Automatically authenticate reverse proxy on ML web server

My Mini server is running 10.8.2. I've set apache up to reverse proxy several web cameras and I then force authentication to the domain via a group. However the cameras have their own authentication that I can't circumvent. Is there a way to authenticate to the cameras via apache's reverse proxy? Here is my current apache config....
ProxyRequests off
ProxyPass /camera1/ http://192.168.0.30/
ProxyPass /camera2/ http://192.168.0.32/
ProxyPass /camera3/ http://192.168.0.34/
ProxyPass /camera4/ http://192.168.0.36/
ProxyPassReverse /camera1 http://192.168.0.30
ProxyPassReverse /camera2 http://192.168.0.32
ProxyPassReverse /camera3 http://192.168.0.34
ProxyPassReverse /camera4 http://192.168.0.36

well, technology preview is what the name says .. i am surprised that u decided to stick with a technology preview release all these days.. in any case, there should not have any feature change between technology preview build and U4. but , there has been lot of bug fixes - so, unless we know the exact problem - we can't easily narrow down the change between tp3 build with U4 and find out how it is affecting u.
here is a related article on how to use chunked encoding within web server 7
http://developers.sun.com/webtier/reference/techart/chunked_req.html
now, to help you more appropriately, you need to provide us with errors (probably with log level set to finest within server.xml) and let us know with the error reported by web server when it is unable to send those requests to back end tomcat
you can set log level to finest by running the following command
/sun/webserver7/bin/wadm set-config-prop -user=admin --config=<hostname> log-level=finest
/sun/webserver7/bin/wadm deploy-config --user=admin <hostname>
http://docs.sun.com/app/docs/doc/820-4842/set-config-prop-1?a=view
(once you have identified the problem, you might want to set log level to info as setting to finest will cause your logs to grow humongous and also hurt performance
thanks
sriram

Similar Messages

Reverse Proxy installatio on Web Server

Hi,
Can anyone help me to install a reverse proxy on a Web Server and configure it. Is there any documentation and where and how I can download the reverse proxy for Web Server.
Thanks in Advance.

Reverse proxy functionality is inbuit in Sun Java System Web Server 7.0.
Official WS 7.0 docs are at :
http://docs.sun.com/app/docs/coll/1308.3
Some blogs
http://blogs.sun.com/meena/entry/configuring_reverse_proxy_in_sun
http://blogs.sun.com/meena/entry/configuring_reverse_proxy_in_web

Reverse Proxy with Sun Web Server 7 update 4

Hi All,
I've just migrating to Sun Java System Web Server 7.0U4 B12/02/2008 from Sun Java System Web Server 7.0-Technology-Preview-3 B09/13/2006. I've have the two web servers running side by side on separate machines. Both have a VS configured as a reverse proxy pointing to the same apache tomcat web server.
The Tech Preview 3 server works fine and has been doing since it was installed. However the Update 4 server doesn't. I can access the tomcat app via the U4 server in a browser, but not with the app on my mobile (sync ML). Snooping the traffic show me that the U4 server is sending a different response that the Tech Preview server. I'm thinking it may have to do with Transfer Encoding: chunked. I've looked around the web to see if I can turn this off in the U4 server, as I seem to recall having to do so at some point in my life, though I can't remember when and with what.
Does anybody have any clues they can throw at me?? Or anybody know what has change in the reverse proxy part of the web server from Tech Preview 3 to U4??
Both VS reverse proxies are congfigured exactly the same.
Thanks,
Stuart.

well, technology preview is what the name says .. i am surprised that u decided to stick with a technology preview release all these days.. in any case, there should not have any feature change between technology preview build and U4. but , there has been lot of bug fixes - so, unless we know the exact problem - we can't easily narrow down the change between tp3 build with U4 and find out how it is affecting u.
here is a related article on how to use chunked encoding within web server 7
http://developers.sun.com/webtier/reference/techart/chunked_req.html
now, to help you more appropriately, you need to provide us with errors (probably with log level set to finest within server.xml) and let us know with the error reported by web server when it is unable to send those requests to back end tomcat
you can set log level to finest by running the following command
/sun/webserver7/bin/wadm set-config-prop -user=admin --config=<hostname> log-level=finest
/sun/webserver7/bin/wadm deploy-config --user=admin <hostname>
http://docs.sun.com/app/docs/doc/820-4842/set-config-prop-1?a=view
(once you have identified the problem, you might want to set log level to info as setting to finest will cause your logs to grow humongous and also hurt performance
thanks
sriram

