Project

General

Profile

Feature #27038

configure Pulp 3 to use the correct header for REMOTE_USER

Added by Dennis Kliban 4 months ago. Updated 4 months ago.

Status:
New
Priority:
Normal
Assignee:
-
Category:
-
Target version:
-
Difficulty:
Triaged:
No
Bugzilla link:
Pull request:
Fixed in Releases:
Found in Releases:

Description

Use the docs here to configure Pulp3 to use Auth provided by apache https://docs.pulpproject.org/en/3.0/nightly/installation/authentication.html#webserver-auth

In the case of apache forwarding requests to the pulp wsgi if you're using mod_wsgi Pulp's defaults should work with REMOTE_USER in the WSGI environment. If you're using a reverse proxy, you'll need to configure Pulp to trust the header submitted from apache. For that, see the reverse proxy docs https://docs.pulpproject.org/en/3.0/nightly/installation/authentication.html#webserver-auth-with-reverse-proxy


Related issues

Blocks Katello - Tracker #26987: Pulp3 Main trackerNew

History

#1 Updated by David Davis 4 months ago

#2 Updated by Brian Bouterse 4 months ago

  • Description updated (diff)

adding some details on how katello can use Pulp's auth

#3 Updated by Brian Bouterse 4 months ago

The pulp installer now supports a setting that you can use to set this variable: https://github.com/pulp/ansible-pulp/pull/121#issuecomment-502782283

See pulp_remote_user_environ_name at https://github.com/pulp/ansible-pulp/tree/master/roles/pulp#role-variables

Also available in: Atom PDF