1. Advertising
    y u no do it?

    Advertising (learn more)

    Advertise virtually anything here, with CPM banner ads, CPM email ads and CPC contextual links. You can target relevant areas of the site and show ads based on geographical location of the user if you wish.

    Starts at just $1 per CPM or $0.10 per CPC.

Apache Reverse Proxy Proxy-Authentication: http header

Discussion in 'Apache' started by xsboost2k, May 2, 2014.

  1. #1
    Hello,

    I am trying to add authentication to an Apache httpd web server being used as a reverse proxy.

    There are (3) hosts:
    1. A host with a vendor application JVM fat client console
    2. A host with the Apache httpd web server
    3. A host with a vendor application JVM server component
    The reverse proxy works 100% without authentication enabled. Here is how I add authentication.
    Listen 9006
    NameVirtualHost *:9006
    <VirtualHost *:9006>
    <Proxy *>
        Order deny,allow
        Allow from all
        AuthType Basic
        AuthName "Client Tunnel HTTP Login Required"
        AuthUserFile C:\xampp\access\.htpasswd
        #AuthGroupFile C:\xampp\access\group.file
        Require valid-user
    </Proxy>
    ProxyRequests Off
    ProxyHTMLEnable On
    ProxyPass / http://192.168.56.102:8080/
    ProxyPassReverse / http://192.168.56.102:8080/
    AllowCONNECT 8080
    </VirtualHost>
    Code (markup):
    The vendor application client allows me to enter the following values ([] indicates what I'm putting in the fields)

    • Application Server Hostname or IP address and port [192.168.56.102:8080] which is host 3
    • Application Server login credentials [user : password] which are working credentials
    • Proxy Server Hostname or IP address and port [192.168.56.105:9006] which is host 2
    • Proxy Server Credentials [apache : apache] which are working credentials
    The problem is that the vendor fat client is passing the following HTTP header information:
    'Proxy-Authentication: Basic YXBhY2hlOmFwYWNoZQ=='
    'Credentials: apache:apache'
    'Authentication: Basic ZHVtbXk6ZHVtbXk='
    'Credentials: notused:notused'

    The Apache web server reads the 'notused : notused' credentials, says that the user does not exist/not authorized, and returns a HTTP 401 error.

    I cannot change the way the vendor application behaves. Is there a way to have my Apache web server read the Proxy-Authentication credentials instead of the Authentication credentials?

    Thanks!
     
    xsboost2k, May 2, 2014 IP