Difference between revisions of "Adito"

From Amahi Wiki
Jump to: navigation, search
 
(144 intermediate revisions by 5 users not shown)
Line 1: Line 1:
 
[[Category:Apps]]
 
[[Category:Apps]]
 +
[http://www.amahi.org/apps/openvpn-als OpenVPN Application Layer Software (ALS)], formerly know as Adito, is a web-based SSL VPN server written in Java. It has a browser-based AJAX UI which allows easy access to intranet services.  Once installed and configured correctly, you will be able to access all your server files and the HDA (to include applications) using the FREE dynamic DNS provided by Amahi.
  
'''''NOTE:'''''  This application is still in testing and not available to users.
 
  
To install OpenVPN ALS (project Adito):
+
'''NOTE: ''' This [http://dl.amahi.org/SSL-Explorer_Administrators_Guide.zip SSL-Explorer Administrators Guide] may come in handy for those interested in more documentation.  Although this not specifically updated for OpenVPN ALS, it is fairly accurate.
  
* Choose Openvpn ALS one-click install from the applications section. Please be patient as it may take a while to complete.
+
There is an [http://zhoupenghust.web.officelive.com/project.aspx Adito standalone agent client] for Windows.
  
* When the install is finished, open a terminal window and become root userExecute the following commands (paste them all at once):
+
=== Configuration Options ===
 +
<u>Router (Settings)</u><br>
 +
In order to use '''<nowiki>https://user.yourhda.com</nowiki>''' (substitute your user name for user) to access Adito VPN from any computer using the web browser, create a Port Forward or Virtual Server ruleThis is a required step for the Map HDA Folders and Apps options to work from outside your network.
  
  echo "export JAVA_HOME=/usr/lib/jvm/jre-1.6.0-openjdk" >> /etc/profile.d/java.sh
+
On a D-LINK WBR-2310 router, set a Virtual Server setting to forward port 443 public and 4443 private to the HDA server IP address using TCP traffic type. 
  echo "export PATH=\$JAVA_HOME/bin:\$PATH" >> /etc/profile.d/java.sh
+
 
  source /etc/profile.d/java.sh
+
 
  cd /var/hda/web-apps/adito/html
+
<u>Map HDA folders (Network Places)</u>
ant install
+
* Login as administrator
 +
* Select Network Places (middle left menu)
 +
* Select Create Network Places (upper right menu)
 +
* Enter desired Name and Description.
 +
* Check Add to Favorites and select Next
 +
* Choose Local File from drop down
 +
* Enter path to the folder you want mapped  and select next
 +
* Select Everyone, select Add, and select Next
 +
* Select Finish and select Exit Wizard
 +
'''NOTE:'''  You can add any folder on the server using the steps above. The default Amahi folders (Music, Docs, etc) have already been added.
 +
 
 +
 
 +
<u>Map HDA Apps Option 1 (Web Forwards Tunneled Web)</u>
 +
* Login as administrator
 +
* Select Web Forwards (middle left menu)
 +
* Select Create Web Forward
 +
* Select Tunneled Web and select Next
 +
* Enter Application Name and Description.
 +
* Check Add to Favorites and select Next
 +
* Enter '''<nowiki>http://application</nowiki>''' (i.e. HDA, Opendb, etc) for Destination URL and select NextApplications that use a port other than 80, you need to specify that as part of the URL, for example '''<nowiki>http://application:8069</nowiki>'''
 +
* Select Everyone, select Add, and select Next
 +
* Select Finish and select Exit Wizard
 +
* Keep in mind not all HDA apps will work outside your network
 +
* This method makes use of Adito Agent (java web agent)
 +
* Each time the agent is executed, the SSL tunnel uses a random port (may not work  with firewalled client network)
 +
 
