Return-Path: Delivered-To: apmail-jakarta-tomcat-user-archive@apache.org Received: (qmail 52594 invoked from network); 9 Aug 2002 11:02:12 -0000 Received: from unknown (HELO nagoya.betaversion.org) (192.18.49.131) by daedalus.apache.org with SMTP; 9 Aug 2002 11:02:12 -0000 Received: (qmail 17546 invoked by uid 97); 9 Aug 2002 11:02:16 -0000 Delivered-To: qmlist-jakarta-archive-tomcat-user@jakarta.apache.org Received: (qmail 17529 invoked by uid 97); 9 Aug 2002 11:02:16 -0000 Mailing-List: contact tomcat-user-help@jakarta.apache.org; run by ezmlm Precedence: bulk List-Unsubscribe: List-Subscribe: List-Help: List-Post: List-Id: "Tomcat Users List" Reply-To: "Tomcat Users List" Delivered-To: mailing list tomcat-user@jakarta.apache.org Received: (qmail 17516 invoked by uid 98); 9 Aug 2002 11:02:15 -0000 X-Antivirus: nagoya (v4198 created Apr 24 2002) Subject: Re: Login problem with reverse proxy To: "Tomcat Users List" X-Mailer: Lotus Notes Versione 5.0.4 Giugno 30, 2000 Message-ID: From: JensStutte@quidinfo.it Date: Fri, 9 Aug 2002 12:58:24 +0200 X-MIMETrack: Serialize by Router on quid_svr02/Quid(Release 5.0.5 |September 22, 2000) at 08/09/2002 12:58:46 PM MIME-Version: 1.0 Content-type: text/plain; charset=us-ascii X-Spam-Rating: daedalus.apache.org 1.6.2 0/1000/N X-Spam-Rating: daedalus.apache.org 1.6.2 0/1000/N Sorry for the empty mail, i struggled with my Lotus client (who the heck creates a dialog box that defaults to "Send" when closing a modified mail without sending it ?)... I have a similar configuration here (slightly complicated due to the use of struts). You must follow some rules in your design, to be able to do this: - do not use browser redirects, but internal redirects. Or create dynamically JavaScript redirects on your pages (not very nice, i know). - use only relative URLs. Otherwise, especially if your application does not map to your proxys root directory but some subfolder, nothing will work. - if you use struts, be aware of some tags, that create absolut URL pathes (the form tag for example). I extended and overrided some of these tags in order to create relative pathes (the struts community has decided, to not treat this issue). Hence, the most existing J2EE applications, that are not designed and tested for a similar environment, most likely won't work without modifications. Regards, Jens Stutte JensStutte@qu idinfo.it To: "Tomcat Users List" 09/08/2002 cc: 11.46 Subject: Re: Login problem with reverse proxy Please respond to "Tomcat Users List" Barney Hamish cc: 09/08/2002 11.32 Subject: Login problem with reverse proxy Please respond to "Tomcat Users List" Hi, I'm using tomcat 3.2 with form based login and an apache reverse proxy to filter requests to the webserver. When tomcat issues the redirect to the login page the users are sent directly to the webserver not the reverse proxy. As the webserver is not directly accessable they are unable to request the log-in page. Is anyone aware of a way I can configure tomcat and or the reverse proxy to make this set-up work? More info: -----Internet------ | Reverse Proxy | ----Private Net---- | Webserver (with Tomcat) When a request for a secure resource is sent to the reverse proxy, it forwards that request to the webserver. If the user is not logged-in tomcat tries to redirect the user to the login form. In that redirect Tomcat apparently includes the IP address of the server upon which it is currently residing. The reverse proxy forwards the webserver's response to the client. When the client tries to request the log-in page from the directly from the webserver it is unable to reach the webserver. Hamish -- To unsubscribe, e-mail: < mailto:tomcat-user-unsubscribe@jakarta.apache.org> For additional commands, e-mail: < mailto:tomcat-user-help@jakarta.apache.org> -- To unsubscribe, e-mail: < mailto:tomcat-user-unsubscribe@jakarta.apache.org> For additional commands, e-mail: < mailto:tomcat-user-help@jakarta.apache.org> -- To unsubscribe, e-mail: For additional commands, e-mail: