Force SSL and redirect to GW-WebAccess

GW 802 WebAccess Application, OES2 SP2
Hi everybody,
I used to apply the following code in gw.conf for redirection and use of SSL:
<IfModule !mod_rewrite.c>
LoadModule rewrite_module /usr/lib/apache2/mod_rewrite.so
</IfModule>
<IfModule mod_rewrite.c>
RewriteEngine on
Rewritecond %{SERVER_PORT} ^80$
RewriteRule ^/gw/(.*) https://%{HTTP_HOST}/gw/$1 [NC,R,L]
</IfModule>
Force SSL on GroupWise 8 WebAccess and Calendar Publishing | Novell User Communities
Connecting from outside everything works fine.
From inside users can still reach the OES Welcome Page by typing the server name in the browser.
Is there a way to configure so that users are always redirected to GW-WA login page, also from inside without getting the chance to come to the OES Welcome Page?
Any help/ideas appreciated.
Thanks, Holger

hschmolz,
It appears that in the past few days you have not received a response to your
posting. That concerns us, and has triggered this automated reply.
Has your problem been resolved? If not, you might try one of the following options:
- Visit http://support.novell.com and search the knowledgebase and/or check all
the other self support options and support programs available.
- You could also try posting your message again. Make sure it is posted in the
correct newsgroup. (http://forums.novell.com)
Be sure to read the forum FAQ about what to expect in the way of responses:
http://forums.novell.com/faq.php
If this is a reply to a duplicate posting, please ignore and accept our apologies
and rest assured we will issue a stern reprimand to our posting bot.
Good luck!
Your Novell Product Support Forums Team
http://forums.novell.com/

Similar Messages

I want to force SSL on some pages and NO SSL on other pages

I have looked at webflow and it is not obviously clear to me how to:
1. Enforce NON SSL on some pages ... (like search page, catalog, product list pages ) to improve performance.
2. Force SSL on other pages .... (like account edit page, beyond the obvious checkout pages)
One way I was thinking off was to use a URL rewrite intercept to do that.
The webflow seems to be a mechanism to build page flows enforcing SSL on the next page called. But what if the user is the person directly clicking on a link that should be SSL'ed say Account Update.
Currently ... we are ssl'ing the whole site.
Mike

I have it within an ascx control which appears on each page. Alternatively, within the common.master.master codebehind page load event. I think the problem with the webflow is that you need to know which page a user is coming from to be able to take them into (and then out of) secure mode. This code ensures that certain pages are secure and others are not.
Also, Fname in the above example is the name of the page that is being requested:
Fname = mid(Request.Path, Request.Path.LastIndexOf("/") +2,len(Request.Path) - (Request.Path.LastIndexOf("/") +1) )
Edited by: Martin Barrett on Jul 23, 2009 4:07 PM
Edited by: Martin Barrett on Jul 23, 2009 4:10 PM

SSL termination and redirect

We have moved SSL termination to a loadbalancer (F5) from the Sun webservers. The load balancer after terminating SSL goes to the http listener on the webservers. We have some NSAPI code that does a redirect. It used to do the redirect based on the original scheme of the listener (if http then the redirect was http based. If https then redirect https). Of course, now all redirects come back http even though the user may have an https session.
For weblogic we can feed a header from the F5 (WL-PROXY-SSL) and it would recognize that a load balancer was used for SSL termination and perform java redirects using the correct scheme. Is there any header like this I can feed to the Sun Webserver so it recognizes that a loadbalancer has terminated the SSL session and any redirects should be https?

It might be easiest to configure separate HTTP listeners (e.g. separate ports) for SSL and non-SSL requests. You can configure which scheme should be used in self-referencing URLs (such as those used in redirects) per HTTP listener. In Sun Java System Web Server 7.0, you can do that using the admin GUI, CLI, or by editing the server.xml configuration. If you edit server.xml, you need to specify the <server-name> element in the appropriate <http-listener> element.

