Koozali.org: home of the SME Server

Server-manager access with https

F.Briffod

Server-manager access with https
« on: February 01, 2002, 11:23:47 AM »
It is possible to access the server-manager with http or secure https.

To increase security, is it possible to remove any access via http and only leave the secure https access?!

Thanks.

 F.Briffod

Offline Franco

  • *
  • 1,171
  • +0/-0
    • http://contribs.org
Server-manager access with https
« Reply #1 on: January 10, 2006, 05:24:52 AM »
This is an old post, but maybe of interest of others:
vi /etc/e-smith/templates/etc/httpd/conf/httpd.conf/92ProxyPassManager
then add a line to each instance:
RequireSSL on
Code: [Select]

# ProxyPass executes a module which relays requests to another server
# We use it to allow transparent access to the admin instance of the
# web server.
}

ProxyPass /e-smith-manager http://127.0.0.1:980/e-smith-manager/
<Location /e-smith-manager>
    RequireSSL on
   order deny,allow
    deny from all
{
    $OUT .= "    allow from $localAccess\n";
}
</Location>

ProxyPass /server-manager http://127.0.0.1:980/server-manager/
<Location /server-manager>
    RequireSSL on
    order deny,allow
    deny from all
{
    $OUT .= "    allow from $localAccess\n";
}
</Location>


/sbin/e-smith/expand-template /etc/httpd/conf/httpd.conf

/etc/rc.d/init.d/httpd restart