Actions
Defect #19834
closedLogin shows internal host/IP to internet public
Status:
Closed
Priority:
Normal
Assignee:
-
Category:
Security
Target version:
-
Start date:
Due date:
% Done:
0%
Estimated time:
Resolution:
Invalid
Affected version:
Description
When setting Require Authentication under Authentication, when you log out, you are redirected to login page, whose URL is:
https://tracker.xxxx.com.ar/login?back_url=http%3A%2F%2Ftracker.intranet.xxxx.com.ar%2F
In another installation, I see also:
https://tracker.xxxx.com.ar/login?back_url=http%3A%2F%2F192.168.1.4%2F
(The private IP).
It must be noted that BOTH installations run with Nginx as Reverse Proxy.
In my case, Nginx is listening on port 80 and based on the host redirects to my server which has Apache2 + Redmine working.
Actions