Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
MIME-Version: 1.0
From: Ajay Garg <ajaygargnsit@gmail.com>
Date: Sat, 8 Apr 2017 11:53:07 +0530
Message-ID: <CAHP4M8X6WRhCih9CuLOAG0aKciV0e+Z=Syt2YiV_9tgT4D_c4w@mail.gmail.com>
To: users@httpd.apache.org
Content-Type: multipart/alternative; boundary=f403045fb7a68c81e4054ca1c66e
Subject: [users@httpd] Authentication BEFORE proxying
archived-at: Sat, 08 Apr 2017 06:23:14 -0000

--f403045fb7a68c81e4054ca1c66e
Content-Type: text/plain; charset=UTF-8

Hi All.

If I setup the following in a virtual-host,

####################################################################################
Listen 9001
<VirtualHost *:9001>
        DocumentRoot /var/www/html

        <Directory "/var/www/html">
            AuthType Basic
            AuthName "Restricted Content"
            AuthUserFile /home/f5a6b457ba0d416cb4847bb3c4c6e6b6/.htpasswd
            Require valid-user
        </Directory>

        ProxyPass / http://127.0.0.1:9000/
        ProxyPassReverse / http://127.0.0.1:9000/

</VirtualHost>
#####################################################################################


and I type http://1.2.3.4:9001 in the browser, I get taken directly to the
proxy-address, without the auth-dialog popping up.

If however, I remove the "ProxyPass" and "ProxyPassReverse" directives, and
I type the same http://1.2.3.4:9001 in the broswer, the auth-dialog pops up
as expected.


Is there a way to first let the auth-dialog pop-up, and only if credentials
are correct, to move to the proxy-address?

Looking forward to some help.


Thanks and Regards,
Ajay

--f403045fb7a68c81e4054ca1c66e
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div>Hi All.<br><br></div>If I setup the following in a vi=
rtual-host,<br><div><div><br>##############################################=
######################################<br>Listen 9001<br>&lt;VirtualHost *:=
9001&gt;<br>=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 DocumentRoot /var/ww=
w/html<br><br>=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 &lt;Directory &quo=
t;/var/www/html&quot;&gt;<br>=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=
=A0=C2=A0=C2=A0=C2=A0 AuthType Basic<br>=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=
=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 AuthName &quot;Restricted Content&quot;<b=
r>=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 AuthUs=
erFile /home/f5a6b457ba0d416cb4847bb3c4c6e6b6/.htpasswd<br>=C2=A0=C2=A0=C2=
=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 Require valid-user<br>=
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 &lt;/Directory&gt;<br><br>=C2=A0=
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 ProxyPass / <a href=3D"http://127.0.0.=
1:9000/">http://127.0.0.1:9000/</a><br>=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=
=C2=A0 ProxyPassReverse / <a href=3D"http://127.0.0.1:9000/">http://127.0.0=
.1:9000/</a><br><br>&lt;/VirtualHost&gt;<br>###############################=
######################################################<br><br><br></div><di=
v>and I type <a href=3D"http://1.2.3.4:9001">http://1.2.3.4:9001</a> in the=
 browser, I get taken directly to the proxy-address, without the auth-dialo=
g popping up.<br><br></div><div>If however, I remove the &quot;ProxyPass&qu=
ot; and &quot;ProxyPassReverse&quot; directives, and I type the same <a hre=
f=3D"http://1.2.3.4:9001">http://1.2.3.4:9001</a> in the broswer, the auth-=
dialog pops up as expected.<br><br><br></div><div>Is there a way to first l=
et the auth-dialog pop-up, and only if credentials are correct, to move to =
the proxy-address?<br clear=3D"all"></div><div><br></div><div>Looking forwa=
rd to some help.<br></div><div><br><br><div class=3D"gmail_signature">Thank=
s and Regards,<br>Ajay<br></div>
</div></div></div>

--f403045fb7a68c81e4054ca1c66e--