Koozali.org: home of the SME Server

Disable https for password change page.

Offline hoover87

  • 3
  • +0/-0
Disable https for password change page.
« on: September 18, 2009, 10:14:26 PM »
Is there a semi-easy way to disable https for the password change page?

Please spare me the security risk lessons.  I'm fronting the unsecured network with an SSL VPN portal and am trouble-shooting issues with redirects to https intranet pages.

Thanks

Offline cactus

  • *
  • 4,880
  • +3/-0
    • http://www.snetram.nl
Re: Disable https for password change page.
« Reply #1 on: September 19, 2009, 09:35:46 AM »
Is there a semi-easy way to disable https for the password change page?
Sorry still think we need to...
Please spare me the security risk lessons.  I'm fronting the unsecured network with an SSL VPN portal and am trouble-shooting issues with redirects to https intranet pages.
... as in this setup your password will travel unencrypted over the line between SSL VPN portal and SME Server.

To go short your solution is in adding a custom template based on /etc/e-smith/httpd/conf/httpd.conf/VirtualHosts/27ManagerProxyPass in the templates-custom tree and modify the copy according to your needs. Information on the template system can be found in the wiki in the SME Server Developers Guide.
Be careful whose advice you buy, but be patient with those who supply it. Advice is a form of nostalgia, dispensing it is a way of fishing the past from the disposal, wiping it off, painting over the ugly parts and recycling it for more than its worth ~ Baz Luhrmann - Everybody's Free (To Wear Sunscreen)