authentication - Set up apache proxy with openAM cert auth - set header if GET parameter is present -
cert-based authentication in openam need set http header x-client-cert. want use apache reverse proxy , set header, when url /openam/ui/login?module=pki.
/openam/ui/login username , password authentication.
i have configuration:
... proxypass / balancer://mycluster/ proxypassreverse / balancer://mycluster/ requestheader set x-client-cert "" <location "/openam/ui/login/pki"> requestheader set x-client-cert "%{ssl_client_cert}s" sslverifydepth 10 sslverifyclient require </location> rewriterule /openam/ui/login/pki balancer://mycluster/openam/ui/login?module=pki [p] ...
and can trick, cost rewrite of /openam/ui/login?module=pki /openam/ui/login/pki , don't it.
can advice me how without rewrite?
thanks.
with apache2.4 can with:
<if "%{query_string} =~ /module=pki/"> requestheader set x-client-cert "%{ssl_client_cert}s" sslverifydepth 10 sslverifyclient require <else> requestheader set x-client-cert "" </if>
Comments
Post a Comment