On Thu, May 29, 2008 at 2:03 PM, Joe Leo <[EMAIL PROTECTED]> wrote:

> The www.mainsite.com has my drupal users where they can sign-up and
> authenticate. What I want is: If users enter url server1.mainsite.com then
> the proxy would somehow prompt users to first login. But, I'm not sure how
> this can be done/achieved. I would appreciate any comments/suggestions to
> accomplish this.
>

It sounds tough, because the browser isn't going to send the
www.mainsite.com cookie to server1.mainsite.com.

But wait, you said www was acting as a reverse proxy, so why would
someone go directly to server1?

If all the connections go through www, you can use mod_rewrite to
check for existence of drupal's session cookie, and redirect to login
if not found.

If someone knew the setup, they could fake the drupal cookie, so if
you're trying to protect something valuable using this scheme you may
need to consider a different mechanism, such as an auto-prepend script
that checks if the session is valid.


-- 
Chris Snyder
http://chxo.com/
_______________________________________________
New York PHP Community Talk Mailing List
http://lists.nyphp.org/mailman/listinfo/talk

NYPHPCon 2006 Presentations Online
http://www.nyphpcon.com

Show Your Participation in New York PHP
http://www.nyphp.org/show_participation.php

Reply via email to