Has anyone implemented Nginx as a reverse proxy with Microsoft Sharepoint?

classic Classic list List threaded Threaded
9 messages Options
Reply | Threaded
Open this post in threaded view
|

Has anyone implemented Nginx as a reverse proxy with Microsoft Sharepoint?

sonpg
Hi Guys,

Keen to know if there was any success rate for implementing Nginx as a
reverse proxy for Sharepoint? I mean I did implement however I am finding
issues with Sub-sites and wanted to know if there is any solution for the
same?

Posted at Nginx Forum: https://forum.nginx.org/read.php?2,278193,278193#msg-278193

_______________________________________________
nginx mailing list
[hidden email]
http://mailman.nginx.org/mailman/listinfo/nginx
Reply | Threaded
Open this post in threaded view
|

Re: Has anyone implemented Nginx as a reverse proxy with Microsoft Sharepoint?

Payam Chychi

On Thu, Jan 18, 2018 at 10:11 PM blason <[hidden email]> wrote:
Hi Guys,

Keen to know if there was any success rate for implementing Nginx as a
reverse proxy for Sharepoint? I mean I did implement however I am finding
issues with Sub-sites and wanted to know if there is any solution for the
same?

Posted at Nginx Forum: https://forum.nginx.org/read.php?2,278193,278193#msg-278193

_______________________________________________
nginx mailing list
[hidden email]
http://mailman.nginx.org/mailman/listinfo/nginx
Whats the problem? I’ve had them running in production for mission critical stuff for over 4 years, rock solid!

--
Payam Tarverdyan Chychi
Network Security Specialist / Network Engineer

_______________________________________________
nginx mailing list
[hidden email]
http://mailman.nginx.org/mailman/listinfo/nginx
Reply | Threaded
Open this post in threaded view
|

Re: Has anyone implemented Nginx as a reverse proxy with Microsoft Sharepoint?

sonpg
Wow man!! Thanks I am struggling with configuration as Subsites does not
show anything it shows blank page i.e only for blank page while Front page
gets open successfully.

Posted at Nginx Forum: https://forum.nginx.org/read.php?2,278193,278195#msg-278195

_______________________________________________
nginx mailing list
[hidden email]
http://mailman.nginx.org/mailman/listinfo/nginx
Reply | Threaded
Open this post in threaded view
|

Re: Has anyone implemented Nginx as a reverse proxy with Microsoft Sharepoint?

Payam Chychi

On Thu, Jan 18, 2018 at 10:18 PM blason <[hidden email]> wrote:
Wow man!! Thanks I am struggling with configuration as Subsites does not
show anything it shows blank page i.e only for blank page while Front page
gets open successfully.

Posted at Nginx Forum: https://forum.nginx.org/read.php?2,278193,278195#msg-278195

_______________________________________________
nginx mailing list
[hidden email]
http://mailman.nginx.org/mailman/listinfo/nginx
What does your config look like?
--
Payam Tarverdyan Chychi
Network Security Specialist / Network Engineer

_______________________________________________
nginx mailing list
[hidden email]
http://mailman.nginx.org/mailman/listinfo/nginx
Reply | Threaded
Open this post in threaded view
|

Re: Has anyone implemented Nginx as a reverse proxy with Microsoft Sharepoint?

sonpg
Can I DM you or send you to email address?

Posted at Nginx Forum: https://forum.nginx.org/read.php?2,278193,278197#msg-278197

_______________________________________________
nginx mailing list
[hidden email]
http://mailman.nginx.org/mailman/listinfo/nginx
Reply | Threaded
Open this post in threaded view
|

RE: [IE] Re: Has anyone implemented Nginx as a reverse proxy with Microsoft Sharepoint?

Jason Whittington
In reply to this post by sonpg
I haven’t done it for sharepoint but I have done it for TFS.  If I had to guess you are probably being bitten by NTLM.

NTLM authentication authenticates connections instead of requests, and this is somewhat contradicts HTTP protocol, which is expected to be stateless. As a result it doesn't generally work though proxies, including nginx.

NGINX can support it though, you need to use the "ntlm" directive. Below is an [stripped down] example of how I have it set up in front of TFS.  I would think Sharepoint would be very similar.  This has worked very reliably for like a year.

upstream MyNtlmService {
        zone backend;
        server 192.168.0.1:8080;
        server 192.168.0.2:8080;
        #See http://stackoverflow.com/questions/10395807/nginx-close-upstream-connection-after-request
        keepalive 64;
        #See http://nginx.org/en/docs/http/ngx_http_upstream_module.html#ntlm
        ntlm;
}
    server {
        listen 80;

        location / {
            proxy_read_timeout 60s;
            #http://stackoverflow.com/questions/21284935/nginx-reverse-proxy-with-windows-authentication-that-uses-ntlm
            proxy_http_version 1.1;
            proxy_set_header Connection "";

            proxy_pass http:// MyNtlmService /;
        }
    }


Jason


-----Original Message-----
From: nginx [mailto:[hidden email]] On Behalf Of blason
Sent: Friday, January 19, 2018 12:18 AM
To: [hidden email]
Subject: [IE] Re: Has anyone implemented Nginx as a reverse proxy with Microsoft Sharepoint?

Wow man!! Thanks I am struggling with configuration as Subsites does not show anything it shows blank page i.e only for blank page while Front page gets open successfully.

