Running Jive on port 80 without SSL

Although not recommended in production, you can run Jive on port 80 without using SSL if you configure webapp proxy settings and you redirect ports using iptables.

To honor a number of customer requests, we removed the requirement of being a privileged (root) user to install Jive. As a result, Jive now runs on port 8080 because Jive is now installed by non-privileged (jive) user and that user cannot use port 80.

Beginning with Jive 7, we insist you run Jive with the more secure SSL. If you want to change this, you now need to make a few Linux configurations to allow access to your site using port 80 without SSL.

To set up a Jive instance without SSL that listens on port 80:

  1. Configure the webapp proxy settings using the following commands:
    jive set webapp.http_proxy_name <your_hostname_here>
    jive set webapp.http_proxy_port 80
    jive set webapp.http_proxy_scheme http
  2. Redirect ports using iptables by using the following commands as root user:
    iptables -A PREROUTING -t nat -i eth0 -p tcp --dport 80 -j REDIRECT --to-port 8080
    iptables -A OUTPUT -t nat -p tcp -d 127.0.0.1 --dport 80 -j REDIRECT --to-ports 8080
    iptables -A OUTPUT -t nat -p tcp -d $(host `hostname` | awk '{print $NF}') --dport 80 -j REDIRECT --to-ports 8080
  3. If you want these settings to persist on reboot use the following commands, also as root user:
    mv /etc/sysconfig/iptables /etc/sysconfig/iptables-old && iptables-save > /etc/sysconfig/iptables
    chkconfig iptables on