[ 
http://jira.dspace.org/jira/browse/DS-503?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=11308#action_11308
 ] 

Mark Diggory commented on DS-503:
---------------------------------

Hilton,

It is advised that you use security constraints and/or redirection to https by 
a combination of HTTPD and mod_proxy_ajp.

You shouldn't need to modify Navigation, the XMLUI does support a force https 
property in its configuration that will redirect any authenticated and 
authenticating users to stay in https.

However, if there are any recommendations that you can make that will simplify 
the configuration of secure pages. Please provide feedback here.



> Create the ability to use a secure "loginURL" using the adminstrative web 
> interface.
> ------------------------------------------------------------------------------------
>
>                 Key: DS-503
>                 URL: http://jira.dspace.org/jira/browse/DS-503
>             Project: DSpace 1.x
>          Issue Type: Improvement
>          Components: JSPUI, XMLUI
>    Affects Versions: 1.5.2
>         Environment: Ubuntu 8.04 LTS
>            Reporter: Hilton Gibson
>            Assignee: Mark Diggory
>   Original Estimate: 1 week
>  Remaining Estimate: 1 week
>
> Please create the ability to select a secure "loginURL" without have to 
> modify "Navigation.java" directly. This should be possible through the web 
> admin interface. This would greatly enhance the security of logins. A check 
> should first be done to ensure the secure "https://"; connection works and is 
> validated by a security authority such as Verisign. If not then the user 
> should redirected to a help page on the DSpace wiki.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: 
http://jira.dspace.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

------------------------------------------------------------------------------
Download Intel® Parallel Studio Eval
Try the new software tools for yourself. Speed compiling, find bugs
proactively, and fine-tune applications for parallel performance.
See why Intel Parallel Studio got high marks during beta.
http://p.sf.net/sfu/intel-sw-dev
_______________________________________________
Dspace-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/dspace-devel

Reply via email to