Topic: Joomla: ibay or user password (not both)

[Frank VB]

I've installed Joomla 1.10.12 using the smeserver-joomla contrib from www.dungog.net on my SME Server 7.1.3. I will be using it as an intranet CMS. By default Joomla is installed in the /opt/joomla directory. The intranet can be accessed through http://foo.bar.com/joomla (where foo is the name of my SME server, not the real name of course).

I created a subdomain "intranet.bar.com" and an ibay named "intranet'. The intranet ibay is accessible through the internet or local network but only with a password (the PublicAccess property is set to global-pw). I placed an html redirect file towards "http://foo.bar.com/joomla" in the "ibays/intranet/html" directory. As a result, the intranet can also be accessed using the "http://intranet.bar.com" URL. In fact I want this to be the only access point for entering the intranet.

In order to make sure that only valid users enter the intranet through the "http://foo.bar.com/joomla" URL, I changed the PublicAccess property of the joomla service from "global" to "global-pw".

Now this is what happens: if I access the "http://intranet.bar.com" I'm presented with two login dialogs: the first for the intranet ibay username/password. After entering the correct password, users are redirected to the "http//foo.bar.com/joomla" site and there they have to enter a second password (their personal username/password).

Using two passwords is confusing and a little bit of overkill. I wonder if there isn't a easier method. Either I'd like to use the ibay username/password or the users' username/password, not both. I don't know if and how I can pull this off. Anyone?

[stephen noble]

see the new method I use with roundcube, is this what you need

with the domain property you can point http://intranet.bar.com directly to joomla

but I haven't updated the smeserver-joomla rpm to do the same yet

http://wiki.contribs.org/RoundCube#Options

 config setprop roundcube domain domain2.org

[Frank VB]

Hi Snoble, thanks for your reply.

I executed the following commands:

Code: [Select]

config setprop joomla domain intranet.bar.com
expand-template /etc/httpd/conf/httpd.conf
svc -h /service/httpd-e-smith

But I don't see any change ... Actually, nothing was altered in the httpd.conf after those commands. The date/time property of the file remains the same. Is there anything else I should alter?

Edit: Something has changed. I don't need the redirect file anymore in the intranet/html directory. The redirect is done automatically. But I still have to enter two passwords (the ibay name/password and a user name/password).

In the <directory> fragment of the ibay in the httpd.conf it says "require user intranet". Can I change this to "require valid-user" so a user account can be used to access the intranet ibay? In that case users don't have to use the ibay name/password anymore. If yes, in which template do I alter this?

[stephen noble]

but I haven't updated the smeserver-joomla rpm to do the same yet

[Frank VB]

OK, so I guess you're saying that I'll have to wait until the joomla sme contrib is updated and then reinstall joomla with the updated contrib. Unless someone can come up with a workaround in the mean time ...

[stephen noble]

you'll only need to update smeserver-joomla to add an extra httpd fragment
or look at the smeserver-roundcube rpm and modify that example

[Frank VB]

Snoble, could you elaborate a bit on which httpd fragment I should add? I don't have any experience playing around with rpms; except for simply installing them. Thanks!

Meanwhile, I've searched around a bit and I've come up with this solution:

I changed the instruction

Code: [Select]

$OUT .="    require valid-user\n";
in the /etc/e-smith/templates/etc/httpd/conf/httpd.conf/92joomla file in:

Code: [Select]

$OUT .="    require user <ibay>\n";
(where I substituted <ibay> with the name of the ibay (i.e. intranet).

Then I executed:

Code: [Select]

#expand-template /etc/httpd/conf/httpd.conf
#/sbin/service/httpd-e-smith restart
I still get two login dialogs but they both accept the ibay name/password. If I change the PublicAccess in Joomla to global-pw-remote,

Code: [Select]

#config setprop joomla PublicAccess global-pw-remote logging in on the local network requires only one login dialog, which is even more user-friendly.

Any tips on simplifying this even more, are welcome.