Apache Reverse Proxy with authentication

From: Gene Cronk (gcronk_at_trsg.net)
Date: 04/28/05

  • Next message: Florian Rommel: "Re: Secure web site access and PKI Certs"
    Date: Thu, 28 Apr 2005 09:18:22 -0400
    To: security-basics@securityfocus.com
    
    

    We currently have an Apache 1.3.xx server that isn't doing much, and an
    IIS 5 box we use for development work. I would like to move the IIS
    machine behind the Apache machine using mod_proxy, and use http_auth to
    verify they have access to the dev box (and what directory they have
    access to). Once authenticated, they are reverse proxied to their
    development site on the IIS box, where a virtual host can reply to the
    request.

    For example:

    Client logs into Apache via mod_auth_whatever (or a PHP script).
    Client is authenticated.
    IP address of internal virtual host is sent to mod_proxy.
    Apache forwards requests for specific client to development web server
    (based on development server IP), based on auth info.

    Is there any straightforward way to do this?

    --
    Gene Cronk ISSAP CISSP IAM
    Systems Administrator -- The Robin Shepherd Group
    http://www.trsg.net
    Office: 904-359-0981x36  Cell: 386-795-3081
    

  • Next message: Florian Rommel: "Re: Secure web site access and PKI Certs"

    Relevant Pages

    • Re: Apache vs IIS
      ... Windows Server not on my Linux Server so there for I would chose IIS. ... Not that Apache is bad but ASP.NET is far easier and faster to create good web forms in. ... PHP on a IIS server is rather easy to run once you install PHP on a PC but if you only use PHP why not use Apache for Windows. ...
      (alt.php)
    • Re: Apache vs IIS
      ... Windows Server not on my Linux Server so there for I would chose ... Not that Apache is bad but ASP.NET is far easier and faster to ... IIS is designed for ASP, ... Apache running on a Linux server. ...
      (alt.php)
    • RE: 401.2 Errors
      ... the server name as their proxy server, ... really understand the point in deploying the Firewall Client to all clients. ... I had a look at the log file but it only seems to be ... recording access that the IIS Server itself goes through. ...
      (microsoft.public.windows.server.sbs)
    • Re: Apache vs IIS
      ... my Windows Server not on my Linux Server so there for I would ... IIS is designed for ASP, ... can run asp on Apache, ... in running php from IIS vs Apache. ...
      (alt.php)
    • Re: Connect Computer Problem at 2 Customer Sites
      ... I understand this issue to be: the client ... please restart the IIS service. ... join the domain has got the valid IP address and DNS server address in the ... Microsoft Online Newsgroup Support ...
      (microsoft.public.windows.server.sbs)