k
Size: a a a
2020 February 08
k
вот сюда всего лишь допиши свои proxy_set_header-ы ...
I
вот сюда всего лишь допиши свои proxy_set_header-ы ...
nginx:
1.1.1.1 - - [07/Feb/2020:22:31:11 +0000] "GET /webdav/ HTTP/1.1" 400 226 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" "-"
1.1.1.1 - - [07/Feb/2020:22:31:31 +0000] "GET /webdav/ HTTP/1.1" 400 226 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" "-"
webdav:
[Fri Feb 07 22:31:11.080550 2020] [auth_digest:error] [pid 367:tid 140560315099880] [client 172.18.0.1:38714] AH01786: uri mismatch - </webdav/> does not match request-uri </>
172.18.0.1 - test [07/Feb/2020:22:31:11 +0000] "GET / HTTP/1.0" 400 226 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
[Fri Feb 07 22:31:31.920522 2020] [auth_digest:error] [pid 367:tid 140560315005672] [client 172.18.0.1:38718] AH01786: uri mismatch - </webdav/> does not match request-uri </>
172.18.0.1 - test [07/Feb/2020:22:31:31 +0000] "GET / HTTP/1.0" 400 226 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"Вот с таким конфигом:
location /webdav/ {
proxy_pass http://172.22.130.70:8800/;
proxy_set_header X-Forwarded-Host $host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header Host $host;
proxy_pass_request_headers on;
proxy_set_header Authorization $http_authorization;
proxy_pass_header Authorization;
}AM
ну, тут уже auth_digest:error
add_header DAV 1, 3, extended-mkcol, 2
add_header MS-Author-Via: DAV
I
add_header DAV 1, 3, extended-mkcol, 2
add_header MS-Author-Via: DAV
это вроде же для apache?
AM
это вроде же для apache?
ну а что ты предлагаешь, это не апач хедеры генерит, а webdav
AM
это вроде же для apache?
и потом там версия протокола, а у тебя вероятно ошибка версии протокола вот я подумал а вдруг прокатит
Vs
nginx:
1.1.1.1 - - [07/Feb/2020:22:31:11 +0000] "GET /webdav/ HTTP/1.1" 400 226 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" "-"
1.1.1.1 - - [07/Feb/2020:22:31:31 +0000] "GET /webdav/ HTTP/1.1" 400 226 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" "-"
webdav:
[Fri Feb 07 22:31:11.080550 2020] [auth_digest:error] [pid 367:tid 140560315099880] [client 172.18.0.1:38714] AH01786: uri mismatch - </webdav/> does not match request-uri </>
172.18.0.1 - test [07/Feb/2020:22:31:11 +0000] "GET / HTTP/1.0" 400 226 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
[Fri Feb 07 22:31:31.920522 2020] [auth_digest:error] [pid 367:tid 140560315005672] [client 172.18.0.1:38718] AH01786: uri mismatch - </webdav/> does not match request-uri </>
172.18.0.1 - test [07/Feb/2020:22:31:31 +0000] "GET / HTTP/1.0" 400 226 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"Вот с таким конфигом:
location /webdav/ {
proxy_pass http://172.22.130.70:8800/;
proxy_set_header X-Forwarded-Host $host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header Host $host;
proxy_pass_request_headers on;
proxy_set_header Authorization $http_authorization;
proxy_pass_header Authorization;
}начните c ТЗ
что там на BE ? какие настройки, особенно по обработке URI ?
что там на BE ? какие настройки, особенно по обработке URI ?
s
Web security technology:
- security threats
- fuzzing
- attacks
- testing tools...
@cybersecuritytechnologies
- security threats
- fuzzing
- attacks
- testing tools...
@cybersecuritytechnologies