I am using RHEL 8.5 with Apache proxy and trying to get the proxy to do DOD CAC authentication. I am very new to Splunk and Apache. I am able to get the proxy to point to the Splunk server but I am not getting the regular prompt for the CAC authentication. I am using a reserve.conf for this as the main setup file as seen below: ====web.conf SSOMode = strict remoteUser = Remote_User enableSplunkWebSSL = True trustedIP = 192.168.110.10 ===server.conf trustedIP = 192.168.110.10 ===Reserve.conf ServerName www.mcscapache.com ProxyRequests Off ProxyPreserveHost Off SSLProxyEngine on SSLProxyVerify none SSLProxyCheckPeerCN off SSLProxyCheckPeerName off SSLProxyCheckPeerExpire off #SSLVerifyClient require SSLVerifyDepth 10 # initialize the special headers to a blank value to avoid http header forgeries RequestHeader set SSL_CLIENT_S_DN "" RequestHeader set SSL_CLIENT_I_DN "" RequestHeader set SSL_SERVER_S_DN_OU "" RequestHeader set SSL_CLIENT_VERIFY "" # add all the SSL_* you need in the internal web application RequestHeader set SSL_CLIENT_S_DN "%{SSL_CLIENT_S_DN}e" RequestHeader set SSL_CLIENT_I_DN "%{SSL_CLIENT_I_DN}e" RequestHeader set SSL_SERVER_S_DN_OU "%{SSL_SERVER_S_DN_OU}e" RequestHeader set SSL_CLIENT_VERIFY "%{SSL_CLIENT_VERIFY}e" RequestHeader add X-Forwarded-Proto https RequestHeader add X-Forwarded-Port 443 RequestHeader set X-Forwarded-Proto "https" RequestHeader set Client-Cert-Subject "%{SSL_CLIENT_S_DN}s" RequestHeader set Remote_User %{Remote_User}s ProxyPass / https://www.mcscsplunk.com:8000/en-US/app/launcher/home ProxyPassReverse / https://www.mcscsplunk.com:8000/en-US/app/launcher/home #SSLCertificateChainFile /etc/pki/tls/certs/ca-bundle.crt SSLCertificateFile /etc/pki/tls/private/dodserver.crt #SSLCACertificateFile /etc/pki/tls/private/DoD_CAs.pem SSLCertificateKeyFile /etc/pki/tls/private/dodserverkey.key <Proxy *> RewriteEngine On RewriteCond %{SSL:SSL_CLIENT_S_DN_CN} ([0-9]+$) RewriteRule (.*) - [E=USER:%1] #RequestHeader set cacuser %{USER}e@mil RequestHeader set Remote_User %{Remote_User}e # SSL conf file to force users to a warning cookie before they are able to access Splunk RewriteCond %{HTTP_COOKIE} !accepted_warning=true [NC] RewriteRule ^/(de-DE|en-US|en-GB|it-IT|ja-JP|ko-KO|zh-CN|zh-TW)/.*$ warning/ [NC,L,R=302] </Proxy> <Location /> Require all granted allow from all AuthType Kerberos require valid-user Options +SymLinksIfOwnerMatch # AllowOverride All Order deny,allow Allow from 192.168.190.0/24 Deny from all </Location>   Thank you ... View more