Hi,

MDM plugin for Windows device management needs a proxy in front of MDM
server and I used below apache configurations, to use it as the proxy.

ProxyRequests off
ProxyPreserveHost off

    <Proxy *>
        Order deny,allow
        Deny from all
        Allow from all
    </Proxy>

RewriteEngine On
RewriteCond %{REQUEST_METHOD} ^(POST)$
RewriteRule ^/EnrollmentServer/Discovery.svc
http://localhost:9763/mdm-windows-api/services/discovery/post [P,L]

RewriteCond %{REQUEST_METHOD} ^(GET)$
RewriteRule ^/EnrollmentServer/Discovery.svc
http://localhost:9763/mdm-windows-api/services/discovery/get [P,L]

ProxyPass /ENROLLMENTSERVER/PolicyEnrollmentWebservice.svc
http://localhost:9763/mdm-windows-api/services/certificatepolicy/xcep
ProxyPassReverse /ENROLLMENTSERVER/PolicyEnrollmentWebservice.svc
http://localhost:9763/mdm-windows-api/services/certificatepolicy/xcep

ProxyPass /ENROLLMENTSERVER/DeviceEnrollmentWebservice.svc
http://localhost:9763/mdm-windows-api/services/deviceenrolment/wstep
ProxyPassReverse /ENROLLMENTSERVER/DeviceEnrollmentWebservice.svc
http://localhost:9763/mdm-windows-api/services/deviceenrolment/wstep

ProxyPass /Synchml/initialquery
http://localhost:9763/mdm-windows-api/services/syncml/devicemanagement/request
ProxyPassReverse /Synchml/initialquery
http://localhost:9763/mdm-windows-api/services/syncml/devicemanagement/request

ProxyPass /ENROLLMENTSERVER/ONPREMISE/PolicyEnrollmentWebservice.svc
http://localhost:9763/mdm-windows-api/services/certificatepolicy/xcep/onpremise
ProxyPassReverse /ENROLLMENTSERVER/ONPREMISE/PolicyEnrollmentWebservice.svc
http://localhost:9763/mdm-windows-api/services/certificatepolicy/xcep/onpremise

ProxyPass /ENROLLMENTSERVER/ONPREMISE/DeviceEnrollmentWebservice.svc
http://localhost:9763/mdm-windows-api/services/deviceenrolment/wstep/onpremise
ProxyPassReverse /ENROLLMENTSERVER/ONPREMISE/DeviceEnrollmentWebservice.svc
http://localhost:9763/mdm-windows-api/services/deviceenrolment/wstep/onpremise

ProxyPass /mdm http://localhost:9763/mdm
ProxyPassReverse /mdm http://localhost:9763/mdm

Most of the config lines here, makes apache server behaves as a reverse
proxy for end points in MDM and, additionally first most configs filters
POST and GET calls to the same endpoint and directs them to different MDM
end points. This had to be implemented this way, as this was a requirement
for Windows MDM message flow.

Please suggest any points you have, which can make this configuration more
optimal.

BR

*Asok Aravinda Perera*
Software Engineer
WSO2, Inc.;http://wso2.com/
<http://www.google.com/url?q=http%3A%2F%2Fwso2.com%2F&sa=D&sntz=1&usg=AFQjCNGJuLRux6KkJwXKVUCYOtEsNCmIAQ>
lean.enterprise.middleware

Mobile: +94722241032
_______________________________________________
Dev mailing list
Dev@wso2.org
http://wso2.org/cgi-bin/mailman/listinfo/dev

Reply via email to