cdugga's questions

I want to restrict certain domains from accessing services on my app server. For example; mydomain.com/sensitiveInformationServlet

I want to create a filter on my Apache server which will match all requests for this servlet and check the domain and if trusted allow access.

What is the best way to do this? Initially i thought i could create a Virtual host and then apply the mod_authz_host module however the virtual host can only map to a domain and port and ignores everything after the port.

Any suggestions? This is how far i got

<VirtualHost mydomain>
    <Location />
       Order Deny,Allow
       Deny from all
       Allow from mydomain.com some.trusteddomain.com
    </Location>
</VirtualHost>

This will block access to the entire site and not just the sensitiveInformationServlet servlet

I'm trying to understand what port numbers i can use to access my application both through the web server (IBM Http Server) and directly to the app server (IBM Websphere v6.1).

What ports can i use to bypass IHS and hit server directly using HTTP and HTTPS? What ports can i use to pass through IHS server using HTTP and HTTPS? What are the default ports and are there other ports i should be aware of?

Is this information stored in a config file or is it dependent on how i configure host aliases?

Thanks

im working with four app servers and two database instances (3DNS and BigIP determine what app server a user is directed to based on usage etc). Two app servers per database node. The database instances stay synchronized using replication.

However, when a new user first visits the application it uses SSO to get a their identification and automatically registers that user. This is a problem if say the user opens two browser at the same time , both pointing to my application. The app will try to register the user on both databases, then when replication runs it will throw a unique constraint exception.

Is there any way to manage database access in this type of architecture so that certain tables, like user registration, can only be accessed if a flag has been obtained?

thanks, any suggestions would be helpful.