I'm having an issue getting MS ISA 2006 and Tomcat 6.0 to play together. The application running on Tomcat is Atlassian's Crowd.
Until a couple of weeks ago things have been working just fine. We have been able to use the application as expected.
However - when I tried to configure crowd for SSO shit hit the fan.
Basically I believe the issue is pretty easy:
- ISA redirect all traffic to Crowd. Client address is then == ISA server IP address
- SSO cookie is created with ISA server IP address
- Later client cookie is created with client IP address
- SSO fails as the two cookies are unequal
I have turned on the "Requests appear to come from the original client on the ISA server". But when this happens the showing of the page itself on the Crowd server disappears. I am however able to log in directly on the Crowd server (remote desktop).
Question is - what do I have to configure Crowd with in order to get it to work with this setup? I've read about reveres proxy, etc., but most are explaining scenarios where a Tomcat server is in front, and I actually have the Tomcat server in the back.
Anyone?