 +
 
 +
<u>Map HDA Apps Option 2 (Web Forwards Replacement Proxy)</u>
 +
* Login as administrator
 +
* Select Web Forwards (middle left menu)
 +
* Select Create Web Forward
 +
* Select Create Replacement Proxy and select Next
 +
* Enter Application Name and Description.
 +
* Check Add to Favorites and select Next
 +
* Enter '''<nowiki>http://application</nowiki>''' (i.e. HDA, Opendb, etc) for Destination URL and select Next.  Applications that use a port other than 80, you need to specify that as part of the URL, for example '''<nowiki>http://application:8069</nowiki>'''
 +
* Select Next
 +
* Select Everyone, select Add, and select Next
 +
* Select Finish and select Exit Wizard
 +
* Keep in mind not all HDA apps will work outside your network
 +
* The Adito Agent is not used, so the SSL tunnel uses only port 443.
 +
 
 +
== Remote Desktop (RDP) Through OpenVPN ALS (Adito) ==
 +
Download the RDP extension from [http://lars.werner.no/adito-application-advancednativerdpwin32.zip here] and leave it as a .zip file to upload the extension.
 +
=== Credit Due ===
 +
Nearly all of these instructions are taken from [http://lars.werner.no/?p=640 the work of Lars Werner].  His website has images as well and may be a better source of instruction.  These notes are included here so that this hard-to-come-by information is not lost.  If you go there, start on "Step 2."
 +
 
 +
=== Installing the RDP extension ===
 +
The Adito client can publish software to download and execute.
 +
Typical portable software is preferred, since clients does not always have registry write access.
 +
 
 +
The RDP Extension uses the RDPsso.exe command from Microsoft and is based on the old less secure RDP.  But you are connecting through a SSL encrypted tunnel, so it is considered “safe”.
 +
 
 +
If you are not in managementconsole press the changebutton now (Third icon from the left located in the upper right of the Adito screen. If it says "Management Console" when you mouse over it, you need to click it to change into Management mode.)
 +
 
 +
* Press “Extensions” in the “Configuration” tab (Left side menu)
 +
* Then press the “Upload Extension”.  (Upper Right menu)
 +
* Press the Browse-button and select the adito-application-advancednativerdpwin32.zip file, press “Upload”
 +
 
 +
 
 +
'''NOTE:'''  The upload may take some time.  Be patient.
 +
 
 +
You should now have the Microsoft RDP client installed
 +
 
 +
=== Creating an Application ===
 +
 
 +
* Select “Application” under the Resources section of the Left Menu.
 +
* Press the “Create Application shortcut” (Upper Right corner)
 +
* <u>Step 1: Application Extension.</u>  Select the RDP application. Press "Next."
 +
* <u>Step 2: Application Details.</u> Input the name for the client computer to which I wanted to connect and give it a short description.
 +
* <u>Step 3: Application Options.</u> Input the local ip address for that client under "hostname" (e.g. 192.168.1.x or whatever it is in your network) and leave everything else the same.  The default RDP port is 3389 and is usally left alone.
 +
::(Note: You aren’t restricted to local-ips or -hosts here, you can also use internet hosts. Some people use the Adito server as the only entrypoint on their firewall)
 +
* Press next
 +
* <u>Step 4: Application Shortcut Policy Selection.</u> Click on "Everyone" in the left list and then click on the "Add" button. This gives permission to use the application to all users in the Everyone group.
 +
* Press next and look over the summary, then press Finish.
 +
 
 +
 
 +
You have now published an app called whatever you called it in Step 2 to the group “Everyone”.
 +
That means that every user that you have, will gain access to this app.
 +
You can create as many applications as you need, just repeat the wizard
 +
 
 +
=== Java Security Considerations for RDP ===
 +
Before connecting to the RDP from a remote pc, you will need to add an exception to the remote pc's Java's URL Exception List to get passed the errors. Here is how in windows:
 +
 
 +
* Go to the Java Control Panel (On Windows Click Start and then Configure Java)
 +
* Click on the Security tab
 +
* Click on the Edit Site List button
 +
* Click Add in the Exception Site List window
 +
 
