Need in depth knowledge about Certficate request and install for Reverse proxy and CAS role

Hi,
I have few confusions about Exchange 2010/13 certificate request and install. As per my understanding best practise is to assign public CA certificate to Reverse proxy and Local CA certificate to CAS servers but need to know that what should be the format
of certificate request? Do we need to order public certificate just for mail.domain.com and add SAN for other web services URLs and is it required to add CAS array and server names to this certificate ? In what case we will add server names and what will happen
if we don't add in it ? How the outlook clients connecting from internet will be using this certificate? I have very limited knowledge in certificates and it always pisses me off. Please help me with explanations and articles. I tried to google and gone through
many articles but didn't get a fair idea. Thanks in advacnce. :)

Hi,
Here are my answers you can refer to:
1. Use the New-ExchangeCertificate cmdlet to generate a new certificate request:
New-Exchangecertificate -domainname mail.domain.com, autodiscover.domain.com -generaterequest:$true -keysize 1024 -path "c:\Certificates\xxxx.req” -privatekeyexportable:$true –subjectname "c=US o=domain.com, CN=server.domain.com"
2. CAS array name doesn’t need to be added in the certificate:
http://blogs.technet.com/b/exchange/archive/2012/03/23/demystifying-the-cas-array-object-part-1.aspx
3. It depends on the situation that you configured to add the server name.
4. Outlook clients use certificate for authentication.
If you have any question, please feel free to let me know.
Thanks,
Angela Shi
TechNet Community Support

Similar Messages

I need a Sample Code about flash++.h and swc.

hi,help me !
i need a Sample Code about flash++.h and swc.
my Sample Code bitmapdata.cpp:
#include <AS3/AS3.h>
#include <Flash++.h>
using namespace AS3::ui;
void gettpoint() __attribute__((used,
annotate(“as3sig:public function gettpoint(x:Number,y:Number):uint”),
annotate(“as3package:MyLibrary”)));
void gettpoint()
double xx;
double yy;
inline_as3( “%0 = x;%1 = y\n” : “=r”(xx) : “r”(yy) );
flash::geom::Point p=flash::geom::Point::_new();
AS3_Return(xx);
int main()
AS3_GoAsync();
return 0;
the compile command is “$(FLASCC)/usr/bin/g++” $(BASE_CFLAGS) -O4 bitmapdata.cpp -emit-swc=MyLibrary -o bitmapdata.swc -lFlash++ -lAS3++
It took me ten minutes to compile，but it can’t work.why?

Compiling a SWC using Flash++ will result in poor compiler performance if you are using the Flex SDK to compile that SWC into a SWF.
To get better performance try using the new version of mxmlc that is shipped in the Adobe Gaming SDK. (Note that this new version of mxmlc doesn't support Flex)
You will need to install the Gaming SDK and then extract the archive in the "AIR SDK" folder. Once that archive is extracted you'll notice the new mxmlc compiler in the bin folder.
Unfortunately compiling a SWF seems to be a little tricky. You'll notice in the sample Makefile below project that it changes directory into the bin folder before calling ./mxmlc. Ideally you wouldn't need to do this (like how it worked with the Flex mxmlc). I'll investigate why that is the case.
Makefile:
# Path to your FlasCC SDK folder
$?FLASCC=/Users/stshongr/builds/alchemy/1.0.0/sdk
$?GAMINGSDK="/Applications/Adobe Gaming SDK 1.0/AIR SDK/air3-5_p4_sdk_asc2_mac_112112/bin"
# The folder the source files are in
$?SRC_FOLDER=$(PWD)
all:
          "$(FLASCC)/usr/bin/g++" MyLibrary.c -emit-swc=MyLibrary -o MyLibrary.swc -lFlash++ -lAS3++
          cd $(GAMINGSDK) && ./mxmlc -library-path=$(SRC_FOLDER)/MyLibrary.swc $(SRC_FOLDER)/demo.as -o $(SRC_FOLDER)/demo.swf
clean:
          rm -f *.swf *.swc *.bc *.exe
MyLibrary.c:
#include <AS3/AS3.h>
#include <Flash++.h>
using namespace AS3::ui;
void gettpoint() __attribute__((used,
                                annotate("as3sig:public function gettpoint(x:Number,y:Number):uint"),
                                annotate("as3package:MyLibrary")));
void gettpoint()
    double xx;
    double yy;
    inline_as3( "%0 = x;%1 = y\n" : "=r"(xx) : "r"(yy) );
    flash::geom::Point p=flash::geom::Point::_new();
    AS3_Return(xx);
int main()
    AS3_GoAsync();
    return 0;
demo.as:
package {
    import flash.display.Sprite;
    import flash.text.TextField;
          import flash.events.Event;
    import MyLibrary.CModule;
    public class demo extends Sprite {
                    private var tf:TextField;
        public function demo() {
            addEventListener(Event.ADDED_TO_STAGE, initCode);
        private function initCode(e:Event):void {
            tf = new TextField();
            addChild(tf);
            // start the FlasCC library
            MyLibrary.CModule.startAsync(this);
            // call the function
                              tf.appendText("OUTPUT:" + MyLibrary.gettpoint(2,2));

