Configuring Reverse Proxy Nginx for Messenger

We have updated to Messenger 3.0 and are looking to use the Mobile apps. We have a reserve proxy Nginx which we use for WebAccess and have tried to configure this for Messenger.
When I try to connect using a Mobile app (from the Internet) I can see a connection been made in the Messenger Agent logs and then get a failed to connect error:
10:36:12 B70 SPL Login failed [0xD130]: ::xxx.xxx.xxx.xxx - An invalid tag was discovered
My question is
Has anyone used nginx to reverse proxy Messenger successfully and if so how?
And if not, what configuration have they used?
Thanks in advance

johngallagher,
It appears that in the past few days you have not received a response to your
posting. That concerns us, and has triggered this automated reply.
Has your problem been resolved? If not, you might try one of the following options:
- Visit http://www.novell.com/support and search the knowledgebase and/or check all
the other self support options and support programs available.
- You could also try posting your message again. Make sure it is posted in the
correct newsgroup. (http://forums.novell.com)
Be sure to read the forum FAQ about what to expect in the way of responses:
http://forums.novell.com/faq.php
If this is a reply to a duplicate posting, please ignore and accept our apologies
and rest assured we will issue a stern reprimand to our posting bot.
Good luck!
Your Novell Forums Team
http://forums.novell.com

Similar Messages

Reverse Proxy Filter for EP7?

Hi! on
https://websmp208.sap-ag.de/nw-ep-how-to,
we notice an article called:
"How to Configure the Reverse Proxy Filter for SAP Enterprise Portal 6.0 SP2"
Did anyone use the method there to resolve their problems?
If so, would you please share your experience?
We have a question about what code should be put in the web.xml.
Points guaranteed. Thanks!

It appears that the Light Portal Framework in EP 7.0 uses FQDN in the anchors (<A>) on the pages it sends back to the Client Browser (not relative URI's).
This could be a configuration setting somewhere that I missed, however, I would expect the Light Framework to be the best at making sure links are relative.
I would like to explore all options, from making our Reverse Proxy Server handle the filtering to making sure Portal sends back a valid link.
If the Reverse Proxy Filter is not available in EP 7.0, what can I do to replace it's functionality?
Mike

Configure reverse proxy using Apache 2.2.15

Dear Experts,
I am in the process of configuring reverse proxy for my portal so that ppl outside the network can access my servers.
We are on SUSE Linux 10 SP2, installed Apache 2.2.15 and started apache successfully.
When i run command ps -ef | grep httpd, i get list of processes that are running.
But when i open mozilla on the server where i installed apache and type http://myhost.domian.com:8080 it doesnt display any screen.
I still assume that my apache is running. Please correct me on the above.
Now i have configured my httpd.conf based on help.sap.com and various threads on sdn and it looks something like below
====================================================================================================
ProxyPass /irj http://myhost.mydomian.com:50100/irj/
ProxyPassReverse /irj http://myhost.mydomian.com:50100/irj/
ProxyPreserveHost On
#####################################r Reverse Proxy
ProxyRequests off
ProxyPreserveHost On
<VirtualHost 172.XXX.XX.XX:80>
#DocumentRoot Webserver doc root, eg "C:/.../htdocs"
#ServerName <http:// Domain Name eg www.domainA.com >
#ErrorLog logs/Domain.com-error_log
#CustomLog logs/Domain.com-access_log common
(Commented the above lines as i did not understand what i need them for.. please help on the above)
RewriteEngine On
RewriteLog logs/myhost_unsecured_rewrite.log
RewriteLogLevel 9
<Directory />
Options None
AllowOverride None
</Directory>
RewriteRule ^/(.*)$ http://myhost.mydomian.com:50100/$irj1/ NC,P
ProxyPassReverse /irj http://myhost.mydomian.com:50100/
</VirtualHost>
With the above configuration will i be able to acheive my goal of using this server as my reverse proxy and also for redirecting the host name.
Please help me on the above
Thanks and regards
Hunky

