Re: [galaxy-dev] Galaxy and HTTPS User-authentification

2014-08-22 Thread Nate Coraor
On Aug 20, 2014, at 3:53 AM, Matthias Enders m.end...@german-seed-alliance.de 
wrote:

 Hi,
  
 I have a question regarding the user authentication of Galaxy.
  
 As to my knowledge galaxy uses http, also for the authentication, so the User 
 Email and the password are send in clear text.
  
 As I like to use Galaxy for user-authentication and due several disadvantages 
 not an external authentification like described here 
 (https://wiki.galaxyproject.org/Admin/Config/ExternalUserDatbases):
 Is there any way of using https or an encryption-method for sending user 
 email and password.

Hi Matthias,

You can still serve Galaxy over HTTPS by placing it behind a proxy, even if you 
do not intend to perform authentication in the proxy. You'll just need to set 
X-URL-SCHEME in the proxy, as documented:

For nginx: https://wiki.galaxyproject.org/Admin/Config/nginxProxy
For Apache: https://wiki.galaxyproject.org/Admin/Config/ApacheProxy

--nate

  
 With kind regards,
 Matthias Enders
  
 ___
 Please keep all replies on the list by using reply all
 in your mail client.  To manage your subscriptions to this
 and other Galaxy lists, please use the interface at:
  http://lists.bx.psu.edu/
 
 To search Galaxy mailing lists use the unified search at:
  http://galaxyproject.org/search/mailinglists/

___
Please keep all replies on the list by using reply all
in your mail client.  To manage your subscriptions to this
and other Galaxy lists, please use the interface at:
  http://lists.bx.psu.edu/

To search Galaxy mailing lists use the unified search at:
  http://galaxyproject.org/search/mailinglists/

[galaxy-dev] Galaxy and HTTPS User-authentification

2014-08-20 Thread Matthias Enders
Hi,

I have a question regarding the user authentication of Galaxy.

As to my knowledge galaxy uses http, also for the authentication, so the User 
Email and the password are send in clear text.

As I like to use Galaxy for user-authentication and due several disadvantages 
not an external authentification like described here 
(https://wiki.galaxyproject.org/Admin/Config/ExternalUserDatbases):
Is there any way of using https or an encryption-method for sending user email 
and password.

With kind regards,
Matthias Enders

___
Please keep all replies on the list by using reply all
in your mail client.  To manage your subscriptions to this
and other Galaxy lists, please use the interface at:
  http://lists.bx.psu.edu/

To search Galaxy mailing lists use the unified search at:
  http://galaxyproject.org/search/mailinglists/