Problem creating tickets through Microsoft AppProxy since Update 7.2.2

Technical assistance
1

Infos:

  • Used Zammad version: 7.2.2-1791798728.24a62d0.ubuntu24
  • Used Zammad installation type: package
  • Operating system: Ubuntu 24.04.5 LTS
  • Browser + version: Microsoft Edge 155.0.4283.45

Expected behavior:

Tickets can be created and saved, and existing tickets can be updated.

Actual behavior:

Tickets cannot be created or updated when accessing the system through Microsoft App Proxy.

Steps to reproduce the behavior:

We use the ticket system internally via direct access. External access to the same system is provided through Microsoft App Proxy.

Since updating to version 7.2.2-1791798728.24a62d0.ubuntu24 last Thursday, it has no longer been possible to create new tickets or update existing tickets when accessing the system externally through Microsoft App Proxy.

When creating or editing a ticket, the Group can be selected, but the Owner drop-down list remains empty.

If I try to save the ticket, nothing happens.

The browser’s Developer Tools console shows the following message:

application-34ab65298e809c3b97e585f216204e77e7723628a18598ef223e54ef24a6dd82.js:31
App.i(error) | update Object_core_workflow:
{target: button.btn.btn–primary.btn–split–first.js-submit, controllerForm: i}
[[Prototype]]: Object
t._log @ application-34ab65298e809c3b97e585f216204e77e7723628a18598ef223e54ef24a6dd82.js:31

The referenced .js file itself can be opened without any issues.

The internal and external domain names of the system are identical.

When accessing the system directly from the internal network, everything works as expected. The problem occurs only when the system is accessed through Microsoft App Proxy.

Could this be a bug introduced with version 7.2.2-1791798728.24a62d0.ubuntu24, or has something changed that requires an adjustment to the Microsoft App Proxy configuration?

2

Hi,

i can confirm this issue, we are on 7.2.2 now and ticket creation no longer works for users that come over Azure Application Proxy.

3

It’s related to an security issue → fix, the origin is now checked for the old websocket server (which is already the case for the new one).

4

Hello,

thank you.
As I understand it is the same root cause.
Is it a bug or is it related to a wrong configuration at our site?

I checked the post and tried to get all the details to make sure the configuration is correct.

Both settings, the http_type is HTTPS as well as the FQDN is the same as the URL we use and should be correct.

What is the recommendation of zammad? Is it supported to publish the zammad server through a nginx proxy?

Thank you
Best regards.

5

It’s normal that it’s running via an Nginx proxy, but the configuration needs to match.

You should check if the https/fqdn inside the browser is matching with Zammad and the other palces.

6

Hello everyone,

I have checked the configuration and cannot find any errors.

To verify the problem, I installed the application on our Nginx proxy and reconfigured some test clients to connect through it.

The problems we were having with the Microsoft App Proxy have disappeared.

I think it is no longer possible to use zammad with Microsoft App Proxy with the current zammad version.

Perhaps some fallbacks should be implemented for simple tasks such as ticket creation, to create a more robust and secure system.

We use Microsoft AppProxy because it means you don’t need to open the ports directly to your environment, and you can use authentication even before a single page is loaded.

Thank you so far, and best regards.