LinuxQuestions.org
Did you know LQ has a Linux Hardware Compatibility List?
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices

Reply
 
Search this Thread
Old 08-18-2010, 07:59 AM   #1
rosv
Member
 
Registered: Jul 2008
Distribution: Slackware, ubuntu
Posts: 53

Rep: Reputation: 15
Apache SSO using mod_auth_remote


Has anyone used the mod_auth_remote module to delegate authentication?

I have two apache2 servers. One is a content server and the other one is the sso/auth server.

When the content server receives a request for a resource protected by basic authentication, the request is forwarded to the sso server for authentication. So far so good.

But, the sso server should return a http 200 to the content server and granting access to the user. However, the sso server always returns a http 301 to the content server. So I appear to be stuck in an authentication loop.

Content server config:
<Directory /var/www/html/secure/>
AuthType Basic
AuthName "Content server"
AuthRemoteServer sso.intra
AuthRemotePort 80
AuthRemoteURL /auth
Require valid-user
</Directory>

Sso server config:
<Location /auth>
AuthType Basic
AuthUserFile /etc/httpd/conf/auth.users
AuthName "Test auth"
Require valid-user
</Location>

Or perhaps you have a better way of accomplishing apache sso across multiple servers?
 
Old 08-18-2010, 08:05 AM   #2
thelogix
LQ Newbie
 
Registered: Aug 2010
Posts: 6

Rep: Reputation: 0
Never tried auth_remote.

There is auth_mysql and auth_pgsql, for simply authentication to a mysql or postgres SQL-server.
Ive used auth_mysql a couple of times, and its really simple.

Also, but auth external allows you to write a small script to validate the user. This script can of course do anything youd like, including looking up something remote.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
SSO ?? maas187 Linux - Server 5 01-13-2010 02:54 PM
Apache and Kerberos SSO issues climbingmerlin Linux - Server 2 08-09-2009 05:12 AM
SSO for SSH and apache and/or tomcat nickowen Linux - Security 5 03-06-2009 08:44 PM
LXer: How To Set Up Apache, Tomcat (mod_jk), SSO (CAS, mod_auth_cas) LXer Syndicated Linux News 0 08-25-2008 10:40 AM
Enable SSO in Applications Aman25 Linux - Security 1 07-30-2004 09:43 AM


All times are GMT -5. The time now is 02:19 PM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration