CSM 302 redirection with domain change

running CSM-S with 2.2.(5)....I need to do the following on the same vserver:
==========================================================
Point 2) and point 3) should take precedence on point 1)
1) URL /*
From http://mysites.ams.pippo.com
to http://mysite-ams.pippo.com
2) URL /personal/%p
from:
http://mysites.ams.pippo.com/personal/[SAMAccoutnName]
to:
http://mysite-ams.pippo.com/personal/pippo_[SAMAccoutnName]
3) URL variable2/personal/%p
from:
http://mysites.ams.pippo.com/variable2/personal/variable1
to:
http://mysite-ams.pippo.com/variable2/personal/pippo_variable1
is this the right config? can we do a webex?
map URL-ANY url
match protocol http url /*
map URL-SHARPT-P2 url
match protocol http url /personal/%p
map URL-SHARPT-P3 url
match protocol http url mysites.%2/personal/%1
policy SHARPT-PROD-RD1
url-map URL-ANY
serverfarm SHARPT-PROD-RD1
serverfarm SHARPT-PROD-RD1
nat server
no nat client
redirect-vserver SHARPT_PROD-RD
   webhost relocation http://mysite-ams.pippo.com/%p
   inservice
policy SHARPT-PROD-RD2
url-map URL-SHARPT-P2
serverfarm SHARPT-PROD-RD2
serverfarm SHARPT-PROD-RD2
nat server
no nat client
redirect-vserver SHARPT_PROD-RD2
   webhost relocation http://mysite-ams%2/personal/pippo_%1
inservice
policy SHARPT-PROD-RD3
url-map URL-SHARPT-P3
serverfarm SHARPT-PROD-RD3
serverfarm SHARPT-PROD-RD3
nat server
no nat client
redirect-vserver SHARPT_PROD-RD3
   webhost relocation http://mysite-%2/personal/pippo_%1
inservice
vserver SHARPT-PROD
parse-length 4000
slb-policy SHARPT-PROD-RD1
slb-policy SHARPT-PROD-RD2
slb-policy SHARPT-PROD-RD3

Hi,
I'm afraid that what you are trying to achieve is not possible on the CSM. You cannot configure regex-based redirection.
The maximum you would be able to achieve is changing "http://mysites.ams.pippo.com" into "http://mysite-ams.pippo.com"
For the kind of rediretion you require, you would need to move to ACE.
I wish I could give you a more satisfactory answer
Regards
Daniel

Similar Messages

CSM HTTP Redirect with SSL

Problem we are having:
A client opens an HTTPS connection to a CSM with SSL offload to SSL module. The decrypted clear HTTP request hits the IIS server and is redirected (301).
The client gets an HTTP redirect and not an HTTPS redirect.
The reason for the 301 redirect is the IIS server does not have a physical resource but rather a virtual directory so it issues a 301 and adds a /. eg https://www.cisco.com/tech is redirected to https://www.cisco.com/tech/ in a working situation.

look for the urlrewrite command in order to change HTTP into HTTPS.
Regards,
Gilles.

302 Redirect Location Header Rewrite not working with code upgrade

Hi,
Description:
We have a portal webservice hosted by an ACE4710. It has two services (www/https) on the same IP 10.1.1.1.
One is a redirect service that redirects all requests to tcp/80 on this ip to the other which is a 'standard' https proxy service.
The backend servers are http only. Externally everything needs to be https.
So we have an ssl proxy and Location header http to https rewrite on the https service.
The configuration below operates correctly on v5_1_2.
But with a code upgrade to 5_3_1b, the Location header rewrite does not work.
We've tried several different configurations and even 'ssl url location rewrite ".*". It just looks like the ACE is completely ignoring the configuration to rewrite the Location field.
Reverting to the older code fixes the problem.
Problem seen:
Here is the problem as seen on the *client*. The 302 redirect Location header is NOT rewritten:
Response headers:
HTTP/1.1 302 FOUND
Server: nginx
Date: Fri, 20 Mar 2015 10:59:43 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 295
Connection: keep-alive
Location: http://website.liveportal.nhs.uk/homepage/information
Cache-Control: no-cache, no-store
Set-Cookie: information=35a7831d-928d-4122-aef3-39ef48ac4440; Path=/; secure; HttpOnly
X-Frame-Options: DENY
HTTPSampleResult fields:
ContentType: text/html; charset=utf-8
DataEncoding: utf-8
Config extract:
1) Set up the servers (4 normal on tcp/80 and one for a redirect)
rserver host WEBSERVICE-1
ip address 192.168.1.1
conn-limit max 200000 min 160000
inservice
...and the same for the other three
rserver redirect PORTAL_REDIRECT
webhost-redirection https://%h/%p 302
inservice
2) Set up the server farms
serverfarm host PORTAL_LIVE
probe webping
rserver WEBSERVICE-1 80
    inservice
rserver WEBSERVICE-2 80
    inservice
rserver WEBSERVICE-3 80
    inservice
rserver WEBSERVICE-4 80
    inservice
serverfarm redirect PORTAL_HTTP_REDIRECT
rserver PORTAL_REDIRECT
    inservice
3) Setup the ssl proxy and a location rewrite to https for responses from the servers
action-list type modify http HTTPS_LOCATION
header rewrite response Location header-value "http://(.*)" replace "https://%1"
ssl-proxy service WEB_SSL_PROXY
key webportal.key
cert webportal.crt
chaingroup root-chain
ssl advanced-options SSL-SECURE-STRONG-WEB
4) Set up the L4 services
class-map match-all PORTAL_HTTP
2 match virtual-address 10.1.1.1 tcp eq www
class-map match-all PORTAL_SSL
2 match virtual-address 10.1.1.1 tcp eq https
5) Setup the policy maps - one for the reals servers with header rewrite for redirects
policy-map type loadbalance http first-match PORTAL_HTTP
class class-default
    serverfarm PORTAL_HTTP_REDIRECT
policy-map type loadbalance http first-match PORTAL_SSL
class class-default
    serverfarm PORTAL_LIVE
    action HTTPS_LOCATION
6) Create the service policy
policy-map multi-match EXTERNAL-SERVICES
class PORTAL_SSL
    loadbalance vip inservice
    loadbalance policy PORTAL_SSL
    loadbalance vip icmp-reply
    appl-parameter http advanced-options PARAM-HTTP
    ssl-proxy server WEB_SSL_PROXY
class PORTAL_HTTP
    loadbalance vip inservice
    loadbalance policy PORTAL_HTTP
    loadbalance vip icmp-reply
7) Apply to the interface
interface vlan 211
description External Access
ip address x.x.x.x 255.255.255.0
alias x.x.x.x 255.255.255.0
peer ip address x.x.x.x 255.255.255.0
access-group input PERMIT-ALL
service-policy input EXTERNAL-SERVICES
no shutdown

I found that the v5_3_1b code seems to need a bit of extra configuration and it now works ok.
parameter-map type http PARAM_HTTP
header modify per-request
no persistence-rebalance
case-insensitive

B2C web shop - change/remove the 302 redirects for google search

Hi All,
We are making our webshop (http://hamperking.com.au) search engine friendly and implimenting a number of SEO recommendations. One of these recommendation requires the removal of the "works as designed" 302 redirects (temporary) in our CRM 2007 shop. Or atleast change them to 301 redirects (permenant). As the 302 redirects are temporary, google will not give them priority.
Can anyone point me into the right direction as to the SC and DC where is config is made?
Cheers,
Vic

I can not answer your direct question, but am curious as to why you are not using the [Web Crawler|https://service.sap.com/sap/support/notes/1128832] to accomplish this or perhaps you were unaware of it?

Configure BI 302 redirect without trailing slash.

We have BI installed on a Windows server behind an F5 BigIP LTM. The LTM is handling the SSL communications to the BI pool. When going to https://bi.domain.com/xmlpserver/ everything is fine. Without the trailing slash it is throwing a 302 redirect to a non-ssl location:
$ curl -I -k https://bi.domain.com/xmlpserver
HTTP/1.1 302 Moved Temporarily
Server: Apache-Coyote/1.1
Location: http://bi.domain.com/xmlpserver/
Transfer-Encoding: chunked
Date: Fri, 01 Oct 2010 00:34:21 GMT
How can we change the redirect location to reflect the correct URL of: https://bi.domain.com/xmlpserver/?
Thanks in advance,
John

If your load balancer is forwarding requests from one port to another, it should also rewrite the port number in Location header fields returned from Web Server. You can check your load balancer's documentation for details on how to configure your load balanacer.
If for some reason it's not possible to correctly configure your load balancer, you can override the port number Web Server will use in redirects by editing the servername attribute in server.xml. In your case, you would specify servername="www.mysite.com:80".

