Re: [EMAIL PROTECTED] Apache 2.2.0 binary download

2007-10-17 Thread William A. Rowe, Jr.

Ashwani Kumar Sharma wrote:

Yeah that's true,

There are no binaries for apache 2.2.0 on that url. I have downloaded the
source code for same from
 http://archive.apache.org/dist/httpd/

I am facing some build problems. 


Is it true that apache 2.2.0 is not a stable version. Please suggest me the
stable version for apache.


Uhm - yea.  You read the win32 download page right?  Where it said "Looking
for an earlier version, Please Don't"?

The downloads page has the current stable version(s) 2.2.4 or 2.2.6 - if you
are a modperl or fastcgi user - stick with .4 for your own sanity.

Perhaps 2.2.0 isn't there because it barely built, never mind running right,
on win32?  Just curious why you would be so obsessed with sticking to a .zero
release?

Bill

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] Apache 2.2.0 binary download

2007-10-17 Thread solprovider
There were discussions on the Dev ML about building 2.2.0 using VC6,
VS2003, and VS2005 around December 2005.  Read those threads for ideas
if you insist on compiling.

For the recommended stable version, use Alexander's link for the
Windows binaries of 2.2.6.

solprovider

On 10/18/07, Ashwani Kumar Sharma <[EMAIL PROTECTED]> wrote:
> Yeah that's true,
>
> There are no binaries for apache 2.2.0 on that url. I have downloaded the
> source code for same from
>  http://archive.apache.org/dist/httpd/
> I am facing some build problems.
>
> Is it true that apache 2.2.0 is not a stable version. Please suggest me the
> stable version for apache.
>
> Thanks and Regards,
> Ashwani Sharma
> Mob: 09916454843
> Off: +91-80-26265053
>
>
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
> [EMAIL PROTECTED]
> Sent: Thursday, October 18, 2007 11:45 AM
>
> I could not find Windows binaries for 2.2.0 on the Web.  If you MUST
> use that version, you MUST compile.
>
> For old versions, go to the Downloads page and click the "archive
> download site" link in the second paragraph for:
> http://archive.apache.org/dist/httpd/
> Then click "binaries" and "win32" to discover that the obsolete
> Windows binaries for 2.2.0 are missing.  Only 2.2.2, 2.2.4, and 2.2.6
> are listed.
>
> Alexander's URL is for current releases. There have been too many
> changes since 2.2.0 for any sane person to recommend or facilitate
> installing it. The security page lists seven holes affecting 2.2.0.
> http://httpd.apache.org/security/vulnerabilities_22.html
>
> Sorry,
> solprovider
>
> On 10/18/07, Alexander Fortin <[EMAIL PROTECTED]> wrote:
> > Ashwani Kumar Sharma wrote:
> > > I want to download binary for apache 2.2.0 for windows urgently. I am not
> > > finding it on apache.org
> > http://apache.planetmirror.com.au/dist/httpd/binaries/win32/
> > Alexander Fortin

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] rewrite or proxypass?

2007-10-17 Thread solprovider
Why not put the homepage/login page on port 80 and proxy the POST to
Tomcat?  Or are dynamic elements on the login page?

If everything will be served by Tomcat, why not run tomcat on port 80?

If you are using virtual servers, you should already have configured the proxy.

solprovider


On 10/17/07, Patrick Coleman <[EMAIL PROTECTED]> wrote:
> I don't exactly know if this is a rewrite or proxypass or something
> else type of thing so
> I was hoping someone could help.
> I have a Tomcat app running on port 8080
> I can get to it through
> http://www.example.com:8080
>
> it goes to a login page and the URL displays
> http://www.example.com:8080/login
>
> I would like to be able to just put in
> http://www.example.com
> and get
> http://www.example.com/login
>
> Thanks.
> Pat

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: [EMAIL PROTECTED] Apache 2.2.0 binary download

2007-10-17 Thread Ashwani Kumar Sharma

Yeah that's true,

There are no binaries for apache 2.2.0 on that url. I have downloaded the
source code for same from
 http://archive.apache.org/dist/httpd/

I am facing some build problems. 

Is it true that apache 2.2.0 is not a stable version. Please suggest me the
stable version for apache.



Thanks and Regards,
Ashwani Sharma
Mob: 09916454843
Off: +91-80-26265053


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
[EMAIL PROTECTED]
Sent: Thursday, October 18, 2007 11:45 AM
To: users@httpd.apache.org
Subject: Re: [EMAIL PROTECTED] Apache 2.2.0 binary download

I could not find Windows binaries for 2.2.0 on the Web.  If you MUST
use that version, you MUST compile.

For old versions, go to the Downloads page and click the "archive
download site" link in the second paragraph for:
http://archive.apache.org/dist/httpd/
Then click "binaries" and "win32" to discover that the obsolete
Windows binaries for 2.2.0 are missing.  Only 2.2.2, 2.2.4, and 2.2.6
are listed.

Alexander's URL is for current releases. There have been too many
changes since 2.2.0 for any sane person to recommend or facilitate
installing it. The security page lists seven holes affecting 2.2.0.
http://httpd.apache.org/security/vulnerabilities_22.html

Sorry,
solprovider

On 10/18/07, Alexander Fortin <[EMAIL PROTECTED]> wrote:
> Ashwani Kumar Sharma wrote:
> > I want to download binary for apache 2.2.0 for windows urgently. I am not
> > finding it on apache.org
> http://apache.planetmirror.com.au/dist/httpd/binaries/win32/
> Alexander Fortin

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



DISCLAIMER:
This message (including attachment if any) is confidential and may be 
privileged. If you have received this message by mistake please notify the 
sender by return e-mail and delete this message from your system. Any 
unauthorized use or dissemination of this message in whole or in part is 
strictly prohibited.
E-mail may contain viruses. Before opening attachments please check them for 
viruses and defects. While MindTree Consulting Limited (MindTree) has put in 
place checks to minimize the risks, MindTree will not be responsible for any 
viruses or defects or any forwarded attachments emanating either from within 
MindTree or outside.
Please note that e-mails are susceptible to change and MindTree shall not be 
liable for any improper, untimely or incomplete transmission.
MindTree reserves the right to monitor and review the content of all messages 
sent to or from MindTree e-mail address. Messages sent to or from this e-mail 
address may be stored on the MindTree e-mail system or else where.

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] rewrite or proxypass?

2007-10-17 Thread Robert Jaeschke
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Hello Patrick,

Patrick Coleman schrieb:
> I have a Tomcat app running on port 8080
> 
> I can get to it through
> 
> http://www.ourcompany.com:8080
> 
> it goes to a login page and the URL displays
> 
> http://www.ourcompany.com:8080/login
> 
> I would like to be able to just put in
> 
> http://www.ourcompany.com
> 
> and get
> 
> http://www.ourcompany.com/login
> 
> Could anyone help me with this?

You have to use mod_proxy and those two lines to your conf:

ProxyPass / http://www.ourcompany.com:8080/
ProxyPassReverse / http://www.ourcompany.com:8080/



Best regards, Robert

- --
Robert JäschkeTel: +49-(0)561-804-6253
Universität Kassel   E-Mail: [EMAIL PROTECTED]
Wilhelmshöher Allee 73WWW: http://www.kde.cs.uni-kassel.de
34121 Kassel >>  http://www.bibsonomy.org  <<<
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFHFvo7KNvjYNceXPwRAo/KAJ4pLwHL+mm433wYMJs1xI4ycuc+SQCgpziv
F0DC5aeMQC9liPUZNam+Lvs=
=hv1A
-END PGP SIGNATURE-

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] Apache 2.2.0 binary download

2007-10-17 Thread solprovider
I could not find Windows binaries for 2.2.0 on the Web.  If you MUST
use that version, you MUST compile.

For old versions, go to the Downloads page and click the "archive
download site" link in the second paragraph for:
http://archive.apache.org/dist/httpd/
Then click "binaries" and "win32" to discover that the obsolete
Windows binaries for 2.2.0 are missing.  Only 2.2.2, 2.2.4, and 2.2.6
are listed.