Apache Reverse Proxy with Abap Web query

Hi to all
We are trying to configure apache 2 to work as a reverse proxy with web abap Netweaver installation.
From inside the network the web query is fine.
Running the query with the reverse proxy we have only the html code in the browser. All the scripts and css are not present.
We checked some messages inside the forum and we have tried a lot of stuff without success.
We use always linux (Fedora, Ubuntu with xampp or apache only) plus the html module or the publisher from http://apache.webthing.com.
Our installation is like this the reverse proxy in the dmz and the netweaver to the inside off coarse, and we don't have the same domain name, i don't know if this is important.
Any help/idea is valuable.
Thank you
Yiannis

Hi Olivier
I have seen your solution in other messages but i didn't try it because i was trying to work with the html_proxy module.
I read the documents you gave me plus some apache tutorials on the rewrite rule.
In any case i have my installation working now.
I did some extra changes in my config so now the rules are like that
ProxyVia On
ProxyBadHeader IsError
ProxyRequests Off
ProxyPreserveHost On
ProxyPass /sap http://192.168.1.59:8001/sap
ProxyPassReverse /sap http://192.168.1.59:8001/sap
RewriteEngine On
RewriteRule ^/(sap\(.*) http://192.168.1.59:8001/$1 [P,L]
Thanks again for your help
Yiannis

IIS server reverse proxy to JCAPS integration server

We have a need to setup an IIS server as front end to a JCAPS integration server.
The IIS server runs in the DMZ zone and would allow clients on from Internet to access JCAPS application running inside the firewall.
Does anybody know how to setup an IIS server as a reverse proxy server for JCAPS inetgeration server ?
I am assuming I would need some ISAPI adapter for this.
Since the JCAPS integration server is basically Sun Java Application server PE 8.0 does any body know if SUN provides some kind of ISAPI adapter for this Application server ?

Yes, it was as simple as that. I wanted to ask first (as the server is already online), but I took the dive and tried it. I hope this helps someone else in a similar situation.

Reverse proxy settings crashing ML Server

I have a few IP cameras I'm attempting to expose externally via reverse proxy. I've created a site on my Mini ML Server and password protected it under a subdomain. This allows me to drop my own custom UI on the camera controls so they work better with my iPhone etc. It's working great on my laptops local virtual host. However, the reverse proxy settings seem to kill apache on the ML server. If I remove the lines in blue below, it seems to work, but i get double authentication requests. Anyone have any experience with this? My Apache knowledge is minimal at best
ProxyRequests off
ProxyPass /camera1/ http://192.168.0.1/
ProxyPass /camera2/ http://192.168.0.2/
ProxyPass /camera3/ http://192.168.0.3/
ProxyHTMLURLMap http://192.168.0.1 /camera1
ProxyHTMLURLMap http://192.168.0.2 /camera2
ProxyHTMLURLMap http://192.168.0.3 /camera3
<Location /camera1/>
ProxyPassReverse /
ProxyHTMLEnable On
ProxyHTMLURLMap /      /camera1/
RequestHeader    unset Accept-Encoding
</Location>
<Location /camera2/>
ProxyPassReverse /
ProxyHTMLEnable On
ProxyHTMLURLMap /      /camera2/
RequestHeader    unset Accept-Encoding
</Location>
<Location /camera3/>
ProxyPassReverse /
ProxyHTMLEnable On
ProxyHTMLURLMap /      /camera3/
RequestHeader    unset Accept-Encoding
</Location>

The following setup took care of my issue...
ProxyRequests off
ProxyPass /camera1/ http://192.168.0.30/
ProxyPass /camera2/ http://192.168.0.32/
ProxyPass /camera3/ http://192.168.0.34/
ProxyPass /camera4/ http://192.168.0.36/
ProxyPassReverse /camera1 http://192.168.0.30
ProxyPassReverse /camera2 http://192.168.0.32
ProxyPassReverse /camera3 http://192.168.0.34
ProxyPassReverse /camera4 http://192.168.0.36

RDS 2012 - Using a reverse proxy with the Gateway server on the internal LAN

Hi there,
I'm looking to introduce an RDS 2012 farm and would like to put the RDS Gateway server on the internal LAN (due to it's AD requirements etc).
What are the best practise options for using a reverse proxy to forward traffic to the gateway server and is it better to do this than just forward 443 traffic from the DMZ through to the Gateway directly?
Thanks,
Paul.

