File not found during /api

adrenator

Hello,

When I try to use /api for login using sso for MS account I see error "File not found.". Rewrite mode is working fine, II tested it. Error seems to be some problem with system. What can I check?

regards,
Jan

KevinTheJedi

adrenator

Definitely means url rewriting isn’t working. Make sure it’s enabled for the specific site in IIS Manager. Also check your IIS logs to see if the web.config is loading properly. If url rewriting is truly enabled for the site in IIS when you click on the site name and double click url rewrite you should see the actual rewrite rules set by the web.config.

Cheers.

KevinTheJedi

adrenator

Also, as an extra measure, make sure that the url you are using for the callback endpoint (in both the Plugin Instance and the EntraID Application) is accurate.

Cheers.

adrenator

KevinTheJedi

Hello Kevin,

Thanks for the reply. My hosting is OVH, I check their forum and rewrite mode is enabled for hosting.

I make a copy os my osticket and edited .httacces. I changed httpd.php to another fake path and then I see error that
Not Found

The requested URL was not found on this server.

In my opinion this prove that rewrite mode is enabled.

When I use proper installation I see error:

File not found.

Like some osticket error?

On the same hosting I use another apps like Wordpress - its also using rewrite mode and everything works fine.

My config:

KevinTheJedi

adrenator

I don’t know where the hell I got IIS from; my apologies. Must’ve been a busy day and got threads/details confused.

Ask your host if they allow .htaccess files in the site directory as maybe the ones we ship with are not being loaded for some reason. We ship with the needed .htaccess files that contain the appropriate rewrite rules; your site just needs to allow them. Here is the one for the API routes specifically. It essentially forwards the calls to /api/http.php to be resolved by the Dispatcher. The actual routes themselves get appended to the Dispatcher separately; in the plugin in this case. If your host allows and has the functionality, you can check your Apache site config and see if it has AllowOverride All to allow the rewriting. Also, you should ensure all files have the appropriate permissions/ownership so Apache can read/execute them.

Lastly, you should inquire about the security logs and see if they have mod security enabled as it could be interfering here.

Cheers.

adrenator

KevinTheJedi

You said "Also, you should ensure all files have the appropriate permissions/ownership so Apache can read/execute them."

When/how can I check proper permissions?

KevinTheJedi

adrenator

That depends on the server. You will need to google something like “how to check file permissions and ownership on server_type_here”. On Linux you can do something like ls -al /path/to/osTicket/. Obviously, repeat for all subdirectories.

Cheers.

adrenator

KevinTheJedi Yes, that's clear for me but where can I find informations about correct permissions? I mean when I check on the os to where should I compare results?

BR,
Jan

adrenator

KevinTheJedi

I double check .httaccess and it works. I think problem may be connected to permissions (?)

When I access https://xxxxx/api/auth/oauth2

KevinTheJedi

adrenator

Let me ask you this, do you access your help desk with the root domain or is there an addition path added? Meaning do you access your site directly with <my_url>.pl/ or with something like <my_url>.pl/upload/ or <my_url>/support/?

Cheers.

adrenator

KevinTheJedi

Hi,

I use subdomain ticketsystem.domain.pl without any additional path.

Tanks and Regards,
Jan

KevinTheJedi

adrenator

Then yea it definitely appears you are having deeper issues at the server level. I would suggest setting up your own server with no restrictions (ie. no hosting provider) and retest. I have v1.18.1 running with Apache (plus the rewrite module installed and enabled for my site), PHP 8.2, MySQL 8.0, the latest build of the OAuth2 Plugin, and have zero issues with the API.

Cheers.

KevinTheJedi

adrenator

A hacky workaround would be to use the non-rewrite URL of https://<my_url>.pl/api/http.php/auth/oauth2. This way your system doesn't need rewrite. But this is ugly so the best option would be to address the server level issues.

Cheers.

KevinTheJedi

Sly20 adrenator

Here was a similar thread from 2022:

https://forum.osticket.com/d/101316-error-on-redirect-url-when-using-oauth2-no-input-file-specified/22

Start from the comment I linked above and continue down and try all of those recommendations.

Cheers.

Sly20

Hello,
I do have the exact same problem with a very similar configuration (Osticket in a subdomain hosted by OVH and trying to log in via MS account).

The result is the same for me "File not found":

I tried to change .htaccess in api folder and was able to redirect to a fake page home.php with R flag

Result :

If I change it back to /http.php/ I'm redirected to my homepage of osticket but not logged in

(FYI : This is the same behaviour as if I manually change the url adding /http.php/ after the error "File not found.")

I don't know if this helps but I am adding my own experiments 😉
Thank You !

KevinTheJedi

Sly20

Okay so now we know this is specific to OVH and their/your setup. If you can prove URL rewrite is enabled and working for the site then there is something deeper. You should reach out to OVH and see if they have anything like ModSecurity or something that is altering or blocking the requests. You should never get the file not found error if you are running an appropriate supported version of PHP, you have the PHP PHAR extension installed/enabled, you have a supported web server functioning properly with url rewrite module installed, your site has url rewriting enabled and allowed, you are running the latest version of osTicket, you are using the latest build of the OAuth2 plugin, and you have an OAuth2 plugin instance that’s configured and enabled.

Also, the plugin itself is responsible for registering the API routes specific for OAuth2 so it could be something with the plugin or server/setup. Like maybe you aren’t using the latest build of the plugin or something on the server level is blocking the PHAR content. You should check all possible error logs and security logs on the server to see if anything is standing out.

Cheers.

Lulucmy

KevinTheJedi Thanks! I'm using osTicket hosted on OVH and I had the same "File not found" issue.
Editing RewriteRule ^(.*)$ %1/http.php/$1 [L] to RewriteRule ^(.*)$ %1/http.php/$1 [R,L] in this file solved the problem 🙂 .

Cheers

adrenator

@Sly20

Line with added R is working for me:
RewriteRule ^.*$ %1/http.php/$1 [R,L]

Is it okey from @KevinTheJedi developer side?

KevinTheJedi

adrenator

So you are able to authenticate using the R added to the .htaccess? If so then that’s fine.

Cheers.

Sly20

For the record, I was not logged in because of an user account issue (user not created as user but only as agent).
So the adding of R solved my issue.