If you search for "reverse proxy apache" you'll find quite lots of resources (blogs, articles) here on the SDN.
You may start with
FEATURED EVENTS
Markus

Is Reverse Proxy required for Hybrid deployment

Hi everyone,
We plan to deploy a new infrastructure on prem attached to O365.
The aim of this deployment is to create lync meeting on the on prem FE server which will be accessible by O365 Lync users. (FI: these meetings will be created on prem because the customer wants to cascade Lync conference with his Polycom video conferencing
infrastructure).
Some users are homed on-premises and some users are homed online, but the all users share the same SIP domain. Is Reverse Proxy on prem will be required for O365 users to join meetings created on the on-premise FE or the O365 architecture
can handle it?
The only functionality needed is meeting (not mobility). I saw this (https://social.technet.microsoft.com/Forums/en-US/cf4f63f9-355f-475b-8148-608633adfe86/is-reverse-proxy-necessary-for-lync-hybrid-deployment?forum=lyncdeploy) but the functionality asked
are different.
Many thanks for your help.
Thomas

You'll need a reverse proxy on premises to publish the external web services FQDN of your on-premises front end pool. Meet will use this behind the scenes regardless of where it's pointing. If you're hybrid, the DNS URLs should typically point
to your on-premises deployment however anyway:
https://technet.microsoft.com/en-us/library/jj205403%28v=ocs.15%29.aspx?f=255&MSPPError=-2147217396
Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question please click "Mark As Answer".
SWC Unified Communications
This forum post is based upon my personal experience and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

Uwc behind a reverse proxy asks for internal urls

Hi,
I have an uwc on the msg store. I try to access it through a web reverse proxy, but after the login page which appeared allright, the url is transformed to a internal url which is invalid from the normal outside scope.
Is this setting a possible one, as advertised or not at all. And what would be the workaround, if any.
Thanks
Fran�ois

Dear Expert,
Can i know how do you config the reserve proxy to work with the uwc?
my network topology is:
machine A: uwc (https://port:443) and MEM (https://port 80) (both are running SSL)
machine B: Messaging Server (MTA and store)
machine C: ldap and Identity server
the login page is https://commexp/uwc , after login, it divide to two main session.
Mail tab - https://commexp:80
Other tab - https://commexp/uwc
How can i set the reverse proxy for this configuration?
And which proxy are you using?
Thanks a lot!
Regards,
Angus
had the same problem, fix was -
>
>
in Uwcauth.properties changes
uwcauth.identity.login.url=http://bason.blah.com:81/am
server/UI/Login
AMconfig.properties changes
com.sun.identity.server.fqdnMap[bason.blah.com]=bason.
blah.com
with the hostname (bason.blah.com) being the *uwc
server* with reverse proxy on it
for some fun have a look at the url you are directed
too - in particular the parameters on the url...
can anyone say "SECURITY HOLE"?

Configure Reverse Proxy in Leopard

Hi people I want to configure my httpd.conf file in my Apache to enable reverse proxying...
I have looked some instructions in these sites:
http://www.apachetutor.org/admin/reverseproxies
http://www.askapache.com/htaccess/reverse-proxy-apache.html
both ask for the modproxyhtml.so installation which I already did and its currently located in usr/libexec/Apache2 and loading a file called libxml.so in /usr/lib/libxml2.so but so far I have searched in /usr/lib/ and there are only some similar files called "libxml2.2.dylib" "libxml2.dylib" and "libxml.la"
I have tried adding these lines(as suggested by these sites)to the httpd.conf file but Apache seems to fail/crash after adding them..
LoadFile /usr/lib/libxml2.so
LoadModule proxyhtmlmodule libexec/apache2/modproxyhtml.so
what should I do???
pleasee help!!!

