Hi, My wiki has public and protected pages. The public page may be access with http However, logon and protected page should access with https only. Is there a way to config xwiki this way? Or do I have to run xwiki totally under https? Stefan Bachert __________________________________________________ Do You Yahoo!? Sie sind Spam leid? Yahoo! Mail verfügt über einen herausragenden Schutz gegen Massenmails. http://mail.yahoo.com
I think you can check to see if the connection is https using the HttpServletRequest ($request) in velocity then send a redirect or simply refuse to display the page. Caleb stefan bachert wrote:
Hi,
My wiki has public and protected pages. The public page may be access with http However, logon and protected page should access with https only.
Is there a way to config xwiki this way? Or do I have to run xwiki totally under https?
Stefan Bachert
__________________________________________________ Do You Yahoo!? Sie sind Spam leid? Yahoo! Mail verfügt über einen herausragenden Schutz gegen Massenmails. http://mail.yahoo.com _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
Hi Stefan, IMHO that's nothing to be configured within XWiki but within the deployment-dscriptor ("web.xml") within your servlet-container. Example (snippet): <security-constraint> <web-resource-collection> <web-resource-name>Protected Context</web-resource-name> <url-pattern>/*</url-pattern> </web-resource-collection> <!-- auth-constraint goes here if you requre authentication --> <user-data-constraint> <transport-guarantee>CONFIDENTIAL</transport-guarantee> </user-data-constraint> </security-constraint> Cheers Gregor -- just because you're paranoid, don't mean they're not after you... gpgp-fp: 79A84FA526807026795E4209D3B3FE028B3170B2 gpgp-key available @ http://pgpkeys.pca.dfn.de:11371 @ http://pgp.mit.edu:11371/ skype:rc46fi
participants (3)
-
2smart4u -
Caleb James DeLisle -
stefan bachert