Re: [EMAIL PROTECTED] Apache 2.2.0 binary download
Ashwani Kumar Sharma wrote: Yeah that's true, There are no binaries for apache 2.2.0 on that url. I have downloaded the source code for same from http://archive.apache.org/dist/httpd/ I am facing some build problems. Is it true that apache 2.2.0 is not a stable version. Please suggest me the stable version for apache. Uhm - yea. You read the win32 download page right? Where it said "Looking for an earlier version, Please Don't"? The downloads page has the current stable version(s) 2.2.4 or 2.2.6 - if you are a modperl or fastcgi user - stick with .4 for your own sanity. Perhaps 2.2.0 isn't there because it barely built, never mind running right, on win32? Just curious why you would be so obsessed with sticking to a .zero release? Bill - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] " from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [EMAIL PROTECTED] Apache 2.2.0 binary download
There were discussions on the Dev ML about building 2.2.0 using VC6, VS2003, and VS2005 around December 2005. Read those threads for ideas if you insist on compiling. For the recommended stable version, use Alexander's link for the Windows binaries of 2.2.6. solprovider On 10/18/07, Ashwani Kumar Sharma <[EMAIL PROTECTED]> wrote: > Yeah that's true, > > There are no binaries for apache 2.2.0 on that url. I have downloaded the > source code for same from > http://archive.apache.org/dist/httpd/ > I am facing some build problems. > > Is it true that apache 2.2.0 is not a stable version. Please suggest me the > stable version for apache. > > Thanks and Regards, > Ashwani Sharma > Mob: 09916454843 > Off: +91-80-26265053 > > > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of > [EMAIL PROTECTED] > Sent: Thursday, October 18, 2007 11:45 AM > > I could not find Windows binaries for 2.2.0 on the Web. If you MUST > use that version, you MUST compile. > > For old versions, go to the Downloads page and click the "archive > download site" link in the second paragraph for: > http://archive.apache.org/dist/httpd/ > Then click "binaries" and "win32" to discover that the obsolete > Windows binaries for 2.2.0 are missing. Only 2.2.2, 2.2.4, and 2.2.6 > are listed. > > Alexander's URL is for current releases. There have been too many > changes since 2.2.0 for any sane person to recommend or facilitate > installing it. The security page lists seven holes affecting 2.2.0. > http://httpd.apache.org/security/vulnerabilities_22.html > > Sorry, > solprovider > > On 10/18/07, Alexander Fortin <[EMAIL PROTECTED]> wrote: > > Ashwani Kumar Sharma wrote: > > > I want to download binary for apache 2.2.0 for windows urgently. I am not > > > finding it on apache.org > > http://apache.planetmirror.com.au/dist/httpd/binaries/win32/ > > Alexander Fortin - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] " from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [EMAIL PROTECTED] rewrite or proxypass?
Why not put the homepage/login page on port 80 and proxy the POST to Tomcat? Or are dynamic elements on the login page? If everything will be served by Tomcat, why not run tomcat on port 80? If you are using virtual servers, you should already have configured the proxy. solprovider On 10/17/07, Patrick Coleman <[EMAIL PROTECTED]> wrote: > I don't exactly know if this is a rewrite or proxypass or something > else type of thing so > I was hoping someone could help. > I have a Tomcat app running on port 8080 > I can get to it through > http://www.example.com:8080 > > it goes to a login page and the URL displays > http://www.example.com:8080/login > > I would like to be able to just put in > http://www.example.com > and get > http://www.example.com/login > > Thanks. > Pat - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] " from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: [EMAIL PROTECTED] Apache 2.2.0 binary download
Yeah that's true, There are no binaries for apache 2.2.0 on that url. I have downloaded the source code for same from http://archive.apache.org/dist/httpd/ I am facing some build problems. Is it true that apache 2.2.0 is not a stable version. Please suggest me the stable version for apache. Thanks and Regards, Ashwani Sharma Mob: 09916454843 Off: +91-80-26265053 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Thursday, October 18, 2007 11:45 AM To: users@httpd.apache.org Subject: Re: [EMAIL PROTECTED] Apache 2.2.0 binary download I could not find Windows binaries for 2.2.0 on the Web. If you MUST use that version, you MUST compile. For old versions, go to the Downloads page and click the "archive download site" link in the second paragraph for: http://archive.apache.org/dist/httpd/ Then click "binaries" and "win32" to discover that the obsolete Windows binaries for 2.2.0 are missing. Only 2.2.2, 2.2.4, and 2.2.6 are listed. Alexander's URL is for current releases. There have been too many changes since 2.2.0 for any sane person to recommend or facilitate installing it. The security page lists seven holes affecting 2.2.0. http://httpd.apache.org/security/vulnerabilities_22.html Sorry, solprovider On 10/18/07, Alexander Fortin <[EMAIL PROTECTED]> wrote: > Ashwani Kumar Sharma wrote: > > I want to download binary for apache 2.2.0 for windows urgently. I am not > > finding it on apache.org > http://apache.planetmirror.com.au/dist/httpd/binaries/win32/ > Alexander Fortin - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] " from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] DISCLAIMER: This message (including attachment if any) is confidential and may be privileged. If you have received this message by mistake please notify the sender by return e-mail and delete this message from your system. Any unauthorized use or dissemination of this message in whole or in part is strictly prohibited. E-mail may contain viruses. Before opening attachments please check them for viruses and defects. While MindTree Consulting Limited (MindTree) has put in place checks to minimize the risks, MindTree will not be responsible for any viruses or defects or any forwarded attachments emanating either from within MindTree or outside. Please note that e-mails are susceptible to change and MindTree shall not be liable for any improper, untimely or incomplete transmission. MindTree reserves the right to monitor and review the content of all messages sent to or from MindTree e-mail address. Messages sent to or from this e-mail address may be stored on the MindTree e-mail system or else where. - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] " from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [EMAIL PROTECTED] rewrite or proxypass?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hello Patrick, Patrick Coleman schrieb: > I have a Tomcat app running on port 8080 > > I can get to it through > > http://www.ourcompany.com:8080 > > it goes to a login page and the URL displays > > http://www.ourcompany.com:8080/login > > I would like to be able to just put in > > http://www.ourcompany.com > > and get > > http://www.ourcompany.com/login > > Could anyone help me with this? You have to use mod_proxy and those two lines to your conf: ProxyPass / http://www.ourcompany.com:8080/ ProxyPassReverse / http://www.ourcompany.com:8080/ Best regards, Robert - -- Robert JäschkeTel: +49-(0)561-804-6253 Universität Kassel E-Mail: [EMAIL PROTECTED] Wilhelmshöher Allee 73WWW: http://www.kde.cs.uni-kassel.de 34121 Kassel >> http://www.bibsonomy.org <<< -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.6 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFHFvo7KNvjYNceXPwRAo/KAJ4pLwHL+mm433wYMJs1xI4ycuc+SQCgpziv F0DC5aeMQC9liPUZNam+Lvs= =hv1A -END PGP SIGNATURE- - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] " from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [EMAIL PROTECTED] Apache 2.2.0 binary download
I could not find Windows binaries for 2.2.0 on the Web. If you MUST use that version, you MUST compile. For old versions, go to the Downloads page and click the "archive download site" link in the second paragraph for: http://archive.apache.org/dist/httpd/ Then click "binaries" and "win32" to discover that the obsolete Windows binaries for 2.2.0 are missing. Only 2.2.2, 2.2.4, and 2.2.6 are listed. Alexander's URL is for current releases. There have been too many changes since 2.2.0 for any sane person to recommend or facilitate installing it. The security page lists seven holes affecting 2.2.0. http://httpd.apache.org/security/vulnerabilities_22.html Sorry, solprovider On 10/18/07, Alexander Fortin <[EMAIL PROTECTED]> wrote: > Ashwani Kumar Sharma wrote: > > I want to download binary for apache 2.2.0 for windows urgently. I am not > > finding it on apache.org > http://apache.planetmirror.com.au/dist/httpd/binaries/win32/ > Alexander Fortin - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] " from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: [EMAIL PROTECTED] rewrite or proxypass?