SSL login redirect

I placed a bit of php on my login page to redirect using https:, however once a user is logged in, I want them to be redirected to a NON secure page. (http:)
A post in the interaktonline.com forum indicated you can enter full url's in the redirect fields of the email settings | user-levels tab
http://www.interaktonline.com/Products/Bundles/MXKollection/Product-Forum/Details/70652/Se cure+https+in+login.html
This doesn't work for me ... instead it redirects to (ignore spaces):
https://www.domain.com/http: //www.domain.com/
basically appending whatever you put in the redirect fields to the end of your hostname.
Is there a way around this? I don't want to have every page OTHER than my login check to see if it's https, and then redirect back ... that seems too messy.
Thanks!
~shawn

So after a couple of hours hunting, here's what I found:
In the file includes/tng/triggers/tNG_defTrigg.inc.php :
Line 233 tries to take care of the "relative/absolute" path decision:
$relPath = '';
if (isset($tNG->dispatcher) && isset($tNG->dispatcher->relPath)) {
$relPath = KT_makeIncludedURL($tNG->dispatcher->relPath);
(Actually this "decision" is made by KT_makeIncludedURL() in the /includes/common/KT_functions.inc.php file on line 475)
It turns out all of this depends on the dispatcher:
// Make a transaction dispatcher instance
$tNGs = new tNG_dispatcher("../");
If the dispatcher is relative, it will make the redirect relative. IF THE DISPATCHER IS ABSOLUTE, THE REDIRECTS WILL BE AS WELL.
Actually I didn't even need to change the paths in the login settings, I just changed the dispatcher to an absolute URL, like this:
// Make a transaction dispatcher instance
$tNGs = new tNG_dispatcher("http://www.domain.com/");
and everything's gravy!
Cheers!
PS, in case you're interested in the PHP to force SSL for a particular page, you can find it here: http://rackerhacker.com/2007/03/21/forcing-https-with-php/

How do I bind to directory server with SSL and authentication?

I'm running Lion Server 10.7.3, Open Directory master. In Open Directory/Settings/LDAP, I've checked the box to Enable SSL and selected a (self-signed) certificate. In Policies/Binding, I've checked the box to Enable Authenticated Directory Binding.
Testing with a client computer on which Snow Leopard has been freshly installed and fully updated, I went to System Prefs/Accounts to bind to the new directory server. The good news is, the binding was successful, and when the client initiates an AFP connection with the server, it uses Kerberos, creating a ticket as expected. (Which doesn't work with Lion clients, alas, but that's a seperate matter.)
Here are the problems:
1) It looks like the binding did not use SSL. By which I mean that when I opened Directory Utility and examined the LDAPv3 entry, the SSL checkbox was not checked. (If I then check the box, everything looks fine until I restart the client, after which I have a red dot. So I'm guessing that checking the box does nothing until after restart, and that it breaks the binding.)
2) I was never prompted to authenticate for the directory binding.
So I get that literally I'm *enabling* SSL and Authenticated Directory Binding, but it seems like the defaults are to bind without SSL or authentication, and there's no obvious-to-me way to force the binding to use those things. How do I do that?
What I'd really like to do is *require* SSL and Authenticated Directory Binding. I want this because my belief (correct me if I'm wrong) is that if authentication is required to bind to the server, no one will be able to bind to my server without my permission, and that SSL offers a more secure connection to my server than not-SSL. How do I require these things, or do I not really want to?
Thank you.

You cannot connect to databases via Muse at the moment. Please refer: http://forums.adobe.com/message/5090145#5090145
Cheers,
Vikas

I need to know how to force a https redirect in Adobe Muse if this can't be done please tell me so I don't waste any more time... please

I need to know how to force a https redirect in Adobe Muse if this can't be done please tell me so I don't waste any more time... please

Protocol usage and redirects are a server-side thing. This has nothing to do with designing the web page and thus nothing with Muse, either.
Mylenium

For the last 10 days I have been unable to open the Mail account on my eMac (MacOS10.4.11). When I click on the icon in the Dock the only option I get is "Force quit" and the main Mail bar will not open any choice. Any ideas?

For the last 10 days I have been unable to open the Mail account on my eMac (MacOS10.4.11). When I click on the icon in the Dock the only option I get is "Force quit" and the main Mail bar will not open any choice. Any ideas?

