amazon web services - AWS + SELinux, Permission denied while connecting upstream to jetty server from nginx using ssl -
i'm trying install standalone archiva server , running problem nginx ssl proxy. can hit proxy, 502 bad gateway error jetty server behind it. nginx returns this:
connect() 127.0.0.1:8080 failed (13: permission denied) while connecting upstream. client: xxx.xx.xx.xxx, server: server.at.aws, request: "get /archiva http/1.1", upstream: "http://127.0.0.1:8080/archiva", host: "server.at.aws"
this on aws instance. jetty server listening on port 127.0.0.1:8080. have confirmed can archiva server within instance itself. there special configuration jetty server needs make accept proxy connection?
i forgot turns out important detail configuration. it's on fedora server running selinux. port 8080 out of context in nginx , being denied.
type=avc msg=audit(1380053745.510:1730): avc: denied { name_connect } pid=12145 comm="nginx" dest=8080 scontext=system_u:system_r:**httpd_t**:s0 tcontext=system_u:object_r:**http_cache_port_t**:s0 tclass=tcp_socket http_cache_port_t tcp 8080, 8118, 8123, 10001-10010 http_port_t tcp 80, 81, 443, 488, 8008, 8009, 8443, 9000
i reset jetty server listen on 8008, , i'm not getting permissions denied errors @ least. server still isn't working, reasons not in context of question.
Comments
Post a Comment