Fisheye/Crucible 2.8.1 CAS authentication

[Paul Hirose]

The docs for https://confluence.atlassian.com/display/FISHEYE/AJPv13+Authentication it says "AJP authentication expects requests to be pre-authenticated via an external server before arriving at FishEye."

So if I'm fronting my Fisheye/Crucible with Apache httpd 2.2, and I use mod-auth-cas from JA-Sig, and I use the ajp connector to Fisheye/Crucible instead of http connector to Fisheye/Crucible, I can just have httpd do the authentication instead? Authorization is then controlled how?

Thank you,
PH

[Paul Hirose · Accepted solution]

I just did this anyway and it seems fine. I authenticate using mod_auth_cas. I set my User's "Auth" to "AJP". I'm guessing it matches REMOTE_USER or some such variable (I don't know) but as long as the username used to authenticate against CAS is the same as a username manually configured in Fisheye/Crucible, it seems to work.

PH