[Zope] Virtual host admin under Apache+ZServer+SiteAccess

Phil Harris phil.harris@zope.co.uk
Fri, 2 Jun 2000 09:02:11 +0100


Jose,


Try going to http://localhost:8080/__no_before_traverse__/manage

hth

Phil
phil.harris@zope.co.uk

----- Original Message -----
From: "J M Cerqueira Esteves" <jmce@artenumerica.com>
To: <zope@zope.org>
Cc: "Jose Manuel Sebrosa" <sebrosa@artenumerica.com>
Sent: Friday, June 02, 2000 4:45 AM
Subject: [Zope] Virtual host admin under Apache+ZServer+SiteAccess


> On Thu, Jun 01, 2000 at 06:18:25PM -0600, ethan mindlace fremen wrote:
> >     o Some basic hooks to support virtual hosting (a la
> >       SiteAccess) have been designed and will be added
> >       to allow product authors to write virtual hosting
> >       support without fragile dependencies on parts of
> >       the Zope core.
>
> Greetings
>
> For security reasons, I would like to do web administration of remote Zope
> installations via ssh port forwarding.  For instance, while running
>
>   ssh -g -L 8080:foo.bar:8080 foo.bar
>
> one can access a ZServer on foo.bar:8080 using  http://localhost:8080/.
>
> However, I'm using Apache with ZServer and SiteAccess for virtual
> hosting as documented in http://www.zope.org/Members/anser/apache_zserver,
> and this has a nasty implication: once I activate a SiteRoot inside some
> Zope folder "/parrot" for making it the top folder of a virtual host
> http://parrot.bar/, the use of URLs under http://parrot.bar/ is forced
> whenever administering content under the "/parrot" folder, even if
> arriving from a foo.bar:8080 document: the browser is then no longer
> connecting through the secure channel but talking directly with
> http://parrot.bar/.  Of course this could also be redirected, but not so
> easily.
>
> In this example, it would be nice to be able to administer the contents
> of http://parrot.bar/ either via parrot.bar (typically for less
> sensitive content, end users) or via foo.bar:8080 (more delicate
> administrative tasks, administrators which know how to encrypt
> communication with ssh).  Is there interest (or is it feasible) to make
> virtual hosting support evolve to allow this?  (I didn't think much
> about the implications, but can already notice a problem under the
> virtual hosting strategy above (ZServer+Apache): how to make Zope
> "guess" if it should write absolute URLs for parrot.bar or for
foo.bar:8080?)
>
> Even better would be web content administration under SSL, of course :)
>
>  jmce: +351 919838775 ~ http://artenumerica.com/ ~
http://artenumerica.org/
>
>
> _______________________________________________
> Zope maillist  -  Zope@zope.org
> http://lists.zope.org/mailman/listinfo/zope
> **   No cross posts or HTML encoding!  **
> (Related lists -
>  http://lists.zope.org/mailman/listinfo/zope-announce
>  http://lists.zope.org/mailman/listinfo/zope-dev )