Hi Prakash,

This was not previously possible, but I have added a config option for it:

    https://bitbucket.org/galaxy/galaxy-central/commits/e92e13e9c103cc1f36dff65e1523479bf5cb17ed

If you're running the stable branch, you can apply the changes from this commit manually.

--nate


On Thu, Jan 2, 2014 at 11:09 AM, Jennifer Jackson <jen@bx.psu.edu> wrote:
Hello Prakash,
I am going to move this over to the galaxy-dev@bx.psu.edu mailing list where it will have greater visibility within our development community.
Best,
Jen
Galaxy team
https://wiki.galaxyproject.org/MailingLists#The_lists


On 1/2/14 7:27 AM, Velayutham, Prakash (Prakash) wrote:
Hi,

We have a SSO environment provided by Oracle Fusion products and for some reason, they don't like to send over HTTP_REMOTE_USER as a header variable to downstream servers. I have seen it before with other web sites I have integrated with Oracle Access Manager. Is there a way Galaxy can accept another HEADER variable than REMOTE_USER for its external authentication?

As an extension:

  • With just enabling HTTP_REMOTE_USER as a header variable from an external authenticator, Galaxy works without any issues. I tried this with a default Apache/mod_ldap/mod_authnz_ldap setup.
  • However, when I mix the Oracle gateways into the mix, things break down.
    • I made OAM send HTTP_AUTH_USER over to Galaxy.
    • I changed all instances of REMOTE_USER to AUTH_USER in the installed location of Galaxy in my server.
    • Authentication works fine, but I get issues with HISTORY part of Galaxy (below), when I access a workflow or basically any part of Galaxy that depends on HISTORY

Error Traceback:

View as:   Interactive  |  Text  |  XML (full)
 AttributeError: 'NoneType' object has no attribute 'user'
URL: http://xxx.xxx.xxx/dataset/list?sort=-update_time&f-name=All&f-tags=All&f-deleted=False
Module weberror.evalexception.middleware:364 in respond          view
>>  app_iter = self.application(environ, detect_start_response)
Module paste.recursive:84 in __call__          view
>>  return self.application(environ, start_response)
Module galaxy.web.framework.middleware.remoteuser:91 in __call__          view
>>  return self.app( environ, start_response )
Module paste.httpexceptions:633 in __call__          view
>>  return self.application(environ, start_response)
Module galaxy.web.framework.base:132 in __call__          view
>>  return self.handle_request( environ, start_response )
Module galaxy.web.framework.base:190 in handle_request          view
>>  body = method( trans, **kwargs )
Module galaxy.web.framework:98 in decorator          view
>>  return func( self, trans, *args, **kwargs )
Module galaxy.webapps.galaxy.controllers.dataset:555 in list          view
>>  status, message = self._copy_datasets( trans, hda_ids, target_histories )
Module galaxy.webapps.galaxy.controllers.dataset:1127 in _copy_datasets          view
>>  if user != history.user:
AttributeError: 'NoneType' object has no attribute 'user'

Thanks,
Prakash


___________________________________________________________
The Galaxy User list should be used for the discussion of
Galaxy analysis and other features on the public server
at usegalaxy.org.  Please keep all replies on the list by
using "reply all" in your mail client.  For discussion of
local Galaxy instances and the Galaxy source code, please
use the Galaxy Development list:

  http://lists.bx.psu.edu/listinfo/galaxy-dev

To manage your subscriptions to this and other Galaxy lists,
please use the interface at:

  http://lists.bx.psu.edu/

To search Galaxy mailing lists use the unified search at:

  http://galaxyproject.org/search/mailinglists/

-- 
Jennifer Hillman-Jackson
http://galaxyproject.org

___________________________________________________________
Please keep all replies on the list by using "reply all"
in your mail client.  To manage your subscriptions to this
and other Galaxy lists, please use the interface at:
  http://lists.bx.psu.edu/

To search Galaxy mailing lists use the unified search at:
  http://galaxyproject.org/search/mailinglists/