[Cdash] Fwd: [CMake] HTTP Content-Length missing

[Julien Jomier]

The 403 error is usually caused by the web server forbidding HTTP PUT 
requests. The best way to test this is to try sending the file using curl.

Julien

On 04/03/2013 21:52, Jean-Christophe Fillion-Robin wrote:
> Hi Folks,
>
> Any idea what is wrong with the install of Martin ?
>
> Thanks
> Jc
>
>
> ---------- Forwarded message ----------
> From: *Martin Baute* <solar at rootdirectory.de
> <mailto:solar at rootdirectory.de>>
> Date: Mon, Mar 4, 2013 at 1:03 PM
> Subject: [CMake] HTTP Content-Length missing
> To: cmake at cmake.org <mailto:cmake at cmake.org>
>
>
> Hi there,
>
> I'm trying to get the CMake / CTest / CDash trinity going. Unfortunately
> my webserver doesn't like what CTest is asking for:
>
> $ make Experimental
> ...
> Submit files (using http)
>     Using HTTP submit method
>     Drop site:http://example.com/__submit.php?project=MyProject
> <http://example.com/submit.php?project=MyProject>
>     Submit failed, waiting 5 seconds...
> ...
>     Error when uploading file:
> /home/solar/project/Testing/__20130304-1755/Build.xml
>     Error message was: The requested URL returned error: 403
>     Problems when submitting via HTTP
> Errors while running CTest
> make[3]: *** [CMakeFiles/Experimental] Error 64
> make[2]: *** [CMakeFiles/Experimental.dir/__all] Error 2
> make[1]: *** [CMakeFiles/Experimental.dir/__rule] Error 2
> make: *** [Experimental] Error 2
>
>
> Checking the error_log of the webserver, I found this corresponding
> entry:
>
> ModSecurity: Access denied with code 403 (phase 2).
> Pattern match "(.*)" at
> TX:960904-PROTOCOL_VIOLATION/__MISSING_HEADER-REQUEST___HEADERS:Content-Length.
> [file
> "/etc/apache2/mod_security/__activated_rules/modsecurity___crs_49_inbound_blocking.conf"]
> [line "26"] [id "981176"] [msg "Inbound Anomaly Score Exceeded (Total
> Score: 5, SQLi=, XSS=): Last Matched Message: Method is not allowed by
> policy"] [data "Last Matched Data: 960"]
>
>
> So, it seems that the submit request by CTest doesn't carry the
> Content-Length header. Now, one solution would be to bugger the
> web hoster into relaxing his security protocols, but the other -
> IMHO better - one would be to *provide* the Content-Length.
>
> Or am I doing something wrong here?
>
> I'm also asking myself if I'm missing something crucial in the
> setup, but is it correct that anyone is free to submit test data
> to my CDash? Because I don't see any kind of authentication going
> on...?!?
>
> Regards,
> --
> Martin Baute
> solar at rootdirectory.de <mailto:solar at rootdirectory.de>
> --
>
> Powered by www.kitware.com <http://www.kitware.com>
>
> Visit other Kitware open-source projects at
> http://www.kitware.com/__opensource/opensource.html
> <http://www.kitware.com/opensource/opensource.html>
>
> Please keep messages on-topic and check the CMake FAQ at:
> http://www.cmake.org/Wiki/__CMake_FAQ <http://www.cmake.org/Wiki/CMake_FAQ>
>
> Follow this link to subscribe/unsubscribe:
> http://www.cmake.org/mailman/__listinfo/cmake
> <http://www.cmake.org/mailman/listinfo/cmake>
>
>
>
> --
> +1 919 869 8849 <tel:%2B1%20919%20869%208849>
>
>
>
> --
> +1 919 869 8849
>
>
> _______________________________________________
> Cdash mailing list
> Cdash at public.kitware.com
> http://public.kitware.com/cgi-bin/mailman/listinfo/cdash
>