Maintenance ip allowlist doesn't work

Get Help
,
1

Hello,

I’m trying to configure maintenance mode. Now, it’s working as I expected except allowing IP address in the list.

Here is a part of my `ood_portal.yml` for the maintenance mode. I refered to the document here. maintenance mode

use_rewrites: true
use_maintenance: true
maintenance_ip_allowlist:
  - '10.20.30..*'
  - '10.20.40.3'

However, I encountered public/maintenance/index.html page even if I accessed OOD with IP address that is one of the `maintenance_ip_allowlist`.

What am I missing for this?

Best,

2

Can you confirm that the configuration in you YML file made it to the apache .conf file?

3

Hi Jeff,

This is my ood-portal.conf in /etc/httpd/conf.d.

  # Maintenance location
  #
  #     https://ood.example.org:443/public/maintenance
  #     #=> Displays /var/www/ood/public/maintenance/index.html
  #
  <Directory "/var/www/ood/public/maintenance">
    RewriteCond /etc/ood/maintenance.enable !-f
    ReWriteRule ^.*$ /

    RewriteCond %{REQUEST_URI} !/public/maintenance/.*$
    RewriteRule ^.*$ /public/maintenance/index.html [R=503,L]
    ErrorDocument 503 /public/maintenance/index.html
  </Directory>

There is no maintenance_ip_allowlist in .conf file.

PARK

4

OK - you need to bounce httpd with systemctl restart httpd for the configs in the YML to propagate to the httpd conf. If there are any errors the should be in journalctl or systemctl status httpd.

5

Unfortunately, it does not work even if I restart httpd.