Login/session error in ecommerce application when used with AJP and SSL

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
9 messages Options
Reply | Threaded
Open this post in threaded view
|

Login/session error in ecommerce application when used with AJP and SSL

rohit
Hi,

i am trying to configure my server will a ssl and am using AJP connector.

I am having a serious problem which i am unable to figure out.

When i use https://www.example.com/catalog/control/main the site works perfectly and there is not login error.

I am asked to login indefinite times, when i try to checkout in the ecommerce application with the URL https://www.example.com/ecommerce/control/main

It seems there is a session problem whenever i move from http to https and vice-versa. in the visits section of party application in the admin side, i find new visit entries created everytime i browse from https:// to http:// and vice-versa.

But this problem is not seen in https://www.example.com/catalog/control/main, perhaps because i am in ssl more all the time.

Am i missing something, i have configured apache as follows:


ProxyPass /ecommerce/ ajp://127.0.0.1:8009/ecommerce/
ProxyPass /googlecheckout/ ajp://127.0.0.1:8009/googlecheckout/
ProxyPass /images/ ajp://127.0.0.1:8009/images/
ProxyPass /catalog/ ajp://127.0.0.1:8009/catalog/
ProxyPass /accounting/ ajp://127.0.0.1:8009/accounting/
ProxyPass /crmsfa/ ajp://127.0.0.1:8009/crmsfa/
ProxyPass /content/ ajp://127.0.0.1:8009/ecommerce/
ProxyPass /facility/ ajp://127.0.0.1:8009/facility/
ProxyPass /partymgr/ ajp://127.0.0.1:8009/partymgr/
ProxyPass /financials/ ajp://127.0.0.1:8009/financials/
ProxyPass /googlecheckout/ ajp://127.0.0.1:8009/googlecheckout/
ProxyPass /googlebase/ ajp://127.0.0.1:8009/googlebase/
ProxyPass /humanres/ ajp://127.0.0.1:8009/humanres/
ProxyPass /manufacturing/ ajp://127.0.0.1:8009/manufacturing/
ProxyPass /marketing/ ajp://127.0.0.1:8009/marketing/
ProxyPass /microsoftlive/ ajp://127.0.0.1:8009/microsoftlive/
ProxyPass /fedex/ ajp://127.0.0.1:8009/fedex/
ProxyPass /oagis/ ajp://127.0.0.1:8009/oagis/
ProxyPass /ordermgr/ ajp://127.0.0.1:8009/ordermgr/



Please help.

Thanks,

Rohit

Reply | Threaded
Open this post in threaded view
|

Re: Login/session error in ecommerce application when used with AJP and SSL

David E Jones

Check out:

http://docs.ofbiz.org/display/OFBTECH/Apache+OFBiz+Technical+Production+Setup+Guide

... especially the section about url.properties and related stuff.

-David


rohit2006 wrote:

> Hi,
>
> i am trying to configure my server will a ssl and am using AJP connector.
>
> I am having a serious problem which i am unable to figure out.
>
> When i use https://www.example.com/catalog/control/main the site works
> perfectly and there is not login error.
>
> I am asked to login indefinite times, when i try to checkout in the
> ecommerce application with the URL
> https://www.example.com/ecommerce/control/main
>
> It seems there is a session problem whenever i move from http to https and
> vice-versa. in the visits section of party application in the admin side, i
> find new visit entries created everytime i browse from https:// to http://
> and vice-versa.
>
> But this problem is not seen in
> https://www.example.com/catalog/control/main, perhaps because i am in ssl
> more all the time.
>
> Am i missing something, i have configured apache as follows:
>
>
> ProxyPass /ecommerce/ ajp://127.0.0.1:8009/ecommerce/
> ProxyPass /googlecheckout/ ajp://127.0.0.1:8009/googlecheckout/
> ProxyPass /images/ ajp://127.0.0.1:8009/images/
> ProxyPass /catalog/ ajp://127.0.0.1:8009/catalog/
> ProxyPass /accounting/ ajp://127.0.0.1:8009/accounting/
> ProxyPass /crmsfa/ ajp://127.0.0.1:8009/crmsfa/
> ProxyPass /content/ ajp://127.0.0.1:8009/ecommerce/
> ProxyPass /facility/ ajp://127.0.0.1:8009/facility/
> ProxyPass /partymgr/ ajp://127.0.0.1:8009/partymgr/
> ProxyPass /financials/ ajp://127.0.0.1:8009/financials/
> ProxyPass /googlecheckout/ ajp://127.0.0.1:8009/googlecheckout/
> ProxyPass /googlebase/ ajp://127.0.0.1:8009/googlebase/
> ProxyPass /humanres/ ajp://127.0.0.1:8009/humanres/
> ProxyPass /manufacturing/ ajp://127.0.0.1:8009/manufacturing/
> ProxyPass /marketing/ ajp://127.0.0.1:8009/marketing/
> ProxyPass /microsoftlive/ ajp://127.0.0.1:8009/microsoftlive/
> ProxyPass /fedex/ ajp://127.0.0.1:8009/fedex/
> ProxyPass /oagis/ ajp://127.0.0.1:8009/oagis/
> ProxyPass /ordermgr/ ajp://127.0.0.1:8009/ordermgr/
>
>
>
> Please help.
>
> Thanks,
>
> Rohit
>
>
Reply | Threaded
Open this post in threaded view
|

