Cannot disable GZIP compression with NetIQ Access Manager Gateway version 3.2

  • 7014631
  • 26-Feb-2014
  • 21-Apr-2014

Environment

NetIQ Access Manager 3.2
NetIQ Access Manager 3.2.2
NetIQ Access Manager 3.2.2 IR2

Situation

  • With the Novell Access Manager version 3.1 Linux Access Gateway there was an option to disable GZIP compression between the proxy and the protected web application server using the touch file: "/var/novell/.noGzipSupport"

  • With the NetIQ Access Maneger version 3.2 Gateways there are no touch files anymore but the concept of using "Advanced Options". The "/opt/novell/ag/doc/lag2mag_touchfiles.csv" lists all Novell Access Manager 3.1 Linux Access Gateway touch file options and the related settings to achieve the same result with the NetIQ Access Gateway service

  • The "lag2mag_touchfiles.csv" states: "/var/novell/.noGzipSupport,Not Needed"

  • Using the Proxy Service => Web Servers => "Enable Force HTTP 1.0 to Origin" option does not avoid the use of GZIP compression (removing the "Accept-Encoding: gzip, deflate" header) between the proxy service and the web application server

Resolution

  • This issue has been addressed by engineering.

  • Workaround:
  1. Access your Access Gateway using ssh.
  2. Change into the "/etc/opt/novell/apache2/conf" directory.
  3. Create a backup copy of the exiting "httpd.conf" conf file.
  4. Edit your "http.conf" file and remove the remark for the following module load directive:   "LoadModule headers_module libexec/mod_headers.so".
  5. Use iManager to access the "Advanced Options" configuration for the proxy service on which you would like to disable GZIP compression and  add  the following line: "RequestHeader unset Accept-Encoding".
  6. restart your Access Gateway proxy: "/etc/init.d/novell-apache2 restart".