Redirecting NTLM Credentials from IIS with ARR and URL Rewrite

Thanks in advance for your help.

In my environment, I configured IIS as a reverse proxy and redirects requests to specific paths to the application server on another host. To do this, I used request query routing modules (ARR) and URL Rewrite, I create my own rule and everything works fine.

IIS is responsible for authenticating clients using NTLM, so my question is: is it possible to transfer authentication data (at least the username) to the application server after user authentication?

I tried to do this by adding a custom header to my queries by writing a rule like this:

<rule name="ForwardToApplicationServer">
<match url=".*" />
<serverVariables>
<set name="HTTP_AUTH_USER" value="{AUTH_USER}" />
</serverVariables>
<action type="Rewrite" url="http://myappserver/myapp/{R:0}" logRewrittenUrl="true" />
</rule>

: , alwasy empty. , .

, ? ? - ?

: , ?

, , , , , - , IIS, , .

+4
1

http://weblogs.asp.net/owscott/an-intro-to-iis-url-rewrite-plus-redirecting-urls-to-www-web-pro-week-8-of-52

{REMOTE_USER}, {LOGON_USER} & {AUTH_USER} do not work with URL-REWRITE, ... 

www.isapirewrite.com, auth.

+1

Source: https://habr.com/ru/post/1543173/


All Articles