Hyland Connect

borisstankov · ‎06-15-2015

Hello guys,

I was wondering if there is a way where I can configure the alfresco tomcat to listen for an IP/FQDN and redirect to the full URL of the alfresco. Also I want to avoid any additional SW installed on the system, for example some apache installed in front and redirects to the alfresco tomcat.

For example:
I put in my browser: myalfresco.domain.net
The Alfresco tomcat redirects me to: https://myalfresco.domain.net:8443/share/page

I'm able to configure the with a webapp ROOT by doing the following:
1. I create a new folder "ROOT" under: /opt/alfresco-5.0.c/tomcat/webapps/
2. I create a index.html file with the following code in it:


<!DOCTYPE html>
<html>
  <head>
    <meta http-equiv="refresh" content="0;URL=https://myalfresco.domain.net:8443/share/page/">
  </head>
  <body>
  </body>
</html>
‍‍‍‍‍‍‍‍‍‍

3. Now when I put in the browser: myalfresco.domain.net:8080 the alfresco tomcat redirects me to https://myalfresco.domain.net:8443/share/page/, but I want to avaoid putting in the browser any port numbers, just an FQDN (as I explained above).

Any ideas?

Regards!

eswbitto · ‎06-15-2015

Try this in your index.html


<html>
  <head>
    <title>your title</title>
    <script type="text/javascript">
      window.location = 'https://fqdn/share/';
    </script>
  </head>
  <body>
    <span>Some verbiage to users.</span>
  </body>
</html>
‍‍‍‍‍‍‍‍‍‍‍‍‍

borisstankov · ‎06-16-2015

Hi ESWBitto,

Unfortunatelly, I got the same result as with my code. I do not get redirected if I use only the IP address. When I put the port number, then I get redirected.

eswbitto · ‎06-16-2015

Try this in your tomcat/shared/classes/alfresco/web-extension folder.

share-config-custom.xml


<alfresco-config>

   <!– Example config to turn off the CSRF filter
   <config evaluator="string-compare" condition="CSRFPolicy" replace="true">
      <filter/>
   </config>–>
   
   <!– Configuration for Apache reverse proxy on localhost:8089 –>
   <config evaluator="string-compare" condition="CSRFPolicy" replace="true">

      <!–
         Will be used and exposed to the client side code in Alfresco.contants.CSRF_POLICY.
         Use the Alfresco.util.CSRFPolicy.getHeader() or Alfresco.util.CSRFPolicy.getParameter() with Alfresco.util.CSRFPolicy.getToken()
         to set the token in custom 3rd party code.
       –>
      <client>
         <cookie>Alfresco-CSRFToken</cookie>
         <header>Alfresco-CSRFToken</header>
         <parameter>Alfresco-CSRFToken</parameter>
      </client>

      <!– The first rule with a matching request will get its action invoked, the remaining rules will be ignored. –>
      <filter>
         <!–
            Certain Surf POST requests form the WebScript console must be allowed to pass without a token since
            the Surf WebScript console code can't be dependent on a Share specific filter.
         –>
         <rule>
            <request>
               <method>POST</method>
               <path>^\/page\/caches\/dependency\/clear|^\/page\/index|^\/page\/surfBugStatus|^\/page\/modules\/deploy|^\/page\/modules\/module|^\/page\/api\/javascript\/debugger</path>
            </request>
            <action name="assertReferer">
               <param name="always">false</param>
               <param name="referer">https://FQDN/.*</param>
            </action>
            <action name="assertOrigin">
               <param name="always">false</param>
               <param name="origin">https://FQDN</param>
            </action>
         </rule>

         <!– Certain Share POST requests does NOT require a token –>
         <rule>
            <request>
               <method>POST</method>
               <path>^/page/dologin.*|^\/page/site\/[^\/]+\/start-workflow|^\/page/start-workflow</path>
            </request>
            <action name="assertReferer">
               <param name="always">false</param>
               <param name="referer">https://FQDN/.*</param>
            </action>
            <action name="assertOrigin">
               <param name="always">false</param>
               <param name="origin">https://FQDN</param>
            </action>
         </rule>

