Re: Automatic OWA Form Based Authentication thru reverse proxy

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 




On 28/11/2013 9:48 PM, "iridium1191" <iridium1191@xxxxxxxxx> wrote:
>
> Hi Apache users, 
>
> I'm running Apache 2.2.22 on Ubuntu server 12.04 as a reverse proxy to some internal services, including Exchange/OWA 2003. I have setup a site login page where users authenticate before they can access these services. This works fine, but now I want to avoid users having to authenticate a second time to access their OWA mailbox. 
>
> To do this I've setup a form which is pre-filled with the User ID, password and some other details. This works if I post it directly to the Exchange server, eg.
>
> <form id="logonForm" name="logonForm" formtarget="_self" action="" href="https://ExchangeServer/exchweb/bin/auth/owaauth.dll">https://ExchangeServer/exchweb/bin/auth/owaauth.dll" method="post"> 
>       <input type="hidden" name="destination" value="https://ExchangeServer/exchange" /> 
>
> But fails if I post via the reverse proxy, eg.
>
> <form id="logonForm" name="logonForm" formtarget="_self" action="" method="post"> 
>       <input type="hidden" name="destination" value="/exchange" />
>
> The relevant section of the virtual host file is:
>  
> # OWA links 
> <Location /exchange> 
> ProxyPass https://ExchangeServer/exchange 
> ProxyPassReverse https://ExchangeServer/exchange 
> SSLRequireSSL 
> </Location> 
>
> <Location /exchweb> 
> ProxyPass https://ExchangeServer/exchweb 
> ProxyPassReverse https://ExchangeServer/exchweb 
> SSLRequireSSL 
> </Location>
>
> The only error I receive is a "440 Login Timeout" from the Exchange server. I suspect it may be a cookie issue but I'm not really sure. As I said the form auto login works fine if I use the Exchange server directly rather than through the reverse proxy so I think it is an issue with my mod_rewrite config. 
>
Can you show us the rewrite config then? What are you rewriting? From what you posted we can see the use of mod_proxy not mod_rewrite.

> Any suggestions or advice would be much appreciated
Anything in the apache log? Set LogLevel to debug and have a look.


[Index of Archives]     [Open SSH Users]     [Linux ACPI]     [Linux Kernel]     [Linux Laptop]     [Kernel Newbies]     [Security]     [Netfilter]     [Bugtraq]     [Squid]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Samba]     [Video 4 Linux]     [Device Mapper]

  Powered by Linux