Apache, REMOTE_USER, and Mongrel

rubyonrails-talk
#1

Take a look at the mod proxy RequestHeader set directive. Assuming
the remote user is in an environment variable somewhere, you can use
this directive to pass it on to mongrel. I use it to pass along a
bunch of mod ssl env variables.

#2

I forgot, mongrel prefixes all the env variables with HTTP_. So check
HTTP_REMOTE_USER and see if that's it. Took me a bit to notice that
myself.

Chris

#3

Will Rogers wrote:

If anyone knows why my attempts to read REMOTE_USER return (null), I'm
all ears.

After many hours trying to solve the same problem I found this post:
http://www.nabble.com/Forcing-a-proxied-host-to-generate-REMOTE_USER-tf1114364.html#a2914465

and can confirm that the following works for me when put in the Proxy
directive on Apache 2:
    RewriteEngine On
    RewriteCond %{LA-U:REMOTE_USER} (.+)
    RewriteRule . - [E=RU:%1]
    RequestHeader add X-Forwarded-User %{RU}e

Jon.

#4

I never figured out how to do any of apache's auth schemes on anything
other than directories. Your mileage doesn't look to vary on this.

I know in lighttpd you could auth the entire site, but for alas, I
always balk and toss my secret stuff on really high, random ports or
just lock down to IPs. I know, not the most secure, but it works.

Sorry for the non-help.

#5

Cayce Balara wrote:

Even non-help helps, at least I can move on to other options and stop
banging my head against this mad bugger's wall.

thanks for the info.

c.

Charles Brian Quinn wrote:

I never figured out how to do any of apache's auth schemes on anything
other than directories. Your mileage doesn't look to vary on this.

I know in lighttpd you could auth the entire site, but for alas, I
always balk and toss my secret stuff on really high, random ports or
just lock down to IPs. I know, not the most secure, but it works.

Sorry for the non-help.

Sorry for bumping such an old post. I'm having trouble trying to
> The following works and provides me with authentication, I have
> Order allow,deny
> RewriteCond %{LA-U:REMOTE_USER} (.+)
> <VirtualHost *:80>
> <VirtualHost *:80>
> PerlAddVar ntdomain "CROWLEY crowleypdc jaxbdc01"
> I get the following error with this configuration:
>

--
Charles Brian Quinn
self-promotion: www.seebq.com
highgroove studios: www.highgroove.com
slingshot hosting: www.slingshothosting.com

HI,

I am facing problem to get the authenticated user using mod_auth_sspi.
my httpd.conf file has follwoing.

VirtualHost *:80>
  ServerAdmin adminemailid
  ServerName Portal
  DocumentRoot rootpath
  <Directory Z:/web/appname/public/ >
      AllowOverride All
      Order allow,deny
      allow from all

  </Directory>

  #Rewrite stuff
  RewriteEngine On

  RewriteCond %{LA-U:REMOTE_USER} (.+)
  RewriteRule . - [E=RU:%1]
  RequestHeader add X-Forwarded-User %{RU}e

  # Check for maintenance file and redirect all requests
  RewriteCond %{DOCUMENT_ROOT}/system/maintenance.html -f
  RewriteCond %{SCRIPT_FILENAME} !maintenance.html
  RewriteRule ^.*$ /system/maintenance.html [L]

  # Rewrite index to check for static
  #RewriteRule ^/$ /index.html [QSA]

  # Rewrite to check for Rails cached page
  #RewriteRule ^([^.]+)$ $1.html [QSA]

  # Redirect all non-static requests to cluster
  #RewriteCond %{DOCUMENT_ROOT}/%{REQUEST_FILENAME !-f
  RewriteRule ^/(.*)$ balancer://SSDEIPortal_cluster%{REQUEST_URI}
[P,QSA,L]

  </VirtualHost>

In the above config i am using same config dicussed in this post as

  RewriteCond %{LA-U:REMOTE_USER} (.+)
  RewriteRule . - [E=RU:%1]
  RequestHeader add X-Forwarded-User %{RU}e

but still i am not getting the result.

Thanks in advance.