[Dachs-support] proxy and adql queries

Markus Demleitner msdemlei at ari.uni-heidelberg.de
Tue May 11 17:39:53 CEST 2021


Chloe,

On Tue, May 11, 2021 at 04:06:36PM +0200, ChloƩ Azria wrote:
> I deploy DaCHS with Docker on the Mesocentre ESPRI for the Laboratory GEOPS,
> and due to a proxy, we decided to redirect the Vitual Machine Server address
> (percevalastro1.ipsl.polytechnique.fr) to (https://dachs-vo.ipsl.fr) for
> external access.
> 
> But I have a problem, when I interrogate tables from
> (https://dachs-vo.ipsl.fr) with adql queries, it redirects to the wrong site
> (percevalastro1.ipsl.polytechnique.fr) so it fails.
> 
> I have set serverURL: https://dachs-vo.ipsl.fr in the gavo.rc but the issue
> still appens.

This is exactly right.  Just one little thing: When the https
termination is done by the reverse proxy, also set

[web]
adaptProtocol: False

or else DaCHS will try to redirect people to https when they already
are and still ask for it.

> Do you know how can I get rid of this problem ?

Given you've configured the thing correctly, I can't really say
what's going wrong, or even where DaCHS would get the
percevalastro1.ipsl.polytechnique.fr name from; I'm pretty sure it
doesn't do reverse DNS anywhere.

So... hm.  Given Docker has this extra level of indirection, could
you make extra sure you've re-made the container (I'm asking because
I once hunted a bug for an hour when I simply hadn't called docker
build...)

If that's ok, the only thing I could imagine is a stale gavo.rc
sitting around.  You see, DaCHS reads configuration from both
/etc/gavo.rc and $HOME/.gavorc.  If the wrong host name came from
/root/.gavorc (in docker), that might explain things.

If this sounds far-fetched, we could take it to the next level; DaCHS
lets change where it looks for the configuration.  The variables are
GAVOSETTINGS for /etc/gavo.rc and GAVOCUSTOM for ~/.gavorc (sounds
crazy, but there are good reasons to make them configurable).  So...
can you check whether those are defined within your container?

        -- Markus


More information about the Dachs-support mailing list