 +
 
 +
Add url to Exception Site list
 +
Click in the empty field under the Location field to enter the URL
 +
The url to be added is the dns domain (whatever.yourhda.com)
 +
 
 +
=== Another RDP Extension (Cross-Platform) ===
 +
Here is another collection of RDP extensions that may fit your preferences better.  Once can upload and configure these extensions almost exactly like the above.
 +
 
 +
http://waldemar.schlackow.de/node/10
 +
 
 +
== Troubleshooting: ==
 +
* "This Connection is Untrusted" in FireFox or "There is a problem with this website's security certificate." in Internet Explorer, there is no cause for alarm.  Follow the guidance [http://wiki.amahi.org/index.php/Browser_Tip here].
 +
 
 +
* Application does not start automatically. enter the following in terminal as '''root''' user:
 +
 
 +
ant -f /var/hda/web-apps/adito/server/build.xml start
 +
 
 +
Once it says "Adito started successfully" give it a a minute or so before trying to access it with your web browser.
 +
 
 +
 
 +
'''Reference:'''  [http://www.howtoforge.com/installing-adito-openvpn-als-on-centos Installing Adito (Open VPN ALS) on CentOS]
 +
<!--* Enable application autostart on boot, enter the following in terminal as '''root''' user:
 +
 +
  cd /var/hda/web-apps/adito/server/
 
  ant install-service
 
  ant install-service
  ant start
+
  service adito start
  service adito stop
+
 
sed -i 's/wrapper.working.dir=./wrapper.working.dir=\/var\/hda\/web-apps\/adito\/html/' /var/hda/web-apps/adito/html/conf/wrapper.conf
+
This will create a service that will start upon reboot. To remove the service, change the second line to read:
  sed -i 's/#wrapper.java.additional.2=-Dfile.encoding=UTF-8/wrapper.java.additional.2=-Dfile.encoding=UTF-8/' /var/hda/web-apps/adito/html/conf/wrapper.conf
+
 
service adito start
+
  ant uninstall-service
  
* When instructed, open a web browser and navigate to http://localhost:28080.  Complete the required information.
+
This will be necessary if you uninstall the application.
  
* Once everything is finished and Adito has been started, you can access it via https://adito (it will not work as http).
+
* Fedora 12 64-bit error message "/lib/ld-linux.so.2: bad ELF interpreter: No such file or directory" then do the following:
  
 +
yum install glibc.i686
  
----
+
This may add several libraries but seems to correct the problem with the missing file.
  
  
=== Optional Settings: ===
+
* Error message "Invalid Credentials" then follow the fix below.
* Router (Settings)
 
** In order to use https://user.yourhda.com to access Adito VPN from any computer using the web browser, create a Port Forward or Virtual Server rule.  This is a required step for the Map HDA Folders and Apps options to work from outside your network.
 
** On a D-LINK WBR-2310 router, set a Virtual Server setting to forward port 443 (public and private) to the HDA server IP address using TCP traffic type.
 
  
* Map HDA folders (Network Places)
+
# Open terminal
** Login as administrator
+
# vi /var/hda/web-apps/adito/server/conf/wrapper.conf.base
** Select Network Places (middle left menu)
+
# Locate the line that reads '''#wrapper.java.additional.2=-Dfile.encoding=UTF-8'''
** Select Create Network Places (upper right menu)
+
# Remove the # and save
** Enter Music for Name and Description.
+
# Enter ant -f /var/hda/web-apps/adito/server/build.xml start
** Check Add to Favorites and select Next
 
** Choose Local File from drop down
 
** Enter path /var/hda/files/music and select next
 
** Select Everyone, select Add, and select Next
 
** Select Finish and select Exit Wizard
 
** Repeat this process for all HDA folders (books, pictures, movies, docs)
 
** You can add any folder on the server using the steps above.
 
  
* Map HDA Apps Option 1 (Web Forwards Tunneled Web)
 
