Hi there,
I'm trying to get the CMake / CTest / CDash trinity going. Unfortunately
my webserver doesn't like what CTest is asking for:
$ make Experimental
...
Submit files (using http)
Using HTTP submit method
Drop site:http://example.com/submit.php?project=MyProject
Submit failed, waiting 5 seconds...
...
Error when uploading file:
/home/solar/project/Testing/20130304-1755/Build.xml
Error message was: The requested URL returned error: 403
Problems when submitting via HTTP
Errors while running CTest
make[3]: *** [CMakeFiles/Experimental] Error 64
make[2]: *** [CMakeFiles/Experimental.dir/all] Error 2
make[1]: *** [CMakeFiles/Experimental.dir/rule] Error 2
make: *** [Experimental] Error 2
Checking the error_log of the webserver, I found this corresponding
entry:
ModSecurity: Access denied with code 403 (phase 2).
Pattern match "(.*)" at
TX:960904-PROTOCOL_VIOLATION/MISSING_HEADER-REQUEST_HEADERS:Content-Length.
[file
"/etc/apache2/mod_security/activated_rules/modsecurity_crs_49_inbound_blocking.conf"]
[line "26"] [id "981176"] [msg "Inbound Anomaly Score Exceeded (Total
Score: 5, SQLi=, XSS=): Last Matched Message: Method is not allowed by
policy"] [data "Last Matched Data: 960"]
So, it seems that the submit request by CTest doesn't carry the
Content-Length header. Now, one solution would be to bugger the
web hoster into relaxing his security protocols, but the other -
IMHO better - one would be to *provide* the Content-Length.
Or am I doing something wrong here?
I'm also asking myself if I'm missing something crucial in the
setup, but is it correct that anyone is free to submit test data
to my CDash? Because I don't see any kind of authentication going
on...?!?
Regards,
--
Martin Baute
so...@rootdirectory.de
--
Powered by www.kitware.com
Visit other Kitware open-source projects at
http://www.kitware.com/opensource/opensource.html
Please keep messages on-topic and check the CMake FAQ at:
http://www.cmake.org/Wiki/CMake_FAQ
Follow this link to subscribe/unsubscribe:
http://www.cmake.org/mailman/listinfo/cmake
