Bug 1637891

Summary:	RHSCL httpd : mod_proxy should allow to specify Proxy-Authorization in ProxyRemote directive
Product:	Red Hat Software Collections	Reporter:	Dasharath Masirkar <dmasirka>
Component:	httpd	Assignee:	Luboš Uhliarik <luhliari>
Status:	CLOSED ERRATA	QA Contact:	Branislav Náter <bnater>
Severity:	high	Docs Contact:	Lenka Špačková <lkuprova>
Priority:	urgent
Version:	httpd24	CC:	bnater, cww, jamills, jorton, luhliari, optak
Target Milestone:	---
Target Release:	3.6
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	Release Note
Doc Text:	The `ProxyRemote` configuration directive has been enhanced to optionally take username and password credentials, which are used to authenticate to the remote proxy using HTTP `Basic` authentication. This feature has been backported from httpd 2.5. For details, see the upstream documentation at http://httpd.apache.org/docs/trunk/mod/mod_proxy.html#proxyremote.	Story Points:	---
Clone Of:		Environment:
Last Closed:	2020-12-01 12:06:59 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Dasharath Masirkar 2018-10-10 09:40:54 UTC

Description of problem:
The customer is impacted by ASF BZ https://bz.apache.org/bugzilla/show_bug.cgi?id=37355 and looking for backport in RHSCL httpd. 

Version-Release number of selected component (if applicable):
httpd24-httpd-2.4.27-8

How reproducible:
Always

Steps to Reproduce:
Please refer ASF BZ https://bz.apache.org/bugzilla/show_bug.cgi?id=37355

Additional info:
Please refer ASF BZ https://bz.apache.org/bugzilla/show_bug.cgi?id=37355

Comment 8 Joe Orton 2020-09-02 08:25:49 UTC

The way the feature was implemented in the patch attached to the the upstream bug report unnecessarily changed (i.e. broke backwards compatibility) the mod_proxy API.  I have re-implemented the feature a different way, patch in the following github Pull Request:

https://github.com/apache/httpd/pull/135

This has passed upstream testing so I will merge it shortly.

Comment 19 errata-xmlrpc 2020-12-01 12:06:59 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (httpd24 bug fix and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2020:5280