{"id":159,"date":"2016-03-13T20:54:15","date_gmt":"2016-03-13T19:54:15","guid":{"rendered":"http:\/\/wordpress.igua.es\/?p=159"},"modified":"2016-02-28T20:59:34","modified_gmt":"2016-02-28T19:59:34","slug":"vsphere-web-client-6-con-apache-como-proxy-inverso","status":"publish","type":"post","link":"https:\/\/wordpress.igua.es\/index.php\/2016\/03\/13\/vsphere-web-client-6-con-apache-como-proxy-inverso\/","title":{"rendered":"vSphere Web Client 6 con Apache como proxy inverso"},"content":{"rendered":"<p>Hace ya un tiempo que actualic\u00e9 mi entorno de pruebas del vCenter 5.5 al 6.0. Siempre hab\u00eda usado Apache como proxy inverso de mi vCenter 5.5 para el SSL y funcionaba a la perfecci\u00f3n, pero al realizar la actualizaci\u00f3n al 6.0 comprob\u00e9 que no pod\u00eda iniciar sesi\u00f3n ya que se me quedaba en una p\u00e1gina de error 404, pero viendo la URL apuntaba al nombre interno del vCenter con su sufijo XXX.local, por lo que era normal que desde fuera de mi entorno me apareciera eso. \u00bfQue pod\u00eda hacer?<\/p>\n<p><!--more--><\/p>\n<p>La verdad que esto me llevo en un primer momento ha realizar un rollback y volver a mi vCenter 5.5 que tan bien configurado lo tenia ya.<\/p>\n<p>Con el tiempo decid\u00ed que tenia que volver a probar a realizar otra actualizaci\u00f3n por si la primera hab\u00eda pasado alg\u00fan error y no hab\u00eda sido consciente, pero nada. Volv\u00eda\u00a0 a actualizar y ah\u00ed estaba mi error 404. En esta ocasi\u00f3n decid\u00ed dejarlo as\u00ed y paralelamente montar un vCenter en Windows (ya que uso el Appliance) para ver si pod\u00eda hacer algo para solucionarlo.<\/p>\n<p>Este error aparec\u00eda cuando intentaba el navegador contactar con el SSO, por lo que es aqu\u00ed donde centr\u00e9 mi b\u00fasqueda ya que en la versi\u00f3n 6 una de las cosas que m\u00e1s cambio sufre es justamente esta funcionalidad<\/p>\n<p>En este caso encontr\u00e9 la soluci\u00f3n en el fichero hostname que est\u00e1 dentro de \u00abvmware-sso\u00bb, en mi Appliance este fichero est\u00e1 en \u00ab\/etc\/vmware-sso\/\u00bb. En este fichero aparec\u00eda el nombre del vCenter con el FQDN local, por lo que camb\u00ede el FQDN al p\u00fablico y reinicie el Appliance.<\/p>\n<p>Una vez iniciado de nuevo e intentar iniciar sesi\u00f3n el vSphere Web Client comprob\u00e9 que ahora si que pod\u00eda acceder correctamente por lo que ya pod\u00eda consolidar la actualizaci\u00f3n al vCenter 6 sin miedo a no poder acceder desde fuera.<\/p>\n<p>Por si es de utilidad la configuraci\u00f3n de Apache para la conexi\u00f3n SSL inversa con vCenter la dejo aqu\u00ed abajo publicada:<\/p>\n<pre class=\"brush: xml; title: C\u00f3digo:; notranslate\" title=\"C\u00f3digo:\">\r\n&lt;VirtualHost _default_:443&gt; \u00a0\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 ServerAdmin xxx \u00a0\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 ServerName xxx \u00a0\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 SSLEngine on \u00a0\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 SSLCertificateFile\u00a0\u00a0\u00a0 xxx \u00a0\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 SSLCertificateKeyFile xxx \u00a0\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \u00a0\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 SSLProxyEngine on \u00a0\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 SSLProxyVerify none\u00a0 \u00a0\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 SSLProxyCheckPeerCN off \u00a0\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 SSLProxyCheckPeerName off \u00a0\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 SSLProxyCheckPeerExpire off \u00a0\r\n\u00a0 \r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 RewriteEngine On \u00a0\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 ProxyPreserveHost On \u00a0\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \u00a0\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \u00a0\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 DocumentRoot \/var\/www\/html \u00a0\r\n\u00a0 \r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 ErrorLog ${APACHE_LOG_DIR}\/xxx.log \u00a0\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 CustomLog ${APACHE_LOG_DIR}\/xxx_access.log combined \u00a0\r\n\u00a0 \r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \u00a0\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 &lt;Location \/&gt;\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \u00a0\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 ProxyPass https:\/\/xxx\/ \u00a0\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 ProxyPassReverse https:\/\/xxx\/ \u00a0\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 SSLRequireSSL \u00a0\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \u00a0\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 