Force SSL on GroupWise 8 WebAccess and Calendar Publishing

0 Likes
over 12 years ago

Background



Some organisations require webservices such as GroupWise WebAccess to run over an SSL based connection. This requires the default installation to simply reject any requests that are not SSL based or redirect them to an SSL based connection.



This TIP is based on GroupWise 8 running on OES2SP1 - Linux. It may work for other configurations, but I will leave that up to you.



Reference



This information is based on Disabling HTTP but Keeping HTTPS for WebAccess.



So after reading that idea and digging around the /etc/opt/novell/httpd directory as well as bit of other reading on this it looks like this is now quite simple, so here are a few options.



This assumes that you are using novell-tomcat5 and apache2.



Option 1 - Disable the service on port 80




cd /etc/opt/novell/httpd/conf.d/
rm gw.conf
rm gwcal.conf
rcapache2 restart



This removes the symbolic links of gw.conf and gwcal.conf from the directory. These were pointing to /etc/opt/novell/groupwise/calhost/gwcal.conf and /etc/opt/novell/groupwise/webaccess/gw.conf.



There should be symlinks to the same files in /etc/opt/novell/httpd/sslconf.d which enabled SSL based access by default.



Option 2 - Redirect requests to port 443



GroupWise WebAccess


In /etc/opt/novell/groupwise/webaccess/gw.conf add the module rewrite code below after



Alias /gw "/opt/novell/groupwise/webaccess/gw/"



<IfModule !mod_rewrite.c>
LoadModule rewrite_module /usr/lib/apache2/mod_rewrite.so
</IfModule>
<IfModule mod_rewrite.c>
RewriteEngine on
Rewritecond %{SERVER_PORT} ^80$
RewriteRule ^/gw/(.*) https://%{HTTP_HOST}/gw/$1 [NC,R,L]
</IfModule>



GroupWise Calendar Publishing


In /etc/opt/novell/groupwise/webaccess/gwcal.conf add the module rewrite code below after



Alias /gwcal "/opt/novell/groupwise/calhost/gwcal"



<IfModule !mod_rewrite.c>
LoadModule rewrite_module /usr/lib/apache2/mod_rewrite.so
</IfModule>
<IfModule mod_rewrite.c>
RewriteEngine on
Rewritecond %{SERVER_PORT} ^80$
RewriteRule ^/gwcal/(.*) https://%{HTTP_HOST}/gwcal/$1 [NC,R,L]
</IfModule>



Additional



You can also force the welcome page to redirect to GroupWise WebAccess instead of the default. Simply modify the exiting /etc/opt/novell/httpd/conf.d/welcome-apache.conf.



We are using this along with Option 2 above, so I expect that it would need to be reworked if used with Option 1.




<Directory /srv/www/htdocs>
ErrorDocument 403 /gw/
# ErrorDocument 403 /welcome/redirect.html
<Directory>



Good Luck

Tags:

Labels:

How To-Best Practice
Comment List
Anonymous
Related Discussions
Recommended