Alexander's URL is for current releases. There have been too many
changes since 2.2.0 for any sane person to recommend or facilitate
installing it. The security page lists seven holes affecting 2.2.0.
http://httpd.apache.org/security/vulnerabilities_22.html

Sorry,
solprovider

On 10/18/07, Alexander Fortin <[EMAIL PROTECTED]> wrote:
> Ashwani Kumar Sharma wrote:
> > I want to download binary for apache 2.2.0 for windows urgently. I am not
> > finding it on apache.org
> http://apache.planetmirror.com.au/dist/httpd/binaries/win32/
> Alexander Fortin

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: [EMAIL PROTECTED] rewrite or proxypass?

2007-10-17 Thread Axel-Stephane SMORGRAV
Could it possibly be this simple?? You probably want to have two virtual hosts, 
one for port 80 and one for port 8080. In the former, add the following lines:

ProxyRequests Off
ProxyPass http://www.ourcompany.com/ http://www.ourcompany.com:8080/
ProxyPassReverse http://www.ourcompany.com/ http://www.ourcompany.com:8080/

Refer to the mod_proxy documentation for more details.

-ascs

-Message d'origine-
De : Patrick Coleman [mailto:[EMAIL PROTECTED] 
Envoyé : jeudi 18 octobre 2007 00:29
À : users@httpd.apache.org
Objet : [EMAIL PROTECTED] rewrite or proxypass?

Hi,

I don't exactly know if this is a rewrite or proxypass or something else type 
of thing so I was hoping someone could help.


I have a Tomcat app running on port 8080

I can get to it through

http://www.ourcompany.com:8080

it goes to a login page and the URL displays

http://www.ourcompany.com:8080/login

I would like to be able to just put in

http://www.ourcompany.com

and get

http://www.ourcompany.com/login

Could anyone help me with this?

Thanks.

Pat.

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] Apache 2.2.0 binary download

2007-10-17 Thread Alexander Fortin

Ashwani Kumar Sharma wrote:

Hi All,

I want to download binary for apache 2.2.0 for windows urgently. I am not
finding it on apache.org

Please guide me.


http://apache.planetmirror.com.au/dist/httpd/binaries/win32/

--
Alexander Fortin
IT Consultant
Informed Technology
E-mail: [EMAIL PROTECTED]
Ph: 08 9460 4888  Fax: 08 9460 4877

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] Apache 2.2.0 binary download

2007-10-17 Thread Ashwani Kumar Sharma

Hi All,

I want to download binary for apache 2.2.0 for windows urgently. I am not
finding it on apache.org

Please guide me.




Thanks and Regards,
Ashwani Sharma
Mob: 09916454843
Off: +91-80-26265053

-Original Message-
From: Alexander Fortin [mailto:[EMAIL PROTECTED] 
Sent: Thursday, October 18, 2007 9:40 AM
To: users@httpd.apache.org
Subject: Re: [EMAIL PROTECTED] mod_authnz_ldap and SSL

Eric Covener wrote:
> On 10/17/07, Alexander Fortin <[EMAIL PROTECTED]> wrote:
>> 
>>  LDAPTrustedGlobalCert CA_BASE64 /etc/ssl/certs/cacert.pem
>>  LDAPTrustedMode SSL
>>  LDAPVerifyServerCert off
>> 
> 
> Wireshark will format the initial stages of the handshake pretty
> nicely, you might see something fishy or a plaintext SSL Alert.
> 
> Can openssl handshake w/ the ldap server?  Is its cert  issued by that
> cacert.pem?  Can openssl validate the cert chain when you give it that
> same cacert.pem?
> 

Yes, openssl looks fine to me. Or at least from the console:

# openssl s_client -connect myldapserver:636 -CAfile 
/etc/ssl/certs/cacert.pem

CONNECTED(0003)
---
Certificate chain
  0 s:/C=AU/ST=Western Australia/L=myplace/O=mycompany Pty 
Ltd/OU=Internet Services/CN=myldapserver/[EMAIL PROTECTED]
i:/C=AU/ST=Western Australia/L=myplace/O=mycompany Pty 
Ltd/OU=Internet Services/CN=Security Administration/[EMAIL PROTECTED]
  1 s:/C=AU/ST=Western Australia/L=myplace/O=mycompany Pty 
Ltd/OU=Internet Services/CN=Security Administration/[EMAIL PROTECTED]
i:/C=AU/ST=Western Australia/L=myplace/O=mycompany Pty 
Ltd/OU=Internet Services/CN=Security Administration/[EMAIL PROTECTED]
---
Server certificate
-BEGIN CERTIFICATE-
MIIEXjCCA8egAwIBAgIBAzANBgkqhkiG9w0BAQQFADCByjELMAkGA1UEBhMCQVUx
[...]
-END CERTIFICATE-
subject=/C=AU/ST=Western Australia/L=myplace/O=mycompany Pty 
Ltd/OU=Internet services/CN=myldpaserver/[EMAIL PROTECTED]
issuer=/C=AU/ST=Western Australia/L=myplace/O=mycompany Pty 
Ltd/OU=Internet Services/CN=Security Administration/[EMAIL PROTECTED]
---
No client certificate CA names sent
---
SSL handshake has read 2364 bytes and written 308 bytes
---
New, TLSv1/SSLv3, Cipher is DES-CBC3-SHA
Server public key is 1024 bit
Compression: NONE
Expansion: NONE
SSL-Session:
 Protocol  : TLSv1
 Cipher: DES-CBC3-SHA
 Session-ID: 
6BE2EE5A88866AB4D8303ECBB0BD1CA5DD905E3EC5DDBA9A3A1D0652EB3B6829
 Session-ID-ctx:
 Master-Key: 
0454B3AF0B372ED6B530FA25C57DC3E34049A58125EBC99A25B674D9545BE7322D536273C654C
53CE9C58DDE410A8A7C
 Key-Arg   : None
 Start Time: 1192679978
 Timeout   : 300 (sec)
 Verify return code: 0 (ok)
---


-- 
Alexander Fortin
IT Consultant
Informed Technology Pty Ltd
E-mail: [EMAIL PROTECTED]
Ph: 08 9460 4888  Fax: 08 9460 4877

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



DISCLAIMER:
This message (including attachment if any) is confidential and may be 
privileged. If you have received this message by mistake please notify the 
sender by return e-mail and delete this message from your system. Any 
unauthorized use or dissemination of this message in whole or in part is 
strictly prohibited.
E-mail may contain viruses. Before opening attachments please check them for 
viruses and defects. While MindTree Consulting Limited (MindTree) has put in 
place checks to minimize the risks, MindTree will not be responsible for any 
viruses or defects or any forwarded attachments emanating either from within 
MindTree or outside.
Please note that e-mails are susceptible to change and MindTree shall not be 
liable for any improper, untimely or incomplete transmission.
MindTree reserves the right to monitor and review the content of all messages 
sent to or from MindTree e-mail address. Messages sent to or from this e-mail 
address may be stored on the MindTree e-mail system or else where.

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] mod_authnz_ldap and SSL

2007-10-17 Thread Alexander Fortin

Eric Covener wrote:

On 10/17/07, Alexander Fortin <[EMAIL PROTECTED]> wrote:


 LDAPTrustedGlobalCert CA_BASE64 /etc/ssl/certs/cacert.pem
 LDAPTrustedMode SSL
 LDAPVerifyServerCert off



Wireshark will format the initial stages of the handshake pretty
nicely, you might see something fishy or a plaintext SSL Alert.

Can openssl handshake w/ the ldap server?  Is its cert  issued by that
cacert.pem?  Can openssl validate the cert chain when you give it that
same cacert.pem?



