[rt-users] RT with https (external authentication)

[Andrew Elwell]

> One other comment: I run both the SSL and the Standard config in the same .conf file for ease of use. I've included a sanitized version below:

We do something similar, but redirect all non-ssl traffic to 443 with mod_rewrite

ie: 
<VirtualHost _default_:80>
        RewriteEngine on
        RewriteCond %{SERVER_PORT} !443
        RewriteRule ^/(.*) https://your.server.fqdn/$1 [R]
</VirtualHost>

<VirtualHost _default_:443>
	... include all the SSL, external auth (cosign) and rt gubbins here
</VirtualHost>


We're using cosign (http://www.umich.edu/~umweb/software/cosign/) as the external auth, and I have an access list for those users who can access RT on the webserver.

Andrew



-- 
Andrew Elwell, System Administrator EPCC
Tel 0131 445 7833 (ACF Building)
Tel 0131 650 5023 (Rm 3309, JCMB)