Re: Login/session error in ecommerce application when used with AJP and SSL

rohit
My URL.properties file looks like this

# OFBiz Global URL Settings - WebSite specific settings found in WebSite entity
####

# HTTPS Port (Secure port)
port.https.enabled=Y
port.https=
force.https.host=

# HTTP Port (Not Secure port)
port.http=
force.http.host=

# Static Content URLs to make it easy to move the serving load for static content to other machines
# -- thse are for general content such as images, js & css files, or non-dynamic HTML files
content.url.prefix.secure=
content.url.prefix.standard=

in the website content i have the following entries:

http host: www.example.com
http port:

https host: www.example.com
https port:

enable https: yes.

I have read the link but could not figure out, where i made the mistake. Can you give an example of how these settings should look like.

thanks

Rohit



David E Jones wrote
Check out:

http://docs.ofbiz.org/display/OFBTECH/Apache+OFBiz+Technical+Production+Setup+Guide

... especially the section about url.properties and related stuff.

-David


rohit2006 wrote:
> Hi,
>
> i am trying to configure my server will a ssl and am using AJP connector.
>
> I am having a serious problem which i am unable to figure out.
>
> When i use https://www.example.com/catalog/control/main the site works
> perfectly and there is not login error.
>
> I am asked to login indefinite times, when i try to checkout in the
> ecommerce application with the URL
> https://www.example.com/ecommerce/control/main
>
> It seems there is a session problem whenever i move from http to https and
> vice-versa. in the visits section of party application in the admin side, i
> find new visit entries created everytime i browse from https:// to http://
> and vice-versa.
>
> But this problem is not seen in
> https://www.example.com/catalog/control/main, perhaps because i am in ssl
> more all the time.
>
> Am i missing something, i have configured apache as follows:
>
>
> ProxyPass /ecommerce/ ajp://127.0.0.1:8009/ecommerce/
> ProxyPass /googlecheckout/ ajp://127.0.0.1:8009/googlecheckout/
> ProxyPass /images/ ajp://127.0.0.1:8009/images/
> ProxyPass /catalog/ ajp://127.0.0.1:8009/catalog/
> ProxyPass /accounting/ ajp://127.0.0.1:8009/accounting/
> ProxyPass /crmsfa/ ajp://127.0.0.1:8009/crmsfa/
> ProxyPass /content/ ajp://127.0.0.1:8009/ecommerce/
> ProxyPass /facility/ ajp://127.0.0.1:8009/facility/
> ProxyPass /partymgr/ ajp://127.0.0.1:8009/partymgr/
> ProxyPass /financials/ ajp://127.0.0.1:8009/financials/
> ProxyPass /googlecheckout/ ajp://127.0.0.1:8009/googlecheckout/
> ProxyPass /googlebase/ ajp://127.0.0.1:8009/googlebase/
> ProxyPass /humanres/ ajp://127.0.0.1:8009/humanres/
> ProxyPass /manufacturing/ ajp://127.0.0.1:8009/manufacturing/
> ProxyPass /marketing/ ajp://127.0.0.1:8009/marketing/
> ProxyPass /microsoftlive/ ajp://127.0.0.1:8009/microsoftlive/
> ProxyPass /fedex/ ajp://127.0.0.1:8009/fedex/
> ProxyPass /oagis/ ajp://127.0.0.1:8009/oagis/
> ProxyPass /ordermgr/ ajp://127.0.0.1:8009/ordermgr/
>
>
>
> Please help.
>
> Thanks,
>
> Rohit
>
>
Reply | Threaded
Open this post in threaded view
|

Re: Login/session error in ecommerce application when used with AJP and SSL

rohit
Hi,

Has anyone encountered similar issue. I will really appreciate some assistance on this.

Thanks,


rohit2006 wrote
My URL.properties file looks like this

# OFBiz Global URL Settings - WebSite specific settings found in WebSite entity
####

# HTTPS Port (Secure port)
port.https.enabled=Y
port.https=
force.https.host=

# HTTP Port (Not Secure port)
port.http=
force.http.host=

# Static Content URLs to make it easy to move the serving load for static content to other machines
# -- thse are for general content such as images, js & css files, or non-dynamic HTML files
content.url.prefix.secure=
content.url.prefix.standard=

in the website content i have the following entries:

http host: www.example.com
http port:

https host: www.example.com
https port:

enable https: yes.

I have read the link but could not figure out, where i made the mistake. Can you give an example of how these settings should look like.

thanks

Rohit



David E Jones wrote
Check out:

http://docs.ofbiz.org/display/OFBTECH/Apache+OFBiz+Technical+Production+Setup+Guide

... especially the section about url.properties and related stuff.

