In the following, the service on 8002 is a theming proxy, which also proxies 
the trac service on 8202 (among other things).  All public requests come via 
8022 (a testing port, that would usually be 80)

The problem is, LDAP authentication (fairly obviously) only works when 
accessing the trac site via the latter port 8202, not via 8002, or indeed 8022. 

Is there *any* way of configuring apache so it works on the other port too?

More background here: http://serverfault.com/questions/180845/

 
<VirtualHost foo.bar.com:8022>
           ServerName foo.bar.com
           ServerAlias foo.bar.com

           ProxyRequests Off
           <Proxy *>
               Order deny,allow
               Allow from all
           </Proxy>

           ProxyPreserveHost On

           RewriteEngine On
           RewriteCond %{HTTP:Authorization} ^(.*)
           RewriteRule ^/(.*) http://0.0.0.0:8002/$1 [P]

</VirtualHost>

        WSGIDaemonProcess trac stack-size=524288 
python-path=/usr/lib/python2.5/site-packages
        WSGIScriptAlias /trac 
/home/web/foo/parts/trac/tracwsgi/cgi-bin/trac.wsgi
        WSGIProcessGroup trac
        WSGIApplicationGroup %{GLOBAL}

   <VirtualHost foo.bar.com:8202>
           ServerName foo.bar.com
           ServerAlias foo.bar.com

           <Directory "/home/web/foo/parts/trac/tracwsgi/cgi-bin">
                   Options +Indexes FollowSymLinks
                   AllowOverride None
                   Allow from all
                   Order allow,deny
           </Directory>

           <Location "/trac">
                   AuthBasicProvider ldap
                   AuthType Basic
                   AuthzLDAPAuthoritative off
                   AuthName "Login"
                   AuthLDAPURL "ldap://127.0.0.1:389/dc=foo-bar,dc=org?uid";
                   AuthLDAPBindDN "cn=admin, dc=foo-bar, dc=org"
                   AuthLDAPBindPassword secretword
                   require valid-user
           </Location>

   </VirtualHost>





---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [email protected]
   "   from the digest: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to