Redundant Hub and CAS roles for exchange server

Hello ,
currently we have 2 mailbox servers , 1 DAG server and 1 HUB,CAS server ( hub and cas roles in same server )
i am looking to have a backup server incase the hub CAS server goes down .. or to have a redundant server for HUBCAS incase if it goes down the other one will go up and the users will use the second one automatically
how can i achieve that ?
appreciated your help

Hello,
If you use exchange 2010 server, I recommend you deploy multiple CAS servers as member of CAS array.
As your requirement, you need to deploy CAS NLB, the failover will occurs automatically.
Here is an article for your reference.
http://technet.microsoft.com/en-us/library/ff625247(v=exchg.141).aspx
Cara Chen
TechNet Community Support

SSL for Reverse Proxy, webdispatcher and EP?

We have a setup like:
Reverse Proxy->webdispatcher->EP
Do we need SSL for Reverse Proxy, webdispatcher and EP?
If so, how to do it?
Thanks!

You don't need SSL because of the middleware architecture. It is recommended for the obvious security reasons (protect user credentials, protect sensitive content while in transmission, etc.).
For performance reasons, I prefer not to have SSL encryption on the EP server, but instead offload it to other hardware. Ideally that's a network appliance, but you can use the Web Dispatcher instead.
On the other hand, you have a reverse proxy as well. In some cases the reverse proxy is configured decrypting SSL traffic as well (e.g., to do packet inspection). If that is the case, there isn't much point in re-encrypting it before relaying to the Web Dispatcher, so that it can only decrypt it again. But if you reverse proxy is doing a "pass-through", the Web Dispatcher should decrypt it (in my opinion) to offload the EP server.

