Re: Sample config for IBM i Apache reverse proxy to Exchange

FRAK! :-[

I just noticed that the proxypass statements had the internal address as
http: when IIS is insisting on *https:*

For the archives these changes work when you match the proxypass with
the actual working IIS address.

Next up will be seeing if I can get BES on the Exchange for one
Blackberry user and if anything else has to be done to Apache.

Roger

On 9/9/2009 8:24 PM, Roger Vicker, CCP arranged the binary bits such that:

After reading the proxy article I have added the following to the Apache
config which seems to get me close.

***************
LoadModule ibm_ssl_module /QSYS.LIB/QHTTPSVR.LIB/QZSRVSSL.SRVPGM
LoadModule proxy_module /QSYS.LIB/QHTTPSVR.LIB/QZSRCORE.SRVPGM
LoadModule proxy_http_module /QSYS.LIB/QHTTPSVR.LIB/QZSRCORE.SRVPGM
LoadModule proxy_connect_module /QSYS.LIB/QHTTPSVR.LIB/QZSRCORE.SRVPGM

Listen *:443

ProxyReceiveBufferSize 1024

<VirtualHost *:443>
DocumentRoot /www/public/public

RequestHeader set Front-End-Https "On"

RewriteEngine On

SSLEngine On
SSLAppName QIBM_HTTP_SERVER_PUBLIC
SSLProxyEngine On
SSLProxyAppName QIBM_PROXY_SERVER_PUBLIC
SSLProxyVerify Optional
SetEnv HTTPS_PORT 443

ExpiresActive On
ExpiresDefault "access plus 300 seconds"

UserDir public_html

<Proxy *>
Order deny,allow
Allow from all
</Proxy>

ProxyPreserveHost On
ProxyBadHeader StartBody
ProxyVia On

RewriteRule ^/owa$ owa/ [R]

<Location /owa>
ProxyPass http://exchange.public.org/owa
ProxyPassReverse http://exchange.public.org/owa
SSLRequireSSL
</Location>


</VirtualHost>


Redirect 301 /owa/ https://www.public.org/owa/
Redirect 301 /owa https://www.public.org/owa/
***************


However, when I browse to https://www.public.org/owa/ I get a:

403 - Forbidden: Access is denied.
You do not have permission to view this directory or page using the
credentials that you supplied.

If I browse from to http://exchange.public.org/owa/ I get the login
panel. Is this an Apache problem or should I take this over to the
PC-Tech list?

Thanks.

Roger Vicker, CCP

On 8/25/2009 11:10 AM, Haas, Matt (CL Tech Sv) arranged the binary bits
such that:

There is an article on the Apache site that talks about setting up proxies.

Matt

-----Original Message-----
From: web400-bounces@xxxxxxxxxxxx [mailto:web400-bounces@xxxxxxxxxxxx] On Behalf Of Roger Vicker, CCP
Sent: Tuesday, August 25, 2009 12:05 PM
To: web400@xxxxxxxxxxxx
Subject: [WEB400] Sample config for IBM i Apache reverse proxy to Exchange

Hello,

Does anyone have a working sample config for the IBM i Apache in front
of an Exchange 2007 (with IIS) server using reverse proxy?

Currently the Apache is serving their static web pages and I would
prefer to keep them out of IIS and stay with Apache. They will be
bringing an Exchange 2007 server up soon and would like to use OWA when
they are out of the office. It would be better to have the OWA
exclusively via HTTPS but they currently don't use HTTPS for anything
external facing.

Thanks.

Roger Vicker, CCP