Re: Outlook Web Access behind Reverse proxy

Marko Haim <[email protected]> Mon, 1 Dec 2003 15:29:05 +0200
Newsgroups gmane.comp.apache.mod-proxy
Message-ID <E1542177268FD511866B0002A560C8080368EF48@IL-TLV-MAIL5>
I can't implement https->https proxing because I ame using apache server
version 1.
I can't upgrade it now since it is part of Checkpoint's Product called User
Authority Web Access Proxy 
That gives me SSO (Single Sign ON) and AAA features. 


"Lombardo, Federico" <[email protected]> wrote in message
news:<DF71F1B1D60BD5118D2C0004AC538C651156F9@db_srv.gstazioni.it>...
No, your configuration is incorrect!!!

Please read my stupid paper at
http://www.connectionreset.it/homepage/documenti/Apache2-OWA.txt


Lombardo Federico, Network Administrator & IT Security Manager 
Tel. +396.47841.362  
Grandi Stazioni S.p.A. 
Via G. Giolitti 34 
00189 Roma 
Italy 

-----Original Message-----
From: Haim Marko [mailto:[email protected]] 
Sent: luned? 1 dicembre 2003 10.43
To: [email protected]
Subject: Outlook Web Access behind Reverse proxy

We are using Apache server as reverse proxy solution for user access from
the internet to internal web

sites within the internal lan. We want to set access to OWA 2003 from the
internet while the OWA server is located in the internal LAN.

User in the internet -> https://owa.domain.com/ ->
http://owainternal.internaldomain.com/exchange/

On the apache's httpd.conf I have the folowing configuration:

<VirtualHost *:443>

ServerName owa.domain.com

ProxyPass / http://owainternal.internaldomain.com/exchange/

ProxyPassReverse / http://owainternal.internaldomain.com/exchange/

</VirtualHost>

In the 1st page I'm getting contains the following tag:

<BASE href="http://owainternal.internaldomain.com/exchange/Username/">

Meaning that all relative links on the page will be changed to point to the
internal server

which is not accessible from the internet. Setting up the same name for both
external and internal servers doesn't solve the problem because the BASE
href points to http and not https.

Is there a way to search and replace pages going back to the user (like
mod_rewrite in the opposite Direction) ? Or other solution ?

10x

Best Regards,
Haim Marko, ITI Comverse







----------