Could it possibly be this simple?? You probably want to have two virtual hosts, one for port 80 and one for port 8080. In the former, add the following lines: ProxyRequests Off ProxyPass http://www.ourcompany.com/ http://www.ourcompany.com:8080/ ProxyPassReverse http://www.ourcompany.com/ http://www.ourcompany.com:8080/ Refer to the mod_proxy documentation for more details. -ascs -Message d'origine- De : Patrick Coleman [mailto:[EMAIL PROTECTED] Envoyé : jeudi 18 octobre 2007 00:29 À : users@httpd.apache.org Objet : [EMAIL PROTECTED] rewrite or proxypass? Hi, I don't exactly know if this is a rewrite or proxypass or something else type of thing so I was hoping someone could help. I have a Tomcat app running on port 8080 I can get to it through http://www.ourcompany.com:8080 it goes to a login page and the URL displays http://www.ourcompany.com:8080/login I would like to be able to just put in http://www.ourcompany.com and get http://www.ourcompany.com/login Could anyone help me with this? Thanks. Pat. - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] " from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] " from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [EMAIL PROTECTED] Apache 2.2.0 binary download
Ashwani Kumar Sharma wrote: Hi All, I want to download binary for apache 2.2.0 for windows urgently. I am not finding it on apache.org Please guide me. http://apache.planetmirror.com.au/dist/httpd/binaries/win32/ -- Alexander Fortin IT Consultant Informed Technology E-mail: [EMAIL PROTECTED] Ph: 08 9460 4888 Fax: 08 9460 4877 - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] " from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
[EMAIL PROTECTED] Apache 2.2.0 binary download
Hi All, I want to download binary for apache 2.2.0 for windows urgently. I am not finding it on apache.org Please guide me. Thanks and Regards, Ashwani Sharma Mob: 09916454843 Off: +91-80-26265053 -Original Message- From: Alexander Fortin [mailto:[EMAIL PROTECTED] Sent: Thursday, October 18, 2007 9:40 AM To: users@httpd.apache.org Subject: Re: [EMAIL PROTECTED] mod_authnz_ldap and SSL Eric Covener wrote: > On 10/17/07, Alexander Fortin <[EMAIL PROTECTED]> wrote: >> >> LDAPTrustedGlobalCert CA_BASE64 /etc/ssl/certs/cacert.pem >> LDAPTrustedMode SSL >> LDAPVerifyServerCert off >> > > Wireshark will format the initial stages of the handshake pretty > nicely, you might see something fishy or a plaintext SSL Alert. > > Can openssl handshake w/ the ldap server? Is its cert issued by that > cacert.pem? Can openssl validate the cert chain when you give it that > same cacert.pem? > Yes, openssl looks fine to me. Or at least from the console: # openssl s_client -connect myldapserver:636 -CAfile /etc/ssl/certs/cacert.pem CONNECTED(0003) --- Certificate chain 0 s:/C=AU/ST=Western Australia/L=myplace/O=mycompany Pty Ltd/OU=Internet Services/CN=myldapserver/[EMAIL PROTECTED] i:/C=AU/ST=Western Australia/L=myplace/O=mycompany Pty Ltd/OU=Internet Services/CN=Security Administration/[EMAIL PROTECTED] 1 s:/C=AU/ST=Western Australia/L=myplace/O=mycompany Pty Ltd/OU=Internet Services/CN=Security Administration/[EMAIL PROTECTED] i:/C=AU/ST=Western Australia/L=myplace/O=mycompany Pty Ltd/OU=Internet Services/CN=Security Administration/[EMAIL PROTECTED] --- Server certificate -BEGIN CERTIFICATE- MIIEXjCCA8egAwIBAgIBAzANBgkqhkiG9w0BAQQFADCByjELMAkGA1UEBhMCQVUx [...] -END CERTIFICATE- subject=/C=AU/ST=Western Australia/L=myplace/O=mycompany Pty Ltd/OU=Internet services/CN=myldpaserver/[EMAIL PROTECTED] issuer=/C=AU/ST=Western Australia/L=myplace/O=mycompany Pty Ltd/OU=Internet Services/CN=Security Administration/[EMAIL PROTECTED] --- No client certificate CA names sent --- SSL handshake has read 2364 bytes and written 308 bytes --- New, TLSv1/SSLv3, Cipher is DES-CBC3-SHA Server public key is 1024 bit Compression: NONE Expansion: NONE SSL-Session: Protocol : TLSv1 Cipher: DES-CBC3-SHA Session-ID: 6BE2EE5A88866AB4D8303ECBB0BD1CA5DD905E3EC5DDBA9A3A1D0652EB3B6829 Session-ID-ctx: Master-Key: 0454B3AF0B372ED6B530FA25C57DC3E34049A58125EBC99A25B674D9545BE7322D536273C654C 53CE9C58DDE410A8A7C Key-Arg : None Start Time: 1192679978 Timeout : 300 (sec) Verify return code: 0 (ok) --- -- Alexander Fortin IT Consultant Informed Technology Pty Ltd E-mail: [EMAIL PROTECTED] Ph: 08 9460 4888 Fax: 08 9460 4877 - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] " from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] DISCLAIMER: This message (including attachment if any) is confidential and may be privileged. If you have received this message by mistake please notify the sender by return e-mail and delete this message from your system. Any unauthorized use or dissemination of this message in whole or in part is strictly prohibited. E-mail may contain viruses. Before opening attachments please check them for viruses and defects. While MindTree Consulting Limited (MindTree) has put in place checks to minimize the risks, MindTree will not be responsible for any viruses or defects or any forwarded attachments emanating either from within MindTree or outside. Please note that e-mails are susceptible to change and MindTree shall not be liable for any improper, untimely or incomplete transmission. MindTree reserves the right to monitor and review the content of all messages sent to or from MindTree e-mail address. Messages sent to or from this e-mail address may be stored on the MindTree e-mail system or else where. - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] " from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [EMAIL PROTECTED] mod_authnz_ldap and SSL
Eric Covener wrote: On 10/17/07, Alexander Fortin <[EMAIL PROTECTED]> wrote: LDAPTrustedGlobalCert CA_BASE64 /etc/ssl/certs/cacert.pem LDAPTrustedMode SSL LDAPVerifyServerCert off Wireshark will format the initial stages of the handshake pretty nicely, you might see something fishy or a plaintext SSL Alert. Can openssl handshake w/ the ldap server? Is its cert issued by that cacert.pem? Can openssl validate the cert chain when you give it that same cacert.pem? Yes, openssl looks fine to me. Or at least from the console: # openssl s_client -connect myldapserver:636 -CAfile /etc/ssl/certs/cacert.pem CONNECTED(0003) --- Certificate chain 0 s:/C=AU/ST=Western Australia/L=myplace/O=mycompany Pty Ltd/OU=Internet Services/CN=myldapserver/[EMAIL PROTECTED] i:/C=AU/ST=Western Australia/L=myplace/O=mycompany Pty Ltd/OU=Internet Services/CN=Security Administration/[EMAIL PROTECTED] 1 s:/C=AU/ST=Western Australia/L=myplace/O=mycompany Pty Ltd/OU=Internet Services/CN=Security Administration/[EMAIL PROTECTED] i:/C=AU/ST=Western Australia/L=myplace/O=mycompany Pty Ltd/OU=Internet Services/CN=Security Administration/[EMAIL PROTECTED] --- Server certificate -BEGIN CERTIFICATE- MIIEXjCCA8egAwIBAgIBAzANBgkqhkiG9w0BAQQFADCByjELMAkGA1UEBhMCQVUx [...] -END CERTIFICATE- subject=/C=AU/ST=Western Australia/L=myplace/O=mycompany Pty Ltd/OU=Internet services/CN=myldpaserver/[EMAIL PROTECTED] issuer=/C=AU/ST=Western Australia/L=myplace/O=mycompany Pty Ltd/OU=Internet Services/CN=Security Administration/[EMAIL PROTECTED] --- No client certificate CA names sent --- SSL handshake has read 2364 bytes and written 308 bytes --- New, TLSv1/SSLv3, Cipher is DES-CBC3-SHA Server public key is 1024 bit Compression: NONE Expansion: NONE SSL-Session: Protocol : TLSv1 Cipher: DES-CBC3-SHA Session-ID: 6BE2EE5A88866AB4D8303ECBB0BD1CA5DD905E3EC5DDBA9A3A1D0652EB3B6829 Session-ID-ctx: Master-Key: 0454B3AF0B372ED6B530FA25C57DC3E34049A58125EBC99A25B674D9545BE7322D536273C654C53CE9C58DDE410A8A7C Key-Arg : None Start Time: 1192679978 Timeout : 300 (sec) Verify return code: 0 (ok) --- -- Alexander Fortin IT Consultant Informed Technology Pty Ltd E-mail: [EMAIL PROTECTED] Ph: 08 9460 4888 Fax: 08 9460 4877 - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] " from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: [EMAIL PROTECTED] http to https redirection with an exception
