Webaccess through proxy server

Ben Ponting

unread,

Jan 23, 2004, 9:41:38 AM1/23/04

to

Hi All,

We have some users of Groupwise webaccess 6.5 that work at another comapny
and access the email through that company's proxy servers. When they login
to webaccess, they see each other's email. So it seems that their proxy is
caching the webaccess pages. I thought that the pages in web access would be
marked as non cachable? Is there a setting I need to set to make sure this
happens.

Thanks,

Ben

Jim Michael

unread,

Jan 23, 2004, 10:21:17 AM1/23/04

to

Ben Ponting wrote:

> We have some users of Groupwise webaccess 6.5 that work at another comapny
> and access the email through that company's proxy servers. When they login
> to webaccess, they see each other's email.

Yikes... that should not be happening!

>So it seems that their proxy is
> caching the webaccess pages. I thought that the pages in web access would be
> marked as non cachable? Is there a setting I need to set to make sure this
> happens.

It sounds like the proxy is not honoring no-cache headers... but even then,
each user should have a unique context when they log in and thus not see
each others mail. I'm guessing there is also some NAT going on here that
makes all users appear to have the same source IP address.

Have you tried using only HTTPS? That should *force* the proxy to set up
individual sessions and thus fix the problem.

--
Jim
NSC SYsop

Ben Ponting

unread,

Jan 25, 2004, 1:52:35 PM1/25/04

to

Thanks for the reply Jim,

I found a setting in the security Tab of the Weaccess object to disable
caching, by default it seems to be set to enable caching. So I've changed
that to disabled, and waiting to hear back from the user. Failing that I'll
try https.

Thanks,

Ben

"Jim Michael" <jkmi...@myrealbox.com> wrote in message
news:40113BEC...@myrealbox.com...

Jim Michael

unread,

Jan 26, 2004, 10:01:29 AM1/26/04

to

Ben Ponting wrote:

> I found a setting in the security Tab of the Weaccess object to disable
> caching, by default it seems to be set to enable caching. So I've changed
> that to disabled, and waiting to hear back from the user. Failing that I'll
> try https.

I doubt that setting will have any effect, as it enables/disables caching of
the *templates*, which has nothing to do with caching the actual mailbox
content that you're seeing.

--
Jim
NSC SYsop

Ben Ponting

unread,

Jan 27, 2004, 4:35:34 AM1/27/04

to

Thanks Jim,

It seems to have fixed the problem, the user doesn't have the problem
anymore. It could be an intermittent problem so I'll keep an eye on it. The
doco does say this setting prevents the caching of mailbox information such
as message text:

http://www.novell.com/documentation/lg/gw65/index.html?page=/documentation/l
g/gw65/gw65_admin/data/a7q514o.html

I'll let you know if the issue re occurs.

Thanks,

Ben

"Jim Michael" <jkmi...@myrealbox.com> wrote in message

news:40152BC5...@myrealbox.com...

Jim Michael

unread,

Jan 27, 2004, 9:59:45 AM1/27/04

to

Ben Ponting wrote:
>
> Thanks Jim,
>
> It seems to have fixed the problem, the user doesn't have the problem
> anymore. It could be an intermittent problem so I'll keep an eye on it. The
> doco does say this setting prevents the caching of mailbox information such
> as message text:

Ahhh! I had totally forgotten about this setting, and only remembered the
"template caching" mechanism. Good catch! Glad it appears to be working for
you.

That said, in my opinion the best solution is to use SSL to secure access to
webaccess, thus making caching irrelevant. Plus, your logins and messages
get encrypted, which is critical if you're using LDAP authentication ;-)

--
Jim
NSC SYsop