-David


rohit2006 wrote:
> Hi,
>
> i am trying to configure my server will a ssl and am using AJP connector.
>
> I am having a serious problem which i am unable to figure out.
>
> When i use https://www.example.com/catalog/control/main the site works
> perfectly and there is not login error.
>
> I am asked to login indefinite times, when i try to checkout in the
> ecommerce application with the URL
> https://www.example.com/ecommerce/control/main
>
> It seems there is a session problem whenever i move from http to https and
> vice-versa. in the visits section of party application in the admin side, i
> find new visit entries created everytime i browse from https:// to http://
> and vice-versa.
>
> But this problem is not seen in
> https://www.example.com/catalog/control/main, perhaps because i am in ssl
> more all the time.
>
> Am i missing something, i have configured apache as follows:
>
>
> ProxyPass /ecommerce/ ajp://127.0.0.1:8009/ecommerce/
> ProxyPass /googlecheckout/ ajp://127.0.0.1:8009/googlecheckout/
> ProxyPass /images/ ajp://127.0.0.1:8009/images/
> ProxyPass /catalog/ ajp://127.0.0.1:8009/catalog/
> ProxyPass /accounting/ ajp://127.0.0.1:8009/accounting/
> ProxyPass /crmsfa/ ajp://127.0.0.1:8009/crmsfa/
> ProxyPass /content/ ajp://127.0.0.1:8009/ecommerce/
> ProxyPass /facility/ ajp://127.0.0.1:8009/facility/
> ProxyPass /partymgr/ ajp://127.0.0.1:8009/partymgr/
> ProxyPass /financials/ ajp://127.0.0.1:8009/financials/
> ProxyPass /googlecheckout/ ajp://127.0.0.1:8009/googlecheckout/
> ProxyPass /googlebase/ ajp://127.0.0.1:8009/googlebase/
> ProxyPass /humanres/ ajp://127.0.0.1:8009/humanres/
> ProxyPass /manufacturing/ ajp://127.0.0.1:8009/manufacturing/
> ProxyPass /marketing/ ajp://127.0.0.1:8009/marketing/
> ProxyPass /microsoftlive/ ajp://127.0.0.1:8009/microsoftlive/
> ProxyPass /fedex/ ajp://127.0.0.1:8009/fedex/
> ProxyPass /oagis/ ajp://127.0.0.1:8009/oagis/
> ProxyPass /ordermgr/ ajp://127.0.0.1:8009/ordermgr/
>
>
>
> Please help.
>
> Thanks,
>
> Rohit
>
>
Reply | Threaded
Open this post in threaded view
|

Re: Login/session error in ecommerce application when used with AJP and SSL

rajsaini
Rohit,

Try these changes to test. You may further fine tune them.

Make port.https.enabled to false as I don't thing you want complete
application to be served through HTTPS other than login/checkout.
Login/Checkout is OOTB enabled to handle the https.

I have exactly the same configuration you have except the https and
ProxyPass as given below:

ProxyPass / ajp://127.0.0.1:8009/

Thanks,

Raj


rohit2006 wrote:

> Hi,
>
> Has anyone encountered similar issue. I will really appreciate some
> assistance on this.
>
> Thanks,
>
>
>
> rohit2006 wrote:
>  
>> My URL.properties file looks like this
>>
>> # OFBiz Global URL Settings - WebSite specific settings found in WebSite
>> entity
>> ####
>>
>> # HTTPS Port (Secure port)
>> port.https.enabled=Y
>> port.https=
>> force.https.host=
>>
>> # HTTP Port (Not Secure port)
>> port.http=
>> force.http.host=
>>
>> # Static Content URLs to make it easy to move the serving load for static
>> content to other machines
>> # -- thse are for general content such as images, js & css files, or
>> non-dynamic HTML files
>> content.url.prefix.secure=
>> content.url.prefix.standard=
>>
>> in the website content i have the following entries:
>>
>> http host: www.example.com
>> http port:
>>
>> https host: www.example.com
>> https port:
>>
>> enable https: yes.
>>
>> I have read the link but could not figure out, where i made the mistake.
>> Can you give an example of how these settings should look like.
>>
>> thanks
>>
>> Rohit
>>
>>
>>
>>
>> David E Jones wrote:
>>    
>>> Check out:
>>>
>>> http://docs.ofbiz.org/display/OFBTECH/Apache+OFBiz+Technical+Production+Setup+Guide
>>>
>>> ... especially the section about url.properties and related stuff.
>>>
>>> -David
>>>
>>>
>>> rohit2006 wrote:
>>>      
>>>> Hi,
>>>>
>>>> i am trying to configure my server will a ssl and am using AJP
>>>> connector.
>>>>
>>>> I am having a serious problem which i am unable to figure out.
>>>>
>>>> When i use https://www.example.com/catalog/control/main the site works
>>>> perfectly and there is not login error.
>>>>
>>>> I am asked to login indefinite times, when i try to checkout in the
>>>> ecommerce application with the URL
>>>> https://www.example.com/ecommerce/control/main
>>>>
>>>> It seems there is a session problem whenever i move from http to https
>>>> and
>>>> vice-versa. in the visits section of party application in the admin
>>>> side, i
>>>> find new visit entries created everytime i browse from https:// to
>>>> http://
>>>> and vice-versa.
>>>>
>>>> But this problem is not seen in
>>>> https://www.example.com/catalog/control/main, perhaps because i am in
>>>> ssl
>>>> more all the time.
>>>>
>>>> Am i missing something, i have configured apache as follows:
>>>>
>>>>
>>>> ProxyPass /ecommerce/ ajp://127.0.0.1:8009/ecommerce/
>>>> ProxyPass /googlecheckout/ ajp://127.0.0.1:8009/googlecheckout/
>>>> ProxyPass /images/ ajp://127.0.0.1:8009/images/
>>>> ProxyPass /catalog/ ajp://127.0.0.1:8009/catalog/
>>>> ProxyPass /accounting/ ajp://127.0.0.1:8009/accounting/
>>>> ProxyPass /crmsfa/ ajp://127.0.0.1:8009/crmsfa/
>>>> ProxyPass /content/ ajp://127.0.0.1:8009/ecommerce/
>>>> ProxyPass /facility/ ajp://127.0.0.1:8009/facility/
>>>> ProxyPass /partymgr/ ajp://127.0.0.1:8009/partymgr/
>>>> ProxyPass /financials/ ajp://127.0.0.1:8009/financials/
>>>> ProxyPass /googlecheckout/ ajp://127.0.0.1:8009/googlecheckout/
>>>> ProxyPass /googlebase/ ajp://127.0.0.1:8009/googlebase/
>>>> ProxyPass /humanres/ ajp://127.0.0.1:8009/humanres/
>>>> ProxyPass /manufacturing/ ajp://127.0.0.1:8009/manufacturing/
>>>> ProxyPass /marketing/ ajp://127.0.0.1:8009/marketing/
>>>> ProxyPass /microsoftlive/ ajp://127.0.0.1:8009/microsoftlive/
>>>> ProxyPass /fedex/ ajp://127.0.0.1:8009/fedex/
>>>> ProxyPass /oagis/ ajp://127.0.0.1:8009/oagis/
>>>> ProxyPass /ordermgr/ ajp://127.0.0.1:8009/ordermgr/
>>>>
>>>>
>>>>
>>>> Please help.
>>>>
>>>> Thanks,
>>>>
>>>> Rohit
>>>>
>>>>
>>>>        
>>>      
>>    
>
>  

