Setup Novell Vibe in DMZ Configuration

  • 7007401
  • 17-Dec-2010
  • 27-Apr-2012

Environment

Novell Vibe OnPrem 3.x
Novell Teaming 2.x
Novell Teaming 1.x

Situation

How to setup Novell Vibe OnPrem in a DMZ setup by separating web server from application server using Apache 2.2.17 httpd web server while Novell Vibe is running on a server behind firewall.

Resolution

Please follow these steps to setup Novell Vibe OnPrem in a DMZ configuration. The steps below are for a Windows Apache web server but can be used for Linux as well with minor modification.
 
Configuration:

TCP Port 8009 should be open on firewall from DMZ to backend Vibe Server
Vibe should be installed on the backend server and accessable from within the firewall

Installation: 

1. Download Apache 2.2.17 from http://httpd.apache.org/download.cgi and install on DMZ web server

2. Download Apache Tomcat connector mod_jk-1.2.31-httpd-2.2.3.so from http://www.apache.org/dist/tomcat/tomcat-connectors/jk/binaries

3. Rename it to mod_jk and place in Apache modules folder.

    Default locations for modules directory on Unix:
    * /usr/lib/apache/
    * /usr/lib/apache2/
    * /usr/local/apache/libexec/

    Default locations for modules directory on Windows :
    * C:\Program Files\Apache Group\Apache\modules\
    * C:\Program Files\Apache Group\Apache2\modules\

4. Create a file called workers.properties in your Apache config folder and add the following lines to it:

    # Define 1 real worker using ajp13
    worker.list=worker1
    # Set properties for worker1 (ajp13)
    worker.worker1.type=ajp13
    worker.worker1.host=localhost
    worker.worker1.port=8009

    Replace localhost to the IP address of your back-end Vibe server.

5. Here is the minimum which should be set in httpd.conf directly or included from another file:

    LoadModule    jk_module  modules/mod_jk.so
    JkWorkersFile conf/workers.properties
    JkShmFile     /logs/mod_jk.shm
    JkLogFile     /logS/mod_jk.log
    JkLogLevel    info
    JkLogStampFormat "[%a %b %d %H:%M:%S %Y]"
    JkMount  /* worker1

    Default locations for configuration directory on Unix:
    * /etc/httpd/conf/
    * /etc/httpd2/conf/
    * /usr/local/apache/conf/

    Default locations for configuration directory on Windows :
    * C:\Program Files\Apache Group\Apache\conf\
    * C:\Program Files\Apache Group\Apache2\conf\

6. Restart Apache web server. All traffic to it will now be rerouted to the back-end server through port 8009 over AJP.