Accéder au contenu.
Menu Sympa

belenios-discuss - [belenios-discuss] CAS and proxy config

Objet : Discussion list for Belenios

Archives de la liste

[belenios-discuss] CAS and proxy config


Chronologique Discussions 
    < Chronologique >      < Discussions >
  • From: "HOUART Gerald" <Gerald.Houart AT ulb.be>
  • To: "belenios-discuss AT inria.fr" <belenios-discuss AT inria.fr>
  • Subject: [belenios-discuss] CAS and proxy config
  • Date: Sun, 24 Oct 2021 16:22:01 +0000
  • Accept-language: fr-BE, en-US
  • Arc-authentication-results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=ulb.be; dmarc=pass action=none header.from=ulb.be; dkim=pass header.d=ulb.be; arc=none
  • Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=lCVN1bu8743YRobBwgsE3oLHEVOeJoah7imnUYMFzmU=; b=Gz0yt7VP2f4c3XbWi+eFpzpx2TT8zuv6Ry7zBvCxbzJcscrgq9IPHERn19DcRZZ+OvnoR/n5YmX2S14B5y0Mh8PayAbwvx0Bwk7wnFVC9HhpUUAbH+RsXmxCnUPTmJUls7zCjI4PkpieahqToVQkYPGQLZGvq3N43TUcQfAXJqCEt2W0s3qFPX7NoHBdfKsQe5hZCnrERlDVTqM6BiJ4hfCLobwih++81CUXdPD46pI1XIG0ycUTJb56TlOLW+P8B4Al9H9B8J0J6pHHTFzZHQwFGIQChELFDltLob24TlAvaN4glgXhnpPDLmM2QKzvPAzI9pZ+bG+7ITG0bHnsQA==
  • Arc-seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=CqCCBmzAbG536FKKmlTtaxn7pIUaK5t6yTOsAUbcD5xgPzPZQSPICFpgl13CJmodUaOh3aVLEEjGKkAG4BBe+uH6hITSXQXTKRGg3A8DLeztqRj56Dbb0TWnY5ykE+j+seFxN9t3WPqspthIADt5jcsWfiol8lhKD+DDNAcazHid6QWM/0LNu9oO7nsiavQMacuAcll+zdWRyQOmBFIZJLH9mVzH5WLJQqJqt6lpIkO95Fw6nNSPQiSh772cNC5B3k0ROImxvbCa0WehXqylNDy5Tqn8vqT/Qsq/jYB8qC7BabPqVY7kfbMY30bGC1buYPDOKdiIyIsvijDlBQ913w==
  • Authentication-results: mail2-smtp-roc.national.inria.fr; spf=None smtp.pra=Gerald.Houart AT ulb.be; spf=Pass smtp.mailfrom=Gerald.Houart AT ulb.be; spf=Pass smtp.helo=postmaster AT EUR02-AM5-obe.outbound.protection.outlook.com
  • Ironport-data: A9a23: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
  • Ironport-hdrordr: A9a23:UxbmeasBgsbnDPgfrcsqSTAd7skC5YMji2hC6mlwRA09TyXGra2TdaUgvyMc1gx7ZJh5o6HnBEDyewKkyXcV2/hZAV7GZmXbUQSTXeVfBOfZogEIeBeOvtK1t50QFJSWYeeYZTcVsS+Q2njaLz9U+qjjzEnev5a9854Cd2FXQpAlyz08JheQE0VwSgUDL4E+DoCg6s1OoCflUWgLb+ygb0N1FdTrlpnurtbLcBQGDxko5E2lljWz8oP3FBCew1M3Ty5P+7E/6mLI+jaJq5lL8svLhiM05VWjoai+q+GRi+erw/b8yvT9Hw+cxTpAor4RGIFq8gpF4t1Ho2xa6OUk6y1QRPibrUmhNV1d6CGdoTXIwXIg7WTvxkSfhmamqcvlRCgiA84Eno5BdADFgnBQyO2U/Zg7rV5xjaAneC8oXR6NmeTgRlVvjA65sHAimekcgzhWVpYfcqZYqcga8FlOGJkNESrm4MR/edMeev309bJTaxeXfnrZtm5gzJilWWkyBA6PRgwHttaO2zZbkXhlxw8TxdAZnH0H6JUhIqM0kNjsI+BtjvVDX8UWZaVyCKMIRta2EHXERVbWPGebMT3cZdI60rL22u7KCZkOlZ2Xka0zveoPcc76IS5lXEYJCj3TNfE=
