Very Computer

I am admittedly new to Apache, mod_proxy and mod_ssl and have the
following problem while attempting to configure username/password
access for a proxied URL for both HTTP and HTTPS.

Simplisticly put, I can cause an HTTP URL to invoke the
username/password authentication mechanism via my proxy server as
expected. If, however, I were to access the exact same URL but use
HTTPS instead, the page is accessed without asking for a
username/password. In my scenario, I access port 7177 for HTTP and
7178 for HTTPS/SSL.

I would appreciate if anyone can explain what I'm doing wrong or what
documentation explains the interactions of authentication with SSL
based URL's. I don't mind RTFM. The docs I've seen so far haven't
clarified this enough to get me around the problem.

My specific configuration is shown below.

Thanks,

   -- Joel

=====================================================================
#
# Port: The port to which the standalone server listens. For
# ports < 1023, you will need httpd to be run as root initially.
#
Port 80
Listen 80
Listen 8080
Listen 443
Listen 8443
=====================================================================
#
# Proxy Server directives
#
<IfModule mod_proxy.c>
    ProxyRequests On
    AllowCONNECT 443 7178
    <Directory proxy:*>
        Order deny,allow
        Deny from all
        Allow from .optionable.com 10.2.5
    </Directory>
</IfModule>
# End of proxy directives.
=====================================================================
##  SSL Support
##
##  Listen on standard HTTP port and HTTPS port
##
<IfDefine SSL>
Listen 10.2.5.21:443
Listen 10.2.5.21:8443
</IfDefine>
Other lines intentially left out for brevity. Nothing else was changed
however from the standard config.
=====================================================================
#
# This section of VirtualHost and Location code works well as expected
#
<VirtualHost 10.2.5.21:8080>
    ServerName http-proxy.optionable.com
    ErrorLog logs/http-proxy-error_log
    CustomLog logs/http-proxy-access_log common

    <Location http://webdev01.optionable.com:7177/index.html>
        AuthName "webdev01.optionable.com:7177"
        AuthType Basic
        AuthUserFile /usr/local/apache/auth/password.file
        AuthGroupFile /usr/local/apache/auth/group.file
        require group development
        AuthAuthoritative on
        Order deny,allow
        Deny from all
        Order deny,allow
        Allow from .optionable.com 10.2.5
    </Location>

</VirtualHost>

#
# This section of VirtualHost and Location code does not work as
expected
#
<VirtualHost 10.2.5.21:8443>
    ServerName ssl-proxy.optionable.com
    ErrorLog logs/http-proxy-error_log
    CustomLog logs/http-proxy-access_log common

    <Location https://webdev01.optionable.com:7178/index.html>
        AuthName "webdev01.optionable.com:7178"
        AuthType Basic
        AuthUserFile /usr/local/apache/auth/password.file
        AuthGroupFile /usr/local/apache/auth/group.file
        require group development
        AuthAuthoritative on
        Order deny,allow
        Deny from all
        Order deny,allow
        Allow from .optionable.com 10.2.5
    </Location>

</VirtualHost>
=====================================================================
My log file http-proxy-access_log shows the following line upon access
to http/7177
dell4100.optionable.com - - [01/Jun/2001:10:39:26 -0400] "GET
http://webdev01.optionable.com:7177/index.html HTTP/1.0" 407 495
dell4100.optionable.com - jshandel [01/Jun/2001:10:39:37 -0400] "GET
http://webdev01.optionable.com:7177/index.html HTTP/1.0" 304 0
dell4100.optionable.com - - [01/Jun/2001:10:39:37 -0400] "GET
http://webdev01.optionable.com:7177/servletimages/transparent.gif
HTTP/1.0" 200 43
dell4100.optionable.com - - [01/Jun/2001:10:39:37 -0400] "GET
http://webdev01.optionable.com:7177/servletimages/edocs_button.gif
HTTP/1.0" 200 2324
dell4100.optionable.com - - [01/Jun/2001:10:39:37 -0400] "GET
http://webdev01.optionable.com:7177/servletimages/pagetopgold.gif
HTTP/1.0" 200 16828
=====================================================================
My log file http-proxy-access_log shows the following line upon access
to https/7178:

dell4100.optionable.com - - [01/Jun/2001:10:43:34 -0400] "CONNECT
webdev01.optionable.com:7178 HTTP/1.0" 200 -
dell4100.optionable.com - - [01/Jun/2001:10:43:36 -0400] "CONNECT
webdev01.optionable.com:7178 HTTP/1.0" 200 -
dell4100.optionable.com - - [01/Jun/2001:10:43:36 -0400] "CONNECT
webdev01.optionable.com:7178 HTTP/1.0" 200 -
dell4100.optionable.com - - [01/Jun/2001:10:43:36 -0400] "CONNECT
webdev01.optionable.com:7178 HTTP/1.0" 200 -