Crucible Proxy issues behind SSL VPN and Proxy Server

[Scott Grover]

Experts,

I am currently working an a JIRA, Confluence, Crucible/ Fisheye install in a development lab that does not have access to the internet.  the topology is as follows

SSL VPN --> Firewall --> Proxy Server --> JIRA / Confluence Server

SSL VPN --> Firewall --> Proxy Server --> Crucible / Fisheye Server

(Unfortunately the topology is ugly, however it doesn't appear that we will be able to change it)

The products are sort of working after installing following Atlassian's instructions on using a proxy server. However the issues I am still seeing are really affecting usability. For now I will just focus on Crucible

For example:

Users can log into crucible via the SSL VPN but cannot initiate code reviews.  The window that comes up after clicking create code review, "select the project" just refreshes every time the create review button is clicked instead of proceeding to the add content for review window.  However if the user accesses Crucible via the proxy server from behind the firewall, they can create a code review without issue.

Also, the moderator cannot close the review from the ssl vpn.  Attempts to do so result in an XSRF error:

*********

An error has occurred •Information

Error

XSRF Error

Error 2

URL: /codereview/json/cru/GSII-11/reviewUpdatedAjax

An error was encountered

No further details were provided.

Error 3

Not Found

Error 4

URL: /codereview/json/cru/GSII-11/changeStateAjax

A com.opensymphony.xwork.config.ConfigurationException was encountered There is no Action mapped for namespace /cru and action name changeStateAjax-action:closeReview. Check if there is such an action name with such namespace defined in the xwork.xml and also if such an action class exists. Check also the log to see if the action class is successfully loaded.                 You are running release                                CR3.7.0                                FE3.7.0                (20150127093303 2015-01-27),                please report your release number when reporting bugs.           

Got a suggestion or an issue?                     Discuss it in our forums or                    visit our support website for other options.

**********

The site URL is set to go through the proxy server. I have also set it as the ssl vpn, either way the issues persist.  The problem is proxy setting related and appears to be most applicable to AJAX calls, but I am at a loss as to what else I can set beyond the proxy server and proxy host settings in the server settings.

My primary questions are:

Has anyone else dealt with this type of configurations successfully?

Does anyone have any ideas on how to adjust the settings to make this work?

Thank you,

Scott

[rrudnicki]

Hi Scott, 

This looks very specific environment issue. But, I don’t think SSL VPN users should pass by your proxy (unless you have a specific reason for this). Also, this proxy you’ve mentioned is a reverse proxy or a forward proxy?

For this behaviour, I guess what is happening is a routing issue. I recommend you to start checking what is the path the users from SSL VPN are doing to reach the Crucible server. I believe they might not passing the proxy on in going but returning across the proxy and this might causing this behaviour.

Hope this helps.

Regards, 

Renato Rudnicki 

[Sergey Svishchev]

> There is no Action mapped for namespace /cru and action name changeStateAjax apparently the app is not aware is was deployed under /codereview context -- check settings in "Global Settings -> Server -> Web Server" section (esp. Site URL and Web context)