Comments on: OpenCms Apache integration: The simplest solution

By: Sebastian

Sebastian — Tue, 13 Sep 2011 07:18:41 +0000

Hi Alexey,

thanks for this comment and very useful tip!

All the best,
Sebastian

By: Alexey

Alexey — Mon, 12 Sep 2011 15:43:14 +0000

Hi,Yann!

Most probably the reason of workplace page reloading is Tomcat sessionPath parameter. As soon as you used Tomcat 7.x, you should configure sessionCookiePath=”/” attribute in $CATALINA_HOME/conf/context.xml file, not emptySessionPath=”true” in $CATALINA_HOME/conf/server.xml file. For example,

By: Yann

Yann — Thu, 14 Oct 2010 04:02:49 +0000

Dear all,

I have the same problem as Alibek above: “I cannot login into [the] workplace, [OpenCMS] redirects me to [the] login page everytime. What is the problem?”

I have followed the instructions, modified the Tomcat AJP connector declaration, Apache, and so on. I have installed OpenCMS as opencms.war. I am runing Apache 2.2.4, Tomcat 7.0.2, OpenCMS 7.5.3. OpenCMS works fine from “localhost” on the local computer.

Any idea what I am doing wrong?
Take care!
Yann

By: Dustin

Dustin — Thu, 02 Sep 2010 21:31:05 +0000

Hi Sebastian,

Has there been any attempts to use a front end web server to proxy requests to back-end servers with this configuration? I’ll give you an example. We have one server running Apache HTTPD with a public IP, configured with multiple virtual host conf files and ProxyPass the connections to back end web servers. This method works great for all static websites we host.

We’re considering setting up OpenCMS for our new main website, and we’d like to host it on a back-end server and proxy the connection through our front-end webserver. I’ve taken the details and suggestions above and attempted to use them in this way, setting the server name to the IP address of the back-end server hosting Tomcat. This does not seem to work. Connecting directly to the back-end server works just fine.

Is this possible, or is this a pipe dream?

Thanks.

By: Sebastian

Sebastian — Sun, 07 Feb 2010 16:25:21 +0000

Hi,

thanks for the reply. I think you have put xml between tags. I guess wordpress filters out all the tags that it dosn"t know to prevent XSS.


Yes you need two VirtualHosts for SSL. Sorry I thought you already had it configured this way. I should have been less assuming.

Anyway I'm glad it works for you now. If you have any further questions please stop by.

By: arrow3215

arrow3215 — Sun, 07 Feb 2010 08:43:26 +0000

@sebastian
your blogsoftware is filtering out half of the post, especially the xml parts in opencms-system.xml description. So this part of my post above makes no sense. I try it verbally:
In WEB-INF/config/opencms-system.xml under the sites entry define your website as secure server. This will cause a login on http://mysite/system/login being redirected to https.

By: arrow3215

arrow3215 — Sun, 07 Feb 2010 08:33:33 +0000

Thanks Sebastian, now it’s running.

I made the proxypass entries twice, one for the http site and one for the https site. So now I have the Site with http and the workplace with https.

In WEB-INF/config/opencms-system.xml :
.
.

https://mysite.de
/sites/default/

The http Virtual host entry for apache is as described above.

The https virtual host entry is as follows:

For integrating awstsats and phpmyadmin in the secure site I tried:

SSLProxyEngine On
SSLProxyVerify none
..
…
..
Alias /phpmyadmin /pathto/phpmyadmin
.
.

ProxyRequests Off
# for proxying to other TomcatAppa for let’s say for example maps
ProxyPass /maps/ ajp://localhost:8009/maps/
ProxyPassReverse /maps/ ajp://localhost:8009/maps/
#
ProxyPass /opencms/ ajp://localhost:8009/opencms/
ProxyPassReverse /opencms/ ajp://localhost:8009/opencms/
# for allowing phpmysql under site.de/phpmyadmin
ProxyPass /phpmydmin !
# for awstatst
ProxyPass /cgi-bin !
ProxyPass /awstats-icon !
ProxyPass / ajp://localhost:8009/opencms/opencms/
ProxyPassReverse / ajp://localhost:8009/opencms/opencms/

By: Sebastian

Sebastian — Sat, 06 Feb 2010 19:10:00 +0000

Hi, there should be no problems. Make sure your Apache is configured correctly by serving some static pages via SSL. If you want to have an SSL connection all the way through the following directives might for proxying:

SSLProxyEngine On
SSLProxyVerify none

Are you sure you are accessing the right port?

By: arrow3215

arrow3215 — Wed, 03 Feb 2010 19:47:29 +0000

I have problems to make it work with ssl. I can’t bypass Apache in going via https://site.com:8443/opencms/opemcms/system/login directly to tomcat bcause of the changes in “opencms-importexport.xml” . To the other hand
https://site.de/system/login is not captuered by the virtual host (
ServerName yourdomain.com
….) and an error message “ssl_error_rx_record_too_long” occurs. Can anyone post an ssl config that runs with this ajp solution or do I have to use mod_rwrite?

thanks in advance

By: Sebastian

Sebastian — Sat, 31 Oct 2009 16:22:55 +0000

Great to hear! I’m glad you got it working.