Google Search Appliance Managing Search for Controlled-Access Content - Manual (Page 79)

Google Search Appliance: Managing Search for Controlled-Access Content 79
Scenario 6: Use an HTTP Basic Challenge to
Get Cookies
In Scenario 6, your system is set up to use HTTP Basic authentication. The Google Search Appliance
supports both crawl-time and serve-time authentication for content protected by an HTTP Basic
challenge.
To set up a search appliance for this scenario, configure crawl of the protected content and then set up
a cookie authentication rule by specifying a sample URL. If the sample URL check fails because the user
is not yet logged in, the content server redirects the search appliance to an HTTP Basic Login page, then
the login page redirects the search appliance back to the content server after login.
Set Up for Scenario 6
For scenario 6, first configure crawl of the content protected by HTTP Basic:
1. Open the Crawl and Index > Crawl URLs page and add a URL pattern for the content protected by
HTTP Basic and cookies under Start Crawling from the Following URLs and Follow and Crawl
Only URLs with the Following Patterns.
2. Click Save URLs to Crawl.
3. Open the Crawl and Index > Forms Authentication page and enter a sample URL for the content
protected by HTTP Basic and cookies in the Sample Forms Authentication protected URL box.
4. Enter a URL pattern in the URL pattern for this rule box.
5. Click Create a New Forms Authentication Rule. The Admin Console displays an error page, but
ignore this error page.
6. Click Save Forms Authentication Rule and Close Window.
7. On the Crawl and Index > Crawler Access page, enter the URL pattern for the content protected
by HTTP Basic and cookies under For URLs Matching Pattern, Use.
8. Complete the row by entering a username, and password.
9. Click Save Crawler Access Configuration.
Next, set up a cookie authentication rule on the Serving > Universal Login Auth Mechanisms >
Cookie page:
1. Specify a Sample URL.
2. Check When sample URL fails, expect the sample page to redirect to a form, and log in to that
form.
The redirect to the HTTP Basic login page is provided by the sample URL page response, so do not
specify it in the Redirect URL box.
Process Overview of Scenario 6
The process overview of scenario 6 is the same as the process overview of scenario 1 (see “Process
Overview of Scenario 1” on page 72).