VPN SSL can't link to Share

[dranakan]

Hello,

We want to allow access to the user with a VPN SLL (SonicWall). The users connect on a secure site (need user/pass) and from this site they can open link to Alfresco.
The link on the secure site to open Alfresco Share is like this :

https://1.2.3.4/go/http://1.2.3.5:8080/share‍

The link can access to Alfresco Share but the page shows only grey (the login block is not visible). The browser errors :

Agent utilisateur : Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; OfficeLiveConnector.1.4; OfficeLivePatch.1.3)
Horodateur : Wed, 26 Oct 2011 09:09:22 UTC


Message : Expected identifier, string or number
Ligne : 1
Caractère : 619
Code : 0
URI : https://1.2.3.4/go/http://1.2.3.5:8080/share/res/js/alfresco-min.js


Message : 'Alfresco.util.encodeHTML' is null or not an object
Ligne : 1
Caractère : 605
Code : 0
URI : https://1.2.3.4/go/http://1.2.3.5:8080/share/res/js/share-min.js


Message : 'Alfresco.service.Preferences' is null or not an object
Ligne : 75
Caractère : 7
Code : 0
URI : https://1.2.3.4/go/http://1.2.3.5:8080/share/page/site-index

The access to the old interface (…/alfresco) is working great. What do I change in share ?

(Alfresco 3.4D /Mysql, RHEL 5.6, SSO Active)

JIRA: https://issues.alfresco.com/jira/browse/ALF-11073
https://forums.alfresco.com/fr/viewtopic.php?f=8&t=5257

Thank you.

[dranakan]

The problem from alfresc-min.js at character 619 is :

Alfresco.doclib=Alfresco.doclib‍

The problem from share-min.js at character 605 is :

var a=Alfresco.util.encodeHTML‍

[mikeh]

You can't really diagnose the problem from minified JavaScript. Try again with Share in debug mode.

<alfresco-config>

   <!– ******** Standard Alfresco Developer Configuration ******** –>

   <config replace="true">
      <flags>
         <!–
            Developer debugging setting to turn on DEBUG mode for client scripts in the browser
         –>
         <client-debug>true</client-debug>

         <!–
            LOGGING can always be toggled at runtime when in DEBUG mode (Ctrl, Ctrl, Shift, Shift).
            This flag automatically activates logging on page load.
         –>
         <client-debug-autologging>false</client-debug-autologging>
      </flags>
   </config>

   <!– ******** Standard Alfresco Developer Configuration ******** –>

</alfresco-config>‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

However, that looks like a very strange URL, which I wouldn't expect us to be able to parse correctly. It might make more sense to add an Apache web server in front of Tomcat and trim the front off the URL to make it more standard.

Mike

[dranakan]

Thank you MikeH.

I have add your config in /opt/Alfresco/tomcat/shared/classes/alfresco/web-extension/share-config-custom.xml

<alfresco-config>
<config replace="true">
      <flags>
         <!–
            Developer debugging setting to turn on DEBUG mode for client scripts in the browser
         –>
         <client-debug>true</client-debug>

         <!–
            LOGGING can always be toggled at runtime when in DEBUG mode (Ctrl, Ctrl, Shift, Shift).
            This flag automatically activates logging on page load.
         –>
         <client-debug-autologging>false</client-debug-autologging>
      </flags>
   </config>
</alfresco-config>
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

I have restarted Alfresco and try to login. I have no message in catalina.out.

IE displays theses errors :

Détails de l’erreur de la page Web

Agent utilisateur : Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; OfficeLiveConnector.1.4; OfficeLivePatch.1.3)
Horodateur : Mon, 7 Nov 2011 14:04:09 UTC


Message : Expected ';'
Ligne : 2988
Caractère : 3
Code : 0
URI : https://1.2.3.4/go/http://1.2.3.5:8080/share/res/yui/dragdrop/dragdrop-debug.js


Message : Expected identifier, string or number
Ligne : 135
Caractère : 61
Code : 0
URI : https://1.2.3.4/go/http://1.2.3.5:8080/share/res/js/alfresco.js


Message : 'Alfresco.util.encodeHTML' is null or not an object
Ligne : 106
Caractère : 4
Code : 0
URI : https://1.2.3.4/go/http://1.2.3.5:8080/share/res/js/share.js


Message : 'Alfresco.service.Preferences' is null or not an object
Ligne : 95
Caractère : 7
Code : 0
URI : https://1.2.3.4/go/http://1.2.3.5:8080//share/page?pt=login

‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

[dranakan]

It might make more sense to add an Apache web server in front of Tomcat and trim the front off the URL to make it more standard.

We try this solution. We have set the Apache server (port 80) in front of tomcat (port 8080) on the same server.

A direct access (without vpn) show the alfresco share when we access with port 80. (It's impossible to log in alfresco share but the login page is displayed).
An access with vpn get the same bug (screen without login box).

Access with url : "https://1.2.3.4/go/http://ged:80/share"
Need to redirect to "http://ged:8080/share"

/etc/httpd/conf/httpd.conf

ProxyRequests Off
RewriteEngine On

RewriteRule ^/share/(.*) /$1 [PT]
ProxyPass / http://ged:8080/share/
ProxyPassReverse / http://ged:8080/share/‍‍‍‍‍‍‍

Using ProxyPassReverse is the good solution ?