Reply | Threaded
Open this post in threaded view
|

Re: Login/session error in ecommerce application when used with AJP and SSL

rohit
Thanks so much Raj, you really have bought me out of much misery.

The line ProxyPass / ajp://127.0.0.1:8009/

did the trick, i guess doing ProxyPass /ecommerce/ ajp://127.0.0.1:8009/ecommerce/, for each application individually caused the error and for SSL support in ecommerce "ProxyPass /ecommerce/ ajp://127.0.0.1:8009/ecommerce/ " alone is not sufficient.

i did not make any change to "port.https.enabled", i guess this may then we left as it is.

Anyways thanks a lot, i really appreciate it.

Rohit


Raj Saini wrote
Rohit,

Try these changes to test. You may further fine tune them.

Make port.https.enabled to false as I don't thing you want complete
application to be served through HTTPS other than login/checkout.
Login/Checkout is OOTB enabled to handle the https.

I have exactly the same configuration you have except the https and
ProxyPass as given below:

ProxyPass / ajp://127.0.0.1:8009/

Thanks,

Raj


rohit2006 wrote:
> Hi,
>
> Has anyone encountered similar issue. I will really appreciate some
> assistance on this.
>
> Thanks,
>
>
>
> rohit2006 wrote:
>  
>> My URL.properties file looks like this
>>
>> # OFBiz Global URL Settings - WebSite specific settings found in WebSite
>> entity
>> ####
>>
>> # HTTPS Port (Secure port)
>> port.https.enabled=Y
>> port.https=
>> force.https.host=
>>
>> # HTTP Port (Not Secure port)
>> port.http=
>> force.http.host=
>>
>> # Static Content URLs to make it easy to move the serving load for static
>> content to other machines
>> # -- thse are for general content such as images, js & css files, or
>> non-dynamic HTML files
>> content.url.prefix.secure=
>> content.url.prefix.standard=
>>
>> in the website content i have the following entries:
>>
>> http host: www.example.com
>> http port:
>>
>> https host: www.example.com
>> https port:
>>
>> enable https: yes.
>>
>> I have read the link but could not figure out, where i made the mistake.
>> Can you give an example of how these settings should look like.
>>
>> thanks
>>
>> Rohit
>>
>>
>>
>>
>> David E Jones wrote:
>>    
>>> Check out:
>>>
>>> http://docs.ofbiz.org/display/OFBTECH/Apache+OFBiz+Technical+Production+Setup+Guide
>>>
>>> ... especially the section about url.properties and related stuff.
>>>
>>> -David
>>>
>>>
>>> rohit2006 wrote:
>>>      
>>>> Hi,
>>>>
>>>> i am trying to configure my server will a ssl and am using AJP
>>>> connector.
>>>>
>>>> I am having a serious problem which i am unable to figure out.
>>>>
>>>> When i use https://www.example.com/catalog/control/main the site works
>>>> perfectly and there is not login error.
>>>>
>>>> I am asked to login indefinite times, when i try to checkout in the
>>>> ecommerce application with the URL
>>>> https://www.example.com/ecommerce/control/main
>>>>
>>>> It seems there is a session problem whenever i move from http to https
>>>> and
>>>> vice-versa. in the visits section of party application in the admin
>>>> side, i
>>>> find new visit entries created everytime i browse from https:// to
>>>> http://
>>>> and vice-versa.
>>>>
>>>> But this problem is not seen in
>>>> https://www.example.com/catalog/control/main, perhaps because i am in
>>>> ssl
>>>> more all the time.
>>>>
>>>> Am i missing something, i have configured apache as follows:
>>>>
>>>>
>>>> ProxyPass /ecommerce/ ajp://127.0.0.1:8009/ecommerce/
>>>> ProxyPass /googlecheckout/ ajp://127.0.0.1:8009/googlecheckout/
>>>> ProxyPass /images/ ajp://127.0.0.1:8009/images/
>>>> ProxyPass /catalog/ ajp://127.0.0.1:8009/catalog/
>>>> ProxyPass /accounting/ ajp://127.0.0.1:8009/accounting/
>>>> ProxyPass /crmsfa/ ajp://127.0.0.1:8009/crmsfa/
>>>> ProxyPass /content/ ajp://127.0.0.1:8009/ecommerce/
>>>> ProxyPass /facility/ ajp://127.0.0.1:8009/facility/
>>>> ProxyPass /partymgr/ ajp://127.0.0.1:8009/partymgr/
>>>> ProxyPass /financials/ ajp://127.0.0.1:8009/financials/
>>>> ProxyPass /googlecheckout/ ajp://127.0.0.1:8009/googlecheckout/
>>>> ProxyPass /googlebase/ ajp://127.0.0.1:8009/googlebase/
>>>> ProxyPass /humanres/ ajp://127.0.0.1:8009/humanres/
>>>> ProxyPass /manufacturing/ ajp://127.0.0.1:8009/manufacturing/
>>>> ProxyPass /marketing/ ajp://127.0.0.1:8009/marketing/
>>>> ProxyPass /microsoftlive/ ajp://127.0.0.1:8009/microsoftlive/
>>>> ProxyPass /fedex/ ajp://127.0.0.1:8009/fedex/
>>>> ProxyPass /oagis/ ajp://127.0.0.1:8009/oagis/
>>>> ProxyPass /ordermgr/ ajp://127.0.0.1:8009/ordermgr/
>>>>
>>>>
>>>>
>>>> Please help.
>>>>
>>>> Thanks,
>>>>
>>>> Rohit
>>>>
>>>>
>>>>        
>>>      
>>    
>
>  
Reply | Threaded
Open this post in threaded view
|

Re: Login/session error in ecommerce application when used with AJP and SSL

rajsaini
Somehow giving the context name after / does not work without
<Location>. Proxy documentation says it should work but I could not make
it work in any way. For individual application try something like this:

  <Location /xplanner/>
       proxyPass ajp://localhost:8010/xplanner/
       RewriteEngine On
       RewriteRule ^/(images/.+);jsessionid=\w+$ /$1
  </Location>

Xplanner is just a example. Replace it with your context name.

Thanks,

Raj

rohit2006 wrote:

