11-16-2016 05:21 AM
Hello,
I don't know why but my previous post just got deleted...
I installed a fresh CentOS 7 server with Alfresco Community using this guide:
How to Install Alfresco Community Edition on RHEL/CentOS 7/6 and Debian 8
Everything seems to be working fine except the "Edit in Microsoft Office".
When I click that link, it opens Excel but the sheet is not being opened, just a blank page while Excel is still responsive.
Using Office 2013, tested on different PC's but all same results.
I did notice that http://mydomain.com:7070 is not reachable while I added the port forward in the router and also opened the port on the server firewall.
During the installation it did not ask for the Sharepoint port like the above instruction suggest:
Alfresco SharePoint Port Please choose a port number for the SharePoint protocol. Port: [7070]:
Any help would be appreciated.
Thanks!
11-17-2016 04:57 AM
In my experience the action Edit in MS Office needs an HTTPS connection with a full (not self-signed) certificate. You need to get a new SSL certificate for your Alfresco domain. Then you have 2 options:
I suggest you to use Apache/NGinx and proxy Alfresco through AJP protocol, port 8009. For Apache, it's just a matter of activating proxy_ajp module and create the rules:
ProxyPass / ajp://localhost:8009
ProxyPassReverse / ajp://localhost:8009
in the SSL Virtual Host. You'll get plenty of help regarding searching online.
Then, you use Alfresco through SSL, more robust, secure and Edit online will work as expected. Last but not least, you may get free and strong SSL certificates from letsencrypt.org
11-17-2016 05:21 AM
Thank you for your reply!
Sounds like a lot of work but will try it now
I'll follow the rest of that guide to install nginx.
You're talking about
For Apache, it's just a matter of activating proxy_ajp module and create the rules:ProxyPass / ajp://localhost:8009
ProxyPassReverse / ajp://localhost:8009
But that's only for Apache and not nginx?
11-17-2016 06:58 AM
Okay got the Let'sEncrypt cert running, but I'm getting an error that some images may not be secure (in browser) and when I want to login on the https side of Alfresco, I'm getting an error something went wrong and go back to dashboard.
We may have hit an error or something might have been removed or deleted, so check that the URL is correct.
Alternatively you might not have permission to view the page (it could be on a private site) or there could have been an internal error. Try checking with your Alfresco administrator.
If you're trying to get to your home page and it's no longer available you should change it by clicking your name on the Alfresco toolbar.
And when I click the "Back to dashboard" button, it returns me to the normal http login, where I can login without problems.
When I then add https manually (after being logged in via http) it seems to work, but when I want to Edit online, it still shows me that the file is from my.domain.com:8081 and it starts excel but doesn't open the document.
11-17-2016 07:12 AM
To help you please publish you nginx configuration file in the thread
11-17-2016 07:18 AM
Sure!
Got this from the same guide but then the part of installing nginx as proxy.
# For more information on configuration, see:
# * Official English Documentation: http://nginx.org/en/docs/
# * Official Russian Documentation: http://nginx.org/ru/docs/
user nginx;
worker_processes auto;
error_log /var/log/nginx/error.log;
pid /run/nginx.pid;
# Load dynamic modules. See /usr/share/nginx/README.dynamic.
include /usr/share/nginx/modules/*.conf;
events {
worker_connections 1024;
}
http {
log_format main '$remote_addr - $remote_user [$time_local] "$request" '
'$status $body_bytes_sent "$http_referer" '
'"$http_user_agent" "$http_x_forwarded_for"';
access_log /var/log/nginx/access.log main;
sendfile on;
tcp_nopush on;
tcp_nodelay on;
keepalive_timeout 65;
types_hash_max_size 2048;
include /etc/nginx/mime.types;
default_type application/octet-stream;
