Novell IFOLDER 3 - ADMINISTRATION, Manual

Page: 101 / 148

Managing an iFolder Web Access Server 101
no
vd
ocx (
E
NU)
01
F
ebr
ua
ry
200
6
IMPORTANT: Do not disable SSL on the Web Access server if the two servers are on different
machines.
If the two servers are running on the same machine and you want to disable SSL, rerun the YaST
configuration, and specify
http://localhost
as the URL for the enterprise server. For
information, see Section 6.3, “Configuring the iFolder Web Access Server,” on page 55 .
9.5.4 Configuring the Web Access Server for SSL
Communications with Web Browsers
The iFolder 3. x Web Access server requires a secure connection between the user’s Web browser
and the Web Access server. The SSL connection supports the secure exchange of data. For most
deployments, this setting should not be changed because iFolder uses HTTP BASIC for
authentication, which means passwords are sent to the server in the clear. Without SSL encryption,
the iFolder data is also sent in the clear.
The following Rewrite parameters control this behavior and are located in the
/etc/apache2/
conf.d/ifolder_web.conf
file:
LoadModule rewrite_module /usr/lib/apache2/mod_rewrite.so
RewriteEngine On
RewriteCond %{HTTPS} !=on
RewriteRule ^/ifolder/(.*) https://%{SERVER_NAME}/ifolder/$1 [R,L]
To disable the requirement for SSL connections, you can comment out these Rewrite command lines
in the
ifolder_web.conf
file. Placing a pound sign (
#
) at the beginning of each line renders it
as a comment.
WARNING: Without an SSL connection, traffic between a user’s Web browser and the Web Access
server is not secure.
To disable the SSL requirement:
1
Stop the iFolder Web Access services.
2 Edit the
/etc/apache2/conf.d/ifolder_web.conf
file to comment out the Rewrite
command lines.
For example:
#LoadModule rewrite_module /usr/lib/apache2/mod_rewrite.so
#RewriteEngine On
#RewriteCond %{HTTPS} !=on
#RewriteRule ^/ifolder/(.*) https://%{SERVER_NAME}/ifolder/$1
[R,L]
3 Start the iFolder Web Access services.
9.5.5 Configuring an SSL Certificate for the Web Access Server
For information, see “Managing SSL Certificates for Apache” on page 133 .