[ECODP-dev] https assistence session

Wed Sep 11 13:32:23 UTC 2013

Dear Olivier, André & Matthias,

Here are the steps that you need to take in order to disable SSL login 
to CKAN, so:

*STEP 1*) Disable the rules in Nginx configuration that make permanent 
the redirection ( Under a normal installation the directory should be: 
/etc/nginx/conf.d/ecodp.conf ):
Commenting is sufficient:
*Instead of :*
----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
*   location /data/user {**
**      rewrite ^ https://$http_host$request_uri? permanent;**
**   }**
**
**   location ~ /[a-zA-z][a-zA-z]/data/user {**
**      rewrite ^ https://$http_host$request_uri? permanent;**
**} *
*
Change it to :*
-----------------------------------------------------------------------------------------------------
*#   location /data/user {
#      rewrite ^ https://$http_host$request_uri? permanent;
#   }

#   location ~ /[a-zA-z][a-zA-z]/data/user {
#      rewrite ^ https://$http_host$request_uri? permanent;
#  }
*

*STEP 2*) Comment the line in configuration of ecportal.ini in the 
release 09.02, under $USERHOME/ckan/conf/ecportal.ini and particular the 
line :

*beaker.session.secure = true*

comment it by placing # before the word beaker. at the start of the line.
That means CKAN session will not require secured sessions to be initiated.

Restart apache and nginx. And then clear the cache of your browser. 
Browser can keep redirecting for that reason.

Regards
Dimitrios

On 11/09/2013 11:05, ISOARD Olivier (OP) wrote:
>
> Dear Bert,
>
> Thanks. Got it.
>
> Just few remarks:
>
> 1.The VMs for 0.9 are offline because we had to restore 0.8 on prod 
> and we cannot have both up & running at the same time. So debugging 
> will be really limited in that context
>
> 2.Mathias and André are about to prepare list of point with additional 
> info we will discuss then
>
> 3.In the worst case, we will have to sse how to disable completely 
> https for 0.9 and deploy on prod a version of 0.9 without https
>
> 4.Because of sickness and holidays, I didn't manage to have a expert 
> in BIG-IP for this meeting L
>
> Regards
>
> Olivier
>
> *From:*Bert Van Nuffelen [mailto:bert.van.nuffelen at tenforce.com]
> *Sent:* Wednesday, September 11, 2013 10:57 AM
> *To:* ISOARD Olivier (OP); SABETE Vafa (OP)
> *Cc:* Project list for EC ODP CKAN project; Bastiaan Deblieck; jurgen 
> vannerom
> *Subject:* https assistence session
>
> Dear,
>
> here are the connection details for a gotomeeting meeting from 14.00h 
> - 16.00h Brussels time.
>
> kind regards,
>
> Bert
>
>
>
> 1.  Please join my meeting.
> https://global.gotomeeting.com/join/284459957
>
> 2.  Use your microphone and speakers (VoIP) - a headset is 
> recommended.  Or, call in using your telephone.
>
> Belgium: +32 (0) 28 08 4345
> Australia: +61 2 8355 1036
> Austria: +43 (0) 7 2088 1036
> Canada: +1 (647) 497-9372
> Denmark: +45 (0) 69 91 89 24
> Finland: +358 (0) 942 41 5788
> France: +33 (0) 170 950 586
> Germany: +49 (0) 811 8899 6928
> Ireland: +353 (0) 19 030 053
> Italy: +39 0 693 38 75 53
> Netherlands: +31 (0) 208 080 212
> New Zealand: +64 (0) 4 974 7243
> Norway: +47 21 04 29 76
> Spain: +34 931 81 6713
> Sweden: +46 (0) 852 500 182
> Switzerland: +41 (0) 225 3311 20
> United Kingdom: +44 20 3657 6777
> United States: +1 (213) 493-0618
>
> Access Code: 284-459-957
> Audio PIN: Shown after joining the meeting
>
> Meeting ID: 284-459-957
>
> GoToMeeting®
> Online Meetings Made Easy®
> -- 
> Bert Van Nuffelen
>
> Semantic Technologies Software Architect at TenForce
> www.tenforce.be <http://www.tenforce.be>
>
> Bert.Van.Nuffelen at tenforce.com <mailto:Bert.Van.Nuffelen at tenforce.com>
> Office: +32 (0)16 31 48 60
> Mobile:+32 479 06 24 26
> skype: bert.van.nuffelen
>
>
>
> _______________________________________________
> Ecodp-dev mailing list
> Ecodp-dev at lists.okfn.org
> http://lists.okfn.org/mailman/listinfo/ecodp-dev

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.okfn.org/mailman/private/ecodp-dev/attachments/20130911/443a2a5b/attachment.html>