I'd like to have a link on my website undergo apache's authorization
process, but forward to another machine in the subnet along with a different
username and password that other machine is expecting.  I don't want the
actual URL to be visible by anyone other than the people who pass apache's
authorization.

For example, my apache server forwards port 8080 requests to another web
server on a machine behind it.  That other web server is expecting a certain
username and password *that's the same for everyone* -- I'll call it reguser
and regpasswd.  So I could put a simple link on the main page that points
to:

reguser:regpasswd@www.myserver.com:8080

But then everyone visiting the main page can see the reguser and regpasswd.
I don't want that (but it's fine for apache-verified users to see it).

I'm not really sure how I can use apache to do this.  Maybe a cgi script is
in order?  Set up a page just to redirect?  Or is there a better way?

[ Post a follow-up to this message ]

On Jul 19, 10:55 pm, "MZ" <nos...@nospam.com> wrote:
> I'd like to have a link on my website undergo apache's authorization
> process, but forward to another machine in the subnet along with a differe
nt
> username and password that other machine is expecting.  I don't want the
> actual URL to be visible by anyone other than the people who pass apache's
> authorization.
>
> For example, my apache server forwards port 8080 requests to another web
> server on a machine behind it.  That other web server is expecting a certa
in
> username and password *that's the same for everyone* -- I'll call it regus
er
> and regpasswd.  So I could put a simple link on the main page that points
> to:
>
> reguser:regpas...@www.myserver.com:8080
>
> But then everyone visiting the main page can see the reguser and regpasswd
.
> I don't want that (but it's fine for apache-verified users to see it).
>
> I'm not really sure how I can use apache to do this.  Maybe a cgi script i
s
> in order?  Set up a page just to redirect?  Or is there a better way?

You have to use proxy to do that.

[ Post a follow-up to this message ]