Thanks - i will try this.
From: Encolpe Degoute-4 [via Plone] [mailto:[email protected]] Sent: 06 May 2010 08:50 To: Birkett Marc (5D8) North Tyneside PCT Subject: Re: SSO with SSPI and SSL. LA-U:REMOTE_USER always null. Le 30/11/2009 10:45, birkettm a écrit : > > Hi. > > I have set up Single Sign On with Apache sspi ssl, plone and zope, and it > works. They only problem i am having is that IE challenges me for my domain > username and password when it sould just log me on automatically. I think > this stems from the fact that {LA-U:REMOTE_USER} is always null, if i remove > the RewriteCond then Apache logs me in as the user (null), so im slightly > stumped. My vhosts is below, any thoughts? > > I dont have anything in error logs of any great substance other than > "authentication failure" which i assume is a result of no user being > passed... > > [Fri Nov 27 15:44:02 2009] [error] [client 127.0.0.1] (OS 87)The parameter > is incorrect. : authentication failure for "/": user unknown, reason: > cannot generate context Hello, I had the same problem today and I found a solution: for each rule force the envirenment variable. For example: RewriteCond %{LA-U:REMOTE_USER} (.+) RewriteRule ^/(.*) \ http://${servers:prod}/VirtualHostBase/http/%{SERVER_NAME}:80/VirtualHostRoot/$1 [L,P,E=RU:%1] RequestHeader set X_REMOTE_USER %{RU}e -- Encolpe DEGOUTE _______________________________________________ Setup mailing list [hidden email] http://lists.plone.org/mailman/listinfo/setup ________________________________ View message @ http://plone.293351.n2.nabble.com/SSO-with-SSPI-and-SSL-LA-U-REMOTE-USER-always-null-tp4086748p5013017.html To unsubscribe from SSO with SSPI and SSL. LA-U:REMOTE_USER always null., click here < (link removed) => . ============================================================ The information in this e-mail and in any attachments is confidential and solely for the attention of the intended recipient/s. If you are not the intended recipient, or a person responsible for delivering it to the intended recipient, please note that any distribution, copying or use of this communication, or the information in it, is strictly prohibited. If you receive this communication in error, please notify us immediately and delete the email, and any copies of it, from your computer. The information contained in this e-mail may be subject to public disclosure under the NHS Code of Openness or the Freedom of Information Act 2000. Unless the information is legally exempt, the confidentiality of this e-mail and your reply cannot be guaranteed. This communication has been created and sent in the knowledge that internet e-mail is not secure. If you communicate with us by internet e-mail, we will assume that you accept the security risk and that you authorise us to communicate with you in the same format. Although this email and its attachments are believed to be virus free, it is your responsibility to conduct your own virus checks on all parts of this communication. We accept no liability or responsibility for any opinion, information or other content of this message that does not relate to our official business; nor do we accept any liability or responsibility for changes made to this e-mail once its is outside our control. This communication and any communication received by us may be monitored. If you communicate with us by e-mail, we will assume that you agree to this. ============================================================ -- View this message in context: http://plone.293351.n2.nabble.com/SSO-with-SSPI-and-SSL-LA-U-REMOTE-USER-always-null-tp4086748p5013421.html Sent from the Installation, Setup, Upgrades mailing list archive at Nabble.com.
_______________________________________________ Setup mailing list [email protected] http://lists.plone.org/mailman/listinfo/setup
