Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [mod-auth]

40 questions
1
vote
1 answer

Apache mod_auth and mod_proxy not working together

I am trying to set up apache as an authentication front end for a web backend running on port 8080. The backend has no authentication, so if you curl localhost:8080 you get the website. Port 8080 is blocked externally, so what I want is for apache…
nightowl
  • 45
  • 8
1
vote
1 answer

How can I exclude a single file from Apache mod_auth Require valid-user?

I have a testing site which has a Require valid-user directive, employing Apache's mod_auth to keep it private, but I'd like to exempt a single file from this requirement (i.e. make it so that you don't need a username / password to access that one…
balleyne
  • 11
  • 1
  • 2
1
vote
1 answer

Apache2 + mod_auth_kerb + active directory will not authenticate group permissions

I have an apache2 server setup under ubuntu to authenticate against an Active Directory Domain Controller. It works fine with an .htaccess file in the folder I want to protect with a line like require valid-user My problem is I would like to…
Matt Phillips
  • 155
  • 6
1
vote
1 answer

Conditionally setting a header based on a mod_auth expression

I have an apache 2.4 acting as reverse proxy for an application. I need to conditionally setup a header for the proxy based on a mod_auth expression. In particular I'm using mod_auth_openidc and I need to apply the header based on OIDC roles, but I…
lithiium
  • 205
  • 2
  • 9
1
vote
0 answers

Not able to receive jwt token request from apache2 server

I am using OPENIDC for protecting a URL. mod_authopenidc is installed in my apache server.After authenticating the user i have an approve button which is when clicked sends a response with authorization code and state back to my apache.Once that…
user615363
  • 11
  • 2
0
votes
0 answers

How to only allow "Require all denied" in .htaccess?

We have an Apache 2.4 server. And in our VHost for a WordPress install we only allow overriding Limit, Options and FileInfo. (AllowOverride Limit Options FileInfo). DocumentRoot /www/www.wordpressblog.com ServerName…
frankhammer
  • 137
  • 1
  • 5
  • 15
0
votes
1 answer

mod_auth_form and proper redirection after login

Using the Apache module mod_auth_form, when a user tries to access a URL and is 'interrupted' by the form based login, how do I pass on the original URL to the html form or to the AuthFormLoginSuccessLocation directive, so I can redirect the client…
Ralph
  • 862
  • 11
  • 26
0
votes
1 answer

Apache authentication against custom web service

I would like to have apache that forwards the call to an internal service (a django app) that returns a True/False (and some parameters maybe) if the user is valid or not. This before forwarding the request to the service that should processes it.…
EsseTi
  • 255
  • 3
  • 13
0
votes
1 answer

Using mod_auth_openidc to authenticate multiple google domains

I am using this answer to do authentication for an apache reverse proxy to gerrit. However, I'd like to add a second domain as well -- so authenticate either against foo.com or bar.com (both of which are google apps domains so google is used for…
Trimbee
  • 53
  • 1
  • 8
0
votes
2 answers

Apache 2.4 - How to restrict traffic (by IP address) to all requests except the base path?

I have a collection of debugging scripts in /var/www that display useful information that helps with investigating issues on the server, however that same information is potentially sensitive, so I do not want it publicly available. The DocumentRoot…
tommarshall
  • 473
  • 1
  • 4
  • 7
0
votes
3 answers

Apache 2.4 replies with "403 Forbidden" for a CGI script, my configuration looks ok

I installed a CGI script on a fresh installation of Apache 2.4 on Ubuntu server 14.04. Apache keeps replying with 403 Forbidden also if, to me, the configuration file is ok. The CGI is the Monitorix front-end, a system monitoring tool written in…
lorenzo-s
  • 347
  • 4
  • 10
  • 19
0
votes
1 answer

Enabling mod_session_crypto hangs apache 2.4

I want to try using session crypto on my apache installation so I uncomment the following line. #LoadModule session_crypto_module modules/mod_session_crypto.so I restart apache and it gives me no errors. Then I browse to the site and I get…
tremor
  • 143
  • 1
  • 10
0
votes
1 answer

Apache directive for authenticated users?

Using Apache 2.2, I would like to use mod_rewrite to redirect un-authenticated users to use https, if they are on http.. Is there a directive or condition one can test for whether a user is (not) authenticated? For example, I could have set up the…
Alex Leach
  • 1,697
  • 3
  • 16
  • 18
0
votes
1 answer

Undefined symbol: apr_memcache_add_server

I installed httpd-devel through yum and after restarting httpd got this: httpd: Syntax error on line 61 of /etc/httpd/conf/httpd.conf: Cannot load /usr/local/apache/modules/mod_dav_svn.so into server: /usr/local/lib/libsvn_subr-1.so.0: undefined…
DmitrySemenov
  • 835
  • 2
  • 15
  • 27
0
votes
2 answers

mod_auth_sspi for wampserver 2.2

I have installed WAMPSERVER 2.2 for a intranet application. Now I tried to get mod_auth_sspi to run to get a single-signon. I downloaded the module from this link: http://sourceforge.net/projects/mod-auth-sspi/. But it does not work. WAMPSERVER does…
Uli
  • 1
  • 1
1
2
3