You can setup Mail for iCloud on the eMac.
Do not delete the old account yet. sign up for an iCloud account if you haven't.
I understand .mac mail will still come through. Do not delete the old account yet.
You cannot use .mac or MobileMe as type of Account, you have to choose IMAP when setting up, otherwise Mail is hard coded to change imap.mail.me.com to mail.me.com & smtp.mail.me.com to smtp.me.com, no matter what you try to enter.
iCloud Mail setup, do not choose .mac or MobileMe as type, but choose IMAP...
On second step where it asks "Description", it has to be a unique name, but you can still use your email address.
IMAP (Incoming Mail Server) information:
• Server name: imap.mail.me.com
• SSL Required: Yes
• Port: 993
• Username: [email protected] (use your @me.com address from your iCloud account)
• Password: Your iCloud password
SMTP (outgoing mail server) information:
• Server name: smtp.mail.me.com
• SSL Required: Yes
• Port: 587
• SMTP Authentication Required: Yes
• Username: [email protected] (use your @me.com address from your iCloud account)
• Password: Your iCloud password

Anyone using SSL and successfully getting RSS updates about WIKI changes

My group was hoping to use Mac Mini servers for WIKI and group collaboration servers, but I've run into problems. We're security conscious, so we keep the web & wiki server locked-down using SSL (by redirecting port 80-->443, using instructions found in these forums). That part seems to work ok. But we really want (and my boss REALLY wants!) to have a working RSS feed so he gets notifications in is Mac Mail when wikis are updated. I've had no real success getting this to work reliably. Sometimes I'll get updates in osx Mail, but other times, it won't update. I can't put my finger on the flakiness.
1) Does anyone have this configuration working reliably, that is, Can it be done? Or should I give up and return these two mac mini servers.
2) If so, any hints or tips as to how to get a reliable RSS feed over SSL?
Thanks much,
Rick.

I have it working reliably in Firefox, but not in Mail. Mail seems to have issues with something, either the SSL or the authentication or both. So if he would be OK having it in his FF/Safari bookmarks or in his bookmark bar, that should work.

When I login, all of my desktop items are gone, the "Finder" icon is bouncing and a message asking to restore windows is blinking but unresponsive. I can't exit out of it. What do I do? I've tried force quitting, and it doesn't get rid of it.

When I login, all of my desktop items are gone, the "Finder" icon is bouncing and a message asking to restore windows is blinking but unresponsive. I can't exit out of it. What do I do? I've tried force quitting, and it doesn't get rid of this message. When I login to my husband's account, this message does not appear.

Hey sunnyday7!
Here is an article that can help you address this issue:
OS X: How to quit an unresponsive application using Force Quit
http://support.apple.com/kb/ht3411
Additional Information
OS X automatically relaunches the Finder when it is quit. If the Finder is unresponsive, use Force Quit to relaunch it. Select Finder in the Force Quit Window or Dock, then click Relaunch.
Thanks for using the Apple Support Communities. Have a good one!
-Braden

Session Time Out and Redirect to login page - urgent

My problem is I want to display alert message and redirect to the home page when session expires.
Iam using TimeOutListener in my application as follows.
public PhaseId getPhaseId() {
return PhaseId.ANY_PHASE;
public void beforePhase(PhaseEvent phaseEvent) {
     FacesContext facesContext = phaseEvent.getFacesContext();
HttpSession sessionx = (HttpSession)facesContext.getExternalContext().getSession(false);
if(sessionx == null) {
     FacesUtils.sessionCheck = true;
String ampee = (String)((HttpServletRequest)FacesContext.getCurrentInstance().getExternalContext().getRequest()).getAttribute("ampee");
if(ampee != null && ampee.equals("ampee")) FacesUtils.sessionCheck = false;
if(phaseEvent.getPhaseId() == PhaseId.RENDER_RESPONSE) {
     if(FacesUtils.sessionCheck){
     facesContext.getApplication().getNavigationHandler().handleNavigation(facesContext, "", "sessionExpired" );
     FacesUtils.sessionCheck = false;
ExternalContext externalContext = FacesContext.getCurrentInstance().getExternalContext();
          HttpServletRequest request = (HttpServletRequest) externalContext.getRequest();
          HttpSession session = request.getSession();
          if (session.isNew()) {
               try {
               String errorPageURL = externalContext.getRequestContextPath() +
               "/index.jsf?errorpage=true";
               externalContext.redirect(errorPageURL);
               }catch(Exception e){
                    e.printStackTrace();
here i have appended param errorPage=true...
in jsp page i have used following code to get the param<% if(request.getParameter(errorPage)!=null && request.getParameter(errorPage).equals("true")){%>
<script>alert("session expired");</script>
<%
%>
Can any one help me how to Implement this?
Do u know another way pls let me know...

