Re: [VOTE] Release Apache HTTP server 2.3.0-alpha

2008-12-07 Thread Paul Querna
{eos,aruroa}.apache.org, aka www.apache.org have both been upgraded to 
2.3.0.


If anyone sees anything odd, please let me know.

Thanks,

Paul

Paul Querna wrote:

Test tarballs for Apache httpd 2.3.0-alpha are available at:

http://httpd.apache.org/dev/dist/

Your votes please;

 ±1
 [  ]  Release httpd-2.3.0 as Alpha


Vote closes at 7:00 UTC on Tuesday December 9 2008.

Thanks,

Paul




modules.conf

2008-12-07 Thread William A. Rowe, Jr.
[EMAIL PROTECTED] wrote:
 
 Log:
 In 2.3.x, mod_unixd is split out form the mpm.

Which raises a good point...

Wouldn't it be better if mod_unixd, mod_version, and mod_so when enabled
were all compiled into the core?  They all seem pretty essential.

All my customer builds always compile in mod_version, since you can't tell
the version to decide if you are going to load mod_version.

mod_so goes without saying.

Similarly, I would rather have httpd tell me I'm on a unixd-style platform
instead of second guessing the modules to enable.  Any reason not to load
it, ever, on a unixd platform?

Seems like they would be good general statically linked defaults.


Re: [VOTE] Release Apache HTTP server 2.2.11

2008-12-07 Thread Jorge Schrauwen
Custom compile on Gentoo (x86) +1

~Jorge



On Sat, Dec 6, 2008 at 11:04 PM, Res [EMAIL PROTECTED] wrote:
 On Sat, 6 Dec 2008, Ruediger Pluem wrote:

 +1

 Tested on the following environments:

 Solaris 8 SPARC
 Solaris 9 SPARC
 Solaris 10 SPARC
 Red Hat AS 4 32 Bit (x86)
 Red Hat AS 4 64 Bit (x86_64)
 Red Hat AS 5 32 Bit (x86)
 Red Hat AS 5 64 Bit (x86_64)
 SuSE Linux 10.2 32 Bit (x86)
 SuSE Linux 11.0 32 Bit (x86)
 SuSE Linux 10.1 64 Bit (x86_64)


 +1
 Slackware 12.0 (x86)
 Slackware 12.1 (x86)


 --
 Res

 If you are not part of the solution, then you are part of the problem!



Re: modules.conf

2008-12-07 Thread Ruediger Pluem


On 12/07/2008 12:24 PM, William A. Rowe, Jr. wrote:
 [EMAIL PROTECTED] wrote:
 Log:
 In 2.3.x, mod_unixd is split out form the mpm.
 
 Which raises a good point...
 
 Wouldn't it be better if mod_unixd, mod_version, and mod_so when enabled
 were all compiled into the core?  They all seem pretty essential.
 
 All my customer builds always compile in mod_version, since you can't tell
 the version to decide if you are going to load mod_version.
 
 mod_so goes without saying.
 
 Similarly, I would rather have httpd tell me I'm on a unixd-style platform
 instead of second guessing the modules to enable.  Any reason not to load
 it, ever, on a unixd platform?

Hm, there might be replacements for mod_unixd. IMHO this was one of the reasons
to make it a module. So I agree with you regarding mod_version and mod_so,
but not regarding mod_unixd.

Regards

Rüdiger



Re: modules.conf

2008-12-07 Thread Nick Kew


On 7 Dec 2008, at 11:24, William A. Rowe, Jr. wrote:


Similarly, I would rather have httpd tell me I'm on a unixd-style  
platform
instead of second guessing the modules to enable.  Any reason not  
to load

it, ever, on a unixd platform?


Yes, potentially.

Dependencies on ap_unixd_config are currently a bit messy, and
it would be good to clean them up, or at last API-ise them so it becomes
more a 'proper' module.  More directly relevant to your question,
it should in principle be possible to use a further-developed
mod_privileges, or comparable alternative scheme, as a complete
replacement for mod_unixd.


Seems like they would be good general statically linked defaults.


It needs to know there is *some* system privileges scheme in
operation and isn't running as unprotected root.  But that's all.

