Limit the mod_rewrite rules to just /ipa

459209

ipa-server/xmlrpc-server/ipa-rewrite.conf

@@ -1,4 +1,4 @@
-# VERSION 1 - DO NOT REMOVE THIS LINE
+# VERSION 2 - DO NOT REMOVE THIS LINE
 
 RewriteEngine on
 
@@ -10,10 +10,10 @@ RewriteRule ^/$$ https://$FQDN/ipa/ui [L,NC,R=301]
 # Redirect to the fully-qualified hostname. Not redirecting to secure
 # port so configuration files can be retrieved without requiring SSL.
 RewriteCond %{HTTP_HOST}    !^$FQDN$$ [NC]
-RewriteRule ^/(.*)          http://$FQDN/$$1 [L,R=301]
+RewriteRule ^/ipa/(.*)      http://$FQDN/ipa/$$1 [L,R=301]
 
 # Redirect to the secure port if not displaying an error or retrieving
 # configuration.
 RewriteCond %{SERVER_PORT}  !^443$$
-RewriteCond %{REQUEST_URI}  !^/(errors|config|favicon.ico)
-RewriteRule ^/(.*)          https://$FQDN/$$1 [L,R=301,NC]
+RewriteCond %{REQUEST_URI}  !^/ipa/(errors|config)
+RewriteRule ^/ipa/(.*)      https://$FQDN/ipa/$$1 [L,R=301,NC]