Apache Reverse Proxy Proxy-Authentication: http header

Discussion in 'Apache' started by xsboost2k, May 2, 2014.

  1. #1
    Hello,

    I am trying to add authentication to an Apache httpd web server being used as a reverse proxy.

    There are (3) hosts:
    1. A host with a vendor application JVM fat client console
    2. A host with the Apache httpd web server
    3. A host with a vendor application JVM server component
    The reverse proxy works 100% without authentication enabled. Here is how I add authentication.
    Listen 9006
    NameVirtualHost *:9006
    <VirtualHost *:9006>
    <Proxy *>
        Order deny,allow
        Allow from all
        AuthType Basic
        AuthName "Client Tunnel HTTP Login Required"
        AuthUserFile C:\xampp\access\.htpasswd
        #AuthGroupFile C:\xampp\access\group.file
        Require valid-user
    </Proxy>
    ProxyRequests Off
    ProxyHTMLEnable On
    ProxyPass / http://192.168.56.102:8080/
    ProxyPassReverse / http://192.168.56.102:8080/
    AllowCONNECT 8080
    </VirtualHost>
    Code (markup):
    The vendor application client allows me to enter the following values ([] indicates what I'm putting in the fields)

    • Application Server Hostname or IP address and port [192.168.56.102:8080] which is host 3
    • Application Server login credentials [user : password] which are working credentials
    • Proxy Server Hostname or IP address and port [192.168.56.105:9006] which is host 2
    • Proxy Server Credentials [apache : apache] which are working credentials
    The problem is that the vendor fat client is passing the following HTTP header information:
    'Proxy-Authentication: Basic YXBhY2hlOmFwYWNoZQ=='
    'Credentials: apache:apache'
    'Authentication: Basic ZHVtbXk6ZHVtbXk='
    'Credentials: notused:notused'

    The Apache web server reads the 'notused : notused' credentials, says that the user does not exist/not authorized, and returns a HTTP 401 error.

    I cannot change the way the vendor application behaves. Is there a way to have my Apache web server read the Proxy-Authentication credentials instead of the Authentication credentials?

    Thanks!
     
    xsboost2k, May 2, 2014 IP