Web server basic authentication with VISULOX

Steps to enable web server basic authentication with VISULOX

• Generate the web server password file:

cd /opt/tarantella/webserver/apache/default/bin/ 
./htpasswd -b -c /etc/websrvpasswd test letmein

• Change the permissions on the web server password file. The password file must be accessible by the ttaserv user.
  Run the following commands:

chmod 440 /etc/websrvpasswd
chown ttaserv:ttaserv /etc/websrvpasswd

• Create a back-up copy of the Apache configuration file:

cd /opt/tarantella/webserver/apache/<version>/conf/
cp httpd.conf httpd.conf.bkp

• Edit the Apache configuration file to protect the /sgd URL:

<Location "/visulox/basic/">
AuthType Basic
AuthBasicProvider file
AuthUserFile /etc/websrvpasswd
AuthName secure
Require valid-user
</Location>

The Apache configuration file can be found here: /opt/tarantella/webserver/apache/default/conf/httpd.conf.

• Create a back-up copy of the Tomcat configuration file:

cd /<tarantella install path>/tarantella/webserver/tomcat/default/conf/
cp server.xml server.xml.bkp

• The Tomcat component of the VISULOX Portal web server must be configured to trust the web server's authentication.
  Edit the Tomcat configuration file - add "tomcatAuthentication="false" to the configuration of the AJP 1.3 Connector:

<!-- The SGD AJP connector --> 
<Connector protocol="AJP/1.3"
               address="127.0.0.1"
               port="${tomcat.ajp.port}"
               tomcatAuthentication="false"
               secret="fltb6dZJA8lfFw" secretRequired="true" />

The Tomcat configuration file can be found here: /opt/tarantella/webserver/tomcat/default/conf/server.xml.

Enable 3rd party for user not in ENS (testing)

visulox-portal config edit --login-thirdparty-nonens 1

Add the VISULOX 3rd party configuration

visulox config 3rdparty -enabled true
visulox portal attach -3rdparty

See also: 3rdParty configuration parameters

Restart VISULOX

visulox-portal stop --kill
visulox stop
visulox-portal start
visulox start

Test login with the following URL: https://<host.domain>/visulox/basic/

Revert steps

If the above steps render your system unusable for some reason, you can revert to the original state by following these steps:

rm /etc/websrvpasswd.txt

cd /opt/tarantella/webserver/apache/default/conf/ 
cp httpd.conf.bkp httpd.conf

cd /opt/tarantella/webserver/tomcat/default/conf/ 
cp server.xml.bkp server.xml

/opt/tarantella restart webserver