Doubts about HTTPS requests and Java proxy

Hello,
I need help about SSL connections and Java.
I'm developing a HTTP/S proxy with Java. To test my proxy, I use Firefox. I configure the proxy option in the browser. The proxy works good with HTTP requests, but with HTTPS requests doesn't work and I don't know why.
I explain the steps that I do for a HTTPS request:
* The browser sends a CONNECT message to the proxy.
I check that the proxy receives the CONNECT request correctly.
* The proxy establish a secure connection with the content server.
I use an SSLSocket to connect with my content server, and the SSL handshake is succesful.
* The proxy sends a 200 HTTP response to the client:
I send
HTTP/1.0 200 Connection established[CRLF]
[CRLF]
to the application client (Firefox)
* The proxy sends/receive data to/from Firefox/content server
I have a Socket between Firefox and my proxy, and a SSLSocket between my proxy and my content server. I use two threads to communicate the client and the server.
Java code:
//Thead server-->proxy-->application(Firefox)
ThreadComm tpa = new ThreadComm(bis_serverSSL, bos_app);
//Thread application(Firefox)-->proxy-->server
ThreadComm tap = new ThreadComm(bis_app, bos_serverSSL);
The "tpa" thread reads from the SSLSocket between the proxy and the server and sends data to the Socket between the proxy and Firefox.
The "tap" thread reads from the Socket between the proxy and Firefox and sends data to the SSLSocket between the proxy and the server.
This is the class ThreadComm:
public class ThreadComm extends Thread{
    private BufferedInputStream bis = null;
    private BufferedOutputStream bos = null;
    public ThreadComm(BufferedInputStream bis, BufferedOutputStream bos) {
        this.bis = bis;
        this.bos = bos;
    @Override
    public void run() {
        int b = -1;
        FileOutputStream fos = null;
          do {
               try {
                    b = bis.read();
                    System.out.print((char) b);
                    fos.write(b);
                    bos.write(b);
                    bos.flush();
               } catch (Exception ex) {
                    Logger.getLogger(ThreadAplicacionProxy.class.getName()).log(Level.SEVERE, null, ex);
                    //b=-1;
          } while (b != -1);
    }But this doesn't work and I don't know why.
I have an Apache server with the mod_ssl enabled as content server, I can send requests (with Firefox) to the port 80(HTTP request) and 443(HTTPS request) without use my proxy and it works. If I use my proxy, HTTP request works but with HTTPS request doesn't work, I look the log of Apache and I see:
[Tue Apr 27 17:32:03 2010] [info] Initial (No.1) HTTPS request received for child 62 (server localhost:443)
[Tue Apr 27 17:32:03 2010] [error] [client 127.0.0.1] Invalid method in request \x80\x7f\x01\x03\x01
[Tue Apr 27 17:32:03 2010] [debug] ssl_engine_kernel.c(1770): OpenSSL: Write: SSL negotiation finished successfully
[Tue Apr 27 17:32:03 2010] [info] [client 127.0.0.1] Connection closed to child 62 with standard shutdown (server localhost:443)
Why it say? Invalid method in request \x80\x7f\x01\x03\x01 , my proxy sends the data that the Firefox sends.
I think than I have follow the explanations of [1] but doesn't work, I have problems in implementation in Java but I don't know where.
I appreciate any suggestions.
Thanks for your time.
[1] http://www.web-cache.com/Writings/Internet-Drafts/draft-luotonen-web-proxy-tunneling-01.txt

