Since you are on IIS you could use Server Side ASP to do the
re-direction.  Then it wouldn't matter what browser was used. 

-----Original Message-----
From: Action Request System discussion list(ARSList)
[mailto:[EMAIL PROTECTED] On Behalf Of Heider, Stephen
Sent: Monday, May 01, 2006 2:54 PM
To: [email protected]
Subject: Re: Redirect http to https RESOLVED

Brian,

I made a copy of the default "C:\WINDOWS\help\iisHelp\common\403-4.htm"
and added this text just after the <HEAD> tag, then changed the custom
error for 403.4 to point to this new file.

<SCRIPT LANGUAGE="JavaScript"> 
    if (location.protocol != 'https:'){ 
         window.location= 'https://' + location.host + location.pathname
+ location.search
    } 
    </SCRIPT> 

The redirect does not work on a BlackBerry (even though Javascript is
enabled). This is not a problem because the URLs users go to on the
BlackBerry are constructed from workflow, so they never manually type
the address anyway.

Thank you.

Stephen


-----Original Message-----
From: Action Request System discussion list(ARSList)
[mailto:[EMAIL PROTECTED] On Behalf Of Luke, Brian
Sent: Monday, May 01, 2006 3:35 PM
To: [email protected]
Subject: Re: Redirect http to https

If you control the entry point, you can redirect via a META tag there.
It sounds as if you can't guarantee that all users will come through a
specific or even limited set of entry points.  

The solution in the article uses customized web server error pages to
redirect - not a bad idea if you can get it to work.  Try customizing
the error page for the 403 error itself.

I take it you saw some of the tweaks/settings changes needed to make it
work further down in the comments.

-Brian

META tag redirect page example:
<html><head>
<title>Remedy on the Schweb</title>
<META HTTP-EQUIV="refresh" content="0;URL=https://hostname/arsys/home";>
</head>
<body>
If you are not automatically redirected, go to <a
href="https://hostname/arsys/home";>/arsys/home</a><br>
</body>
</html>



-----Original Message-----
From: Action Request System discussion list(ARSList)
[mailto:[EMAIL PROTECTED] On Behalf Of Heider, Stephen
Sent: Monday, May 01, 2006 11:44 AM
To: [email protected]
Subject: OT: Redirect http to https

We are about to implement SSL for Mid-Tier.  I would like to have all
http:// URLs entered to be redirected to https:// automatically, without
forcing users to type in https://.  I have searched for redirect scripts
and tried a couple, but I still receive the "You are not authorized to
view this page" error 403 page when going to an http:// address.

I tried the 2 examples from this thread:
http://blog.opsan.com/archive/2005/04/17/395.aspx.

I must have missed some setting.  I don't believe it is ARS-specific
because I get the same error with a simple web page, for example:

<html>
<head>
</head>
<body>
test
</body>
</html>

ARS 6.3
Mid-Tier 6.3
Windows Server 2003
IIS 6 (anonymous access disabled, Integrated Windows Authentication
enabled, Require Secure Channel (SSL) enabled, Allow ASP pages enabled)

Thanks. 

Stephen

________________________________________________________________________
_______
UNSUBSCRIBE or access ARSlist Archives at http://www.wwrug.org

________________________________________________________________________
_______
UNSUBSCRIBE or access ARSlist Archives at http://www.wwrug.org

________________________________________________________________________
_______
UNSUBSCRIBE or access ARSlist Archives at http://www.wwrug.org

_______________________________________________________________________________
UNSUBSCRIBE or access ARSlist Archives at http://www.wwrug.org

Reply via email to