Hi John,

thanks for your answer. The nginx config can be found at https://gist.github.com/jenzopr/623c3541419ce33f662c What I did was the following: 1) Stopping both servers, nginx and galaxy 2) Removing all log files and the tmp files in upload_store 3) Restarting the servers 4) Starting a fresh browser session, deleting all cookies. 5) Navigating to my galaxy via the browser (172.16.12.122/galaxy, not 172.16.12.122:8080) 6) Login and upload a file test.txt

The file appears in the upload_store, but this time I got a 403 although I was logged in properly. Best, Jens

-----Original Message----- From: John Chilton [mailto:jmchilton@gmail.com] Sent: Mittwoch, 2. März 2016 21:30 To: Preussner, Jens Cc: galaxy-dev@lists.galaxyproject.org Subject: Re: [galaxy-dev] nginx data upload request never reaches /api/tools

Can you share your nginx config? Perhaps with a gist or something.

-John

On Mon, Feb 29, 2016 at 12:35 PM, Preussner, Jens Jens.Preussner@mpi-bn.mpg.de wrote:

Hi all,

I set up the data upload using nginx as described in the wiki (https://wiki.galaxyproject.org/Admin/Config/nginxProxy, using the subdirectory /galaxy).

The uploaded file also appears inside the uploade_store folder on the galaxy server, but galaxy does not add the file.

Investigating the log files, I found the corresponding lines in the nginx.error.log:

# Post request is received

2016/02/29 12:55:37 [notice] 13156#0: *4 "^(GET|HEAD|POST)$" matches "POST", client: 172.16.17.17, server: , request: "POST /_upload HTTP/1.1", host: "172.16.12.122", referrer: http://172.16.12.122/galaxy/

# Upload starts

2016/02/29 12:55:37 [info] 13156#0: *4 started uploading file "boxes.txt" to "/mnt/idrive1/database/tmp/upload_store/0020132707" (field "files_0|file_data", content type "text/plain"), client: 172.16.17.17, server: , request: "POST /_upload HTTP/1.1", host: "172.16.12.122", referrer: http://172.16.12.122/galaxy/

# Upload done, the file is present in the given path

2016/02/29 12:55:37 [info] 13156#0: *4 finished uploading file "boxes.txt" to "/mnt/idrive1/database/tmp/upload_store/0020132707", client: 172.16.17.17, server: , request: "POST /_upload HTTP/1.1", host: "172.16.12.122", referrer: "http://172.16.12.122/galaxy/"

# Redirection starts?

2016/02/29 12:55:37 [notice] 13156#0: *4 "^(GET|HEAD|POST)$" matches "POST", client: 172.16.17.17, server: , request: "POST /_upload HTTP/1.1", host: "172.16.12.122", referrer: "http://172.16.12.122/galaxy/"

2016/02/29 12:55:37 [notice] 13156#0: *4 "nginx_redir=([^&]+)" does not match "", client: 172.16.17.17, server: , request: "POST /_upload HTTP/1.1", host: "172.16.12.122", referrer: "http://172.16.12.122/galaxy/"

2016/02/29 12:55:37 [notice] 13156#0: *4 "" matches "/_upload_done", client: 172.16.17.17, server: , request: "POST /_upload HTTP/1.1", host: "172.16.12.122", referrer: "http://172.16.12.122/galaxy/"

# Redirection should be done here

2016/02/29 12:55:37 [notice] 13156#0: *4 rewritten data: "/galaxy/api/tools", args: "", client: 172.16.17.17, server: , request: "POST /_upload HTTP/1.1", host: "172.16.12.122", referrer: "http://172.16.12.122/galaxy/"

# ModSecurity seems to block the redirect?

2016/02/29 12:55:37 [info] 13156#0: *4 ModSecurity: invalid "Content-Length" header, client: 172.16.17.17, server: , request: "POST /_upload HTTP/1.1", host: "172.16.12.122", referrer: "http://172.16.12.122/galaxy/"

2016/02/29 12:55:37 [notice] 13156#0: *4 "^(GET|HEAD|POST)$" matches "GET", client: 172.16.17.17, server: , request: "POST /_upload HTTP/1.1", host: "172.16.12.122", referrer: "http://172.16.12.122/galaxy/"

A ModSecurityEnabled off; within the /_upload and /_upload_done of the nginx config did not help.

Any idea why the Content-Length header causes problems and is blocked by modSec? Any workaround for ModSec to accept everything that goes from internal to internal?

Thanks for your help!

Best,

Jens

---

Please keep all replies on the list by using "reply all" in your mail client. To manage your subscriptions to this and other Galaxy lists, please use the interface at: https://lists.galaxyproject.org/

To search Galaxy mailing lists use the unified search at: http://galaxyproject.org/search/mailinglists/