[pubcookie-users] pubcookie and Apache 2 reverse proxy?

Chris Winterrowd chrisw at ti.com
Thu Apr 14 11:48:41 PDT 2005


Hello,

     I need some help with pubcookie 3.2.0 and Apache 2.. it seems pubcookie is
not setting a session cookie when I use it with mod_proxy for a reverse
proxy application, so the browser ends up using the granting cookie which
is only valid for 60 seconds.

If I have Apache 2/pubcookie protect a locally stored resource (static html doc
for example), it does set a session cookie, but when I request a
reverse-proxied document, pubcookie does not set a session cookie..

I've tried this configuration with Apache 1.3 and everything works just fine,
but with Apache 2, I'm not having much luck. I would use Apache 1.3, but I need
Apache 2 for its support of HTTP/1.1 and the ProxyPreserveHost option. The
clocks on both the login server and the Apache 2 proxy are synced via NTP, and
I've switched to the older prefork MPM with Apache 2 and changed the loading
order of mod_pubcookie, downgraded to pubcookie 3.1.1 just to test.. all to no
avail.

My Apache 2 configuration for the reverse proxy looks like this:

<IfDefine SSL>
<IfModule proxy_http.c>
  ProxyRequests Off
  ProxyPreserveHost On
  SSLProxyEngine On

  <Location /webmail/>
    AuthType EGNetID
    Require valid-user
    PubcookieAppID webmail
    ProxyPass "https://webmail.testlab.ti.com/webmail/"
    ProxyPassReverse "https://webmail.testlab.ti.com/webmail/"
  </Location>
</IfModule>
</IfDefine>

Am I missing something obvious here?

Thanks!

-- 
Chris Winterrowd
Unix Email Admin
Texas Instruments, Inc.




More information about the pubcookie-users mailing list