Use require group in virtual host

Hi,
I have set up several virtual hosts in my middle tier, and configured them as partner applications so that OID/SSO can be used for authentication. It works fine, but the only supported method I can see is 'require valid-user' which allows any user in OID access to all virtual hosts. Does anyone know of a way around this using OID (not mod_auth). We want to allow users within a group access to individual virtual hosts.
Thanks,
Karen

Hi there,
I just wanted to clarify my question, has anyone been able to use group authentication using OID to restrict access to websites hosted using AS10g? My website is just plain html, but maybe someone has done something similar by adding a java wrapper to perform the authentication (that seems like overkill to me but maybe there is a more elegant workaround)?
Thanks,
Karen

Similar Messages

  • Using Sendmail from a Virtual Host

    I'm testing some Perl CGI scripts which use sendmail to send out emails. These scripts are used by different organisations and I've set up a virtual host for each organisation. I'm finding that the script communicates with sendmail OK but the messages are not getting through and I see from the error log at /var/mail/ that these are being rejected with part of the error message being:
    "Final-Recipient: rfc822; *****@mac.com
    Action: failed
    Status: 5.1.1
    Remote-MTA: dns; smtp-mx1.mac.com
    Diagnostic-Code: smtp; 550 5.1.1 unknown or illegal alias: *****@mac.com"
    --183FD34686D.1210867525/EricMac.local
    Content-Description: Undelivered Message
    Content-Type: message/rfc822"
    What do I need to do to correct this?
    <Edited by Moderator>

    You'll see from my other posting that my problems with sendmail have been solved. I seem to be doing the same as you - testing Perl scripts on the Mac before uploading to the live server. I'm doing this with scripts for different clients and I've set up virtual hosts for each on the Mac, and I'm using ActiveState's IDE, Komodo, to do the testing.
    When I had my initial problems with sendmail I was told that I had to configure it. However I'm not using the Apache that comes with my MacBook Pro. I downloaded MAMP PRO from http://www.mamp.info/en/mamp-pro/ which provides Apache, MySQL and PHP already configured for the Mac and also allows virtual hosts to be set up easily - there is also a free version MAMP that provides these three but not the frills.
    It seems that sendmail is already configured in MAMP, at least I haven't done any configuration, and this might be your answer if you're still having problems with sendmail

  • Using SSL with Apache Virtual Hosts

    I am configuring Apache to use 3 virtual Host(Named base virtual Host).
    I would like to run SSL on two of the 3 virtual host.
    Do I need to gen a certificate for each virtual host or can I just use 1?

    William,
    I thought I'd give my 2 cents on this...
    Is there any particular reason as to why you are using named based virtual hosts?
    Apache recommends using IP based virtual hosts over name based virtual hosts.
    Go to http://httpd.apache.org/docs/dns-caveats.html and read the discussion on IP based virtual hosts and name based virtual hosts. The document describes the drawbacks to using the name-based approach.
    Hope this helps!
    -Manjeet

  • Accessing portal server with virtual host via web dispatcher

    Hi,
    I have portal installed at http://hostname.com:50000. A web dispatcher is installed in front of it which uses port number 80 and redirects to http://hosname.com:50000.
    so when i say http://hostname, my web dispatcher redirects to http://hostname.com:50000/ from where i can access my portal.
    now I want to create an alias for my hostname, say when user types http://mydev, it should redirect to http://hostname.company.com thru webdispatcher.
    so i created virtual host for my portal server . how to use this in my virtual hosts in my webdispatcher.
    I have already gone throug this..
    http://help.sap.com/saphelp_erp2005/helpdata/en/fe/cda776f2f64d5287c614b2f715c25f/frameset.htm
    would be great if some one can help me in this regard.
    Thank you
    P.S: I dont want to create a DNS alias with name mydev, then i think virtual host concept doesnt make sense, atleast in java engines..which has different concept in SAP systems.

    HI Jacob,
      Thank you for the reply.. I am little bit confused.could you please clarify the followint to me.
    My requirement is when user types "http://epdev", it should redirect to http://hostname.company.com:50000
    1. To do that, according to what you said, I will create a DNS alias epdev to the IP address where my portal is hosted. so when the user types http://epdev, I have set up a parameter in web dispatcher profile to redirect to http://hostname.company.com:50000/.. so my requirement is fulfilled now..I hope this the correct proc for what I intended to achieve. am I right?
    2. As said above, I am using web dispatcher only for redirection to a fully qualified name, as portal requires as fully qualified domain name. Is there a possibility other than web dispatcher for redirection.
    3. if the above procedure works, I got a question like..what is the use of "virtual hosts".
    How is it different from creating for instance, creating as many DNS aliases to IP address.
    Although, it was explained at http://help.sap.com/saphelp_erp2005/helpdata/en/0b/fbf5a47928f84e8d0beba8371508e6/frameset.htm
    I didnt clearly understand it.
    I would really appreciate, if you could clarify these to me.
    Thank you

  • Recipient_delimiter w/ virtual hosting?

    All of my past OS X Server Mail installations have used local domains (not virtual hosting) until my most recent installation....
    I generally setup amavisd.conf to deliver spam to a user+spam@ address.
    Back to my most recent install. This is my first site running virtual hosting. The setup was done 'the Apple way' with the domains added in WorkGroup Manager (virtual hosts) and the full email address added to short names for each user.
    I then enabled recipient_delimiter = + in main.cf and restarted postfix.
    Mail addressed to [email protected] is rejected.
    At minimum, even if the spam mailbox didn't exist, the mail should be delivered to [email protected]
    I've set this up many times with local domains.
    What am I missing for virtual hosting???
    Jeff

    Jeff,
    you are absolutely right. My fault, should have made it clearer in the docs.
    Reject-before-scan will not work with WGM style virtual domains.
    - Reject-before-scan code. Does it require a postfix-style setup of virtual users?
    postfix-style (actually, you can do sort of a "hybrid" setup, but it is not "clean" and can get messy, so let's stick to postfix-style).
    Well, yes this topic is sort of drifting, but since its more of a private conversation between you and me.... no harm done. If we had done this via e-mail, no one else would have benefitted.
    So while we are at it:
    I'll edit my docs to make this clearer. The setting up virtual users tutorial was really meant for beginners who were afraid of terminal. Once somebody starts using postfix to it's full (or at least fuller) extent, the GUI has to go and anything but a basic config will cause problems when modified through the GUI (I know you know this, but I am writing it for the benefit of the unexperienced). Actually I am in the process of writing a documentation on what can be safely done with the GUI and what can't, but since time is precious I have no clue when I'll be done.
    Coming back to your original issue. You need an advanced postfix setup, but want the end-user to be able to administer it. The best way would most likely be to re-compile postfix to include MySQL support and then have the user use postfixadmin. This not for the faint hearted, but you should have no problem with this.
    Alternatively, if it is only one customer you need this for, you might as well configure everything to use postfix style virtual aliases and then write a shell script to help the end-user in adding aliases to /etc/postfix/virtual
    To add an alias, use something along the lines of:
    sudo echo [email protected] [email protected] >> /etc/postfix/virtual
    to delete:
    grep '[email protected]' /etc/postfix/virtual | sed "do your substitution here"
    Obviously you could also create a GUI for editing /etc/postfix/virtual. Should be very simple to do.
    Just a few thoughts. Pick the one you like best
    Alex

  • Virtual hosts in apache defaults to first host

    On my MacMini I have set up apache to use virtual hosts I and use a mounted USB drive to host the sites (in my case /Volumes/Work1/www as root). I have configured 3 sites and switch on the subdomain (in my case and in order in the virtual hosts file: hbc1.helsted.net, consulting.helsted.net, store.helsted.net).
    On the MacMini I have inserted the urls in the hosts file to point at localhost for two of the entries and all work beautifully on the MacMini for those two. Anywhere else (and from the MacMini on the one not in the hosts file) the system defaults to the first entry in the virtual hosts config file (as the documentation says it will if the url is not recognized) which is displayed in the browser and which has entries in the log file.
    After some time the server occasionally refuses to serve the pages and I get a 403 error (access denied). Again not on the MacMini with the hosts file entries. Looking at the error log from apache in that case it appear that it has got the full url served as it is in the log file.
    Restarting the web share removes the 403 error (until next time).
    Any hints on how to to resolve my two issues?

