authentication by container or reverse-proxy

[John Tran]

I need to be able to authenticate to Kallithea by sending it a url such as http://user:passw@my.server.com , which I believe fits the description of container based or by reverse proxy.

Note that I'm using Kallithea on Windows.  I've followed the directions outlined here https://pythonhosted.org/Kallithea/setup.html for proxy-pass reverse using Apache (installed on windows).   Even though I enable the proxy pass and location block so that it uses an .htaccess file, I get two layers of authentication instead of just one.   I get the apache authentication which I can bypass using http://user:passw@my.server.com, yet Kallithea still asks for its own username and password in the Kallithea gui screen.

My apache block is just like the one in the example url but posted here w/ adjustments:

<Location / >
  ProxyPass http://127.0.0.1:5000/
  ProxyPassReverse http://127.0.0.1:5000/
  SetEnvIf X-Url-Scheme https HTTPS=1

  AuthType Basic
  AuthName "Kallithea authentication"
  AuthUserFile C:/.htpasswd
  require valid-user

  RequestHeader unset X-Forwarded-User

  RewriteEngine On
  RewriteCond %{LA-U:REMOTE_USER} (.+)
  RewriteRule .* - [E=RU:%1]
  RequestHeader set X-Forwarded-User %{RU}e
</Location>

I've also made sure that "proxypass_auth_enabled = true" in my C:\Kallithea\Bin\production.ini and restarted it.


________________________________

Confidentiality Notice: This e-mail may contain confidential and privileged material for the sole use of the intended recipient(s). Any review, use, distribution or disclosure by others is strictly prohibited. If you are not the intended recipient (or authorized to receive from the recipient), please contact the sender by reply e-mail and delete all copies of the message.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.sfconservancy.org/pipermail/kallithea-general/attachments/20150123/7ca183a3/attachment.html>