SmartDataAnalytics / OpenResearch

Public issue system for OPENRESEARCH/ConfIDent
8 stars 3 forks source link

How to use MediaWiki 1.35 in security enforced server setup with path #140

Closed WolfgangFahl closed 2 years ago

WolfgangFahl commented 3 years ago

This problem shows up on TIB and RWTH i5 since both use a firewall with path based redirection.

see https://phabricator.wikimedia.org/T271783 for the effect.

Life would be much easier in true internet based servers with proper DNS based virtual name hosts as major internet service providers offer.

Currently we only have an ugly workaround with port based redirection that is maintainance intensive and very hard to document and understand.

WolfgangFahl commented 3 years ago

This would be a showstopper if we wouldn't apply the workaround. The speed of implementation is harmed since quite a few automated tools brake in this unusual setup. It's also awkward to explain that a trailing slash is needed for URLs for these to work.

Worse even currently only full urls like https://confident.dbis.rwth-aachen.de/ori5/index.php?title=Main_Page work but not the short urls:

The solution ori5.confident.dbis.rwth-aachen.de is not working since a wildcard certificate would be needed to get this working an the DNS to be setup. Same on the TIB side e.g. when using

WolfgangFahl commented 2 years ago

workarounds are in place