Re: Sample config for IBM i Apache reverse proxy to Exchange

["Roger Vicker, CCP" <rv-tech@xxxxxxxxxx>]

After reading the proxy article I have added the following to the Apache
config which seems to get me close.

***************
LoadModule ibm_ssl_module /QSYS.LIB/QHTTPSVR.LIB/QZSRVSSL.SRVPGM
LoadModule proxy_module /QSYS.LIB/QHTTPSVR.LIB/QZSRCORE.SRVPGM
LoadModule proxy_http_module /QSYS.LIB/QHTTPSVR.LIB/QZSRCORE.SRVPGM
LoadModule proxy_connect_module /QSYS.LIB/QHTTPSVR.LIB/QZSRCORE.SRVPGM

Listen *:443

ProxyReceiveBufferSize 1024

<VirtualHost *:443>
   DocumentRoot /www/public/public

   RequestHeader set Front-End-Https "On"

   RewriteEngine On

   SSLEngine On
   SSLAppName QIBM_HTTP_SERVER_PUBLIC
   SSLProxyEngine On
   SSLProxyAppName QIBM_PROXY_SERVER_PUBLIC
   SSLProxyVerify Optional
   SetEnv HTTPS_PORT 443

   ExpiresActive On
   ExpiresDefault "access plus 300 seconds"

   UserDir public_html

   <Proxy *>
      Order deny,allow
      Allow from all
   </Proxy>

   ProxyPreserveHost On
   ProxyBadHeader StartBody
   ProxyVia On

   RewriteRule ^/owa$ owa/ [R]
  
   <Location /owa>
      ProxyPass http://exchange.public.org/owa
      ProxyPassReverse http://exchange.public.org/owa
      SSLRequireSSL
   </Location>


</VirtualHost>


Redirect 301 /owa/ https://www.public.org/owa/
Redirect 301 /owa https://www.public.org/owa/
***************


However, when I browse to https://www.public.org/owa/ I get a:

   403 - Forbidden: Access is denied.
   You do not have permission to view this directory or page using the
credentials that you supplied.

If I browse from to http://exchange.public.org/owa/ I get the login
panel. Is this an Apache problem or should I take this over to the
PC-Tech list?

Thanks.

Roger Vicker, CCP

On 8/25/2009 11:10 AM, Haas, Matt (CL Tech Sv) arranged the binary bits
such that:
> There is an article on the Apache site that talks about setting up proxies.
>
> Matt
>
> -----Original Message-----
> From: web400-bounces@xxxxxxxxxxxx [mailto:web400-bounces@xxxxxxxxxxxx] On Behalf Of Roger Vicker, CCP
> Sent: Tuesday, August 25, 2009 12:05 PM
> To: web400@xxxxxxxxxxxx
> Subject: [WEB400] Sample config for IBM i Apache reverse proxy to Exchange
>
> Hello,
>
> Does anyone have a working sample config for the IBM i Apache in front
> of an Exchange 2007 (with IIS) server using reverse proxy?
>
> Currently the Apache is serving their static web pages and I would
> prefer to keep them out of IIS and stay with Apache. They will be
> bringing an Exchange 2007 server up soon and would like to use OWA when
> they are out of the office. It would be better to have the OWA
> exclusively via HTTPS but they currently don't use HTTPS for anything
> external facing.
>
> Thanks.
>
> Roger Vicker, CCP
>
>