<div dir="ltr"><div><div>Hi Sudeep,<br><br></div>You can also ask enterprise support from C12G Labs [1]. They can help <br>you for sure, they build OpenNebula. <br><br></div><div>As for your problem, I would ditch Apache and use nginx. I will post a step<br>
</div><div>by step untested tutorial below.<br><br></div><div>First, install nginx on the machine OpenNebula is installed on. I assume you<br>are on a Debian based OS. If on CentOS switch apt-get with yum.<br><br></div><div>
$ sudo su -<br></div><div># apt-get install nginx<br><br></div><div>Configure the default vhost to proxy requests to Sunstone upstream. The <br></div><div>following is what I use in production and it works.<br><br></div>
<div>
/etc/nginx/sites-enabled/default<br><br>### sunstone vhost<br><br>### sunstone upstream server<br>upstream sunstone {<br> server <a href="http://127.0.0.1:9869">127.0.0.1:9869</a>;<br>}<br><br>### sunstone HTTP server<br>
server {<br> listen 80 default_server;<br> server_name localhost;<br><br> ### Set up the access and error logs<br> access_log /var/log/nginx/access.log;<br> error_log /var/log/nginx/error.log;<br>
<br> ### Append / if missing and redirect to HTTPS<br> rewrite ^([^.]*[^/])$ https://$server_name/ permanent;<br> return 301 https://$server_name$request_uri;<br>}<br><br>### HTTPS Server<br>
#<br># sunstone HTTPS server<br>#<br>server {<br> listen 443;<br> server_name localhost;<br><br> keepalive_timeout 70;<br><br> ### Logging<br> access_log /var/log/nginx/access.log;<br> error_log /var/log/nginx/error.log debug;<br>
<br> ### SSL<br> ssl on;<br> ssl_certificate /etc/ssl/certs/sunstone.pem;<br> ssl_certificate_key /etc/ssl/private/sunstone.key;<br><br> ssl_session_cache shared:SSL:10m;<br> ssl_session_timeout 480m;<br>
<br> ### Intercept errors<br> proxy_intercept_errors on;<br><br> ### Custom error pages<br> error_page 404 /errors/404.html;<br> error_page 401 /errors/401.html;<br> error_page 400 402 403 405 406 407 408 409 410 411 412 413 414 415 417 417 /errors/4xx.html;<br>
error_page 500 501 502 503 504 505 /errors/5xx.html;<br><br> ### Root location<br> #<br> # Proxy requests to upstream<br> #<br> location / {<br> proxy_pass <a href="http://sunstone">http://sunstone</a>;<br>
proxy_set_header Host $host;<br> proxy_set_header X-Real-IP $remote_addr;<br> proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;<br>
}<br>
<br> ### Public Data<br> #<br> # Get the files from HDD not via Sunstone<br> #<br> location ~ ^/(css/|images/|js/|locale/|vendor/) {<br> root /usr/lib/one/sunstone/public;<br> expires 1w;<br>
}<br><br> ### Error pages<br> location /errors/ {<br> alias /var/www/errors/;<br> internal;<br> }<br>}<br><br><br></div><div>Generate the SSL certificate. This is a self signed certificate, if you go production I <br>
</div><div>recommend you built your own CA or buy a trusted certificate, Globe SSL is cheap <br>in this area. This way you can secure your VNC also without any complaints from<br></div><div>the browser.<br><br></div><div>
# openssl req -x509 -newkey rsa:2048 -keyout /etc/ssl/private/sunstone.pem -nodes -out /etc/ssl/certs/sunstone.pem -days 3650<br></div><div><br><br></div><div>Restart nginx and access <a href="http://ip.add.re.ss">http://ip.add.re.ss</a> of OpenNebula machine. It might help<br>
you but please don't blindly copy paste, do some reading, you'll learn cool things :).<br><br></div><div>[1]: <a href="http://c12g.com/">http://c12g.com/</a><br><br></div><div>Best,<br>Valentin<br></div><div><div>
<br><div class="gmail_extra"><div class="gmail_quote">On Fri, Jun 27, 2014 at 9:21 AM, Martin Alfke <span dir="ltr"><<a href="mailto:tuxmea@gmail.com" target="_blank">tuxmea@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
Hi Sudeep,<br>
<br>
it is very unkind to repeat your question in a community based mailing list.<br>
If you need urgent professional support you should get in contact with puppetlabs sales and ask for enterprise support.<br>
<br>
The file I mentioned is in /etc/httpd/conf.d<br>
File name is arbitrary as long as it has the ending .conf<br>
<a href="http://www.centos.org/docs/5/html/Deployment_Guide-en-US/s1-apache-config.html" target="_blank">http://www.centos.org/docs/5/html/Deployment_Guide-en-US/s1-apache-config.html</a><br>
<a href="http://wiki.centos.org/TipsAndTricks/ApacheVhostDir" target="_blank">http://wiki.centos.org/TipsAndTricks/ApacheVhostDir</a><br>
<br>
Asking Google or duckduckgo would have provided the same results.<br>
<br>
Please try to search a least a little bit by yourself or get your company an enterprise support.<br>
<br>
hth,<br>
<br>
Martin<br>
<div class=""><div class="h5"><br>
