[opencms-dev] mod_jk (was: instructions for proxying ...)

[Martin Kuba]

David Evans wrote:
> Hello,
> 
> Martin, could you please post the relevent bits of your server.xml and
> httpd.conf and web.xml files?  I'm about to start an installation that
> needs to use mod_jk.
> 
> thanks

Hi, I wanted to use SSL for securing administration.
Here are the config files:

------------/etc/httpd/workers.properties------------------
worker.list=cms_t4
worker.cms_t4.type=ajp13
worker.cms_t4.port=8009
worker.cms_t4.host=localhost
------------------------------------------------------------

------------/etc/httpd/httpd.conf---------------------------
...
LoadModule      jk_module               libexec/mod_jk-1.3.eapi.so
JkWorkersFile "/etc/httpd/workers.properties"
JkLogFile "/var/log/httpd/mod_jk.log"
JkLogLevel info
JkOptions +ForwardKeySize +ForwardURICompat -ForwardDirectories
...
<VirtualHost 147.251.3.63:80>
    DocumentRoot /export/www/
    ServerName loni.ics.muni.cz
    JkMount /opencms/* cms_t4
</VirtualHost>
<VirtualHost 147.251.3.63:443>
    DocumentRoot /export/www/
    ServerName loni.ics.muni.cz
    JkMount /opencms/* cms_t4
    SSLEngine on
    SSLCipherSuite 
ALL:!ADH:!EXP56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
    SSLCertificateFile /etc/httpd/ssl/mycert.cert
    SSLCertificateKeyFile /etc/httpd/ssl/mykey.key
    SSLCertificateChainFile /etc/httpd/ssl/myca.pem
</VirtualHost>
------------------------------------------------------------

---~/tomcat-4.1.30/webapps/opencms/WEB-INF/config/opencms.properties---
staticexport.path=/export/www
url_prefix_export=
url_prefix_http=/${WEB_APP_NAME}/opencms
url_prefix_https=https://loni.ics.muni.cz/${WEB_APP_NAME}/opencms
url_prefix_servername=
-------------------------------------------------------------

No changes in web.xml are needed, in server.xml just
make sure that the section
<!-- Define a Coyote/JK2 AJP 1.3 Connector on port 8009 -->
<Connector className="org.apache.coyote.tomcat4.CoyoteConnector"
            port="8009"
...

which is there by default is really uncommented and the port number
matches the port specified in workers.properties.

Martin
-- 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Supercomputing Center Brno             Martin Kuba
Institute of Computer Science    email: makub at ics.muni.cz
Masaryk University             http://www.ics.muni.cz/~makub/
Botanicka 68a, 60200 Brno, CZ     mobil: +420-603-533775
--------------------------------------------------------------
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3415 bytes
Desc: S/MIME Cryptographic Signature
URL: <https://webmail.opencms.org/pipermail/opencms-dev/attachments/20040326/1164788a/attachment.bin>