Re: [EMAIL PROTECTED] Require SSL only for an individual file

2006-02-04 Thread Marc Serra
I don't know does snide mean, but I hope nothing bad ;-)

I tried to search in: http://www.apache-ssl.org/docs.html and
http://httpd.apache.org/docs/2.0/ssl/ , but i don't find an answer for me.

Your links seems better. Sorry for bugging.

Tomorrow i try it, I'm very tired now... B-(


> I hate to be snide, but why are you guessing when you could simply
> read the documentation:
> http://httpd.apache.org/docs/2.2/mod/core.html#files
> http://httpd.apache.org/docs/2.2/sections.html#file-and-web



-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] Require SSL only for an individual file

2006-02-04 Thread Joshua Slive
On 2/4/06, Marc Serra <[EMAIL PROTECTED]> wrote:
> Thanks for a reply joshua.
>
> Really? And can you give me an example of this?
>
> For a directory that requires SSL:
>
> 
>SSLRequireSSL
>AllowOverride AuthConfig
> 
>
>
> But for a file? Does would you mean?:
>  "/var/www/localhost/htdocs/ssl/file.under.ssl.html">
>SSLRequireSSL
>AllowOverride AuthConfig
> 

I hate to be snide, but why are you guessing when you could simply
read the documentation:
http://httpd.apache.org/docs/2.2/mod/core.html#files
http://httpd.apache.org/docs/2.2/sections.html#file-and-web

Joshua.

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] Require SSL only for an individual file

2006-02-04 Thread Marc Serra
Thanks for a reply joshua.

Really? And can you give me an example of this?

For a directory that requires SSL:


SSLRequireSSL
AllowOverride AuthConfig



But for a file? Does would you mean?:
 "/var/www/localhost/htdocs/ssl/file.under.ssl.html">
SSLRequireSSL
AllowOverride AuthConfig




-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] Require SSL only for an individual file

2006-02-04 Thread Marc Serra
Thanks, and I know your solution, but isn't possible. I can't not move
this file from this directory, and (for application requirements) the
other files on this directory cannot be under SSL.


> I guess the easiest way would be to put that SSL enabled
> file into a sub-dir all on it's own?



-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] CustomLog logs/access_log combined not working from within

2006-02-04 Thread Richard de Vries
I am having the weirdest problem. Running Apache
2.0.55 on Solaris 9, I am unable to get Apache to
generate and write to the access_log file while the
CustomLog directive is  enclosed in the 
 tags.

This is what I have:


#
# The following directives define some format
nicknames for use with
# a CustomLog directive (see below).
#
LogFormat "%h %l %u %t \"%r\" %>s %b
\"%{Referer}i\" \"%{User-Agent}i\"" combined
LogFormat "%h %l %u %t \"%r\" %>s %b" common

CustomLog logs/access.log combined


It simply doesn’t work.

If I remove the  tags, it does
work. I made sure I am loading the log_config_module

LoadModule access_module modules/mod_access.so
LoadModule alias_module modules/mod_alias.so
LoadModule auth_module modules/mod_auth.so
LoadModule dir_module modules/mod_dir.so
LoadModule dumpio_module modules/mod_dumpio.so
LoadModule include_module modules/mod_include.so
LoadModule log_config_module modules/mod_log_config.so
LoadModule log_forensic_module
modules/mod_log_forensic.so
LoadModule logio_module modules/mod_logio.so
LoadModule security_module modules/mod_security.so
LoadModule mime_module modules/mod_mime.so
LoadModule rewrite_module modules/mod_rewrite.so
LoadModule ssl_module modules/mod_ssl.so
LoadModule unique_id_module modules/mod_unique_id.so

I even proved this to myself by removing the
“LoadModule log_config_module xxx” line, at which
point Apache complains about the CustomLog directive.
So I know the module is loaded.

I tried to reproduce this behavior on my Fedora 4
linux box with Apache 2.0.55 (RPM) and it does the
same thing.

I am not using any virtual hosts and/or SSL, and yes,
the logs and log directory have the appropriate
permissions.

Has anyone seen / experienced this before?

Richard


__
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] only one ip per user (has many connections) can access resource at the same time ?

2006-02-04 Thread tvlgiao
Hello all,

How can I configure Apache to use mod_auth_mysql  to solve the following authentication theme:

In brief: if A logs in and is downloading  (connection established, IP
is saved when he logs  in), no other user can use A's account to 
authenticate (because anyone else has different  IP.)