On 27 Jun 2014, at 08:14, Sudeep Narayan Banerjee <<a href="mailto:snbanerjee@iitgn.ac.in">snbanerjee@iitgn.ac.in</a>> wrote:<br>
<br>
> Dear Sir,<br>
><br>
> Could someone please say in which file do I need to modify?<br>
><br>
> Thanks<br>
> Sudeep<br>
><br>
><br>
> On Thu, Jun 26, 2014 at 11:17 PM, Sudeep Narayan Banerjee <<a href="mailto:snbanerjee@iitgn.ac.in">snbanerjee@iitgn.ac.in</a>> wrote:<br>
> Dear Martin & All,<br>
><br>
> Thanks a lot for the valuable inputs.<br>
><br>
> Which file do I edit in https/conf.d folder?<br>
><br>
> [root@front conf.d]# ls<br>
> auth_kerb.conf auth_pgsql.conf manual.conf mrtg.conf perl.conf README squid.conf subversion.conf welcome.conf<br>
> auth_mysql.conf authz_ldap.conf mod_dnssd.conf nss.conf php.conf revocator.conf ssl.conf webalizer.conf wsgi.conf<br>
><br>
> I am in /etc/httpd/conf.d. Should I create a file (by which name & extension) or edit any existing file?<br>
><br>
> I do not know whether httpd.conf in /etc/httpd/conf/ folder is the file you are pointing at!<br>
><br>
> Regards,<br>
> S N Banerjee<br>
><br>
><br>
> On Thu, Jun 26, 2014 at 6:51 PM, Martin Alfke <<a href="mailto:tuxmea@gmail.com">tuxmea@gmail.com</a>> wrote:<br>
> Hi Sudeep,<br>
><br>
> we run CentOS 6.5 with httpd and mod_passenger and the following configuration snippet in httpd/conf.d:<br>
><br>
> <VirtualHost *:443><br>
> ServerName default-ssl<br>
><br>
> ## Vhost docroot<br>
> DocumentRoot /usr/lib/one/sunstone/public<br>
><br>
> ## Directories, there should at least be a declaration for /usr/lib/one/sunstone/public<br>
><br>
> <Directory /usr/lib/one/sunstone/public><br>
> Options -MultiViews<br>
> AllowOverride None<br>
> Order allow,deny<br>
> Allow from all<br>
> </Directory><br>
><br>
> ## Logging<br>
> ErrorLog /var/log/httpd/default-ssl_error_ssl.log<br>
> LogLevel warn<br>
> ServerSignature Off<br>
> CustomLog /var/log/httpd/default-ssl_access_ssl.log combined<br>
><br>
><br>
> ## SSL directives<br>
> SSLEngine on<br>
> SSLCertificateFile <crt file><br>
> SSLCertificateKeyFile <key file><br>
> SSLCACertificatePath /etc/ssl/certs<br>
> SSLCACertificateFile <bundle file><br>
> <FilesMatch "\.(cgi|shtml|phtml|php)$"><br>
> SSLOptions +StdEnvVars<br>
> </FilesMatch><br>
> </VirtualHost><br>
><br>
> hth,<br>
><br>
> Martin<br>
><br>
> On 26 Jun 2014, at 14:51, Sudeep Narayan Banerjee <<a href="mailto:snbanerjee@iitgn.ac.in">snbanerjee@iitgn.ac.in</a>> wrote:<br>
><br>
> > Dear Sirs,<br>
> ><br>
> > Is there any update on the same?<br>
> ><br>
> > Thank you in advance!<br>
> ><br>
> > S N Banerjee<br>
> ><br>
> ><br>
> > On Thu, Jun 26, 2014 at 1:46 AM, Sudeep Narayan Banerjee <<a href="mailto:snbanerjee@iitgn.ac.in">snbanerjee@iitgn.ac.in</a>> wrote:<br>
> > Dear Sir,<br>
> ><br>
> > Firstly I would like thank for the simple solution provided for the thread "[one-users] VM in opennebula failing".<br>
> ><br>
> > Now I would like to make it route through SSL at 443 port.<br>
> ><br>
> > I checked at your site and could find the steps meant for Ubuntu, hope checked properly! Is it possible for CentOS6.5 x86_64 ?<br>
> ><br>
> > Thanks in advance!<br>
> > Sudeep<br>
> ><br>
> > --<br>
> > Thanks & Regards,<br>
> > Sudeep Narayan Banerjee<br>
> ><br>
> ><br>
> ><br>
> > --<br>
> > Thanks & Regards,<br>
> > Sudeep Narayan Banerjee<br>
> > _______________________________________________<br>
> > Users mailing list<br>
> > <a href="mailto:Users@lists.opennebula.org">Users@lists.opennebula.org</a><br>
> > <a href="http://lists.opennebula.org/listinfo.cgi/users-opennebula.org" target="_blank">http://lists.opennebula.org/listinfo.cgi/users-opennebula.org</a><br>
><br>
> _______________________________________________<br>
> Users mailing list<br>
> <a href="mailto:Users@lists.opennebula.org">Users@lists.opennebula.org</a><br>
> <a href="http://lists.opennebula.org/listinfo.cgi/users-opennebula.org" target="_blank">http://lists.opennebula.org/listinfo.cgi/users-opennebula.org</a><br>
><br>
><br>
><br>
> --<br>
> Thanks & Regards,<br>
> Sudeep Narayan Banerjee<br>
><br>
><br>
><br>
> --<br>
> Thanks & Regards,<br>
> Sudeep Narayan Banerjee<br>
<br>
_______________________________________________<br>
Users mailing list<br>
<a href="mailto:Users@lists.opennebula.org">Users@lists.opennebula.org</a><br>
<a href="http://lists.opennebula.org/listinfo.cgi/users-opennebula.org" target="_blank">http://lists.opennebula.org/listinfo.cgi/users-opennebula.org</a><br>
</div></div></blockquote></div><br><br clear="all"><br>-- <br><div dir="ltr">Valentin Bud<div><a href="http://databus.pro" target="_blank">http://databus.pro</a> | <a href="mailto:valentin@databus.pro" target="_blank">valentin@databus.pro</a></div>
</div>
</div></div></div></div>