I've just hit the same issue. modproxyhtml.so appears to be being loaded, but ProxyHTMLURLMap resolves in a syntax error.
Hopefully someone has found a solution to this (OS X Leopard 10.5.2).
Cheers
Russell

Reverse proxy setup for EBS R12.1.1

We have an external DMZ server configured for oracle ebs r12.1.1. The URL is http://testerp.mydomain.com:8003.
Can you please provide a link that shows step by step setup of Reverse proxy for the above URL to access the application.
I already have the metalink notes that says about DMZ setup for oracle ebs. I actually am looking for step by step setup for the reverse proxy using oracle application server 10g. Please help. Thanks.

Roy, I have already gone through that document, it is actually showing how to install and configure webcache 10g for oracle ebs r12.
It also says the features that oracle applicaiton server web cache provides like,
•Load Balance
•Reverse Proxy
•Failover and Surge Protection to minimize downtime
•Personalize Attributes for Caching
BUT IT IS NOT MENTIONING HOW TO CONFIGURE THE 'REVERSE PROXY' FOR THE ORACLE EBS EXTERNAL APPLICATION SERVER ON DMZ.

How to configure a proxy server for Windows Azure Tools in Visual Studio 2013

Hi Visual Studio/Azure Tools team
I would like to use the Windows Azure tools in Visual Studio 2013 to manage my Azure Web sites (Server Explorer -> Windows Azure -> Web Sites) from within my corporate network which is secured using a proxy server. Unfortunately, I am not able to use
the Windows Azure tools since the required HTTPS connection to windows azure is not going through the default configured proxy. Instead, Visual Studio tries directly to connect to port 443 which is blocked by our corporate firewall (and yes: there is no way
around using our proxy server). Other visual studio features like NuGet, updates, etc. work fine and use the configured proxy server.
So my question: How can I configure visual studio respective its Azure tools to use a proxy server instead of a direct connection? I already tried configuring the proxy server within the file devenv.exe.config but this doesn't show any effect for Windows Azure
tools.
Regards
tschaena

As we have very similar problems I consider the found solution a work arround an existing problem which will not work if corporate FW policy does not allow such changes.
In my mind, any tools in charge of dealing with some sort of FW protocols should deliver the following information, should make it absolute clear how to setup that the request packages are setup rigth at the first time.
a) proxy server
b) proxy port
c) proxy user
d) proxy users-password
e) proxy.auth.Preference="BASIC"
And for moste tools (including Visual Studio and AZUR Tools) it is absolut unclear
a) how to setup that on a per tools basis
b) OR who inherits this information from whom i.e. use the same as IE does, what if we use FireFox or any other browsers?
I understand that developers requested to cure such problem areas will often have difficulty to gain all required elemenst used to realy test the solution.
But I can tell you: I loos more time figthing down the FW setups for my clients. WHat I do at home in a sniff, takes ages to be realised by all the various clients on the market where each has to deliver the same sort of information but actually does not,
or has it just somewhere, but not in the vicinity of the demanding user.
Good examples i.e. NetBeans IDE where the Option Menu shows very clearly what information is required to pass through a FW/Proxy; but even there, the hint to start with a BASIC authentication schema is not part of this OPTION menu and must be added a JAVA
environment value. But at least, it works.
Sepp

Apache reverse proxy setting for access to Backend

Hi experts,
we have set up apache reverse proxy to make available our NW portal (and SRM functions)over the internet.
Our settings look something like this:
ProxyRequests Off
<VirtualHost *:80>
     ServerName myportal.portalhosto.com
     ProxyPreserveHost On
     ProxyPass /irj/ http://myportal.portalhost.com:53200/irj/
     ProxyPass /webdynpro/ http://myportal.postalhost.com:53200/webdynpro/
     ProxyPassReverse /irj/ http://myportal.portalhost.com:53200/irj/
     ProxyPassReverse /webdynpro/ http://myportal.portalhost.com:53200/webdynpro/
     ErrorLog logs/myportal.portalhost.com-error.log
     CustomLog logs/myportal.portalhost.com-custom.log combined
RewriteEngine On
     RewriteRule ^/sap/(.*)$ http://mybackend.backendhost.com:8020/sap/$1 [P,NC]
</VirtualHost>
Problem:
when we access the portal from the internal network(either by using the internal URL or external URL) things work fine.
But we access the portal from internet, we are able to login to the portal and acess all webdynpro Java related applications.But when we try to acess the BSP/WD abap application running on a backend SRM system, we get 'host not found' message with the INTERNAL url of the SRM backend application displayed.
Do we need to expose the SRM backend to the outside world via reverse proxy as well?If yes,how?Do we need to change the system definitions in portal for that?
Any help in resolving this would be greatly appreciated.
regards,
Kiran