CSM URL Redirect

Hello.
I have the following config (short version):
vserver Test
virtual 10.0.1.210 tcp www
serverfarm Test
inservice
serverfarm Test
real 172.16.254.13
inservice
My goal is to redirect all traffic arriving to vserver Test, from http://123.test.com to http://123.ip.com
I have seen some examples but I get confused, since the redirect serverfarm is not associated with any real server; I also find litle to none documentation explaining url redirecting.
Thanks in advanced,
JC

Typical CSM redirection is as follows.
vserver Test
virtual 10.0.1.210 tcp www
serverfarm REDIRECTFARM
inservice
serverfarm REDIRECTFARM
nat server
no nat client
redirect-vserver WWW2
webhost relocation 123.ip.com 302
inservice
above config will send a 302 redirect to any client request matching http://10.0.1.210.
Client browser will then initiate a new http request for http://123.ip.com.
You will need to have another VServer waiting for connection attempts to http://123.ip.com and this Vserver will have the real in it.
HTH
Syed Iftekhar Ahmed

Yoga 2 Pro - Veriface doesnt work with Domain Account

I have a Yoga 2 Pro and I can get Veirface to work fine with a local account but it will not work with a Domain Account. I can get it to where it prompts me for the Domain Account Password (as it should the 1st time) but when you enetr the proper password, it tells you ints invalid etc. I have tried changing the Domain Password but it acts like it just cant locate the account etc. Does anyone know if this is a known issue or if there is a resolution to this?
I am using Veriface 5.0.13.5261 on a Windows 8.1 Pro Operating System

Hi there, i had the same problem.
I have two accounts
1. valentia\mubi (which is domain account)
2. Mubi (which is local laptop account)
When i use register my account with veriface, it work fine with Mubi
When i use to register my account with valentia\mubi it say wrong password..
I even deleted local i.e. Mubi account but still no luck!
This is great feature, but pretty much useless if not working with domain. I have to use domain account,

Windows Server 2008 R2: Server unable to authenticate with Domain Controller

Hello, I was wondering what could be the reason for this error if it is certain that there was no other computer on the network using the same name:
This computer could not authenticate with<Domain-controller>, a Windows domain controller for domain <Domain-name>, and therefore this computer might deny logon requests. This
inability to authenticate might be caused by another computer on the same network using the same name or the password for this computer account is not recognized.
What would cause the machine account pw to be 'not recognized'?

You can track changes in AD by enabling AD Auditing: https://technet.microsoft.com/en-us/library/cc731764%28v=ws.10%29.aspx?f=255&MSPPError=-2147217396
As reading the logs is usually a complicated and time consuming task, it is recommended to use a third party tool for auditing. The one I usually recommend is Lepide Auditor - Active Directory: http://www.lepide.com/lepideauditor/active-directory.html
This posting is provided AS IS with no warranties or guarantees , and confers no rights.
Ahmed MALEK
My Website Link
My Linkedin Profile
My MVP Profile

: invalid content type for SOAP: TEXT/HTML; HTTP 302 Redirect

Hi Experts,
I am facing with the flowing error when we are receiving for the soap receiver chanel.
Message processing failed. Cause: com.sap.engine.interfaces.messaging.api.exception.MessagingException: java.io.IOException: invalid content type for SOAP: TEXT/HTML; HTTP 302 Redirect
is their any content type to give in soap receiver channel.
please let me know.
Regards
Raju

I think the message is misleading. HTTP 302 meaning is that the url specified in not found or invalid for that service. You might want to check with external system that the specified URL in the SOAP receiver communication channel is right? Also you can find the URL from the WSDL itself. Similar test do it outside PI using the SOAPUI or XMLSPY and see the response error.

Redirecting a domain URL to a file

Is there any SAF directive (e.g NameTrans) to redirect a domain URL (e.g http://www.xyz.com/rob.txt) to a file rob.txt sitting at location /x/y/rob.txt (other than root directory rob.txt).
Bascially I want to achieve any request coming to http://www.xyz.com/rob.txt redirected to /x/y/rob.txt so that I can use another rob.txt (not the one lying in root dir /) for this domain.