Hi Paul,
It is generally considered more secure to have a reverse proxy in front of RDG. I don't know of a proxy that will handle the RDG UDP traffic, so you will need to consider using direct server return for that or not having the benefit of UDP. Whether
or not it is acceptable to simply forward TCP 443/UDP 3391 directly to your internal RDG is up to your security policies. Many companies are fine with it while many other companies think it is unacceptable and require a reverse proxy or other method
to provide an extra layer of protection.
-TP

How to enable Reverse Proxy in Oracle HTTP Server ?

What modules need to Loaded? What configure need to be done to enable Reverse Proxy in OHS.
I tried many times but impossible to enable it.

I have done it!
after follow this guide :D
http://mjohal.wordpress.com/2007/01/17/configuring-reverse-proxy-in-front-of-oracleas-10g-sso/

Difference between reverse proxy plugin and java web proxy server

Hello
Can anyone please let me know what exactly is the difference between the reverse proxy plugin available with java system web server and the
java web proxy server.
Thanks
Manik Gupta.

The features are very closely related. The most notable and obvious difference is that The Web Proxy Server reverse proxy makes use of a content cache, while the reverse proxy of the Web Server does not cache results.
Message was edited by:
JoeMcCabe

Reverse proxy plugin does not like the POST method

My second tier is not functionning properly when placed behind a S1WS6 with reverse proxy
Client ====== SunOne web server with Passthrough ====== .NET app server & web services.
The web server configuration (reverse proxy � libpassthrough.so) is configured and is working correctly when it comes to requesting normal pages, however a problem arises when the request is made either by:
1- Invoking a web service on the .Net tier, or
2- The .Net tier performs a server.transfer call within the same .net server (Page transfer)
Keep in mind that the .Net tier works fine when not accessed through the reverse proxy.
It seems that when a POST method is invoked, a Session Close is sent before data is sent back !!
We tried to isolate the problem from different angles but came up short, the http server log shows that the request was made
192.168.2.7 - - [14/Jul/2004:14:10:56 +0300] "POST /wavedms2.0/TestWebService/TestService.asmx HTTP/1.1" 100 0
Although response 100 indicates that it is waiting for more, while the web service error shows the following:
The underlying connection was closed: An unexpected error occurred on a receive.
at System.Web.Services.Protocols.WebClientProtocol.GetWebResponse(WebRequest request)
at System.Web.Services.Protocols.HttpWebClientProtocol.GetWebResponse(WebRequest request)
at System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(String methodName, Object[] parameters)
at TestWebService.oWebService.MyWebSvc.HelloWorld()
at TestWebService.Form1.button1_Click(Object sender, EventArgs e)
In general, any page that uses POST method faces the same problem.I appreciate any help you can provide us with a solution on this issue.

The Application Server plugin, libpassthrough.so, was designed to connect Web Server to Application Server. Unfortunately, it does not work with IIS which sends unsolicited "HTTP/1.1 100 Continue" responses.

Reverse Proxy using S1AS7 with libpassthrough.so

My second tier is not functionning properly when placed behind a S1AS7 with reverse proxy
Client ====== SunOne web server with Passthrough ====== .NET app server & web services.
The web server configuration (reverse proxy � libpassthrough.so) is configured and is working correctly when it comes to requesting normal pages, however a problem arises when the request is made either by:
1- Invoking a web service on the .Net tier, or
2- The .Net tier performs a server.transfer call within the same .net server (Page transfer)
Keep in mind that the .Net tier works fine when not accessed through the reverse proxy.
We tried to isolate the problem from different angles but came up short, the http server log shows that the request was made
192.168.2.7 - - [14/Jul/2004:14:10:56 +0300] "POST /wavedms2.0/TestWebService/TestService.asmx HTTP/1.1" 100 0
Although response 100 indicates that it is waiting for more, while the web service error shows the following:
The underlying connection was closed: An unexpected error occurred on a receive.
at System.Web.Services.Protocols.WebClientProtocol.GetWebResponse(WebRequest request)
at System.Web.Services.Protocols.HttpWebClientProtocol.GetWebResponse(WebRequest request)
at System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(String methodName, Object[] parameters)
at TestWebService.oWebService.MyWebSvc.HelloWorld()
at TestWebService.Form1.button1_Click(Object sender, EventArgs e)
I appreciate any help you can provide us with a solution on this issue.

