You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by Ji...@trendmicro.com.cn on 2003/07/25 05:09:45 UTC
[users@httpd] Re:[users@httpd]2.0.XX proxy digest auth cannot access https server,a bug of apache2?
Hi,
Can you help me?
I tryed 2.0.47 today on redhat9, the error still there.
I just want to know if anybody have configed digest auth for proxy on apache2.0 ,and use it to access https website successful?
Or I will submit it as a bug to apache.org.
Thanks,
Jiang
-----原始邮件-----
发件人: Jiang Chang (QA-CN)
发送时间: 2003年7月18日 10:27
收件人: users@httpd.apache.org
主题: [users@httpd] 答复: [users@httpd] ??: [users@httpd]2.0.46 proxy
digest auth cannot access https server
Error is the same as before.
I test the same config on Apache2.0.40 (default in redhat9) and Apache1.3.19 (default in redhat7.1).
It's failed on Redhat9, it's successful on redhat7.1
Can we say this just is a Bug of Apache2.0 ?
Can anybody help to config an Apache2.0 with digest auth proxy?and use it to access https website succesfully?
Thanks,
BTW,"Replace AuthDigestFile /usr/local/apache246/conf/digest
With AuthUsertFile /usr/local/apache246/conf/digest" must be a config error for digest auth . It will make apache cannot run.
-----原始邮件-----
发件人: Jeff Cohen [mailto:support@gej-it.com]
发送时间: 2003年7月16日 20:01
收件人: users@httpd.apache.org
主题: RE: [users@httpd] ??: [users@httpd]2.0.46 proxy digest auth cannot
access https server
Not sure that it would help but try it:
Replace AuthDigestFile /usr/local/apache246/conf/digest
With AuthUsertFile /usr/local/apache246/conf/digest
All the best,
Jeff Cohen
Support@GEJ-IT.com
Tel. (416) 917-2324
www.GEJ-IT.com
GEJ-IT Networks!
> -----Original Message-----
> From: Jiang_Chang@trendmicro.com.cn [mailto:Jiang_Chang@trendmicro.com.cn]
> Sent: Wednesday, July 16, 2003 2:07 AM
> To: users@httpd.apache.org
> Subject: [users@httpd] ??: [users@httpd]2.0.46 proxy digest auth cannot access
> https server
>
> Thanks Jeff,
> I tried it,changed my config as below:
> ---------------------------
> <IfModule mod_proxy.c>
> ProxyRequests On
> AllowCONNECT 443 2443
> <Proxy *>
> allowoverride authconfig
> AuthType Digest
> AuthName "digest"
> AuthDigestFile /usr/local/apache246/conf/digest
> require valid-user
> Order allow,deny
> Allow from all .example.com
> </Proxy>
> ProxyVia On
> </IfModule>
> ---------------------------
> But error still there.
> When I use basic auth, I can access any website,
> but when I use digest auth,I cannot access any https website.
> BTW,this is my config cmd before compile it:
> ./configure --prefix=/usr/local/apache246 --enable-auth-anon --enable-auth-
> digest --enable-proxy --enable-proxy-connect --enable-proxy-ftp --enable-proxy-
> http --enable-ssl --enable-cache --enable-disk-cache --enable-file-cache
> Is it anything wrong?
>
> Thanks.
>
>
> -----原始邮件-----
> 发件人: Jeff Cohen [mailto:support@gej-it.com]
> 发送时间: 2003年7月15日 21:41
> 收件人: users@httpd.apache.org
> 主题: RE: [users@httpd]2.0.46 proxy digest auth cannot access https server
>
>
> 1. Remove followsymlinks from the Options
> 2. Add: AllowCONNECT 443
> Ref. http://httpd.apache.org/docs-2.0/mod/mod_proxy.html#allowconnect
>
> All the best,
> Jeff Cohen
> Support@GEJ-IT.com
> Tel. (416) 917-2324
> www.GEJ-IT.com
> GEJ-IT Networks!
>
>
> -----Original Message-----
> From: Jiang_Chang@trendmicro.com.cn [mailto:Jiang_Chang@trendmicro.com.cn]
> Sent: Tuesday, July 15, 2003 5:41 AM
> To: users@httpd.apache.org
> Subject: [users@httpd]2.0.46 proxy digest auth cannot access https server
>
> Hi,
> I compiled and setuped Apache2.0.46 on Win2k server,Redhat7.2 and Solaris9.