** Login as administrator
 
** Select Web Forwards (middle left menu)
 
** Select Create Web Forward
 
** Select Tunneled Web and select Next
 
** Enter HDA for Name and Description.
 
** Check Add to Favorites and select Next
 
** Enter http://hda for Destination URL and select Next
 
** Select Everyone, select Add, and select Next
 
** Select Finish and select Exit Wizard
 
** Not all HDA apps will work (i.e. phpsysinfo)
 
** This method makes use of Adito Agent (java web agent)
 
** Each time the agent is executed, a random port is tunneled (may not work  with firewalled client network)
 
  
* Map HDA Apps Option 2 (Web Forwards Replacement Proxy)
+
* http://hda/ it redirects to https://hda.server.home:4443/showLogon.do and presents me an Adito vpn login screen. Open terminal and become root user, the do the following:
** Login as administrator
 
** Select Web Forwards (middle left menu)
 
** Select Create Web Forward
 
** Select Create Replacement Proxy and select Next
 
** Enter HDA for Name and Description.
 
** Check Add to Favorites and select Next
 
** Enter http://hda for Destination URL and select Next
 
** Select Next
 
** Select Everyone, select Add, and select Next
 
** Select Finish and select Exit Wizard
 
** Not all HDA apps will work (i.e. phpsysinfo)
 
** There is no port restriction (uses 443).
 
  
 +
# ant -f /var/hda/web-apps/adito/server/build.xml stop
 +
# service httpd restart
 +
# ant -f /var/hda/web-apps/adito/server/build.xml start
  
Additional guidance will be added as it becomes available.
+
This issue occurs infrequently.  Once it can be narrowed down to a cause, a fix will be implemented.-->

Latest revision as of 00:28, 28 March 2017

OpenVPN Application Layer Software (ALS), formerly know as Adito, is a web-based SSL VPN server written in Java. It has a browser-based AJAX UI which allows easy access to intranet services. Once installed and configured correctly, you will be able to access all your server files and the HDA (to include applications) using the FREE dynamic DNS provided by Amahi.


NOTE: This SSL-Explorer Administrators Guide may come in handy for those interested in more documentation. Although this not specifically updated for OpenVPN ALS, it is fairly accurate.

There is an Adito standalone agent client for Windows.

Configuration Options

Router (Settings)
In order to use https://user.yourhda.com (substitute your user name for user) to access Adito VPN from any computer using the web browser, create a Port Forward or Virtual Server rule. This is a required step for the Map HDA Folders and Apps options to work from outside your network.

On a D-LINK WBR-2310 router, set a Virtual Server setting to forward port 443 public and 4443 private to the HDA server IP address using TCP traffic type.


Map HDA folders (Network Places)

  • Login as administrator
  • Select Network Places (middle left menu)
  • Select Create Network Places (upper right menu)
  • Enter desired Name and Description.
  • Check Add to Favorites and select Next
  • Choose Local File from drop down
  • Enter path to the folder you want mapped and select next
  • Select Everyone, select Add, and select Next
  • Select Finish and select Exit Wizard

NOTE: You can add any folder on the server using the steps above. The default Amahi folders (Music, Docs, etc) have already been added.


Map HDA Apps Option 1 (Web Forwards Tunneled Web)

  • Login as administrator
  • Select Web Forwards (middle left menu)
  • Select Create Web Forward
  • Select Tunneled Web and select Next
  • Enter Application Name and Description.
  • Check Add to Favorites and select Next
  • Enter http://application (i.e. HDA, Opendb, etc) for Destination URL and select Next. Applications that use a port other than 80, you need to specify that as part of the URL, for example http://application:8069
  • Select Everyone, select Add, and select Next
  • Select Finish and select Exit Wizard
  • Keep in mind not all HDA apps will work outside your network
  • This method makes use of Adito Agent (java web agent)
  • Each time the agent is executed, the SSL tunnel uses a random port (may not work with firewalled client network)


Map HDA Apps Option 2 (Web Forwards Replacement Proxy)

  • Login as administrator
  • Select Web Forwards (middle left menu)
  • Select Create Web Forward
  • Select Create Replacement Proxy and select Next
  • Enter Application Name and Description.
  • Check Add to Favorites and select Next
  • Enter http://application (i.e. HDA, Opendb, etc) for Destination URL and select Next. Applications that use a port other than 80, you need to specify that as part of the URL, for example http://application:8069
  • Select Next
  • Select Everyone, select Add, and select Next
  • Select Finish and select Exit Wizard
  • Keep in mind not all HDA apps will work outside your network
  • The Adito Agent is not used, so the SSL tunnel uses only port 443.

