Topic: Apache through proxy (error 407)

[petro2033]

I have proxy access on machine, so i can connect to internet only with pass and log. Also i have apache 2.2 when he try connect, he return error code 407. Where can i put ip adress, pass and log authorization proxy on apache?

[James Blond]

How does the apache server connect to the internet over the proxy? An application? The server itself?

[petro2033]

Proxy(not apache) server located on another machine. I haven't access on it. There is another machine with apache. It's local server. It connect to the inet for update one programm. On this machine i can connect to the inet with log and pass. So, how make apache connect to the inet through or with log and pass.
P.S. OS WinXP

[James Blond]

[petro2033]

I download and install Win32 Binary including OpenSSL 0.9.8t (MSI Installer): httpd-2.2.22-win32-x86-openssl-0.9.8t.msi - apache server. Edit httpd.conf,httpd-vhosts.conf. So, create local server on 127.0.0.1. Then i download 2GIS_update. It adds folders update and creates one file Apache\conf\2gis_update.conf, adds line in httpd.conf which adds 2gis_update.conf. When i start the server it should download update.

2gis_update.conf:

LoadModule cache_module modules/mod_cache.so
LoadModule disk_cache_module modules/mod_disk_cache.so
LoadModule mem_cache_module modules/mod_mem_cache.so
LoadModule proxy_module modules/mod_proxy.so
LoadModule proxy_balancer_module modules/mod_proxy_balancer.so
LoadModule proxy_http_module modules/mod_proxy_http.so
LoadModule rewrite_module modules/mod_rewrite.so
LoadModule ssl_module modules/mod_ssl.so

RewriteEngine On
RewriteCond %{REQUEST_METHOD} !=POST
RewriteRule ^/ver3/stat$ MethodNotAllowed [R=405,L]

<Location /ver3/stat>
LimitRequestBody 2147483647
ProxyPass balancer://http_backend_2gis/ver3/stat
</Location>


<Directory "2gis-update.htdocs">
ForceType text/plain
Options Indexes FollowSymLinks
AllowOverride None
Order allow,deny
Allow from all
</Directory>

Alias /ver3/ping 2gis-update.htdocs/ping

##ProxyServer##

<Proxy balancer://http_backend_2gis>
BalancerMember http://s1.update.2gis.ru:80
... etc
BalancerMember http://s10.update.2gis.ru:80
</Proxy>

SSLProxyEngine On
<Proxy balancer://https_backend_2gis>
BalancerMember https://s1.update.2gis.ru:443
... etc
BalancerMember https://s10.update.2gis.ru:443
</Proxy>

RewriteCond %{REQUEST_METHOD} !^(GET|HEAD)$
RewriteRule ^/ver3/download MethodNotAllowed [R=405,L]

<Location /ver3>
DefaultType application/octet-stream
ProxyPass balancer://https_backend_2gis/ver3
</Location>


CacheEnable mem /ver3/infolist
CacheEnable mem /ver3/ping
CacheEnable disk /ver3/download
CacheEnable mem /ver3//infolist
CacheEnable mem /ver3//ping
CacheEnable disk /ver3//download

##CacheRoot##
CacheDirLevels 2
CacheDirLength 2
CacheDefaultExpire 1728000
CacheMaxFileSize 268435456



access.log:

10.200.5.206 - - [12/Jul/2012:10:26:35 +1100] "GET /2gis/updsrv/serverinfo HTTP/1.1" 404 325
10.200.5.206 - - [12/Jul/2012:10:26:35 +1100] "GET /2gis/updsrv/ping HTTP/1.1" 301 348
10.200.5.206 - - [12/Jul/2012:10:26:36 +1100] "GET /2gis/updsrv/ping HTTP/1.1" 301 348
10.200.5.206 - - [12/Jul/2012:10:26:36 +1100] "GET /2gis/updsrv/serverinfo HTTP/1.1" 404 325
10.200.5.206 - - [12/Jul/2012:10:26:36 +1100] "GET /2gis/updsrv/serverinfo HTTP/1.1" 404 325
10.200.5.206 - - [12/Jul/2012:10:26:36 +1100] "GET /2gis/updsrv/ping HTTP/1.1" 301 348
127.0.0.1 - - [12/Jul/2012:10:27:35 +1100] "GET / HTTP/1.1" 200 1187
127.0.0.1 - - [12/Jul/2012:10:27:35 +1100] "GET /icons/folder.gif HTTP/1.1" 200 225
127.0.0.1 - - [12/Jul/2012:10:27:35 +1100] "GET /icons/blank.gif HTTP/1.1" 200 148
127.0.0.1 - - [12/Jul/2012:10:27:43 +1100] "GET /2gis/ HTTP/1.1" 200 949
127.0.0.1 - - [12/Jul/2012:10:27:43 +1100] "GET /icons/back.gif HTTP/1.1" 200 216
127.0.0.1 - - [12/Jul/2012:10:27:44 +1100] "GET / HTTP/1.1" 200 1187


error.log:

[Thu Jul 12 10:26:33 2012] [error] (70008)Partial results are valid but processing is incomplete: proxy: HTTPS: attempt to connect to s2.update.2gis.ru:443 via http CONNECT through 192.168.132.118:3128 (s2.update.2gis.ru) failed
[Thu Jul 12 10:26:33 2012] [error] ap_proxy_connect_backend disabling worker for (s2.update.2gis.ru)
[Thu Jul 12 10:26:33 2012] [error] send_http_connect: the forward proxy returned code is '407'
[Thu Jul 12 10:26:33 2012] [error] (70008)Partial results are valid but processing is incomplete: proxy: HTTPS: attempt to connect to s1.update.2gis.ru:443 via http CONNECT through 192.168.132.118:3128 (s1.update.2gis.ru) failed

[James Blond]

Do I see this correctly

internet<--->non_apache_proxy<--->apache<--->backend_server

and the backend server wants to connect to the internet?

[petro2033]

no!
Internet<--->ProxyServ(protected,non_apache)<--->ApacheServerLocalServer(log pass for inet)<--->users(2GIS_client)

Users has not access to the inet. so they programm 2GIS(client) for update connect to apache server(local server, apache). Local server(with apache) for update 2gis connect to the inet through proxy serv(non apache) and should do it with log and pass.

When i install apache server i install 2gis server, is just .conf file for apache.

[James Blond]

I don't have a full solution yet, but you should look at
proxy-chain-auth in http://httpd.apache.org/docs/2.2/mod/mod_proxy_http.html but then the client (2GIS_client) has to send user (log) and password (pass). Apache can't do it itself as far as I know.

and maybe also

http://httpd.apache.org/docs/2.2/mod/mod_proxy.html#proxyvia and http://httpd.apache.org/docs/2.2/mod/mod_proxy.html#proxyremote

[petro2033]

IMHO it's not exactly what i need. There's one idea, send a request to open the access for local server on defined page(link update 2gis and port, that apache has open access on it)

[James Blond]

Apache won't send user and password. That has to be done by the client, but apache can forward that to the proxy which is in front of it.

[petro2033]

I don't understand what you mean. Users do not matter. They must download update from apache and mustn't know or receive log and pass. It's system of bank and i can't change something.

[James Blond]

Apache can not connect itself with log and pass.

If I were you, I would write a php script that runs on the apache webserver, connects through the proxy and downloads the file and delivers it to the client.

[petro2033]

hmmm, okay thanks! I should set only downloading update from inet, because local update is working. You give me new way