[Deploying Sakai] So Close

[Mike De Simone]

I would comment it out & save for maintenance periods.  You can change the
allow from clause to include LAN ip's only, like : 'Allow from 192.168' or
something like that.


Thanks,

-------------------------------
Mike DeSimone
Lead Systems Engineer
*r**Smart* | 602-490-0473


On Thu, Apr 7, 2011 at 09:23, Larry Dougher <ldougher at windsorschools.net>wrote:

> Interesting Mike, so should I delete that entire line or just "deny from
> all, allow from localhost"?
>
>
> Thanks,
>
>
> Larry Dougher
>
> Technology Coordinator / ACSP 10.6 / ACMT
>
> Windsor Southeast Supervisory Union
>
>
>
> On Thu, Apr 7, 2011 at 12:22 PM, Mike De Simone <
> michael.desimone at rsmart.com> wrote:
>
>> The way I am reading the apache documentation here:
>> http://httpd.apache.org/docs/2.2/mod/mod_proxy.html#proxy
>>
>> says to me that the "Proxy *, deny from all, allow from localhost" is
>> preventing all access.  When I set up mod_proxy with load balancing, I don't
>> have that clause because I need to allow web traffic from anywhere on the
>> internet.  When I put the server into maintenance mode, I enable that clause
>> to allow specific IPs into the system, but not the public (students) at
>> large.
>>
>> My understanding is at odds with what Steve has written in the wiki.
>>
>>
>> Thanks,
>>
>> -------------------------------
>> Mike DeSimone
>> Lead Systems Engineer
>> *r**Smart* | 602-490-0473
>>
>>
>> On Thu, Apr 7, 2011 at 08:54, Larry Dougher <ldougher at windsorschools.net>wrote:
>>
>>> Thanks Mike, I have attached my httpd.conf and ajp.conf.  Does anything
>>> proxy-wise jump out to you as wrong?
>>>
>>>
>>> Thanks,
>>>
>>>
>>> Larry Dougher
>>>
>>> Technology Coordinator / ACSP 10.6 / ACMT
>>>
>>> Windsor Southeast Supervisory Union
>>>
>>>
>>>
>>> On Thu, Apr 7, 2011 at 11:48 AM, Mike De Simone <
>>> michael.desimone at rsmart.com> wrote:
>>>
>>>> Hi Larry,
>>>>
>>>> I see 2 issues here.  The first message to me means that the URI of
>>>> /portal was not being passed to tomcat for some reason and was only being
>>>> handled by apache.  So you'd have to double check the proxy setup to ensure
>>>> all traffic gets back to tomcat for processing.
>>>>
>>>> The second error seems to indicate that the directory that apache's
>>>> error documents are in may somehow not be accessible/readable by apache (not
>>>> sure why, seems strange).
>>>>
>>>>
>>>> Thanks,
>>>>
>>>> -------------------------------
>>>> Mike DeSimone
>>>> Lead Systems Engineer
>>>> *r**Smart* | 602-490-0473
>>>>
>>>>
>>>> On Thu, Apr 7, 2011 at 04:18, Larry Dougher <
>>>> ldougher at windsorschools.net> wrote:
>>>>
>>>>> Hello all,
>>>>>
>>>>> So, I have successfully used the mod_proxy fix so that apache is
>>>>> listening on port 80 (following Swinsburg's great documentation).  However,
>>>>> as you can see if you click on http://sakai.windsorschools.net or
>>>>> http://sakai.windsorschools.net/portal there is a permissions error.
>>>>>  I think it is a chmod fix but I don't know the exact command to use or the
>>>>> directory(ies) I need to use it in.  Any help would be greatly appreciated
>>>>> (I have restarted apache and tomcat to no avail).
>>>>>
>>>>>
>>>>> Thanks,
>>>>>
>>>>>
>>>>> Larry Dougher
>>>>>
>>>>> Technology Coordinator / ACSP 10.6 / ACMT
>>>>>
>>>>> Windsor Southeast Supervisory Union
>>>>>
>>>>>
>>>>> _______________________________________________
>>>>> production mailing list
>>>>> production at collab.sakaiproject.org
>>>>> http://collab.sakaiproject.org/mailman/listinfo/production
>>>>>
>>>>> TO UNSUBSCRIBE: send email to
>>>>> production-unsubscribe at collab.sakaiproject.org with a subject of
>>>>> "unsubscribe"
>>>>>
>>>>
>>>>
>>>
>>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://collab.sakaiproject.org/pipermail/production/attachments/20110407/15058ad6/attachment-0001.html