[OOD-users] Apple Safari Basic Auth Warning

[Ruffner, James Prescott (Scott) (jpr9c)]

Hi All - 

I'm digging around a bit, and I can't find the bit to flip; our OOD portal is set up with Shibboleth authentication, but I'm still getting the warning from the Desktop App about:

As currently configured, the Cluster and Interactive Apps of Open OnDemand do not work with Safari. This is due to a bug in Safari with using websockets through servers protected using "Basic" auth....<snip>

The relevant parts of ood-portal.conf has:

SetEnv OOD_PUN_URI "/pun"
  <Location "/pun">
    AuthType shibboleth
    ShibRequestSetting requireSession 1
    RequestHeader edit* Cookie "(^_shibsession_[^;]*(;\s*)?|;\s*_shibsession_[^;]*)" ""
    RequestHeader unset Cookie "expr=-z %{req:Cookie}"
    Require valid-user

    ProxyPassReverse "http://localhost/pun"

    # ProxyPassReverseCookieDomain implementation (strip domain)
    Header edit* Set-Cookie ";\s*(?i)Domain[^;]*" ""

    # ProxyPassReverseCookiePath implementation (less restrictive)
    Header edit* Set-Cookie ";\s*(?i)Path\s*=(?-i)(?!\s*/pun)[^;]*" "; Path=/pun"

    SetEnv OOD_PUN_SOCKET_ROOT "/var/run/nginx"
    SetEnv OOD_PUN_MAX_RETRIES "5"
    LuaHookFixups pun_proxy.lua pun_proxy_handler

  </Location>

  # Control backend PUN for authenticated user:
  # NB: See mod_ood_proxy for more details.
  #
  #    https://rivanna-portal.hpc.virginia.edu:443/nginx/stop
  #    #=> stops the authenticated user's PUN
  #
  SetEnv OOD_NGINX_URI "/nginx"
  <Location "/nginx">
    AuthType shibboleth
    ShibRequestSetting requireSession 1
    RequestHeader edit* Cookie "(^_shibsession_[^;]*(;\s*)?|;\s*_shibsession_[^;]*)" ""
    RequestHeader unset Cookie "expr=-z %{req:Cookie}"
    Require valid-user

    LuaHookFixups nginx.lua nginx_handler
  </Location>

I'd love any tip, but I'm pretty sure something is erroneous about the error message.

Do I need to get shibboleth working for the PUNs themselves as well?

Thanks!

Scott

-- 
Scott Ruffner
Senior HPC Engineer
UVa Research Computing Infrastructure
(434)924-6778(o)
sruffner at virginia.edu