--
Nick Kew


Re: [VOTE] Release Apache HTTP server 2.2.11

2008-12-07 Thread Colm MacCárthaigh
On Sat, Dec 6, 2008 at 4:30 PM, Ruediger Pluem [EMAIL PROTECTED] wrote:
  +/-1
  [  ]  Release httpd-2.2.11 as GA

+1 , tested on EC2 with Ubuntu and Redhat :-)

-- 
Colm


changing mod_wombat's name

2008-12-07 Thread Brian McCallister
I know some folks are attached to the wombat moniker, but the name is
likely to confuse users, particularly now that it is in trunk.

The obvious name, mod_lua, is a bit tricky as there are about half a
dozen projects named mod_lua -- most of which are dead.

I don't have a really good alternative, which is why the working name
mod_wombat came into being, but I think leaving that name will cause
user confusion.

-Brian


Re: changing mod_wombat's name

2008-12-07 Thread Paul Querna
Brian McCallister wrote:
 I know some folks are attached to the wombat moniker, but the name is
 likely to confuse users, particularly now that it is in trunk.
 
 The obvious name, mod_lua, is a bit tricky as there are about half a
 dozen projects named mod_lua -- most of which are dead.
 
 I don't have a really good alternative, which is why the working name
 mod_wombat came into being, but I think leaving that name will cause
 user confusion.

+1 to renaming, but I'm not sure we can or should call it mod_lua.

Any other ideas?

Thanks,

-Paul



Re: changing mod_wombat's name

2008-12-07 Thread Arturo 'Buanzo' Busleiman
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Paul Querna wrote:
 Any other ideas?

mod_lua_wombat ?

- --
Arturo Buanzo Busleiman
Independent Linux and Security Consultant - SANS - OISSG - OWASP
http://www.buanzo.com.ar/pro/eng.html
Mailing List Archives at http://archiver.mailfighter.net
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFJPD5ZAlpOsGhXcE0RCjYNAJ4uTXc0A+JN/zG+KSATSK1rzVCsHgCePDr/
caEVhwmT2jI0A4OnZ3HuVNQ=
=/DPt
-END PGP SIGNATURE-


Re: [VOTE] Release Apache HTTP server 2.2.11

2008-12-07 Thread Lazy
2008/12/6 Ruediger Pluem [EMAIL PROTECTED]:
 Test tarballs for Apache httpd 2.2.11 are available at:

http://httpd.apache.org/dev/dist/

builds/runs (default config) on OSX 10.5.5

-- 
Michal Grzedzicki


Re: changing mod_wombat's name

2008-12-07 Thread Tony Stevenson
Paul Querna wrote:
 Brian McCallister wrote:

 
 +1 to renaming, but I'm not sure we can or should call it mod_lua.
 
 Any other ideas?


mod_pony:-)


Cheers,
Tony


RE: Dyanamic loading of apache hash table.

2008-12-07 Thread Jayasingh Samuel

Shariq,  Thanks for your reply, I think we can use the Shared memory if we have 
one file which has to be shared among all the process/thread, but my problem is 
i have 100's of files in directory and i need to store them all in a hash map 
and arrays. 
 
Also I need to malloc the arrays structure dynamically. Will this possible 
using the shared memory or there is any other technique for the same..?
 
Thanks, 
Jaysingh. 

Date: Wed, 3 Dec 2008 11:33:08 -0800From: [EMAIL PROTECTED]: [EMAIL PROTECTED]: 
Re: Dyanamic loading of apache hash table.Hey Jaysingh,I am also running into 
this problem of having to reload some state in a module through a handler. As 
you mentioned - the problem here is that the loaded state is forked by the 
Apache process/thread structure and hence only the process/thread that serves 
the handler will reload its state.I am thinking of solving this problem in the 
following ways - 1) Maintain the state that needs to be reloaded in shared 
memory - so that all Apache processes/threads can read the same version. I am 
guessing this will be expensive.2) Terminate the processes/threads whose state 
has become obsolete.On top of the mod_rewrite recommended by someone else here, 
I think mod_perl does something similar too - because it has to look for 
modified Perl files on disk on every request.What are your 
thoughts?thanks,Shariq
On Wed, Dec 3, 2008 at 5:34 AM, Jayasingh Samuel [EMAIL PROTECTED] wrote:
Hai,I have a hash map which takes its input and key from a file. I store it on 
the server Startup.  Now the  file content will be changed automatically and i 
want to reload the hash map automatically after hitting some handler. What i 
see is, after reloading the hash map using the handler, iam able to see the new 
Contents and the old contents alternatively.All the thread process are not 
getting updated with the new changes.Please reply me 1. If you have solution 
for this to reload the hash map automatically.2. How to kill the old threads 
which is having the old hash map and to spawn new threads with the new 
Contents.Thanks in advance,Jaysingh Samuel
_Wish to Marry 
Now? Join MSN Matrimony FREE!http://in.msn.com/matrimony
_
Searching for the best deals on travel? Visit MSN Travel.
http://in.msn.com/coxandkings

