LDAP authentication behind proxy?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



In the following, the service on 8002 is a theming proxy, which also proxies the trac service on 8202 (among other things).  All public requests come via 8022 (a testing port, that would usually be 80)

The problem is, LDAP authentication (fairly obviously) only works when accessing the trac site via the latter port 8202, not via 8002, or indeed 8022. 

Is there *any* way of configuring apache so it works on the other port too?

More background here: http://serverfault.com/questions/180845/

 
<VirtualHost foo.bar.com:8022>
           ServerName foo.bar.com
           ServerAlias foo.bar.com

           ProxyRequests Off
           <Proxy *>
               Order deny,allow
               Allow from all
           </Proxy>

           ProxyPreserveHost On

           RewriteEngine On
           RewriteCond %{HTTP:Authorization} ^(.*)
           RewriteRule ^/(.*) http://0.0.0.0:8002/$1 [P]

</VirtualHost>

	WSGIDaemonProcess trac stack-size=524288 python-path=/usr/lib/python2.5/site-packages
	WSGIScriptAlias /trac /home/web/foo/parts/trac/tracwsgi/cgi-bin/trac.wsgi
	WSGIProcessGroup trac
	WSGIApplicationGroup %{GLOBAL}

   <VirtualHost foo.bar.com:8202>
           ServerName foo.bar.com
           ServerAlias foo.bar.com

           <Directory "/home/web/foo/parts/trac/tracwsgi/cgi-bin">
                   Options +Indexes FollowSymLinks
                   AllowOverride None
                   Allow from all
                   Order allow,deny
           </Directory>

           <Location "/trac">
                   AuthBasicProvider ldap
                   AuthType Basic
                   AuthzLDAPAuthoritative off
                   AuthName "Login"
                   AuthLDAPURL "ldap://127.0.0.1:389/dc=foo-bar,dc=org?uid";
                   AuthLDAPBindDN "cn=admin, dc=foo-bar, dc=org"
                   AuthLDAPBindPassword secretword
                   require valid-user
           </Location>

   </VirtualHost>





---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
   "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx




[Index of Archives]     [Open SSH Users]     [Linux ACPI]     [Linux Kernel]     [Linux Laptop]     [Kernel Newbies]     [Security]     [Netfilter]     [Bugtraq]     [Squid]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Samba]     [Video 4 Linux]     [Device Mapper]

  Powered by Linux