Written by

Sr Application Development Analyst at The Ohio State University Wexner Medical Center
Question Scott Roth · Oct 26, 2023

Apache config from PWS to Web Gateway

This is probably not the right place, but I don't know who I can reach out to... I am trying to configure an Apache/Web Gateway to our instance of IRIS so we are no longer using the built-in PWS. Can anyone point me in the right direction to configure Apache/Web Gateway to repoint

http://<server name>:52773/... to the https://<server name>/...

gateway so our users will not notice? How do I do this in Apache, do I need to modify httpd.conf or the ssl.conf file? What is the correct syntax...

This is what I tried to do in the httpd.conf file

<VirtualHost *:52773>
    ServerName int-lxiris-vd01.osumc.edu
    ServerAlias int-lxiris-vd01 int-lxiris-vd01.unix.osumc.edu
    Redirect permanent / https://int-lxiris-vd01.osumc.edu/
</VirtualHost>

RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI} [R=301,L]

Thanks

Scott Roth 

Product version: IRIS 2023.1

Comments

Scott Roth  Oct 27, 2023 to Luis Angel Pérez Ramos

Thanks, but I have already went through all of those steps. 

0
Thomas Wuppermann · Nov 9, 2023

Not sure if I understand where you are stuck. Looks like you are trying to proxy the PWS instead of avoiding it.
What the webgateway does and what intersystems recommends is using the webgateway which does not connect to the PWS on IRIS but to the superserver-port (default: port 1972).
The general configuration of the connection between Webgateway and IRIS is done via web-based management-interface of the webgateway. The articles Luis Angel is referring to include the configuration of which sorts or requests are linked to the Webgateway and forwarded to Iris (via superserver-port).
Hope this will help....
 

0
Scott Roth  Nov 9, 2023 to Thomas Wuppermann

Since everyone on the team uses the URL that contains the port number of 52773, I was trying to make it possible for them not to have to update their bookmarks they already use. Seamless transition to encrypting the traffic between their web browser and the server.

0
David Hockenbroch  Nov 9, 2023 to Scott Roth

The requests using port 52773 aren't even going to get to Apache, so you can't solve this problem by changing your Apache configuration. You would have to make your router forward traffic between your server and your other PCs on port 52773 to port 80 (for HTTP) or port 443 (HTTPS).

0
Scott Roth  Nov 9, 2023 to David Hockenbroch

It is possible to setup Apache to listen for 52773 instead of 80, so why wouldn't calls to port 52773 go through Apache if it is configured to listen for port 52773?

0
David Hockenbroch  Nov 9, 2023 to Scott Roth

My mistake, Scott, I thought you just had Apache running on its default ports and were trying to figure out how to make the other requests also go there.

0