We have a Rails application that runs under the Glassfish gem, running
behind a Sun Java System Web Server acting as a reverse proxy. The thinking
was that we could use the front-end web server to handle authentication
against our LDAP, and then pass only authorized requests through to Rails.
Unfortunately, it's looking like we can't use the web server for this
purpose; from what we've seen there seems to be no way to password-protect
URLs that are reverse proxied through the Sun web server.
We're looking at various other alternatives, such as moving from the
Glassfish gem to a full Glassfish installation and running the Rails app as
a war file. However, we'd first like to make sure there's no way to get the
Glassfish gem to handle authentication/authorization using LDAP. Is there
anything we can do here?
--
Paul Blair
pblair_at_cyrusinnovation.com