Confusing trusted domains error message when proxied

[edeca]

I am using v8 and it sits behind an Apache reverse proxy. I get the usual error:

You are accessing the server from an untrusted domain. Please contact your administrator

The crucial thing is that it shows the local IP address of the Owncloud server and the clickable link also contains the IP address. However the IP address is in the config as it should be:

'trusted_domains' => array ( '10.25.0.2' )

The actual problem is that the FQDN used by the reverse proxy is not in the trusted_domains.

Packet dumps show that the proxy is setting the Host header correctly (to the IP address) and X-Forwarded-Host (the FQDN). So I assume the trusted domains feature is also using X-Forwarded-Host (awesome) but the error is using the Host header (incorrectly).

[DeepDiver1975]

@LukasReschke mind taking a quick look? Do we miss some documentation? 🙊

[LukasReschke]

Who needs documentation? – Real men call @DeepDiver1975 and ask him to configure it for him 🙈

[LukasReschke]

@edeca Please post your whole config. Did you also specify

core/config/config.sample.php

Lines 952 to 961 in e94152b

	/**
	* List of trusted proxy servers
	*/
	'trusted_proxies' => array('203.0.113.45', '198.51.100.128'),
	/**
	* Headers that should be trusted as client IP address in combination with
	* `trusted_proxies`
	*/
	'forwarded_for_headers' => array('HTTP_X_FORWARDED', 'HTTP_FORWARDED_FOR'),

?

[edeca]

Full config below. I did not specify anything other than the basics.

<?php
$CONFIG = array (
  'instanceid' => 'xxxx',
  'passwordsalt' => 'xxxx',
  'secret' => 'xxxx',
  'trusted_domains' =>
  array ( '10.25.0.2', '192.168.1.9', 'fqdn.example.com' ),
  'datadirectory' => '/var/www/owncloud/data',
  'dbtype' => 'mysql',
  'version' => '8.0.2.0',
  'dbname' => 'owncloud',
  'dbhost' => 'localhost',
  'dbtableprefix' => 'oc_',
  'dbuser' => 'owncloud',
  'dbpassword' => 'xxxxx',
  'installed' => true,
);

If the FQDN is removed from the trusted_domains array the link on the error page looks like:

http://10.25.0.2/owncloud/index.php/settings/admin?trustDomain=10.25.0.2

With the FQDN added to trusted_domains it all works fine. The confusing thing is the error message.

[PVince81]

@LukasReschke any update ?