apache reverse proxy

chris9 · 04-05-2012, 06:10 AM

Hi there,

I have the following configuration:

Redirect /scheduler http://abc.test.ch/scheduler/

<Location /scheduler/>
# LDAP Auth
Include conf.d/authz_ldap_base.include
AuthName "Scheduler Auth"
Require ldap-group CN=sched_test,OU=...

ProxyPass http://localhost:4444/
ProxyPassReverse http://localhost:4444/
</Location>

When some is accessing the site http://abc.test.ch/scheduler/ he has to authenticate via the ldap group sched_test as intended.
But when someone is accessing the site http://abc.test.ch:4444 he gets to site without authentication.

is there any way to force also the visit to http://abc.test.ch:4444 to go through ldap authentication?

Thanks,
Chris

acid_kewpie · 04-05-2012, 08:41 AM

well what is on 4444?? what you're asking has nothing at all to do with apache / ldap at all surely. You just need to stop people reaching port 4444 directly. so that's iptables or making that service listen on localhost only.