> Thanks so much Raj, you really have bought me out of much misery.
>
> The line ProxyPass / ajp://127.0.0.1:8009/
>
> did the trick, i guess doing ProxyPass /ecommerce/
> ajp://127.0.0.1:8009/ecommerce/, for each application individually caused
> the error and for SSL support in ecommerce "ProxyPass /ecommerce/
> ajp://127.0.0.1:8009/ecommerce/ " alone is not sufficient.
>
> i did not make any change to "port.https.enabled", i guess this may then we
> left as it is.
>
> Anyways thanks a lot, i really appreciate it.
>
> Rohit
>
>
>
> Raj Saini wrote:
>  
>> Rohit,
>>
>> Try these changes to test. You may further fine tune them.
>>
>> Make port.https.enabled to false as I don't thing you want complete
>> application to be served through HTTPS other than login/checkout.
>> Login/Checkout is OOTB enabled to handle the https.
>>
>> I have exactly the same configuration you have except the https and
>> ProxyPass as given below:
>>
>> ProxyPass / ajp://127.0.0.1:8009/
>>
>> Thanks,
>>
>> Raj
>>
>>
>> rohit2006 wrote:
>>    
>>> Hi,
>>>
>>> Has anyone encountered similar issue. I will really appreciate some
>>> assistance on this.
>>>
>>> Thanks,
>>>
>>>
>>>
>>> rohit2006 wrote:
>>>  
>>>      
>>>> My URL.properties file looks like this
>>>>
>>>> # OFBiz Global URL Settings - WebSite specific settings found in WebSite
>>>> entity
>>>> ####
>>>>
>>>> # HTTPS Port (Secure port)
>>>> port.https.enabled=Y
>>>> port.https=
>>>> force.https.host=
>>>>
>>>> # HTTP Port (Not Secure port)
>>>> port.http=
>>>> force.http.host=
>>>>
>>>> # Static Content URLs to make it easy to move the serving load for
>>>> static
>>>> content to other machines
>>>> # -- thse are for general content such as images, js & css files, or
>>>> non-dynamic HTML files
>>>> content.url.prefix.secure=
>>>> content.url.prefix.standard=
>>>>
>>>> in the website content i have the following entries:
>>>>
>>>> http host: www.example.com
>>>> http port:
>>>>
>>>> https host: www.example.com
>>>> https port:
>>>>
>>>> enable https: yes.
>>>>
>>>> I have read the link but could not figure out, where i made the mistake.
>>>> Can you give an example of how these settings should look like.
>>>>
>>>> thanks
>>>>
>>>> Rohit
>>>>
>>>>
>>>>
>>>>
>>>> David E Jones wrote:
>>>>    
>>>>        
>>>>> Check out:
>>>>>
>>>>> http://docs.ofbiz.org/display/OFBTECH/Apache+OFBiz+Technical+Production+Setup+Guide
>>>>>
>>>>> ... especially the section about url.properties and related stuff.
>>>>>
>>>>> -David
>>>>>
>>>>>
>>>>> rohit2006 wrote:
>>>>>      
>>>>>          
>>>>>> Hi,
>>>>>>
>>>>>> i am trying to configure my server will a ssl and am using AJP
>>>>>> connector.
>>>>>>
>>>>>> I am having a serious problem which i am unable to figure out.
>>>>>>
>>>>>> When i use https://www.example.com/catalog/control/main the site works
>>>>>> perfectly and there is not login error.
>>>>>>
>>>>>> I am asked to login indefinite times, when i try to checkout in the
>>>>>> ecommerce application with the URL
>>>>>> https://www.example.com/ecommerce/control/main
>>>>>>
>>>>>> It seems there is a session problem whenever i move from http to https
>>>>>> and
>>>>>> vice-versa. in the visits section of party application in the admin
>>>>>> side, i
>>>>>> find new visit entries created everytime i browse from https:// to
>>>>>> http://
>>>>>> and vice-versa.
>>>>>>
>>>>>> But this problem is not seen in
>>>>>> https://www.example.com/catalog/control/main, perhaps because i am in
>>>>>> ssl
>>>>>> more all the time.
>>>>>>
>>>>>> Am i missing something, i have configured apache as follows:
>>>>>>
>>>>>>
>>>>>> ProxyPass /ecommerce/ ajp://127.0.0.1:8009/ecommerce/
>>>>>> ProxyPass /googlecheckout/ ajp://127.0.0.1:8009/googlecheckout/
>>>>>> ProxyPass /images/ ajp://127.0.0.1:8009/images/
>>>>>> ProxyPass /catalog/ ajp://127.0.0.1:8009/catalog/
>>>>>> ProxyPass /accounting/ ajp://127.0.0.1:8009/accounting/
>>>>>> ProxyPass /crmsfa/ ajp://127.0.0.1:8009/crmsfa/
>>>>>> ProxyPass /content/ ajp://127.0.0.1:8009/ecommerce/
>>>>>> ProxyPass /facility/ ajp://127.0.0.1:8009/facility/
>>>>>> ProxyPass /partymgr/ ajp://127.0.0.1:8009/partymgr/
>>>>>> ProxyPass /financials/ ajp://127.0.0.1:8009/financials/
>>>>>> ProxyPass /googlecheckout/ ajp://127.0.0.1:8009/googlecheckout/
>>>>>> ProxyPass /googlebase/ ajp://127.0.0.1:8009/googlebase/
>>>>>> ProxyPass /humanres/ ajp://127.0.0.1:8009/humanres/
>>>>>> ProxyPass /manufacturing/ ajp://127.0.0.1:8009/manufacturing/
>>>>>> ProxyPass /marketing/ ajp://127.0.0.1:8009/marketing/
>>>>>> ProxyPass /microsoftlive/ ajp://127.0.0.1:8009/microsoftlive/
>>>>>> ProxyPass /fedex/ ajp://127.0.0.1:8009/fedex/
>>>>>> ProxyPass /oagis/ ajp://127.0.0.1:8009/oagis/
>>>>>> ProxyPass /ordermgr/ ajp://127.0.0.1:8009/ordermgr/
>>>>>>
>>>>>>
>>>>>>
>>>>>> Please help.
>>>>>>
>>>>>> Thanks,
>>>>>>
>>>>>> Rohit
>>>>>>
>>>>>>
>>>>>>        
>>>>>>            
>>>>>      
>>>>>          
>>>>    
>>>>        
>>>  
>>>      
>>
>>    
>
>  

Reply | Threaded
Open this post in threaded view
|

Re: Login/session error in ecommerce application when used with AJP and SSL

BJ Freeman
bump this up.

