Adito

OpenVPN Application Layer Software (ALS), formerly know as Adito, is a web-based SSL VPN server written in Java. It has a browser-based AJAX UI which allows easy access to intranet services. Once installed and configured correctly, you will be able to access all your server files and the HDA (to include applications) using https://user.yourhda.com (tested with Firefox and Internet Explorer).

This SSL-Explorer Administrators Guide may come in handy for those interested in more documentation

Troubleshooting

• "This Connection is Untrusted" in FireFox or "There is a problem with this website's security certificate." in Internet Explorer, there is no cause for alarm. Follow the guidance here.

• Application does not start automatically. enter the following in terminal as root user:

ant -f /var/hda/web-apps/adito/server/build.xml start

Once it says "Adito started successfully" give it a a minute or so before trying to access it with your web browser.

• Fedora 12 64-bit error message "/lib/ld-linux.so.2: bad ELF interpreter: No such file or directory" then do the following:

yum install glibc.i686

This may add several libraries but seems to correct the problem with the missing file.

• Error message "Invalid Credentials" then follow the fix below.

1. Open terminal
2. vi /var/hda/web-apps/adito/server/conf/wrapper.conf.base
3. Locate the line that reads #wrapper.java.additional.2=-Dfile.encoding=UTF-8
4. Remove the # and save
5. Enter ant -f /var/hda/web-apps/adito/server/build.xml start

Configuration Options:

Router (Settings)
In order to use https://user.yourhda.com (substitute your user name for user) to access Adito VPN from any computer using the web browser, create a Port Forward or Virtual Server rule. This is a required step for the Map HDA Folders and Apps options to work from outside your network.

On a D-LINK WBR-2310 router, set a Virtual Server setting to forward port 443 public and 4443 private to the HDA server IP address using TCP traffic type.

Map HDA folders (Network Places)

• Login as administrator
• Select Network Places (middle left menu)
• Select Create Network Places (upper right menu)
• Enter desired Name and Description.
• Check Add to Favorites and select Next
• Choose Local File from drop down
• Enter path to the folder you want mapped and select next
• Select Everyone, select Add, and select Next
• Select Finish and select Exit Wizard

NOTE: You can add any folder on the server using the steps above. The default Amahi folders (Music, Docs, etc) have already been added.

Map HDA Apps Option 1 (Web Forwards Tunneled Web)

• Login as administrator
• Select Web Forwards (middle left menu)
• Select Create Web Forward
• Select Tunneled Web and select Next
• Enter Application Name and Description.
• Check Add to Favorites and select Next
• Enter http://application (i.e. HDA, Opendb, etc) for Destination URL and select Next. Applications that use a port other than 80, you need to specify that as part of the URL, for example http://application:8069
• Select Everyone, select Add, and select Next
• Select Finish and select Exit Wizard
• Keep in mind not all HDA apps will work outside your network
• This method makes use of Adito Agent (java web agent)
• Each time the agent is executed, the SSL tunnel uses a random port (may not work with firewalled client network)

Map HDA Apps Option 2 (Web Forwards Replacement Proxy)

• Login as administrator
• Select Web Forwards (middle left menu)
• Select Create Web Forward
• Select Create Replacement Proxy and select Next
• Enter Application Name and Description.
• Check Add to Favorites and select Next
• Enter http://application (i.e. HDA, Opendb, etc) for Destination URL and select Next. Applications that use a port other than 80, you need to specify that as part of the URL, for example http://application:8069
• Select Next
• Select Everyone, select Add, and select Next
• Select Finish and select Exit Wizard
• Keep in mind not all HDA apps will work outside your network
• The Adito Agent is not used, so the SSL tunnel uses only port 443.

Applications Tested with Adito Web Forward:

I have tested several applications using both options for web forwards. I used the standard port 80. You may have experience different results. They are listed below:

Successful

• Webmin
• OpenDB
• TheAddressBook
• PBA (Status screen only)
• AjaXplorer
• LinPHA
• vnStat
• WikkaWiki
• Phplist
• Home Inventory
• VCD-db
• php Address Book
• phpMyAdmin
• Slideshow
• Horde
• vTiger
• phpBB

Unsuccessful

• Ajaxterm
• phpSysInfo
• AmahiTunes
• Recipes
• MediaWiki
• Weightwatcher
• Blog
• Piwik
• Gallery 2
• Coolsmile
• portaNEO