etiennel at rocketmail
Nov 6, 2009, 1:44 PM
Post #1 of 1
(79 views)
Permalink
|
|
Tomcat Form Based Authentication via Apache Proxy
|
|
Hello,
I'm trying to setup multiple Apache servers in multiple locations, proxying requests to a single Tomcat instance at a central server. The purpose of doing the proxy is that the central server provides additional services but some stuff come from the local Apache server. For Flex to work well, all requests must be to the same domain as where the SWF come from. As the SWF are pretty large, I want them served from the site's local Apache. But the Flex application makes requests to a centralized Tomcat server.
So I did setup Apache with mod_proxy and that works. However, what does not work is when I make the Tomcat authentication through form instead of basic.
With form, I browse to the Apache server and get the correct pages from the Tomcat server, the login form. I fill out the form and post the login request to the j_security_check URL. What happens then is 10 repeat of the requests to Tomcat and each get an HTTP Status 408 back and in the end, Firefox tell me that a "Connection Interrupted" occurred.
Here is my configuration (IP are fake):
ProxyRequests Off
ProxyPreserveHost On
<Proxy *>
AddDefaultCharset off
Order deny,allow
Allow from all
</Proxy>
# Enable/disable the handling of HTTP/1.1 "Via:" headers.
# ("Full" adds the server version; "Block" removes all outgoing Via: headers)
# Set to one of: Off | On | Full | Block
ProxyVia On
SetOutputFilter INFLATE;DEFLATE
SetEnv proxy-initial-not-pooled 1
ProxyPass /icosui/ https://89.75.4.116:8443/icosui/
ProxyPassReverse /icosui/ https://89.75.4.116:8443/icosui/
ProxyPass /icos/ https://89.75.4.116:8443/icos/
ProxyPassReverse /icos/ https://89.75.4.116:8443/icos/
ProxyPassReverseCookieDomain 89.75.4.116 89.75.7.102
Anybody has an idea on how to correctly configure it so that form-based authentication works? As I said, that works fine with Basic authentication but I really need to use form base - the browser login dialog is not acceptable for this project.
Thanks,
Etienne
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe[at]httpd.apache.org
" from the digest: users-digest-unsubscribe[at]httpd.apache.org
For additional commands, e-mail: users-help[at]httpd.apache.org
|
