que c'est 8k par défaut sur les dernières version de nginx
History
#1 Updated by Bruno Boiget over 9 years ago
exemple de requête :
https://clg-asselindebeauville.ac-martinique.fr:8443/logout?SAMLResponse=nVfJkqPKFd3zFRXlpaKaWQJFdzmSeZZAgCQ2DmaQmMQgJLb%2BGv%2BG%2FWNGqu5%2B1c9%2BDtvBhsy8efPcc%2B7N4eufb2Xxco3bLq%2Brb6%2FoF%2BT1Ja7COsqr9NurYwtv1Ouf36GvVYestTqth96Ku6auuvhlnlh163ng2%2BvQVuva7%2FK56Zdxt%2B7D9Q7o2hr7gqybtu7rsC5eX7i46%2FPK758rZX3fdGsYDov0ze%2B6uMirKA5if7jmRRF%2F8cO30m9n8%2FwyxF%2BSdk0RBA4XTwSvLzL37fUviR9FKEUi84ejYeAnGLUMYzwh0GVAhbTv0xSW0FEQLOkE8QkEpSkywf1gnl79CMKuZ0dolAQouYrCMPIxClmhCBYgK9JfYhS9SmZUAYUkCEqEGJLgcRITAYYlaIzOjrpuiOWq6%2F2q%2F%2FaKzTZvCPqGYTZCrYnVGll6ry%2FuD25nMl7fZyLR9XNa%2B5NA9D8T%2BGCnfZD2%2Bv4wS%2FL1L%2BSs2zjs69bv113cZX7f5P56lvEr%2FNtK7193eToTP7TfVfugf2Z%2FHMcvI%2F6lblMYQxAERmh4Noi6PP3T66z6Y1ocyVVSzw3Wr%2BoqD%2F0in54a6nGf1dELKNK6zfus%2FAOnKIwiD6dv8S18C1Gi%2BtMr%2FN31E9F%2F6eYXbG3nv82xok9P1ixJO%2BdsPP%2FbrV91Sd2W3efG%2F%2BY8rq5xUTdx9Nb9wPhc57939wchw7%2Bg4%2FJ0rof%2FJ%2FqfkX%2B4cP1iiN8LKh3cqcMS%2FnZXLMQxDjFLHtOKZM%2FfvsKfLWcgnymDfxH5pywftipNjbtpUWx3dF%2FBxEEoBIIkhBMA9qaPPTUrBP3Q2mx2sPKbsm8MJ%2Bh8KT0IS%2FtKyckOOoyjyDYUXN2qUcDRvB7kE75QQozgl%2BL92nhnA2%2BaUMM0X3Xdwk43lOvYmcuNpg5HUgS5IjNguSeeFfF6kUfCFg7i4uBqF0m9bxEBqWzeOotn8rwlWdlzVqvBUfyYnG1ApW0WChRPOQbOJ7%2B7elYdGyCD714lpCVY8NTSkLrSqFacM0Tphuv527LhS4ku9P0qN5KVvFhJ0Lh37%2FyWOLqqGye5JiYGBkYrjRGuI42GXRLp4WbTZLFRJTqnAiK7Lv1IuRohOaShf28h6txpcFRQ232AbgR8F5uDnZjfvn1Q%2F4lt6Ksa378LcSARmvN7%2F%2Fsv%2B9gCkrn6%2Bvhdl2Vxd2JZhlNTMMoMSGXzaJAYYY9n2D1pAfD9PLe27QQMJj1fsnMu0iPCANMRAMfcIN3sRtY8cq5pivyoiM6Jv%2BosIgLU4dlML%2B19MfgHA%2FEOSiGL7jnaG1kkFtcgZ4bjwWqgACOzQHRSlUcF%2B%2BzaTn6%2BCRzYManhMqCz2Ym%2F6SwYDU5PdY5HdasbxY8FOf6mMJB5Z5Sg9O7HeZWwck%2BR5N69gz5KWWjotj5u7NkBl04bTh%2F3zz7nlz5of2KZs81rOjg%2FYTOZzlqFfNMm0H%2BgqG3ljDZBWUyRODvfMYInuacH%2FAAjUsguBcTf08NxfytkNjMshxQcVG50yxz59AlV48fupttgDsGcZA7cDJvf64z5XBBib7px3Ot9sBfuMzkzYQLq2fxJZ%2FmnAbjpfoi5ky8KSCgWmVYKJ22PZmFlPVDdoGjvDF4lj2nK5zpARHZ3EXdygHMm%2F5AKAEJmuBE8xlVQzzKbbNWd%2BDPIsN0dwzio0SbDw%2BFITS%2Fe1m5xQppTpI9iGjUUgHeuwCDppXZidb%2FRTOW6JeNFLBRsiBxgKfCcLXTX7%2BiF3ANXGGy7UIB5onNNRf1b13Y3F%2BzUlR%2B2fQFOGRhbaVwQqtQzsHlSEmdkNnwOgf4aLi%2FRuZoWyo5cbWBT26crvjwmAuKeJzVptbt5PqfL8iDwnkIzzeai00UxKQpyEg8pZNxZf%2Brjy8Ac4ZiddsYqkCfJnIjzWGwLold0koTtYJ%2BWpxVYUNZqFQ6qcT3wdEHLKlpDHkMJ8g2%2Bbw4K37Bp0ffoRmNvu0EpyIVUeMl5VdYs4kwHhjPB0o4FtKa2uSQv8KweJBMyOICD5R6fVWYAEE9pKq7mAmP6iWEeiSRZPL85ASLNmsk7GPWcQKO%2F54cf0kM%2Ftd%2BRZVjLzr%2FT%2BkNqVWJ0tl6lx3E3HmV1PDKM6UgQMHl%2BOwFa5zqRZTvxUabMBNgsp%2BtIssZNTl0jPMK1%2BeQ%2B3sniUxo%2F8ucK7fbzyqUwRZKCHnELDUt30krjHnEgeYaw03mRA%2FuU2S02rAKHZ79Ba9Ot6IM871kh1I1yep%2BA%2F2EMeH4Clg4okds90JhM6pGlNWclA%2Fgx9etHekfSuGPquQiriWWgSmWZ0meZoj6OvmQhIVdfNcy4Bxw%2F%2BPvopJWfN5EZbU7%2FUv7Q9%2FofjrjSZSfmZ9yPtp6TjYfpg7e30CP2UbXaPFlDijl%2BJQtxa1ZhbyDRvF2Fd%2FIUlndRFzMkksBSu9Nze5z%2BiLwf3EG%2FJy%2FggP3Bh8NzHFCZNG2ZlBcYM5xHwOY5ZlIMSKi5XHUWYnwwCo%2BNw0I2DKB4zhFcl6cTC3E3lqswLu%2BMnHlU1NqTs2tozLLPzgCXpnNps5sQcqUm75RTTDasH6DKlgtOfaJKlGVSK9oOx9DYJEOnoYFOUZZgHhFkS16KkGGztpcbS4N6PiRymdHPGLHwWmSzIk9RfLD4po2OijhEA8kk10twEpBi7HqP1y1%2FUykqVm7OVIc5IaRZngXa2MRtDr8yyjVYGHmt7xFg6Lp%2FqBVzsTPyplcjsSbiofbuUc1flVPIr%2FQ0T04ahN4GWFjI2KHcwMrB9q65Q47cfntld6uaua30vh%2BsirNdVV106IgsSLPeMrxgbmpcIEYcYvmbubUdJ2KQUWJHRLlQVmuZWnnorJuwK7bwOW6lLDurk4ZHMc43JV7S981t0dOLI0NAvRRdo9gjCx91nSWrJWYlblnXMt3Jgw1mm9iTc1RIpjxy3o0oSs5ZynroIXZ6TWtdQqCobyz3VHAuSElD3bYhR2nz9QRzjKClg%2BDGYeRlP1J85K%2FU%2BXgtlcwVcDzIeh3dpKLHQ6AOVbttyeIgZfmOalQ6a1UWPlaJYzbbacEM9fIK3FqXuyMZJRKxOS4a3zd2PSanPruB5APTZDaYssu1t4shJIn7WR1Wl5Oip8vWRnNBIjgGx7Yi05FbtVXOK1Z0nXJqs9SNCwGqE97aLVjE3zWLk5AGUw%2FH01EbI%2BzgtzVNL1CR2WDD%2FTqGPnI9xnV365A4qeZzUDqnBQJVKBgdWiCr4optqb1tzftFU2k4v%2BVPo3YnYoMpKJK6fYV%2FfzWBPrq%2BX1zg364zv1113p9vyV0%2FN7rP%2F2wdxS%2FPe9B%2Ffg51T%2Bv1bgjDuOvme%2FAnH%2Frc46fxO%2FePv%2F79b2FdVfFtfqi8tI%2Fm0HV5%2FHgV%2Fd7403wu7v28mF3CnzHC%2F%2Fr4fYf%2BCQ%3D%3D&RelayState=https%3A%2F%2Fclg-asselindebeauville.ac-martinique.fr%2Fenvole%2Fportal&SigAlg=http%3A%2F%2Fwww.w3.org%2F2000%2F09%2Fxmldsig%23rsa-sha1&Signature=oqy7MgG63V6nd20prayj%2FIkJCk7O7Md%2BO%2FBfKBRxh7a95SPE%2FajiqUNkp06RzVT5B7QttaE4Xyu3%0Aiz6%2FjvF3gb9sXlV2eWlUfNtyz5b9sXNlZGgUweCOEid6B8VOH9JnGOsVya4Pumzs2lU2ufzom%2BOY%0AGJ8i%2B0HaBHmfRqOq5qQzy5Y7ge9Uq7mS8LjwZbZdIVZlbQCa3qRnSvix3Wg%2FiT%2FWg5L16%2B5UDtmb%0AfQ3Y2m17YksMerxHR50KFDTehrN%2BvUwb5c7bqo9NDmx4C1IylaK%2Bw1vq3uEPr1zAls66TPw1XL8A%0AujpjNlyfLvHsKANw1s5yo9gSdckdhxQTkv6L1g%3D%3D%0A
#2 Updated by Luc Bourdot over 9 years ago
- Target version changed from Mises à jour 2.3.12 to Mises à jour 2.3.13
#3 Updated by Fabrice Barconnière over 9 years ago
- Due date set to 03/21/2014
- Status changed from Nouveau to Accepté
#4 Updated by Joël Cuissinat over 9 years ago
- Assigned To set to Joël Cuissinat
#5 Updated by Joël Cuissinat over 9 years ago
- Status changed from Accepté to Résolu
- % Done changed from 0 to 100
Appliqué par commit 976b4ed798d36dc557719d506045daf7a9860ee4.
#6 Updated by Klaas TJEBBES over 9 years ago
- Status changed from Résolu to Fermé