apache原配置文件：

<VirtualHost *:8000>
    WSGIScriptAlias / /usr/share/cmdb/venv/cmdb-api/cmdb/wsgi.py
    WSGIDaemonProcess cmdb python-path=/usr/share/cmdb/venv/lib/python2.7/site-packages
    WSGIProcessGroup cmdb
    WSGIApplicationGroup %{GLOBAL}
    Alias /static/ /usr/share/cmdb/venv/lib/python2.7/site-packages/rest_framework/static/
    <Directory /usr/share/cmdb/venv/lib/python2.7/site-packages/rest_framework/static/>
        Require all granted
    </Directory>
</VirtualHost>

这时候看了openstack keystone的配置，发现有个WSGIPassAuthorization On，看着很像。

在conf中加上此配置，Authorization请求头顺利转发。api调用正常。

最终的apache配置如下：

<VirtualHost *:8000>
    WSGIScriptAlias / /usr/share/cmdb/venv/cmdb-api/cmdb/wsgi.py
    WSGIDaemonProcess cmdb python-path=/usr/share/cmdb/venv/lib/python2.7/site-packages
    WSGIProcessGroup cmdb
    WSGIApplicationGroup %{GLOBAL}
    WSGIPassAuthorization On       <---------- ************加上此句话*****************
    Alias /static/ /usr/share/cmdb/venv/lib/python2.7/site-packages/rest_framework/static/
    <Directory /usr/share/cmdb/venv/lib/python2.7/site-packages/rest_framework/static/>
        Require all granted
    </Directory>
</VirtualHost>