Open topic with navigation

# Configure Find to Use the Reverse Proxy

You configure Find to use a reverse proxy by setting the `server.reverseProxy` system property.

When you set `server.reverseProxy` to true, the Find application listens for AJP connections on a port that you can define by using the `server.ajp.port` system property.

The reverse proxy must translate incoming HTTP(S) connections from your clients into AJP connections to Find. In AJP mode, the application reads the user name from incoming requests, so you must set up remote authentication. You cannot encrypt the connection from the reverse proxy to the application.

By default, `server.reverseProxy` is false. In this case, the Find application is available only over HTTP or HTTPS. Remote authentication is not possible in this mode. However, you can encrypt the connection with SSL. In this mode, users authenticate by using the proxied login page.

In both these methods, the reverse proxy must rewrite the request path, response Location headers, and cookie paths.

## Set the Reverse Proxy System Property

You can use the following procedure to set the `server.reverseProxy` system property.

To configure Find to use a reverse proxy

1. At the command line, send the java run command with the `server.reverseProxy` argument set to `true`. For example:

       java -Dserver.reverseProxy=true -Didol.find.home=[home directory] -Dserver.port=[port] -jar find.war

   By default, this option opens an AJP port on port 8009. To use a different port, set the `server.ajp.port` argument to the correct port number.

   You can also specify the roles to assign to your users by setting the `find.reverse-proxy.pre-authenticated-roles` system property to a comma-separated list of Find Community role names (see User Roles). The default value for this property is `FindUser`.

   NOTE:

   This setting does not assign any roles in the Community component. It gives all users that use the reverse proxy the same permissions to access Find.

   Another option is to set `find.reverse-proxy.pre-authenticated-username` to a specific user name. This option bypasses authentication so that any user that accesses Find is logged in automatically as that user name. See Configure Find to Use a Single Pre-Authenticated User.

2. Restart Find to apply your configuration changes.

If you run Find as a service on Windows, you can also add the `server.reverseProxy` property to the `find.xml` file.

If you run Find as a service on Linux, you can add the arguments to the existing arguments variable in the start scripts (`find.sh` for SystemV, or `find.conf` for Upstart).

© 2015-2018 EntIT Software LLC, a Micro Focus company | Send documentation feedback to Micro Focus Close Send documentation feedback To open the configured email client on this computer, open an email window. Otherwise, copy the information below to a web mail client, and send this email to swpdl.idoldocsfeedback@microfocus.com. We appreciate your feedback! Product: Topic Title: Help Topic: Feedback:

_FT_HTML5_bannerTitle.htm