If A logs in and is not downloading anything (no  connection, session
and A's IP is saved).  B can use A's account  to log in (establish a
new Connection, B's  session overrides A's as A hasn't start any
connection).  Hence, Precisely at the time  when B logs in, A is booted
as B's session already overrides A's.

thanks.tvlgiao.


Re: [EMAIL PROTECTED] Multiple SSL certificates with single virtual host

2006-02-04 Thread Kenevel
Khai Doan wrote:
> I need to serve multiple domains each with a different SSL
> certificates, but I wish to only use one virtual host.  Is it possible
> to put all certificates in one file and have apache serve the right
> certificate?  What else can I do ?

Hi Khai,

Why would you want different SSL certificates for the same virtual host?

I seem to recall that Apache can only serve 1 SSL certificate per IP
address, as it is only once the handshake has taken place and the encrypted
connection has been established that the server finds out which host the
client wishes to connect to - and until then it only has an IP address to
work with.

Mike

PS I am willing to bet that someone will ask you not to post in HTML before
long ;)

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] Multiple SSL certificates with single virtual host

2006-02-04 Thread Khai Doan
I need to serve multiple domains each with a different SSL certificates, but I wish to only use one virtual host.  Is it possible to put all certificates in one file and have apache serve the right certificate?  What else can I do ?
 
Khai


-
The official User-To-User support forum of the Apache HTTP Server Project.
See  for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] Require SSL only for an individual file

2006-02-04 Thread httpd2

Right Joshua. I checked the docs and noted that 
SSLRequireSSL was valid in the directory and .htaccess 
context. I forgot that directory also applies to files and 
location contexts normally as well, unless specified as not 
applicable for a particular directive.

quote

directory 
A directive marked as being valid in this context may be 
used inside , , and  containers 
in the server configuration files, subject to the 
restrictions outlined in How Directory, Location and Files 
sections work. 

unquote

Keith

In theory, theory and practice are the same;
In practice they are not. 

On Sat, 4 Feb 2006, Joshua Slive wrote:

> To: users@httpd.apache.org, [EMAIL PROTECTED]
> From: Joshua Slive <[EMAIL PROTECTED]>
> Subject: Re: [EMAIL PROTECTED] Require SSL only for an individual file
> 
> On 2/4/06, Marc Serra <[EMAIL PROTECTED]> wrote:
> > Hi gurus!
> >
> > I need to secure with SSL only one file from a directory 
> > that contains a lot more files.
> >
> > How can I do that?
> >
> > I know how secure an entire directory, with 
> > SSLRequireSSL option, but is possible only for a file?
> 
> Almost anything that can go in a  section can 
> also go in a  section nested within a  
> section.
> 
> Joshua.

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] Require SSL only for an individual file

2006-02-04 Thread Joshua Slive
On 2/4/06, Marc Serra <[EMAIL PROTECTED]> wrote:
> Hi gurus!
>
> I need to secure with SSL only one file from a directory that contains a
> lot more files.
>
> How can I do that?
>
> I know how secure an entire directory, with SSLRequireSSL option, but is
> possible only for a file?

Almost anything that can go in a  section can also go in a
 section nested within a  section.

Joshua.

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] Help!

2006-02-04 Thread Michael McCullough
Hi all, I am a newbi to Apache. I am setting up Apache on a Windows XP 
base PC and trying to figure out how to set the file permissions. Thanks!


-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] Require SSL only for an individual file

2006-02-04 Thread httpd2

I guess the easiest way would be to put that SSL enabled 
file into a sub-dir all on it's own?

Keith

In theory, theory and practice are the same;
In practice they are not. 

On Sat, 4 Feb 2006, Marc Serra wrote:

> To: users@httpd.apache.org
> From: Marc Serra <[EMAIL PROTECTED]>
> Subject: [EMAIL PROTECTED] Require SSL only for an individual file
> 
> Hi gurus!
> 
> I need to secure with SSL only one file from a directory that contains a
> lot more files.
> 
> How can I do that?
> 
> I know how secure an entire directory, with SSLRequireSSL option, but is
> possible only for a file?
> 
> Thank's!
> 
> 
> -
> The official User-To-User support forum of the Apache HTTP Server Project.
> See http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: [EMAIL PROTECTED]
>"   from the digest: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
> 
> 

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] Require SSL only for an individual file

2006-02-04 Thread Marc Serra
Hi gurus!

I need to secure with SSL only one file from a directory that contains a
lot more files.

How can I do that?

I know how secure an entire directory, with SSLRequireSSL option, but is
possible only for a file?

Thank's!


-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]