I've just installed Sonar on my system. Sonar is made available through Apache via a Reverse Proxy:
ProxyPass /sonar http://internal.server.org:9000/sonar ProxyPassReverse /sonar http://internal.server.org:9000/sonar
This site is protected with mod_ldap:
<Location /sonar> Order deny,allow Deny from all Satisfy any AuthName "System Design Sonar" AuthType Basic AuthBasicProvider ldap AuthLDAPURL "ldap://ldap.server.org/ou=People,dc=server,dc=org?uid" AuthLDAPBindDN "uid=apache,ou=System,dc=server,dc=org" AuthLDAPBindPassword "SECRET" AuthzLDAPAuthoritative on require ldap-group cn=sonar,ou=Groups,dc=server,dc=org </Location>
Sonar is also setup with LDAP authentication for login. What happens is: When I enter mye credentials into the login dialog Apache create, I am automatically logged into Sonar. Even better, I can not log out of Sonar either. Why do this happen? And, how do I prevent this?