David, the section "Serving Galaxy at a sub directory (such as /galaxy) " in http://bitbucket.org/galaxy/galaxy-central/wiki/Config/ApacheProxy might help? On Fri, Oct 29, 2010 at 5:32 PM, David Hoover <hooverdm@helix.nih.gov> wrote:
Hi,
I'm trying to set up a Galaxy mirror, and I'd like to authenticate via Apache. I can get Galaxy going when I don't authenticate.
It's running on the same machine as the Apache server, listening on port 8081.
I've added the mod_rewrite stuff from http://bitbucket.org/galaxy/galaxy-central/wiki/Config/ApacheProxy, but I'm' still getting an error:
Access to Galaxy is denied
Galaxy is configured to authenticate users via an external method (such as HTTP authentication in Apache), but a username was not provided by the upstream (proxy) server. This is generally due to a misconfiguration in the upstream server.
Please contact your local Galaxy administrator.
Here's the block from our Apache configuration:
<Location "/galaxy"> AuthName "NIH Login -- all lowercase, not prefixed with NIH\!" AuthType Kerberos Krb5Keytab /etc/auth_kerb.keytab KrbAuthRealm NIH.GOV KrbMethodNegotiate off KrbSaveCredentials off KrbVerifyKDC off Require valid-user RewriteCond %{IS_SUBREQ} ^false$ RewriteCond %{LA-U:REMOTE_USER} (.+) RewriteRule . - [E=RU:%1] RequestHeader set REMOTE_USER %{RU}e </Location>
RewriteRule ^/galaxy$ /galaxy/ [R] RewriteRule ^/galaxy/static/style/(.*) /home/galaxy/galaxy/static/june_2007_style/blue/$1 [L] RewriteRule ^/galaxy/static/scripts/(.*) /home/galaxy/galaxy/static/scripts/packed/$1 [L] RewriteRule ^/galaxy/static/(.*) /home/galaxy/galaxy/static/$1 [L] RewriteRule ^/galaxy/favicon.ico /home/galaxy/galaxy/static/favicon.ico [L] RewriteRule ^/galaxy/robots.txt /home/galaxy/galaxy/static/robots.txt [L] RewriteRule ^/galaxy(.*) http://localhost:8081$1 [P]
Any ideas?