Howdy!
I’m trying to setup the security on the server, and I’m just missing a little thing (I think). Basically, if a page on the site is accessed in “http”, the user logs in with basic username & password. In “https”, the client certificate is used to login.
I’ve tried many combinations in the server document’s “Ports - Internet Ports” tab, without success. I can get either one or the other, but not both.
Any ideas?
Thanks, in advance!
Steve in Montreal
Subject: Small http/https config question
In the server doc go to the ports / internet ports / web. There should be two fields for port status. One is for http, the other is for https. Both should be enabled. You also are required to have the SSL settings and a certificate configured in the SSL Settings section of the same document.
HTH.
Lou
Subject: RE: Small http/https config question
Hi, Lou!
Thanks for the quick answer! I have both http (port 80), and https (port 443) enabled. The only thing with the answer “No” is the “Enforce server access settings”. Everything else is “Yes” (including “Enable SSL V2”).
When I go to a page in “http”, I get the basic yellow login page, but I always get “Invalid username or password was specified”, even though I enter the proper username & pwd, and the default ACL is “Editor”.
When I login in “https”, it prompts me to select one of my certificates, and I can login that way (without using name & pwd). This works quite well.
I’ve tried accessing several dbs, and it seems to be a server config issue. It seems that when “Client Certificate” is “Yes”, then we can ONLY login with a certificate, regardless of the other options! =8O
Any other suggestions?
Thanks, in advance!
Steve in Montreal
Subject: RE: Small http/https config question
Are you using Internet Site documents? If so, go to the Security Tab and check under the SSL Authentication block and see if Name & Password is set to no.
There are three settings there:
Anonymous - Yes / No
Name & Pwd - Yes / No
Client Cert - Yes/ No
If you want to only log in with a cert then set the above to NO, NO, YES.
If you want to allow user names and pwds if a user doesn’t have a cert then select NO, YES, YES.
If you want to allow everyone then select YES,YES,YES.
hth,
Wendall
Subject: SOLVED! Small http/https config question
Howdy!
Thanks for the help! I was able to get it with Yes,Yes,Yes. In http, you use username & pwd. In https, a client certificate. Now, I have to let people login with the certificate on a Smart Card, but that’s another story for another thread!
Thanksabunch!
Steve in Montreal
“Ever stop to think, then forget to start again?”