Posted at Nginx Forum: https://forum.nginx.org/read.php?2,278193,278195#msg-278195

_______________________________________________
nginx mailing list
[hidden email]
http://mailman.nginx.org/mailman/listinfo/nginx

This message contains proprietary information from Equifax which may be confidential. If you are not an intended recipient, please refrain from any disclosure, copying, distribution or use of this information and note that such actions are prohibited. If you have received this transmission in error, please notify by e-mail [hidden email]. Equifax® is a registered trademark of Equifax Inc. All rights reserved.
_______________________________________________
nginx mailing list
[hidden email]
http://mailman.nginx.org/mailman/listinfo/nginx
Reply | Threaded
Open this post in threaded view
|

Re: [IE] Re: Has anyone implemented Nginx as a reverse proxy with Microsoft Sharepoint?

Payam Chychi

On Fri, Jan 19, 2018 at 7:14 AM Jason Whittington <[hidden email]> wrote:
I haven’t done it for sharepoint but I have done it for TFS.  If I had to guess you are probably being bitten by NTLM.

NTLM authentication authenticates connections instead of requests, and this is somewhat contradicts HTTP protocol, which is expected to be stateless. As a result it doesn't generally work though proxies, including nginx.

NGINX can support it though, you need to use the "ntlm" directive. Below is an [stripped down] example of how I have it set up in front of TFS.  I would think Sharepoint would be very similar.  This has worked very reliably for like a year.

upstream MyNtlmService {
        zone backend;
        server 192.168.0.1:8080;
        server 192.168.0.2:8080;
        #See http://stackoverflow.com/questions/10395807/nginx-close-upstream-connection-after-request
        keepalive 64;
        #See http://nginx.org/en/docs/http/ngx_http_upstream_module.html#ntlm
        ntlm;
}
    server {
        listen 80;

        location / {
            proxy_read_timeout 60s;
            #http://stackoverflow.com/questions/21284935/nginx-reverse-proxy-with-windows-authentication-that-uses-ntlm
            proxy_http_version 1.1;
            proxy_set_header Connection "";

            proxy_pass http:// MyNtlmService /;
        }
    }


Jason


-----Original Message-----
From: nginx [mailto:[hidden email]] On Behalf Of blason
Sent: Friday, January 19, 2018 12:18 AM
To: [hidden email]
Subject: [IE] Re: Has anyone implemented Nginx as a reverse proxy with Microsoft Sharepoint?

Wow man!! Thanks I am struggling with configuration as Subsites does not show anything it shows blank page i.e only for blank page while Front page gets open successfully.

Posted at Nginx Forum: https://forum.nginx.org/read.php?2,278193,278195#msg-278195

_______________________________________________
nginx mailing list
[hidden email]
http://mailman.nginx.org/mailman/listinfo/nginx

This message contains proprietary information from Equifax which may be confidential. If you are not an intended recipient, please refrain from any disclosure, copying, distribution or use of this information and note that such actions are prohibited. If you have received this transmission in error, please notify by e-mail [hidden email]. Equifax® is a registered trademark of Equifax Inc. All rights reserved.
_______________________________________________
nginx mailing list
[hidden email]
http://mailman.nginx.org/mailman/listinfo/nginx


Yep, the problem is/will be ntlm. Try what Jason mentioned, and you can drop me an email if you like off-list - pchychi . At . Gmail
--
Payam Tarverdyan Chychi
Network Security Specialist / Network Engineer

_______________________________________________
nginx mailing list
[hidden email]
http://mailman.nginx.org/mailman/listinfo/nginx
Reply | Threaded
Open this post in threaded view
|

Re: RE: [IE] Re: Has anyone implemented Nginx as a reverse proxy with Microsoft Sharepoint?

sonpg
In reply to this post by Jason Whittington
Hi there,

I guess it was not an issue with NTLM where I am successfully able to
authenticate with sharepoint the front page loads successfully while
sub-site pages does not load up and I am not able to figure out the issue.

Will soon share the config and logs I would really appreciate if help can be
offered to eliminate the issue.

Posted at Nginx Forum: https://forum.nginx.org/read.php?2,278193,278202#msg-278202

_______________________________________________
nginx mailing list
[hidden email]
http://mailman.nginx.org/mailman/listinfo/nginx
Reply | Threaded
Open this post in threaded view
|

Re: RE: [IE] Re: Has anyone implemented Nginx as a reverse proxy with Microsoft Sharepoint?

Payam Chychi

On Fri, Jan 19, 2018 at 9:30 PM blason <[hidden email]> wrote:
Hi there,

I guess it was not an issue with NTLM where I am successfully able to
authenticate with sharepoint the front page loads successfully while
sub-site pages does not load up and I am not able to figure out the issue.

Will soon share the config and logs I would really appreciate if help can be
offered to eliminate the issue.

Posted at Nginx Forum: https://forum.nginx.org/read.php?2,278193,278202#msg-278202

_______________________________________________
nginx mailing list
[hidden email]
http://mailman.nginx.org/mailman/listinfo/nginx

The best way to troubleshoot this is to do a packet capture using tcpdump and see what happens when the request hits nginx server. You will see what and how the packets are sent/received 

Also, when the sub-sites don’t work, what do you see in the http header? All these data are really important for troubleshooting

Feel free to send me an email pchychi . At . Gmail, happy to help troubleshoot it.

Cheers
Payam
--
Payam Tarverdyan Chychi
Network Security Specialist / Network Engineer

_______________________________________________
nginx mailing list
[hidden email]
http://mailman.nginx.org/mailman/listinfo/nginx