> Date: Wed, 17 Oct 2007 16:03:38 +0200 > From: [EMAIL PROTECTED] > > If your apache was compiled with DSO support you don't need to > recompile it. You can just compile mod_rewrite and load it in your > config. > Hello, How to do it? can you show me a document reference? Actually we also have some Apaches which were built with DSO support,but without mod_rewrite enabled. If I want to compile and install mod_rewrite separately without re-compiling Apache,how to do it? thanks! _ Connect to the next generation of MSN Messenger http://imagine-msn.com/messenger/launch80/default.aspx?locale=en-us&source=wlmailtagline - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] " from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [EMAIL PROTECTED] 100-continue response when 401 expected - Apache 2.2.26
On 10/17/07, Nick Kew <[EMAIL PROTECTED]> wrote: > Can I suggest your best course of action now is to enter it into > our bugzilla at http://issues.apache.org/ ? I *think* the root > cause of this is related to bugs 16518 and 19442 and an old/ > incorrect fix to them (see Comment 14 on bug 16518). But your > bug is clearly not the same as those, and needs a new report. > Thanks a lot for your patience and help on this issue. I will enter this in the bug database. Ragini - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] " from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
[EMAIL PROTECTED] Rlimitcpu + Cpu Usage Information
Hello, Pertaining to apache 2.2.x branch. Is there a way to determine how much cpu / memory each virtual host is using (much like you can determine bandwidth with mod_logio)?.. Also, with rlimitcpu and the other rlimit commands, according to the documentation : Context:server config, virtual host, directory, .htaccess If this is set in the virtualhost area of the httpd.conf, can the user override it in an .htaccess file if allowoverride all is on? And.. if so.. is there a way to do a reverse list for allowoverride.. such as.. allowoverride all -rlimitcpu (I know that isn't valid, but I hope you get the idea). Thanks. - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] " from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
[EMAIL PROTECTED] rewrite or proxypass?
Hi, I don't exactly know if this is a rewrite or proxypass or something else type of thing so I was hoping someone could help. I have a Tomcat app running on port 8080 I can get to it through http://www.ourcompany.com:8080 it goes to a login page and the URL displays http://www.ourcompany.com:8080/login I would like to be able to just put in http://www.ourcompany.com and get http://www.ourcompany.com/login Could anyone help me with this? Thanks. Pat. - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] " from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
[EMAIL PROTECTED] Apache 2.0.50 crash on libapr!apr_palloc
Hello, I'm running httpd 2.0.50 on a production system. Every couple of days I receive a crash, the most recent of which is listed below. I believe this is related to allocating memory. I'm unable to upgrade the production Apache to test whether a later version resolves this issue. Also, I'm unable to reproduce the problem outside of the production environment (don't have accurate load tests). I reviewed the change logs and did not see anything specifically related to this on the 2.0 line after 2.0.50, so I don't see a clear reason to upgrade yet. I have about 300-600 threads to the webserver at a given time, and I've seen the Apache.exe process report 1GB memory use in Windows tasklist. I'm running Windows Server 2003. Any ideas on how to resolve the issue? Or any rationale as to why an upgrade would have a good chance of resolving this type of issue? The following is from drwatsn32.log and is the section that reports the fault (there is much more to the log but this is the fault section)... *> State Dump for Thread Id 0x2988 <* eax=0010 ebx=6eec7670 ecx=77bbcefb edx= esi=07af2200 edi=07af221c eip=6eec767c esp=0efbff28 ebp=71c06eb4 iopl=0nv up ei pl nz ac pe cy cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=efl=00010213 function: libapr!apr_palloc 6eec766d 90 nop 6eec766e 90 nop 6eec766f 90 nop libapr!apr_palloc: 6eec7670 51 pushecx 6eec7671 8b542408movedx,[esp+0x8] 6eec7675 8b44240cmoveax,[esp+0xc] 6eec7679 53 pushebx 6eec767a 55 pushebp 6eec767b 56 pushesi FAULT ->6eec767c 8b7228 movesi,[edx+0x28] ds:0023:0028= 6eec767f 8d5807 leaebx,[eax+0x7] 6eec7682 57 pushedi 6eec7683 8b4610 moveax,[esi+0x10] 6eec7686 8b4e14 movecx,[esi+0x14] 6eec7689 83e3f8 andebx,0xfff8 6eec768c 2bc8subecx,eax 6eec768e 3bd9cmpebx,ecx 6eec7690 895c241cmov[esp+0x1c],ebx 6eec7694 730ejnblibapr!apr_palloc+0x34 (6eec76a4) 6eec7696 8d1418 leaedx,[eax+ebx] More information about the environment: Application exception occurred: App: E:\Apache\Apache2\bin\Apache.exe (pid=10920) When: 04/10/2007 @ 07:42:46.388 Exception number: c005 (access violation) *> System Information <* Computer Name: FALCON User Name: SYSTEM Terminal Session Id: 0 Number of Processors: 4 Processor Type: x86 Family 15 Model 2 Stepping 6 Windows Version: 5.2 Current Build: 3790 Service Pack: 1 Current Type: Multiprocessor Free *> Task List <* 0 System Process 4 System 1028 smss.exe 1116 csrss.exe 1160 winlogon.exe 1204 services.exe 1216 lsass.exe 1408 svchost.exe 2016 svchost.exe 364 svchost.exe 456 svchost.exe 488 svchost.exe 848 spoolsv.exe 976 AXL300.exe 988 vcagent.exe 1016 etagent.exe 1088 hpdiags.exe 1340 FrameworkService.exe 328 Mcshield.exe 1524 VsTskMgr.exe 1648 svchost.exe 1684 snmp.exe 9428 beremote.exe 9476 cpqnimgt.exe 9500 CpqRcmc.exe 9516 cqmgserv.exe 9536 cqmgstor.exe 9552 sysdown.exe 9828 cqmghost.exe 9864 cpqwmgmt.exe 9744 svchost.exe 10104 wmiprvse.exe 11744 wmiprvse.exe 10660 Apache.exe 7196 csrss.exe 7852 winlogon.exe 8436 Explorer.EXE 6148 cpqteam.exe 10604 SHSTAT.EXE 11328 UpdaterUI.exe 10848 TBMon.exe 9164 ctfmon.exe 5400 ApacheMonitor.exe 8008 cmd.exe 6820 naPrdMgr.exe 3808 uptmagnt.exe 15816 wrapper.exe 14648 java.exe 10920 Apache.exe 6752 drwtsn32.exe *> Module List <* 0040 - 00405000: E:\Apache\Apache2\bin\Apache.exe 006a - 00771000: E:\Apache\Apache2\bin\LIBEAY32.dll 0078 - 007a2000: E:\Apache\Apache2\modules\mod_jk2.so 1000 - 10027000: E:\Apache\Apache2\bin\SSLEAY32.dll 5f27 - 5f2c9000: C:\WINDOWS\system32\hnetcfg.dll 6800 - 6802f000: C:\WINDOWS\system32\rsaenh.dll 6ee5 - 6ee59000: E:\Apache\Apache2\bin\libapriconv.dll 6ee6 - 6ee89000: E:\Apache\Apache2\bin\libaprutil.dll 6eec - 6eee: E:\Apache\Apache2\bin\libapr.dll 6fba - 6fbae000: E:\Apache\Apache2\modules\mod_deflate.so 6fc0 - 6fc06000: E:\Apache\Apache2\modules\mod_setenvif.so 6fc3 - 6fc37000: E:\Apache\Apache2\modules\mod_log_config.so 6fc7 - 6fc76000: E:\Apache\Apache2\modules\mod_env.so 6fcd - 6fcd6000: E:\Apache\Apache2\modules\mod_alias.so 6fd0 - 6fd2: E:\Apache\Apache2\modules\mod_ssl.so
[EMAIL PROTECTED] Apache w/ mod_ssl: Trouble authenticating Verisign Class 1 Individual Subscriber client certificates