Yes, openssl looks fine to me. Or at least from the console:

# openssl s_client -connect myldapserver:636 -CAfile 
/etc/ssl/certs/cacert.pem


CONNECTED(0003)
---
Certificate chain
 0 s:/C=AU/ST=Western Australia/L=myplace/O=mycompany Pty 
Ltd/OU=Internet Services/CN=myldapserver/[EMAIL PROTECTED]
   i:/C=AU/ST=Western Australia/L=myplace/O=mycompany Pty 
Ltd/OU=Internet Services/CN=Security Administration/[EMAIL PROTECTED]
 1 s:/C=AU/ST=Western Australia/L=myplace/O=mycompany Pty 
Ltd/OU=Internet Services/CN=Security Administration/[EMAIL PROTECTED]
   i:/C=AU/ST=Western Australia/L=myplace/O=mycompany Pty 
Ltd/OU=Internet Services/CN=Security Administration/[EMAIL PROTECTED]

---
Server certificate
-BEGIN CERTIFICATE-
MIIEXjCCA8egAwIBAgIBAzANBgkqhkiG9w0BAQQFADCByjELMAkGA1UEBhMCQVUx
[...]
-END CERTIFICATE-
subject=/C=AU/ST=Western Australia/L=myplace/O=mycompany Pty 
Ltd/OU=Internet services/CN=myldpaserver/[EMAIL PROTECTED]
issuer=/C=AU/ST=Western Australia/L=myplace/O=mycompany Pty 
Ltd/OU=Internet Services/CN=Security Administration/[EMAIL PROTECTED]

---
No client certificate CA names sent
---
SSL handshake has read 2364 bytes and written 308 bytes
---
New, TLSv1/SSLv3, Cipher is DES-CBC3-SHA
Server public key is 1024 bit
Compression: NONE
Expansion: NONE
SSL-Session:
Protocol  : TLSv1
Cipher: DES-CBC3-SHA
Session-ID: 
6BE2EE5A88866AB4D8303ECBB0BD1CA5DD905E3EC5DDBA9A3A1D0652EB3B6829

Session-ID-ctx:
Master-Key: 
0454B3AF0B372ED6B530FA25C57DC3E34049A58125EBC99A25B674D9545BE7322D536273C654C53CE9C58DDE410A8A7C

Key-Arg   : None
Start Time: 1192679978
Timeout   : 300 (sec)
Verify return code: 0 (ok)
---


--
Alexander Fortin
IT Consultant
Informed Technology Pty Ltd
E-mail: [EMAIL PROTECTED]
Ph: 08 9460 4888  Fax: 08 9460 4877

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: [EMAIL PROTECTED] http to https redirection with an exception

2007-10-17 Thread joy d


> Date: Wed, 17 Oct 2007 16:03:38 +0200
> From: [EMAIL PROTECTED]
>
> If your apache was compiled with DSO support you don't need to
> recompile it. You can just compile mod_rewrite and load it in your
> config.
>

Hello,

How to do it? can you show me a document reference?
Actually we also have some Apaches which were built with DSO support,but 
without mod_rewrite enabled.
If I want to compile and install mod_rewrite separately without re-compiling 
Apache,how to do it?

thanks!
_
Connect to the next generation of MSN Messenger 
http://imagine-msn.com/messenger/launch80/default.aspx?locale=en-us&source=wlmailtagline
-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] 100-continue response when 401 expected - Apache 2.2.26

2007-10-17 Thread Ragini Bisarya
On 10/17/07, Nick Kew <[EMAIL PROTECTED]> wrote:
> Can I suggest your best course of action now is to enter it into
> our bugzilla at http://issues.apache.org/ ?  I *think* the root
> cause of this is related to bugs 16518 and 19442 and an old/
> incorrect fix to them (see Comment 14 on bug 16518).  But your
> bug is clearly not the same as those, and needs a new report.
>

Thanks a lot for your patience and help on this issue.

I will enter this in the bug database.

Ragini

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] Rlimitcpu + Cpu Usage Information

2007-10-17 Thread Joseph Marcelletti
Hello,

Pertaining to apache 2.2.x  branch.

Is there a way to determine how much cpu / memory each virtual host is
using (much like you can determine bandwidth with mod_logio)?..

Also, with rlimitcpu and the other rlimit commands, according to the
documentation :
Context:server config, virtual host, directory, .htaccess

If this is set in the virtualhost area of the httpd.conf, can the user
override it in an .htaccess file if allowoverride all is on? And.. if
so.. is there a way to do a reverse list for allowoverride.. such as..
allowoverride all -rlimitcpu (I know that isn't valid, but I hope you
get the idea).

Thanks.

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] rewrite or proxypass?

2007-10-17 Thread Patrick Coleman

Hi,

I don't exactly know if this is a rewrite or proxypass or something  
else type of thing so

I was hoping someone could help.


I have a Tomcat app running on port 8080

I can get to it through

http://www.ourcompany.com:8080

it goes to a login page and the URL displays

http://www.ourcompany.com:8080/login

I would like to be able to just put in

http://www.ourcompany.com

and get

http://www.ourcompany.com/login

Could anyone help me with this?

Thanks.

Pat.

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] Apache 2.0.50 crash on libapr!apr_palloc

2007-10-17 Thread bugzillaapachebloborg . 20 . junkymail
Hello,

I'm running httpd 2.0.50 on a production system.  Every couple of days I 
receive a crash, the most recent of which is listed below.  I believe this is 
related to allocating memory.  I'm unable to upgrade the production Apache to 
test whether a later version resolves this issue.   Also, I'm unable to 
reproduce the problem outside of the production environment (don't have 
accurate load tests).

I reviewed the change logs and did not see anything specifically related to 
this on the 2.0 line after 2.0.50, so I don't see a clear reason to upgrade yet.

I have about 300-600 threads to the webserver at a given time, and I've seen 
the Apache.exe process report 1GB memory use in Windows tasklist.   I'm running 
Windows Server 2003.

Any ideas on how to resolve the issue?  Or any rationale as to why an upgrade 
would have a good chance of resolving this type of issue?

The following is from drwatsn32.log and is the section that reports the fault 
(there is much more to the log but this is the fault section)...



*> State Dump for Thread Id 0x2988 <*



eax=0010 ebx=6eec7670 ecx=77bbcefb edx= esi=07af2200 edi=07af221c

eip=6eec767c esp=0efbff28 ebp=71c06eb4 iopl=0nv up ei pl nz ac pe cy

cs=001b  ss=0023  ds=0023  es=0023  fs=003b  gs=efl=00010213



function: libapr!apr_palloc

6eec766d 90  nop

6eec766e 90  nop

6eec766f 90  nop

libapr!apr_palloc:

6eec7670 51  pushecx

6eec7671 8b542408movedx,[esp+0x8]

6eec7675 8b44240cmoveax,[esp+0xc]

6eec7679 53  pushebx

6eec767a 55  pushebp

6eec767b 56  pushesi

FAULT ->6eec767c 8b7228  movesi,[edx+0x28]
ds:0023:0028=

6eec767f 8d5807  leaebx,[eax+0x7]

6eec7682 57  pushedi

6eec7683 8b4610  moveax,[esi+0x10]

6eec7686 8b4e14  movecx,[esi+0x14]

6eec7689 83e3f8  andebx,0xfff8

6eec768c 2bc8subecx,eax

6eec768e 3bd9cmpebx,ecx

6eec7690 895c241cmov[esp+0x1c],ebx

6eec7694 730ejnblibapr!apr_palloc+0x34 (6eec76a4)

6eec7696 8d1418  leaedx,[eax+ebx]





More information about the environment:

Application exception occurred:
App: E:\Apache\Apache2\bin\Apache.exe (pid=10920)
When: 04/10/2007 @ 07:42:46.388
Exception number: c005 (access violation)

*> System Information <*
Computer Name: FALCON
User Name: SYSTEM
Terminal Session Id: 0
Number of Processors: 4
Processor Type: x86 Family 15 Model 2 Stepping 6
Windows Version: 5.2
Current Build: 3790
Service Pack: 1
Current Type: Multiprocessor Free

*> Task List <*
  0 System Process
  4 System
1028 smss.exe
1116 csrss.exe
1160 winlogon.exe
1204 services.exe
1216 lsass.exe
1408 svchost.exe
2016 svchost.exe
364 svchost.exe
456 svchost.exe
488 svchost.exe
848 spoolsv.exe
976 AXL300.exe
988 vcagent.exe
1016 etagent.exe
1088 hpdiags.exe
1340 FrameworkService.exe
328 Mcshield.exe
1524 VsTskMgr.exe
1648 svchost.exe
1684 snmp.exe
9428 beremote.exe
9476 cpqnimgt.exe
9500 CpqRcmc.exe
9516 cqmgserv.exe
9536 cqmgstor.exe
9552 sysdown.exe
9828 cqmghost.exe
9864 cpqwmgmt.exe
9744 svchost.exe
10104 wmiprvse.exe
11744 wmiprvse.exe
10660 Apache.exe
7196 csrss.exe
7852 winlogon.exe
8436 Explorer.EXE
6148 cpqteam.exe
10604 SHSTAT.EXE
11328 UpdaterUI.exe
10848 TBMon.exe
9164 ctfmon.exe
5400 ApacheMonitor.exe
8008 cmd.exe
6820 naPrdMgr.exe
3808 uptmagnt.exe
15816 wrapper.exe
14648 java.exe
10920 Apache.exe
6752 drwtsn32.exe