> I used them as proxy servers.
> I configed basic authentication and digest authentication on these proxy.
> I can access http website through any of these proxy,I can also access https
> website through basic auth proxy.
> But I cannot access https://* through digest auth proxy on any platform.
> Who can help me?If this's a bug in Apache2.0.46?
>
> -------------------
> this is access_log
> 10.9.8.9 - - [15/Jul/2003:11:34:33 -0800] "CONNECT cn-qafs:443 HTTP/1.0" 407
> 519
> 10.9.8.9 - tester [15/Jul/2003:11:34:33 -0800] "CONNECT cn-qafs:443
> HTTP/1.0" 400 330
> 10.9.8.9 - - [15/Jul/2003:11:34:36 -0800] "CONNECT cn-qafs:443 HTTP/1.0" 407
> 519
> 10.9.8.9 - tester [15/Jul/2003:11:34:36 -0800] "CONNECT cn-qafs:443
> HTTP/1.0" 400 330
> 10.9.8.9 - - [15/Jul/2003:11:34:40 -0800] "CONNECT cn-qafs:443 HTTP/1.0" 407
> 519
> 10.9.8.9 - tester [15/Jul/2003:11:34:40 -0800] "CONNECT cn-qafs:443
> HTTP/1.0" 400 330
> 10.9.8.9 - - [15/Jul/2003:11:34:42 -0800] "CONNECT cn-qafs:443 HTTP/1.0" 407
> 519
> 10.9.8.9 - tester [15/Jul/2003:11:34:42 -0800] "CONNECT cn-qafs:443
> HTTP/1.0" 400 330
>
>
> and error_log:
> [Tue Jul 15 11:34:33 2003] [error] [client 10.9.8.9] Digest: uri mismatch -
> </> does not match request-uri <76dc2960acd64a5Host>
> [Tue Jul 15 11:34:36 2003] [error] [client 10.9.8.9] Digest: uri mismatch -
> </> does not match request-uri <92ce>
> [Tue Jul 15 11:34:40 2003] [error] [client 10.9.8.9] Digest: uri mismatch -
> </> does not match request-uri <3151>
> [Tue Jul 15 11:34:42 2003] [error] [client 10.9.8.9] Digest: uri mismatch -
> </> does not match request-uri <76dc2960acd64a5Host>
> --------------------
>
> below is part config file of a digest auth server:
> ---------------
> <IfModule mod_proxy.c>
> ProxyRequests On
> <Proxy *>
> options indexes followsymlinks
> allowoverride authconfig
> AuthType Digest
> AuthName "digest"
> AuthDigestFile /usr/local/apache246/conf/digest
> require valid-user
> Order allow,deny
> Allow from all .example.com
> </Proxy>
>
> ProxyVia On
>
> #
> # To enable the cache as well, edit and uncomment the following lines:
> # (no cacheing without CacheRoot)
> #
> #CacheRoot "/usr/local/apache246/proxy"
> #CacheSize 5
> #CacheGcInterval 4
> #CacheMaxExpire 24
> #CacheLastModifiedFactor 0.1
> #CacheDefaultExpire 1
> #NoCache a-domain.com another-domain.edu joes.garage-sale.com
>
> </IfModule>
> # End of proxy directives.
> -----------------
>
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> " from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
[users@httpd] Re:[users@httpd]2.0.XX proxy digest auth cannot access https server,a bug of apache2?
Posted by Jeff Cohen <su...@gej-it.com>.
NameVirtualHost *:8080
<VirtualHost *:8080>
ServerName proxy.yourdomain.com:8080
ProxyVia On
AllowCONNECT 443 2443 80
<Proxy *>
allowoverride authconfig
AuthType Digest
AuthName "digest"
AuthUsertFile /usr/local/apache246/conf/digest
require valid-user
Order allow,deny
Allow from all .example.com
</Proxy>
</VirtualHost>
After you've done that, set your browser to use the server name you use
instead of "proxy.yourdomain.com" and choose port 8080.
All the best,
Jeff Cohen
Support@GEJ-IT.com
Tel. (416) 917-2324
www.GEJ-IT.com
GEJ-IT Networks!