    Thanks for the reply, my vhosts config file contains the following (note that the viewer in the forum browser removes the initial #es on the comment lines):
    # Virtual Hosts
    # If you want to maintain multiple domains/hostnames on your
    # machine you can setup VirtualHost containers for them. Most configurations
    # use only name-based virtual hosts so the server doesn't need to worry about
    # IP addresses. This is indicated by the asterisks in the directives below.
    # Please see the documentation at
    # <URL:<a class="jive-link-external-small" href="http://">http://httpd.apache.org/docs/2.2/vhosts/>
    # for further details before you try to setup virtual hosts.
    # You may use the command line option '-S' to verify your virtual host
    # configuration.
    # Use name-based virtual hosting.
    NameVirtualHost *:80
    # VirtualHost example:
    # Almost any Apache directive may go into a VirtualHost container.
    # The first VirtualHost section is used for all requests that do not
    # match a ServerName or ServerAlias in any <VirtualHost> block.
    <VirtualHost *:80>
    ServerAdmin [email protected]
    DocumentRoot "/Volumes/Work1/www/hbc1"
    ServerName hbc1.helsted.net
    ErrorLog "/private/var/log/apache2/hbc1.helsted.net-error_log"
    CustomLog "/private/var/log/apache2/hbc1.helsted.net-access_log" common
    </VirtualHost>
    <VirtualHost *:80>
    ServerAdmin [email protected]
    DocumentRoot "/Volumes/Work1/www/consulting"
    ServerName consulting.helsted.net
    ErrorLog "/private/var/log/apache2/consulting.helsted.net-error_log"
    CustomLog "/private/var/log/apache2/consulting.helsted.net-access_log" common
    </VirtualHost>
    <VirtualHost *:80>
    ServerAdmin [email protected]
    DocumentRoot "/Volumes/Work1/www/store"
    ServerName store.helsted.net
    ErrorLog "/private/var/log/apache2/store.helsted.net-error_log"
    CustomLog "/private/var/log/apache2/store.helsted.net-access_log" common
    </VirtualHost>
    <Directory /Volumes/Work1/www>
    Options Indexes Includes FollowSymLinks SymLinksifOwnerMatch ExecCGI MultiViews
    AllowOverride All
    Order allow,deny
    Allow from all
    </Directory>
    Message was edited by: skhelsted

  • Enable group wiki/blog services on a specific virtual host

    In Workgroup Manager im used to enable the following services for this group on a specific virtual host, this option is now grey and not accessible. Neither is the options below for turning on/off wiki, blog and calendar.
    What happened here? Feels like 10.6 is more like 10.2.6 in functionality and manageability!

    I Have same problem. Im suspecting a ethernet bond related problem, as i had similar in 10.5 server. The ethernet bond takes one of the two MAC adressess from the fysical ethernet interfaces (eth1 or eth2). OS X server system somehow binds it services to them?

  • PHP "Virtual Host" Site error Using Dreamweaver

    I created a virtual host on my local machine. I am using Apache, php5, and mysql 5. I moved my "wordpress files and folders" into the root folder for my site. My htdocs looks like this;
    <VirtualHost *:80>
      ServerName localhost
      DocumentRoot "C:/Program Files/Apache Group/Apache/htdocs"
    </VirtualHost>
    <VirtualHost *:80>
      ServerName myvirtualrootfolder.com
      DocumentRoot "C:/Program Files/Apache Group/Apache/htdocs/myvirtualrootfolder"
      <Directory "C:/Program Files/Apache Group/Apache/htdocs/myvirtualrootfolder">
        Options FollowSymLinks Indexes
        Allow from all
        Order allow,deny
        AllowOverride All
      </Directory>
    </VirtualHost>
    I followed the dynamic dreamweaver setup. Next I see, "This page may have dynamically-related files that can only be discovered by the server. When I click "Discover", I'm told "my site definition isn't correct." Can anyone help me please?

    >Sorry. I just never get any help here
    Really? Doesn't look that way to me:
    http://forums.adobe.com/people/buffbill?view=overview
    Other than a post from last week, and those you just posted within the past few hours....it looks like you are getting replies.  I'm just sayin.

  • How to Install an APO Livecache on Windows Using Virtual Host Names

    Hi,
    How to Install Live Cache on windows using Virtual Host names?
    we are using SCM 4.0 with  live cache build 7.4.3 on two differnt servers.
    I have checked the Live cache CD (7.4.3) is with setup.cmd, where as it need use command sapinst.exe SAPINST_USE_HOSTNAME=Virtual hostname.
    Please advise.
    Thanks
    Anil

    a possible workaround (that I have no tested) is to temporarily name your server with the same of the virtual name, install. when completed, rename server to original name.
    This is not a proven method, but it might work.

  • Relationship btwn Virtual Host Services for Groups AND WorkGroup manager??

