Re: [Proftpd-user] ProxyPassReverseServers option combined with IfClass directive

> I just tested this patch on 1.3.8c and it worked perfectly. Thanks a 
> lot, it is really great!

Excellent.  I've merged that PR now for mod_proxy.

> I would have an additional question: While doing some tests, I also 
> tried to use IfUser combined with "IfSessionOptions 
> PerUnauthenticatedUser" on 1.3.9rc3 but it seems that IfSessionOptions 
> does not have any effect. Is it working only with SFTP?

I think it might be tricky, because of what authentication means when going through a reverse proxy.  Normally, the actual authenticating of frontend client's credentials are done by the selected backend server, not by the proxy itself.  This, in turn, means that the proxy doesn't really have a notion of the user, authenticated or not.

mod_proxy does have a UseReverseProxyAuth ProxyOption, but I'm not sure that that is what you want, either -- as it means that any/all user credentials would need to be the same on the proxy host as on all of the backend hosts.

> Ideally, if possible, I would have liked to take advantage of the 
> "IfSessionOptions PerUnauthenticatedUser" functionality to do something 
> like that:

Can you explain more of the desired use case/functionality leading to such a configuration?

Cheers,
TJ


_______________________________________________
ProFTPD Users List   <[email protected]>
Unsubscribe problems?
http://www.proftpd.org/list-unsub.html