Differences

This shows you the differences between two versions of the page.

--- nocode:overview [2019/08/01 09:49]
tjotov [Other topics]
+++ nocode:overview [2020/02/29 11:05]
mpospisek [Security remarks]
@@ Line 20: / Line 20: @@
 	RequestHeader set X-Forwarded-User %{RU}e
 ===== Security remarks =====
-Apache has to be accessible only via TLS (https)
+  * Apache has to be accessible only via TLS (https).
-Back-end application has to be separated and accessible only from Apache (http, ajp, ...)
+  * Back-end application has to be separated and accessible only from Apache (http, ajp, ...)
-Apache installed for ADUCID shouldn't be used for applications. User another instance of Apache instead.
+  * Apache installed for ADUCID shouldn't be used for applications. User another instance of Apache instead.
-Headers from client are not transported to the back-end as ProxyPass is used (unless you configure Apache to do it)
+  * Headers from client are not transported to the back-end as ProxyPass is used (unless you configure Apache to do it)
-So if users sents REMOTE_USER to Apache, it is wiped out and target application won't see it
+  * So if users sents REMOTE_USER to Apache, it is wiped out and target application won't see it
 ===== Technical overview =====

ADUCID 4.x