(Sorry that this is mildly off topic...)
 
 Anyone gotten this working? We've followed the Microsoft knowledge base
article for OMA as a starting point - but still can't get non-SSL forms
authentication working. We'd really love to use Pound as the reverse proxy,
but without this it's a non-starter at my firm.

 

-marc


This email may contain privileged information, and is intended only for the
named
recipient and may be privileged. Distribution, disclosure or copying of this
email
by anyone other than the named recipient is prohibited. If you are not the
named
recipient, please notify us immediately, by return email, and permanently
destroy
this email and all copies of it. Internet email is not private, secure, or
reliable.
Neither Rockwater Capital Corporation, its affiliates nor employees or
contractors
are liable for any errors or omissions in the content or transmission of this
email.
Any opinions contained in this email are solely those of the author and, unless
clearly indicated otherwise in writing are not endorsed by Rockwater Capital
Corporation or its affiliates.

On Wed, Aug 03, 2005 at 06:31:51PM -0400, Nicholas, Marc wrote:[...]

Hi Marc,

forms-based authentication with plain http is AFAIK not supported
by OWA (i.e. running pound with ListenHttp). However using pound as SSL
offloader to OWA will work (even though plain http is used between
pound and OWA). Pound *must* be running on port 443, OWA on 80. Add
"Front-End-Https: on" to pound's HTTPSHeaders directive to signal
SSL offloading to OWA. Finally it might be necessary to install
owaadmin and enable SSL offloading somewhere in its configs (or
directly in the registry). ATM I don't have OWA at hands so I can't
tell you the exact option.

Good luck,
Frank
[...]

Frank,

Thanks...I was pretty comfy getting pound into shape, but didn't know how to
off-load SSL from OWA.

Thanks again,

-marc

-----Original Message-----
From: Frank Schmirler [mailto:frank.schmirler(at)linogate.com] 
Sent: Thursday, August 04, 2005 8:32 AM
To: pound(at)apsis.ch
Subject: Re: [Pound Mailing List] OT: Configuring OWA for forms based
authentication *without* SSL

On Wed, Aug 03, 2005 at 06:31:51PM -0400, Nicholas, Marc wrote:[...]
proxy,[...]

Hi Marc,

forms-based authentication with plain http is AFAIK not supported
by OWA (i.e. running pound with ListenHttp). However using pound as SSL
offloader to OWA will work (even though plain http is used between
pound and OWA). Pound *must* be running on port 443, OWA on 80. Add
"Front-End-Https: on" to pound's HTTPSHeaders directive to signal
SSL offloading to OWA. Finally it might be necessary to install
owaadmin and enable SSL offloading somewhere in its configs (or
directly in the registry). ATM I don't have OWA at hands so I can't
tell you the exact option.

Good luck,
Frank
[...]