Setting up webpasswordsafe

[Anastasios Ksouzafeiris]

Hello people, i am trying to install webpasswordsafe but it fails and the administrators guide is not good written and enough illustrative.
Have you any tutorial about this with a better analysis and maybe step by step ?

Regards,

[KPC]

Hi Anastasios

The instructions that Josh has provided are actually quite good, however it does assume some Maven / J2E / MySQL experience due to the added security.  I've deployed this on one of my company's Linux servers, however I was thinkning about building this just on an XP machine in a test environment.  If I get time I'll write a detailed step-by-step document and post it up.

Regards

[Anastasios Ksouzafeiris]

Thank's a lot KPC, I am looking forward for your guide.. I hope you will find time to do it. If you do it, don't forget to notice me .. :)

Best regards,

Anastasios Ksouzafeiris

[Josh]

Which step are are you having problems with Anastasios? 

[Neil E.]

I agree with Anastasios Ksouzafeiris - the instructions are very vague. For example:

"Verify Java Servlet Container installed properly, optionally Web Server also installed properly and forwarding appropriate requests to container, and SSL enforcement is configured properly."

It's like saying "How to build a car: Take some metal, bend it and add 4 wheels. Done."

I'm new to Tomcat/Apache communicating with eachother and something a little more specific would be nice, even if it was to name a couple of config files...

[Darin Perusich]

Install apache and install/enable mod_jk, mod_ssl, and mod_rewrite (to
force redirect to https). Adjust the following paths as needed for
your installation.

1. Create worker.properties in apache conf dir containing:
worker.list=tomcat6
worker.tomcat6.port=8009
worker.tomcat6.host=localhost
worker.tomcat6.type=ajp13

2. mod_jk config (this is one possible configuration)
<IfModule mod_jk.c>
JkMount /* webpasswordsafe
<Directory "/srv/tomcat6/webpasswordsafe/">
Options Indexes FollowSymLinks
allow from all
</Directory>
# The following line prohibits users from directly accessing WEB-INF
<Location "/WEB-INF/">
#AllowOverride None
Deny from all
</Location>
</IfModule>

3. mod_rewrite config (optional, assumes you've configure ssl)
RewriteEngine On
RewriteCond %{SERVER_PORT} !^443$
RewriteRule ^/(.*) https://%{SERVER_NAME}/$1 [L,R=301]

--
Later,
Darin

[Neil E.]

Darin,

Thanks very much for that - I'm going to try it now :)

[Neil E.]

I'm getting closer but getting two issues:

1. I can access it ok directly in Tomcat but get a session timeout error:
I can hit http://hostname:8080/WebPasswordSafe BUT it just keeps coming up with a looping "Session Timeout - Please login again" message, no matter how many times I click OK. (There's no login box to type a u/pass).

2. I've created workers.properties, included it in httpd.conf and added the mod_jk config you gave but it doesn't look like apache is forwarding the requests to tomcat. mod_jk is definitely loaded, but if I try hitting http://hostname/WebPasswordSafe it just gives me a http 404. Do I need to create a virtualhost, Alias...? I've tried:
* Changing DocumentRoot to /opt/tomcat/webapps (Tomcat's installed in /opt/tomcat) and /opt/tomcat/webapps/WebPasswordSafe and hitting http://hostname to no avail...
* I noticed your JkMount said 'webpasswordsafe', which is not the name of the specified worker so tried changing JkMount to:
JkMount /* worker1
JkMount /WebPasswordSafe/* worker1
and a few others to no avail.

If you could please shed some light on this it would be greatly appreciated!!

Thanks,

Neil.

[Neil E.]

I'm attaching my config file, I'm sure you could spot the mistake straight away...

My workers.properties files:

workers.tomcat_home=/opt/tomcat
workers.java_home=/usr/java/default
worker.list=worker1
worker.tomcat6.port=8009
worker.tomcat6.host=localhost
worker.tomcat6.type=ajp13



Thanks,

Neil.

On Thursday, 30 August 2012 13:36:28 UTC+2, Anastasios Ksouzafeiris wrote: