topic Re: VPN SSL can't link to Share in Alfresco Archive

VPN SSL can't link to Share

dranakan — Wed, 26 Oct 2011 09:20:53 GMT

Hello,We want to allow access to the user with a VPN SLL (SonicWall). The users connect on a secure site (need user/pass) and from this site they can open link to Alfresco.The link on the secure site to open Alfresco Share is like this :https://1.2.3.4/go/http://1.2.3.5:8080/share‍The link can acces

Re: VPN SSL can't link to Share

dranakan — Wed, 02 Nov 2011 07:33:49 GMT

The problem from alfresc-min.js at character 619 is :

Alfresco.doclib=Alfresco.doclib‍

The problem from share-min.js at character 605 is :

var a=Alfresco.util.encodeHTML‍

Re: VPN SSL can't link to Share

mikeh — Wed, 02 Nov 2011 08:33:45 GMT

You can't really diagnose the problem from minified JavaScript. Try again with Share in debug mode.

<alfresco-config>

   <!– ******** Standard Alfresco Developer Configuration ******** –>

   <config replace="true">
      <flags>
         <!–
            Developer debugging setting to turn on DEBUG mode for client scripts in the browser
         –>
         <client-debug>true</client-debug>

         <!–
            LOGGING can always be toggled at runtime when in DEBUG mode (Ctrl, Ctrl, Shift, Shift).
            This flag automatically activates logging on page load.
         –>
         <client-debug-autologging>false</client-debug-autologging>
      </flags>
   </config>

   <!– ******** Standard Alfresco Developer Configuration ******** –>

</alfresco-config>‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

However, that looks like a very strange URL, which I wouldn't expect us to be able to parse correctly. It might make more sense to add an Apache web server in front of Tomcat and trim the front off the URL to make it more standard.

Mike

Re: VPN SSL can't link to Share

dranakan — Mon, 07 Nov 2011 14:02:38 GMT

Thank you MikeH.

I have add your config in /opt/Alfresco/tomcat/shared/classes/alfresco/web-extension/share-config-custom.xml

<alfresco-config>
<config replace="true">
      <flags>
         <!–
            Developer debugging setting to turn on DEBUG mode for client scripts in the browser
         –>
         <client-debug>true</client-debug>

         <!–
            LOGGING can always be toggled at runtime when in DEBUG mode (Ctrl, Ctrl, Shift, Shift).
            This flag automatically activates logging on page load.
         –>
         <client-debug-autologging>false</client-debug-autologging>
      </flags>
   </config>
</alfresco-config>
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

I have restarted Alfresco and try to login. I have no message in catalina.out.

IE displays theses errors :

Détails de l’erreur de la page Web

Agent utilisateur : Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; OfficeLiveConnector.1.4; OfficeLivePatch.1.3)
Horodateur : Mon, 7 Nov 2011 14:04:09 UTC


Message : Expected ';'
Ligne : 2988
Caractère : 3
Code : 0
URI : https://1.2.3.4/go/http://1.2.3.5:8080/share/res/yui/dragdrop/dragdrop-debug.js


Message : Expected identifier, string or number
Ligne : 135
Caractère : 61
Code : 0
URI : https://1.2.3.4/go/http://1.2.3.5:8080/share/res/js/alfresco.js


Message : 'Alfresco.util.encodeHTML' is null or not an object
Ligne : 106
Caractère : 4
Code : 0
URI : https://1.2.3.4/go/http://1.2.3.5:8080/share/res/js/share.js


Message : 'Alfresco.service.Preferences' is null or not an object
Ligne : 95
Caractère : 7
Code : 0
URI : https://1.2.3.4/go/http://1.2.3.5:8080//share/page?pt=login

‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

Re: VPN SSL can't link to Share

dranakan — Wed, 18 Jan 2012 13:01:51 GMT

It might make more sense to add an Apache web server in front of Tomcat and trim the front off the URL to make it more standard.

We try this solution. We have set the Apache server (port 80) in front of tomcat (port 8080) on the same server.

A direct access (without vpn) show the alfresco share when we access with port 80. (It's impossible to log in alfresco share but the login page is displayed).
An access with vpn get the same bug (screen without login box).

Access with url : "https://1.2.3.4/go/http://ged:80/share"
Need to redirect to "http://ged:8080/share"

/etc/httpd/conf/httpd.conf


ProxyRequests Off
RewriteEngine On

RewriteRule ^/share/(.*) /$1 [PT]
ProxyPass / http://ged:8080/share/
ProxyPassReverse / http://ged:8080/share/‍‍‍‍‍‍‍

Using ProxyPassReverse is the good solution ?