Raj Saini sent the following on 8/17/2007 12:22 AM:

> Somehow giving the context name after / does not work without
> <Location>. Proxy documentation says it should work but I could not make
> it work in any way. For individual application try something like this:
>
>  <Location /xplanner/>
>       proxyPass ajp://localhost:8010/xplanner/
>       RewriteEngine On
>       RewriteRule ^/(images/.+);jsessionid=\w+$ /$1
>  </Location>
>
> Xplanner is just a example. Replace it with your context name.
>
> Thanks,
>
> Raj
>
> rohit2006 wrote:
>> Thanks so much Raj, you really have bought me out of much misery.
>>
>> The line ProxyPass / ajp://127.0.0.1:8009/
>>
>> did the trick, i guess doing ProxyPass /ecommerce/
>> ajp://127.0.0.1:8009/ecommerce/, for each application individually caused
>> the error and for SSL support in ecommerce "ProxyPass /ecommerce/
>> ajp://127.0.0.1:8009/ecommerce/ " alone is not sufficient.
>>
>> i did not make any change to "port.https.enabled", i guess this may
>> then we
>> left as it is.
>>
>> Anyways thanks a lot, i really appreciate it.
>>
>> Rohit
>>
>>
>>
>> Raj Saini wrote:
>>  
>>> Rohit,
>>>
>>> Try these changes to test. You may further fine tune them.
>>>
>>> Make port.https.enabled to false as I don't thing you want complete
>>> application to be served through HTTPS other than login/checkout.
>>> Login/Checkout is OOTB enabled to handle the https.
>>>
>>> I have exactly the same configuration you have except the https and
>>> ProxyPass as given below:
>>>
>>> ProxyPass / ajp://127.0.0.1:8009/
>>>
>>> Thanks,
>>>
>>> Raj
>>>
>>>
>>> rohit2006 wrote:
>>>    
>>>> Hi,
>>>>
>>>> Has anyone encountered similar issue. I will really appreciate some
>>>> assistance on this.
>>>>
>>>> Thanks,
>>>>
>>>>
>>>>
>>>> rohit2006 wrote:
>>>>        
>>>>> My URL.properties file looks like this
>>>>>
>>>>> # OFBiz Global URL Settings - WebSite specific settings found in
>>>>> WebSite
>>>>> entity
>>>>> ####
>>>>>
>>>>> # HTTPS Port (Secure port)
>>>>> port.https.enabled=Y
>>>>> port.https=
>>>>> force.https.host=
>>>>>
>>>>> # HTTP Port (Not Secure port)
>>>>> port.http=
>>>>> force.http.host=
>>>>>
>>>>> # Static Content URLs to make it easy to move the serving load for
>>>>> static
>>>>> content to other machines
>>>>> # -- thse are for general content such as images, js & css files, or
>>>>> non-dynamic HTML files
>>>>> content.url.prefix.secure=
>>>>> content.url.prefix.standard=
>>>>>
>>>>> in the website content i have the following entries:
>>>>>
>>>>> http host: www.example.com
>>>>> http port:
>>>>>
>>>>> https host: www.example.com
>>>>> https port:
>>>>>
>>>>> enable https: yes.
>>>>>
>>>>> I have read the link but could not figure out, where i made the
>>>>> mistake.
>>>>> Can you give an example of how these settings should look like.
>>>>>
>>>>> thanks
>>>>>
>>>>> Rohit
>>>>>
>>>>>
>>>>>
>>>>>
>>>>> David E Jones wrote:
>>>>>            
>>>>>> Check out:
>>>>>>
>>>>>> http://docs.ofbiz.org/display/OFBTECH/Apache+OFBiz+Technical+Production+Setup+Guide
>>>>>>
>>>>>>
>>>>>> ... especially the section about url.properties and related stuff.
>>>>>>
>>>>>> -David
>>>>>>
>>>>>>
>>>>>> rohit2006 wrote:
>>>>>>                
>>>>>>> Hi,
>>>>>>>
>>>>>>> i am trying to configure my server will a ssl and am using AJP
>>>>>>> connector.
>>>>>>>
>>>>>>> I am having a serious problem which i am unable to figure out.
>>>>>>>
>>>>>>> When i use https://www.example.com/catalog/control/main the site
>>>>>>> works
>>>>>>> perfectly and there is not login error.
>>>>>>>
>>>>>>> I am asked to login indefinite times, when i try to checkout in the
>>>>>>> ecommerce application with the URL
>>>>>>> https://www.example.com/ecommerce/control/main
>>>>>>>
>>>>>>> It seems there is a session problem whenever i move from http to
>>>>>>> https
>>>>>>> and
>>>>>>> vice-versa. in the visits section of party application in the admin
>>>>>>> side, i
>>>>>>> find new visit entries created everytime i browse from https:// to
>>>>>>> http://
>>>>>>> and vice-versa.
>>>>>>>
>>>>>>> But this problem is not seen in
>>>>>>> https://www.example.com/catalog/control/main, perhaps because i
>>>>>>> am in
>>>>>>> ssl
>>>>>>> more all the time.
>>>>>>>
>>>>>>> Am i missing something, i have configured apache as follows:
>>>>>>>
>>>>>>>
>>>>>>> ProxyPass /ecommerce/ ajp://127.0.0.1:8009/ecommerce/
>>>>>>> ProxyPass /googlecheckout/ ajp://127.0.0.1:8009/googlecheckout/
>>>>>>> ProxyPass /images/ ajp://127.0.0.1:8009/images/
>>>>>>> ProxyPass /catalog/ ajp://127.0.0.1:8009/catalog/
>>>>>>> ProxyPass /accounting/ ajp://127.0.0.1:8009/accounting/
>>>>>>> ProxyPass /crmsfa/ ajp://127.0.0.1:8009/crmsfa/
>>>>>>> ProxyPass /content/ ajp://127.0.0.1:8009/ecommerce/
>>>>>>> ProxyPass /facility/ ajp://127.0.0.1:8009/facility/
>>>>>>> ProxyPass /partymgr/ ajp://127.0.0.1:8009/partymgr/
>>>>>>> ProxyPass /financials/ ajp://127.0.0.1:8009/financials/
>>>>>>> ProxyPass /googlecheckout/ ajp://127.0.0.1:8009/googlecheckout/
>>>>>>> ProxyPass /googlebase/ ajp://127.0.0.1:8009/googlebase/
>>>>>>> ProxyPass /humanres/ ajp://127.0.0.1:8009/humanres/
>>>>>>> ProxyPass /manufacturing/ ajp://127.0.0.1:8009/manufacturing/
>>>>>>> ProxyPass /marketing/ ajp://127.0.0.1:8009/marketing/
>>>>>>> ProxyPass /microsoftlive/ ajp://127.0.0.1:8009/microsoftlive/
>>>>>>> ProxyPass /fedex/ ajp://127.0.0.1:8009/fedex/
>>>>>>> ProxyPass /oagis/ ajp://127.0.0.1:8009/oagis/
>>>>>>> ProxyPass /ordermgr/ ajp://127.0.0.1:8009/ordermgr/
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>> Please help.
>>>>>>>
>>>>>>> Thanks,
>>>>>>>
>>>>>>> Rohit
>>>>>>>
>>>>>>>
>>>>>>>                    
>>>>>>                
>>>>>            
>>>>        
>>>
>>>    
>>
>>  
>
>
>
>

