zarafa mapi proxy outlook.



  • Hai,

    Bit of an old school question, but i cant my https proxy for outlook running.

    I did read the zarafa and kopano docs but i keep getting
    “HTTP GET method not implemented” / Internal server errror 500
    What i want, if its possible.

    internet => apache2.4 SSL port 237 => apache 2.2 > zarafa server port 236
    an outlook client with the outlook connector to connect to hostname.fqdn:237 with should be proxied to the internal server ( non-ssl )

    I’ve setup my apache 2.4 for server on ip_internet:237 to listen.

    ServerName is set.

    SSLEngine on
    SSLProxyEngine Off
    ProxyPreserveHost On
    <IfModule mod_proxy.c>
            ProxyPass /zarafa http://192.168.xxxx.xxx:236/zarafa retry=0
            ProxyPassReverse /zarafa http://192.168.xxxx.xxx:236/zarafa retry=0
            # tested also these line with the hostname of that server. but same arror
    </IfModule>
    

    what am im missing.


  • Kopano

    Hi,

    generally speaking it is not a good idea to do SSL -> non-ssl termination, as the proxy will redirect any traffic backwards and expect to for example do an HTTPS-handshake, based on what you’ve configured in the client.

    The following is a functional example of

    • redirect all traffic to HTTPS (if not set)
    • redirect any direct request to mywebapp.example.com to webapp
    • redirect any /zarafa request to port 236 on the local system

    RewriteEngine on
    RedirectMatch ^/$ https://mywebapp.example.com/webapp/
    RewriteCond %{HTTPS} !=on
    RewriteRule ^/?(.*) https://%{SERVER_NAME}/$1 [R,L]

    <IfModule mod_proxy.c>
    ProxyPass /zarafa http://localhost:236/zarafa
    ProxyPassReverse /zarafa http://localhost:236/zarafa
    </IfModule>



  • Ok, thank you for this. very appriciated.

    Your example is what i have already have for my webapp, which works fine,
    but for the outlook client ( over port 237) not. is it that not proxiable?

    I’ve now also set the following now in the vhost for outlook.
    ProxyPreserveHost On
    SSLProxyEngine Off
    ProxyRequests Off
    SSLProxyVerify none
    SSLProxyCheckPeerCN off
    SSLProxyCheckPeerName off
    SSLProxyCheckPeerExpire off

    any other suggestion? im running out of ideas… :-(


Log in to reply