Are the users inside that IP range then going through EzProxy when accessing that port?
If so, EZProxy is forwarding requests to dspace for your client. Thus depending on configuration of your EZ Proxy, the IP of the request is your EZProxy server. Likewise, given configuration there may be a X-Forward-For http header... http://en.wikipedia.org/wiki/X-Forwarded-For This would contain your users IP address, which you could then restrict on. However, if you not doing that, can you post your Proxy info you added to your httpd configuration. You should not even need to have port 8080 running if you use it. Should look like... ProxyPass / ajp://localhost:8009/ ProxyPassReverse / ajp://localhost:8009/ Mark On Tue, Feb 16, 2010 at 11:35 AM, Jason Fowler <[email protected]> wrote: > Mark, > > Great fix! That worked perfectly for the redirection of port 80 to 8080. > However, it didn't fix the problem with IP based authentication. Here's a > little more information about our setup. We are trying to use EZProxy in > conjunction with IP based authentication to give access to our dissertations. > The behavior of a proxied request is basically the same as it was when we > omitted the port number before. We can see the item within DSpace, but we > can't download the file. > > Any ideas? > > Jason Fowler, CA, MSLS > Archives and Special Collections Librarian > The Southern Baptist Theological Seminary > Vice President, ALABI > 502-897-4573 > [email protected] > ________________________________________ > From: [email protected] [[email protected]] On Behalf Of Mark Diggory > [[email protected]] > Sent: Saturday, February 13, 2010 1:24 PM > To: Jason Fowler > Cc: [email protected] > Subject: Re: [Dspace-tech] Apache redirect and IP based authentication > > Jason, > > I would be using mod_proxy or more specifically mod_proxy_ajp for > communicating between Apache and Tomcat via the ajp port/protocol on > mod_rewrite/redirect. I suspect that your problem is that the client > IP of the request to tomcat is that of the local machine, AJP will > properly pass the header information. > > http://rimuhosting.com/mod_jk2_and_mod_proxy_ajp.jsp > > Mark > > On Sat, Feb 13, 2010 at 6:59 AM, Jason Fowler <[email protected]> wrote: >> I'm having a bit of a problem. We're running Dspace 1.5.2 on a Fedora >> machine. We are using Tomcat, but we also have an Apache redirect set up so >> that the port number doesn't show up for our site. Basically, it redirects >> traffic on port 80 to port 8080, but the port number doesn't show. For our >> dissertation collection, we use IP based authentication. The IP >> authentication works perfectly when one tries to download the file from >> inside the correct IP range using an address that has the port number. >> However, if you try to access it with the port number trimmed off, you can't >> download the file. >> >> Can anyone explain why this might be happening and what a fix might be? I'm >> at a loss. >> >> >> Jason Fowler, CA, MSLS >> Archives and Special Collections Librarian >> The Southern Baptist Theological Seminary >> Vice President, ALABI >> [email protected] >> ------------------------------------------------------------------------------ >> SOLARIS 10 is the OS for Data Centers - provides features such as DTrace, >> Predictive Self Healing and Award Winning ZFS. Get Solaris 10 NOW >> http://p.sf.net/sfu/solaris-dev2dev >> _______________________________________________ >> DSpace-tech mailing list >> [email protected] >> https://lists.sourceforge.net/lists/listinfo/dspace-tech >> > > > > -- > Mark R. Diggory > Head of U.S. Operations - @mire > > http://www.atmire.com - Institutional Repository Solutions > http://www.togather.eu - Before getting together, get t...@ther > -- Mark R. Diggory Head of U.S. Operations - @mire http://www.atmire.com - Institutional Repository Solutions http://www.togather.eu - Before getting together, get t...@ther ------------------------------------------------------------------------------ Download Intel® Parallel Studio Eval Try the new software tools for yourself. Speed compiling, find bugs proactively, and fine-tune applications for parallel performance. See why Intel Parallel Studio got high marks during beta. http://p.sf.net/sfu/intel-sw-dev _______________________________________________ DSpace-tech mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/dspace-tech