Hi, Situation: We received 2 certificates from a client communicating trying to communicat with our server: 1) the client certificate - Issued by VeriSign Class 1 individual Subscriber CA - G2 2) the VeriSign Class 1 CA Certificate - Issued by Class 1 Public Primary Certification Authority I generated hashed symlinks for both these certificates in the folder specified by SSLCACertificatePath. I restarted my Apache server and my server fails to authenticate my client. What bothers me is that I have never encountered this issue whenever I've had to import in Class 3 VeriSign client certificates into Apache. Am I missing something in my Apache/mod_ssl configuration? Below are the details of our server setup as well as the error_log file of what is failing in mod_ssl. Machine Setup: Apache/1.3.37 (Linux) mod_jk/1.2.20 mod_ssl/2.8.28 OpenSSL/0.9.8d Our server performs client authentication with the following settings in our httpd.conf file: SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv3:+TLSv1:+SSLv2:+EXP:+eNULL SSLOptions +StdEnvVars +ExportCertData SSLVerifyClient require SSLVerifyDepth 4 SSLCACertificatePath -> path to a folder containing hashed symlinks of our client CA certs SSLCARevocationPath -> path to a folder containing hashed symlinks of our client CA CRLs Apache error_log: [Fri Oct 12 17:42:04 2007] [error] mod_ssl: Certificate Verification: Error (20): unable to get local issuer certificate [Fri Oct 12 17:42:04 2007] [error] mod_ssl: Re-negotiation handshake failed: Not accepted by client!? [Fri Oct 12 17:42:04 2007] [error] mod_ssl: Certificate Verification: Error (20): unable to get local issuer certificate [Fri Oct 12 17:42:04 2007] [error] mod_ssl: SSL error on writing data (OpenSSL library error follows) [Fri Oct 12 17:42:04 2007] [error] OpenSSL: error:140890B2:SSL routines:SSL3_GET_CLIENT_CERTIFICATE:no certificate returned Thanks in advance for any help that can be provided. Howard Wong Intermediate Software Developer The SPi Group Inc. Enabling Energy Markets [EMAIL PROTECTED] Tel: 416.408.1395 ext. 264 Fax: 416.408.1396 154 University Avenue, Suite 300, Toronto, ON, Canada, M5H 3Y9 www.thespigroup.com ___ This e-mail message is intended only for the person(s) named above and may contain confidential or privileged information. If you are not the person named or have received this message in error, please notify the sender immediately and delete this e-mail and any attachments without reading, saving, or forwarding. ___ - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] " from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
[EMAIL PROTECTED] svn access via apache with ntlm authentication
My setup : Debian Etch i386 httpd-2.0.61 configured with the following command "./configure --prefix=/opt/httpd-2.0.61 --with-mpm=worker --enable-so --enable-dav=shared --enable-unique-id=shared --enable-version=shared --enable-ssl=shared --enable-info=shared --enable-cgi=shared --enable-rewrite=shared --enable-cache=shared -- enable-disk-cache=shared --enable-deflate=shared" subversion-1.4.5 configured with the following "./configure --prefix=/opt/subversion-1.4.5 --with-apr=/opt/ httpd-2.0.61 --with-apr-util=/opt/httpd-2.0.61 --with-apxs=/opt/ httpd-2.0.61/bin/apxs" mod_auth_ntlm_winbind AFAIK the latest version compiled with "/opt/httpd-2.0.61/bin/apxs -DAPACHE2 -c -i mod_auth_ntlm_winbind.c" Now, AFAIT everything is working well... separately ! Apache serves documents, svn works for anonymous access with the following config : DAV svn SVNPath /mnt/data/rep/svn I can check out projects from the repository Then I've tested the NTLM authentication with Alias /ntlmtest/ "/mnt/data/docuwiki/" AuthName "NTLM Authentication" NTLMAuth on NTLMAuthHelper "/usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp" NTLMBasicAuthoritative on AuthType NTLM require valid-user This works just fine, the browser prompts for the username and password, and ntlm authenticates against our PDC Now my problem is with the svn + NTLM combination If I have in my httpd.conf DAV svn SVNPath /mnt/data/rep/svn AuthName "NTLM Authentication" AuthType NTLM NTLMAuth on NTLMBasicAuthoritative on NTLMAuthHelper "/usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp" require valid-user and I do "svn co http://svnhost/svn/repos/test"; , it seems to me that the apache server doesn't even bother calling the ntlm_winbind module for authentication... There are no logs or any trace of related messages and all I get is svn: PROPFIND request failed on '/svn/repos/test' svn: PROPFIND of '/svn/repos/test': authorization failed (http:// svnhost) at the client side. Any ideas ? Thomas - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] " from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [EMAIL PROTECTED] MySQL Related problem
Sorry, I have not yet tried it. But I definitely will try it in the future ;) Because it has a very interesting set of features. Regards, Smay Marc Perkel schrieb: Have you actually tried this? Do you have sample scripts? Is there any one who has tried MySQL Proxy and made it work? Samuel Vogel wrote: You should probably take a look at MySQL Proxy: http://dev.mysql.com/tech-resources/articles/proxy-gettingstarted.html It can do exactly what you want and much more ;) Regards, Samy Marc Perkel schrieb: Hi Everyone, I'm hosting a lot of domains for a lot of people who have a lot of MySQL applications that they installed and almost all are configured to talk to MySQL on "localhost". In order to spread the load I'm trying to move the MySQL server to another machine. Since everything is configured for localhost I figured all I had to do was move the database to the new server, shut down the existing MySQL server, and set up an SSH tunnel so that all the MyDQL call on the original server would pipe to the new server. But that doesn't work. The problem is that PHP/MySQL apps configured for localhost insiste on talking to the socket located at /var/lib/mysql/mysql.sock instead of 127.0.0.1. In the MySQL world, localhost != 127.0.0.1. I tried using the pipe and socat on the socket but socat wasn't reliable and quit working for reasons I don't understand. So I'm wondering how to make it work. Has anyone managed to get this to work? I'm also thinking about this. Could I mount the new MySQL server using NFS so that /var/lib/mysql/mysql.sock is on the new MySQL server and calls to that socket would go to the new server. Will that work? Thanks in advance. - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] " from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] " from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] " from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] " from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [EMAIL PROTECTED] MySQL Related problem
Have you actually tried this? Do you have sample scripts? Is there any one who has tried MySQL Proxy and made it work? Samuel Vogel wrote: You should probably take a look at MySQL Proxy: http://dev.mysql.com/tech-resources/articles/proxy-gettingstarted.html It can do exactly what you want and much more ;) Regards, Samy Marc Perkel schrieb: Hi Everyone, I'm hosting a lot of domains for a lot of people who have a lot of MySQL applications that they installed and almost all are configured to talk to MySQL on "localhost". In order to spread the load I'm trying to move the MySQL server to another machine. Since everything is configured for localhost I figured all I had to do was move the database to the new server, shut down the existing MySQL server, and set up an SSH tunnel so that all the MyDQL call on the original server would pipe to the new server. But that doesn't work. The problem is that PHP/MySQL apps configured for localhost insiste on talking to the socket located at /var/lib/mysql/mysql.sock instead of 127.0.0.1. In the MySQL world, localhost != 127.0.0.1. I tried using the pipe and socat on the socket but socat wasn't reliable and quit working for reasons I don't understand. So I'm wondering how to make it work. Has anyone managed to get this to work? I'm also thinking about this. Could I mount the new MySQL server using NFS so that /var/lib/mysql/mysql.sock is on the new MySQL server and calls to that socket would go to the new server. Will that work? Thanks in advance. - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] " from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] " from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] " from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: [EMAIL PROTECTED] dual apache2 proxyERRORS issue
