https://fridge.ubuntu.com/ <-- Requires Authentication

[Dave Walker]

Requires Authentication ("your details" username & password) to access: https://fridge.ubuntu.com/

http://fridge.ubuntu.com/ works fine.

[Matthew East (mdke)]

I don't think that that url is expected to work - what makes you think that it should? Did you see a link to it somewhere?

[Dave Walker (davewalker)]

This 'bug' was shown to me by a user who couldn't access the fridge and gave up assuming it was down.

I don't know where he obtained the link, but I followed and the problem wasn't initially apparent to myself either.

Surely providing https service on a *.ubuntu.com (which is common in other forms - ie. wiki) would be better if it was made accessible, or if an admin service moved to a non-standard port, or non-root url?

[Matthew East (mdke)]

Ok, although no one should really be ending up at https://fridge.ubuntu.com, if you've come across someone who has, it may be worth changing it. I've filed an admin request to get this done.

[Matthew Nuzum (newz)]

I don't know that there is an easy work around for this, but possibly some clever adjustments to the apache config can handle it. The problem is that the server uses a virtual hosts and one of the virtual hosts uses SSL. Maybe a rewrite rule can be placed on that virtual host before the authentication commands that check the domain name and redirect to the non https hostname. Or maybe specifying the hostname in the VirtualHost instead of * (if that's the case) will circumvent this problem.

Assigning to the canonical sysadmins since they are the ones who can fix this.

[Paul Sladen (sladen)]

#First VH Blank to stop there being a default match on something unintentional
<VirtualHost *:443>
  DocumentRoot /var/www/somewhereblank
</VirtualHost>

<VirtualHost *:443>
  ServerName brilliant.launchpad.net
  ...
  <Location />
    # NB: only return the site and ask for authenication *if* the 'host:' was matched
    Require valid-user
   ...
  </Location>
  ...
</VirtualHost>

<VirtualHost *:443>
  ServerName fridge.ubuntu.com
  # These poor guys didn't really want an SSL'ed connection, repoint them
  RedirectMatch .* http://fridge.ubuntu.com$0
</VirtualHost>

[Matthew East (mdke)]

I opened a ticket on this the other day - #28470

[Kjell Braden (afflux)]

I've trouble adding the fridge calender to evolution, I get "auth required" even when "secure connection" is turned off. I think this is related, as wireshark shows SSL activity.

[Matthew East (mdke)]

Now fixed, thanks to AGY