Thanks a million, yes it is exactly the same
Do you know if this release is available for download / purchase????

Reverse proxy OPTIONS request

Hi all,
After recommendation, I am using the reverse proxy in Sun Web Server 7.0 to send requests to my web application in Tomcat. In my Tomcat web.xml, I have configured all requests (no extension or path) to be handled by a dispatcher servlet. I have a session filter which needs the HTTP host to setup the session correctly. This works fine but every so often I get a null pointer exception. On closer inspection, I can see this in the error log:
[28/Sep/2009:22:26:31] info ( 2308): trying to OPTIONS http://localhost:90, check-http-server reports: HTTP7750: server localhost:90 online
Is this the reverse proxy? Can I get round this somehow without changes to my application?
Thanks,
Surjit

I'd fix the Servlet filter. It sounds broken. I think I may have to do something in the servlet filter like ignore requests with OPTIONS methods. I'll try to give a bit more explanation; we are supporting multiple countries so we have the following domains:
http://uk.mysite.com/
http://fr.mysite.com/
http://de.mysite.com/
etc.
These domains all point to the same webserver and java requests are reverse proxied to the same Tomcat web application as we have a single codebase that serves all countries. The web application session filter will use the country code from the server host (e.g. xx.mysite.com) to setup the session so we can show the correct language to the user.
The reverse proxy setup has been setup like this in obj.conf:
<Object name="reverse-proxy-/">
Route fn="set-origin-server" server="localhost:90"
</Object>I use localhost as I don't need to specify any country specific domain here. This works fine but the reverse proxy health check will send localhost as the server host to the tomcat instance. The session filter tries to map localhost in our country lookup mapping which doesnt exist and then throws a null pointer exception.
That said, I get the impression you want to send
requests to a single Tomcat instance on the local host. No, this is just for development purposes. In production we will use the reverse proxy to load balance over 4 JBoss servers so we will need the set origin SAF.
Thanks,
Surjit

Web Server Core dumps

We recently upgraded to SunOne 9.1 on x86. We kept our webserver on 6.0 but upgraded the plugin. We started experiencing frequent core dumps of our webserver. We decided to upgrade webserver to 7.0 hoping the problem would go away. However, we continue to see the core dumps. Every core dump I looked at had the same stack trace; eg)
libc.so.1`strlen+0xc(11a55440, 10b5da88, 11a55388)
libpassthrough.so`__1cILBDaemonOserviceRequest6MrnMProxyRequest__I_+0x307(f229e08, 11a55388)
libpassthrough.so`__1cLDaemonEntryOserviceRequest6MrnMProxyRequest__I_+0x57(da23ca8, 11a55388)
libpassthrough.so`__1cMRequestGroupOserviceRequest6MrnMProxyRequest__I_+0x1b0(8263c28, 11a55388)
libpassthrough.so`__1cPLBDaemonManagerOserviceRequest6MrnMProxyRequest__I_+0x157(88054a0, 11a55388)
libpassthrough.so`__1cQservice_lbplugin6FpnGpblock_pnHSession_pnHRequest__i_+0x8dc(8719b20, f80fc5c, f80fcd4)
libpassthrough.so`service_passthrough+0x23(8719b20, f80fc5c, f80fcd4)
libns-httpd40.so`func_exec_str+0x1e7(8208328, 8719b20, f80fc5c, f80fcd4)
libns-httpd40.so`INTfunc_exec_directive+0x1d6(816f888, 8719b20, f80fc5c, f80fcd4)
libns-httpd40.so`INTservact_service+0x31a(f80fc5c, f80fcd4)
libns-httpd40.so`INTservact_handle_processed+0x11d(f80fc5c, f80fcd4)
libns-httpd40.so`__1cLHttpRequestUUnacceleratedRespond6M_v_+0x794(f80fc48)
libns-httpd40.so`__1cLHttpRequestNHandleRequest6MpnGnetbuf_I_i_+0x68e(f80fc48, f82a008, ffffffff)
libns-httpd40.so`__1cNDaemonSessionDrun6M_v_+0x654(f80fe08)
libnsprwrap.so`ThreadMain+0x20(f80fe08)
libnspr4.so`_pt_root+0xe7(f06c718)
libc.so.1`_thr_setup+0x4e(dcc2da00)
libc.so.1`_lwp_start(dcc2da00, 0, 0, dc62aff8, fd397340, dcc2da00)
Any ideas? Are there any known issues with the lbplugin?

