[EMAIL PROTECTED] mmap cache can't open foo.php - Too many open files

2008-03-27 Thread thomas Armstrong
Hi.

Using Apache version 2.2.3 on 'Linux CentOS', my webpages are very
slow and I get this error messages on my 'error_log' file:
---
[Wed Mar 26 13:05:39 2008] [warn-phpd] mmap cache can't open
/var/www/classes/Threads.php - Too many open files (pid 17650)
[Wed Mar 26 13:05:42 2008] [warn-phpd] mmap cache can't open
/var/www/classes/User.php - Too many open files (pid 17650)
[Wed Mar 26 13:05:46 2008] [warn-phpd] mmap cache can't open
/var/www/lib/Functions.php - Too many open files (pid 17650)
---

I've got PHP 5.2.5 and APC (a Cache System) 3.0.17. Does it something
to do with Apache?

Thank you very much.

-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] Re: mmap cache can't open foo.php - Too many open files

2008-03-27 Thread thomas Armstrong
Some data of my server:

[]# free -m
 total   used   free sharedbuffers cached
Mem:  2693267   2425  0  0  0
-/+ buffers/cache:267   2425
Swap:0  0  0

[]# ulimit -m
unlimited

As you see, my Host provider gave me a VPS server with Swap=0.

?



On Thu, Mar 27, 2008 at 10:08 AM, thomas Armstrong [EMAIL PROTECTED] wrote:
 Hi.

  Using Apache version 2.2.3 on 'Linux CentOS', my webpages are very
  slow and I get this error messages on my 'error_log' file:
  ---
  [Wed Mar 26 13:05:39 2008] [warn-phpd] mmap cache can't open
  /var/www/classes/Threads.php - Too many open files (pid 17650)
  [Wed Mar 26 13:05:42 2008] [warn-phpd] mmap cache can't open
  /var/www/classes/User.php - Too many open files (pid 17650)
  [Wed Mar 26 13:05:46 2008] [warn-phpd] mmap cache can't open
  /var/www/lib/Functions.php - Too many open files (pid 17650)
  ---

  I've got PHP 5.2.5 and APC (a Cache System) 3.0.17. Does it something
  to do with Apache?

  Thank you very much.


-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] [error] [client 127.0.0.1] Directory index forbidden by Options directive

2008-03-27 Thread thomas Armstrong
Hi.

Using Apache 2.2 with Plesk, I found out these error messages on my
'error_log' file:

[Wed Mar 26 18:45:50 2008] [error] [client 127.0.0.1] Directory index
forbidden by Options directive: /var/www/html/
[Wed Mar 26 18:49:57 2008] [error] [client 127.0.0.1] Directory index
forbidden by Options directive: /var/www/html/


I didn't access my webserver from my webserver, so I consider these
errors are due to some script which tries to access '/var/www/html/'.
My project is located at: /var/www/html/vhosts/foo.com/httpdocs

Any similar experience? Thank you very much.

-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] You don't have permission to access foo.php on this server.

2008-03-27 Thread thomas Armstrong
Hi.

Using Apache/2.2 + PHP/5.2, I'm suffering an odd issue when accessing
an image generated with PHP.

When I access:
http://www.foo.com/apc.php?IMG=11206615989

I get *SOMETIMES* this error message
---
Forbidden
You don't have permission to access /apc.php on this server.
--

But most of times I access ok to the image, without any error message.
Any similar experience?

Thank you very much.

-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] Re: You don't have permission to access foo.php on this server.

2008-03-27 Thread thomas Armstrong
This is my Apache configuration (I use Plesk):
-
   DocumentRoot /var/www/vhosts/foo.com/httpdocs/web
   Directory /var/www/vhosts/foo.com/httpdocs/web
 php_admin_value open_basedir
/var/www/vhosts/foo.com/httpdocs:/tmp:/usr/share/pear/plugins:/usr/share/php/plugins
   Order Allow,Deny
   Allow from all
   AllowOverride all
   DirectoryIndex index.php
   /Directory
--

On Thu, Mar 27, 2008 at 12:21 PM, thomas Armstrong [EMAIL PROTECTED] wrote:
 Hi.

  Using Apache/2.2 + PHP/5.2, I'm suffering an odd issue when accessing
  an image generated with PHP.

  When I access:
  http://www.foo.com/apc.php?IMG=11206615989

  I get *SOMETIMES* this error message
  ---
  Forbidden
  You don't have permission to access /apc.php on this server.
  --

  But most of times I access ok to the image, without any error message.
  Any similar experience?

  Thank you very much.


-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] url redirection

2008-03-27 Thread Mathew

The last time I had to configure something for tomcat I used proxy settings.  I 
don't have access to this information right now otherwise I'd give an example 
of what I did but I'm sure you can find something on Google.