    Can someone please explain the relationship between Virtual Host Services (as specified in the Sites section of Server Admin) AND "Enable the following services for this group on ... and the options"?
    And where does one go to "create wikis on this site" when one is give the authority to do it in Server Admin > Sites > Services for Groups (Allow the following to create wikis on this site)?*
    Finally, why do all my groups seem to show up on all my virtual hosts, even though they are only enabled on a particular site?
    Thanks in advance for any assistance. Hopefully any answers will help others with their efforts to understand this set-up.
    Cheers,
    Ashley.
    * I'm assuming they mean actually create new wikis rather than just add pages to the current one.

    Thanks Angus, I see that error too.
    I understand that Virtual Sites are web-related Apache settings. So, I guess the "Services for Groups" functionality there-in (Sites > Web Services) is just to indicate that this virtual site can have wikis, calendars, blogs etc.
    I also understand what a Group is but I am confused as to how they relate to wikis (especially when the config item (Sites > Web Services again) says "allow the following to create wikis (plural) on this site" - my emphasis).
    Is it saying that from all the users/groups only the following users/groups can turn on a wiki which will run on this virtual site? For me it sounded like a user/grous could create multiple wikis. So I would like to know if wikis are one-to-one with users/groups?
    Cheers,
    Ashley.

  • Installation using a virtual host created .dbenv with wrong hostname

    Discovered that during the installation of a Solution Manager on Solaris that the .dbenv_<hostname>.sh and .dbenv_<hostname>.csh and were created with <hostname> = Virtual name. However the .profile uses the 'hostname' to determine which .dbenv to use. Since 'hostname' returns the actual server name and not the virtual name the db environment is not set.
    This is easily resolved by renaming the .dbenv to the actual host name. My concern and question is whether this will cause me issues down the road and also I cannot seem to find anyone else or SAP note that reflects this issue.
    Please advise...Thanks...
    David

    Hello David
    We always install using virtual hostnames here, using seperated ip addresses (physical host X with IP Y and virtual host S with IP T) using sapinst option SAPINST_USE_HOSTNAME=<shortname virtual hostname> and we have those profiles with the virtual hostname after installation.
    Kind regards
    Tom

  • Using different DocumentRoot directive within virtual hosts

    We have installed Oracle iAS 9i with default settings and created two VirtualHosts in Apache httpd.conf file with two different document root directories.
    We figured out that static http content served by Apache itself appears correctly, but JSP requests go to the wrong document root.
    For example after you restart Apache server the request for the first virtual host goes correctly, but the request for the second one does not; it uses previous document root.
    We really need information if there is a solution somewhere or it's a bug.

    Let me try again the program eat some of the content:
    nameVirtualHost 10.1.1.1
    # Remove the \ on the next line
    \<VirtualHost 10.1.1.1\>
    ServerName devserver
    DocumentRoot "c:\Dev"
    # Remove the \ on the next line
    \</VirtualHost\>
    # Remove the \ on the next line
    \<VirtualHost 10.1.1.1\>
    ServerName testserver
    DocumentRoot "c:\Test"
    # Remove the \ on the next line
    \</VirtualHost\>
    null

  • CT5760 - virtual-host in parameter-map not used in webauth redirect

    Hi all.
    I'll try posting my issue here before I post a TAC on this:
    Cisco CT5760 wireless controller running IOS-XE version 3.6.0.
    This issue is related to web authentication on an SSID with external web portal. It seems that the statement "virtual-host" in "parameter-map type webauth global" is not used as intended. I'll try to explain:
    When a user connects to an SSID with external web authentication enabled and the user opens a web browser, the user will get redirected to the external web portal for authentication. In this redirect URL we see the parameter "switch_url=http://1.2.3.4/login.html". The IP address 1.2.3.4 is, in this example, our virtual IP. But we have also configured "virtual-host" to be webauth.example.com. And in my opinion the "switch_url" parameter should be "switch_url=http://webauth.example.com/login.html". This is how it works on our old Cisco WiSM1 implementation.
    The reason why this is a problem is that the clients web browser will not accept the certificate installed on "http://1.2.3.4" because it is not issued with that IP address, only the hostname webauth.example.com. I know that it is possible to get certificates issued with an IP address (as long as it's not an RFC1918 IP address), but rumors say that many Certificate Authorities will stop issuing these soon, even with "real IPs". Therefore it is important that the redirect URL gets corrected.
    Does anyone disagree with me that this is a bug?

