Hi Ira! I hope I understand the problem correctly. Why not write a CGI script in Perl/Python/whatever that will fetch the pages (based on the PATH_INFO and CGI parameters), process them by translating all the relevant URLs and display it to the user?
A bit more work than using the Apache built-in modules, but still doable. Regards, Shlomi Fish On Thursday 27 January 2005 16:51, Ira Abramov wrote: > I'm at a client of mine. for the last day and a half I've been trying to > construct (per his odd request) an SSL reverse proxy for an exchange > server behind the firewall by a Debian machine in the DMZ. > > in more words: a user sits at home, requests an https:// page from the > Debian, which in turn gets the page on http from the exchange and sends > back the reply. > > ProxyPass was enough for all such setups so far, but nooooooo.... see MS > offers a thing called "Exchange front end" just for this purpose so they > tried their best to stop this kind of setup from happening. > > first obstacle: the pages produced by the exchange contain an BASE href > anchor that directs to the full name of the exchange. Proxypass > translates only headers, I discovered apache2 has a mod_proxy_html that > edits contents as well, problem solved. > > second obstacle - after login, the OWA application sends you to a page > with two frames. the navbar and the viewer. the navbar sends you to > /exchange/<username>/<mailbox> in the viewer frame, however when I > access it via the reverse proxy, some of the links in the navbar (not > all!) become /exchange/<mailbox> and therefore result in err404s. > > I finally trieda solution to give each user a different URL to login > at and then it works. though it is UGLY. If instead of: > https://<server>/exchange/ > they would log in at: > https://<server>/exchange/<user>/ > > but that wont work either! they get their inbox but links to the > messages themselves are composited on the wrong base URL... and that's > the good part on Mozilla! most of the users are on Exploder and that > returns just "<html></html>" for both frames, not even a 404. > > In other words, as I said, MS is doing its best to stop you from using a > reverse proxy on the OWA... > > Has anyone tamed this silly beast? -- --------------------------------------------------------------------- Shlomi Fish [EMAIL PROTECTED] Homepage: http://www.shlomifish.org/ Knuth is not God! It took him two days to build the Roman Empire. ================================================================= To unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]