search

kvspb / nginx-auth-ldap

LDAP authentication module for nginx
BSD 2-Clause "Simplified" License
735 stars 252 forks source link

Issues with AWS Authorization header #218

Open gmaxwell94 opened 5 years ago

gmaxwell94 commented 5 years ago

AM trying to up put a ldap front end to AWS Kibana, Have the proxy working, have the ldap working but when used together, get warning.

{"message":" Authorization header requires 'Credential' parameter. Authorization header requires 'Signature' parameter. Authorization header requires 'SignedHeaders' parameter. Authorization header requires existence of either a 'X-Amz-Date' or a 'Date' header. Authorization=Basic Z21heHdlbGxAbW9iaWxlaXJvbi5jb206cGFzc3dvcmQ="}

The fix for amazon in Nginx is to set proxy_set_header Authorization "";

which of course breaks the ldap auth.

Is there some way to change the name of the Authorization head as it gets sent to Amazon in either the ldap header WWW-Authenticate- line 1779 r->headers_out.www_authenticate->key.data = (u_char *) "WWW-Authenticate"; or in Nginx config. Thanks in advance for the help. Really surprised that this set up does not already exists.

Harrtron commented 4 years ago

Did you ever manage to resolve this, @gmaxwell94 ? Having the same issue.