My "solution" doesn't change your architecture at all.
Your web servers are showing a stack trace pointing to libpassthrough.so. This is a shared object that runs in the Web Server. I'm suggesting that rather than use an old libpassthrough.so that may (or may not) have problems, try using the built-in Reverse Proxy feature of Web Server. The Reverse Proxy feature is derived from the older libpassthrough.so, but has had many enhancements over the years. It IS a newer version of the load balancer shared object you are currently using.

Sun Web Server Reverse Proxy and Weblogic HTTP to HTTPS redirection

Hi,
I am currently testing reverse-proxy from SJSW 7.0 update 5 to Weblogic server but I have encountered an issue.
I have configured a context root to be forwarded to weblogic:
Web Server: www.server.com
URI: /path
Reverse Proxy URL: wlserver:9000
When I access https://www.server.com/path, I am getting the correct page. The issue is, the weblogic server is configured to redirect HTTP access to HTTPS, i.e., when I access http://www.server.com/path, it should be redirected to https://www.server.com/path. However, that is not the case. What happens is that I am being redirected instead to https://www.server.com/.
If I don't use reverse proxy, that is, if I use the libproxy.so from weblogic, I get the correct redirection.
Would appreciate it very much if someone can help me troubleshoot this issue.
Thanks in advance!
Edited by: agent_orange on Jul 29, 2010 2:30 AM
Edited by: agent_orange on Jul 29, 2010 2:31 AM

I am not sure, how you have configured your reverse proxy since you didn't attach / refer your current configuration file. this is how I would do it..
- create a new configuration (using web server 7 admin gui , within configuration wizard, disable java option if you plan to use web server 7 only for reverse proxy)
- select this new configuration and go to reverse proxy and try to reverse proxy / to the origin server.
that is all it should need.
your obj.conf or <hostname>-obj.conf depending on your configuration should look like following snippet
<Object name="default">
AuthTrans..
NameTrans fn=map from="/" to="/path" name="reverse-proxy-/"
</object>
<Object name="reverse-proxy-/">
Route fn=....
Service ..
</Object>
this is all you should need..
However, if you wanted to add complexity to your configuration, you could do some thing like
<Object name="default">
Auth..
<If defined $security>
NameTrans fn=map from="/" to="/path" name="reverse-proxy-/"
</If>
</Object>
<Object name="reverse-proxy-/">
Route...
</Object>

Single Reverse Proxy and multiple Office Web App Servers

Hi all,
I have recently installed a new office web apps server pool in my new location and configured it in my Lync topology as well.
I have a single Reverse Proxy (IIS ARR). Inside my Reverse Proxy I have created a new web farm for my new web apps server. The configuration of old web apps server. I have copied the settings from my old web app's web
farm in IIS including its Inbound rule regular expression.
Now when I try to upload a powerpoint as an external guest hoping to hit my new web apps server, my reverse proxy tries to hit my old office web apps server and no traffic is sent from reverse proxy to new web apps.
my reverse proxy shows the health of the new farm as healthy.
should the inbound rules be different for these farms in reverse proxy?
Any suggestions are welcomed.
Thanks,

Hi,
In addition to Luca's comment in order to determine if the farm is actually working correctly in the first instance, did you disable or remove the old server farm?
Can you also confirm that there are no static routes in place on the IIS ARR box?
Kind regards
Ben
Note: If you find a post informative, please mark it so using the arrow to the left. If it answers a question you've asked, please mark the thread as answered to aid others when they're looking for solutions to similar problems or queries.

Automatically authenticate reverse proxy on ML web server

Similar Messages

Maybe you are looking for