By: Jude Fernando user 24 May 2018 at 3:14 a.m. CDT

1 Response
Jude Fernando gravatar
Gluu server is hosted on a amazon ec2 instance on a private subnet. To expose the openid to internet, we have to use the amazon ELB. I installed a apache2 reverse proxy which will hit the gluu server. But the gluu server returns an href on its response and redirect to the server. hosted gluu server on : gluu-ec2-inst1.amazonaws.com hosted apache server on: gluu-elb-inst.amazonaws.com when I used the gluu-elb-inst.amazonaws.com, the response send to the browser has an redirect url to the gluu-ec2-inst1.amazonaws.com. In the following example from the apache log, there is an redirect uri, which point to the internal server. The internal server will never be reached from the external resource. for apache log: gluu-elb-inst.us-east-1.elb.amazonaws.com:443 3.203.36.5 - - [24/May/2018:05:38:41 +0000] "GET /oxauth/authorize?scope=openid+profile+email+user_name&acr_values=auth_ldap_server&response_type=code&redirect_uri=https%3A%2F%2Fgluu-srv-inst1.us-east-1.elb.amazonaws.com%2Fidentity%2Fauthentication%2Fgetauthcode&state=ad872214-785d-476a-a060-951ed57cfd7a&nonce=f3dfe6ae-a52b-423f-ab49-143e08114ed5&client_id=%40%213A0E.33E6.9C98.680E%210001%214CF6.7B23%210008%21AACB.58DC HTTP/1.1" 302 868 "-" " So my question is , how to solve this issue?

By Chris Blanton user 25 May 2018 at 10:56 a.m. CDT

Chris Blanton gravatar
Jude, > hosted apache server on: gluu-elb-inst.amazonaws.com Are you using AWS ELB or are you using an ec2 server instance to front-end as a proxy? I'm under the impression can't install anything on an ELB and that it only handles listen and routing requests.