Consider using the Javascript setTimeout() function in conjunction with HttpSession#getMaxInactiveInterval(). The HttpSession#getMaxInactiveInterval() returns the remaining seconds of the session lifetime.
Basic example:<script>
    setTimeout("alert('The session will timeout after one minute.')", <%= (session.getMaxInactiveInterval() * 1000) - 60000 %>);
</script>I've given the client one minute (60000ms) extra time space to respond accordingly.
Use this in combination with the following head:
<meta http-equiv="refresh" content="<%= session.getMaxInactiveInterval() %>;url=login.jsf">which will redirect to login.jsf if the session is timed out. You can also redirect to another page of your taste, e.g. error.jsf or so.

Urgent: how to Logoff and redirect to the login screen from WebDynpro appli

Hi,
i want to logoff and redirect to to the login page.
i use WDClientUser.forceLogoffClientUser([_"what should be the code here"_]);
If i pass null as the url, it will terminate and default message will be shown (it will not go to logon screen)
I want to logoff and navigate to customize login page.
I don't know from which server the request is from dev, Qa or some other system.
I can use WDClientUser.forceLogoffClientUser("http://dev"); but it doesn't work with QA.
i will be really appriciate we suggest me regarding this. Its urgent please send for responce ASAP.
Thanks
NSM

Hi,
use the following code to get the url
String hostName = WDProtocolAdapter.getProtocolAdapter().getRequestObject().getServerName();
          int port = WDProtocolAdapter.getProtocolAdapter().getRequestObject().getServerPort();
          StringBuffer url = new StringBuffer("http://");
          url.append( hostName );
          url.append(":");
          url.append(port);
WDClientUser.forceLogoffClientUser(url.toString());
Regards
Ayyapparaj

Submit Action and Redirect page in Tabular form Column Link

Hi All,
I have a scenario to submit the current page and redirect to another page with the arguments, when i clink on the link which is created using column link in Report Attributes.
I can able to perform the submit action, but redirection is not happening.
Created a column link on non database column by providing
Link Attribute : <a href="#" onclick="doSubmit('SAVE')">#FAM_DET#</a>
Target : Page in this application
Page : 7
Item name : P7_TRAVEL_REQ_ID
item Value: #TRAVEL_REQ_ID#
Item name : P7_TRAVEL_REQ_LINE_ID
item Value: #TRAVEL_REQ_LINE_ID#
Can anyone help me out to resolve this.

811598 wrote:
Please update your forum profile with a real handle instead of "811598".
When posting a question here, always include the following information:
Full APEX version
Full DB/version/edition/host OS
Web server architecture (EPG, OHS or APEX listener/host OS)
Browser(s) and version(s) used
I have a scenario to submit the current page and redirect to another page with the arguments, when i clink on the link which is created using column link in Report Attributes.
I can able to perform the submit action, but redirection is not happening.
Created a column link on non database column by providing
Link Attribute : <a href="#" onclick="doSubmit('SAVE')">#FAM_DET#</a>
Target : Page in this application
Page : 7
Item name : P7_TRAVEL_REQ_ID
item Value: #TRAVEL_REQ_ID#
Item name : P7_TRAVEL_REQ_LINE_ID
item Value: #TRAVEL_REQ_LINE_ID#
Remove the link attribute (what you have used there is not the correct way to use this property anyway).
Change the target page to the same page as the report.
Set the Column Link Request property to BRANCH_TO_PAGE_ACCEPT|SAVE.
Create an On Submit: After Processing (After Computation, Validation, and Processing) branch to page 7, conditional on the SAVE request.
If the SAVE request can be triggered by something other than the report link (e.g. a Save button) then use another request value that will trigger the required page process in the link request and branch condition, e.g. BRANCH_TO_PAGE_ACCEPT|APPLY and APPLY respectively.
Note that there is a bug in BRANCH_TO_PAGE_ACCEPT processing in APEX 4.2.3 and a patchset exception must be installed for this approach to work on this APEX release.

