Due to certain security requirements at work I have had to lock down the umbraco directory to https and certain IP addresses.
For the most pages this doesn't seem to have caused a problem, however when editing any page that contains a macro the page loads very very slowly and will often time out. Also some pages with a number of nodes will be a bit slower than they were in the dev system.
While trying to diagnose the problem I removed the https requirement on the umbraco directory and everything speed up to the speed you would normally expect it to be. After making the edits I needed I then locked the directory down again.
Has anyone come across this behaviour previously and is there a way to prevent the slow down while still forcing https when logging in.
Using 4.0.2.1 app pools are set to .NET 2.0
Windows 2003 SP2. I think it's IIS 7
For some reason I can't get stacktrace to work
On a possibly related issue on certain pages that contain macros I need to place a comment before and after the macro so that our search engine knows not to index the data within the macro. The comment after the macro adds in with no problems. However whenever I place a comment before the macro the only way it will stay there after editing is if I put it within a 'p' tag or there is other content before the macro.
The sequence this happens in is I will edit it in the comment using the html view, hit save, open it again in html edit (or publish, or preview) and the first comment will have vanished.
When you say you forced the umbraco folder to use https... how did you do that? Did you set the <add key="umbracoUseSSL" value="true" /> flag in your web.config file?
As for the stack trace... be sure you allow that in your web.config with the <add key="umbracoDebugMode" value="true" /> setting.
Regarding the need for a comment around some macros for your search engine's notification... I'd put those comments directly in the macro rather than leave it for the editors to remember to add when inserting the macro.
I forced the directory to use SSL in IIS along with IP restrictions using the "Require secure channel (SSL)" check box.
I wasn't aware of the flag in the config file but just tried it on a dev machine and it experienced the same issues as the IIS method.
The umbracoDebugMode is set to true on the dev site, but it doesn't provide any information, all that changes is a box appears around the different page components.
I tried putting the comments in one of the macros, but it appears they get stripped out as well. I could have done it incorrectly, will need to do a bit more reading.
Unfortunately we were forced to have a very short develop and implementation timeframe which didn't allow for much testing so a few things have slipped through the cracks.
No solution yet. For the moment because we have an IP restriction on accessing the umbraco directory we've removed the https:// requirement as it was being too slow. It would be preferable to have it though
Brett - why not have a completely separate content authoring environment which is entirely behind HTTPS and IP restrictions? You could then completely lock out the /umbraco/ folder in the primary (public) instance so no one can get to it. Some of the information in this wiki article would be useful even if you don't use a load balancer and just have two indepedant sites on the one IIS - http://our.umbraco.org/wiki/install-and-setup/installing-umbraco-for-load-balanced-environments
If anyone else has this problem the slow loading of nodes with macros can be solved by unticking "render content in editor" on the macro(s) as per this topic, worked a treat for me!
using https for the umbraco directory
Hi,
Due to certain security requirements at work I have had to lock down the umbraco directory to https and certain IP addresses.
For the most pages this doesn't seem to have caused a problem, however when editing any page that contains a macro the page loads very very slowly and will often time out. Also some pages with a number of nodes will be a bit slower than they were in the dev system.
While trying to diagnose the problem I removed the https requirement on the umbraco directory and everything speed up to the speed you would normally expect it to be. After making the edits I needed I then locked the directory down again.
Has anyone come across this behaviour previously and is there a way to prevent the slow down while still forcing https when logging in.
Using 4.0.2.1 app pools are set to .NET 2.0
Windows 2003 SP2. I think it's IIS 7
For some reason I can't get stacktrace to work
On a possibly related issue on certain pages that contain macros I need to place a comment before and after the macro so that our search engine knows not to index the data within the macro. The comment after the macro adds in with no problems. However whenever I place a comment before the macro the only way it will stay there after editing is if I put it within a 'p' tag or there is other content before the macro.
The sequence this happens in is I will edit it in the comment using the html view, hit save, open it again in html edit (or publish, or preview) and the first comment will have vanished.
Thanks
When you say you forced the umbraco folder to use https... how did you do that? Did you set the <add key="umbracoUseSSL" value="true" /> flag in your web.config file?
As for the stack trace... be sure you allow that in your web.config with the <add key="umbracoDebugMode" value="true" /> setting.
Regarding the need for a comment around some macros for your search engine's notification... I'd put those comments directly in the macro rather than leave it for the editors to remember to add when inserting the macro.
cheers,
doug.
I forced the directory to use SSL in IIS along with IP restrictions using the "Require secure channel (SSL)" check box.
I wasn't aware of the flag in the config file but just tried it on a dev machine and it experienced the same issues as the IIS method.
The umbracoDebugMode is set to true on the dev site, but it doesn't provide any information, all that changes is a box appears around the different page components.
I tried putting the comments in one of the macros, but it appears they get stripped out as well. I could have done it incorrectly, will need to do a bit more reading.
Unfortunately we were forced to have a very short develop and implementation timeframe which didn't allow for much testing so a few things have slipped through the cracks.
Thanks
Brett, I'm curious as to whether or not this problem was ever solved. Did you find a solution?
I'm in the same boat and need to secure site login and administration. I'd appreciate any insight you've got on this - thanks!
No solution yet. For the moment because we have an IP restriction on accessing the umbraco directory we've removed the https:// requirement as it was being too slow. It would be preferable to have it though
Brett - why not have a completely separate content authoring environment which is entirely behind HTTPS and IP restrictions? You could then completely lock out the /umbraco/ folder in the primary (public) instance so no one can get to it. Some of the information in this wiki article would be useful even if you don't use a load balancer and just have two indepedant sites on the one IIS - http://our.umbraco.org/wiki/install-and-setup/installing-umbraco-for-load-balanced-environments
I am looking at using courier to set up a staging environment using a test and prod server but haven't had enough time to try it yet.
Has anyone found a solution to this issue?
Brett did you have to disable the SSL Certificate from the entire website, or only from the Umbraco directory? If so, how did you do this?
I just added an SSL Certificate to a website using: Umbraco 4.0.3 app pools are set to .NET 2.0. Windows 2003 SP2. IIS 7
Cheers,
JV
If anyone else has this problem the slow loading of nodes with macros can be solved by unticking "render content in editor" on the macro(s) as per this topic, worked a treat for me!
http://our.umbraco.org/forum/getting-started/installing-umbraco/9723-Macro-rendering-in-backend-over-HTTPS-SSL
is working on a reply...