Access denied when using https on osticket - Nginx

kamrang

Hi, I'm using osticket 18.1, I followed the nginx config above and https is running and the web can also appear, but I'm having a problem that the agent user access that I usually use is rejected, if I return to the http config the access is successful, is there any solution for this?

# HTTP
server {
    listen      80;
    server_name mydomain.com;
    return 301 https://$server_name$request_uri;
}

#HTTPS
server {
	listen 443 ssl;
	listen [::]:443 ssl;
	server_name mydomain.com;

	# SSL
	ssl_certificate /etc/ssl/myssl.crt;
	ssl_certificate_key /etc/ssl/myssl.key;

	# Directory osticket
	root /var/www/html/intix;

	# Loging
	access_log  /var/log/nginx/access.log;
	error_log  /var/log/nginx/error.log;

	# Config osticket
	index index.php index.html;

	set $path_info "";

	location ~ /include {
            deny all;
            return 403;
        }

        if ($request_uri ~ "^/api(/[^\?]+)") {
            set $path_info $1;
        }

        location ~ ^/api/(?:tickets|tasks).*$ {
            try_files $uri $uri/ /api/http.php?$query_string;
        }

        if ($request_uri ~ "^/scp/.*\.php(/[^\?]+)") {
            set $path_info $1;
        }

        location ~ ^/scp/ajax.php/.*$ {
            try_files $uri $uri/ /scp/ajax.php?$query_string;
        }

        location / {
            try_files $uri $uri/ index.php;
        }

        location ~ \.php$ {
            fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
            include        fastcgi_params;
            fastcgi_pass unix:/run/php/php8.1-fpm.sock;
            fastcgi_param  PATH_INFO    $path_info;
        }
}

KevinTheJedi

kamrang

After a failed login attempt do you see "Access Denied" in the login box, or do you see "Authentication Required"? If you see Access Denied that typically means the login information was incorrect.

Are you using any authentication plugins? Are you able to login with other accounts? Any errors in your web server error logs, PHP error logs, or database error logs?

Cheers.

kamrang

Thank you for your reply, when I changed the nginx config from http to https I couldn't log in using my agent access as well as other accesses, strangely the agent access can only be used on the http web

There are no plugins that I use and there are no errors in PHP or the web server, only logs in the Osticket admin dashboard:

The nginx config for http that I use is like this:

server {
    # Port that the web server will listen on.
    listen 80 default;

    # Host that will serve this project.
    server_name mydomain.com;

    # The location of our projects public directory.
    root /var/www/html/intix;

    # Index
    index index.php index.html;

    try_files $uri $uri/ /index.php?$query_string;

    set $path_info2 "";

    location ~ /include {
        deny all;
        return 403;
    }

    if ($request_uri ~ "^/api(/[^\?]+)") {
        set $path_info2 $1;
    }

    location ~ ^/api/(?:tickets|tasks).*$ {
        try_files $uri $uri/ /api/http.php?$query_string;
    }

    if ($request_uri ~ "^/scp/.*\.php(/[^\?]+)") {
        set $path_info2 $1;
    }

    if ($request_uri ~ "^/.*\.php(/[^\?]+)") {
        set $path_info2 $1;
    }

    location ~ ^/scp/ajax.php/.*$ {
        try_files $uri $uri/ /scp/ajax.php?$query_string;
    }

    location ~ ^/ajax.php/.*$ {
        try_files $uri $uri/ /ajax.php?$query_string;
    }

    location / {
        try_files $uri $uri/ index.php;
    }

    location ~ \.php$ {
        include snippets/fastcgi-php.conf;
        fastcgi_param  PATH_INFO        $path_info2;
#        fastcgi_param   HTTPS $fe_https;
        fastcgi_pass unix:/run/php/php8.1-fpm.sock;
    }

    location ~ /\.ht {deny all;}
}

# Status server
server {
    listen 8080;

    location /nginx_status {
      stub_status on;
      access_log off;
    }

    location ~ ^/(status|ping)$ {
        include fastcgi_params;
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
        fastcgi_pass unix:/run/php/php8.1-fpm.sock;
    }
}

KevinTheJedi

kamrang

The Access Denied message coupled with the system logs basically confirms you are using the wrong login information.

Do you normally use the browser's autofill feature on HTTP and you have to manually type the information on HTTPS?

Cheers.

kamrang

That's right, this was my mistake, I used Google's autofill feature which caused access to be denied.

cheers.