[galaxy-dev] trouble with authentication through Apache

29 Oct 2010

      Hi,

I'm trying to set up a Galaxy mirror, and I'd like to authenticate via Apache.  I can get Galaxy going when I don't authenticate.  It's running on the same machine as the Apache server, listening on port 8081.

I've added the mod_rewrite stuff from http://bitbucket.org/galaxy/galaxy-central/wiki/Config/ApacheProxy, but I'm' still getting an error:

Access to Galaxy is denied

Galaxy is configured to authenticate users via an external method (such as HTTP authentication in Apache), but a username was not provided by the upstream (proxy) server. This is generally due to a misconfiguration in the upstream server.

Please contact your local Galaxy administrator.

Here's the block from our Apache configuration:

    <Location "/galaxy">
        AuthName "NIH Login -- all lowercase, not prefixed with NIH\!"
        AuthType Kerberos
        Krb5Keytab /etc/auth_kerb.keytab
        KrbAuthRealm NIH.GOV
        KrbMethodNegotiate off
        KrbSaveCredentials off
        KrbVerifyKDC off
        Require valid-user
        RewriteCond %{IS_SUBREQ} ^false$
        RewriteCond %{LA-U:REMOTE_USER} (.+)
        RewriteRule . - [E=RU:%1]
        RequestHeader set REMOTE_USER %{RU}e
    </Location>

        RewriteRule ^/galaxy$ /galaxy/ [R]
        RewriteRule ^/galaxy/static/style/(.*) /home/galaxy/galaxy/static/june_2007_style/blue/$1 [L]
        RewriteRule ^/galaxy/static/scripts/(.*) /home/galaxy/galaxy/static/scripts/packed/$1 [L]
        RewriteRule ^/galaxy/static/(.*) /home/galaxy/galaxy/static/$1 [L]
        RewriteRule ^/galaxy/favicon.ico /home/galaxy/galaxy/static/favicon.ico [L]
        RewriteRule ^/galaxy/robots.txt /home/galaxy/galaxy/static/robots.txt [L]
        RewriteRule ^/galaxy(.*) http://localhost:8081$1 [P]

Any ideas?

David Hoover
Helix Systems Staff
http://helix.nih.gov