Re: securing login page on reviewboard

2010-03-02 Thread Christian Hammond
Hi, The only thing I could think to recommend is adding some RewriteRules to your Apache configuration. For the http version of the site, redirect the login page to the https version. On the https version, have a RewriteRule stating that any page other than the login page redirects back to the

Re: securing login page on reviewboard

2010-03-02 Thread Ravi Kondamuru
thanks Christian. I have nginx proxying connection to apache. I have written Rewrite rules on nginx to do what you have suggested and it works as expected. I see that there are two urls's where login info is asked for: /account/login(.*) and /admin/db(.*)\ thanks, Ravi. On Tue, Mar 2, 2010 at

Re: securing login page on reviewboard

2010-03-02 Thread Christian Hammond
Excellent, glad it works :) Christian -- Christian Hammond - chip...@chipx86.com Review Board - http://www.reviewboard.org VMware, Inc. - http://www.vmware.com On Tue, Mar 2, 2010 at 2:23 PM, Ravi Kondamuru arkay.al...@gmail.comwrote: thanks Christian. I have nginx proxying connection to

Re: securing login page on reviewboard

2010-03-01 Thread Ravi Kondamuru
Hi Christian, I somehow missed your response. The reason I want to do this is because, I am using Active Directory based authentication. The requirement is that during login process, username/passwd are not transmitted as clear text. I have enabled my server to process SSL requests. But it is not