ejp, I have checked the socket between the proxy and server and ... You are right! , I was using the port 80 instead of the 443 (incredible mistake!, I'm sorry). I was convinced that I was using the port 443... Well, is a little step, but I still have not won the war :)
If I see the log files of Apache, We can see that something goes wrong.
localhost-access.log
>
127.0.0.1 - - [04/May/2010:17:44:48 +0200] "\x 80\x 7f\x01\x03\x01" 501 219
>
localhost-error.log
>
[Tue May 04 17:44:48 2010] [info] Initial (No.1) HTTPS request received for child 63 (server localhost:443)
[Tue May 04 17:44:48 2010] [error] [client 127.0.0.1] Invalid method in request \x80\x7f\x01\x03\x01
[Tue May 04 17:44:48 2010] [debug] ssl_engine_kernel.c(1770): OpenSSL: Write: SSL negotiation finished successfully
[Tue May 04 17:44:48 2010] [info] [client 127.0.0.1] Connection closed to child 63 with standard shutdown (server localhost:443)
>
I think that this happens because Apache receives the data without decrypt, this is the reason because in the log we can see the "Invalid method in request \x80\x7f\x01\x03\x01". This supposition is true?
ejp, you say that the "Termination is quite tricky." I have changed my code following yours suggestions (using the join and the shutdownOutput) but the threads don't die.
I explain you what I do:
(in time 1)
I launch the thread (threadFirefoxToApache) that reads data from Firefox and sends to Apache.
I launch the thread (threadApacheToFirefox) that reads data from Apache and sends to Firefox.
(in time 2)
threadFirefoxToApache sends the firts data to the server.
threadApacheToFirefox is waiting that the server says something.
(in time 3)
threadFirefoxToApache is waiting that Firefox says something.
threadApacheToFirefox sends data to Firefox.
(in time 4)
threadFirefoxToApache is waiting that Firefox says something.
threadApacheToFirefox is waiting that Firefox says something.
and they are waiting... and never finish.
In time 2, these first data are encrypted. The server receives these data and It doesn't understand. In time 3, the server sends a HTTP response "501 Method Not Implemented", here there is a problem because this data must be encrypt. According to the documentation that I read, the proxy cannot "understand" this data but I can "understand" this data. What's happen?
Firefox encrypt the data and send to the proxy. This It's correct.
The proxy encrypt the data another time, because I use the SSLSocket to send the data to the server. Then the server receives the data encrypted two times, when decrypt the data gets the data encrypted one time. And this is the reason why the server doesn't understand the data that sends Firefox. It's correct? May be.
Then If I want that the server receives the data encrypted one time I need to use the socketToServer, It's correct?
I will supposed that yes. If I use the socketToServer, the proxy doesn't understand nothing, because the data received from the socketToServer are encrypted (I only see simbols), but the Apache log says that there is a problem with the version? (If I use the socketToServer the threads die)
>
[Tue May 04 19:55:42 2010] [debug] ssl_engine_kernel.c(1760): OpenSSL: Loop: SSLv3 read finished A
[Tue May 04 19:55:42 2010] [debug] ssl_engine_kernel.c(1760): OpenSSL: Loop: SSLv3 write change cipher spec A
[Tue May 04 19:55:42 2010] [debug] ssl_engine_kernel.c(1760): OpenSSL: Loop: SSLv3 write finished A
[Tue May 04 19:55:42 2010] [debug] ssl_engine_kernel.c(1760): OpenSSL: Loop: SSLv3 flush data
[Tue May 04 19:55:42 2010] [debug] ssl_engine_kernel.c(1756): OpenSSL: Handshake: done
[Tue May 04 19:55:42 2010] [info] Connection: Client IP: 127.0.0.1, Protocol: TLSv1, Cipher: RC4-MD5 (128/128 bits)
[Tue May 04 19:55:42 2010] [debug] ssl_engine_io.c(1817): OpenSSL: read 5/5 bytes from BIO#29bd910 [mem: 29ea0a8] (BIO dump follows)
[Tue May 04 19:55:42 2010] [debug] ssl_engine_io.c(1750): -------------------------------------------------------------------------
[Tue May 04 19:55:42 2010] [debug] ssl_engine_io.c(1789): | 0000: 80 7f 01 03 .... |
[Tue May 04 19:55:42 2010] [debug] ssl_engine_io.c(1793): | 0005 - <SPACES/NULS>
[Tue May 04 19:55:42 2010] [debug] ssl_engine_io.c(1795): ------------------------------------------------------------------------
[Tue May 04 19:55:42 2010] [debug] ssl_engine_kernel.c(1770): OpenSSL: Write: SSL negotiation finished successfully
[Tue May 04 19:55:42 2010] [info] [client 127.0.0.1] SSL library error 1 reading data
[Tue May 04 19:55:42 2010] [info] SSL Library Error: 336130315 error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number
[Tue May 04 19:55:42 2010] [debug] ssl_engine_kernel.c(1770): OpenSSL: Write: SSL negotiation finished successfully
[Tue May 04 19:55:42 2010] [info] [client 127.0.0.1] Connection closed to child 63 with standard shutdown (server localhost:443)
>
What option is the correct? I need use the SSLSocketToServer or socketToServer to send/read the data to/from the server?. Use the SSLSocket has sense because the data travel in a secure socket, but use the Socket also has sense because the data are encrypted and they are protected by this encription. It's complicated...

Firefox keeps requesting logon credentials for the proxy server, though they are eneterd in the connection settings.

Every time you go to a new page, Firefox prompts for the proxy server login credentials, this has already been entered in the Network settings in Firefox.

Hi thefrostycat,
It could also be the proxy set up on the network. There is an app for proxy settings: [https://play.google.com/store/apps/details?id=com.lechucksoftware.proxy.proxysettings on the play store] as well as an add on [https://addons.mozilla.org/en-us/firefox/addon/proxy-selector/?src=search Proxy Selector]
Android troubleshooting for GSM device(I do not know if your nexus is, most likely it is not): Access Point Name (APN). Go to Settings > Wireless and Networks > More > Mobile Networks > Access Point Names > [Your data APN] (your device's menu may differ slightly). Check the Proxy field.

