Apache-AppSamurai
view release on metacpan or search on metacpan
examples/conf/appsamurai-owa.conf view on Meta::CPAN
# appsamurai-owa.conf - Partial Apache configuration for AppSamurai
# reverse proxy front end for Outlook Web Access
# $Id: appsamurai-owa.conf,v 1.10 2007/09/29 23:22:15 pauldoom Exp $
# This example should be customized for your environment and either
# added to your existing httpd.conf, or included into it.
#
# All items that must be configured are surrounded by __, like
# "__OWA_SERVER_FQDN__" You may use the "confconfer.pl" script under
# examples/conf in the AppSamurai distribution to interactively enter these
# fields, or just use good ol' search and replace.
# IMPORTANT: Your Exchange Outlook Web Access/ActiveSync server (referred to
# simply as "OWA server" below), must be properly configured for this to work!
# In addition, DNS and a properly laid out security perimeter are required.
# Finally, PLEASE do not deploy this system without some sort of strong
# authentication component for AppSamurai to use!
#
# For your OWA server:
# 1) SSL must be enabled and required on the OWA server. (A self-signed or
# internal CA signed certificate is fine.)
# 2) You must have an internal DNS or hosts file entry pointing
# the FQDN of your server to its real IP address inside your network.
# 3) Basic Authentication must be configured (Form based login breaks
# ActiveSync. This config is for a Basic Auth backend only.)
# 4) You should be able to use OWA (https://servername.domain/exchange/)
# from inside your network.
# 5) You should be able to use ActiveSync with a device attached to your
# internal network. (Microsoft's Windows Mobile emulator is helpful
# for testing.)
#
# For your AppSamurai server:
# 1) You must have a SSL certificate signed by a trusted CA.
# 2) You must have an EXTERNAL DNS entry pointing the FQDN of your OWA
# server to the external IP (or NAT IP) your AppSamurai proxy will be
# available from.
# 3) You must configure (at least one) SSL enabled VirtualHost section
# 4) You must enable Rewrite and pull in global Rewrite rules inside your
# VirtualHost section (See last section of this file for sample)
#
# On your firewall:
# 1) Open up access to port 443 on your AppSamurai proxy
# 2) Open access from your AppSamurai server's real IP to port 443 of your
# OWA server
# 3) Open access from your AppSamurai server's real IP to any authentication
# services it will be using.
#
# Reference:
# * http://3cx.org/item/38 - Very helpful HowTo on setting up Apache to proxy
# OWA. (This is only for reference: All the directives you need should
# already be in this configuration example.)
# * I would point to a good doc on setting up OWA and ActiveSync, but I can't
# recommend any. Search technet.microsoft.com and Google as needed.
# This is a Apache1/mod_perl1 - Apache2/mod_perl2 dual configuration.
# Thanks to some silly nesting rules in Apache2, some <Directory> and
# <Proxy> sections are duplicated. Pay close attention to <IfDefine>
# sections for your version of mod_perl (!MODPERL2 for mod_perl 1 and
# MODPERL2 for mod_perl 2)
# The following modules are required for this setup:
#LoadModule rewrite_module /usr/lib/apache/modules/mod_rewrite.so
#LoadModule proxy_module /usr/lib/apache/modules/libproxy.so
#LoadModule perl_module /usr/lib/apache/modules/mod_perl.so
# Load the main AppSamurai module and the mod_perl registry,
# and also enable taint and warnings
PerlModule Apache::AppSamurai
<IfDefine !MODPERL2>
PerlModule Apache::Registry
PerlWarn On
PerlTaintCheck On
</IfDefine>
<IfDefine MODPERL2>
PerlModule ModPerl::Registry
PerlSwitches -wT
</IfDefine>
#### AppSamurai Setup ####
# We with use the auth_name "Owa" for this sample. If you prefer
# "TheMagnificentRonnieWilson" instead, just replace "Owa" with
# that in each PerlSetVar line.
#
# Set to 1 for debugging (only for troubleshooting or non-production testing,
# as this produces a TON of noise, and leaks some semi-sensitive info,
# into the Apache error logs) (Default: 0)
PerlSetVar OwaDebug 0
( run in 0.930 second using v1.01-cache-2.11-cpan-e1769b4cff6 )