Re: [VOTE] Release Apache HTTP server 2.3.0-alpha

2008-12-07 Thread Sander Temme


On Dec 7, 2008, at 6:33 PM, Henning Schmiedehausen wrote:

Our production sites IMHO shouldn't be guinea pigs for -alpha  
versions.



Best. Place. Ever. to try out our stuff to find and fix bugs.

Especially nasty edge cases like this one.

www.apache.org should run dogfood whenever possible.  How else can we  
justify asking the general public to try our stuff out?


S.

--
[EMAIL PROTECTED]  http://www.temme.net/sander/
PGP FP: 51B4 8727 466A 0BC3 69F4  B7B8 B2BE BC40 1529 24AF



smime.p7s
Description: S/MIME cryptographic signature


Re: [VOTE] Release Apache HTTP server 2.3.0-alpha

2008-12-07 Thread Paul Querna
Henning Schmiedehausen wrote:
 If that is the reason that e.g. the Velocity site broke, I am +1 for
 rolling this back to a known stable 2.2.x version.
 
 Our production sites IMHO shouldn't be guinea pigs for -alpha versions.

We have always run -alpha versions, even with experimental MPMs on our
production web servers.

Eating our own dog food is very good, if we have developers around to
fix it.

The problem with velocity's site is an interaction between mod_deflate,
mod_include, subrequests and directory indexes.  In production, we are
still running 2.3.0-alpha, but I have disabled mod_deflate, which seems
to work as a work around for now.

Hopefully in the next day we will have a patch to fix it.

Thanks,

Paul




Bug report for Apache httpd-1.3 [2008/12/07]