Mathew

Melanie Pfefer wrote:

Hi,

How to redirect urls that contains �jar� string from

http://zeus:8085/web/sec:jar:001
to
http://zeus:8086/src/web:sec:jar:001

the first one is on apache
the 2nd web app is on tomcat

thanks bunches



  __
Sent from Yahoo! Mail.
More Ways to Keep in Touch. http://uk.docs.yahoo.com/nowyoucan.html

-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



--
Keep up with my goings on at http://theillien.blogspot.com


-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
 from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] httpd segfaults?

2008-03-27 Thread Joshua Slive
On Wed, Mar 26, 2008 at 11:43 PM, Devraj Mukherjee [EMAIL PROTECTED] wrote:
 I already have that in httpd.conf and don't see any CoreDump files in /tmp.

  On Thu, Mar 27, 2008 at 5:11 AM, Joshua Slive [EMAIL PROTECTED] wrote:
   On Mon, Mar 24, 2008 at 3:35 AM, Devraj Mukherjee [EMAIL PROTECTED] 
 wrote:
 Hi everyone,

  I administer a web server running CentOS running httpd 2.0.59
  distributed from the centosplus repository. I noticed that dmesg
  splits out a heap of these messages. However httpd was still running,
  I am suspecting that a child process spat the dummy.

  httpd[17570]: segfault at 007fbf3ffca0 rip 002a9a59cc5b rsp
  007fbf3ffc80 error 6

  Can anyone shed any light on what this might be?
  
Here's how to get more info on segfaults:
http://httpd.apache.org/dev/debugging.html#crashes

There's a bunch of other instructions in there, including stuff about
setting ulimit properly and checking the apache error log.

Joshua.

-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] [error] [client 127.0.0.1] Directory index forbidden by Options directive

2008-03-27 Thread Joshua Slive
On Thu, Mar 27, 2008 at 5:32 AM, thomas Armstrong [EMAIL PROTECTED] wrote:
 Hi.

  Using Apache 2.2 with Plesk, I found out these error messages on my
  'error_log' file:
  
  [Wed Mar 26 18:45:50 2008] [error] [client 127.0.0.1] Directory index
  forbidden by Options directive: /var/www/html/
  [Wed Mar 26 18:49:57 2008] [error] [client 127.0.0.1] Directory index
  forbidden by Options directive: /var/www/html/
  

  I didn't access my webserver from my webserver, so I consider these
  errors are due to some script which tries to access '/var/www/html/'.
  My project is located at: /var/www/html/vhosts/foo.com/httpdocs

  Any similar experience? Thank you very much.

You may be seeing this:
http://wiki.apache.org/httpd/InternalDummyConnection

Joshua.

-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] mod_jk initialisation problem

2008-03-27 Thread frannack Guimard

Hello,

I'm using mod_jk to load balance my tomcat instances on Apache http server 2. 
The problem I'm having is that if I don't have any tomcat instances running, I 
still want my apache to work for the static pages. But If in my 
worker.properties I don't set any worker, apache does not seem to work. Below 
is the kind of  worker.properties I'd like to start and then add my worker as 
soon as they are up and running.

worker.list=router,lbstatus
worker.router.type=lb
worker.router.balanced_workers=
worker.router.mount=/App1/*
worker.lbstatus.type=status


Thank you,

Franck
_
Watch “Cause Effect,” a show about real people making a real difference.  Learn 
more.
http://im.live.com/Messenger/IM/MTV/?source=text_watchcause
-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] url redirection

2008-03-27 Thread Melanie Pfefer
I tried this

RewriteEngine On
RewriteRule ^/(.*jar.*) http://zeus:8086/src/$1
[R=301,L]

However
http://zeus/web:jar:001
becomes
http://zeus:8086/src/web:jar:/web:jar:001

while I want it to be

http://zeus:8086/src/web:jar:001

could you please advise?
thanks






--- Mathew [EMAIL PROTECTED] wrote:

 The last time I had to configure something for
 tomcat I used proxy settings.  I don't have access
 to this information right now otherwise I'd give an
 example of what I did but I'm sure you can find
 something on Google.
 