RedirectMatch permanent ^\/$ https:\/\/xxx\/vsphere-client\/?csp \u00a0\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 RedirectMatch permanent ^\/admin$ https:\/\/xxx\/admin\/ \u00a0\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 RedirectMatch permanent ^\/vami$ https:\/\/xxx\/vami\/ \u00a0\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 RedirectMatch permanent ^\/websso$ https:\/\/xxx\/websso\/ \u00a0\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 RedirectMatch permanent ^\/psc$ https:\/\/xxx\/psc\/ \u00a0\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 &lt;\/Location&gt; \u00a0\r\n\u00a0 \r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 &lt;Location \/vsphere-client\/&gt; \u00a0\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 ProxyPass https:\/\/yyy:9443\/vsphere-client\/ \u00a0\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 ProxyPassReverse https:\/\/yyy:9443\/vsphere-client\/ \u00a0\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 SSLRequireSSL \u00a0\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 &lt;\/Location&gt; \u00a0\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \u00a0\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 admin\/&gt; \u00a0\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 ProxyPass https:\/\/yyy:5480\/ \u00a0\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 ProxyPassReverse https:\/\/yyy:5480\/ \u00a0\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 SSLRequireSSL \u00a0\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 &lt;\/Location&gt; \u00a0\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \u00a0\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 vami\/&gt; \u00a0\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 ProxyPass https:\/\/yyy:5480\/vami\/ \u00a0\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 ProxyPassReverse https:\/\/yyy:5480\/vami\/ \u00a0\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 SSLRequireSSL \u00a0\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 &lt;\/Location&gt; \u00a0\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \u00a0\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \u00a0\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 BrowserMatch &quot;MSIE &#x5B;2-6]&quot; \\ \u00a0\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 nokeepalive ssl-unclean-shutdown \\ \u00a0\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 downgrade-1.0 force-response-1.0 \u00a0\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 # MSIE 7 and newer should be able to use keepalive \u00a0\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 BrowserMatch &quot;MSIE &#x5B;17-9]&quot; ssl-unclean-shutdown \u00a0\r\n\u00a0 \r\n\u00a0\u00a0\u00a0 \r\n<\/pre>\n<!-- AddThis Advanced Settings generic via filter on the_content --><!-- AddThis Share Buttons generic via filter on the_content -->","protected":false},"excerpt":{"rendered":"<p>Hace ya un tiempo que actualic\u00e9 mi entorno de pruebas del vCenter 5.5 al 6.0. Siempre hab\u00eda usado Apache como proxy inverso de mi vCenter 5.5 para el SSL y funcionaba a la perfecci\u00f3n, pero al realizar la actualizaci\u00f3n al &hellip; <a href=\"https:\/\/wordpress.igua.es\/index.php\/2016\/03\/13\/vsphere-web-client-6-con-apache-como-proxy-inverso\/\">Sigue leyendo <span class=\"meta-nav\">&rarr;<\/span><\/a><!-- AddThis Advanced Settings generic via filter on get_the_excerpt --><!-- AddThis Share Buttons generic via filter on get_the_excerpt --><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[16],"tags":[32,31],"class_list":["post-159","post","type-post","status-publish","format-standard","hentry","category-vmware","tag-apache","tag-vcenter"],"_links":{"self":[{"href":"https:\/\/wordpress.igua.es\/index.php\/wp-json\/wp\/v2\/posts\/159","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wordpress.igua.es\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/wordpress.igua.es\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/wordpress.igua.es\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/wordpress.igua.es\/index.php\/wp-json\/wp\/v2\/comments?post=159"}],"version-history":[{"count":3,"href":"https:\/\/wordpress.igua.es\/index.php\/wp-json\/wp\/v2\/posts\/159\/revisions"}],"predecessor-version":[{"id":162,"href":"https:\/\/wordpress.igua.es\/index.php\/wp-json\/wp\/v2\/posts\/159\/revisions\/162"}],"wp:attachment":[{"href":"https:\/\/wordpress.igua.es\/index.php\/wp-json\/wp\/v2\/media?parent=159"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/wordpress.igua.es\/index.php\/wp-json\/wp\/v2\/categories?post=159"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/wordpress.igua.es\/index.php\/wp-json\/wp\/v2\/tags?post=159"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}