  • Ironport-phdr: A9a23:nOACZR1LgFHGhHj8smDOhQMyDhhOgF0UFjAc5pdvsb9SaKPrp82kYBaHo6821xSWBM3y0LFts6LuqafuWGgNs96qkUspV9hybSIDktgchAc6AcSIWgXRJf/uaDEmTowZDAc2t360PlJIF8ngelbcvmO97SIIGhX4KAF5Ovn5FpTdgsipy+y+4YPfbgtGiTayY75+MQi9oBnMuMURnYZsMLs6xAHTontPdeRWxGdoKkyWkh3h+Mq+/4Nt/jpJtf45+MFOTav1f6IjTbxFFzsmKHw65NfqtRbYUwSC4GYXX3gMnRpJBwjF6wz6Xov0vyDnuOdxxDWWMMvrRr0yRD+s7bpkSAXwhSkHKTA37X3XhMJzgq1Hrx2svAZwz5LIbIyPKPZyYqPQcNUHTmRBRMZRUClBD5uyY4UNFuQOM/pVoZXjqVATsBCwBBejBPn1xT9Mm3D607Ax3uMgHw7YxgwvBdYOv2nOoNv3M6cSTPq6zLPUzTjYcvNW3Szy5JLTfR8/uPyBW697fsXNx0c1DQzFkkmQppL/PzOTzukAvWiW4vZjWOyvl2MppQB8rzeuy8osloXHhowYxk3Y+Sll3Io4O922RFN/bNK4E5ZdtyGUO5Z5T84gQWxltyg3x7sbspC1eygKzY4oxx/Za/GfaYeI+gzsVPyPLjd/nn5lf6i/hxmq/Ue+xezzTMy00E5OriVbiNXDqncN1xnL5sSaSPZx5EKh2DaJ2gvO6e9EOVg5mKXHJ5I737I8ipgevV7fEiPshUn7gqGbel069uWp9+jqbLDrqoKAO4BuiwzzN7oiltC8DOk9LwQDW3SU9OG52bH+8kD0RqhBgOcsnanDqp/aINwWpq6nDA9R1YYu8xmxADm63tgEg3ULNU5IdhWHgoTwPFHBO+73Ae24g1SxjDdk3PfGPqDnAprQNHTDiK3hfbFh60FC1AUz0dFf55VSCr0bJ/LzR1PxtNjfDh8+MAy42froCNJ41o8GWGKPBLGWML/KvFKH+u4jOfSAaJMXtTrnN/Qp/ePigHE3lFMFeKmmx5oXaHS2HvR8JEWZZGLhjNYfHmcQpAU+SPHlhEeAXz5Uena9Rbg85i0gBYK7CYfMXZqhj6ef0yujBJ1ZenhGCkyQEXfvb4iLQOkDaCaMLc9nkzwEUqOhR5Y82hGvrw/116dnLvHP+iADrpLi1N115/XJmh0o9Dx0Cd6d02CXQG1ukGMIXWx+4Kcq60ZwzlqF0K9jxvBZDtdO/OhhUwEgNJeawfYwQ4T4VwbMeNaOUxOqQ86tHCoqZtM32d4HJUhnTYaMlBfGimCKJII8rYDDTLM56KvY0zK5c+lw0X/C2O8BiEQvWNdnKGmswKRyoVuAT7XVmlmUwv75PZ8X2zTAoT/rJY+moUVSFgR9A/2ttZE3S3bs9Y68z2afCrikBPIgLxdLztOEJu1ScNr1gF5aRfDlftPDf2a2nGT2DhGNlOrkhGXCZmEXmi/QWhFsrg==

Hi

 

After using Belenios (1.13) in a VM under proxmox, I try now to integrate it in our cloud infrastructure (stable v1.17).

My university is using OpenShift (RedHat’s k8s)

The docker runs on port 8080 on a private network but it is exposed on https port to the world

The problem is then that the CAS return address incorporate :8080 in the url and thus generates an error

 

I saw in docs that I must use rewrite-prefix but I encounter some problems doing it.

Where may I put the rewrite-prefix directive ?

Inside CAS <auth> directive ? Just after ?

 

Thanks in advance for any help

 

Gerald

<cas>: authenticate with a CAS server. For example:

<auth name="example"><cas server="https://cas.example.com/cas"/></auth>

If the web server is behind a reverse-proxy, it might be needed to rewrite URLs passed to the CAS server. This can be done with the following directive:

<rewrite-prefix src=""https://backend-server"" dst="https://frontend-server/belenios"/>

 


Archives gérées par MHonArc 2.6.19+.

Haut de le page