Configure Confluence to Use a Custom Authenticator and Tomcat + IIS

This content refers to several wiki pages managed by others. The steps listed below attempts to streamline the process required to configure Confluence/Tomcat with IIS.

To integrate Confluence with IIS you will need to:

A. Configure Confluence and test that it works on its own (see attached server.xml file for an example)

1. Edit conf/server.xml and change the path to "" in Tomcat (or to a specific folder name like /confluence if you will be using a virtual directory in IIS)

2. Restart Confluence

3. Test Confluence at http://localhost:8080 or http://localhost:8080/confluence (if you specified the folder name)

B. Configure Tomcat to accept proxied requests from IIS (see attached server.xml file for an example)

1. Edit conf/server.xml and add the following connector.

<Connector port="8009"
	   address="127.0.0.1"
	   enableLookups="false"
	   redirectport="8443"
	   protocol="AJP/1.3"
	   tomcatAuthentication="false"
	   URIEncoding="UTF-8"/>

2. Restart Confluence

3. Open a command prompt and execute "netstat -na"; you should see port 8009 listed in the output

C. Configure IIS to forward Confluence requests to Tomcat

1. Extract the contents of "tomcat_iis_connector.zip" to C:\ on the server running IIS and Confluence.

2. Open Control Panel, then Administrative Tools and open Internet Information Services.

3. Add an ISAPI Filter to IIS
   a. Right-click on Default Web Site (or the Web Site that should be responsible for proxying requests to Confluence), and click on Properties.
   b. Click the ISAPI Filters tab.
   c. Check if there is a Filter that points to the isapi_redirect.dll file and that it is in the right location. If not, click Add and create one. Enter tomcat as the Filter Name and enter the location of the isapi_redirect.dll file for the executable.
   d. Click Apply and then OK.

4. Create a virtual directory for access to the isapi_redirect.dll in IIS.
   a. Right-click on Default Web Site (or the Web Site that should be responsible for proxying requests to JIRA), choose New and then Virtual Directory.
   b. Go through the creation wizard. Set the alias to be jakarta.
   c. This must point to the directory in which the isapi_redirect.dll is installed. In our example this is C:\tomcat_iis_connector.
   d. Complete the wizard, making sure that you have checked the 'execute' checkbox for the Virtual Directory.

5. If using IIS 6.0 you will also need to add the dll as a Web Service Extension, as follows:
   a. Right-click on Web Service Extensions and choose Add a new Web Service Extension...
   b. Enter tomcat for the Extension Name and then add the isapi_redirect.dll file to the required files.
   c. Select the Set extension status to Allowed check-box, then click OK.

6. Set the IIS site to use Windows Authentication
   a. In Internet Information Services, right click on the site used to host Confluence and choose Properties.
   b. Click on the Directory Security tab.
   c. Click on the Edit... button in the Anonymous access and authentication control section.
   Make sure that the Anonymous access tick box is not selected and the Integrated Windows Authentication box is selected.

7. Restart IIS by opening a command prompt and executing IISRESET

8. Test access to Confluence by testing out the IIS URL to the new site (ex: http://localhost)