# Graylog nginx subdirectory SSO

**URL:** <https://community.graylog.org/t/graylog-nginx-subdirectory-sso/8661>\
**Category:** Graylog Central (peer support)\
**Created:** [February 1, 2019, 4:25pm UTC](https://community.graylog.org/t/graylog-nginx-subdirectory-sso/8661 "2019-02-01T16:25:48Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![kfdl](https://avatars.discourse-cdn.com/v4/letter/k/2bfe46/32.png) [@kfdl](https://community.graylog.org/u/kfdl)\
**Post date:** [February 1, 2019, 4:25pm UTC](https://community.graylog.org/t/graylog-nginx-subdirectory-sso/8661/1 "2019-02-01T16:25:48Z")

</div>

hello  
I have a problem when i try to have a SSO between nginx 1.10.3 and graylog 2.5.0  
this is my configuration for nginx: /etc/nginx/sites-available/reverseProxy

```auto
location / {
auth_basic “Restricted Access”;
auth_basic_user_file “/etc/nginx/.htpasswd”;
root /var/www/html;
# Add index.php to the list if you are using PHP
index index.html index.htm index.nginx-debian.html;
}

    location /graylog {
            auth_basic "Restricted Access";

            proxy_set_header Host $http_host;
            proxy_set_header X-Forwarded-Host $host;
            proxy_set_header X-Forwarded-Server $host;
            proxy_set_header Remote-User $remote_user;
            #proxy_set_header X-Forwarded-User $remote_user;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_set_header X-Graylog-Server-URL http://1.0.0.10/graylog/api;
            proxy_set_header X-Requested-By $remote_addr;

            proxy_pass http://1.15.15.15:9001/graylog;
            
    }

```

and my configuration for grafana : /etc/graylog/server/server.conf  
rest\_listen\_uri = [http://1.15.15.15:9001/graylog/api](http://1.15.15.15:9001/graylog/api)  
web\_listen\_uri = [http://1.15.15.15:9001/graylog](http://1.15.15.15:9001/graylog)

the problem is, when i log on with internet explorer the SSO work perfectly, but when i try to log on with mozilla firefox or chrome, I am authenticated with the user “undefined” and i don’t know why ??

and this is the log of graylog i found:  
**_2019-02-01T12:54:18.678+01:00 DEBUG [ModularRealmAuthenticator] Realm [org.graylog.plugins.auth.sso.SsoAuthRealm@534ef0b4] does not support token org.apache.shiro.auhc.UsernamePasswordToken - XXXXX, rememberMe=false (192.168.30.126). Skipping realm._**

but i don’t know how to solve this issue, how can i disable: org.apache.shiro.auhc.UsernamePasswordToken

please help me…

- Graylog Version: 2.5.0
- Plugin Version: 2.5.0
- Nginx: 1.10.3
- Elasticsearch: 6.5.3
- MongoDB Version: 4.0.4
- Operating System: debian 9.6
- Browser version: mozilla 64.4.0.2

thank very much for your help:😀

---

<div class="post-metadata">

**Author:** ![jan](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jan/32/11_2.png) [@jan](https://community.graylog.org/u/jan)\
**Post date:** [February 1, 2019, 6:01pm UTC](https://community.graylog.org/t/graylog-nginx-subdirectory-sso/8661/2 "2019-02-01T18:01:56Z")

</div>

what version of the plugin did you use?

---

<div class="post-metadata">

**Author:** ![kfdl](https://avatars.discourse-cdn.com/v4/letter/k/2bfe46/32.png) [@kfdl](https://community.graylog.org/u/kfdl)\
**Post date:** [February 2, 2019, 12:06pm UTC](https://community.graylog.org/t/graylog-nginx-subdirectory-sso/8661/3 "2019-02-02T12:06:29Z")

</div>

the version is 2.5.0:  
graylog-plugin-auth-sso-2.5.0.jar

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\
**Post date:** [February 16, 2019, 12:20pm UTC](https://community.graylog.org/t/graylog-nginx-subdirectory-sso/8661/4 "2019-02-16T12:20:47Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.