Webcal redirect loop?

Question

Level 1

0 points

Webcal redirect loop?

Attempting to access the web calendar interface (https://server.com/webcal) brings me to a login screen. After logging in, I get stuck in a redirect loop:

Using Chrome:

The webpage at https://server.com/auth?redirect=https://server.com/webcal/ has resulted in too many redirects. Clearing your cookies for this site or allowing third-party cookies may fix the problem. If not, it is possibly a server configuration issue and not a problem with your computer.

Firefox:

The page isn't redirecting properly

Firefox has detected that the server is redirecting the request for this address in a way that will never complete.

https://server.com/auth?redirect=https://server.com/webcal is redirecting to https://server.com/webcal/?auth_token=6F878E5F-3B76-4787-84C7-6EB2AF540AC7, which just redirects it back to the auth page, indefinitely.

I can log into Profile Manager and the Change Password Utility. If I try to navigate directly to https://server.com/auth, it redirects to https://server.com/wiki (which I have disabled). If I enable Wiki I get the exact same redirect loop issue, however.

This was from an upgrade install, not a fresh install (if there even is such a thing). Accessing calendars via CalDAV works fine.

Any suggestions?

Mac mini, Mac OS X (10.7), Server

Posted on Jul 21, 2011 8:49 AM

Reply

Answer 1

Best reply

_morgen__

Level 1

140 points

Jul 22, 2011 9:31 AM in response to kyleaa

In Terminal.app run the following command:

sudo serveradmin settings calendar:Authentication:Wiki:URL = "http://127.0.0.1:8089/RPC2"

...then use Server.app to stop and start calendar server.

The issue is that some upgrades end up with a leftover value for this configuration key, and the above command will set it right.

Reply

Answer 2

kyleaa Author

Level 1

0 points

Jul 22, 2011 12:08 PM in response to _morgen__

I followed these directions, but it appears that several other things have gotten broken with my webserver. After these steps, it stopped responding entirely to requests.

The WebServer/error_log started getting filled with entries stating:

[Fri Jul 22 14:44:27 2011] [error] Server should be SSL-aware but has no certificate configured [Hint: SSLCertificateFile] (/etc/apache2/sites/0000_any_443_.conf:51)

I have checked in /etc/apache2/sites/0000_any_443_conf, and SSLCertificateFile is configured.

If I go into Server.app and go to Hardware->Settings->SSL Certificate and change it to none, the server starts working again, and navigating to it in the browser shows a valid SSL certificate. However, instead of showing the default server splash page, it just shows a default apache index.

Index of /

Apache/2.2.19 (Unix) mod_ssl/2.2.19 OpenSSL/0.9.8r DAV/2 Server at *** Port 443

If I go into Server.app and disable Web and Wiki, it has no effect and apache is still running serving the same index.

Is there any way to completely reset the web services? I'm leery to go and make the changes directly in the apache config, as it seems like Server.app will rewrite them anyways - though it seems like the Server.app config isn't working correctly anyways.

Reply

Answer 3

nexflo_

Level 1

0 points

Jul 24, 2011 1:06 AM in response to _morgen__

Thx morgan, worked for me!

Reply

Answer 4

Ikyo

Level 1

5 points

Jul 24, 2011 7:25 AM in response to nexflo_

Yours actually pulls up? I have a fresh install and it says that I am missing files for some reason.

Reply

Answer 5

nexflo_

Level 1

0 points

Jul 24, 2011 7:45 AM in response to Ikyo

what do your logs in console.app say?

Reply

Answer 6

Ikyo

Level 1

5 points

Jul 24, 2011 7:51 AM in response to nexflo_

Which logs are you needing? It appears to be an apache issue because it says I am missing the img folder in the stylesheets directory. Can you check to see if you have an img folder in: /usr/share/collabd/webaudthd/public/stylesheets

Reply

Answer 7

@Andre

Level 1

0 points

Jul 24, 2011 12:40 PM in response to _morgen__

Thanks ~morgan, worked for me as well and saves me a lot of work!

Reply

Answer 8

Ikyo

Level 1

5 points

Jul 24, 2011 5:00 PM in response to @Andre

Can you check and see if you have that directory?

Reply

Answer 9

Jul 25, 2011 3:14 AM in response to _morgen__

Doesn't work for me. Still got the same issue. A bit annoying since I'm kind of struggling with the ical service anyway and I'd like to see the calendar on the server to find out where entries are lost.

Reply

Answer 10

_morgen__

Level 1

140 points

Jul 25, 2011 10:50 AM in response to mightymartin

mightymartin: you're talking about the "too many redirects" issue? If you've already applied that 'serveradmin settings' command above and restarted calendar server and still getting "too many redirects" it could be Safari's got it cached. Try Safari's "Empty Cache" menu.

Re: lost entries... is iCal.app able to see your events?

Reply

Answer 11

@Andre

Level 1

0 points

Jul 25, 2011 11:49 AM in response to Ikyo

Ikyo: I do not have an 'img' folder, just a webauth.css file. I just updated Snow Leopard server to Lion like suggested by Apple. I dit not have any special software installed, just a roundcube which is now part of Lion as well. The upgrade ran very smooth just the before mentioned issue occured. ~morgen's hint help to work it out so no further work necessary. I just have an issue when I try to delete calendar entries, but that's a different topic.

Reply

Answer 12

Ikyo

Level 1

5 points

Jul 25, 2011 5:12 PM in response to @Andre

I tried the fix and still have the issue. The error logs for apache reflect back to that directory.

Reply

Answer 13

Jul 26, 2011 12:07 AM in response to _morgen__

Well I did run that command but restarted the web server... But the issue persists after restarting iCal and even after rebooting the whole machine.

And I'm not actually losing entries. They just don't always go from my MBP to my iPhone via the server or the other way around as I'm struggling with the SSL. And it would be nice to see where the issue occurs.

Reply

Answer 14

cloudzh

Level 1

10 points

Jul 26, 2011 1:23 AM in response to mightymartin

~morgen solution helped. Make sure you stop iCal (from Server Admin UI) and restart it (note that you need to wait _long_ before it's actually off, check the spinning wheel at the down-right corner). Closing and reopening Server Admin or hitting CMD+R helps in refreshing the app state (this app is crazy...).

Furthermore you can use webappctl (from the command line) to make sure that the web apps have stopped. For instance:

# this will give you the status of all web apps

sudo webappctl status -

# this will stop the webcal app

sudo webappctl stop com.apple.webapp.webcal

# this will stop the webcalssl app

sudo webappctl stop com.apple.webapp.webcalssl

# this will stop the wiki app

sudo webappctl stop com.apple.webapp.collab

And so on... you can find all the web apps in /etc/apache2/webapps

Make sure you stop and restart (webappctl stop/start) at least: webcal, webcalssl, collab. Also remember that you don't necesserarily need to be running webservice for webcal to work - stop web service to debug webcal.

Cheers,

~C

Reply

Answer 15

@Andre

Level 1

0 points

Jul 26, 2011 3:11 AM in response to mightymartin

mightymartin: I observed something similar. It helped to delete the account on the device and setup again. I guess the upgrade did not work that smooth than it felt.

Please note: You cannot create two accounts for the same server, hence, first delete the old one and completely create a new one afterwards.

Reply