Hello, When Google Apps Admins that reside far away from North America that provide our application 3LO access, our attempts to use that authorization fail.
Based on another posting in the OAuth2-Dev forum, this appears to be due problems in Google's ability to synchronize accounts.google.com between different regions. Given we are on App Engine, all our DNS attempts to accounts.google.com will hit the authorization servers in North America, but that is not the case for Germany, Thailand, etc. Can we get a list of the IPs and geographic location of the authorization servers? That way when the 3LO calls fail, we can retry against other authorization servers. THANKS! David Hardwick ===========Here is a similar posting in the OAuth2-Dev group================ https://groups.google.com/forum/#!topic/oauth2-dev/MHH8LqxBSXI I think has found cause of the error 500. The error occurs when clients and servers are located in different geographical regions. I'm in Thailand, but the server is located in Germany. I click the link and confirm access, then I'm redirected to my server in Germany (redirect_uri). The server successfully receives an authorization code, but the request token ends with HTTP error 500 in more than 90% of cases. I checked the IP address for accounts.google.com. Thailand, accounts.google.com = 209.85.175.84. Germany accounts.google.com = 209.85.148.84. I added the following entry "209.85.175.84 accounts.google.com" in the file /etc/hosts on the server in Germany and did not receive any HTTP 500 error. After removal of this entry, I again got errors. This means that there is problems synchronization accounts.google.com in different regions. I found a lot of unresolved topics atgroups.google.com related to this issue. -- *We make Google Apps even better.* *David Hardwick* *CTO* P: 646-237-5388 E: [email protected] *Signature by Flashpanel <http://flashpanel.com/>* *See us in PandoDaily: BetterCloud Debuts FlashPanel to Help Google Beat Microsoft<http://pandodaily.com/2012/07/17/bettercloud-debuts-flashpanel-to-help-google-beat-microsoft/> * -- You received this message because you are subscribed to the Google Groups "Google Apps Domain Information and Management APIs" group. To post to this group, send email to [email protected]. To unsubscribe from this group, send email to [email protected]. For more options, visit this group at http://groups.google.com/group/google-apps-mgmt-apis?hl=en.
