Honouring NOVELL_REWRITER_OFF/ON rewriter conditions with the Linux Access Gateway

  • 7001921
  • 18-Nov-2008
  • 26-Apr-2012

Environment


Novell Access Manager 3 Linux Access Gateway
Novell Access Manager 3 Support Pack 4 applied

Situation

There are a number of options within Access Manager's Linux Access Gateway (LAG) to disable rewriting.

The most obvious option is to make sure that no rewriter policy is enabled for a particular proxy service. By default there is a 'default' rewriter policy that is enabled, unless an administrator goes in and specifically disables it via the UI. Once disabled, there will be no rewriting at all for any requests going through that specific proxy.

The next option is to use the ' If Requested URL Is' or 'And Requested URL Is Not' and add the link to the URL that should not be rewritten.

Finally, we have the option of using the NOVELL_REWRITER_OFF or NOVELL_REWRITER_ON tags. When the rewriter parses a response that it is required to rewrite, it will do so and rewrite all the links there. The only exception is when it sees the NOVELL_REWRITER_OFF tag - it then stops rewriting until the NOVELL_REWRITER_ON tag is discovered, at which it continues to rewrite all the tags that are deemed rewriteable.

The above rule only applies to the word based rewriter profiles - for the character based rewriter profiles, the NOVELL_REWRITER_OFF/ON strings are ignored completely. For example, if the web server returns the following page to the browser via the LAG

Orig url
<!--NOVELL_REWRITER_OFF-->
<FORM id=login name=login action=/formfill/phpinfo.php method=post>
<!--NOVELL_REWRITER_ON-->

a) with a character profile that does a search and replace of /formfill with /delme/formfill, we will get the following after rewriting

<!--NOVELL_REWRITER_OFF-->
<FORM id=login name=login action=/delme/formfill/phpinfo.php method=post>
<!--NOVELL_REWRITER_ON-->

b) But if you configure the same in word profile, searching and replacing /formfill with /delme/formfill, we will get the followingafter rewriting - it wont get changed!

<!--NOVELL_REWRITER_OFF-->
<FORM id=login name=login action=/formfill/phpinfo.php method=post>
<!--NOVELL_REWRITER_ON-->