Re: [VOTE] Release Apache HTTP server 2.3.0-alpha
{eos,aruroa}.apache.org, aka www.apache.org have both been upgraded to 2.3.0. If anyone sees anything odd, please let me know. Thanks, Paul Paul Querna wrote: Test tarballs for Apache httpd 2.3.0-alpha are available at: http://httpd.apache.org/dev/dist/ Your votes please; ±1 [ ] Release httpd-2.3.0 as Alpha Vote closes at 7:00 UTC on Tuesday December 9 2008. Thanks, Paul
modules.conf
[EMAIL PROTECTED] wrote: Log: In 2.3.x, mod_unixd is split out form the mpm. Which raises a good point... Wouldn't it be better if mod_unixd, mod_version, and mod_so when enabled were all compiled into the core? They all seem pretty essential. All my customer builds always compile in mod_version, since you can't tell the version to decide if you are going to load mod_version. mod_so goes without saying. Similarly, I would rather have httpd tell me I'm on a unixd-style platform instead of second guessing the modules to enable. Any reason not to load it, ever, on a unixd platform? Seems like they would be good general statically linked defaults.
Re: [VOTE] Release Apache HTTP server 2.2.11
Custom compile on Gentoo (x86) +1 ~Jorge On Sat, Dec 6, 2008 at 11:04 PM, Res [EMAIL PROTECTED] wrote: On Sat, 6 Dec 2008, Ruediger Pluem wrote: +1 Tested on the following environments: Solaris 8 SPARC Solaris 9 SPARC Solaris 10 SPARC Red Hat AS 4 32 Bit (x86) Red Hat AS 4 64 Bit (x86_64) Red Hat AS 5 32 Bit (x86) Red Hat AS 5 64 Bit (x86_64) SuSE Linux 10.2 32 Bit (x86) SuSE Linux 11.0 32 Bit (x86) SuSE Linux 10.1 64 Bit (x86_64) +1 Slackware 12.0 (x86) Slackware 12.1 (x86) -- Res If you are not part of the solution, then you are part of the problem!
Re: modules.conf
On 12/07/2008 12:24 PM, William A. Rowe, Jr. wrote: [EMAIL PROTECTED] wrote: Log: In 2.3.x, mod_unixd is split out form the mpm. Which raises a good point... Wouldn't it be better if mod_unixd, mod_version, and mod_so when enabled were all compiled into the core? They all seem pretty essential. All my customer builds always compile in mod_version, since you can't tell the version to decide if you are going to load mod_version. mod_so goes without saying. Similarly, I would rather have httpd tell me I'm on a unixd-style platform instead of second guessing the modules to enable. Any reason not to load it, ever, on a unixd platform? Hm, there might be replacements for mod_unixd. IMHO this was one of the reasons to make it a module. So I agree with you regarding mod_version and mod_so, but not regarding mod_unixd. Regards Rüdiger
Re: modules.conf
On 7 Dec 2008, at 11:24, William A. Rowe, Jr. wrote: Similarly, I would rather have httpd tell me I'm on a unixd-style platform instead of second guessing the modules to enable. Any reason not to load it, ever, on a unixd platform? Yes, potentially. Dependencies on ap_unixd_config are currently a bit messy, and it would be good to clean them up, or at last API-ise them so it becomes more a 'proper' module. More directly relevant to your question, it should in principle be possible to use a further-developed mod_privileges, or comparable alternative scheme, as a complete replacement for mod_unixd. Seems like they would be good general statically linked defaults. It needs to know there is *some* system privileges scheme in operation and isn't running as unprotected root. But that's all. -- Nick Kew
Re: [VOTE] Release Apache HTTP server 2.2.11
On Sat, Dec 6, 2008 at 4:30 PM, Ruediger Pluem [EMAIL PROTECTED] wrote: +/-1 [ ] Release httpd-2.2.11 as GA +1 , tested on EC2 with Ubuntu and Redhat :-) -- Colm
changing mod_wombat's name
I know some folks are attached to the wombat moniker, but the name is likely to confuse users, particularly now that it is in trunk. The obvious name, mod_lua, is a bit tricky as there are about half a dozen projects named mod_lua -- most of which are dead. I don't have a really good alternative, which is why the working name mod_wombat came into being, but I think leaving that name will cause user confusion. -Brian
Re: changing mod_wombat's name
Brian McCallister wrote: I know some folks are attached to the wombat moniker, but the name is likely to confuse users, particularly now that it is in trunk. The obvious name, mod_lua, is a bit tricky as there are about half a dozen projects named mod_lua -- most of which are dead. I don't have a really good alternative, which is why the working name mod_wombat came into being, but I think leaving that name will cause user confusion. +1 to renaming, but I'm not sure we can or should call it mod_lua. Any other ideas? Thanks, -Paul
Re: changing mod_wombat's name
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Paul Querna wrote: Any other ideas? mod_lua_wombat ? - -- Arturo Buanzo Busleiman Independent Linux and Security Consultant - SANS - OISSG - OWASP http://www.buanzo.com.ar/pro/eng.html Mailing List Archives at http://archiver.mailfighter.net -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.9 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFJPD5ZAlpOsGhXcE0RCjYNAJ4uTXc0A+JN/zG+KSATSK1rzVCsHgCePDr/ caEVhwmT2jI0A4OnZ3HuVNQ= =/DPt -END PGP SIGNATURE-
Re: [VOTE] Release Apache HTTP server 2.2.11
2008/12/6 Ruediger Pluem [EMAIL PROTECTED]: Test tarballs for Apache httpd 2.2.11 are available at: http://httpd.apache.org/dev/dist/ builds/runs (default config) on OSX 10.5.5 -- Michal Grzedzicki
Re: changing mod_wombat's name
Paul Querna wrote: Brian McCallister wrote: +1 to renaming, but I'm not sure we can or should call it mod_lua. Any other ideas? mod_pony:-) Cheers, Tony
RE: Dyanamic loading of apache hash table.
