Koozali.org: home of the SME Server
Legacy Forums => General Discussion (Legacy) => Topic started by: F.Briffod on February 01, 2002, 11:23:47 AM
-
It is possible to access the server-manager with http or secure https.
To increase security, is it possible to remove any access via http and only leave the secure https access?!
Thanks.
F.Briffod
-
This is an old post, but maybe of interest of others:
vi /etc/e-smith/templates/etc/httpd/conf/httpd.conf/92ProxyPassManager
then add a line to each instance:
RequireSSL on
# ProxyPass executes a module which relays requests to another server
# We use it to allow transparent access to the admin instance of the
# web server.
}
ProxyPass /e-smith-manager http://127.0.0.1:980/e-smith-manager/
<Location /e-smith-manager>
RequireSSL on
order deny,allow
deny from all
{
$OUT .= " allow from $localAccess\n";
}
</Location>
ProxyPass /server-manager http://127.0.0.1:980/server-manager/
<Location /server-manager>
RequireSSL on
order deny,allow
deny from all
{
$OUT .= " allow from $localAccess\n";
}
</Location>
/sbin/e-smith/expand-template /etc/httpd/conf/httpd.conf
/etc/rc.d/init.d/httpd restart