authentication - Set up apache proxy with openAM cert auth - set header if GET parameter is present -


cert-based authentication in openam need set http header x-client-cert. want use apache reverse proxy , set header, when url /openam/ui/login?module=pki.

/openam/ui/login username , password authentication.

i have configuration:

...   proxypass / balancer://mycluster/    proxypassreverse / balancer://mycluster/     requestheader set x-client-cert ""    <location "/openam/ui/login/pki">     requestheader set x-client-cert  "%{ssl_client_cert}s"     sslverifydepth 10     sslverifyclient require   </location>    rewriterule /openam/ui/login/pki balancer://mycluster/openam/ui/login?module=pki [p] ... 

and can trick, cost rewrite of /openam/ui/login?module=pki /openam/ui/login/pki , don't it.

can advice me how without rewrite?

thanks.

with apache2.4 can with:

<if "%{query_string} =~ /module=pki/">     requestheader set x-client-cert  "%{ssl_client_cert}s"     sslverifydepth 10     sslverifyclient require <else>     requestheader set x-client-cert "" </if> 

Comments

Popular posts from this blog

java.util.scanner - How to read and add only numbers to array from a text file -

rewrite - Trouble with Wordpress multiple custom querystrings -