Hi, Stephen. Thanks for your reply. I'm not sure about X-Forwarded-Host. I think we tried that, but I'll have to check with our SA, and he's not here right now. I'll get back here as soon as I find out.
We did try a couple of iterations where we tried to redirect https://our.server.name/ to http://localhost:8080/jenkins, but we gave up on that. Both IIS and Jenkins are now using the same context root (just "/"). Our desired configuration is IIS on port 443 (https) talking to Jenkins on port 8080 (http) on the same server. That's how we've got it right now. Terry On Monday, May 1, 2017 at 11:04:42 AM UTC-6, Stephen Connolly wrote: > > > On Mon 1 May 2017 at 16:13, Terry Lacy <terry...@gmail.com <javascript:>> > wrote: > >> Is there other information I could supply that would help? >> >> Alternatively, has anyone successfully set up Jenkins behind IIS with a >> setup similar to that described below *without* getting the bad proxy >> message? Would you be willing to share your setup? >> >> So far, things seem to work fine despite the message, except for the >> "More info" button next to the "It appears that your reverse proxy set up >> is broken." message. That returns a 404 error. >> >> Also, I neglected to mention that we're authenticating with LDAP against >> an AD server in the Jenkins Global Security configuration. >> >> Thanks, >> Terry >> >> On Friday, April 28, 2017 at 9:48:21 AM UTC-6, Terry Lacy wrote: >>> >>> Hi, >>> >>> >>> >>> Sorry if this has been answered before. >>> >>> >>> We're having a very difficult time trying to get an IIS reverse proxy >>> working with Jenkins. No matter what we try, we still get the "It appears >>> that your reverse proxy set up is broken" message on the Manage Jenkins >>> page. >>> >>> >>> We've seen a few links describing how to do it, but none of them seem to >>> get rid of the "broken" message, and there doesn't appear to be any >>> "official" Jenkins documentation on the subject. >>> >>> >>> I'd be happy to write a HOWTO on the wiki if we could get some help >>> getting it working. >>> >>> >>> Details: >>> >>> >>> Windows Server 2012 R2 >>> >>> Jenkins 2.46.1/2.46.2 >>> >>> Tomcat 8.5.14 >>> >>> Java 1.8.0_131 >>> >>> IIS 10 (.msi installer/Jetty) and IIS 8.5 with the .war on Tomcat >>> >>> >>> IIS tried creating standard reverse proxy rule >>> >>> with allow double escaping >>> >>> maximum URL length 4096 >>> >>> also tried with server variables allowed and added to rule config >>> >>> RequestHeader set X-Forwarded-Proto https >>> >>> RequestHeader set X-Forwarded-Port 443 >>> >>> > What about X-Forewarded-Host or is IIS on the same port. > > Also Jenkins must be on the same context path as it is running as (iow do > not have the http proxy rewrite the context path) > >> >>> tried with Outbound rule - rewrite the domain names and links with >>> server variable >>> >>> HTTP_ACCEPT_ENCODING >>> >>> >>> We tried IIS with ISAPI redirector to tomcat >>> >>> >>> We also tried an IIS server farm setup. >>> >>> >>> We tried it with and without SSL. >>> >>> >>> Basically, we've tried all of the things that normally work fine with >>> many, many other IIS-Tomcat installations we've set up. They've worked fine >>> on older versions of Jenkins. We're aware that the reverse proxy check is >>> more strict now, but we don't really know what it's complaining about. >>> >>> >>> Thanks, >>> >>> >>> >>> *Terry Lacy* >>> Sr. Software Design Engineer >>> >>> *Pediatric Research Enterprise*** >>> University of Utah >>> >>> -- >> You received this message because you are subscribed to the Google Groups >> "Jenkins Users" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to jenkinsci-use...@googlegroups.com <javascript:>. >> To view this discussion on the web visit >> https://groups.google.com/d/msgid/jenkinsci-users/a183d447-5937-4a13-9bfb-0207a2f4f14a%40googlegroups.com >> >> <https://groups.google.com/d/msgid/jenkinsci-users/a183d447-5937-4a13-9bfb-0207a2f4f14a%40googlegroups.com?utm_medium=email&utm_source=footer> >> . >> For more options, visit https://groups.google.com/d/optout. >> > -- > Sent from my phone > -- You received this message because you are subscribed to the Google Groups "Jenkins Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-users/a5a2006e-87b4-4feb-8b57-882fe30f91df%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