If you want different hosts to respond with different content, you'd normally create separate virtual servers. Each virtual server could have its own document root, so foo.example.com/rob.txt could map to a different file than bar.example.com/rob.txt.
If you really want to special case things for a given hostname and URI, you can do that. The following will redirect requests for /rob.txt to /x/y/rob.txt only if the hostname www.example.com was used in the request:<Client urlhost="www.example.com">
NameTrans fn="redirect" from="/rob.txt" url="/x/y/rob.txt"
</Client>

WLST with Domain-wide Admin Port configured

Anybody tried WLST with Domain-wide Administration Port (DAP) turned on?
Is there a set of instuctions to change over smoothly to using the DAP URL instead
of the plain-text URL?
Thanks,
-RAJ

Hello Raj, to use DAP start WLST as
java -Dweblogic.security.SSL.ignoreHostnameVerification=true
-Dweblogic.security.TrustKeyStore=DemoTrust weblogic.WLST
if you are using the demonstration SSL keys and certificates
Thanks,
-satya
Raj Sesetti wrote:
Anybody tried WLST with Domain-wide Administration Port (DAP) turned on?
Is there a set of instuctions to change over smoothly to using the DAP URL instead
of the plain-text URL?
Thanks,
-RAJ

Problems hosting iWeb with domain name.

I have a business web site that I host with iWeb08 using a domain name. I had the domain name working perfectly with iWeb. I would log on to my web site via my domain name and all my content was there as I expected. Whenever I upload a new addition to the web site I always click "view published site" which is taking me to http://web.me.com/username/pages and everything is there as I expected it. Recently, I went to my web site via my domain name and realized that all my recent updates are not being hosted online (with domain name). web.me is fine though. I checked the registration on my domain name and it is active. Any thoughts? Thanks in advance
Message was edited by: Bob3hills

I went to my web site via my domain name and realized that all my recent updates are not being hosted online (with domain name). web.me is fine though. I checked the registration on my domain name and it is active.
Are you using url forwarding? If so, perhaps you changed your mobile me site in a way that requires you to change your forwarding as well.
Could you provide both urls so we can see the differences you are talking about?

Using the af:image tag generates a http 302 redirect - image not cached

Using jdev 11.1.1.3.0 - I have a page template that displays a logo on top with the af:image tag. On my browser I have installed a sniffer called HttpWatch. When I look at the http requests I see that the image is never cached. Instead it shows a http return code of 302 (redirect) for the request fetching the image. the h:graphicImage tag does not have this behavior. Is this by design?

Hi,
don't know the code detail of h:graphicImage, but the ADF Faces image component reads the image from the resource loader (which is a servlet), which is not the same as just referencing the file on the public directory of the deployed application. So I assume that this is the reason why the image is not cached.
Frank

Domain change / Spiceworks pings a nonexistent domain

My company is in the process of switches email providers, moving from johnstown.k12.oh.us to jmk12.org. The email I signed up with is a jmk12.org email, and so Spiceworks keeps attempting to ping jmk12.org — a nonexistent domain. How would I go about changing the ping alert to ping my original domain? I already changed my user settings to use the original email.
Sorry if this is a really stupid question, but I'm new and can't for the life of me figure it out, if it's even possible.
This topic first appeared in the Spiceworks Community

Have you solved your problem yet? I am planning a similar domain change for my company. Any advice you can give me?
Thanks

Why the initial 302 redirect?

I've been knocking around this problem with BEA for awhile now, with no
          resolution yet. Why does the initial request to my site first get a 302
          redirect page that then leads to the actual page I wanted served
          (index.jsp)? I don't have it configured to do any redirect, and the BEA
          engineers have told me that this is simply the way weblogic and other
          appservers are designed. DO most of the other appserver do this? Why can't
          it just be made to return the requested page right up front? They (the BEA
          engineers) claim that weblogic cannot be configured to do this.
          Oh, and the reason I ask is that we've been advised of problems with
          crawlers not following these redirect pages. Don't know if I believe that
          or not.


Hi himanshu1979,
<jsp:farward> is compulsary
String destination;
/* construct your destination url as you like */
this.getServletContext().getRequestDispatcher(destination).forward(request,
response);
Browser is showing ur jsp from the cache.
So you can instruct the browser not to do that by using
<code>
response.setHeader("Expires","0");
</code>
or
<code>
response.setHeader("Pragme","no-cache");
</code>
Regards,
Tirumalarao
Developer TechnicalSupport,
Sun MicroSystem,India.

CSM 302 redirection with domain change

Similar Messages

Maybe you are looking for