*> Module List <*
0040 - 00405000: E:\Apache\Apache2\bin\Apache.exe
006a - 00771000: E:\Apache\Apache2\bin\LIBEAY32.dll
0078 - 007a2000: E:\Apache\Apache2\modules\mod_jk2.so
1000 - 10027000: E:\Apache\Apache2\bin\SSLEAY32.dll
5f27 - 5f2c9000: C:\WINDOWS\system32\hnetcfg.dll
6800 - 6802f000: C:\WINDOWS\system32\rsaenh.dll
6ee5 - 6ee59000: E:\Apache\Apache2\bin\libapriconv.dll
6ee6 - 6ee89000: E:\Apache\Apache2\bin\libaprutil.dll
6eec - 6eee: E:\Apache\Apache2\bin\libapr.dll
6fba - 6fbae000: E:\Apache\Apache2\modules\mod_deflate.so
6fc0 - 6fc06000: E:\Apache\Apache2\modules\mod_setenvif.so
6fc3 - 6fc37000: E:\Apache\Apache2\modules\mod_log_config.so
6fc7 - 6fc76000: E:\Apache\Apache2\modules\mod_env.so
6fcd - 6fcd6000: E:\Apache\Apache2\modules\mod_alias.so
6fd0 - 6fd2: E:\Apache\Apache2\modules\mod_ssl.so

[EMAIL PROTECTED] Apache w/ mod_ssl: Trouble authenticating Verisign Class 1 Individual Subscriber client certificates

2007-10-17 Thread Howard Wong
Hi,

Situation:
We received 2 certificates from a client communicating trying to communicat 
with our server:
1) the client certificate - Issued by VeriSign Class 1 individual Subscriber CA 
- G2
2) the VeriSign Class 1 CA Certificate - Issued by Class 1 Public Primary 
Certification Authority

I generated hashed symlinks for both these certificates in the folder specified 
by SSLCACertificatePath.
I restarted my Apache server and my server fails to authenticate my client.  

What bothers me is that I have never encountered this issue whenever I've had 
to import in Class 3 VeriSign client certificates into Apache.  Am I missing 
something in my Apache/mod_ssl configuration?

Below are the details of our server setup as well as the error_log file of what 
is failing in mod_ssl.
  
Machine Setup:
Apache/1.3.37 (Linux) mod_jk/1.2.20 mod_ssl/2.8.28 OpenSSL/0.9.8d

Our server performs client authentication with the following settings in our 
httpd.conf file:

SSLCipherSuite 
ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv3:+TLSv1:+SSLv2:+EXP:+eNULL


SSLOptions +StdEnvVars +ExportCertData
SSLVerifyClient require
SSLVerifyDepth 4


SSLCACertificatePath -> path to a folder containing hashed symlinks of our 
client CA certs
SSLCARevocationPath -> path to a folder containing hashed symlinks of our 
client CA CRLs


Apache error_log:

[Fri Oct 12 17:42:04 2007] [error] mod_ssl: Certificate Verification: Error 
(20): unable to get local issuer certificate
[Fri Oct 12 17:42:04 2007] [error] mod_ssl: Re-negotiation handshake failed: 
Not accepted by client!?
[Fri Oct 12 17:42:04 2007] [error] mod_ssl: Certificate Verification: Error 
(20): unable to get local issuer certificate
[Fri Oct 12 17:42:04 2007] [error] mod_ssl: SSL error on writing data (OpenSSL 
library error follows)
[Fri Oct 12 17:42:04 2007] [error] OpenSSL: error:140890B2:SSL 
routines:SSL3_GET_CLIENT_CERTIFICATE:no certificate returned


Thanks in advance for any help that can be provided.

Howard Wong
Intermediate Software Developer
The SPi Group Inc.
Enabling Energy Markets
[EMAIL PROTECTED]
Tel: 416.408.1395 ext. 264 Fax: 416.408.1396
154 University Avenue, Suite 300, Toronto, ON, Canada, M5H 3Y9
www.thespigroup.com
___
This e-mail message is intended only for the person(s) named above 
and may contain confidential or privileged information. If you are not the
person named or have received this message in error, please notify the
sender immediately and delete this e-mail and any attachments without
reading, saving, or forwarding. 
___


-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] svn access via apache with ntlm authentication

2007-10-17 Thread Thomas Fazekas
My setup :

Debian Etch i386

httpd-2.0.61 configured with the following command
"./configure --prefix=/opt/httpd-2.0.61 --with-mpm=worker --enable-so
--enable-dav=shared
--enable-unique-id=shared --enable-version=shared --enable-ssl=shared
--enable-info=shared
--enable-cgi=shared --enable-rewrite=shared --enable-cache=shared --
enable-disk-cache=shared --enable-deflate=shared"

subversion-1.4.5 configured with the following
"./configure --prefix=/opt/subversion-1.4.5 --with-apr=/opt/
httpd-2.0.61 --with-apr-util=/opt/httpd-2.0.61 --with-apxs=/opt/
httpd-2.0.61/bin/apxs"

mod_auth_ntlm_winbind AFAIK the latest version compiled with
"/opt/httpd-2.0.61/bin/apxs -DAPACHE2 -c -i mod_auth_ntlm_winbind.c"

Now, AFAIT everything is working well... separately !
Apache serves documents,
svn works for anonymous access with the following config :


   DAV svn
   SVNPath /mnt/data/rep/svn


I can check out projects from the repository

Then I've tested the NTLM authentication with

Alias /ntlmtest/ "/mnt/data/docuwiki/"

 AuthName "NTLM Authentication"
 NTLMAuth on
 NTLMAuthHelper "/usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp"
 NTLMBasicAuthoritative on
 AuthType NTLM
 require valid-user


This works just fine, the browser prompts for the username and
password, and ntlm authenticates against our PDC

Now my problem is with the svn + NTLM combination
If I have in my httpd.conf

   DAV svn
   SVNPath /mnt/data/rep/svn
   AuthName "NTLM Authentication"
   AuthType NTLM
   NTLMAuth on
   NTLMBasicAuthoritative on
   NTLMAuthHelper "/usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp"
   require valid-user


and I do "svn co http://svnhost/svn/repos/test"; ,
it seems to me that the apache server doesn't even bother calling the
ntlm_winbind module for authentication...
There are no logs or any trace of related messages and all I get is
svn: PROPFIND request failed on '/svn/repos/test'
svn: PROPFIND of '/svn/repos/test': authorization failed (http://
svnhost)
at the client side.

Any ideas ?

Thomas

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] MySQL Related problem

2007-10-17 Thread Samuel Vogel
Sorry, I have not yet tried it. But I definitely will try it in the 
future ;)

Because it has a very interesting set of features.

Regards,
Smay

Marc Perkel schrieb:
Have you actually tried this? Do you have sample scripts? Is there any 
one who has tried MySQL Proxy and made it work?


Samuel Vogel wrote:

You should probably take a look at MySQL Proxy:
http://dev.mysql.com/tech-resources/articles/proxy-gettingstarted.html

It can do exactly what you want and much more ;)

Regards,
Samy

Marc Perkel schrieb:

Hi Everyone,

I'm hosting a lot of domains for a lot of people who have a lot of 
MySQL applications that they installed and almost all are configured 
to talk to MySQL on "localhost".


In order to spread the load I'm trying to move the MySQL server to 
another machine. Since everything is configured for localhost I 
figured all I had to do was move the database to the new server, 
shut down the existing MySQL server, and set up an SSH tunnel so 
that all the MyDQL call on the original server would pipe to the new 
server.


But that doesn't work.

The problem is that PHP/MySQL apps configured for localhost insiste 
on talking to the socket located at /var/lib/mysql/mysql.sock 
instead of 127.0.0.1. In the MySQL world, localhost != 127.0.0.1.


I tried using the pipe and socat on the socket but socat wasn't 
reliable and quit working for reasons I don't understand. So I'm 
wondering how to make it work. Has anyone managed to get this to work?


I'm also thinking about this. Could I mount the new MySQL server 
using NFS so that /var/lib/mysql/mysql.sock is on the new MySQL 
server and calls to that socket would go to the new server. Will 
that work?


Thanks in advance.


-
The official User-To-User support forum of the Apache HTTP Server 
Project.

