Cisco Headend System Release 2.7 Installation Guide

Page of 138
 
 
 
Configure Apache to Allow the Client Connection 
 
4036043 Rev B 
109 
 
Configure the Client IP Addresses for the WS-BOSS 
The SSL is currently not supported for the WS-BOSS interface. If no WS-BOSS 
support is required, ignore this section. Otherwise, the file 
/etc/apache2/conf/boss.http needs to be edited to add the client IP addresses, 
according to the following example: 
<Location /dncs/soap/bossreq>
 
 
# The SSL configuration is currently not supported
 
 
#SSLVerifyClient      require
 
 
#SSLVerifyDepth       5 
 
 
ProxyPass         
 
http://localhost:18084/dncs/soap/bossreq
 
 
ProxyPassReverse   
 
http://localhost:18084/dncs/soap/bossreq
 
 
 
# The following directives will not be present after 4.5 
as client-cert
 
 
# authentication will be used. This should be present if 
client access to WS-BOSS
 
 
# over HTTP is required.
 
 
Order Deny,Allow
 
 
 
Allow from localhost
 
 
 
Allow from dncs
 
 
 
Allow from appservatm
 
 
#Allow from client_ip
 
 
 
Allow from client_ip1
 
 
 
Allow from client_ip2
 
 
Deny from all
 
</Location>
 
Note:  This example shows the addition of client_ip1 and client_ip2 to the list of 
clients that are allowed to access the WS-BOSS service.