Article

Background

Some organisations require webservices such as GroupWise WebAccess to run over an SSL based connection. This requires the default installation to simply reject any requests that are not SSL based or redirect them to an SSL based connection.

This TIP is based on GroupWise 8 running on OES2SP1 - Linux. It may work for other configurations, but I will leave that up to you.

Reference

This information is based on Disabling HTTP but Keeping HTTPS for WebAccess.

So after reading that idea and digging around the /etc/opt/novell/httpd directory as well as bit of other reading on this it looks like this is now quite simple, so here are a few options.

This assumes that you are using novell-tomcat5 and apache2.

Option 1 - Disable the service on port 80

cd /etc/opt/novell/httpd/conf.d/
rm gw.conf
rm gwcal.conf
rcapache2 restart

This removes the symbolic links of gw.conf and gwcal.conf from the directory. These were pointing to /etc/opt/novell/groupwise/calhost/gwcal.conf and /etc/opt/novell/groupwise/webaccess/gw.conf.

There should be symlinks to the same files in /etc/opt/novell/httpd/sslconf.d which enabled SSL based access by default.

Option 2 - Redirect requests to port 443

GroupWise WebAccess

In /etc/opt/novell/groupwise/webaccess/gw.conf add the module rewrite code below after

Alias /gw "/opt/novell/groupwise/webaccess/gw/" 

<IfModule !mod_rewrite.c>
    LoadModule rewrite_module /usr/lib/apache2/mod_rewrite.so
</IfModule>
<IfModule mod_rewrite.c>
    RewriteEngine on
    Rewritecond %{SERVER_PORT} ^80$
    RewriteRule ^/gw/(.*) https://%{HTTP_HOST}/gw/$1 [NC,R,L]
</IfModule>

GroupWise Calendar Publishing

In /etc/opt/novell/groupwise/webaccess/gwcal.conf add the module rewrite code below after

Alias /gwcal "/opt/novell/groupwise/calhost/gwcal"

<IfModule !mod_rewrite.c>
    LoadModule rewrite_module /usr/lib/apache2/mod_rewrite.so
</IfModule>
<IfModule mod_rewrite.c>
    RewriteEngine on
    Rewritecond %{SERVER_PORT} ^80$
    RewriteRule ^/gwcal/(.*) https://%{HTTP_HOST}/gwcal/$1 [NC,R,L]
</IfModule>

Additional

You can also force the welcome page to redirect to GroupWise WebAccess instead of the default. Simply modify the exiting /etc/opt/novell/httpd/conf.d/welcome-apache.conf.

We are using this along with Option 2 above, so I expect that it would need to be reworked if used with Option 1.

<Directory /srv/www/htdocs>
     ErrorDocument 403 /gw/
#    ErrorDocument 403 /welcome/redirect.html
<Directory>

Good Luck