hi,

i've just done a 1st migration from

        apache2+mod_ssl

to

        pound + varnish + apache2

using,

        pound -V
                Version 2.4.5
        varnishd -V
                varnishd (varnish-2.0.4)
        httpd2 -V
                Server version: Apache/2.2.13 (Linux/SUSE)

in my original apache/ssl config, i've httpd DIGEST Auth set up (atm)
on the web root.  it works as expected.

now that i've switched to the pound/varnish/apache2 setup, Auth still
works -- but makes the request twice!

if i visit

        https://www.mysite.com

i get an initial request for AUTH at my defined realm :443, then after
entering credentials there, the page paints -- and i get a second http
AUTH dialog for the _same_ realm, but at :8081.  switch back to a
direct connect, and just the one AUTH dialog ...

my relevant configs are below ...

any ideas as to what's causing the double-AUTH request, and how to fix
it would be much appreciated!

thanks!


/etc/pound.cfg
        ListenHTTP
                Address xx.xx.xx.xx
                Port    80
                Service
                        Redirect "https://www.mysite.com";
                End
        End
        ListenHTTPS
                Address xx.xx.xx.xx
                Port    443
                Cert    "/crypt/ssl/ssl.crt/combined.pem"
                Ciphers "AES256-SHA:AES128-SHA"
                NoHTTPS11 2
                Service
                        BackEnd
                                Address 127.0.0.1
                                Port    8080
                        End
                End
        End

/etc/sysconfig/varnish
        VARNISHD_PARAMS="-f /etc/varnish/vcl.conf -a 127.0.0.1:8080 -T
127.0.0.1:6082 -s file,/var/cache/varnish/varnish.bin,100M -n test"

/etc/varnish/vcl.conf
        # cp of /etc/varnish/default.vcl, except:
        backend default {
                .host = "xx.xx.xx.xx";
                .port = "8081";
        }

/etc/apache2/vhosts.d/www.mysite.com
        ...
        <VirtualHost xx.xx.xx.xx:8081>
                ...
                DocumentRoot /svr/www/mysite
                ...
                <Directory /svr/www/mysite>
                        Options +ExecCGI +FollowSymLinks +Indexes
                        DirectoryIndex index.html index.php
                        
                        AuthType           Digest
                        AuthName           "AUTH mysite"
                        AuthDigestProvider file
                        AuthUserFile       /crypt/wwwauth/.passwords.md5
                        AuthDigestDomain   /
                        require valid-user
                        AddHandler fcgid-script .php
                        FCGIWrapper "/usr/bin/php-cgi5 -d apc.shm_size=25 -c 
/etc/php5/fastcgi/" .php
                        ...
_______________________________________________
varnish-misc mailing list
[email protected]
http://projects.linpro.no/mailman/listinfo/varnish-misc

Reply via email to