Shariq, Thanks for your reply, I think we can use the Shared memory if we have one file which has to be shared among all the process/thread, but my problem is i have 100's of files in directory and i need to store them all in a hash map and arrays. Also I need to malloc the arrays structure dynamically. Will this possible using the shared memory or there is any other technique for the same..? Thanks, Jaysingh. Date: Wed, 3 Dec 2008 11:33:08 -0800From: [EMAIL PROTECTED]: [EMAIL PROTECTED]: Re: Dyanamic loading of apache hash table.Hey Jaysingh,I am also running into this problem of having to reload some state in a module through a handler. As you mentioned - the problem here is that the loaded state is forked by the Apache process/thread structure and hence only the process/thread that serves the handler will reload its state.I am thinking of solving this problem in the following ways - 1) Maintain the state that needs to be reloaded in shared memory - so that all Apache processes/threads can read the same version. I am guessing this will be expensive.2) Terminate the processes/threads whose state has become obsolete.On top of the mod_rewrite recommended by someone else here, I think mod_perl does something similar too - because it has to look for modified Perl files on disk on every request.What are your thoughts?thanks,Shariq On Wed, Dec 3, 2008 at 5:34 AM, Jayasingh Samuel [EMAIL PROTECTED] wrote: Hai,I have a hash map which takes its input and key from a file. I store it on the server Startup. Now the file content will be changed automatically and i want to reload the hash map automatically after hitting some handler. What i see is, after reloading the hash map using the handler, iam able to see the new Contents and the old contents alternatively.All the thread process are not getting updated with the new changes.Please reply me 1. If you have solution for this to reload the hash map automatically.2. How to kill the old threads which is having the old hash map and to spawn new threads with the new Contents.Thanks in advance,Jaysingh Samuel _Wish to Marry Now? Join MSN Matrimony FREE!http://in.msn.com/matrimony _ Searching for the best deals on travel? Visit MSN Travel. http://in.msn.com/coxandkings
Re: [VOTE] Release Apache HTTP server 2.3.0-alpha
On Dec 7, 2008, at 6:33 PM, Henning Schmiedehausen wrote: Our production sites IMHO shouldn't be guinea pigs for -alpha versions. Best. Place. Ever. to try out our stuff to find and fix bugs. Especially nasty edge cases like this one. www.apache.org should run dogfood whenever possible. How else can we justify asking the general public to try our stuff out? S. -- [EMAIL PROTECTED] http://www.temme.net/sander/ PGP FP: 51B4 8727 466A 0BC3 69F4 B7B8 B2BE BC40 1529 24AF smime.p7s Description: S/MIME cryptographic signature
Re: [VOTE] Release Apache HTTP server 2.3.0-alpha
Henning Schmiedehausen wrote: If that is the reason that e.g. the Velocity site broke, I am +1 for rolling this back to a known stable 2.2.x version. Our production sites IMHO shouldn't be guinea pigs for -alpha versions. We have always run -alpha versions, even with experimental MPMs on our production web servers. Eating our own dog food is very good, if we have developers around to fix it. The problem with velocity's site is an interaction between mod_deflate, mod_include, subrequests and directory indexes. In production, we are still running 2.3.0-alpha, but I have disabled mod_deflate, which seems to work as a work around for now. Hopefully in the next day we will have a patch to fix it. Thanks, Paul
Bug report for Apache httpd-1.3 [2008/12/07]
