Reverse Proxy + RT 4.0.4 + mod_auth_cas on CentOS 6

RT Users
1

Hello,
I wanna ask. Is it possible to use RT behind a reverse proxy? Anyone
make that kind of configuration?

I have implementation RT 4.0.4 with mod_auth_cas and LDAPImport on
apache 2.2, system CentOS 6

I really appreciate any help

2

Hello,
I wanna ask. Is it possible to use RT behind a reverse proxy? Anyone
make that kind of configuration?

I have implementation RT 4.0.4 with mod_auth_cas and LDAPImport on
apache 2.2, system CentOS 6

I really appreciate any help

Yes, completely possible. Make sure the $WebDomain and $WebPort
configuration options are set to the external facing domain and port and
that $CanonicalizeRedirectURLs is set to 1.

http://bestpractical.com/rt/docs/4.0/RT_Config.html#CanonicalizeRedirectURLs

3

Hello,
I wanna ask. Is it possible to use RT behind a reverse proxy? Anyone
make that kind of configuration?

I have implementation RT 4.0.4 with mod_auth_cas and LDAPImport on
apache 2.2, system CentOS 6

I really appreciate any help

Yes, completely possible. Make sure the $WebDomain and $WebPort
configuration options are set to the external facing domain and port and
that $CanonicalizeRedirectURLs is set to 1.

RT Config - RT 4.0.25 Documentation - Best Practical

CAS auth will be on proxy, so info should be proxied as well.

We’re hiring! http://bestpractical.com/jobs

Best regards, Ruslan.

4

Hey,

I make some changes in my configuration and it seems that working
fine, but I noticed one interesting thing. I have HTTPS on login page
but when I login into RT that changes to HTTP.

Any ideas why something like this is happening?

Regards,
Jan

5

Quoting “Jan Niezbedny” janniezbedny1887@gmail.com:

fine, but I noticed one interesting thing. I have HTTPS on login page
but when I login into RT that changes to HTTP.

Without seeing your configuration it is hard to say for sure. One
guess is that in the container for the https:// you have
it going to the internal server using http:// ??

-Alan

6

Hey,

I make some changes in my configuration and it seems that working
fine, but I noticed one interesting thing. I have HTTPS on login page
but when I login into RT that changes to HTTP.

Any ideas why something like this is happening?

WebPort in RT config should be 443.

Regards,
Jan

We’re hiring! http://bestpractical.com/jobs

Best regards, Ruslan.

7

I want to apache in server with RT think that he have https
configuration, actually he does not because all traffic goes by other
server were stands CAS and apache with reverse proxy.

Below I put some example configuration.
RT_SiteConfig.pm
…
Set($WebPath , “/rt”);
#Set($WebBaseURL , “http://localhost”);
Set($WebDomain, ‘external_domain’);
Set($CanonicalizeRedirectURLs, 1);
Set($WebURL, “https://external_domain/”);
Set($WebPort, 443);
httpd.conf

CAS configuration

CASLoginURL https://external_domain/cas/login
CASValidateURL https://external_domain/cas/validate
CASValidateServer Off
CASVersion 1
CASSSOEnabled On
CASDebug On
CASCookiePath path_for_cookies

ServerName external_domain:80
Listen 443

#NameVirtualHost *:80
#
<VirtualHost *:443>
ServerAdmin abcd
DocumentRoot some_other_path
LogLevel debug
<Location /rt>
Order allow,deny
Allow from all
AuthType CAS
AuthName “CAS”
require valid-user
SetHandler perl-script
PerlResponseHandler Plack::Handler::Apache2
PerlSetVar psgi_app /opt/rt4/sbin/rt-server

<LocationMatch “/NoAuth”>
Satisfy Any
Allow from all


use Plack::Handler::Apache2;
Plack::Handler::Apache2->preload(“/opt/rt4/sbin/rt-server”);