See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
The official User-To-User support forum of the Apache HTTP Server 
Project.

See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



-
The official User-To-User support forum of the Apache HTTP Server 
Project.

See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] MySQL Related problem

2007-10-17 Thread Marc Perkel
Have you actually tried this? Do you have sample scripts? Is there any 
one who has tried MySQL Proxy and made it work?


Samuel Vogel wrote:

You should probably take a look at MySQL Proxy:
http://dev.mysql.com/tech-resources/articles/proxy-gettingstarted.html

It can do exactly what you want and much more ;)

Regards,
Samy

Marc Perkel schrieb:

Hi Everyone,

I'm hosting a lot of domains for a lot of people who have a lot of 
MySQL applications that they installed and almost all are configured 
to talk to MySQL on "localhost".


In order to spread the load I'm trying to move the MySQL server to 
another machine. Since everything is configured for localhost I 
figured all I had to do was move the database to the new server, shut 
down the existing MySQL server, and set up an SSH tunnel so that all 
the MyDQL call on the original server would pipe to the new server.


But that doesn't work.

The problem is that PHP/MySQL apps configured for localhost insiste 
on talking to the socket located at /var/lib/mysql/mysql.sock instead 
of 127.0.0.1. In the MySQL world, localhost != 127.0.0.1.


I tried using the pipe and socat on the socket but socat wasn't 
reliable and quit working for reasons I don't understand. So I'm 
wondering how to make it work. Has anyone managed to get this to work?


I'm also thinking about this. Could I mount the new MySQL server 
using NFS so that /var/lib/mysql/mysql.sock is on the new MySQL 
server and calls to that socket would go to the new server. Will that 
work?


Thanks in advance.


-
The official User-To-User support forum of the Apache HTTP Server 
Project.

See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
The official User-To-User support forum of the Apache HTTP Server 
Project.

See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: [EMAIL PROTECTED] dual apache2 proxyERRORS issue

2007-10-17 Thread Shaw, Dan
Hello,

The ?? are in response to the question are they excepting requests
from the backend server and that is a question we posed to them and have
not heard anything back.

Thank you for the test breakdown I will use this in the future simple
but straight forward I like it.

Thanks, 

Dan


-Original Message-
From: Krist van Besien [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, October 17, 2007 8:54 AM
To: users@httpd.apache.org
Subject: Re: [EMAIL PROTECTED] dual apache2 proxyERRORS issue

On 10/17/07, Shaw, Dan <[EMAIL PROTECTED]> wrote:
> This is a reverse proxy

Ok. I asumed so much.
>
> That is a questioned we have not got an answer to yet.

??

> Is there a way to test to the end points via the proxy(s)
> To ensure the proxy part is working?
>
> We did setup a test for an internal server in which we know it accepts
> connections and what the end URL is and it works

Usually I  first make sure everything works without the proxy.
Then I test that everything works from the proxy itself, ie. I start a
browser on the machine that my reverse proxy will run on, and make
sure that I can access everything.

The errors I see in your logfiles seem to indicate that the machine
your are proxying is for some reason not accepting requests from the
proxy machine. You ought to also look in the logfiles of that machine.

Krist

-- 
[EMAIL PROTECTED]
[EMAIL PROTECTED]
Bremgarten b. Bern, Switzerland
--
A: It reverses the normal flow of conversation.
Q: What's wrong with top-posting?
A: Top-posting.
Q: What's the biggest scourge on plain text email discussions?

-
The official User-To-User support forum of the Apache HTTP Server
Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] MySQL Related problem

2007-10-17 Thread Samuel Vogel

You should probably take a look at MySQL Proxy:
http://dev.mysql.com/tech-resources/articles/proxy-gettingstarted.html

It can do exactly what you want and much more ;)

Regards,
Samy

Marc Perkel schrieb:

Hi Everyone,

I'm hosting a lot of domains for a lot of people who have a lot of 
MySQL applications that they installed and almost all are configured 
to talk to MySQL on "localhost".


In order to spread the load I'm trying to move the MySQL server to 
another machine. Since everything is configured for localhost I 
figured all I had to do was move the database to the new server, shut 
down the existing MySQL server, and set up an SSH tunnel so that all 
the MyDQL call on the original server would pipe to the new server.


But that doesn't work.

The problem is that PHP/MySQL apps configured for localhost insiste on 
talking to the socket located at /var/lib/mysql/mysql.sock instead of 
127.0.0.1. In the MySQL world, localhost != 127.0.0.1.


I tried using the pipe and socat on the socket but socat wasn't 
reliable and quit working for reasons I don't understand. So I'm 
wondering how to make it work. Has anyone managed to get this to work?


I'm also thinking about this. Could I mount the new MySQL server using 
NFS so that /var/lib/mysql/mysql.sock is on the new MySQL server and 
calls to that socket would go to the new server. Will that work?


Thanks in advance.


-
The official User-To-User support forum of the Apache HTTP Server 
Project.

See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] RE: [SPAM] - [EMAIL PROTECTED] MySQL Related problem - Email found in subject

2007-10-17 Thread jmacaranas
Hi,

   You can edit /etc/hosts and redirect  localhost to the new DB IP and
create a hostname for your client1 like client1db to IP and ask them to
migrate.. from localhost to clientdb.. 



Hth,

-Original Message-
From: Marc Perkel [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, October 17, 2007 1:37 PM
To: users@httpd.apache.org
Subject: [SPAM] - [EMAIL PROTECTED] MySQL Related problem - Email found in
subject

Hi Everyone,

I'm hosting a lot of domains for a lot of people who have a lot of MySQL

applications that they installed and almost all are configured to talk 
to MySQL on "localhost".

In order to spread the load I'm trying to move the MySQL server to 
another machine. Since everything is configured for localhost I figured 
all I had to do was move the database to the new server, shut down the 
existing MySQL server, and set up an SSH tunnel so that all the MyDQL 
call on the original server would pipe to the new server.

But that doesn't work.

The problem is that PHP/MySQL apps configured for localhost insiste on 
talking to the socket located at /var/lib/mysql/mysql.sock instead of 
127.0.0.1. In the MySQL world, localhost != 127.0.0.1.

I tried using the pipe and socat on the socket but socat wasn't reliable

and quit working for reasons I don't understand. So I'm wondering how to

make it work. Has anyone managed to get this to work?

I'm also thinking about this. Could I mount the new MySQL server using 
NFS so that /var/lib/mysql/mysql.sock is on the new MySQL server and 
calls to that socket would go to the new server. Will that work?

Thanks in advance.


-
The official User-To-User support forum of the Apache HTTP Server
Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



This message and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom it is
addressed. It may contain sensitive and private proprietary or legally
privileged information. No confidentiality or privilege is waived or
lost by any mistransmission. If you are not the intended recipient,
please immediately delete it and all copies of it from your system,
destroy any hard copies of it and notify the sender. You must not,
directly or indirectly, use, disclose, distribute, print, or copy any
part of this message if you are not the intended recipient. 
FXDirectDealer, LLC reserves the right to monitor all e-mail 
communications through its networks. Any views expressed in this 
message are those of the individual sender, except where the 
message states otherwise and the sender is authorized to state them.

Unless otherwise stated, any pricing information given in this message
is indicative only, is subject to change and does not constitute an
offer to deal at any price quoted. Any reference to the terms of
executed transactions should be treated as preliminary only and subject
to our formal confirmation. FXDirectDealer, LLC is not responsible for any
recommendation, solicitation, offer or agreement or any information
about any transaction, customer account or account activity contained in
this communication.


-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] MySQL Related problem

2007-10-17 Thread Marc Perkel

Hi Everyone,

I'm hosting a lot of domains for a lot of people who have a lot of MySQL 
applications that they installed and almost all are configured to talk 
to MySQL on "localhost".


In order to spread the load I'm trying to move the MySQL server to 
another machine. Since everything is configured for localhost I figured 
all I had to do was move the database to the new server, shut down the 
existing MySQL server, and set up an SSH tunnel so that all the MyDQL 
call on the original server would pipe to the new server.


But that doesn't work.

The problem is that PHP/MySQL apps configured for localhost insiste on 
talking to the socket located at /var/lib/mysql/mysql.sock instead of 
127.0.0.1. In the MySQL world, localhost != 127.0.0.1.