+---+ | Bugzilla Bug ID | | +-+ | | Status: UNC=Unconfirmed NEW=New ASS=Assigned| | | OPN=ReopenedVER=Verified(Skipped Closed/Resolved) | | | +-+ | | | Severity: BLK=Blocker CRI=Critical REG=Regression MAJ=Major | | | | MIN=Minor NOR=NormalENH=Enhancement TRV=Trivial | | | | +-+ | | | | Date Posted | | | | | +--+ | | | | | Description | | | | | | | |10744|New|Nor|2002-07-12|suexec might fail to open log file| |10747|New|Maj|2002-07-12|ftp SIZE command and 'smart' ftp servers results i| |10760|New|Maj|2002-07-12|empty ftp directory listings from cached ftp direc| |14518|Opn|Nor|2002-11-13|QUERY_STRING parts not incorporated by mod_rewrite| |16013|Opn|Nor|2003-01-13|Fooling mod_autoindex + IndexIgnore | |16631|Inf|Min|2003-01-31|.htaccess errors logged outside the virtual host l| |17318|Inf|Cri|2003-02-23|Abend on deleting a temporary cache file if proxy | |19279|Inf|Min|2003-04-24|Invalid chmod options in solaris build| |21637|Inf|Nor|2003-07-16|Timeout causes a status code of 200 to be logged | |21777|Inf|Min|2003-07-21|mod_mime_magic doesn't handle little gif files| |22618|New|Maj|2003-08-21|MultiViews invalidates PATH_TRANSLATED if cgi-wrap| |25057|Inf|Maj|2003-11-27|Empty PUT access control in .htaccess overrides co| |26126|New|Nor|2004-01-14|mod_include hangs with request body | |26152|Ass|Nor|2004-01-15|Apache 1.3.29 and below directory traversal vulner| |26790|New|Maj|2004-02-09|error deleting old cache file | |29257|Opn|Nor|2004-05-27|Problem with apache-1.3.31 and mod_frontpage (dso,| |29498|New|Maj|2004-06-10|non-anonymous ftp broken in mod_proxy | |29538|Ass|Enh|2004-06-12|No facility used in ErrorLog to syslog| |30207|New|Nor|2004-07-20|Piped logs don't close read end of pipe | |30877|New|Nor|2004-08-26|htpasswd clears passwd file on Sun when /var/tmp i| |30909|New|Cri|2004-08-28|sporadic segfault resulting in broken connections | |31975|New|Nor|2004-10-29|httpd-1.3.33: buffer overflow in htpasswd if calle| |32078|New|Enh|2004-11-05|clean up some compiler warnings | |32539|New|Trv|2004-12-06|[PATCH] configure --enable-shared= brocken on SuSE| |32974|Inf|Maj|2005-01-06|Client IP not set | |33086|New|Nor|2005-01-13|unconsistency betwen 404 displayed path and server| |33495|Inf|Cri|2005-02-10|Apache crashes with WSADuplicateSocket failed for| |33772|New|Nor|2005-02-28|inconsistency in manual and error reporting by sue| |33875|New|Enh|2005-03-07|Apache processes consuming CPU| |34108|New|Nor|2005-03-21|mod_negotiation changes mtime to mtime of Document| |34114|New|Nor|2005-03-21|Apache could interleave log entries when writing t| |34404|Inf|Blk|2005-04-11|RewriteMap prg can not handle fpout | |34571|Inf|Maj|2005-04-22|Apache 1.3.33 stops logging vhost| |34573|Inf|Maj|2005-04-22|.htaccess not working / mod_auth_mysql| |35424|New|Nor|2005-06-20|httpd disconnect in Timeout on CGI| |35439|New|Nor|2005-06-21|Problem with remove /../ in util.c and mod_rewri| |35547|Inf|Maj|2005-06-29|Problems with libapreq 1.2 and Apache::Cookie | |3|New|Nor|2005-06-30|Can't find DBM on Debian Sarge| |36375|Opn|Nor|2005-08-26|Cannot include http_config.h from C++ file| |37166|New|Nor|2005-10-19|Under certain conditions, mod_cgi delivers an empt| |37185|New|Enh|2005-10-20|AddIcon, AddIconByType for OpenDocument format| |37252|New|Reg|2005-10-26|gen_test_char reject NLS string | |38989|New|Nor|2006-03-15|restart + piped logs stalls httpd for 24 minutes (| |39104|New|Enh|2006-03-25|[FR] fix build with -Wl,--as-needed | |39287|New|Nor|2006-04-12|Incorrect If-Modified-Since validation (due to syn| |39937|New|Nor|2006-06-30|Garbage output if README.html is gzipped or compre| |40176|New|Nor|2006-08-03|magic and mime| |40224|Ver|Nor|2006-08-10|System time crashes Apache @year 2038 (win32 only?| |41279|New|Nor|2007-01-02|Apache 1.3.37 htpasswd is vulnerable to buffer ove| |42355|New|Maj|2007-05-08|Apache 1.3 permits non-rfc HTTP error code = 600 | |43626|New|Maj|2007-10-15|r-path_info returning invalid value |
Re: changing mod_wombat's name
+1 on renaming. I still have to look up what it is every now and then. (Mostly due to forgetting what it does all the time though) mod_lua_handler, mod_lua_config meh I'm not good with names. metal note: look at lua and mod_soonnottobewombat to replace to replace buggy mod_perl stuff. ~Jorge On Sun, Dec 7, 2008 at 11:36 PM, Tony Stevenson [EMAIL PROTECTED] wrote: Paul Querna wrote: Brian McCallister wrote: +1 to renaming, but I'm not sure we can or should call it mod_lua. Any other ideas? mod_pony:-) Cheers, Tony