Re: HTTPS for login

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Don Russell schrieb:
> IT-Support@AStA TU Darmstadt wrote:
>> Hello squirrelmail-community,
>>
>> I've installed & configured squirrelmail on debian linux (etch/testing)
>> with apache2 and so far it works fine! :-)
>> What I want to do now, is to secure the login process.
>> The manual tells about the "RedirectPermanent" option that I already use
>> for mailman and I would prefer this option.
>> The problem is, that configuring apache with "RedirectPermant" for
>> squirrelmail-login obviously cause a loop and the browser hangs. Why?
>> With mailman it works fine?
>> I'd like to avoid using mod_rewrite.
>>
>> Any ideas?
> 
> If you have control over the apache config... I found this to be very
> effective:
> 
> I added the following to the squirelmail.conf file and restarted apache
> (On my system that's in /etc/httpd.conf.d directory)
> 
> <Location ~ /webmail>
> RewriteEngine   on
> RewriteCond     %{HTTPS} !=on
> RewriteRule     .* https://%{SERVER_NAME}/webmail/ [R,L]
> </Location>
> 
> 
> This means that if you connect to squirrelmail as "http:// ...." it
> automatically "switches over" as if you had used https...
> 
> I find this is very simple, effective and easily understood. :-)
> 
> I like it because I would enter the domain/path without a scheme (http
> vs https), see a non-secure page, then re-enter the url WITH a scheme...
> now can can still use my bad habits (omitting scheme) and my server
> "does the right thing". :-)
> 
> I also like it because it is a "general solution", easily used for other
> directories.... and I feel it's better to have this sort of thing at
> "the server level" than at the "application level".
> 
> Don Russell

Hello guys,

thanks a lot for your responses and sorry for my late feedback!

I decided to use mod_rewrite an it works fine!

Thanks again!

Best wishes,
Ivan



-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
--
squirrelmail-users mailing list
Posting Guidelines: http://www.squirrelmail.org/wiki/MailingListPostingGuidelines
List Address: squirrelmail-users@xxxxxxxxxxxxxxxxxxxxx
List Archives: http://news.gmane.org/thread.php?group=gmane.mail.squirrelmail.user
List Archives:  http://sourceforge.net/mailarchive/forum.php?forum_id=2995
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-users

[Index of Archives]     [Video For Linux]     [Yosemite News]     [Yosemite Photos]     [gtk]     [KDE]     [Cyrus SASL]     [Gimp on Windows]     [Steve's Art]     [Webcams]

  Powered by Linux