Hi all.
I have an issue in reverse proxy with apache, tomcat and SSO using CAS.
The problem is that my reverse proxy work just fine when I use an Apache Server as the reverse proxy with two back-end tomcats.
But when the I include SSO with CAS to authenticate the user with access to the tomcat servers the internal redirections are missing to the users that use the reverse proxy and I donÂt know why.
The CAS cookie are not pass between the cassified servers.
Can anyone have any idea on this or implement a scenario like this?
My proxy configuration:
**************************************
LoadModule proxy_module /usr/lib/apache2/modules/mod_proxy.so
LoadModule proxy_http_module /usr/lib/apache2/modules/mod_proxy_http.so
LoadModule headers_module /usr/lib/apache2/modules/mod_headers.so
LoadFile /usr/lib/libxml2.so
LoadModule proxy_html_module /usr/lib/apache2/modules/mod_proxy_html.so
LoadModule xml2enc_module /usr/lib/apache2/modules/mod_xml2enc.so
LoadModule ssl_module /usr/lib/apache2/modules/mod_ssl.so
LoadModule substitute_module /usr/lib/apache2/modules/mod_substitute.so
LoadModule filter_module /usr/lib/apache2/modules/mod_filter.so
ProxyRequests off
ProxyPass /cas-web/ http://casaf.uci.cu:8079/cas-web/
ProxyPassReverse /cas-web/ http://casaf.uci.cu:8079/cas-web/
ProxyPass /cascliente/ http://casaf.uci.cu:80/cascliente/
ProxyPassReverse /cascliente/ http://casaf.uci.cu:80/cascliente/
ProxyPass / http://casaf.uci.cu:8080/
ProxyPassReverse / http://casaf.uci.cu:8080/
ProxyPassReverseCookiePath /cas-web/ /
ProxyHTMLEnable On
ProxyHTMLURLMap http://casaf.uci.cu:8079 http://192.168.231.128
ProxyHTMLURLMap http://casaf.uci.cu:8080 http://192.168.231.128
ProxyHTMLURLMap http://casaf.uci.cu:80 http://192.168.231.128
FilterDeclare replace
FilterProvider replace SUBSTITUTE Content-Type $text/html
FilterChain +replace
# for logging (not sure how helpful the logging is...)
FilterTrace replace 1
Substitute "s/Apache HTTP Server Version/Apache HTTP Server Version Boo Yah/n"
******************************************
Thanks,
Jorge.
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
" from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
|