         <!– Clear the token when logging out –>
         <rule>
            <request>
               <method>GET</method>
               <path>^/page/dologout.*</path>
            </request>
            <action name="clearToken">
               <param name="session">Alfresco-CSRFToken</param>
               <param name="cookie">Alfresco-CSRFToken</param>
            </action>
         </rule>

         <!– Make sure the first token is generated –>
         <rule>
            <request>
               <session>
                  <attribute name="_alf_USER_ID">.*</attribute>
                  <attribute name="Alfresco-CSRFToken"/>
                  <!– empty attribute element indicates null –>
               </session>
            </request>
            <action name="generateToken">
               <param name="session">Alfresco-CSRFToken</param>
               <param name="cookie">Alfresco-CSRFToken</param>
            </action>
         </rule>

         <!– Refresh token on new "page" visit when a user is logged in –>
         <rule>
            <request>
               <method>GET</method>
               <path>^/page/.*</path>
               <session>
                  <attribute name="_alf_USER_ID">.*</attribute>
                  <attribute name="Alfresco-CSRFToken">.*</attribute>
               </session>
            </request>
            <action name="generateToken">
               <param name="session">Alfresco-CSRFToken</param>
               <param name="cookie">Alfresco-CSRFToken</param>
            </action>
         </rule>

         <!– Verify multipart requests contains the token as a parameter and also correct referer & origin header if available –>
         <rule>
            <request>
               <method>POST</method>
               <header name="Content-Type">^multipart/.*</header>
               <session>
                  <attribute name="_alf_USER_ID">.*</attribute>
               </session>
            </request>
            <action name="assertToken">
               <param name="session">Alfresco-CSRFToken</param>
               <param name="parameter">Alfresco-CSRFToken</param>
            </action>
            <action name="assertReferer">
               <param name="always">false</param>
               <param name="referer">https://FQDN/.*</param>
            </action>
            <action name="assertOrigin">
               <param name="always">false</param>
               <param name="origin">https://FQDN</param>
            </action>
         </rule>

         <!–
            Verify there is a token in the header for remaining state changing requests and also correct
            referer & origin headers if available. We "catch" all content types since just setting it to
            "application/json.*" since a webscript that doesn't require a json request body otherwise would be
            successfully executed using i.e. "text/plain".
         –>
         <rule>
            <request>
               <method>POST|PUT|DELETE</method>
               <session>
                  <attribute name="_alf_USER_ID">.*</attribute>
               </session>
            </request>
            <action name="assertToken">
               <param name="session">Alfresco-CSRFToken</param>
               <param name="header">Alfresco-CSRFToken</param>
            </action>
            <action name="assertReferer">
               <param name="always">false</param>
               <param name="referer">https://FQDN/.*</param>
            </action>
            <action name="assertOrigin">
               <param name="always">false</param>
               <param name="origin">https://FQDN</param>
            </action>

         </rule>
      </filter>
   </config>
   
</alfresco-config>
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

Do a find and look up "FQDN" and replace it with yours.

borisstankov · ‎06-19-2015

Sorry,
I got other tasks to do.

Here what I did:
I moved the ROOT webapp and put this code in the share-config-custom.xml, but nothing happens now. When I put the IP address in the browser I got the apache error. If I put the port 8080 after the IP address, I got a blank page - just white screen.
If I bring back the ROOT app, I got the same results as before.

Regards.

eswbitto · ‎06-19-2015

Did you replace the "fqdn" with your dns name?

borisstankov · ‎06-22-2015

Sorry, I forgot to mentioned that, but yes, I did replace them.
Have you tested this code on your installation? May be I miss something elsewhere….

Hyland Connect

Shorter URL in the browser