[ECODP-dev] https assistence session

Wed Sep 11 13:59:39 UTC 2013

Thanks Dimitrios,
We will try this as a workaround until we find investigate the problem with ssl.
Best regards,
Vafa.

From: Dimitrios Mexis [mailto:dimitrios.mexis at tenforce.com]
Sent: Wednesday, September 11, 2013 3:32 PM
To: ISOARD Olivier (OP); NIEDERHAUSEN Matthias (OP-EXT); MEYER André (OP-EXT)
Cc: Project list for EC ODP CKAN project; 'Bert Van Nuffelen'; SABETE Vafa (OP); HOHN Norbert (OP); ZAJAC Agnieszka (OP)
Subject: Re: [ECODP-dev] https assistence session

Dear Olivier, André & Matthias,

Here are the steps that you need to take in order to disable SSL login to CKAN, so:

STEP 1) Disable the rules in Nginx configuration that make permanent the redirection ( Under a normal installation the directory should be: /etc/nginx/conf.d/ecodp.conf ):
Commenting is sufficient:
Instead of :
----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
   location /data/user {
      rewrite ^ https://$http_host$request_uri? permanent;
   }

   location ~ /[a-zA-z][a-zA-z]/data/user {
      rewrite ^ https://$http_host$request_uri? permanent;
}

Change it to :
-----------------------------------------------------------------------------------------------------
#   location /data/user {
#      rewrite ^ https://$http_host$request_uri? permanent;
#   }

#   location ~ /[a-zA-z][a-zA-z]/data/user {
#      rewrite ^ https://$http_host$request_uri? permanent;
#  }

STEP 2) Comment the line in configuration of ecportal.ini in the release 09.02, under $USERHOME/ckan/conf/ecportal.ini and particular the line :

beaker.session.secure = true

comment it by placing # before the word beaker. at the start of the line.
That means CKAN session will not require secured sessions to be initiated.

Restart apache and nginx. And then clear the cache of your browser. Browser can keep redirecting for that reason.

Regards
Dimitrios

On 11/09/2013 11:05, ISOARD Olivier (OP) wrote:
Dear Bert,

Thanks. Got it.

Just few remarks:

1.      The VMs for 0.9 are offline because we had to restore 0.8 on prod and we cannot have both up & running at the same time. So debugging will be really limited in that context

2.      Mathias and André are about to prepare list of point with additional info we will discuss then

3.      In the worst case, we will have to sse how to disable completely https for 0.9 and deploy on prod a version of 0.9 without https

4.      Because of sickness and holidays, I didn't manage to have a expert in BIG-IP for this meeting ☹

Regards
Olivier

From: Bert Van Nuffelen [mailto:bert.van.nuffelen at tenforce.com]
Sent: Wednesday, September 11, 2013 10:57 AM
To: ISOARD Olivier (OP); SABETE Vafa (OP)
Cc: Project list for EC ODP CKAN project; Bastiaan Deblieck; jurgen vannerom
Subject: https assistence session

Dear,
here are the connection details for a gotomeeting meeting from 14.00h - 16.00h Brussels time.
kind regards,
Bert

1.  Please join my meeting.
https://global.gotomeeting.com/join/284459957

2.  Use your microphone and speakers (VoIP) - a headset is recommended.  Or, call in using your telephone.

Belgium: +32 (0) 28 08 4345
Australia: +61 2 8355 1036
Austria: +43 (0) 7 2088 1036
Canada: +1 (647) 497-9372
Denmark: +45 (0) 69 91 89 24
Finland: +358 (0) 942 41 5788
France: +33 (0) 170 950 586
Germany: +49 (0) 811 8899 6928
Ireland: +353 (0) 19 030 053
Italy: +39 0 693 38 75 53
Netherlands: +31 (0) 208 080 212
New Zealand: +64 (0) 4 974 7243
Norway: +47 21 04 29 76
Spain: +34 931 81 6713
Sweden: +46 (0) 852 500 182
Switzerland: +41 (0) 225 3311 20
United Kingdom: +44 20 3657 6777
United States: +1 (213) 493-0618

Access Code: 284-459-957
Audio PIN: Shown after joining the meeting

Meeting ID: 284-459-957

GoToMeeting®
Online Meetings Made Easy®
--
Bert Van Nuffelen

Semantic Technologies Software Architect at TenForce
www.tenforce.be<http://www.tenforce.be>

Bert.Van.Nuffelen at tenforce.com<mailto:Bert.Van.Nuffelen at tenforce.com>
Office: +32 (0)16 31 48 60
Mobile:+32 479 06 24 26
skype: bert.van.nuffelen

_______________________________________________

Ecodp-dev mailing list

Ecodp-dev at lists.okfn.org<mailto:Ecodp-dev at lists.okfn.org>

http://lists.okfn.org/mailman/listinfo/ecodp-dev

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.okfn.org/mailman/private/ecodp-dev/attachments/20130911/aa415c59/attachment.html>