Call for docs: delegated authentication configuration examples


(Simone Scarduzio) #1

@innotech-research you contributed the delegated auth feature, which is super useful. I’d like to make a blog post about a practical use of this.
Do you have an nginx/apache reverse proxy configuration examples that show how to integrate with one or more authentication systems?


(Innotech) #2

@sscaduzio

Here are some samples, but the precise configuration will vary widely depending upon the exact situation.

If I assume an apache configuration where basic authentication has been configured, then the following proxy configuration will put the username in the X-Remote-User header, and configure the /es path to forward connections to an elasticsearch cluster on the same machine.

RewriteEngine On
RewriteCond %{LA-U:REMOTE_USER} (.+)
RewriteRule . - [E=RU:%1]
RequestHeader set X-Remote-User %{RU}e

Proxypass /es http://localhost:9200
Proxypassreverse /es http://localhost:9200