Hello, The ?? are in response to the question are they excepting requests from the backend server and that is a question we posed to them and have not heard anything back. Thank you for the test breakdown I will use this in the future simple but straight forward I like it. Thanks, Dan -Original Message- From: Krist van Besien [mailto:[EMAIL PROTECTED] Sent: Wednesday, October 17, 2007 8:54 AM To: users@httpd.apache.org Subject: Re: [EMAIL PROTECTED] dual apache2 proxyERRORS issue On 10/17/07, Shaw, Dan <[EMAIL PROTECTED]> wrote: > This is a reverse proxy Ok. I asumed so much. > > That is a questioned we have not got an answer to yet. ?? > Is there a way to test to the end points via the proxy(s) > To ensure the proxy part is working? > > We did setup a test for an internal server in which we know it accepts > connections and what the end URL is and it works Usually I first make sure everything works without the proxy. Then I test that everything works from the proxy itself, ie. I start a browser on the machine that my reverse proxy will run on, and make sure that I can access everything. The errors I see in your logfiles seem to indicate that the machine your are proxying is for some reason not accepting requests from the proxy machine. You ought to also look in the logfiles of that machine. Krist -- [EMAIL PROTECTED] [EMAIL PROTECTED] Bremgarten b. Bern, Switzerland -- A: It reverses the normal flow of conversation. Q: What's wrong with top-posting? A: Top-posting. Q: What's the biggest scourge on plain text email discussions? - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] " from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] " from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [EMAIL PROTECTED] MySQL Related problem
You should probably take a look at MySQL Proxy: http://dev.mysql.com/tech-resources/articles/proxy-gettingstarted.html It can do exactly what you want and much more ;) Regards, Samy Marc Perkel schrieb: Hi Everyone, I'm hosting a lot of domains for a lot of people who have a lot of MySQL applications that they installed and almost all are configured to talk to MySQL on "localhost". In order to spread the load I'm trying to move the MySQL server to another machine. Since everything is configured for localhost I figured all I had to do was move the database to the new server, shut down the existing MySQL server, and set up an SSH tunnel so that all the MyDQL call on the original server would pipe to the new server. But that doesn't work. The problem is that PHP/MySQL apps configured for localhost insiste on talking to the socket located at /var/lib/mysql/mysql.sock instead of 127.0.0.1. In the MySQL world, localhost != 127.0.0.1. I tried using the pipe and socat on the socket but socat wasn't reliable and quit working for reasons I don't understand. So I'm wondering how to make it work. Has anyone managed to get this to work? I'm also thinking about this. Could I mount the new MySQL server using NFS so that /var/lib/mysql/mysql.sock is on the new MySQL server and calls to that socket would go to the new server. Will that work? Thanks in advance. - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] " from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] " from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
[EMAIL PROTECTED] RE: [SPAM] - [EMAIL PROTECTED] MySQL Related problem - Email found in subject
Hi, You can edit /etc/hosts and redirect localhost to the new DB IP and create a hostname for your client1 like client1db to IP and ask them to migrate.. from localhost to clientdb.. Hth, -Original Message- From: Marc Perkel [mailto:[EMAIL PROTECTED] Sent: Wednesday, October 17, 2007 1:37 PM To: users@httpd.apache.org Subject: [SPAM] - [EMAIL PROTECTED] MySQL Related problem - Email found in subject Hi Everyone, I'm hosting a lot of domains for a lot of people who have a lot of MySQL applications that they installed and almost all are configured to talk to MySQL on "localhost". In order to spread the load I'm trying to move the MySQL server to another machine. Since everything is configured for localhost I figured all I had to do was move the database to the new server, shut down the existing MySQL server, and set up an SSH tunnel so that all the MyDQL call on the original server would pipe to the new server. But that doesn't work. The problem is that PHP/MySQL apps configured for localhost insiste on talking to the socket located at /var/lib/mysql/mysql.sock instead of 127.0.0.1. In the MySQL world, localhost != 127.0.0.1. I tried using the pipe and socat on the socket but socat wasn't reliable and quit working for reasons I don't understand. So I'm wondering how to make it work. Has anyone managed to get this to work? I'm also thinking about this. Could I mount the new MySQL server using NFS so that /var/lib/mysql/mysql.sock is on the new MySQL server and calls to that socket would go to the new server. Will that work? Thanks in advance. - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] " from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] This message and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom it is addressed. It may contain sensitive and private proprietary or legally privileged information. No confidentiality or privilege is waived or lost by any mistransmission. If you are not the intended recipient, please immediately delete it and all copies of it from your system, destroy any hard copies of it and notify the sender. You must not, directly or indirectly, use, disclose, distribute, print, or copy any part of this message if you are not the intended recipient. FXDirectDealer, LLC reserves the right to monitor all e-mail communications through its networks. Any views expressed in this message are those of the individual sender, except where the message states otherwise and the sender is authorized to state them. Unless otherwise stated, any pricing information given in this message is indicative only, is subject to change and does not constitute an offer to deal at any price quoted. Any reference to the terms of executed transactions should be treated as preliminary only and subject to our formal confirmation. FXDirectDealer, LLC is not responsible for any recommendation, solicitation, offer or agreement or any information about any transaction, customer account or account activity contained in this communication. - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] " from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
[EMAIL PROTECTED] MySQL Related problem
Hi Everyone, I'm hosting a lot of domains for a lot of people who have a lot of MySQL applications that they installed and almost all are configured to talk to MySQL on "localhost". In order to spread the load I'm trying to move the MySQL server to another machine. Since everything is configured for localhost I figured all I had to do was move the database to the new server, shut down the existing MySQL server, and set up an SSH tunnel so that all the MyDQL call on the original server would pipe to the new server. But that doesn't work. The problem is that PHP/MySQL apps configured for localhost insiste on talking to the socket located at /var/lib/mysql/mysql.sock instead of 127.0.0.1. In the MySQL world, localhost != 127.0.0.1. I tried using the pipe and socat on the socket but socat wasn't reliable and quit working for reasons I don't understand. So I'm wondering how to make it work. Has anyone managed to get this to work? I'm also thinking about this. Could I mount the new MySQL server using NFS so that /var/lib/mysql/mysql.sock is on the new MySQL server and calls to that socket would go to the new server. Will that work? Thanks in advance. - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] " from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [EMAIL PROTECTED] mod_authnz_ldap and SSL