    Hi and thank you for your response.
    I feel that I need to clarify a few things. Here is my parameter-map config (a bit edited):
    parameter-map type webauth global
    virtual-ip ipv4 1.1.1.1 virtual-host webauth.example.com
    intercept-https-enable
    parameter-map type webauth webauth_external
    type webauth
    redirect for-login https://webauth-external.example.com/v2/login.html
    redirect portal ipv4 x.x.x.x
    So the problem here is that a web browser of the client gets the following redirect URL:
    https://webauth-external.example.com/v2/login.html?switch_url=https://1.1.1.1/login.html&redirect=http://www.cnn.com
    Then after a successful login on the external portal, the user gets redirected back to https://1.1.1.1/login.html. Here is the core of my problem. I think that the parameter "switch_url" should be with the name webauth.example.com since I configured it as the "virtual-host". This is the behavior we see with our old Cisco WiSM1.
    When the redirect goes to https://1.1.1.1/login.html the client complains about the certificate, because it is not issued to that IP address but to the hostname.
    I can verify that the client does not complain about this if I manually edit the redirect URL on the client to the following:
    https://webauth-external.example.com/v2/login.html?switch_url=https://webauth.example.com/login.html&redirect=http://www.cnn.com
    Then the redirect after authentication goes to https://webauth.example.com/login.html and the client accepts the certificate and everything is peachy.
    Do you see my problem? And yes, the virtual IP resolves to the name in DNS.

  • Installing phpMyAdmin using a virtual host

    The situation:
    Apache services are running (Windows XP SP2).
    Virtual host has been successfully created and works both
    with Dreamweaver php pages and pages entered directly in the
    browser address bar (e.g.
    http://mysite/folder/foo.php.
    Server root is d:\htdocs.
    Sites stored in this server root: d:\htdocs\mysite.
    phpMyAdmin folder stored in the server root
    d:\htdocs\phpMyAdmin.
    My problem:
    I have successfully installed MySql and try to configure
    phpMyAdmin according to the reccomendations in David Powers
    book "PHP solutions". When I start to load the setup php
    using the address:
    http://phpmyadmin/scripts/setup.php
    I am
    automatically connected to the internet and this page is
    loaded
    http://www.phpmyadmin.net/home_page/index.php
    I have then manually modified the config.inc.php and stored
    in the phpMyAdmin root. If I try to launch phpMyAdmin by
    entering
    http://phpmyadmin/ the same page is
    loaded from the
    internet but not phpMyAdmin.
    What have I missed and how can I get phpMyAdmin to work
    properly?
    Paul

    David Powers schrieb:
    > Have you added phpmyadmin 127.0.0.1 to your hosts file?
    Oh no, I should known better ;-) Didn't think of that.
    > Have you set up the virtual host definition for
    phpmyadmin in httpd.conf?
    No, but have done it now. Now I can load phpMyAdmin into my
    browser but I am getting the error "Cannot load mysqli
    although this extension is in my php5/ext folder and it is
    added to config.inc.php
    $cfg['Servers'][$i]['extension'] = 'mysqli'; // The
    php MySQL extension to use ('mysql' or 'mysqli')
    > Quite honestly, though, I don't see any value in
    creating a virtual host
    > for phpmyadmin in your testing environment. The value of
    virtual hosts
    > is mainly to enable the use of site-root-relative links.
    You don't need
    > that for phpmyadmin.
    Ok. So having installed the virtual host for phpMyAdmin just
    lets me test if its running on my PC? Withougt a virtual
    host how can I see if phpMyAdmin works?
    Thanks for your help.
    Paul

  • Problem getting db connection when using virtual hosts / tomcat / apache

    Hello,
    I have servlets that use a connection pool to query an oracle database. When running Tomcat 5.5 stand-alone, everything works fine. But the same servlets do not work when running them on a server tomcat and apache integrated with jk and using virtual hosts. The problem is the connection pool, because servlets not using the pool also work fine.
    Does anybody have any idea why this is happening?
    Thank you.
    Logan

    Hi Saish,
    Thank you for helping.
    Try connecting with the machinen's IP, if this is a viable strategy for you (meaning the database IP is not dynamically assigned).I'm not sure how to do this. Here is a copy of my context.xml:
    <Context path="" docBase="" debug="0">
    <Resource name="jdbc/CraigsList" auth="Container"
    type="javax.sql.DataSource" username="craigslist" password="xxxxxx"
    driverClassName="oracle.jdbc.driver.OracleDriver"
    url="jdbc:oracle:thin:@localhost:1521:GRI"
    maxActive="8" maxIdle="4"/>
    </Context>
    Does this help?
    Thanks.

Maybe you are looking for