I tried using the pipe and socat on the socket but socat wasn't reliable 
and quit working for reasons I don't understand. So I'm wondering how to 
make it work. Has anyone managed to get this to work?


I'm also thinking about this. Could I mount the new MySQL server using 
NFS so that /var/lib/mysql/mysql.sock is on the new MySQL server and 
calls to that socket would go to the new server. Will that work?


Thanks in advance.


-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] mod_authnz_ldap and SSL

2007-10-17 Thread Eric Covener
On 10/17/07, Alexander Fortin <[EMAIL PROTECTED]> wrote:
>
> 
>  LDAPTrustedGlobalCert CA_BASE64 /etc/ssl/certs/cacert.pem
>  LDAPTrustedMode SSL
>  LDAPVerifyServerCert off
> 

Wireshark will format the initial stages of the handshake pretty
nicely, you might see something fishy or a plaintext SSL Alert.

Can openssl handshake w/ the ldap server?  Is its cert  issued by that
cacert.pem?  Can openssl validate the cert chain when you give it that
same cacert.pem?


-- 
Eric Covener
[EMAIL PROTECTED]

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: [EMAIL PROTECTED] SSL pass phrase

2007-10-17 Thread Lindsay Hausner

>Many Unixes (such as FreeBSD) allow you to chmod 000 a file and root can 
>still access and modify it.  It works on my box anyway.
>
>-- 
>Aaron Dalton
>http://perlkonig.com

You can also use the '-nodes' switch when generating the private key.  This
however, leaves it unencrypted so you must be careful w/ permissions (make
sure apache can read it).

Hope this helps.

lh..
http://www.trustix.org/






-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] dual apache2 proxyERRORS issue

2007-10-17 Thread Krist van Besien
On 10/17/07, Shaw, Dan <[EMAIL PROTECTED]> wrote:
> This is a reverse proxy

Ok. I asumed so much.
>
> That is a questioned we have not got an answer to yet.

??

> Is there a way to test to the end points via the proxy(s)
> To ensure the proxy part is working?
>
> We did setup a test for an internal server in which we know it accepts
> connections and what the end URL is and it works

Usually I  first make sure everything works without the proxy.
Then I test that everything works from the proxy itself, ie. I start a
browser on the machine that my reverse proxy will run on, and make
sure that I can access everything.

The errors I see in your logfiles seem to indicate that the machine
your are proxying is for some reason not accepting requests from the
proxy machine. You ought to also look in the logfiles of that machine.

Krist

-- 
[EMAIL PROTECTED]
[EMAIL PROTECTED]
Bremgarten b. Bern, Switzerland
--
A: It reverses the normal flow of conversation.
Q: What's wrong with top-posting?
A: Top-posting.
Q: What's the biggest scourge on plain text email discussions?

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: [EMAIL PROTECTED] dual apache2 proxyERRORS issue

2007-10-17 Thread Shaw, Dan
This is a reverse proxy

That is a questioned we have not got an answer to yet.

Is there a way to test to the end points via the proxy(s)
To ensure the proxy part is working?

We did setup a test for an internal server in which we know it accepts
connections and what the end URL is and it works



Daniel P. Shaw
Triad Financial
Pro-Tem Contractor
[EMAIL PROTECTED]
Ext: 25106
Ph: 714-799-5106
Start Date: 08-13-2007

-Original Message-
From: Krist van Besien [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, October 17, 2007 7:01 AM
To: users@httpd.apache.org
Subject: Re: [EMAIL PROTECTED] dual apache2 proxyERRORS issue

Is this a forward or reverse proxy setup?
Is server 10.20.5.107 accepting connections?


On 10/16/07, Shaw, Dan <[EMAIL PROTECTED]> wrote:
>
>
>
>
> We have two apache2 proxy servers that work well except for the latest
> entry.
>
> Really need help on this one.
>
> See error and access log below.
>
>
>
> Access_Log
>
> 192.168.41.220 - - [16/Oct/2007:08:56:42 -0700] "GET /EloanWeb.aspx
> HTTP/1.1" 502 315
>
> 192.168.41.220 - - [16/Oct/2007:08:56:51 -0700] "GET / HTTP/1.1" 502
315
>
>
>
> Error_log
>
> [Tue Oct 16 08:56:51 2007] [error] (146)Connection refused: proxy:
HTTP:
> attempt to connect to 10.20.5.107:80 (10.
>
> 20.5.107) failed
>
>
>
>
>
>
>
> Thanks,
>
>
>
>
>
> Daniel P. Shaw


-- 
[EMAIL PROTECTED]
[EMAIL PROTECTED]
Bremgarten b. Bern, Switzerland
--
A: It reverses the normal flow of conversation.
Q: What's wrong with top-posting?
A: Top-posting.
Q: What's the biggest scourge on plain text email discussions?

-
The official User-To-User support forum of the Apache HTTP Server
Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] AllowOverride PROBLEM

2007-10-17 Thread Joshua Slive
On 10/17/07, Javier Arancibia/NACION SEGUROS/AR
<[EMAIL PROTECTED]> wrote:
>
> Apache Version: 2.2.4
> I have a problem with AuthConfig, if i use the directive "AllowOverride
> AuthConfig" I can't see the protected directories in the browser, when I use
> "AllowOverride None" I see all of the directories in the browser.
> How to see all the directories and have "Autorization Required" in some
> directories?

I'm guessing your problem has nothing directly to do with
"AllowOverride", but rather with seeing restricted directories in your
mod_autoindex-generated directory listings. If so, you need to add
ShowForbidden to your IndexOptions line.

Joshua.

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] AllowOverride PROBLEM

2007-10-17 Thread Javier Arancibia/NACION SEGUROS/AR
Apache Version: 2.2.4
I have a problem with AuthConfig, if i use the directive "AllowOverride 
AuthConfig" I can't see the protected directories in the browser, when I 
use "AllowOverride None" I see all of the directories in the browser.
How to see all the directories and have "Autorization Required" in some 
directories?

Thanks.

Javier.


My configuration:


Options FollowSymLinks
AllowOverride None




Options Indexes Includes FollowSymLinks MultiViews
AllowOverride AuthConfig
Order allow,deny
Allow from all


[EMAIL PROTECTED] passing authentication to tomcat pls help

2007-10-17 Thread loredana loredana
I've installed keberos mod for apache. Instalation went ok, user is 
authenticated and I tested this using a small php file in which I printed out 
the headers and remoteuser prints out the username. I want to pass this to 
tomcat mod_jk so that in tomcat the getRemoteuser() will return the same 
username. As I know, if you add the attribute 
tomcatAuthentication="false" to the connector element in server.xml, the remote 
user will start coming through from Apache httpd. But, of course, mine says 
null. So on the apache it works but on tomcat if gives null even with the 
tomcatAuthentication =false. You might say this is a tomcat related issue but 
nobody on that list was able to give me a hand. Hope someone here can give me 
some kind of pointers. 10x in advance



__
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com


-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] http to https redirection with an exception

2007-10-17 Thread Krist van Besien
On 10/16/07, ImageCity/Hirotsuna Mizuno <[EMAIL PROTECTED]> wrote:
> joy d wrote:
> > You can use mod_rewrite and define a RewriteCond for the except case.
>
> Thank you for your appropriate advice.
>
> Unfortunately, our Apache server was compiled without mod_rewrite, and
> it's not allowed to re-compile it.

If your apache was compiled with DSO support you don't need to
recompile it. You can just compile mod_rewrite and load it in your
config.

Krist

-- 
[EMAIL PROTECTED]
[EMAIL PROTECTED]
Bremgarten b. Bern, Switzerland
--
A: It reverses the normal flow of conversation.
Q: What's wrong with top-posting?
A: Top-posting.
Q: What's the biggest scourge on plain text email discussions?

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] dual apache2 proxyERRORS issue

2007-10-17 Thread Krist van Besien
Is this a forward or reverse proxy setup?
Is server 10.20.5.107 accepting connections?