On 10/17/07, Alexander Fortin <[EMAIL PROTECTED]> wrote: > > > LDAPTrustedGlobalCert CA_BASE64 /etc/ssl/certs/cacert.pem > LDAPTrustedMode SSL > LDAPVerifyServerCert off > Wireshark will format the initial stages of the handshake pretty nicely, you might see something fishy or a plaintext SSL Alert. Can openssl handshake w/ the ldap server? Is its cert issued by that cacert.pem? Can openssl validate the cert chain when you give it that same cacert.pem? -- Eric Covener [EMAIL PROTECTED] - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] " from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: [EMAIL PROTECTED] SSL pass phrase
>Many Unixes (such as FreeBSD) allow you to chmod 000 a file and root can >still access and modify it. It works on my box anyway. > >-- >Aaron Dalton >http://perlkonig.com You can also use the '-nodes' switch when generating the private key. This however, leaves it unencrypted so you must be careful w/ permissions (make sure apache can read it). Hope this helps. lh.. http://www.trustix.org/ - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] " from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [EMAIL PROTECTED] dual apache2 proxyERRORS issue
On 10/17/07, Shaw, Dan <[EMAIL PROTECTED]> wrote: > This is a reverse proxy Ok. I asumed so much. > > That is a questioned we have not got an answer to yet. ?? > Is there a way to test to the end points via the proxy(s) > To ensure the proxy part is working? > > We did setup a test for an internal server in which we know it accepts > connections and what the end URL is and it works Usually I first make sure everything works without the proxy. Then I test that everything works from the proxy itself, ie. I start a browser on the machine that my reverse proxy will run on, and make sure that I can access everything. The errors I see in your logfiles seem to indicate that the machine your are proxying is for some reason not accepting requests from the proxy machine. You ought to also look in the logfiles of that machine. Krist -- [EMAIL PROTECTED] [EMAIL PROTECTED] Bremgarten b. Bern, Switzerland -- A: It reverses the normal flow of conversation. Q: What's wrong with top-posting? A: Top-posting. Q: What's the biggest scourge on plain text email discussions? - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] " from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: [EMAIL PROTECTED] dual apache2 proxyERRORS issue
This is a reverse proxy That is a questioned we have not got an answer to yet. Is there a way to test to the end points via the proxy(s) To ensure the proxy part is working? We did setup a test for an internal server in which we know it accepts connections and what the end URL is and it works Daniel P. Shaw Triad Financial Pro-Tem Contractor [EMAIL PROTECTED] Ext: 25106 Ph: 714-799-5106 Start Date: 08-13-2007 -Original Message- From: Krist van Besien [mailto:[EMAIL PROTECTED] Sent: Wednesday, October 17, 2007 7:01 AM To: users@httpd.apache.org Subject: Re: [EMAIL PROTECTED] dual apache2 proxyERRORS issue Is this a forward or reverse proxy setup? Is server 10.20.5.107 accepting connections? On 10/16/07, Shaw, Dan <[EMAIL PROTECTED]> wrote: > > > > > We have two apache2 proxy servers that work well except for the latest > entry. > > Really need help on this one. > > See error and access log below. > > > > Access_Log > > 192.168.41.220 - - [16/Oct/2007:08:56:42 -0700] "GET /EloanWeb.aspx > HTTP/1.1" 502 315 > > 192.168.41.220 - - [16/Oct/2007:08:56:51 -0700] "GET / HTTP/1.1" 502 315 > > > > Error_log > > [Tue Oct 16 08:56:51 2007] [error] (146)Connection refused: proxy: HTTP: > attempt to connect to 10.20.5.107:80 (10. > > 20.5.107) failed > > > > > > > > Thanks, > > > > > > Daniel P. Shaw -- [EMAIL PROTECTED] [EMAIL PROTECTED] Bremgarten b. Bern, Switzerland -- A: It reverses the normal flow of conversation. Q: What's wrong with top-posting? A: Top-posting. Q: What's the biggest scourge on plain text email discussions? - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] " from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] " from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [EMAIL PROTECTED] AllowOverride PROBLEM
On 10/17/07, Javier Arancibia/NACION SEGUROS/AR <[EMAIL PROTECTED]> wrote: > > Apache Version: 2.2.4 > I have a problem with AuthConfig, if i use the directive "AllowOverride > AuthConfig" I can't see the protected directories in the browser, when I use > "AllowOverride None" I see all of the directories in the browser. > How to see all the directories and have "Autorization Required" in some > directories? I'm guessing your problem has nothing directly to do with "AllowOverride", but rather with seeing restricted directories in your mod_autoindex-generated directory listings. If so, you need to add ShowForbidden to your IndexOptions line. Joshua. - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] " from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
[EMAIL PROTECTED] AllowOverride PROBLEM
Apache Version: 2.2.4 I have a problem with AuthConfig, if i use the directive "AllowOverride AuthConfig" I can't see the protected directories in the browser, when I use "AllowOverride None" I see all of the directories in the browser. How to see all the directories and have "Autorization Required" in some directories? Thanks. Javier. My configuration: Options FollowSymLinks AllowOverride None Options Indexes Includes FollowSymLinks MultiViews AllowOverride AuthConfig Order allow,deny Allow from all
[EMAIL PROTECTED] passing authentication to tomcat pls help
I've installed keberos mod for apache. Instalation went ok, user is authenticated and I tested this using a small php file in which I printed out the headers and remoteuser prints out the username. I want to pass this to tomcat mod_jk so that in tomcat the getRemoteuser() will return the same username. As I know, if you add the attribute tomcatAuthentication="false" to the connector element in server.xml, the remote user will start coming through from Apache httpd. But, of course, mine says null. So on the apache it works but on tomcat if gives null even with the tomcatAuthentication =false. You might say this is a tomcat related issue but nobody on that list was able to give me a hand. Hope someone here can give me some kind of pointers. 10x in advance __ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] " from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [EMAIL PROTECTED] http to https redirection with an exception
On 10/16/07, ImageCity/Hirotsuna Mizuno <[EMAIL PROTECTED]> wrote: > joy d wrote: > > You can use mod_rewrite and define a RewriteCond for the except case. > > Thank you for your appropriate advice. > > Unfortunately, our Apache server was compiled without mod_rewrite, and > it's not allowed to re-compile it. If your apache was compiled with DSO support you don't need to recompile it. You can just compile mod_rewrite and load it in your config. Krist -- [EMAIL PROTECTED] [EMAIL PROTECTED] Bremgarten b. Bern, Switzerland -- A: It reverses the normal flow of conversation. Q: What's wrong with top-posting? A: Top-posting. Q: What's the biggest scourge on plain text email discussions? - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] " from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [EMAIL PROTECTED] dual apache2 proxyERRORS issue
