Discussion:
Secure referring URL and proxied domains - problem
Paul Stainthorp
2014-10-02 10:50:54 UTC
Permalink
Dear all,

An authentication problem:

We subscribe to a membership site with domain e.g. www.foo.org.uk

It doesn't offer IP authentication. We have a username and password.

We can't use the "FormVariable" directive to submit the login form, because the form contains a constantly-changing session variable.

Instead we can use Find/Replace to populate the login form and virtually click the submit button.

This logs the user in, and they see the logged-in portion of the site with proxied domain www.foo.org.uk.proxy.institution.ac.uk

HOWEVER. The full-text content of the site which is actually useful to the end user is actually held on a separate domain e.g. www.imaginarycontentserver.com

It *appears* that www.imaginarycontentserver.com will only accept referrals from www.foo.org.uk/loggedinpage

But our users are coming from the proxied domain www.foo.org.uk.proxy.institution.ac.uk/loggedinpage, which www.imaginarycontentserver.com rejects.

Does anyone know if it is possible to use EZproxy so that referrals to www.imaginarycontentserver.com come from www.foo.org.uk rather than www.foo.org.uk.proxy.institution.ac.uk ?

Many thanks,

Paul

P.S. for the record, the actual site is http://www.afpe.org.uk/, with the full text content held on http://edition.pagesuite-professional.co.uk/


Paul Stainthorp
Electronic Resources Librarian

Great Central Warehouse University Library
University of Lincoln
Brayford Pool
LINCOLN
LN6 7TS
United Kingdom

tel:+441522886193
mailto:***@lincoln.ac.uk
http://library.lincoln.ac.uk/


The University of Lincoln, located in the heart of the city of Lincoln, has established an international reputation based on high student satisfaction, excellent graduate employment and world-class research.

The information in this e-mail and any attachments may be confidential. If you have received this email in error please notify the sender immediately and remove it from your system. Do not disclose the contents to another person or take copies.

Email is not secure and may contain viruses. The University of Lincoln makes every effort to ensure email is sent without viruses, but cannot guarantee this and recommends recipients take appropriate precautions.

The University may monitor email traffic data and content in accordance with its policies and English law. Further information can be found at: http://www.lincoln.ac.uk/legal.

---
You are currently subscribed to ezproxy as: gee-***@m.gmane.org.
To unsubscribe, send request to ***@itec.suny.edu

Loading...