[Building Sakai] Proxying through Apache

[chuot con]

Hi Martin,

I included this line into my server.xml file:

<Connector protocol="AJP/1.3" debug="0" redirectPort="443"
       
        enableLookups="false" port="8009" maxProcessors="1024"
       
        minProcessors="20" acceptCount="10"
            
   connectionTimeout="20000"
               URIEncoding="UTF-8"
   
            tomcatAuthentication="false"
            
   scheme="https" secure="true"
               slProtocol="TLS"
   
            proxyName="localhost"
               proxyPort="443"
   
             />
It works with SSL but not correctly. I can access by address: http://localhost/portal.
When I login into sakai, the web browser redirect to https://localhost/portal.
It not secure. Because, I can capture a package that obtain information of user (username + password). Web server do not automate redirect to https://localhost/portal. It only automate redirect to https://localhost/portal when I login into sakai.

How should I do to web server always redirect to https://localhost/portal when I access to http://localhost/portal ?

Regards.
Thinh.
Rea

--- On Wed, 4/7/10, Martin B. Smith <smithmb at ufl.edu> wrote:

From: Martin B. Smith <smithmb at ufl.edu>
Subject: Re: [Building Sakai] Proxying through Apache
To: sakai-dev at collab.sakaiproject.org
Date: Wednesday, April 7, 2010, 10:09 PM

On 04/07/2010 10:59 AM, chuot con wrote:
> Hi Steve,
> 
> I have set up with mod_proxy.
> If I set up non SSL, the web browser can access to http://localhost/portal
> But I set up with SSL, the web browser always redirects to
> http://localhost:8443/portal
> Could you please help me to set up proxy with mod_proxy ?
> Thanks
> 
> Regards.
> Thinh.
> 
> 
> 
> 
> _______________________________________________
> sakai-dev mailing list
> sakai-dev at collab.sakaiproject.org
> http://collab.sakaiproject.org/mailman/listinfo/sakai-dev
> 
> TO UNSUBSCRIBE: send email to sakai-dev-unsubscribe at collab.sakaiproject.org with a subject of "unsubscribe"

Hello Thinh,

What does your server.xml file look like? Does it have a connector like:

<Connector protocol="AJP/1.3" debug="0" redirectPort="443"
               enableLookups="false" port="1234" maxProcessors="1024"
               minProcessors="20" acceptCount="10"
               connectionTimeout="20000"
               URIEncoding="UTF-8"
               tomcatAuthentication="false"
               scheme="https" secure="true"
               slProtocol="TLS"
               proxyName="foo.edu"
               proxyPort="443"
                />

Change 1234 and foo.edu as needed :)
-- 
Martin B. Smith
smithmb at ufl.edu - (352) 273-1374
CNS/Open Systems Group
University of Florida


-----Inline Attachment Follows-----

_______________________________________________
sakai-dev mailing list
sakai-dev at collab.sakaiproject.org
http://collab.sakaiproject.org/mailman/listinfo/sakai-dev

TO UNSUBSCRIBE: send email to sakai-dev-unsubscribe at collab.sakaiproject.org with a subject of "unsubscribe"


      
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://collab.sakaiproject.org/pipermail/sakai-dev/attachments/20100407/ec30187d/attachment.html