2008-12-07 Thread bugzilla
+---+
| Bugzilla Bug ID   |
| +-+
| | Status: UNC=Unconfirmed NEW=New ASS=Assigned|
| | OPN=ReopenedVER=Verified(Skipped Closed/Resolved)   |
| |   +-+
| |   | Severity: BLK=Blocker CRI=Critical  REG=Regression  MAJ=Major   |
| |   |   MIN=Minor   NOR=NormalENH=Enhancement TRV=Trivial |
| |   |   +-+
| |   |   | Date Posted |
| |   |   |  +--+
| |   |   |  | Description  |
| |   |   |  |  |
|10744|New|Nor|2002-07-12|suexec might fail to open log file|
|10747|New|Maj|2002-07-12|ftp SIZE command and 'smart' ftp servers results i|
|10760|New|Maj|2002-07-12|empty ftp directory listings from cached ftp direc|
|14518|Opn|Nor|2002-11-13|QUERY_STRING parts not incorporated by mod_rewrite|
|16013|Opn|Nor|2003-01-13|Fooling mod_autoindex + IndexIgnore   |
|16631|Inf|Min|2003-01-31|.htaccess errors logged outside the virtual host l|
|17318|Inf|Cri|2003-02-23|Abend on deleting a temporary cache file if proxy |
|19279|Inf|Min|2003-04-24|Invalid chmod options in solaris build|
|21637|Inf|Nor|2003-07-16|Timeout causes a status code of 200 to be logged  |
|21777|Inf|Min|2003-07-21|mod_mime_magic doesn't handle little gif files|
|22618|New|Maj|2003-08-21|MultiViews invalidates PATH_TRANSLATED if cgi-wrap|
|25057|Inf|Maj|2003-11-27|Empty PUT access control in .htaccess overrides co|
|26126|New|Nor|2004-01-14|mod_include hangs with request body   |
|26152|Ass|Nor|2004-01-15|Apache 1.3.29 and below directory traversal vulner|
|26790|New|Maj|2004-02-09|error deleting old cache file |
|29257|Opn|Nor|2004-05-27|Problem with apache-1.3.31 and mod_frontpage (dso,|
|29498|New|Maj|2004-06-10|non-anonymous ftp broken in mod_proxy |
|29538|Ass|Enh|2004-06-12|No facility used in ErrorLog to syslog|
|30207|New|Nor|2004-07-20|Piped logs don't close read end of pipe   |
|30877|New|Nor|2004-08-26|htpasswd clears passwd file on Sun when /var/tmp i|
|30909|New|Cri|2004-08-28|sporadic segfault resulting in broken connections |
|31975|New|Nor|2004-10-29|httpd-1.3.33: buffer overflow in htpasswd if calle|
|32078|New|Enh|2004-11-05|clean up some compiler warnings   |
|32539|New|Trv|2004-12-06|[PATCH] configure --enable-shared= brocken on SuSE|
|32974|Inf|Maj|2005-01-06|Client IP not set |
|33086|New|Nor|2005-01-13|unconsistency betwen 404 displayed path and server|
|33495|Inf|Cri|2005-02-10|Apache crashes with WSADuplicateSocket failed for|
|33772|New|Nor|2005-02-28|inconsistency in manual and error reporting by sue|
|33875|New|Enh|2005-03-07|Apache processes consuming CPU|
|34108|New|Nor|2005-03-21|mod_negotiation changes mtime to mtime of Document|
|34114|New|Nor|2005-03-21|Apache could interleave log entries when writing t|
|34404|Inf|Blk|2005-04-11|RewriteMap prg can not handle fpout   |
|34571|Inf|Maj|2005-04-22|Apache 1.3.33 stops logging  vhost|
|34573|Inf|Maj|2005-04-22|.htaccess not working / mod_auth_mysql|
|35424|New|Nor|2005-06-20|httpd disconnect in Timeout on CGI|
|35439|New|Nor|2005-06-21|Problem with remove /../ in util.c and mod_rewri|
|35547|Inf|Maj|2005-06-29|Problems with libapreq 1.2 and Apache::Cookie |
|3|New|Nor|2005-06-30|Can't find DBM on Debian Sarge|
|36375|Opn|Nor|2005-08-26|Cannot include http_config.h from C++ file|
|37166|New|Nor|2005-10-19|Under certain conditions, mod_cgi delivers an empt|
|37185|New|Enh|2005-10-20|AddIcon, AddIconByType for OpenDocument format|
|37252|New|Reg|2005-10-26|gen_test_char reject NLS string   |
|38989|New|Nor|2006-03-15|restart + piped logs stalls httpd for 24 minutes (|
|39104|New|Enh|2006-03-25|[FR] fix build with -Wl,--as-needed   |
|39287|New|Nor|2006-04-12|Incorrect If-Modified-Since validation (due to syn|
|39937|New|Nor|2006-06-30|Garbage output if README.html is gzipped or compre|
|40176|New|Nor|2006-08-03|magic and mime|
|40224|Ver|Nor|2006-08-10|System time crashes Apache @year 2038 (win32 only?|
|41279|New|Nor|2007-01-02|Apache 1.3.37 htpasswd is vulnerable to buffer ove|
|42355|New|Maj|2007-05-08|Apache 1.3 permits non-rfc HTTP error code = 600 |
|43626|New|Maj|2007-10-15|r-path_info returning invalid value  |

Re: changing mod_wombat's name

2008-12-07 Thread Jorge Schrauwen
+1 on renaming.
I still have to look up what it is every now and then. (Mostly due to
forgetting what it does all the time though)

mod_lua_handler, mod_lua_config meh I'm not good with names.

metal note: look at lua and mod_soonnottobewombat to replace to
replace buggy mod_perl stuff.

~Jorge



On Sun, Dec 7, 2008 at 11:36 PM, Tony Stevenson [EMAIL PROTECTED] wrote:
 Paul Querna wrote:
 Brian McCallister wrote:


 +1 to renaming, but I'm not sure we can or should call it mod_lua.

 Any other ideas?


 mod_pony:-)


 Cheers,
 Tony