From e57d6f41c9be9d59eb37801dcb663943837e5190 Mon Sep 17 00:00:00 2001
From: Simon Rettberg
Date: Tue, 22 Oct 2024 11:57:56 +0200
Subject: [shib_secondary] Redirect http-thrift

---
 shib_secondary/remote/110-bwlp-active.conf      | 5 +++++
 shib_secondary/remote/110-bwlp-passthrough.conf | 2 +-
 2 files changed, 6 insertions(+), 1 deletion(-)

diff --git a/shib_secondary/remote/110-bwlp-active.conf b/shib_secondary/remote/110-bwlp-active.conf
index 590fc4f..299d5d6 100644
--- a/shib_secondary/remote/110-bwlp-active.conf
+++ b/shib_secondary/remote/110-bwlp-active.conf
@@ -35,6 +35,11 @@
 		require valid-user
 	</Location>
 
+	<Location /thrift>
+		ProxyPass "http://127.0.0.1:8090/" connectiontimeout=5 timeout=30 max=5
+		ProxyPassReverse "http://127.0.0.1:8090/"
+	</Location>
+
 	# optional (Metadata-Access at entityID-URL)
 	Redirect seeother /shibboleth /Shibboleth.sso/Metadata
 	RedirectMatch /start-session$ /Shibboleth.sso/Login
diff --git a/shib_secondary/remote/110-bwlp-passthrough.conf b/shib_secondary/remote/110-bwlp-passthrough.conf
index 2a6cdba..ebb0367 100644
--- a/shib_secondary/remote/110-bwlp-passthrough.conf
+++ b/shib_secondary/remote/110-bwlp-passthrough.conf
@@ -30,7 +30,7 @@
 	Alias /shibboleth-sp/logo.jpg /usr/share/shibboleth/logo.jpg
 
 	SSLProxyEngine on
-	<LocationMatch ^/(webif/|netboot/|minilinux/|rpc/|Shibboleth\.sso/|error_report.php)(.*)$>
+	<LocationMatch ^/(webif/|netboot/|minilinux/|rpc/|Shibboleth\.sso/|thrift/|error_report.php)(.*)$>
 		ProxyPassMatch "https://%DOMAIN%/$1$2" connectiontimeout=5 timeout=30 max=10
 	</LocationMatch>
 
-- 
cgit v1.2.3-55-g7522