Changes between Version 20 and Version 21 of Internal/LoginService

Timestamp:

Jun 28, 2011, 5:46:42 PM (13 years ago)

Author:

seskar

Comment:

—

Internal/LoginService

@@ -92 +92 @@
  === Apache configuration ===
 
-In order to use proxy you will have to install apache's proxy package and enable it.[[BR]]
+The assumption is that user facing services are supported with Apache WEB server (and possibly on a separate machine). In order to make login AM pages available on the outside, Apache proxy service will be used. In order to use proxy you will have to install apache's proxy package and enable it.
 
 {{{
@@ -100 +100 @@
 }}}
 
+Also, the assumption is that the access to all pages requiring user credentials is protected with ssl so we need to enable the ssl module 
 
 {{{
@@ -105 +106 @@
 }}}
 
-/etc/apache2/sites-available/default
-
-!ServerName <server_name>
-
-!ProxyPass /status/orbit "http://<host>:<port>/public_html/"
-
-!ProxyPass /userManagement "http://<host>:<port>/login/userManagement"
-
+We need to configure all the proxy URLs in the open  (i.e. in /etc/apache2/sites-available/default)
+
+In the following we are assuming that <host> is the internal hostname or IP address of the machine running the login AM, and <port> is the IP port on which the service is running (default is 5052 for OMF 5.2 services). For example, forn internal IP 172.16.250.7 and port 5025 the <host>:<port> would be: 172.16.250.7:5052.
+
+{{{
+ServerName <server_name>
+...
+
+  ProxyPass /status "http://<host>:<port>/public_html/"
+  <Location /status>
+    Order allow,deny
+    Allow from all
+  </Location>
+
+  ProxyPass /userManagement "http://<host>:<port>/login/userManagement"
+  <Location /userManagement>
+    Order allow,deny
+    Allow from all
+  </Location>
+...
+}}}
 
 Note: If you change baseURL and publicURL in login.yaml it is necessary to change corresponding values in apache default file.
 
-/etc/apache2/sites-available/default-ssl
-
- !ProxyPass /schedule/ http://<host>:<port>/login/ShowScheduler
-
- !ProxyPass /loginService/ http://<host>:<port>/login/
-
-        <Proxy http://<host>:5052/login/*>
-
-          !AllowOverride None
-
-          order allow,deny
-
-          allow from all
-
-        </Proxy>
+For SSL services (in /etc/apache2/sites-available/default-ssl) we need:
+
+{{{
+...
+  ProxyPass /schedule/  "http://172.16.250.7:5052/login/ShowScheduler"
+  <Location /schedule>
+    Order allow,deny
+    Allow from all
+  </Location>
+
+  ProxyPass /loginService/  http://172.16.250.7:5052/login/
+  <Location  /loginService>
+     AllowOverride None
+     order allow,deny
+     allow from all
+  </Location>
+  <Proxy http://<host>:5052/login/*>
+     AllowOverride None
+     order allow,deny
+     allow from all
+   </Proxy>
+...
+}}}
        
- === Database ===
+=== Scheduler Database ===
+
 To create database run login.sql script file which is attached to this page. Resources table need to be fill out with data manually.
 
- === Example: ===
-INSERT into resources (machid,name,location,rphone,notes,minRes,maxRes) VALUES
-('sc1431b400c5f130', 'grid', 'Orbit Facility', '(732) 932-6857', 'Main 400 node grid,30,120)
+For example:
+
+{{{
+#> mysql -p -u omf
+Enter password: 
+mysql> use newScheduler;
+mysql> INSERT into resources (machid,name,location,rphone,notes,minRes,maxRes) VALUES ('sc1431b400c5f130', 'grid', 'Orbit Facility', '(732) 932-6857', 'Main 400 node grid',30,120);
+mysql> select * from resources;
++------------------+------+----------------+----------------+--------------------+--------+--------+--------+------------+----------+-------------+
+| machid           | name | location       | rphone         | notes              | status | minRes | maxRes | autoAssign | approval | allow_multi |
++------------------+------+----------------+----------------+--------------------+--------+--------+--------+------------+----------+-------------+
+| sc1431b400c5f130 | grid | Orbit Facility | (732) 932-6857 | Main 400 node grid | a      |     30 |    120 |       NULL |     NULL |        NULL |
++------------------+------+----------------+----------------+--------------------+--------+--------+--------+------------+----------+-------------+
+1 row in set (0.00 sec)
+
+mysql> quit
+Bye
+#>
+}}}
+
+Here:
+
  * machid – unique resource identifier 
  * name – resource name