View Issue Details
ID | Project | Category | View Status | Date Submitted | Last Update |
---|---|---|---|---|---|
0005502 | SOGo | with SOGo | public | 2022-04-19 12:20 | 2022-12-31 03:50 |
Reporter | fsoyer | Assigned To | |||
Priority | high | Severity | minor | Reproducibility | random |
Status | new | Resolution | open | ||
Platform | [Server] Linux | OS | RHEL/CentOS | OS Version | 7 |
Product Version | 5.5.0 | ||||
Summary | 0005502: Random error on alias WebServerResources | ||||
Description | Hi,
after sometimes, randomly (from some hours to some days). This "?lang=fr" added inside the alias, generate 404 errors, triggers our IDS and block regular clients. Restarting Sogo solve the problem... For some hours... | ||||
Steps To Reproduce | I don't find how to reproduce it. | ||||
Additional Information | here is the related part of the conf of nginx :
| ||||
Tags | No tags attached. | ||||
related to | 0005332 | new | Problem with displaying SOGo in browser (with tested temporary solution ) |
Have you customized any wox template? SOGo doesn't use the |
|
I don't know what "wox" templates are, I don't change anything in Sogo, the only file I customized was the nginx conf. I found this example :
Do you see ? At on time, in the GET requests, it suddenly becomes "GET /SOGo?lang=fr.woa/WebServerResources/". I don't think this is a client problem, as it is solves for some hours if I restart the service, but what do you mean by "a broken extension" ? |
|
SOGo won't add "lang=fr" to the URL. So the cause is external to SOGo. A broken extension would be a browser extension that incorrectly manipulates either URLs or the HTML content. Can you reproduce the issue with a pristine browser? |
|
I'm sure that it is not extensions. This users are '"basics" and probably can't even imaginate that "extensions" exist for a browser... And when it arrives, all users on this server are impacted at the same time. |
|
Does the 404 appear when accessing a module other than Mail? |
|
Difficult to say, as the module isn't displayed in the url "WebserverResources", but for a PID given, the "good" url in log preceding the ones with "lang=fr" can be other than Mail Apr 19 13:55:50 sogod [18153]: 127.0.0.1 "GET /SOGo/so/xxxx.xxxx@xxxx.fr/Mail/0/folderINBOX/309/view HTTP/1.1" 200 38288/0 0.627 - - 68K - 16 Apr 19 09:44:04 sogod [18152]: 127.0.0.1 "GET /SOGo/so/xxxx.xxxx@xxxx.fr/Calendar/view HTTP/1.1" 200 303769/0 0.668 487328 37% 0 - 16 |
|
Those files are referred in UIxPageFrame.wox. Can you snif the traffic coming out of sogod on port 20000 (not nginx) and report the URLs that you see for those resources? |
|
Mmmh I see a port 20000 from sogod, but I guess you don't want some output from something like tcpdump, even with -w flag... Do you how any tool for displaying readable urls from this port 20000 ? |
|
OK I found ngrep in repository EPEL. I try it. |
|
You can also use tcpflow: |
|
OK, I get the error just when I was trying ngrep. This will be difficult to anonimize tho logs. Tell me if I check "private", I can upload files here only for your eyes ? |
|
The point is to simply confirm that you see URLs with "?lang=fr" coming from sogod on port 20000. |
|
Oh OK, and I can add another info. |
|
Sorry, I made a mistake : there is no URL with "WebServerResource" or "woa". But if I remove any regex, I see just normal URLs, like those logged by nginx. |
|
What I understand is, that for an unknown reason, "/SOGO.woa/' becomes "/SOGO?lang=fr.woa/". What is translating this alias ? Server ? Client ? I found no "lang=fr" in the nginx configuration. I firstly supposed that it appends only on the alias "/SOGo.woa/WebServerResources/" (I found only errors 404 with "?lang=fr.woa/") but, continuing to dig in logs, I search "lang=fr" and I find that, when errors 404 append, there can be (not always) some lines like that :
This is accepted (HTTP 200) because there is nothing but some not significant "/" after lang=fr. So I wonder if the problem is not rather on an simple alias "/SOGo" ?
If this "lang=fr" is passed to port 20000, this means that nginx received it and passed it to sogod ? |
|
I would recommend to first find how to reproduce the problem. You could also switch to Apache and see if the problem disappears. You could also check the community wiki for the nginx configuration. |
|
I'm having the same problem with SOGo 5.8.0, but the string in the URL is not ?lang=fr but _?task=mail&_action=refresh. That string is being used by another application running in the same nginx but with the location /mail (roundcube). For some reason nginx is mixing stuff between those two applications. Did you find a solution for this problem? |
|
Date Modified | Username | Field | Change |
---|---|---|---|
2022-04-19 12:20 | fsoyer | New Issue | |
2022-04-19 12:33 | francis | Description Updated | |
2022-04-19 12:35 | francis | Additional Information Updated | |
2022-04-19 12:40 | francis | Note Added: 0015970 | |
2022-04-19 13:23 | fsoyer | Note Added: 0015971 | |
2022-04-19 13:24 | francis | Note Edited: 0015971 | |
2022-04-19 13:27 | francis | Note Added: 0015972 | |
2022-04-19 14:14 | fsoyer | Note Added: 0015973 | |
2022-04-19 14:26 | francis | Note Added: 0015974 | |
2022-04-19 14:38 | fsoyer | Note Added: 0015975 | |
2022-04-19 15:23 | francis | Note Added: 0015976 | |
2022-04-19 16:18 | fsoyer | Note Added: 0015977 | |
2022-04-19 16:27 | fsoyer | Note Added: 0015978 | |
2022-04-19 16:47 | francis | Note Added: 0015979 | |
2022-04-19 16:48 | fsoyer | Note Added: 0015980 | |
2022-04-19 16:53 | francis | Note Added: 0015981 | |
2022-04-19 17:03 | fsoyer | Note Added: 0015982 | |
2022-04-19 17:06 | fsoyer | Note Added: 0015983 | |
2022-04-20 09:01 | fsoyer | Note Added: 0015984 | |
2022-04-20 12:38 | francis | Note Edited: 0015984 | |
2022-04-20 12:43 | francis | Note Added: 0015985 | |
2022-04-25 20:14 | francis | Severity | major => minor |
2022-04-27 20:06 | francis | Relationship added | related to 0005332 |
2022-12-31 03:50 | jdbravo | Note Added: 0016514 |