Trying to use labview to analyse analog data from a jump on a force plate and measure peak force (at two points, initial land and 2nd land from jump). Also need to mark the time of flight (time off plate).

Attached is a file of 3 trials of a drop vertical jump activity onto a force plate. the subject stands on a platform off the force plate, jumps onto the force place and immediately jumps up as if going for a rebound. I am able to run this data and obtain a waveform graph with no problems. however, I need to be able to find the initial contact with the force palte, the peak of the drop, the intial time off the force plate (prior to the jump), the return from the jump and finally the second peak (landing from the jump).
I want to calculate the time of flight ( time off the plate and in the air after the intial drop) to calculate juimp height.
I had someone write me a mathscript for it and it works well, however, I need to do it without mathscript as I do not understand mathscript (nor Labview!!).
Please help
Attachments:
Jose_Index and shift register6.vi ‏130 KB
NI post.docx ‏365 KB

OK, but I'm not understanding what you're asking us to do... Are you asking us to explain what the MathScript code is doing? (It's searching the array for the elements when the values are above or below a threshold.) Are you asking someone to convert the whole MathScript code to LabVIEW (we are not a code-writing service), or you just want to be able to calculate the new stuff you want with LabVIEW?
In the future, please do not post proprietary file formats. Most people do not have Word, or Word 2007 for that matter. Please post text files or PDFs. Thanks.

My macbook pro is stuck on grey screen with apple symbol in center with the progress circle under it continusly spinning. After I had turned it on. Prior to turning it on I had to force close and shut down a few hours prior. Please Help?

My macbook pro is stuck on grey screen with apple symbol in center with the progress circle under it continusly spinning. After I had turned it on. Prior to turning it on I had to force close and shut down a few hours prior. Please Help I have tried everything I know to do

Unfortunately this means that there is a problem in the boot sector of your hard drive. It might be indicative of a fundamental corruption in the coding that allows your computer to boot your operating system from your hard drive. I had this problem twice and it resulted in me having to get a new hard drive and restore my data.
In other words, your computer can't talk to your operating system so you can't access your data.
Here is my advice: DON'T CALL APPLE TECH SUPPORT though they are kind and usually helpful it will take you an hour just to explain the situation and they will only tell you to do what I'm gonna say here.
First: Shut down your computer completely
Two: boot up while holding down the following keys: command, option, p, and r. The computer will reboot 3 times. This solution will likely fail so if you're frustrated skip to the next step.
Three: Boot up while holding down the option key. Select recovery drive. Select your default language. Select disk utility, click on Macintosh HD, and select "verify and repair volume." Likely the verification will produce some line like "unused node not erased." Or something like that. If anything using the words "node structure" comes up, you need a new hard drive.
If after verification and repairs you still can't boot I sincerely hope you have apple care because you will need a new hard drive. Set up an appointment to come in to the apple store, they will tell you to go and get data recovery, just ask them to give you the old hard drive. Unless you have an up to date backup in which case you can just restore from that. If you're lucky the only issue is with the boot sector which means that if you ask them to give you the old hard drive, you can buy an enclosure and you have effectively been given a free external hard drive. It still works to store data just not to load an operating system.
If you have a back up drive bring it to the apple store and they'll do the whole thing right there, it should take around an hour and a half but may take longer.
Hope this helps, it's annoying but it's your safest bet.
All the best.