> -----Original Message-----
> From: Jiang_Chang@trendmicro.com.cn [mailto:Jiang_Chang@trendmicro.com.cn]
> Sent: Thursday, July 24, 2003 11:10 PM
> To: users@httpd.apache.org
> Subject: [users@httpd] Re:[users@httpd]2.0.XX proxy digest auth cannot
access
> https server,a bug of apache2?
>
> Hi,
> Can you help me?
> I tryed 2.0.47 today on redhat9, the error still there.
> I just want to know if anybody have configed digest auth for proxy on
apache2.0
> ,and use it to access https website successful?
> Or I will submit it as a bug to apache.org.
>
> Thanks,
> Jiang
>
> -----原始邮件-----
> 发件人: Jiang Chang (QA-CN)
> 发送时间: 2003年7月18日 10:27
> 收件人: users@httpd.apache.org
> 主题: [users@httpd] 答复: [users@httpd] ??: [users@httpd]2.0.46 proxy
> digest auth cannot access https server
>
>
> Error is the same as before.
>
> I test the same config on Apache2.0.40 (default in redhat9) and Apache1.
3.19
> (default in redhat7.1).
> It's failed on Redhat9, it's successful on redhat7.1
>
> Can we say this just is a Bug of Apache2.0 ?
>
> Can anybody help to config an Apache2.0 with digest auth proxy?and use it
to
> access https website succesfully?
> Thanks,
> BTW,"Replace AuthDigestFile /usr/local/apache246/conf/digest
> With AuthUsertFile /usr/local/apache246/conf/digest" must be a config
error for
> digest auth . It will make apache cannot run.
>
> -----原始邮件-----
> 发件人: Jeff Cohen [mailto:support@gej-it.com]
> 发送时间: 2003年7月16日 20:01
> 收件人: users@httpd.apache.org
> 主题: RE: [users@httpd] ??: [users@httpd]2.0.46 proxy digest auth cannot
> access https server
>
>
> Not sure that it would help but try it:
> Replace AuthDigestFile /usr/local/apache246/conf/digest
> With AuthUsertFile /usr/local/apache246/conf/digest
>
> All the best,
> Jeff Cohen
> Support@GEJ-IT.com
> Tel. (416) 917-2324
> www.GEJ-IT.com
> GEJ-IT Networks!
>
>
>
> > -----Original Message-----
> > From: Jiang_Chang@trendmicro.com.cn
> [mailto:Jiang_Chang@trendmicro.com.cn]
> > Sent: Wednesday, July 16, 2003 2:07 AM
> > To: users@httpd.apache.org
> > Subject: [users@httpd] ??: [users@httpd]2.0.46 proxy digest auth cannot
> access
> > https server
> >
> > Thanks Jeff,
> > I tried it,changed my config as below:
> > ---------------------------
> > <IfModule mod_proxy.c>
> > ProxyRequests On
> > AllowCONNECT 443 2443
> > <Proxy *>
> > allowoverride authconfig
> > AuthType Digest
> > AuthName "digest"
> > AuthDigestFile /usr/local/apache246/conf/digest
> > require valid-user
> > Order allow,deny
> > Allow from all .example.com
> > </Proxy>
> > ProxyVia On
> > </IfModule>
> > ---------------------------
> > But error still there.
> > When I use basic auth, I can access any website,
> > but when I use digest auth,I cannot access any https website.
> > BTW,this is my config cmd before compile it:
> > ./configure --prefix=/usr/local/apache246 --enable-auth-anon
--enable-auth-
> > digest --enable-proxy --enable-proxy-connect --enable-proxy-ftp
--enable-proxy-
> > http --enable-ssl --enable-cache --enable-disk-cache --enable-file-cache
> > Is it anything wrong?
> >
> > Thanks.
> >
> >
> > -----原始邮件-----
> > 发件人: Jeff Cohen [mailto:support@gej-it.com]
> > 发送时间: 2003年7月15日 21:41
> > 收件人: users@httpd.apache.org
> > 主题: RE: [users@httpd]2.0.46 proxy digest auth cannot access https
server
> >
> >
> > 1. Remove followsymlinks from the Options
> > 2. Add: AllowCONNECT 443
> > Ref. http://httpd.apache.org/docs-2.0/mod/mod_proxy.html#allowconnect
> >
> > All the best,
> > Jeff Cohen
> > Support@GEJ-IT.com
> > Tel. (416) 917-2324
> > www.GEJ-IT.com
> > GEJ-IT Networks!