I need help, pop up about Certificate Problems and facebook wont work

i keep getting a pop up about Certificate Problems on every page, i just updated my soft ware and i cannot go on facebook.

Trouble Shooting and related keyboard commands:
Startup Manager: How to select a startup volume
Mac OS X: Starting up in Safe Mode
Resetting your Mac's PRAM and NVRAM
"To continue booting, type 'mac-boot' and press return" Message
Resetting Cuda/PMU on Power Mac G5, Power Mac G4, Power Macintosh G3
Resolve startup issues and perform disk maintenance with Disk Utility and fsck
Mac OS X 10.4, 10.5: Gray screen appears during startup
Mac OS X 10.4 Help: I see a blank blue screen when I try to start up my computer
Avoid unnecessarily resetting the SMC or PMU for troubleshooting purposes
Note: There is NO magic time required to clear the PMU. A firm, complete push is all that is required.
The PMU reset button is a momentary contact switch because the reset only requires momentary contact.
Another myth is that more than 2 chimes during a PRAM reset resets better.
A reset is a reset.
If you need more than is done in a PRAM reset after 2 chimes, use the NVRAM reset in Open Firmware.
Keyboard Shortcuts:
Mac OS X keyboard shortcuts
Keyboard shortcuts - Mac Guides
Keyboard shortcuts in OS X | creativebits
Mac OS X Keyboard Commands
what does "DOS" mean ?? " boot in to DOS ", as you used it ??
Disk Operating System
That would be "DOS like" as in like the screen that you use in booting a Windows machine.
It's the black with white text screen that you get when you boot to Open Firmware (CMD+OPT+O+F)
Booting Mac OS X

Access Enforcer(error in approving the request) and import roles

Dear all,
error in approving the request at security stage(last)
manager and role owner are successfully approved.
and also importing roles into access enforcer was not successful.
imortstatus : 0 roles imported of 28 records found.
please find the system log:
2008-09-05 13:01:34,625 [SAPEngine_Application_Thread[impl:3]_8] DEBUG com.virsa.ae.service.messaging.MessageFormatter : parseDesc :   : INTO the method : desc :Please specify a file to import.paramNames :paramsMap :{FIELD_NAME=#_!FIELD_NAME#_!}
2008-09-05 13:01:34,625 [SAPEngine_Application_Thread[impl:3]_8] DEBUG com.virsa.ae.service.cache.AECacheUtil : getResourceBundle :   : INTO the method : en
2008-09-05 13:01:34,625 [SAPEngine_Application_Thread[impl:3]_8] DEBUG com.virsa.ae.service.cache.AECacheUtil : getResourceBundle :   : INTO the method : en
2008-09-05 13:01:34,625 [SAPEngine_Application_Thread[impl:3]_8] DEBUG com.virsa.ae.service.cache.AECacheUtil : getResourceBundle :   : INTO the method : en
2008-09-05 13:01:34,625 [SAPEngine_Application_Thread[impl:3]_8] DEBUG com.virsa.ae.service.cache.AECacheUtil : getResourceBundle :   : INTO the method : en
2008-09-05 13:01:34,625 [SAPEngine_Application_Thread[impl:3]_8] DEBUG com.virsa.ae.service.cache.AECacheUtil : getResourceBundle :   : INTO the method : en
2008-09-05 13:02:28,234 [Thread-47] DEBUG

In Addition to my previous response:
I meant to include the following:
Some of the fields that need to be properly defined with attributes are:
       System: must have the know SAP system defined here
       Role Approver (i presently are using most of the roles without having need for approval; I created a user called NOAPPRV in AE)
       Functional Area: need to have all the areas defined that roles will be assigned to
       Company: I only have one company so that's an easy one
Some areas I presently do not use but found they must ne coded and coded properly:
       ResponsibilityID:   N/A (coded as is)
       CommentsMandatory: NO (coded as is)
       Parent Role Owner:   NO
       Business Process: NA (I believe I originally coded N/A and it did not like that)
       Sub Process: NA (again N/A I believe error on me)
       Reaffirm Period: presently I am using 0 (zero)
       LastReaffirm: presently using 12/31/9999
Hope this helps a bit
I wanted to include an attachment with a sample of my Role Import spreadsheet but I'm not sure exactly how to do that; if I figure that out or someone can provide me the process I will include it
Jerry Synoga
Ryerson Inc.
630-758-2021

