Hi All,

My question is perhaps stupid but I cannot find the anwser alone by reading the forum and googling ;)

Is it any way to secure the deployment of new workflow with the designer when the Intalio server is not listening on localhost ?

Because, it seems everybody is able to deploy workflow with the right ip adress, isn't it ?

There is no login/password anywhere...
I try to look for some ODE configuration, but I didn't find anything, and it is not possible that I am the only one who is asking this question ;)

Thanks a lot for your help
Regards

The current recommendation is to disable the remote DeploymentService and use file-system based deployment on production servers.

cheers,
alex

Hi Alex,

Thanks you for your anwser.
I manage to "secure" a bit by using the reverse proxy configuration of apache.
So that, I can only allow some IP adress and also call all mypages on a stardart webport witout using mod_jk or ajp_proxy.

You need to restrict the ode and wds webservice.
This method can be spoof but I is a bit more secure than nothing ;)

Here is my apache configuration for anybody who wants try :

##########################################################
# INTALIO SECURE WEBSERVICES
##########################################################

LoadModule proxy_module modules/mod_proxy.so
LoadModule proxy_http_module modules/mod_proxy_http.so


<Proxy *>
Order Deny,Allow
Deny from all
</Proxy>

<Proxy http://hostname:8080/console>
Order Deny,Allow
Deny from all
Allow from 192.168.0
</Proxy>

<Proxy http://hostname:8080/bpms-console>
Order Deny,Allow
Deny from all
Allow from 192.168.0.194
</Proxy>

<Proxy http://hostname:8080/ui-fw>
Order Deny,Allow
Deny from all
Allow from 192.168.0
</Proxy>


<Proxy http://hostname:8080/ode>
Order Deny,Allow
Deny from all
Allow from 192.168.0.194
</Proxy>

<Proxy http://hostname:8080/wds>
Order Deny,Allow
Deny from all
Allow from 192.168.0.194
</Proxy>

<Proxy http://hostname:8080/images>
Order Allow,Deny
Allow from all
</Proxy>

<Proxy http://hostname:8080/axis2>
Order Allow,Deny
Allow from all
</Proxy>

<Proxy http://hostname:8080/xFormsManager>
Order Allow,Deny
Allow from all
</Proxy>



ProxyPass /console http://hostname:8080/console
ProxyPass /images http://hostname:8080/images
ProxyPass /ui-fw http://hostname:8080/ui-fw
ProxyPass /axis2 http://hostname:8080/axis2
ProxyPass /xFormsManager http://hostname:8080/xFormsManager
ProxyPass /bpms-console http://hostname:8080/bpms-console
ProxyPass /ode http://hostname:8080/ode
ProxyPass /wds http://hostname:8080/wds


ProxyPassreverse / http://hostname:8080/

##########################################################

Thanks
Brian

Hi Alex,

Can you please provide additional information on how to disable the DeploymentService.

thanks,
sashi.

Hi Sashi,

You had to stop the WebService in the axis2 managment interface.

Go to :

http://hostname:8080/axis2/axis2-admin/

The default login/password are admin/axis2

Then, you had to desactivate the DeployementService.


Regards
Brian