Moin Christian,
I think this worked in the past, and got broken in the last 2 weeks or so :(
my configuration:
Alias /SOGo.woa/WebServerResources/ \
/usr/lib/GNUstep/SOGo/WebServerResources/
Alias /SOGo/WebServerResources/ \
/usr/lib/GNUstep/SOGo/WebServerResources/
AllowOverride None
Order deny,allow
Allow from all
= 2.4>
Require all granted
# Explicitly allow caching of static content to avoid browser
specific behavior.
# A resource's URL MUST change in order to have the client load the
new version.
ExpiresActive On
ExpiresDefault "access plus 1 year"
## Uncomment the following to enable proxy-side authentication, you will
then
## need to set the "SOGoTrustProxyAuthentication" SOGo user default to
YES and
## adjust the "x-webobjects-remote-user" proxy header in the "Proxy" section
## below.
#
## For full proxy-side authentication:
#
# AuthType XXX
# Require valid-user
# SetEnv proxy-nokeepalive 1
# Allow from all
#
#
## For proxy-side authentication only for CardDAV and GroupDAV from external
## clients:
#
# AuthType XXX
# Require valid-user
# SetEnv proxy-nokeepalive 1
# Allow from all
#
ProxyRequests Off
SetEnv proxy-nokeepalive 1
ProxyPreserveHost On
# When using CAS, you should uncomment this and install
cas-proxy-validate.py
# in /usr/lib/cgi-bin to reduce server overloading
#
# ProxyPass /SOGo/casProxy http://localhost/cgi-bin/cas-proxy-validate.py
# http://localhost/app/cas-proxy-validate.py>
# Order deny,allow
# Allow from your-cas-host-addr
#
# Enable to use Microsoft ActiveSync support
# Note that you MUST have many sogod workers to use ActiveSync.
# See the SOGo Installation and Configuration guide for more details.
#
#ProxyPass /Microsoft-Server-ActiveSync \
# http://127.0.0.1:2/SOGo/Microsoft-Server-ActiveSync \
# retry=60 connectiontimeout=5 timeout=360
ProxyPass /SOGo http://127.0.0.1:2/SOGo retry=0
http://127.0.0.1:2/SOGo>
## adjust the following to your configuration
## and do not forget to enable the headers module
RequestHeader set "x-webobjects-server-port" "443"
RequestHeader set "x-webobjects-server-name" "%{HTTP_HOST}e" env=HTTP_HOST
RequestHeader set "x-webobjects-server-url" "https://%{HTTP_HOST}e;
env=HTTP_HOST
## When using proxy-side autentication, you need to uncomment and
## adjust the following line:
RequestHeader unset "x-webobjects-remote-user"
# RequestHeader set "x-webobjects-remote-user" "%{REMOTE_USER}e"
env=REMOTE_USER
RequestHeader set "x-webobjects-server-protocol" "HTTP/1.0"
AddDefaultCharset UTF-8
Order allow,deny
Allow from all
# For Apple autoconfiguration
RewriteEngine On
RewriteRule ^/.well-known/caldav/?$ /SOGo/dav [R=301]
RewriteRule ^/.well-known/carddav/?$ /SOGo/dav [R=301]
Gerhard Recher
Leitenweg 6
86929 Penzing
0171 4802507
Am 19.02.2018 um 09:56 schrieb Christian Mack
(christian.m...@uni-konstanz.de):
> Hello
>
> Am 18.02.2018 um 11:58 schrieb "Gerhard W. Recher (privat)"
> (gerh...@recher.de):
>> server is completly on https, but "links to" are http bug or feature ?
>>
> Misconfiguration ;-)
>
> Check your apache or nginx configuration.
> You have to specify x-webobjects-server-url with https protocol.
>
>
> Kind regards,
> Christian Mack
>
smime.p7s
Description: S/MIME Cryptographic Signature
