CTX212446
2016-05-02
1970-01-01
.Issue: STAR URL in relaxation rule is blocked after upgrading. The customer upgraded from 9.3_62.4 to 10.5_61.11 and START URL is blocked. ...

Symptoms or Error

.Issue:
??
STAR URL in relaxation rule is blocked after upgrading. The customer upgraded from 9.3_62.4 to 10.5_61.11 and?? START URL is blocked.
In 9.3, it was not blocked. As a result of the problem isolation, we found that the issue occurs when you configure both multiple- defined URL and single-defined URL on 1 profile.
??
??
??

Please see observation regarding the issue:
??
Start URL Relaxation Rule
------------------------------
Defined multiple URL
^https://(zeus|tigris|euphrates)\\.andrew\\.ac\\.jp/(Gakusei|Kyoin)/$
??
Single URL
^http://euphrates\\.andrew\\.ac\\.jp/career2/.*\\.(html|xml)$
??
Observations:
1)
Target??URL:https://euphrates.andrew.ac.jp/gakusei/
??
In case both rules above are enabled,
??
You can access single defined URL below.??http://euphrates.andrew.ac.jp/career2/index.html
??
However, you can't access URL defined for multiple URL's and it is blocked by StartURL.
http://euphrates.andrew.ac.jp/Gakusei/
??
2)
In case you disable single-defined URL, you can access URL defined for multiple URL's??http://euphrates.andrew.ac.jp/Gakusei/
??
??
??
Lab configuration and steps:
1)I am able to reproduce the issue in Lab in 11.0 63.16 build and in customer build.Issue not observed in 10.5 59.11 build.
??
The ip address of the device is 10.107.20.190 nsroot/nsroot
bind appfw profile APPFW_TEST -startURL "^[^?]+[.](cgi|aspx?|jsp|php|pl)([?].*)? $"
bind appfw profile APPFW_TEST -startURL "^https://euphrates\\.andrew\\.ac\\.jp/career2/.*\\.(html|xml)$" -comment "pdf + html + xml files <== pdf removed on 201???????????????????????????????????????????????????????????????????????????????????????????????????????????????????? 2/7/12 by Goto"
add lb vserver APPFW_VIP HTTP 10.107.20.192 80 -persistenceType NONE -Listenpolicy None -cltTimeout 180
bind lb vserver APPFW_VIP APPFW_service
bind lb vserver APPFW_VIP -policyName APPFW_POLICY -priority 100 -gotoPriorityExpression END -type REQUEST
??
??
You can access single defined URL below.??http://euphrates.andrew.ac.jp/career2/index.html
??
However, you can't access URL defined for multiple URL's and it is blocked by StartURL.
http://euphrates.andrew.ac.jp/Gakusei/
??

Solution

Issue is fixed in the following builds
??
11.0(Checked)66_4+3/24/16 5:34:26 AM(Checked)NS11.0: Build 66.501.nc??
10.5(Checked)62_5+3/24/16 5:50:19 AM(Checked)NS10.5: Build 62.7.nc??

Problem Cause

Starturl relaxations may not work sometimes when profile has similar bindings with grouping.??
'detailed_large_pattern_match' function is not returning all possible pending matches for starturl comparison which results in 302 Redirection.

Applicable Products


 

Join the conversation

Citrix Discussions

Open a case

Citrix Support

特别说明


本文来源为Citrix.com所有,翻译后版权归翻译者所有.如需转载请注明出处.

文档版本


.

广告招租


最新留言


.

广告招租


.