firewall, browserbased webtop and port 443

Hi board,

may I ask again for some help...

I face two problems and can't solve them with my basic knowledge :-(

When I try to run http://host/sgd I always get "Connection refused". I

installed sgd with my own apache serving also a webshop. Classic webtop is

working fine!

Second issue is related to my firewall. As I will also only have port 443

available to "the outer world" I followed the instructions from the manual.

Reconfigure each web server in the array to listen on localhost port 443.

For the Secure Global Desktop Web Server, edit the <IfDefine SSL> section

in the httpd.conf file and change Listen 443 to Listen 127.0.0.1:443.

BUT: guess what - if I try to call http://host I can't reach that host any

more... well - supposed to be so, but what shall I do to access the host

and also keep my webshop alive?

Just changing the port for secure connections from 5307 to 443 will not

work as tarantelkla start complaines about port 443 already in use...

Any help would be appreciated

cheers,

Mat

[1147 byte] By [Mat] at [2007-11-25 20:54:17]
# 1

Mat wrote:

> Hi board,

>

> may I ask again for some help...

>

> I face two problems and can't solve them with my basic knowledge :-(

>

> When I try to run http://host/sgd I always get "Connection refused". I

> installed sgd with my own apache serving also a webshop. Classic webtop is

> working fine!

I recently faced this issue at a customer's site but honestly I was not

able to figure that out. SGD EE 4.1 was already installed on a RH box

and the classic webtop worked as expected with the Tarantella provided

apache and tomcat.

I had a look at the catalina.out file and (from memory) it revealed

something related to an index out of range error.

I initially thought about the name of the server (which was something

similar to "myserver.mynetwork.mydomain" - please notice the trailing

".mydomain" which is way beyon the 3 characters allowed) and also to the

fact that the LANG env variable was set to handle the Italian language.

So, I removed it completety and reinstalled it by a) telling the setup

wizard to gather the "myserver.mynetwork.it" name and b) setting the

LANG env variable to null (eg, "unset LANG" __before__ installing).

At the end of the installation, access to the new browser based webtop

(sgd) worked as expected; then, I directed TTA to expose its peer DNS

name as "myserver.mynetwork.mydomain", restarted TTA but I was not able

to duplicate the error condition.

>

> Second issue is related to my firewall. As I will also only have port 443

> available to "the outer world" I followed the instructions from the manual.

>

> Reconfigure each web server in the array to listen on localhost port 443.

> For the Secure Global Desktop Web Server, edit the <IfDefine SSL> section

> in the httpd.conf file and change Listen 443 to Listen 127.0.0.1:443.

>

>

> BUT: guess what - if I try to call http://host I can't reach that host any

> more... well - supposed to be so, but what shall I do to access the host

> and also keep my webshop alive?

>

> Just changing the port for secure connections from 5307 to 443 will not

> work as tarantelkla start complaines about port 443 already in use...

>

> Any help would be appreciated

Did you install the Tarantella Security Pack ? Also, did you tell TTA to

"forward" HTTPS traffic to the local web server listening at localhost ?

http://www.tarantella.com/support/documentation/sgd/ee/4.1/help/en-us/base/stan dard/am_ssldaemon.html

Best,

Rob

--

Roberto Zini - r.zini<@AT@>strhold.it

"Has anybody around here seen an aircraft carrier?"

(Pete "Maverick" Mitchell - Top Gun)

Rob at 2007-7-4 19:04:50 > top of Java-index,Desktop,Sun Secure Global Desktop Software...
# 2

Mat,

I have the same issue with binding TTA to 443 port, tarantella refuse to

start due cannot bind port 443.

I followed the document but cant fix the issue.

Also check for a process listening port 443 using lsof and cant find

anything.

First I thought the problem was some Linux config problem but I installed in

the same server without any config changes TTA SGDE 3.42 configured to

listen just 443 port for TTA connections and work fine.

So must be some new limitation or feature for TTA 4.0.

I like to use 443 port for AIP traffic because flow without problem throug

firewalls and proxy servers and make TTA accessible from anywhere.

If anyone can help with this Ill really preciate it.

Regards.

Marcelo

"Rob" <rob@nottobefoundhere.com> escribi en el mensaje

news:dhb90q$29r$1@mint.tarantella.com...

> Mat wrote:

>> Hi board,

>>

>> may I ask again for some help...

>>

>> I face two problems and can't solve them with my basic knowledge :-(

>>

>> When I try to run http://host/sgd I always get "Connection refused". I

>> installed sgd with my own apache serving also a webshop. Classic webtop

>> is

>> working fine!

>

> I recently faced this issue at a customer's site but honestly I was not

> able to figure that out. SGD EE 4.1 was already installed on a RH box

> and the classic webtop worked as expected with the Tarantella provided

> apache and tomcat.

>

> I had a look at the catalina.out file and (from memory) it revealed

> something related to an index out of range error.

>

> I initially thought about the name of the server (which was something

> similar to "myserver.mynetwork.mydomain" - please notice the trailing

> ".mydomain" which is way beyon the 3 characters allowed) and also to the

> fact that the LANG env variable was set to handle the Italian language.

>

> So, I removed it completety and reinstalled it by a) telling the setup

> wizard to gather the "myserver.mynetwork.it" name and b) setting the

> LANG env variable to null (eg, "unset LANG" __before__ installing).

>

> At the end of the installation, access to the new browser based webtop

> (sgd) worked as expected; then, I directed TTA to expose its peer DNS

> name as "myserver.mynetwork.mydomain", restarted TTA but I was not able

> to duplicate the error condition.

>

>>

>> Second issue is related to my firewall. As I will also only have port 443

>> available to "the outer world" I followed the instructions from the

>> manual.

>>

>> Reconfigure each web server in the array to listen on localhost port 443.

>> For the Secure Global Desktop Web Server, edit the <IfDefine SSL> section

>> in the httpd.conf file and change Listen 443 to Listen 127.0.0.1:443.

>>

>>

>> BUT: guess what - if I try to call http://host I can't reach that host

>> any

>> more... well - supposed to be so, but what shall I do to access the host

>> and also keep my webshop alive?

>>

>> Just changing the port for secure connections from 5307 to 443 will not

>> work as tarantelkla start complaines about port 443 already in use...

>>

>> Any help would be appreciated

>

> Did you install the Tarantella Security Pack ? Also, did you tell TTA to

> "forward" HTTPS traffic to the local web server listening at localhost ?

>

> http://www.tarantella.com/support/documentation/sgd/ee/4.1/help/en-us/base/stan dard/am_ssldaemon.html

>

> Best,

> Rob

>

>

> --

>Roberto Zini - r.zini<@AT@>strhold.it

>

> "Has anybody around here seen an aircraft carrier?"

>(Pete "Maverick" Mitchell - Top Gun)

MarceloGonzalez at 2007-7-4 19:04:50 > top of Java-index,Desktop,Sun Secure Global Desktop Software...