search

wolfd / pwm

PWM is an open source password self service application for LDAP directories. - exported from code.google.com/p/pwm
http://pwmdemo.weisberg.net/
0 stars 1 forks source link

Enabling SSL + Tomcat 7 + IIS 7 #536

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago 
What steps will reproduce the problem?
1. Deploy with Tomcat 7 + IIS 7

2.Enable SSL on PWM Config, Enable SSL on Tomcat using 
http://tomcat.apache.org/tomcat-5.5-doc/ssl-howto.html

What is the expected output? What do you see instead?
http://puu.sh/6SgLk.jpg

Expecting to be able to login to the HTTPS site, receive "5044 
ERROR_SECURE_REQUEST_REQUIRED" error above

What version of PWM are you using?
1.7

What ldap directory and version are you using?
MS AD 2k8r2

Please paste any error log messages below:
5044 ERROR_SECURE_REQUEST_REQUIRED

Knowing tomcat I probably haven't configured something correctly for HTTPS, but 
a second set of eyes will be greatly appreciated!

Original issue reported on code.google.com by nickmbec...@gmail.com on 11 Feb 2014 at 6:52

GoogleCodeExporter commented 9 years ago 
PWM expects an HTTPS connection, if configured to enforce SSL. I suspect that 
IIS 7 forwards the request using plain HTTP to port 80 or 8080. If IIS handles 
SSL, you do not need to enforce SSL on PWM. 

When using Apache and mod_proxy_ajp or mod_jk you could forward the request 
using the AJP protocol, which will include information telling Tomcat that the 
connection is encrypted.

This is not a bug, so please discuss this issue on the mailing list. That will 
allow others, who do not read the bug list, to participate and comment.

Original comment by menno.pi...@gmail.com on 11 Feb 2014 at 9:07

GoogleCodeExporter commented 9 years ago 
How come if not using apache httd just the tomcat war ...how achieve https?

Original comment by barry...@gmail.com on 21 Mar 2014 at 5:53