If you want your clients to access OWA through HTTPS you need to add the directives you mention below to you SSL-enabled virtual host (probably to what you refer as ssl.conf). You should have a section starting with <VirtualHost *:443> or similar somewhere in your configuration. That section contains "SSLEngine On". That's where you need to add your Proxy Pass directives as well as "SSLProxyEngine ON". You do not need ProxyVia. -ascs ________________________________ From: Dimitri Yioulos [mailto:dyioulos@xxxxxxxxxxxxx] Sent: Wednesday, March 08, 2006 3:27 PM To: users@xxxxxxxxxxxxxxxx Subject: Re: [users@httpd] Reverse proxy help My apache installation is RPM-based, so recompiling is not an option. That being said, I do have ssl support enabled (mod_ssl is installed). Regarding the SSLProxyEngine problem I had, at first I tried adding that directive to ssl.conf - apache didn't like that. So, I added it to httpd.conf - apache was happy, both errors gone. So now, I get to the webmail login page(OK, it's actually OpenWebmail), but not in ssl mode. In other words, instead of seeing https://www.mywebserver.com/dir/dir/openwebmail.pl, I see http://www.mywebserver.com/dir/dir/openwebmail.pl. That's progress, but not what I'm after. Further, if I try to log in I get an error that the path to OpenWebmail isn't found, even though it appears that I've larady reverse proxied that path. Here's what I have now: ProxyRequests off ProxyVia on SSLProxyEngine on ProxyPass /openwebmail/ https://mail.mydomain.com/cgi-bin/openwebmail/openwebmail.pl ProxyPass /data/ https://mail.mydomain.com/data/openwebmail/ ProxyPassReverse /openwebmail/ https://mail.mydomain.com/cgi-bin/openwebmail/openwebmail.pl ProxyPassReverse /data/ https://mail.mydomain.com/data/openwebmail/ Line spaces are just for clarity. The first few directives are just things I'm trying - I'm not sure what affect they have. The directives dealing with /data/ have to do with images and other OpenWebmail pieces. But, it seems that the only way I can get the main graphic on the log in page, though, it to specify it with the ProxyPass and ProxyPassReverse directives. Sorry if I seem all over the place with this. I could stick with redirection, but sense that for my purposes, this is a better way to achieve what I want - if I could only get it to work. Dimitri -- This message has been scanned for viruses and dangerous content by MailScanner <http://www.mailscanner.info/> , and is believed to be clean. --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
|