Need Help on using Forge Config Manager and CAS. Questions listed in the content below

Hi All,
I have an existing Endeca pipeline implementation where we read the data sets (Product Catalog Information) from Oracle database using JDBC adapters. The data set undergoes a series of manipulation until it gets indexed to the Endeca system. We make use of PCI for dimensions and dimension values. However, we now want to extend PCI to also include the Product catalog information. The current implementation also does not make use of CAS adapters to consume the dimensions data in PCI. The next consideration is to implement PCI as close to Out of the Box provisions and standardize it. Therefore we are also considering to implement CAS.
The questions are as below:
1. What are the ideal parameters that should support the use of PCI implementation (Dataset + dimension + precedence Rules + schema information) ? Note: We DO NOT have any product catalog system (like ATG) between database and Endeca.
2. Considering that we do not have any product catalog system to organize and maintain data, how feasible is it to read directly from database through CAS Adapters and process the data ?
3. We also plan to introduce partial update pipeline in future releases. Keeping that in mind should CAS based approach help us to read from a record store at the time of partial updates ?
4.in case we are limiting to a business case of implementing partial updates in the above explained existing design, should a custom CAS approach be a better design ? Custom CAS approach = writing the baseline output data to record store and later referring it at the time of partial updates.
5. Will CAS based approach help to reduce the baseline timings ?
6. What is the best way to export data to record store instance in the above design ? (Record store API / Command line utility / CAS crawl)
Thanks,
Nitin

Hi Neeraj,
You cam use both PI SLD and Solman Local SLD for LMDB synchronization. Now here you make to make sure that correct ranks are assigned to PI and Solman SLD. With the help of multiple sld, you can remove the cause of concern. Local SLD should always be of solman.
For CR content. that you can do for solution manager system in a click.
Divyanshu

Need to be able to view lic to install for customer without each user having to download the cloud first.

We purchase a lic for a user. I've assigned the lic the user's name but we don't want to have to teach each user how to install and use the cloud just so we can install the software we purchased. Can I get a way to just get the s/n for my customer without them having to download and install the cloud app?

There is no such thing. Creative Cloud requires the app to be in place to provide the licensing. read the Enterprise Deployment guides for details on pre-configured installs.
Mylenium

In depth serious knowledge about Standby

HI, somebody has a reference about in depth knowledge about maintenance an Standby database?
I was deployed an Standby with 8.1.7.4.1 and Sap/R3 4.6c in a W2K AS SP3 environment, but have some problems with the RFS and Net services because some issues with the WAN. In heavy activity moments, the database come to be freeze and then go away alone few seconds after this.
I need more specific information about how control some delay between the transference of the Archived Log or some Tips in compress/uncompressed the Archived Logs on the fly.
Somebody can help me ?
Thanks a lot.
Ennio
[email protected]

check below links, it will surely help you a lot.
https://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/03fd85cc-0201-0010-8ca4-a32a119a582d
Re: Decentral Adapter Engine on the same XI Server

Needed info about io devices and cpu without using prtdiag

Hi
I need to collect info about io devices and cpu. but i cannot use prtdiag.
is there any way to collect this information on solaris machine....
may any available c APIs
Thanks in advance.
Nagesh

yep.... prtconf -vp | grep <wot u r looking 4>

Questions about Java Servlets and JSP

Hi,
I'm a confident Java Programmer (and really enjoy using this language) but am very new to Java servlets and Java Server Pages.
I have previously worked with Perl on my web projects (simple 'league' style voting pages). I read in my 'Core Java' book that I should no longer use perl or even cgi.
I need to know more about Java servlets and Java Server Pages so I can make the switch to a 'real' programming language.
I have a few questions:
How should I start to learn JS and JSP?
How applicable will the java knowlegdge I have already be?
Are JSP common on the world wide web?
What tools do I need to start? (I currently develop in JBuilder and have Java 1.4.1 Standard Edition)
Is it likey my web host (and others) will support JSP?
Thank-you very much for helping a novice get started,
Regards,
Paul