Remote Desktop (RDP) Through OpenVPN ALS (Adito)

Download the RDP extension from here and leave it as a .zip file to upload the extension.

Credit Due

Nearly all of these instructions are taken from the work of Lars Werner. His website has images as well and may be a better source of instruction. These notes are included here so that this hard-to-come-by information is not lost. If you go there, start on "Step 2."

Installing the RDP extension

The Adito client can publish software to download and execute. Typical portable software is preferred, since clients does not always have registry write access.

The RDP Extension uses the RDPsso.exe command from Microsoft and is based on the old less secure RDP. But you are connecting through a SSL encrypted tunnel, so it is considered “safe”.

If you are not in managementconsole press the changebutton now (Third icon from the left located in the upper right of the Adito screen. If it says "Management Console" when you mouse over it, you need to click it to change into Management mode.)

  • Press “Extensions” in the “Configuration” tab (Left side menu)
  • Then press the “Upload Extension”. (Upper Right menu)
  • Press the Browse-button and select the adito-application-advancednativerdpwin32.zip file, press “Upload”


NOTE: The upload may take some time. Be patient.

You should now have the Microsoft RDP client installed

Creating an Application

  • Select “Application” under the Resources section of the Left Menu.
  • Press the “Create Application shortcut” (Upper Right corner)
  • Step 1: Application Extension. Select the RDP application. Press "Next."
  • Step 2: Application Details. Input the name for the client computer to which I wanted to connect and give it a short description.
  • Step 3: Application Options. Input the local ip address for that client under "hostname" (e.g. 192.168.1.x or whatever it is in your network) and leave everything else the same. The default RDP port is 3389 and is usally left alone.
(Note: You aren’t restricted to local-ips or -hosts here, you can also use internet hosts. Some people use the Adito server as the only entrypoint on their firewall)
  • Press next
  • Step 4: Application Shortcut Policy Selection. Click on "Everyone" in the left list and then click on the "Add" button. This gives permission to use the application to all users in the Everyone group.
  • Press next and look over the summary, then press Finish.


You have now published an app called whatever you called it in Step 2 to the group “Everyone”. That means that every user that you have, will gain access to this app. You can create as many applications as you need, just repeat the wizard

Java Security Considerations for RDP

Before connecting to the RDP from a remote pc, you will need to add an exception to the remote pc's Java's URL Exception List to get passed the errors. Here is how in windows:

  • Go to the Java Control Panel (On Windows Click Start and then Configure Java)
  • Click on the Security tab
  • Click on the Edit Site List button
  • Click Add in the Exception Site List window


Add url to Exception Site list Click in the empty field under the Location field to enter the URL The url to be added is the dns domain (whatever.yourhda.com)

Another RDP Extension (Cross-Platform)

Here is another collection of RDP extensions that may fit your preferences better. Once can upload and configure these extensions almost exactly like the above.

http://waldemar.schlackow.de/node/10

Troubleshooting:

  • "This Connection is Untrusted" in FireFox or "There is a problem with this website's security certificate." in Internet Explorer, there is no cause for alarm. Follow the guidance here.
  • Application does not start automatically. enter the following in terminal as root user:
ant -f /var/hda/web-apps/adito/server/build.xml start

Once it says "Adito started successfully" give it a a minute or so before trying to access it with your web browser.


Reference: Installing Adito (Open VPN ALS) on CentOS