Tomcat Redirect breaks Alfresco Download in IE

[norgan]

Good day,
I have a Tomcat Redirect : "For all Port 80 Requests, go to Port 443". This breaks the download function in Alfresco, when the user uses IE to access the HTTP Site.
Example : Word (*.doc) can open or download in Firefox 3.0 allright.
When I open the same http site with the same user via IE 6 & 7 get an error message "Internet Explorer could not open the internet site"

This happens with standard http (redirected to https) and webdav. Direct pure HTTPS works fine

Any ideas ? (HTTP is not available for tests, but the SSL cert is stored as "trusted root authority" keystore)

Norgan

[norgan]

Hi there,
I found the reason, but not the fix :

I made following change to the system :
I inserted a "security-constraint" forward for url "*"  in the tomcat/conf/web.xml

/<security-constraint>
     <web-resource-collection>
        <web-resource-name>Protected Context</web-resource-name>
          <url-pattern>/*</url-pattern>
     </web-resource-collection>
  <!– auth-constraint goes here if you requre authentication –>
     <user-data-constraint>
        <transport-guarantee>CONFIDENTIAL</transport-guarantee>
     </user-data-constraint>
</security-constraint>/ ‍‍‍‍‍‍‍‍‍‍

reason : I wanted all http queries to be forwarded to https to force the usage of https
Effect : The IE 7.0, Word, Excel and probably others, could no longer download any Office files from alfresco. A download via Firefox 3.0 works fine.

The moment I removed that securityconstraint again, all was fine.

Question : Does anyone have a tipp, what went wrong and how to reach my goal anyway ? (No, I cant forbid the usage of IE )

server.xml :

    <Connector port="80" URIEncoding="UTF-8" maxHttpHeaderSize="8192"
               maxThreads="150" minSpareThreads="25" maxSpareThreads="75"
               enableLookups="false" redirectPort="443" acceptCount="100"
               connectionTimeout="20000" disableUploadTimeout="true" />
‍‍‍‍‍

[molkis]

Hi,

We have exactly the same problem as you describe.
Do you know of any solution or workaround for this yet?

Malin

[soldiertt]

Hi,

We were facing the same issue and we resolved it by configuring JBoss (Tomcat should not be different) adding following line :

<Valve className="org.apache.catalina.authenticator.FormAuthenticator" disableProxyCaching="false" />

in context.xml (server/alfresco/deploy/jboss-web.deployer) before </Context>

This website put me on the right way : http://confluence.atlassian.com/display/DOC/Adding+SSL+for+Secure+Logins+and+Page+Security

Downloading office documents is now working 😉

Pay attention to the fact that the Authenticator can be different the one we used, FormAuthenticator is specific to our external Authentication mechanism.