Hi,
Do we need to expose the SRM backend to the outside world via reverse proxy as well?If yes,how?Do we need to change the system definitions in portal for that?
Yes , you have to expose your backend system using reverse proxy ...
When user access the portal and when he clicks on BSP/WD , the URL get re-directed to backend system.
But , as your backend system is not expose on internet , you get an error as host not found.
So, to solve your problem you have to expose your backend system on internet. It is in general pratice to expose on internet.
Thanks
Anil

Wrong cert on reverse proxy setup for exchange

i have arr setup, i have runt he setup command as per the recommended sheet
ARRConfig config –cert “path
to the certificate file” –hostnames “host
names for Exchange Server”–targetserver
“server name of Exchange Server”
and this has worked and mail is accessable, the problem is that the cert is not matching for some reason
so i have a cert for remote.domain.co.uk and i have one for mail.domain.co.uk, i used the mail cert for the reverse proxy, i see it bound to the site BUT when i access the remote site i get the remote.domain.co.uk cert as presented, its as if the mail one
is being over ridden and i dont know were
any advise?

In the Exchange Shell can you run,
Get-ExchangeCertificate | select CertificateDomains, Services | FL
This should tell us if the cert is bound correctly on the Exchange Server.
In the Essentials Server, in IIS, do you have a Exchange Proxy website created?
Robert Pearman SBS MVP
itauthority.co.uk |
Title(Required)
Facebook |
Twitter |
Linked in |
Google+

Reverse Proxy Planning for Exchange 2013

Hi,
We are planning Exchange 2010 to Exchange 2013 datacentre migration for 18000 users and all the Exchange planning is done. Now we are looking at planning of Reverse Proxy solution. We will be publishing different URLs for OWA, ActiveSync and Outlook Anywhere.
UAG has been finalized by the organization. I don't find any document or links which suggests the planning of Reverse proxy for Exchange. Can you please let us know the sizing of UAG with respect to Exchange 2013. Thanks.

Hi
Sizing as far i know there is no sizing document for UAG
But Minimum you need to have UAG 2010 SP3 to work with Exchange 2013
You can see the support boundaries for UAG below technet
http://technet.microsoft.com/en-us/library/ee522953.aspx
Note : UAG requires each user to have a CAL
You can also try 2012 R2 web application proxy . This does reverse proxy without the need of CAL's.
You can give it a try if you wish to go with web app proxy and you can see below
http://technet.microsoft.com/en-us/library/dn383650.aspx
Remember to mark as helpful if you find my contribution useful or as an answer if it does answer your question.That will encourage me - and others - to take time out to help you Check out my latest blog posts on http://exchangequery.com Thanks Sathish
(MVP)

Reverse Proxy issue for domain name

Hi All,
We are in process of implementing reverse proxy to the SAP Portal and web dispatcher.
We given all rewrite rules accordingly, The public IP also resolves the domain name also.
Our domain is etender-aai.aero.
When we given rewrite rule with the public IP reverse proxy is working fine.
But when we given etender-aai.aero in rewrite rule its not working.
Please help me in this.
Thanks & Regards,
Sreekanth