On 10/16/07, Shaw, Dan <[EMAIL PROTECTED]> wrote:
>
>
>
>
> We have two apache2 proxy servers that work well except for the latest
> entry.
>
> Really need help on this one.
>
> See error and access log below.
>
>
>
> Access_Log
>
> 192.168.41.220 - - [16/Oct/2007:08:56:42 -0700] "GET /EloanWeb.aspx
> HTTP/1.1" 502 315
>
> 192.168.41.220 - - [16/Oct/2007:08:56:51 -0700] "GET / HTTP/1.1" 502 315
>
>
>
> Error_log
>
> [Tue Oct 16 08:56:51 2007] [error] (146)Connection refused: proxy: HTTP:
> attempt to connect to 10.20.5.107:80 (10.
>
> 20.5.107) failed
>
>
>
>
>
>
>
> Thanks,
>
>
>
>
>
> Daniel P. Shaw


-- 
[EMAIL PROTECTED]
[EMAIL PROTECTED]
Bremgarten b. Bern, Switzerland
--
A: It reverses the normal flow of conversation.
Q: What's wrong with top-posting?
A: Top-posting.
Q: What's the biggest scourge on plain text email discussions?

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] A problem of failover of mod_proxy_balancer

2007-10-17 Thread 青柳 隆
Hello,

I used mod_proxy_balancer and tested failover. 

The composition is as follows.

OS: CentOS 4.4
Java: jdk_1.5.0_11-b03

Apache(2.2.6) --+-- JBoss EAP(4.2.0)
|
+-- JBoss EAP(4.2.0)



mod_proxy_balancer setting

ProxyPass /lb/ balancer://lb/ timeout=5 maxattempts=3


  BalancerMember ajp://ap1:8009/lb/ min=1 keepalive=on retry=300
  BalancerMember ajp://ap2:8009/lb/ min=1 keepalive=on retry=300



When abnormality occurs to a backend server of one side 
while it takes load in a lot of threads,
mod_proxy_balancer does not perform failover normally. 
Requests continue being performed by the backend server 
which there is abnormality.
On account of this, throughput extremely turns worse.

When the backend server of the one side is not switched on or 
when I pulled the LAN cable of the backend server of the one side, 
this phenomenon occurs.

This phenomenon does not occur even if it takes high load 
when I stopped a JAVA process of JBoss. 
Failover is performed normally.

Will this be a bug?


--
Takashi Aoyagi
E-mail: [EMAIL PROTECTED]
--


-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] library path for external rewriting program for mod_rewrite

2007-10-17 Thread Nick Kew
On Wed, 17 Oct 2007 14:34:40 +0200
Francoise Koenig-Jost <[EMAIL PROTECTED]> wrote:

>
> - I tried to add:
>  SetEnv LD_LIBRARY_PATH
> "/www/httpd-2.2.6/lib:/usr/lib:/usr/local/lib" in apache
> configuration file, it does not change anything.

For an external script, you'll want PassEnv.

Actually, if it's a RewriteMap, that may be different (haven't
checked).  Set the LD_LIBRARY_PATH in apachectl, too.

> But since I don't like to mess up the system installation
> directories, I'd like to know what I should do to set the
> LD_LIBRARY_PATH for the python script. (remember, it works with
> Apache 1.3.27).

We've had a lot of security updates since Apache 1.3.27.


-- 
Nick Kew

Application Development with Apache - the Apache Modules Book
http://www.apachetutor.org/

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] library path for external rewriting program for mod_rewrite

2007-10-17 Thread Francoise Koenig-Jost

Dear All,

I've been using for several months an external rewriting program for 
mod_rewrite in Apache 1.3.27 which is working as expected, now I want to 
upgrade to Apache 2.2.6 and I run into trouble when my program needs to 
open a library file not in /usr/lib.


Here are the details of my installation:

- Sun server under Solaris 10

- Apache 2.2.6 compiled with gcc 3.4.6 (gcc installed in /usr/local/bin 
, /usr/local/lib, etc.). Apache is installed in /www/httpd-2.2.6 with 
symbolic link /www/apache2


- External rewriting script in Python ( python 2.5.1 installed in 
/opt/Python-2.5.1 with symbolic link /opt/python, was also compiled with 
gcc), the script starts with the magical "#!/opt/python/bin/python". The 
script works stand-alone with the same LD_LIBRARY_PATH as the httpd daemon.


- LD_LIBRARY_PATH of the httpd daemon : 
/www/httpd-2.2.6/lib:/usr/lib:/usr/local/lib:/usr/dt/lib:/usr/openwin/lib


The problem:

- The external rewriting script crashes with the following message in 
the error_log:


Traceback (most recent call last):
 File "/www/apache2/conf/extra/query_string.py", line 11, in 
   import sys, cgi, urllib
 File "/opt/Python-2.5.1/lib/python2.5/cgi.py", line 37, in 
   from operator import attrgetter
ImportError: ld.so.1: python: fatal: libgcc_s.so.1: open failed: No such 
file or directory


- I modified the script to make it dump its environment variables in a 
file when it starts, it has none.


- I tried to add:
SetEnv LD_LIBRARY_PATH "/www/httpd-2.2.6/lib:/usr/lib:/usr/local/lib"
 in apache configuration file, it does not change anything.

- If I copy /usr/local/lib/libgcc_s.so.1 in /usr/lib ,  everything works 
fine, the script is in the process list as:


wwwextnew: # ps -ef|grep 29311
 apache 29313 29311   0 13:41:03 ?   0:00 
/www/httpd-2.2.6/bin/httpd -k start
 apache 29316 29311   0 13:41:03 ?   0:00 
/www/httpd-2.2.6/bin/httpd -k start
 apache 29314 29311   0 13:41:03 ?   0:00 
/www/httpd-2.2.6/bin/httpd -k start
 apache 29317 29311   0 13:41:03 ?   0:00 
/www/httpd-2.2.6/bin/httpd -k start
   root 29312 29311   0 13:41:02 ?   0:00 
/opt/python/bin/python /www/apache2/conf/extra/query_string.py
 apache 29315 29311   0 13:41:03 ?   0:00 
/www/httpd-2.2.6/bin/httpd -k start
   root 29311 1   0 13:41:02 ?   0:00 
/www/httpd-2.2.6/bin/httpd -k start

wwwextnew: #

But since I don't like to mess up the system installation directories, 
I'd like to know what I should do to set the LD_LIBRARY_PATH for the 
python script. (remember, it works with Apache 1.3.27).


Remark:

I have noticed that the process of the python script is directly started 
by httpd for Apache 2.2.6 :


   root 29312 29311   0 13:41:02 ?   0:00 
/opt/python/bin/python /www/apache2/conf/extra/query_string.py
 apache 29315 29311   0 13:41:03 ?   0:00 
/www/httpd-2.2.6/bin/httpd -k start
   root 29311 1   0 13:41:02 ?   0:00 
/www/httpd-2.2.6/bin/httpd -k start


but started by a shell for Apache 1.3.27 :

   root  6510  6509  0 14:22:17 ?0:00 /opt/python/bin/python 
/www/apache/conf/query_string.py
   root  6509 21261  0 14:22:17 ?0:00 /bin/sh -c 
/www/apache/conf/query_string.py
 apache 14192 21261  0 14:30:46 ?0:00 
/www/apache_1.3.27/bin/httpd -DSSL
 apache  6527 21261  0 14:22:18 ?0:03 
/www/apache_1.3.27/bin/httpd -DSSL
   root 21261 1  0   Sep 11 ?6:36 
/www/apache_1.3.27/bin/httpd -DSSL


Thanks in advance for your help and best regards,

Francoise Koenig

Web group - http://www.esrf.eu/


begin:vcard
fn;quoted-printable:Fran=C3=A7oise K=C3=B6nig
n;quoted-printable;quoted-printable:K=C3=B6nig;Fran=C3=A7oise
org:ESRF;Computing Services - Web Group
adr:BP 220;;6 rue Jules Horowitz;GRENOBLE;;38043;France
email;internet:[EMAIL PROTECTED]
tel;work:+33 (0)4 76 88 25 57
x-mozilla-html:TRUE
url:http://www.esrf.eu/
version:2.1
end:vcard


-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: [EMAIL PROTECTED] Alias won't work within my httpd.conf

2007-10-17 Thread Krist van Besien
On 10/17/07, thomas Armstrong <[EMAIL PROTECTED]> wrote:
...
> But if I access:
> http://newweb.myproject.com/events/
> I get a 404 error.

What error messages do you see in your error log?

Krist



-- 
[EMAIL PROTECTED]
[EMAIL PROTECTED]
Bremgarten b. Bern, Switzerland
--
A: It reverses the normal flow of conversation.
Q: What's wrong with top-posting?
A: Top-posting.
Q: What's the biggest scourge on plain text email discussions?

