search cancel

Access Spectrum WebClient throgh reverse proxy

book

Article ID: 112077

calendar_today

Updated On:

Products

CA Spectrum

Issue/Introduction

We have a requirement to allow web access from a customer network to our OneClick server via WebClient. Due to security policies we need to implement an application layer gateway between the customer network and our OneClick server, which will work as a reverse proxy for certain web applications - one of them being OneClick. The use of java is also restricted so we cannot use the java client.

Accessing the WebClient through a reverse proxy causes infinite display of the "Initializing..." message, which blocks all UI access indefinitely.

Why can we not use the OneClick webClient via reverse proxy?

Cause

This is caused by underscores in the header not being accepted and can be worked around via Apache or ngix

Environment

Spectrum 10.2.3 and below.

Resolution

Please reference the following links for solutions.

http://nginx.org/en/docs/http/ngx_http_core_module.html#underscores_in_headers

https://serverfault.com/questions/677433/nginx-ignoring-http-headers-before-host-header-when-using-proxy-pass-to-apache 

https://httpd.apache.org/docs/trunk/env.html 

How to make the Apache 2.4 to accept Web Agent Header Variables with Underscore Characters