Visualização combinada Visão plana Exibição em árvore
Tópicos [ Anterior | Próximo ]
toggle
Jari Fredriksson
Problem with prop. web.server.host
29 de Outubro de 2010 08:40
Resposta

Jari Fredriksson

Ranking: New Member

Mensagens: 23

Data de entrada: 14 de Setembro de 2010

Mensagens recentes

I'm using LR 6.0.5 on Debian linux. Trying to put that behind Tivoli Access Manager.

portal-ext.properties:
web.server.host = www.servername.tld

I can't click any links on the site, or I can, but I always end up to the front page. I can not log in, I can not select another page.

The problem seem not to be with the Access Manager, as if I set the web.server.host to the actual host serving Liferay, and use it directly, the problem stays.

What might cause this?
Jari Fredriksson
RE: Problem with prop. web.server.host
3 de Novembro de 2010 03:32
Resposta

Jari Fredriksson

Ranking: New Member

Mensagens: 23

Data de entrada: 14 de Setembro de 2010

Mensagens recentes

OK. My real problem is that the Liferay server behind the proxy assigns the LR host name to JavaScript, most like in getUrlHome(). That comes when clicking "Return to site" in Control Panel mostly.

I have configured virtual host, and LR honors that and most everything works. But still the wrong host comes every now and then.

And if I try web.server.host Liferay just does not work at all. Every click sends to front page. This problem is so even without the proxy. Setting web.server.host just renders Liferay unusable.

Do we have a bug (bugs) or did do I something wrong?
ratna prasad kakani
RE: Problem with prop. web.server.host
19 de Janeiro de 2011 03:42
Resposta

ratna prasad kakani

Ranking: New Member

Mensagens: 11

Data de entrada: 2 de Novembro de 2010

Mensagens recentes

hai,

could you help me in integrating liferay to tivoli access manager.

we are trying to integrate using a standard junction with web seal, when we are trying to login

when we try to access ,we are getting login page of TAM, after entering the user-name and password it is redirecting to liferay login page, instead of home page.

i need some help
regards
Jari Fredriksson
RE: Problem with prop. web.server.host
20 de Abril de 2011 03:01
Resposta

Jari Fredriksson

Ranking: New Member

Mensagens: 23

Data de entrada: 14 de Setembro de 2010

Mensagens recentes

I have integrated Liferay 6.0.5 with Tivoli Access Manager 6.1.1. like this:

I have the root allowed for unauthenticated users.

In TAM pdadmin

1
2pdadmin sec_master> acl create unauth
3pdadmin sec_master> acl modify unauth set group iv-admin TcmdbsvaBRrxl
4pdadmin sec_master> acl modify unauth set group webseal-servers Tgmdbsrxl
5pdadmin sec_master> acl modify unauth set user sec_master TcmdbsvaBRrxl
6pdadmin sec_master> acl modify unauth set any-other Trx
7pdadmin sec_master> acl modify unauth set unauthenticated Trx
8pdadmin sec_master> acl attach /WebSEAL/www.example.com-default/ unauth


That way autentication is not needed for unauth use of Liferay.

Now. When user wants to authenticate, she goes to /c/portal/login

I create an ACL for that, (and also a transparent path junction point).

1
2pdadmin sec_master> acl create Liferay-users
3pdadmin sec_master> acl modify Liferay-users set group iv-admin TcmdbsvaBRrxl
4pdadmin sec_master> acl modify Liferay-users set group webseal-servers Tgmdbsrxl
5pdadmin sec_master> acl modifyLiferay-users set user sec_master TcmdbsvaBRrxl
6pdadmin sec_master> acl modify Liferay-users set any-other Trx
7pdadmin sec_master> acl attach /WebSEAL/www.example.com-default/c/portal/login Liferay-users


I activate SiteMinder authentication in Liferay. The userid header name is iv-user in WebSEAL.

I activate LDAP import from TAM LDAP (we use Tivoli Directory Server), so that Liferay can get the user info from there, if itself does not know user.

Now liferay works normally, and does not show its own login page. WebSEAL does the authentication, and user is authenticated both in Liferay and WebSEAL.

I hope this helps.