> >
> >
> > -----Original Message-----
> > From: Jiang_Chang@trendmicro.com.cn
> [mailto:Jiang_Chang@trendmicro.com.cn]
> > Sent: Tuesday, July 15, 2003 5:41 AM
> > To: users@httpd.apache.org
> > Subject: [users@httpd]2.0.46 proxy digest auth cannot access https
server
> >
> > Hi,
> > I compiled and setuped Apache2.0.46 on Win2k server,Redhat7.2 and
Solaris9.
> > I used them as proxy servers.
> > I configed basic authentication and digest authentication on these
proxy.
> > I can access http website through any of these proxy,I can also access
https
> > website through basic auth proxy.
> > But I cannot access https://* through digest auth proxy on any platform.
> > Who can help me?If this's a bug in Apache2.0.46?
> >
> > -------------------
> > this is access_log
> > 10.9.8.9 - - [15/Jul/2003:11:34:33 -0800] "CONNECT cn-qafs:443 HTTP/1.0"
> 407
> > 519
> > 10.9.8.9 - tester [15/Jul/2003:11:34:33 -0800] "CONNECT cn-qafs:443
> > HTTP/1.0" 400 330
> > 10.9.8.9 - - [15/Jul/2003:11:34:36 -0800] "CONNECT cn-qafs:443 HTTP/1.0"
> 407
> > 519
> > 10.9.8.9 - tester [15/Jul/2003:11:34:36 -0800] "CONNECT cn-qafs:443
> > HTTP/1.0" 400 330
> > 10.9.8.9 - - [15/Jul/2003:11:34:40 -0800] "CONNECT cn-qafs:443 HTTP/1.0"
> 407
> > 519
> > 10.9.8.9 - tester [15/Jul/2003:11:34:40 -0800] "CONNECT cn-qafs:443
> > HTTP/1.0" 400 330
> > 10.9.8.9 - - [15/Jul/2003:11:34:42 -0800] "CONNECT cn-qafs:443 HTTP/1.0"
> 407
> > 519
> > 10.9.8.9 - tester [15/Jul/2003:11:34:42 -0800] "CONNECT cn-qafs:443
> > HTTP/1.0" 400 330
> >
> >
> > and error_log:
> > [Tue Jul 15 11:34:33 2003] [error] [client 10.9.8.9] Digest: uri
mismatch -
> > </> does not match request-uri <76dc2960acd64a5Host>
> > [Tue Jul 15 11:34:36 2003] [error] [client 10.9.8.9] Digest: uri
mismatch -
> > </> does not match request-uri <92ce>
> > [Tue Jul 15 11:34:40 2003] [error] [client 10.9.8.9] Digest: uri
mismatch -
> > </> does not match request-uri <3151>
> > [Tue Jul 15 11:34:42 2003] [error] [client 10.9.8.9] Digest: uri
mismatch -
> > </> does not match request-uri <76dc2960acd64a5Host>
> > --------------------
> >
> > below is part config file of a digest auth server:
> > ---------------
> > <IfModule mod_proxy.c>
> > ProxyRequests On
> > <Proxy *>
> > options indexes followsymlinks
> > allowoverride authconfig
> > AuthType Digest
> > AuthName "digest"
> > AuthDigestFile /usr/local/apache246/conf/digest
> > require valid-user
> > Order allow,deny
> > Allow from all .example.com
> > </Proxy>
> >
> > ProxyVia On
> >
> > #
> > # To enable the cache as well, edit and uncomment the following lines:
> > # (no cacheing without CacheRoot)
> > #
> > #CacheRoot "/usr/local/apache246/proxy"
> > #CacheSize 5
> > #CacheGcInterval 4
> > #CacheMaxExpire 24
> > #CacheLastModifiedFactor 0.1
> > #CacheDefaultExpire 1
> > #NoCache a-domain.com another-domain.edu joes.garage-sale.com
> >
> > </IfModule>
> > # End of proxy directives.
> > -----------------
> >
> >
> > ---------------------------------------------------------------------
> > The official User-To-User support forum of the Apache HTTP Server
Project.
> > See <URL:http://httpd.apache.org/userslist.html> for more info.
> > To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> > " from the digest: users-digest-unsubscribe@httpd.apache.org
> > For additional commands, e-mail: users-help@httpd.apache.org
>
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> " from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org