Environment: Ubuntu 14.04; Apache 2.4.7; mod-auth-mellon 0.7.0; Splunk Enterprise 6.3.1 configured with LDAP authentication and group mapping.
Configuration matches what is provided in the blog post. Apache logs show that it is unable to identify a user:
[authz_core:debug] mod_authz_core.c(802): AH01626: authorization result of Require valid-user : denied (no authenticated user yet)
[authz_core:debug] mod_authz_core.c(802): AH01626: authorization result of <RequireAny>: denied (no authenticated user yet)
[core:error] AH00027: No authentication done but request not allowed without authentication for /secret/endpoint/login. Authentication not configured?
So it seems that there is no authorization. Do I need to configure authentication within apache too? I've tried removing the MellonUser parameter and setting the user request header manually to admin to see what happens, but still fails with the above errors.