nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Need to require client certificates

Heath

Hello,

We are running TS 6.5 SP1 on Solaris 9. We've recently received a new requirement to authenticate our TS users by way of client certificates. I haven't been able to locate any information for doing this in the documentation, here on devnet or from support. I did however find an article that tells how to implement using Apache (http://www.securityfocus.com/infocus/1823) but I'm not quite sure how to do this being that the TS httpd.conf file is automatically generated. This of course would overwrite any changes I make.

Is there a way to implement this using the iw.cfg file or has anyone done something similiar to this before?

Thanks in advance!

Find more posts tagged with

Comments

Migrateduser

This is a similar thread that was posted before without a solution [thread=2834] Using https merely for the login procedure[/thread].

I am not sure if this works or not as did not implement it.
1. First enable TeamSite apache server with SSL certificates (See KB49640)
2. Configure the apache to only redirect the request for login screen to the https port.

Heath

Thanks for the reply!

The thread you referenced is indeed different, yet has some interesting similarities. I had actually seen it previously but didn't make the connection that I could possibly use one of the template files to add the appropriate code to my httpd.conf file.

The thread you referenced mentioned adding lines to the iw-home/iw-webd/conf/httpd.conf.template file and KB49698 stated to modify iw-home/iw-webd/conf/rewrite.conf.template file. Does anyone know which would be better to use or does it even matter?

Migrateduser

Thanks for the reply!
The thread you referenced mentioned adding lines to the iw-home/iw-webd/conf/httpd.conf.template file and KB49698 stated to modify iw-home/iw-webd/conf/rewrite.conf.template file. Does anyone know which would be better to use or does it even matter?

The recommended way to change the TeamSite apache httpd.conf is to modify iw-home/iw-webd/conf/rewrite.conf.template file and then run iw-home/iw-webd/bin/iwwebd_conf.ipl to merge the changes to httpd.conf file. If you are familear with apache configuration setting you can modify the httpd.conf file directly. In both the cases you need to restart the TeamSite UI for the changes to take affect.

Adam Stoller

...If you are familear with apache configuration setting you can modify the httpd.conf file directly.

I do not believe you should ever modify the httpd.conf file directly - I'm pretty sure iwreset -ui causes the httpd.conf file to be re-generated from the httpd.conf.template file.

The only time I would circumvent this rule is if you're trying to do rapid development/debugging to figure out what to put into the httpd.conf.template by trying various things out quickly first.

Migrateduser

I do not believe you should ever modify the httpd.conf file directly - I'm pretty sure iwreset -ui causes the httpd.conf file to be re-generated from the httpd.conf.template file.

The only time I would circumvent this rule is if you're trying to do rapid development/debugging to figure out what to put into the httpd.conf.template by trying various things out quickly first.

Is there any reason not to modify the httpd.conf file directly?

Heath

Thanks to both of you for your replies! It's still a little unclear though if I should modify the rewrite.conf.template or the httpd.conf.template.

batasari,

I believe ghoti is saying that the httpd.conf file is recreated each time the iwreset -ui command is executed. This being the case you would lose any changes previous made to the httpd.conf file.

RptToolbar.bmp

Migrateduser

Thanks for the reply!
The thread you referenced mentioned adding lines to the iw-home/iw-webd/conf/httpd.conf.template file and KB49698 stated to modify iw-home/iw-webd/conf/rewrite.conf.template file. Does anyone know which would be better to use or does it even matter?

httpd.conf.template & httpd.conf configuration are used to setup SSL keys and rewrite.conf.template & rewrite.conf are used to setup URL mapping for apache web server.

I believe ghoti is saying that the httpd.conf file is recreated each time the iwreset -ui command is executed. This being the case you would lose any changes previous made to the httpd.conf file.

In the past I did modify the changes to httpd.conf file without updating the httpd.conf.template file to make changes to the apache server.