=== Tips ===* You will receive a security alert on the first run for Mozilla Firefox or Internet '''NOTE: ''' This [http://dl.amahi.org/SSL-Explorer_Administrators_Guide.zip SSL-Explorer. This is no cause Administrators Guide] may come in handy for alarmthose interested in more documentation. To prevent Although this from occurring each time you access Aditonot specifically updated for OpenVPN ALS, follow the procedures listed below:** Mozilla Firefox##it is fairly accurate.

** Internet Explorer# When the page loads, it will say "There is a problem with this website's security certificate."# Select the option "Continue to this website (not recommended)an [http://zhoupenghust."# Look for the "Certificate Error" box next to the web page address at the top and select it.# A box will pop up saying "Untrusted Certificate" and select "View certificates"# When the certificate is displayed, you will see it belongs to username.yourhdaofficelive.com/project. Choose the Install button and a wizard will pop up.# Select Next and ensure the "Automatically select the certificate store based onthe type of certificate is chosen and select Next.# Select Finish and a Security Warning will appear stating "You are about to isntall a certificate from a certification authority (CA) claing to represent: user.yourhda.com". Select Yes.# It will indicate Finished and choose OK to completeaspx Adito standalone agent client] for Windows.

=== Configuration Options: ===* <u>Router Map HDA Apps Option 1 (SettingsWeb Forwards Tunneled Web)</u>*Login as administrator* Select Web Forwards (middle left menu)* Select Create Web Forward* Select Tunneled Web and select Next* Enter Application Name and Description.* In order Check Add to use httpsFavorites and select Next* Enter '''<nowiki>http://userapplication</nowiki>''' (i.yourhdae.com to access Adito VPN from any computer using the web browserHDA, Opendb, create a Port Forward or Virtual Server ruleetc) for Destination URL and select Next. This is Applications that use a required step port other than 80, you need to specify that as part of the URL, for the Map example '''<nowiki>http://application:8069</nowiki>'''* Select Everyone, select Add, and select Next* Select Finish and select Exit Wizard* Keep in mind not all HDA Folders and Apps options to apps will work from outside your network.*This method makes use of Adito Agent (java web agent)* On a D-LINK WBR-2310 routerEach time the agent is executed, set the SSL tunnel uses a Virtual Server setting to forward random port 443 public and 4443 private to the HDA server IP address using TCP traffic type. (may not work with firewalled client network)

* <u>Map HDA Apps Option 1 2 (Web Forwards Tunneled WebReplacement Proxy)</u>** Login as administrator** Select Web Forwards (middle left menu)** Select Create Web Forward** Select Tunneled Web Create Replacement Proxy and select Next** Enter HDA for Application Name and Description.** Check Add to Favorites and select Next** Enter '''<nowiki>http://hda application</nowiki>''' (i.e. HDA, Opendb, etc) for Destination URL and select Next. Applications that use a port other than 80, you need to specify that as part of the URL, for example '''<nowiki>http://application:8069</nowiki>'''*Select Next* Select Everyone, select Add, and select Next** Select Finish and select Exit Wizard** Not Keep in mind not all HDA apps will work (i.e. phpsysinfo)outside your network** This method makes use of The Adito Agent (java web agent)** Each time the agent is executednot used, a random so the SSL tunnel uses only port is tunneled (may not work with firewalled client network) 443.

