CA Service Management

Question about widgets in CA Service Catalog.

We have implemented Service Catalog with F5 load balancing where clients communicate over https, but the different components in CA Service Management communicate over http. The traffic from clients are convert from https to http:8080 on F5.

When we experiment with implementation of widgets in Sharepoint 2013, the icons in the browse.html show up as normal, but icons in browse_request.html points towards regular http (80).

Example from browse.html:

https://<Cluster-adress>/usm/FileStore/images/offerings/Business/presentation.png

Example from browse_request.html

http://<Cluster-address>/usm/FileStore/images/offerings/Icons/image.png

The embedded code is configured with the correct address:

src="https://<Cluster-address>/usm/explorer/scripts/browse.widget.js"></script>
<script type="text/javascript" src="https://<Cluster-address>/usm/explorer/scripts/request.widget.js"></script>
<script type="text/javascript" src="https://<Cluster-address>/usm/gwt/fdRenderer/fdRenderer.nocache.js"></script>
<link rel="stylesheet" href="https://<Cluster-address>/usm/FileStore/themes/common/css/fonts.css" type="text/css"/>

Anyone have an idea where to go about fixing this issue?

must be mostly due that for obvious reason from CA (maybe jsut someone forgot to change it) this component is  constructing the URI from a variable defined in your SM environment vs. virtual path and therefore as your SM is on 80 this is where you are directed.

That say, why to not put everything on SSL?

Malicious can be simply inside  your internal network too....

My 2 cents.

/J

We chose to implemente certificates on F5 as setting up the different components in CA Service Management with certicates caused some headaches and kept delaying our project. I believe there could be some workaround we could implement on F5 (maybe like stream replace), but hopefully this can be solved in the components used by the widget.

Service Catalog is configured with host name as Cluster-address, enable HTTPS as No, port number as 8080 and context path as /usm.

so I did have a quick look and in fact this is defined in the view\webapps\usm\explorer\scripts\browse.widget.js file.

the URI to the icons are constructed using the CA_Catalog.host variable.

So you may want to eventually overwrite this variable value in the beginning of the browse.widget.js file with:

CA_Catalog.host=http://<Cluster-address>;

You may have to test intensively for eventual  side effect and must be only a temp workaround as any patch/upgrdae will overwrite it and there is no support

Hope this help.

/J

Thank you! We will have a look and do some testing.