Reply | Threaded
Open this post in threaded view
|

Re: Login/session error in ecommerce application when used with AJP and SSL

BJ Freeman
In reply to this post by David E Jones
From David

David E Jones sent the following on 8/15/2007 4:34 AM:

>
> Check out:
>
> http://docs.ofbiz.org/display/OFBTECH/Apache+OFBiz+Technical+Production+Setup+Guide
>
>
> ... especially the section about url.properties and related stuff.
>
> -David
>
>
> rohit2006 wrote:
>> Hi,
>>
>> i am trying to configure my server will a ssl and am using AJP connector.
>>
>> I am having a serious problem which i am unable to figure out.
>>
>> When i use https://www.example.com/catalog/control/main the site works
>> perfectly and there is not login error.
>>
>> I am asked to login indefinite times, when i try to checkout in the
>> ecommerce application with the URL
>> https://www.example.com/ecommerce/control/main
>>
>> It seems there is a session problem whenever i move from http to https
>> and
>> vice-versa. in the visits section of party application in the admin
>> side, i
>> find new visit entries created everytime i browse from https:// to
>> http://
>> and vice-versa.
>>
>> But this problem is not seen in
>> https://www.example.com/catalog/control/main, perhaps because i am in ssl
>> more all the time.
>>
>> Am i missing something, i have configured apache as follows:
>>
>>
>> ProxyPass /ecommerce/ ajp://127.0.0.1:8009/ecommerce/
>> ProxyPass /googlecheckout/ ajp://127.0.0.1:8009/googlecheckout/
>> ProxyPass /images/ ajp://127.0.0.1:8009/images/
>> ProxyPass /catalog/ ajp://127.0.0.1:8009/catalog/
>> ProxyPass /accounting/ ajp://127.0.0.1:8009/accounting/
>> ProxyPass /crmsfa/ ajp://127.0.0.1:8009/crmsfa/
>> ProxyPass /content/ ajp://127.0.0.1:8009/ecommerce/
>> ProxyPass /facility/ ajp://127.0.0.1:8009/facility/
>> ProxyPass /partymgr/ ajp://127.0.0.1:8009/partymgr/
>> ProxyPass /financials/ ajp://127.0.0.1:8009/financials/
>> ProxyPass /googlecheckout/ ajp://127.0.0.1:8009/googlecheckout/
>> ProxyPass /googlebase/ ajp://127.0.0.1:8009/googlebase/
>> ProxyPass /humanres/ ajp://127.0.0.1:8009/humanres/
>> ProxyPass /manufacturing/ ajp://127.0.0.1:8009/manufacturing/
>> ProxyPass /marketing/ ajp://127.0.0.1:8009/marketing/
>> ProxyPass /microsoftlive/ ajp://127.0.0.1:8009/microsoftlive/
>> ProxyPass /fedex/ ajp://127.0.0.1:8009/fedex/
>> ProxyPass /oagis/ ajp://127.0.0.1:8009/oagis/
>> ProxyPass /ordermgr/ ajp://127.0.0.1:8009/ordermgr/
>>
>>
>>
>> Please help.
>>
>> Thanks,
>>
>> Rohit
>>
>>
>
>
>