EDSPermissionError(-14120) problems with LDAP, SSL and Directory Utility

Hello everyone,
Apologies for the repost but I think I may have made a mistake by posting this originally in the Installation, Setup and Migration forum instead of the Open Directory forum. At least I think that may be why I didn't receive any responses.
Anyway, I've been trying to get my head around Open Directory and SSL as they are implemented in Mac OS X Server 10.5 Leopard, and have been having a few issues. I would like to set up a secure internal infrastructure based around a local Certificate Authority that signs certificates for other internal services like LDAP, email, websites, etc.
I only have one Mac OS X Server and it is kind of a small office so I have gone against best practice and simply made it a CA (through Keychain Utility). I then generated a self-signed SSL certificate through Server Admin, and used the "Generate CSR" option to create a Certificate Signing Request. This went fine, but I did have some problems signing it with the CA, because the server documentation suggested that once I signed it it would pop open a Mail message containing the ASCII version of the signed certificate - it did not, and it took me a loooong time to realize that I could simply export the copy of the signed certificate it put in my local Keychain on the server as a PEM file and paste this back into the "Add Signed or Renewed Certificate from Certificate Authority" dialog box in Server Admin. Hopefully this can be fixed in a forthcoming patch, but I thought I would mention it here in case anyone else is stuck on this issue.
Once I did this I was able to use this certificate in the web server on the same machine and sure enough I was able to connect to it with with clients who had installed the CA certificate in their system Keychains without getting any error messages - very cool.
However, I haven't had quite as much luck getting it going with LDAP/Open Directory. I installed the certificate there as well, but have run into a number of problems. At first I could not get clients (also running 10.5.2) to talk to the server at all over SSL, receiving an error in Directory Utility that the server did not support SSL. I eventually discovered that the problem seemed to lie in the fact that the OpenLDAP implementation on Leopard is not tied in with the system Keychain, necessitating some command-line voodoo to install a copy of the CA cert in a local directory and point /etc/openldap/ldap.conf at it, as documented here: http://www.afp548.com/article.php?story=20071203011158936
This allowed me to do an ldapsearch command over SSL, and seemingly turn SSL on on clients that were previously bound to the directory, and additionally allowed me to run Directory Utility on new clients and put in the server name with the SSL box checked and begin to go through the process of binding. Once this seemed to work, I turned off all plaintext LDAP communication and locked down the service by checking the "Enable authenticated directory binding," "Require authenticated binding," "Disable clear text passwords," and "Encrypt all packets" options in Server Admin. However, I am now running into a new problem, specifically that I cannot successfully bind a local account to a directory account over SSL.
Here's what happens:
1) I run Directory Utility, (or it auto-runs) and add a server, typing in the DNS name and clicking the SSL box.
2) I get asked to authenticate, and type in user credentials, including computer name (incidentally, should this be a FQDN or just a hostname?)
3) Provided I put admin credentials in here and not user-level credentials, I get taken to the "Do you want to set up Mail, VPN, etc.?" box that normally appears when you autodiscover or connect to an Open Directory server.
4) I click through, and am asked for a username and password on the server, as well as the password for my local account.
5) When I put this information in, I get a popup with the dreaded "eDSPermissionError(-14120)" and it fails.
Checking the logs in Server Admin reveals nothing special, and while I have seen a couple other threads on this error and various other binding problems:
http://discussions.apple.com/thread.jspa?messageID=5967023
http://discussions.apple.com/message.jspa?messageID=5982070
these have not solved the problem. In the Open Directory user name field I am putting the short username. I have tried putting [email protected] and the user's longname but this fails by saying the account does not exist. For some reason it does seem to work if I bind it to the initial admin account I created, but no other user accounts.
If I turn all the encryption stuff off I am able to join just fine, so I am suspecting that the error may lie in some other "under the hood" piece of software that doesn't get the CA trust settings from the Keychain or the ldap.conf file, but I'm stymied as to which piece of software this might be. Does anyone have any clues on what I might be able to do here?
Thanks,
Andrew

Hard to tell what is happening without looking at the application
source, knowing what OS & hardware you're using etc. You might want to
try running with different JVM versions to see if it's actually the VM
that is the problem. If you have a support contract with BEA you could
ask support to help you diagnose this.
Regards,
/Helena
Ayub Khan wrote:
I have an application running on Weblogic 8.1 ( with JRockit as the JVM). This
application in turns talks to an iPlanet Directory server via LDAP/SSL. The problem
seems to happen on loading the machine..the performance progressively gets worse
and after a couple of seconds, all the threads stop responding. I checked the
heap, cpu and the idle threads in the execute queue and there is nothing there
to trigger alarms...there are quite a few idle threads still and the heap and
the cpu utilization seem OK. On doing a thread dump, Is see that all the other
threads seem to be in a state where they are waiting for data from LDAP and it
is basically read only data that they are waiting on.
Does anyone know what it is going on and help point me in the right direction.
-Ayub

Force SSL and redirect to GW-WebAccess

Similar Messages

Maybe you are looking for