Is this a forward or reverse proxy setup? Is server 10.20.5.107 accepting connections? On 10/16/07, Shaw, Dan <[EMAIL PROTECTED]> wrote: > > > > > We have two apache2 proxy servers that work well except for the latest > entry. > > Really need help on this one. > > See error and access log below. > > > > Access_Log > > 192.168.41.220 - - [16/Oct/2007:08:56:42 -0700] "GET /EloanWeb.aspx > HTTP/1.1" 502 315 > > 192.168.41.220 - - [16/Oct/2007:08:56:51 -0700] "GET / HTTP/1.1" 502 315 > > > > Error_log > > [Tue Oct 16 08:56:51 2007] [error] (146)Connection refused: proxy: HTTP: > attempt to connect to 10.20.5.107:80 (10. > > 20.5.107) failed > > > > > > > > Thanks, > > > > > > Daniel P. Shaw -- [EMAIL PROTECTED] [EMAIL PROTECTED] Bremgarten b. Bern, Switzerland -- A: It reverses the normal flow of conversation. Q: What's wrong with top-posting? A: Top-posting. Q: What's the biggest scourge on plain text email discussions? - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] " from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
[EMAIL PROTECTED] A problem of failover of mod_proxy_balancer
Hello, I used mod_proxy_balancer and tested failover. The composition is as follows. OS: CentOS 4.4 Java: jdk_1.5.0_11-b03 Apache(2.2.6) --+-- JBoss EAP(4.2.0) | +-- JBoss EAP(4.2.0) mod_proxy_balancer setting ProxyPass /lb/ balancer://lb/ timeout=5 maxattempts=3 BalancerMember ajp://ap1:8009/lb/ min=1 keepalive=on retry=300 BalancerMember ajp://ap2:8009/lb/ min=1 keepalive=on retry=300 When abnormality occurs to a backend server of one side while it takes load in a lot of threads, mod_proxy_balancer does not perform failover normally. Requests continue being performed by the backend server which there is abnormality. On account of this, throughput extremely turns worse. When the backend server of the one side is not switched on or when I pulled the LAN cable of the backend server of the one side, this phenomenon occurs. This phenomenon does not occur even if it takes high load when I stopped a JAVA process of JBoss. Failover is performed normally. Will this be a bug? -- Takashi Aoyagi E-mail: [EMAIL PROTECTED] -- - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] " from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [EMAIL PROTECTED] library path for external rewriting program for mod_rewrite
On Wed, 17 Oct 2007 14:34:40 +0200 Francoise Koenig-Jost <[EMAIL PROTECTED]> wrote: > > - I tried to add: > SetEnv LD_LIBRARY_PATH > "/www/httpd-2.2.6/lib:/usr/lib:/usr/local/lib" in apache > configuration file, it does not change anything. For an external script, you'll want PassEnv. Actually, if it's a RewriteMap, that may be different (haven't checked). Set the LD_LIBRARY_PATH in apachectl, too. > But since I don't like to mess up the system installation > directories, I'd like to know what I should do to set the > LD_LIBRARY_PATH for the python script. (remember, it works with > Apache 1.3.27). We've had a lot of security updates since Apache 1.3.27. -- Nick Kew Application Development with Apache - the Apache Modules Book http://www.apachetutor.org/ - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] " from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
[EMAIL PROTECTED] library path for external rewriting program for mod_rewrite
Dear All, I've been using for several months an external rewriting program for mod_rewrite in Apache 1.3.27 which is working as expected, now I want to upgrade to Apache 2.2.6 and I run into trouble when my program needs to open a library file not in /usr/lib. Here are the details of my installation: - Sun server under Solaris 10 - Apache 2.2.6 compiled with gcc 3.4.6 (gcc installed in /usr/local/bin , /usr/local/lib, etc.). Apache is installed in /www/httpd-2.2.6 with symbolic link /www/apache2 - External rewriting script in Python ( python 2.5.1 installed in /opt/Python-2.5.1 with symbolic link /opt/python, was also compiled with gcc), the script starts with the magical "#!/opt/python/bin/python". The script works stand-alone with the same LD_LIBRARY_PATH as the httpd daemon. - LD_LIBRARY_PATH of the httpd daemon : /www/httpd-2.2.6/lib:/usr/lib:/usr/local/lib:/usr/dt/lib:/usr/openwin/lib The problem: - The external rewriting script crashes with the following message in the error_log: Traceback (most recent call last): File "/www/apache2/conf/extra/query_string.py", line 11, in import sys, cgi, urllib File "/opt/Python-2.5.1/lib/python2.5/cgi.py", line 37, in from operator import attrgetter ImportError: ld.so.1: python: fatal: libgcc_s.so.1: open failed: No such file or directory - I modified the script to make it dump its environment variables in a file when it starts, it has none. - I tried to add: SetEnv LD_LIBRARY_PATH "/www/httpd-2.2.6/lib:/usr/lib:/usr/local/lib" in apache configuration file, it does not change anything. - If I copy /usr/local/lib/libgcc_s.so.1 in /usr/lib , everything works fine, the script is in the process list as: wwwextnew: # ps -ef|grep 29311 apache 29313 29311 0 13:41:03 ? 0:00 /www/httpd-2.2.6/bin/httpd -k start apache 29316 29311 0 13:41:03 ? 0:00 /www/httpd-2.2.6/bin/httpd -k start apache 29314 29311 0 13:41:03 ? 0:00 /www/httpd-2.2.6/bin/httpd -k start apache 29317 29311 0 13:41:03 ? 0:00 /www/httpd-2.2.6/bin/httpd -k start root 29312 29311 0 13:41:02 ? 0:00 /opt/python/bin/python /www/apache2/conf/extra/query_string.py apache 29315 29311 0 13:41:03 ? 0:00 /www/httpd-2.2.6/bin/httpd -k start root 29311 1 0 13:41:02 ? 0:00 /www/httpd-2.2.6/bin/httpd -k start wwwextnew: # But since I don't like to mess up the system installation directories, I'd like to know what I should do to set the LD_LIBRARY_PATH for the python script. (remember, it works with Apache 1.3.27). Remark: I have noticed that the process of the python script is directly started by httpd for Apache 2.2.6 : root 29312 29311 0 13:41:02 ? 0:00 /opt/python/bin/python /www/apache2/conf/extra/query_string.py apache 29315 29311 0 13:41:03 ? 0:00 /www/httpd-2.2.6/bin/httpd -k start root 29311 1 0 13:41:02 ? 0:00 /www/httpd-2.2.6/bin/httpd -k start but started by a shell for Apache 1.3.27 : root 6510 6509 0 14:22:17 ?0:00 /opt/python/bin/python /www/apache/conf/query_string.py root 6509 21261 0 14:22:17 ?0:00 /bin/sh -c /www/apache/conf/query_string.py apache 14192 21261 0 14:30:46 ?0:00 /www/apache_1.3.27/bin/httpd -DSSL apache 6527 21261 0 14:22:18 ?0:03 /www/apache_1.3.27/bin/httpd -DSSL root 21261 1 0 Sep 11 ?6:36 /www/apache_1.3.27/bin/httpd -DSSL Thanks in advance for your help and best regards, Francoise Koenig Web group - http://www.esrf.eu/ begin:vcard fn;quoted-printable:Fran=C3=A7oise K=C3=B6nig n;quoted-printable;quoted-printable:K=C3=B6nig;Fran=C3=A7oise org:ESRF;Computing Services - Web Group adr:BP 220;;6 rue Jules Horowitz;GRENOBLE;;38043;France email;internet:[EMAIL PROTECTED] tel;work:+33 (0)4 76 88 25 57 x-mozilla-html:TRUE url:http://www.esrf.eu/ version:2.1 end:vcard - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] " from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [EMAIL PROTECTED] Alias won't work within my httpd.conf
On 10/17/07, thomas Armstrong <[EMAIL PROTECTED]> wrote: ... > But if I access: > http://newweb.myproject.com/events/ > I get a 404 error. What error messages do you see in your error log? Krist -- [EMAIL PROTECTED] [EMAIL PROTECTED] Bremgarten b. Bern, Switzerland -- A: It reverses the normal flow of conversation. Q: What's wrong with top-posting? A: Top-posting. Q: What's the biggest scourge on plain text email discussions? - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] " from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
[EMAIL PROTECTED] Alias won't work within my httpd.conf