Hi,
If you want help, you'll have to explain clearly what is your configuration and what you want to achieve.
I'm sorry to tell you that I absolutely did not nderstand anything about your problem....
Do you try to publish your SAP Portal externally on the internet ?
Do you use the web dispatcher as a reverse proxy ? or do you add an other reverse proxy (like Apache) in front of the web dispatcher ?
Regards,
Olivier

Reverse Proxy setup for Mobility HTTP 80 configuration not working

http://technet.microsoft.com/en-us/library/hh690011(v=ocs.14).aspx
I'm trying to use the Port 80 ->8080 setup to avoid putting lyncdiscover.sipdomain.com for every additional sip domain that we want to include.
I have followed the instructions per the above link, yet when I try to log in with a user with one of those additional SIP's, I cannot log in to a mobile device.
For example,
our main sip is "contoso.com", so
[email protected] can log into her mobile device.
but user [email protected] cannot log in via mobile device.
Is there anything else that needs to be done to ensure that
[email protected] can login via a mobile device?
Auto login?
Josh
Here is the testexchangeconnectivity.com
When I run the Lync Mobile Test, I get this, almost like the http rule is useless, still requiring the need for the additional lyncdiscover.sipdomain.com .
[email protected]
Testing connectivity to the Lync Autodiscover Web Service server for a secure connection on port 443 to obtain the root token.
Connectivity to the Lync Autodiscover Web Service test failed.
Test Steps
Attempting to test Autodiscover Web Service URL https://lyncdiscover.fabrikam.com/Autodiscover/AutodiscoverService.svc/root.
Autodiscover Web Service URL can't be contacted due to failure of the following tests:
Test Steps
Attempting to resolve the host name lyncdiscover.fabrikam.com in DNS.
The host name resolved successfully.
Additional Details
Testing TCP port 443 on host lyncdiscover.fabrikam.com to ensure it's listening and open.
The port was opened successfully.
Testing the SSL certificate to make sure it's valid.
The SSL certificate failed one or more certificate validation checks.
Test Steps
ExRCA is attempting to obtain the SSL certificate from remote server lyncdiscover.fabrikam.com on port 443.
ExRCA successfully obtained the remote SSL certificate.
Additional Details
Validating the certificate name.
Certificate name validation failed.
Tell me more about this issue and how to resolve it
Additional Details
Host name lyncdiscover.fabrikam.com doesn't match any name found on the server certificate CN=lncpool01.contoso.com, OU=Domain Control Validated.

Hi,
Please verify DNS record for Lyncdiscover.fabrikam.com can be resolved.
Please make sure the web publishing rule for port 80 has been configured correcltly. The lyncdiscover.<sipdomain> entry must to be included in rule. Verify that port 8080 was typed in "Redirect requests to HTTP port" and Redirect
requests to SSL port is not selected.
Kent Huang
TechNet Community Support

Configuring a Apache Reverse Proxy for OracleAS Portal and OracleAS Single

I'm trying to implement my Oracle Portal 10g Release 2 with a reverse proxy (Apache 2.2) as described in this link: http://download.oracle.com/docs/cd/B14099_19/core.1012/b13998/variants.htm#BEIFECEH without success. I have Oracle Portal, Oracle SSO,OID in the same domain and Apache Reverse Proxy in another domain. Has anyone had success using OracleAS Portal with a reverse proxy?

