ROC WebUI Returns 403 Forbidden after 6.7.4 Cumulative Patch or 6.8 upgrade

Products

• CA Release Automation - Release Operations Center (Nolio)

Issue/Introduction

After applying the 6.7.4 Cumulative Patch or 6.8 Management Server upgrade, attempting to access the ROC it returns:
HTTP Status 403 - Forbidden
Message: Request with host header * are not allowed by the server security settings
Description: The server understood the request but refuses to authorize it.

 

Environment

Release : 6.7, 6.8, 6.9

Component : Management Server, ROC, NAC

Cause

New Security Configuration host header features added in 6.7.4: distributed.properties Configuration Settings

Resolution

• As documented (here: distributed.properties Configuration Settings), update the http.request.header.allowedHosts setting. You do not have to add multiple entries. But, if you need to then this can be done by using a comma separated list.

Example:

http.request.header.allowedHosts = my.alias.to.roc.com, my.servername, ip.address.of.mgmtserver

Update this settings in file <RA_HOME>\webapps\datamanagement\WEB-INF\distributed.properties and restart NAC service.

 

Or if Host filter in HTTP Security Header is not needed it could de disabled :

• Update the following settings in file <RA_HOME>\webapps\datamanagement\WEB-INF\distributed.properties
  
  http.request.header.enableHostHeaderFilter=true
  
  And recycle NAC service
  
  This could also be done using JMX (and avoid to recycle NAC service) : 
  
  1. Go to JMX console
  
  2. Search for "hostheader" and click the MBean called "noliocenter:securityHostHeaderFilter" or go directly to http://${your_hostname}:20203/mbean?objectname=noliocenter%3Atype%3DsecurityHostHeaderFilter
  
  3. On the right side, select "false" and click "Invoke"