* <u>Map HDA Apps Option 2 == Remote Desktop (RDP) Through OpenVPN ALS (Web Forwards Replacement ProxyAdito)<==Download the RDP extension from [http://lars.werner.no/u>adito-application-advancednativerdpwin32.zip here] and leave it as a .zip file to upload the extension.=== Credit Due ===** Login Nearly all of these instructions are taken from [http://lars.werner.no/?p=640 the work of Lars Werner]. His website has images as administratorwell and may be a better source of instruction. These notes are included here so that this hard-to-come-by information is not lost. If you go there, start on "Step 2." === Installing the RDP extension ===The Adito client can publish software to download and execute.Typical portable software is preferred, since clients does not always have registry write access. The RDP Extension uses the RDPsso.exe command from Microsoft and is based on the old less secure RDP. But you are connecting through a SSL encrypted tunnel, so it is considered “safe”. If you are not in managementconsole press the changebutton now (Third icon from the left located in the upper right of the Adito screen. If it says "Management Console" when you mouse over it, you need to click it to change into Management mode.) *Press “Extensions” in the “Configuration” tab (Left side menu)* Select Web Forwards Then press the “Upload Extension”. (middle left Upper Right menu)*Press the Browse-button and select the adito-application-advancednativerdpwin32.zip file, press “Upload”  '''NOTE:''' The upload may take some time. Be patient. You should now have the Microsoft RDP client installed === Creating an Application === * Select Create Web Forward“Application” under the Resources section of the Left Menu.*Press the “Create Application shortcut” (Upper Right corner)* <u>Step 1: Application Extension.</u> Select Create Replacement Proxy and select the RDP application. Press "Next."*<u>Step 2: Application Details.</u> Input the name for the client computer to which I wanted to connect and give it a short description.* Enter HDA <u>Step 3: Application Options.</u> Input the local ip address for Name that client under "hostname" (e.g. 192.168.1.x or whatever it is in your network) and leave everything else the same. The default RDP port is 3389 and Descriptionis usally left alone.::(Note: You aren’t restricted to local-ips or -hosts here, you can also use internet hosts.Some people use the Adito server as the only entrypoint on their firewall)*Press next* Check <u>Step 4: Application Shortcut Policy Selection.</u> Click on "Everyone" in the left list and then click on the "Add " button. This gives permission to use the application to all users in the Everyone group.* Press next and look over the summary, then press Finish.  You have now published an app called whatever you called it in Step 2 to the group “Everyone”.That means that every user that you have, will gain access to this app.You can create as many applications as you need, just repeat the wizard === Java Security Considerations for RDP ===Before connecting to the RDP from a remote pc, you will need to add an exception to the remote pc's Java's URL Exception List to Favorites get passed the errors. Here is how in windows: * Go to the Java Control Panel (On Windows Click Start and select Nextthen Configure Java)* Click on the Security tab*Click on the Edit Site List button* Enter Click Add in the Exception Site List window  Add url to Exception Site listClick in the empty field under the Location field to enter the URLThe url to be added is the dns domain (whatever.yourhda.com) === Another RDP Extension (Cross-Platform) ===Here is another collection of RDP extensions that may fit your preferences better. Once can upload and configure these extensions almost exactly like the above. http://hda waldemar.schlackow.de/node/10 == Troubleshooting: ==* "This Connection is Untrusted" in FireFox or "There is a problem with this website's security certificate." in Internet Explorer, there is no cause for Destination URL and select Nextalarm. Follow the guidance [http://wiki.amahi.org/index.php/Browser_Tip here]. ** Select NextApplication does not start automatically. enter the following in terminal as '''root''' user:  ant -f /var/hda/web-apps/adito/server/build.xml start Once it says "Adito started successfully" give it a a minute or so before trying to access it with your web browser.  '''Reference:''' [http://www.howtoforge.com/installing-adito-openvpn-als-on-centos Installing Adito (Open VPN ALS) on CentOS]<!--** Select EveryoneEnable application autostart on boot, select Addenter the following in terminal as '''root''' user: cd /var/hda/web-apps/adito/server/ ant install-service service adito start This will create a service that will start upon reboot. To remove the service, and select Nextchange the second line to read:  ant uninstall-service This will be necessary if you uninstall the application. *Fedora 12 64-bit error message "/lib/ld-linux.so.2: bad ELF interpreter: No such file or directory" then do the following:  yum install glibc.i686 This may add several libraries but seems to correct the problem with the missing file.  * Select Finish Error message "Invalid Credentials" then follow the fix below. # Open terminal# vi /var/hda/web-apps/adito/server/conf/wrapper.conf.base# Locate the line that reads '''#wrapper.java.additional.2=-Dfile.encoding=UTF-8'''# Remove the # and select Exit Wizardsave# Enter ant -f /var/hda/web-apps/adito/server/build.xml start  ** Not all HDA http://hda/ it redirects to https://hda.server.home:4443/showLogon.do and presents me an Adito vpn login screen. Open terminal and become root user, the do the following: # ant -f /var/hda/web-apps will work (i/adito/server/build.exml stop# service httpd restart# ant -f /var/hda/web-apps/adito/server/build. phpsysinfo)xml start ** There is no port restriction (uses 443)This issue occurs infrequently. Once it can be narrowed down to a cause, a fix will be implemented.-->