Hi, Steve ...has to be frustrating! But do not despair.
Let's suppose the servlet it's named MyServlet on package org.servlets
WEB-INF should look:
WEB-INF
classes
org
servlets
MyServlet.class
web.xml
web.xml file should have this two declarations:
<web-app>
<servlet>
    <servlet-name>MyServlet</servlet-name>
    <servlet-class>org.servlets.MyServlet</servlet-class>
</servlet>

<servlet-mapping>
    <servlet-name>MyServlet</servlet-name>
    <url-pattern>/MyServlet</url-pattern>
</servlet-mapping>

</web-app>Now, once the container starts (Tomcat?), you should be able to see that servlet in:
http://localhost:8080/[my-context/]MyServletAnd what my-context is? The web application context. This string should be empty if your're deploying to the root context, otherwise should the context name. In Tomcat, deploying to root context defaults to using webapps/ROOT.
Sorry for my English, but I felt the need to answer your request. I hope it helps despite my writing.

Enterprise portal access using reverse proxy using Apache and webdispatcher

Hi Guys,
As requirement, we need to give solution to customer about Reverse proxy scenario. I am new to this part.
What we have think of to use Apache and Web dispatcher.
I tried to search documents and found some sdn links also but still i am not comfortable to go about.
Need suggestion and document if anyone has used so far.reverse proxy.
As basis person, we need to do all ( Apache installation, Apache configuration, Web dispatcher installation and configuration, integration with EP.)
It will helpful to me if i can get Apache installation, Apache configuration part and integration with EP, or web dispatcher, configuration etc.
Thanks,
Deepak

We used Netscaler for Reverse Proxy implementation and can assure you that network team performed most of the set ups. This was on EP 7.01.
From BASIS stand point it would be primarily Web Dispatcher Configuration.
Also refer the links I specified in another thread. There are several scenarios discussed there -
Re: Post values for userid and passowrd fields in logon page
http://wiki.sdn.sap.com/wiki/display/BSP/Using+Proxies
~ Dhanz

Reverse proxy and iWS 6.1 SP2?

Hey all,
i have 2 questions.
Can i use reverse proxy (and pass proxy) with iWS 6.1 SP2?
How must i configure the webserver to use this?
I need the following thing:
Client called https://server111.de/XXXXTruePassApp/ ---> Proxy get Data from https://server222.de/XXXXTruePassAppProxy/
Under Apache looks like that with mod_proxy:
ProxyPass /eCaSSTruePassApp/ https://server222.de/XXXXTruePassAppProxy/
ProxyPassReverse /eCaSSTruePassApp/ https://server222.de/XXXXTruePassAppProxy/
Thanks for help.
Greets Chmeee-de

Chmeee-de, I really don't think you should be using Sun ONE Web Server 6.1SP2. That version has known security vulnerabilities. Please consider applying the latest service pack, 6.1SP7.
Have you downloaded the Reverse Proxy Plugin? Have you tried reading the Reverse Proxy Plugin release notes? The release notes for Reverse Proxy Plugin 6.1SP7 are at http://docs.sun.com/app/docs/doc/820-0262/6nc0vpnc2?a=view.
Once you have the plugin installed and have edited the magnus.conf configuration file according to the release notes, you can add the following line immediately below the <Object name="default"> line in the obj.conf configuration file:NameTrans fn="assign-name" from="/XXXXTruePassApp/*" name="XXXXTruePassApp"This line indicates that requests for /XXXXTruePassApp/* should be serviced by an object named XXXXTruePassApp.
You can then create an object named XXXXTruePassApp by adding the following to the bottom of the obj.conf configuration file:<Object name="XXXXTruePassApp">
Service fn="service-passthrough" servers="https://server222.de"
</Object>

Need in depth knowledge about Certficate request and install for Reverse proxy and CAS role

Similar Messages

Maybe you are looking for