Configuration of VMWare distributed Apache Forward Proxy fails

Products

• VMware Tanzu Spring Runtime

Issue/Introduction

Procedure is mentioned in the below links.

https://httpd.apache.org/docs/2.4/mod/mod_proxy_http.html#env

https://httpd.apache.org/docs/2.4/mod/mod_proxy.html#proxyremote

You might have tried on the following approach under <VirutalHost *:80>:

1. RequestHeader set Proxy Authorization "Basic xxxxxxxxx"
2. SetEnv Proxy-Chain-Auth
3. ProxyRemote "*" URL:port username:password

If you are using McaFee Firewall Proxy as the forward proxy, they only have 3 types of authentication method (LDAP, NTLM and Kerberos).


The HTTP Response code 407 and lack of any error in the error_log, indicates that the credentials are not being accepted by the other endpoint

Environment

Apache httpd

Cause

If you are using McaFee Firewall Proxy as the forward proxy, this only have 3 types of authentication method (LDAP, NTLM and Kerberos).

Endpoint should support BASIC auth not (NTLM and Kerberos).

McaFee Firewall Proxy will not support basic AUTH and only support ( NTLM and Kerberos)

Resolution

Endpoint should support BASIC auth

Additional Information

To confirm provided credentials are correct run the below command

curl -x http://<username:password>@<proxy>:<port> https://xxxxxx.com