First of all i'm trying to configure a reverse proxy only for Ora SSO (infra tier). Here is what i already do:
APACHE REVERSE PROXY (Apache 2.2)
http:/proxy.mycompany.com:80
ProxyRequests off
ProxyPassInterpolateEnv On
ProxyPass / http:/portal.tech.everett.it:7777/
ProxyPassReverse / http:/portal.tech.everett.it:7777/
ProxyPreserveHost On
ORACLE SSO
http:/portal.mycompany.com:7777
Here are the steps i already do:
1- CONFIG OID
create an ldif file called setdasurl.ldif and insert as follow:
dn:cn=OperationURLs,cn=DAS,cn=Products,cn=OracleContext
changetype: modify
replace: orcldasurlbase
orcldasurlbase: http:/proxy.mycompany.com/
then do ldapmodify as follow:
ldapmodify -x -h portal.mycompany.com -p 3060 -D "cn=orcladmin" -w password1 -v -f setdasurl.ldif
2- CONFIG ORA SSO (as gentjan user)
export ORACLE_HOME=/home/gentjan/product/10.1.2/OracleAS/infra/
2.1-config Apache config of ORA SSO
vi $ORACLE_HOME/Apache/Apache/conf/httpd.conf
change from:
ServerName portal.mycompany.com
Port 7777
KeepAlive On
to:
ServerName proxy.mycompany.com
Port 80
KeepAlive Off
and add at the end of httpd.conf
RewriteEngine On
RewriteOptions inherit
2.2- update DCM Repository (as root)
*$ORACLE_HOME/dcm/bin/dcmctl updateconfig -ct HTTP_Server -v -d*
2.3- modify SSO Server Home URL to reverse proxy hostname and port (as root)
*$ORACLE_HOME/sso/bin/ssocfg.sh http proxy.mycompany.com 80*
2.4- Updating the targets.xml File
Open the ORACLE_HOME/sysman/emd/targets.xml file and locate the target type oracle_sso_server.
vi $ORACLE_HOME/sysman/emd/targets.xml
Update the HTTPMachine and HTTPPort attributes with the proxy server host and port attributes that were passed to ssocfg. For example:
Property NAME="HTTPMachine" VALUE="proxy.mycompany.com"
Property NAME="HTTPPort" VALUE="80"
Property NAME="HTTPProtocol" VALUE="http"
Save and close the file.
Reload the Application Server Control Console by issuing this command (as gentjan):
*$ORACLE_HOME/bin/emctl reload*
2.5- Re-register mod_osso on SSO Middle-tier with reverse proxy hostname and port
some needed permissions
chmod -R 775 /home/gentjan/product/10.1.2/OracleAS/infra/dcm/
Re-register mod_osso (as gentjan)
*$ORACLE_HOME/sso/bin/ssoreg.sh -oracle_home_path /home/gentjan/product/10.1.2/OracleAS/infra -site_name infra.proxy.mycompany.com -config_mod_osso TRUE -mod_osso_url http:/proxy.mycompany.com:80 -update_mode MODIFY*
2.6- update DCM Repository (as root)
*$ORACLE_HOME/dcm/bin/dcmctl updateconfig -ct HTTP_Server -v -d*
2.7- Restart OC4J_Security and Oracle HTTP Server at Infrastructure tier
*$ORACLE_HOME/opmn/bin/opmnctl restartproc process-type=HTTP_Server*
*$ORACLE_HOME/opmn/bin/opmnctl restartproc process-type=OC4J_SECURITY*
After this modifications my reverse proxy is ok.
I can access to http:/proxy.mycompany.com:80 and this redirect me to Oracle Application Server Welcome page.
If i try http:/proxy.mycompany.com/pls/orasso/orasso.home, i can view the SSO Server Home page.
The problem that i find is when i click to Login page for Oracle SSO.
I have the following error:
Forbidden You don't have permission to access /pls/orasso/ORASSO.wwsec_app_priv.login on this server.
So, in other words i can't do the login/logout under reverse proxy. Anyone can help?
Gentjan

How to Install Apache 2.x with ssl on solaris 8/9 for reverse proxy

Hi,
I need to install Apache 2.x on solaris , along with mod_ssl and openssl . I am not sure where to find the required version for solaris and also where to find openssl and mod_ssl for installation for 2.x.
I need this for configuring reverse proxy pointing to the Portal.

Harish,
I think, I don't get your problem...
the files are available at http://www.apache.org (binaries and source)
http://www.artfiles.org/apache.org/httpd/binaries/solaris/
openssl at http://www.openssl.org
mod_ssl at http://www.modssl.org
kr, achim

Configuring Reverse Proxy Nginx for Messenger

Similar Messages

Maybe you are looking for