Article

midsonm's picture
article
Reads:

12344

Score:
4
4
3
 
Comments:

3

Force SSL on GroupWise 8 WebAccess and Calendar Publishing

(View Disclaimer)

Background

Some organisations require webservices such as GroupWise WebAccess to run over an SSL based connection. This requires the default installation to simply reject any requests that are not SSL based or redirect them to an SSL based connection.

This TIP is based on GroupWise 8 running on OES2SP1 - Linux. It may work for other configurations, but I will leave that up to you.

Reference

This information is based on Disabling HTTP but Keeping HTTPS for WebAccess.

So after reading that idea and digging around the /etc/opt/novell/httpd directory as well as bit of other reading on this it looks like this is now quite simple, so here are a few options.

This assumes that you are using novell-tomcat5 and apache2.

Option 1 - Disable the service on port 80

cd /etc/opt/novell/httpd/conf.d/
rm gw.conf
rm gwcal.conf
rcapache2 restart

This removes the symbolic links of gw.conf and gwcal.conf from the directory. These were pointing to /etc/opt/novell/groupwise/calhost/gwcal.conf and /etc/opt/novell/groupwise/webaccess/gw.conf.

There should be symlinks to the same files in /etc/opt/novell/httpd/sslconf.d which enabled SSL based access by default.

Option 2 - Redirect requests to port 443

GroupWise WebAccess

In /etc/opt/novell/groupwise/webaccess/gw.conf add the module rewrite code below after

Alias /gw "/opt/novell/groupwise/webaccess/gw/" 
<IfModule !mod_rewrite.c>
    LoadModule rewrite_module /usr/lib/apache2/mod_rewrite.so
</IfModule>
<IfModule mod_rewrite.c>
    RewriteEngine on
    Rewritecond %{SERVER_PORT} ^80$
    RewriteRule ^/gw/(.*) https://%{HTTP_HOST}/gw/$1 [NC,R,L]
</IfModule>

GroupWise Calendar Publishing

In /etc/opt/novell/groupwise/webaccess/gwcal.conf add the module rewrite code below after

Alias /gwcal "/opt/novell/groupwise/calhost/gwcal"
<IfModule !mod_rewrite.c>
    LoadModule rewrite_module /usr/lib/apache2/mod_rewrite.so
</IfModule>
<IfModule mod_rewrite.c>
    RewriteEngine on
    Rewritecond %{SERVER_PORT} ^80$
    RewriteRule ^/gwcal/(.*) https://%{HTTP_HOST}/gwcal/$1 [NC,R,L]
</IfModule>

Additional

You can also force the welcome page to redirect to GroupWise WebAccess instead of the default. Simply modify the exiting /etc/opt/novell/httpd/conf.d/welcome-apache.conf.

We are using this along with Option 2 above, so I expect that it would need to be reworked if used with Option 1.

<Directory /srv/www/htdocs>
     ErrorDocument 403 /gw/
#    ErrorDocument 403 /welcome/redirect.html
<Directory>

Good Luck


Disclaimer: As with everything else at Cool Solutions, this content is definitely not supported by Novell (so don't even think of calling Support if you try something and it blows up).

It was contributed by a community member and is published "as is." It seems to have worked for at least one person, and might work for you. But please be sure to test, test, test before you do anything drastic with it.




User Comments

gerberd's picture

Check Capitalization on ReWriteCond

Submitted by gerberd on 30 September 2009 - 9:56am.

I believe that "Rewritecond" must actually be entered as "RewriteCond" in order to be recognized. At least it has both times I've used this...

Paullamontagne's picture

Also works on SLES10 SP!

Submitted by Paullamontagne on 9 October 2009 - 12:24pm.

Applied Option 2 to a SLES 10 SP1 Server and it worked as well...

SOsterfeld's picture

Problem with Calendar Publishing

Submitted by SOsterfeld on 26 April 2010 - 11:58pm.

WebAccess works fine, but I don't see any published calendar with SSL.

© 2013 Novell