Hi. Using Apache 2.0 on Linux (with 'mod_alias' loaded), I want to set an Alias: /events/ --> /usr/www/myproject/newweb/modules/events/web/ This is part of my 'httpd.conf': ServerAdmin [EMAIL PROTECTED] DocumentRoot /usr/www/myproject/newweb/web ServerName newweb.myproject.com ServerAlias newweb.myproject.net newwebmyproject.foo.com CBandSpeed 2048 35 40 ScriptAlias /cgi-bin /usr/www/cgi-bin/newweb php_flag display_errors 0 php_flag display_startup_errors 1 php_admin_value safe_mode_include_dir /usr/www/myproject/newweb php_admin_value safe_mode_exec_dir /usr/www/cgi-bin/newweb ErrorLog /usr/www-logs/newweb-error_log CustomLog "|/usr/local/sbin/cronolog /usr/www-logs/newweb-access_log_%m-%y" combined #Events module Alias /events/ /usr/www/myproject/newweb/modules/events/web/ Options Indexes FollowSymLinks Order Allow,Deny Allow from all AllowOverride all DirectoryIndex index.php But if I access: http://newweb.myproject.com/events/ I get a 404 error. Any similar experience? Thank you very much. - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] " from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [EMAIL PROTECTED] Basic SSL question
On 10/15/07, Richard Bates <[EMAIL PROTECTED]> wrote: > I am trying to set up a server that has two(2) ssl sites. > > If I remember correctly, A long time ago Apache 1.3.9 > you could only do one SSL site on a server. > I downloaded Apache 2.2.6. > > > Has this changed? if so how do I do it. You can't do name based virtual SSL hosts. This is not a limitation of apache, this is a limitation of the https protocol, so a more recent version of apache doesn't solve your problem. > I can't find the statement saying weather you can do more than one or > not at > http://httpd.apache.org/docs/2.2/ http://httpd.apache.org/docs/2.2/ssl/ssl_faq.html#vhosts Krist -- [EMAIL PROTECTED] [EMAIL PROTECTED] Bremgarten b. Bern, Switzerland -- A: It reverses the normal flow of conversation. Q: What's wrong with top-posting? A: Top-posting. Q: What's the biggest scourge on plain text email discussions? - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] " from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
[EMAIL PROTECTED] mod_authnz_ldap and SSL
Hi guys. I'm trying to enable SSL for LDAP authentication on a Debian Etch, Apache version 2.2.3 The authentication/authorization without SSL directives is working properly, but as soon as I try to enable the secure layer, I get this error: [debug] mod_authnz_ldap.c(373): [18646] auth_ldap authenticate: using URL ldaps://ldap.mydomain.com/ou=People,dc=mydomain,dc=com?uid [warn] [30270] auth_ldap authenticate: user testuser authentication failed; URI /account-management/secure/ [LDAP: ldap_simple_bind_s() failed][Can't contact LDAP server] I'm pretty sure it's not a firewall issue because I can telnet to port 636 on LDAP server(s). These are the directives I've set up: LDAPTrustedGlobalCert CA_BASE64 /etc/ssl/certs/cacert.pem LDAPTrustedMode SSL LDAPVerifyServerCert off AuthType Basic AuthName "LDAP authentication for IT" AuthBasicProvider ldap AuthzLDAPAuthoritative off AuthLDAPURL "ldaps://ldap.mydomain.com/ou=People,dc=it,dc=net,dc=au?uid" require valid-user Any suggestion? Thanks! -- Alexander Fortin IT Consultant Informed Technology E-mail: [EMAIL PROTECTED] Ph: 08 9460 4888 Fax: 08 9460 4877 - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] " from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: [EMAIL PROTECTED] Mod_perl and includes
use 'PerlRequire' to import a file in apache's startup time. in this file you import the lib's path.ie,in httpd.conf: PerlRequire /opt/apache1.3/mylib/startup.pl and in startup.pl: use lib qw(/the/lib/path); > Date: Tue, 16 Oct 2007 19:21:19 -0400 > From: [EMAIL PROTECTED] > To: users@httpd.apache.org > Subject: [EMAIL PROTECTED] Mod_perl and includes > > I'm trying to bring up a server with mod_perl configuration original > created for an Apache 2.0 server but on an Apache 1.3 server. The > problem is that "PerlSwitches" isn't available on the mod_perl running > on the 1.3 server. How can I get this library path included on a 1.3 > server? > > > > PerlSwitches -I /var/www/foo/bar/lib > PerlModule BAR > > > SetHandler modperl > PerlResponseHandler BAR > > > Thanks in advance, > Tony > > - > The official User-To-User support forum of the Apache HTTP Server Project. > See for more info. > To unsubscribe, e-mail: [EMAIL PROTECTED] > " from the digest: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] > _ News, entertainment and everything you care about at Live.com. Get it now! http://www.live.com/getstarted.aspx - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] " from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [EMAIL PROTECTED] 100-continue response when 401 expected - Apache 2.2.26
On Tue, 16 Oct 2007 14:42:40 -0700 "Ragini Bisarya" <[EMAIL PROTECTED]> wrote: > I would like to clarify that the client does not know if the web Yes, I understand what you're saying. That was clear enough first time. And just to be clear, I believe you're probably right that there is a problem. But you didn't tell the whole story. > > That seems less than optimal, but you didn't really give it a > > chance. > > I expected that sending a request without the Authentication header, > for a resource that requires authentication, would result in a 401 > being returned. Instead I got back a 100 Continue. But you didn't explain where in your overall setup the 401 is generated, and therefore whether or not the server needs the request body before it can deduce whether the request is accepted. > I was expecting that things that can be checked by the apache > infrastructure without requiring the application (in this case the > put.cgi) to get involved would be checked before asking the client to > continue sending the body. Example - Method allowed or not (405), auth > required or not (401). Yep. So tell us *exactly* what should cause the 401, so we can tell when it *should* happen. > While trying to test for the condition where if a malformed request is > sent would I get back a 100 continue or 400 Bad request I noticed a > strange thing with 2.2.6. > > If I do not have the Content-Length header present in the initial > request, then I get back a 401 just the way I would like to. Without a content-length (or transfer-encoding) it knows there cannot be a request body, so it doesn't ask for one. This fits with the suspected-bug you're reporting, though it's still not certain proof. > Unfortunately this is not a workable workaround. Because for resources > that do NOT require authentication, omitting the Content-Length header > results in a 500 Internal error. Ugh. That should be a 400 (Bad Request) error. Is your script being run, or is Apache generating the error without running the script? > ErrorError Publishing File > An error occurred publishing this file (Content-Length missing or > zero ()). Hmmm, that's not Apache, so it's either your script or a custom ErrorDocument. > > > Apache 1.3.33 on the other hand, checks for the 401 condition > > > before sending a 100 Continue response. It sends a 401 to the > > > client. > > > > Are you sure? That's not what you tested. > > My test tried to upload a file to a dir that required authentication. You tested "it sends 401 when it should send 401". You didn't test "it doesn't send 401 when it should send 100". > > So what would've happened if the original request had > > included the credentials, or if no authentication was required? > > For both of those cases Apache 1.3 and 2.2 return 100 Continue and > then the Client sends the request body. So no issues there. OK, now you're telling us. Not that it really matters: I just sometimes get fussy about incomplete reports. > Sorry if I am repeating the same thing in many more words. I hope I am > getting my point across. Indeed, thanks for the report. Can I suggest your best course of action now is to enter it into our bugzilla at http://issues.apache.org/ ? I *think* the root cause of this is related to bugs 16518 and 19442 and an old/ incorrect fix to them (see Comment 14 on bug 16518). But your bug is clearly not the same as those, and needs a new report. -- Nick Kew Application Development with Apache - the Apache Modules Book http://www.apachetutor.org/ - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] " from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]