# Load modular configuration files from the /etc/nginx/conf.d directory.
# See http://nginx.org/en/docs/ngx_core_module.html#include
# for more information.
include /etc/nginx/conf.d/*.conf;
server {
listen 80 default_server;
listen [::]:80 default_server;
server_name _;
root /usr/share/nginx/html;
location / {
proxy_pass http://127.0.0.1:8081;
proxy_redirect off;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
}
# Load configuration files for the default server block.
include /etc/nginx/default.d/*.conf;
#location / {
#}
error_page 404 /404.html;
location = /40x.html {
}
error_page 500 502 503 504 /50x.html;
location = /50x.html {
}
}
# Settings for a TLS enabled server.
#
# server {
# listen 443 ssl http2 default_server;
# listen [::]:443 ssl http2 default_server;
# server_name _;
# root /usr/share/nginx/html;
#
# ssl_certificate "/etc/pki/nginx/server.crt";
# ssl_certificate_key "/etc/pki/nginx/private/server.key";
# ssl_session_cache sharedSL:1m;
# ssl_session_timeout 10m;
# ssl_ciphers HIGH:!aNULL:!MD5;
# ssl_prefer_server_ciphers on;
#
# # Load configuration files for the default server block.
# include /etc/nginx/default.d/*.conf;
#
# location / {
# }
#
# error_page 404 /404.html;
# location = /40x.html {
# }
#
# error_page 500 502 503 504 /50x.html;
# location = /50x.html {
# }
# }
server {
listen 443;
server_name _;
ssl_certificate /etc/nginx/ssl/alfresco.crt;
ssl_certificate_key /etc/nginx/ssl/alfresco.key;
ssl on;
ssl_session_cache builtin:1000 sharedSL:10m;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_ciphers HIGH:!aNULL:!eNULL:!EXPORT:!CAMELLIA:!DES:!MD5:!PSK:!RC4;
ssl_prefer_server_ciphers on;
access_log /var/log/nginx/ssl.access.log;
location / {
proxy_pass http://127.0.0.1:8081;
proxy_redirect off;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
}
## This is the last curly bracket before editing the file.
}
}
### EDIT:
Somehow Alfresco seems to keep trying to function on http or something..
So login is not working on https and when I go to https://my.domain.com/share it sends me to http://my.domain.com/share/page (so on the http side..) and also the Logout button only works when I navigate to Alfresco on the http side, not on https.
### EDIT2:
Uhmmm okay but when I browse the normal http side of Alfresco, Edit Online does work now...
And.... (on http) on the site dashboard it says error loading items (see attachment) but in Document Library the documents are available.
11-17-2016 05:09 PM
Hi Cris,
For the issue with http / https access to Alfresco, did you update your alfresco-global.properties file ? Especially the following properties with the correct value (for example my local dev configuration) :
# Alfresco Repo Webapp (alfresco.war) context, ports etc
alfresco.context=alfresco
alfresco.host=localhost
alfresco.port=8080
alfresco.protocol=http# Alfresco Share Webapp (share.war) context, ports etc
share.context=share
share.host=localhost
share.port=8080
share.protocol=http
Yann
11-17-2016 05:56 PM
You need to change a couple of things:
1- In your NGinx config file:
Replace the following in the port 80 section:
proxy_pass http://127.0.0.1:8081;
with
proxy_pass http://127.0.0.1:8080;
Replace the following in the port 443 section:
proxy_pass http://127.0.0.1:8081;
with
proxy_pass http://127.0.0.1:8080;
2- As Yann pointed, change the following entries in
alfresco-global.properties
alfresco.context=alfresco
alfresco.host= and enjoy !
11-18-2016 02:22 AM
Hello,
Thanks for your answer!
Why do I have to change the proxy ports to 8080?
I configured Alfresco to use 8081 (instead of the default 8080).
11-18-2016 02:26 AM
I now have this in the Alfresco config:
alfresco.context=alfresco
alfresco.host=my.domain.com
alfresco.port=443
alfresco.protocol=https
share.context=share
share.host=my.domain.com
share.port=443
share.protocol=https
opencmis.context.override=true
opencmis.context.value=
opencmis.servletpath.override=true
opencmis.servletpath.value=
opencmis.server.override=true
opencmis.server.value=https://my.domain.com
aos.baseUrlOverwrite=https://my.domain.com/alfresco/aos
Tags
Find what you came for
We want to make your experience in Hyland Connect as valuable as possible, so we put together some helpful links.