Authentication and reverse proxy

[mlagneaux]

Hello,

I'm currently using Alfresco 3.3g on Tomcat 6. This Alfresco server uses SSO authentication via Kerberos.

Now I'd like to put this Alfresco server behind a reverse proxy but I'd like to confirm that this is not going to be a problem for authentication. I think that SSO uses HTTP header to pass the authenticated user login. But, through a reverse proxy, I will lose this HTTP header.
So, will putting my Alfresco server behind a reverse proxy cause problem to the SSO authentication via Kerberos?
Would it have an impact on another Alfresco authentication system (alfrescoNtlm, passthru, ldap, ldap-ad or external)?

For now, I am only using Alfresco Explorer. But what would happen with Share?

Thank you in advance for your answers.

[afaust]

Hello,

SSO behind a reverse proxy is no problem at all (correct configuration assumed). Reverse proxies usually do not remove any HTTP headers unless configured to do so. All Alfresco authentication systems are possible without limitation in such a scenario - for both the Explorer and Share.

Regards
Axel

[mlagneaux]

Thanks for this answer.