Andreas Hartmann schrieb:
> Thorsten Scherler schrieb:
>> On Fri, 2007-06-15 at 11:51 +0200, Andreas Hartmann
wrote:
>>> Andreas Hartmann schrieb:
>
> [...]
>
>>> A major problem with the "global
proxy" approach are requests to
>>> publication-based module URLs. If they need
authorization, the
>>> requests hit the login screen. This occurs for
instance with the
>>> TinyMCE JavaScript requests like
>>>
>>> http://lenya.example.com/default/modul
es/tinymce/javascript/tiny_config.js
>>>
>>> Making these URLs accessible to the world is
certainly out of the
>>> question. IMO all module URLs should be
protected.
>>>
>>>
>>> Any ideas how to solve this issue without SSO?
>> Relative rewrite like you once suggested.
>>
>> Meaning all default/modules needs to be rewritten
into
>> ../default/modules
>>
>> OR
>>
>> Doing it with mod_rewrite on the server.
>>
>> RewriteRule ^/default/modules/(.*)
>> http
://10.240.192.30:8088/lenya/default/modules/$1 [P,L]
>
> To make the authoring environment of a publication
accessible at
> the root path of a server, is it correct that I need
four rewrite rules?
>
> ^/lenya/(.*) http://127.0.0.1:8888/le
nya/$1 [P,L]
> ^/modules/(.*) http://127.0.0.1:8888/
modules/$1 [P,L]
> ^/default/modules/(.*) http://127.0.0
.1:8888/default/modules/$1 [P,L]
> ^/(.*) http://127.0
.0.1:8888/default/authoring/$1 [P,L]
>
> At least that seems to work in my setup.
Unfortunately it doesn't - the sitetree XML can't be
loaded.
-- Andreas
--
Andreas Hartmann, CTO
BeCompany GmbH
http://www.becompany.ch
------------------------------------------------------------
---------
To unsubscribe, e-mail: dev-unsubscribe lenya.apache.org
For additional commands, e-mail: dev-help lenya.apache.org
|