mod_auth_openidc through apache Reverse Proxy, error #1012
Answered
by
zandbelt
sirpatrick2
asked this question in
Q&A
-
|
We could successfully implement mod_auth_openidc and Azure Active Directory Authentication. Now we would like to access our Web App from outside, by proxying through an Apache Reverse Proxy which is on our DMZ. LAN Web APP: Accessing from outside (through reverse Proxy) With ProxyPreserveHost Off: I get error 500 With ProxyPreserveHost On i get error 400: Proxy host Apache configuration: I can I make this configuration working? |
Beta Was this translation helpful? Give feedback.
Answered by
zandbelt
Feb 9, 2023
Replies: 6 comments 21 replies
-
|
you should be able to set a relative redirect URI e.g. |
Beta Was this translation helpful? Give feedback.
0 replies
Answer selected by
sirpatrick2
-
|
Thanks a lot, I get error
Log: |
Beta Was this translation helpful? Give feedback.
10 replies
-
|
Yes indeed. But I can't figure what could be the problem. Here is my trace from chrome:
|
Beta Was this translation helpful? Give feedback.
-
|
which version of mod_auth_openidc are you using? |
Beta Was this translation helpful? Give feedback.
-
|
openSUSE Leap 15.4 |
Beta Was this translation helpful? Give feedback.
-
|
set |
Beta Was this translation helpful? Give feedback.
-
|
I don't see those errors, but this part just keeps repeating in my log. This part just keeps repeating then. |
Beta Was this translation helpful? Give feedback.
-
|
the Redirect URI is set to |
Beta Was this translation helpful? Give feedback.
0 replies
-
|
I tried separate But still cannot get rid of that double
|
Beta Was this translation helpful? Give feedback.
1 reply
-
|
https://stackoverflow.com/questions/25995277/apache-mod-proxy-proxypass-order-of-matching |
Beta Was this translation helpful? Give feedback.
-
|
OK, I changed the ProxyPass order to make the redirect before, but same result. Here the log: |
Beta Was this translation helpful? Give feedback.
1 reply
-
you'll need to configure |
Beta Was this translation helpful? Give feedback.
-
|
Thanks a lot zandbelt for your precious help. OK, But still got those |
Beta Was this translation helpful? Give feedback.
9 replies
-
needs to be i.e. also remove the trailing slashes in the 2nd parameter value |
Beta Was this translation helpful? Give feedback.
-
|
I did that. Now it seems I get authenticated from the log,
gives me error 404 See log file: |
Beta Was this translation helpful? Give feedback.
-
|
yes, authentication works now but apparently you're proxying the orignal URL you tried to access to something that does not exist on the origin server; the logs are cut off so I cannot see which URL that is (i.e. the last "incoming request") |
Beta Was this translation helpful? Give feedback.
-
|
I found out a workaround! Error 404 was because the last redirection requested URL was The whole looks now like that: Do you think it's a good solution like this? |
Beta Was this translation helpful? Give feedback.
-
|
Thanks a lot for you precious help, zandbelt. |
Beta Was this translation helpful? Give feedback.
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
you should be able to set a relative redirect URI e.g.
OIDCRedirectURI /testautidc/redirect_uriand register bothhttps://testidcproxy.ofima.ch/testautidc/redirect_uriandhttps://lxinp.ofima.ch/testautidc/redirect_urias Redirect URIs in the Azure Active Directory configuration for the mod_auth_openidc Client