[opencms-dev] OpenCMS secure login to workplace with https and proxypass

[Arash Kaffamanesh]

Hi Babak,

As I see you're using OpenCms 8.5 and tomcat 6 and I guess the
documentation for the mod_proxy on wiki for this combination is outdated.
I highly recommend to use mod_jk and mod_rewrite with the ajp connector (is
much powerful and more configurable).

Kind Regards,
Arash


On Sun, Oct 26, 2014 at 10:39 AM, Babak <babak at wjug.ca> wrote:

>  Hi Arash,
>
> Thanks for the reply.
>
> I am running OpenCMS on my own server and not using Docker.
>
> Also I am not using mod_jk.
>
> I am using mod_proxy and ProxyPass to remove /opencms/opencms/ and port
> from the url
> but now want to exclude any uri that have /system/login/ but below
> directive to exclude is not working :
> ProxyPass            /system/login/    !
>
> I can access below link:
> https://wjug.ca:8443/opencms/opencms/system/login/index.html
>
> but as soon as I click on Login, even without entering user id or
> password, link will be forwarded to:
> https://wjug.ca:8443/system/login/index.html
>
>
> Thanks
> Babak
>
>
>
> On 10/26/2014 2:38 AM, Arash Kaffamanesh wrote:
>
>   Hi Babak,
>
>  here is a short guide for OpenCms 8.x and 9.x on Ubuntu (and should work
> for any other linux distro) with mod_jk, mod_rewrite and ajp and it works
> with tomcat 7 and apache 2.2:
>
>  http://ow.ly/DlmBv
>
>  By the way if you love docker, that opencms-stack-aio docker image is
> here:
> https://registry.hub.docker.com/u/cloudssky/opencms-stack-aio/
>
>  HTH,
> Arash
>
>
>
> On Sun, Oct 26, 2014 at 7:49 AM, Babak <babak at wjug.ca> wrote:
>
>> I am following below document to secure workplace :
>>
>> http://www.opencms-wiki.org/wiki/Enforcing_SSL_Encryption_for_the_Opencms_workplace
>>
>> I can access workplace with https, but after login, because of ProxyPass
>> directive in Apache config
>> /opencms/opencms/ is removed and getting 404 error:
>> HTTP Status 404 - /system/login/index.html
>>
>> I tried excluding /system/login/ from proxypass but still
>> /opencms/opencms/ is being removed from URL
>> and getting 404 errror.
>>
>> <VirtualHost ip:80>
>>
>> ProxyPass            /system/login/    !
>>
>> </VirtualHost>
>>
>> Appreciate of any tip that might help fixing the problem.
>>
>> Thanks for help.
>>
>>
>> On 10/24/2014 4:24 PM, Babak wrote:
>>
>>> Hi
>>>
>>> I am using ProxyPass to remove /opencms/opencms/ from my web site URL
>>> and every thing works fine.
>>>
>>> Now I need to enable secure login for workplace and already added below
>>> line to opencms-system.xml :
>>> <workplace-server>https://wjug.ca</workplace-server>
>>>
>>> However when I try to login I get below error:
>>> The requested URL /system/login/ was not found on this server.
>>>
>>> Is there something I am missing in my configuration ?
>>> has anyone setup secure workplace ?
>>>
>>> Thanks
>>>
>>> _______________________________________________
>>> This mail is sent to you from the opencms-dev mailing list
>>> To change your list options, or to unsubscribe from the list, please
>>> visit
>>> http://lists.opencms.org/cgi-bin/mailman/listinfo/opencms-dev
>>>
>>>
>>>
>>>
>>>
>> _______________________________________________
>> This mail is sent to you from the opencms-dev mailing list
>> To change your list options, or to unsubscribe from the list, please visit
>> http://lists.opencms.org/cgi-bin/mailman/listinfo/opencms-dev
>>
>>
>>
>>
>
>
> _______________________________________________
> This mail is sent to you from the opencms-dev mailing list
> To change your list options, or to unsubscribe from the list, please visithttp://lists.opencms.org/cgi-bin/mailman/listinfo/opencms-dev
>
>
>
>
> _______________________________________________
> This mail is sent to you from the opencms-dev mailing list
> To change your list options, or to unsubscribe from the list, please visit
> http://lists.opencms.org/cgi-bin/mailman/listinfo/opencms-dev
>
>
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://webmail.opencms.org/pipermail/opencms-dev/attachments/20141026/ac6a1629/attachment.htm>