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] Alias won't work within my httpd.conf

2007-10-17 Thread thomas Armstrong
Hi.

Using Apache 2.0 on Linux (with 'mod_alias' loaded), I want to set an Alias:
/events/ --> /usr/www/myproject/newweb/modules/events/web/

This is part of my 'httpd.conf':


ServerAdmin [EMAIL PROTECTED]
DocumentRoot /usr/www/myproject/newweb/web
ServerName newweb.myproject.com
ServerAlias newweb.myproject.net newwebmyproject.foo.com
CBandSpeed 2048 35 40
ScriptAlias /cgi-bin /usr/www/cgi-bin/newweb
php_flag display_errors 0
php_flag display_startup_errors 1
php_admin_value safe_mode_include_dir /usr/www/myproject/newweb
php_admin_value safe_mode_exec_dir /usr/www/cgi-bin/newweb
ErrorLog /usr/www-logs/newweb-error_log
CustomLog "|/usr/local/sbin/cronolog
/usr/www-logs/newweb-access_log_%m-%y" combined

#Events module
Alias /events/ /usr/www/myproject/newweb/modules/events/web/

Options Indexes FollowSymLinks
Order Allow,Deny
Allow from all
AllowOverride all
DirectoryIndex index.php




But if I access:
http://newweb.myproject.com/events/
I get a 404 error.

Any similar experience? Thank you very much.

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] Basic SSL question

2007-10-17 Thread Krist van Besien
On 10/15/07, Richard Bates <[EMAIL PROTECTED]> wrote:
> I am trying to set up a server that has two(2) ssl sites.
>
> If I remember correctly, A long time ago Apache 1.3.9
> you could only do one SSL site on a server.
> I downloaded Apache 2.2.6.
>
>
> Has this changed? if so how do I do it.

You can't do name based virtual SSL hosts. This is not a limitation of
apache, this is a limitation of the https protocol, so a more recent
version of apache doesn't solve your problem.

> I can't find the statement saying weather you can do more than one or
> not at
> http://httpd.apache.org/docs/2.2/

http://httpd.apache.org/docs/2.2/ssl/ssl_faq.html#vhosts

Krist


-- 
[EMAIL PROTECTED]
[EMAIL PROTECTED]
Bremgarten b. Bern, Switzerland
--
A: It reverses the normal flow of conversation.
Q: What's wrong with top-posting?
A: Top-posting.
Q: What's the biggest scourge on plain text email discussions?

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] mod_authnz_ldap and SSL

2007-10-17 Thread Alexander Fortin

Hi guys.
I'm trying to enable SSL for LDAP authentication on a Debian Etch, 
Apache version 2.2.3


The authentication/authorization without SSL directives is working 
properly, but as soon as I try to enable the secure layer, I get this error:


[debug] mod_authnz_ldap.c(373): [18646] auth_ldap authenticate: using 
URL ldaps://ldap.mydomain.com/ou=People,dc=mydomain,dc=com?uid
[warn] [30270] auth_ldap authenticate: user testuser authentication 
failed; URI /account-management/secure/ [LDAP: ldap_simple_bind_s() 
failed][Can't contact LDAP server]


I'm pretty sure it's not a firewall issue because I can telnet to port 
636 on LDAP server(s).


These are the directives I've set up:


LDAPTrustedGlobalCert CA_BASE64 /etc/ssl/certs/cacert.pem
LDAPTrustedMode SSL
LDAPVerifyServerCert off



AuthType Basic
AuthName "LDAP authentication for IT"
AuthBasicProvider ldap
AuthzLDAPAuthoritative off
AuthLDAPURL "ldaps://ldap.mydomain.com/ou=People,dc=it,dc=net,dc=au?uid"
require valid-user


Any suggestion? Thanks!

--
Alexander Fortin
IT Consultant
Informed Technology
E-mail: [EMAIL PROTECTED]
Ph: 08 9460 4888  Fax: 08 9460 4877

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: [EMAIL PROTECTED] Mod_perl and includes

2007-10-17 Thread joy d

use 'PerlRequire' to import a file in apache's startup time.

in this file you import the lib's path.ie,in httpd.conf:

PerlRequire  /opt/apache1.3/mylib/startup.pl

and in startup.pl:

use lib qw(/the/lib/path);

> Date: Tue, 16 Oct 2007 19:21:19 -0400
> From: [EMAIL PROTECTED]
> To: users@httpd.apache.org
> Subject: [EMAIL PROTECTED] Mod_perl and includes
>
> I'm trying to bring up a server with mod_perl configuration original
> created for an Apache 2.0 server but on an Apache 1.3 server. The
> problem is that "PerlSwitches" isn't available on the mod_perl running
> on the 1.3 server. How can I get this library path included on a 1.3
> server?
>
>
>
> PerlSwitches -I /var/www/foo/bar/lib
> PerlModule BAR
>
> 
> SetHandler modperl
> PerlResponseHandler BAR
> 
>
> Thanks in advance,
> Tony
>
> -
> The official User-To-User support forum of the Apache HTTP Server Project.
> See  for more info.
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> " from the digest: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
>

_
News, entertainment and everything you care about at Live.com. Get it now!
http://www.live.com/getstarted.aspx
-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] 100-continue response when 401 expected - Apache 2.2.26

2007-10-17 Thread Nick Kew
On Tue, 16 Oct 2007 14:42:40 -0700
"Ragini Bisarya" <[EMAIL PROTECTED]> wrote:

> I would like to clarify that the client does not know if the web

Yes, I understand what you're saying.  That was clear enough first
time.  And just to be clear, I believe you're probably right that
there is a problem.  But you didn't tell the whole story.

> > That seems less than optimal, but you didn't really give it a
> > chance.
> 
> I expected that sending a request without the Authentication header,
> for a resource that requires authentication, would result in a 401
> being returned. Instead I got back a 100 Continue.

But you didn't explain where in your overall setup the 401 is
generated, and therefore whether or not the server needs the
request body before it can deduce whether the request is accepted.

> I was expecting that things that can be checked by the apache
> infrastructure without  requiring the application (in this case the
> put.cgi) to get involved would be checked before asking the client to
> continue sending the body. Example - Method allowed or not (405), auth
> required or not (401).

Yep.  So tell us *exactly* what should cause the 401, so we can tell
when it *should* happen.

> While trying to test for the condition where if a malformed request is
> sent would I get back a 100 continue or 400 Bad request I noticed a
> strange thing with 2.2.6.
> 
> If I do not have the Content-Length header present in the initial
> request, then I get back a 401 just the way I would like to.

Without a content-length (or transfer-encoding) it knows there cannot
be a request body, so it doesn't ask for one.  This fits with the
suspected-bug you're reporting, though it's still not certain proof.

> Unfortunately this is not a workable workaround. Because for resources
> that do NOT require authentication, omitting the Content-Length header
> results in a 500 Internal error.

Ugh.  That should be a 400 (Bad Request) error.  Is your script
being run, or is Apache generating the error without running the
script?

> ErrorError Publishing File
> An error occurred publishing this file (Content-Length missing or
> zero ()).

Hmmm, that's not Apache, so it's either your script or a custom
ErrorDocument.

> > > Apache 1.3.33 on the other hand, checks for the 401 condition
> > > before sending a 100 Continue response.  It sends a 401 to the
> > > client.
> >
> > Are you sure?  That's not what you tested.
> 
> My test tried to upload a file to a dir that required authentication.

You tested "it sends 401 when it should send 401".
You didn't test "it doesn't send 401 when it should send 100".

> > So what would've happened if the original request had
> > included the credentials, or if no authentication was required?
> 
> For both of those cases Apache 1.3 and 2.2 return 100 Continue and
> then the Client  sends the request body. So no issues there.

OK, now you're telling us.  Not that it really matters: I just
sometimes get fussy about incomplete reports.

> Sorry if I am repeating the same thing in many more words. I hope I am
> getting my point across.

Indeed, thanks for the report.

Can I suggest your best course of action now is to enter it into
our bugzilla at http://issues.apache.org/ ?  I *think* the root
cause of this is related to bugs 16518 and 19442 and an old/
incorrect fix to them (see Comment 14 on bug 16518).  But your
bug is clearly not the same as those, and needs a new report.

-- 
Nick Kew

Application Development with Apache - the Apache Modules Book
http://www.apachetutor.org/

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]