 Mathew
 
 Melanie Pfefer wrote:
  Hi,
  
  How to redirect urls that contains �jar�
 string from
  
  http://zeus:8085/web/sec:jar:001
  to
  http://zeus:8086/src/web:sec:jar:001
  
  the first one is on apache
  the 2nd web app is on tomcat
  
  thanks bunches
  
  
  
   

__
  Sent from Yahoo! Mail.
  More Ways to Keep in Touch.
 http://uk.docs.yahoo.com/nowyoucan.html
  
 

-
  The official User-To-User support forum of the
 Apache HTTP Server Project.
  See URL:http://httpd.apache.org/userslist.html
 for more info.
  To unsubscribe, e-mail:
 [EMAIL PROTECTED]
from the digest:
 [EMAIL PROTECTED]
  For additional commands, e-mail:
 [EMAIL PROTECTED]
  
 
 -- 
 Keep up with my goings on at
 http://theillien.blogspot.com
 
 

-
 The official User-To-User support forum of the
 Apache HTTP Server Project.
 See URL:http://httpd.apache.org/userslist.html for
 more info.
 To unsubscribe, e-mail:
 [EMAIL PROTECTED]
   from the digest:
 [EMAIL PROTECTED]
 For additional commands, e-mail:
 [EMAIL PROTECTED]
 
 



  ___ 
Yahoo! For Good helps you make a difference  

http://uk.promotions.yahoo.com/forgood/

-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] mod_negotiate and source qualities by type, charset, language, and encoding

2008-03-27 Thread Daniel Aleksandersen
Hi,

I know I can set the source quality (qs) for language negotiation using 
the “LanguagePriority” option. For example, “LanguagePriority nn nb en”. 
But can I achieve the same on type, charset, and encoding?

I want to set the priority for types like this for all URIs. For 
example, “TypePriority application/xhtml+xml text/html text/plain”. I 
know I can achieve this on a per URI basis using type maps. But I want a 
faster way to do it on all files.

For example, I want to prioritise serving document.utf-8.xhtml.gz over 
document.iso-8859-15.txt.zip.
-- 
Daniel Aleksandersen

-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] mod_negotiate and source qualities by type, charset, language, and encoding

2008-03-27 Thread Joshua Slive
On Thu, Mar 27, 2008 at 11:14 AM, Daniel Aleksandersen
[EMAIL PROTECTED] wrote:
 Hi,

  I know I can set the source quality (qs) for language negotiation using
  the LanguagePriority option. For example, LanguagePriority nn nb en.
  But can I achieve the same on type, charset, and encoding?

Actually, LanguagePriority does not set source quality.
LanguagePriority has an effect only if the client doesn't send
Accept-Language headers or if ForceLanguagePriority is set and Apache
can't determine the best language in any other way.


  I want to set the priority for types like this for all URIs. For
  example, TypePriority application/xhtml+xml text/html text/plain. I
  know I can achieve this on a per URI basis using type maps. But I want a
  faster way to do it on all files.

  For example, I want to prioritise serving document.utf-8.xhtml.gz over
  document.iso-8859-15.txt.zip.

As far as I know, there is no way to set source quality in apache
other than through type maps.

Joshua.

-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] url redirection

2008-03-27 Thread Melanie Pfefer
things are ok now with this rewrite rule

RewriteRule ^/(.*web:jar.*) http://zeus:8086/src/$1
[R=301,L]

I wanted to have 'jar' as pattern but couldn't do it.

If someone can help, I appreciate.

--- Melanie Pfefer [EMAIL PROTECTED] wrote:

 I tried this
 
 RewriteEngine On
 RewriteRule ^/(.*jar.*) http://zeus:8086/src/$1
 [R=301,L]
 
 However
 http://zeus/web:jar:001
 becomes
 http://zeus:8086/src/web:jar:/web:jar:001
 
 while I want it to be
 
 http://zeus:8086/src/web:jar:001
 
 could you please advise?
 thanks
 
 
 
 
 
 
 --- Mathew [EMAIL PROTECTED] wrote:
 
  The last time I had to configure something for
  tomcat I used proxy settings.  I don't have access
  to this information right now otherwise I'd give
 an
  example of what I did but I'm sure you can find
  something on Google.
  
  Mathew
  
  Melanie Pfefer wrote:
   Hi,
   
   How to redirect urls that contains �jar�
  string from
   
   http://zeus:8085/web/sec:jar:001
   to
   http://zeus:8086/src/web:sec:jar:001
   
   the first one is on apache
   the 2nd web app is on tomcat
   
   thanks bunches
   
   
   

 

__
   Sent from Yahoo! Mail.
   More Ways to Keep in Touch.
  http://uk.docs.yahoo.com/nowyoucan.html
   
  
 

-
   The official User-To-User support forum of the
  Apache HTTP Server Project.
   See URL:http://httpd.apache.org/userslist.html
  for more info.
   To unsubscribe, e-mail:
  [EMAIL PROTECTED]
 from the digest:
  [EMAIL PROTECTED]
   For additional commands, e-mail:
  [EMAIL PROTECTED]
   
  
  -- 
  Keep up with my goings on at
  http://theillien.blogspot.com
  
  
 

-
  The official User-To-User support forum of the
  Apache HTTP Server Project.
  See URL:http://httpd.apache.org/userslist.html
 for
  more info.
  To unsubscribe, e-mail:
  [EMAIL PROTECTED]
from the digest:
  [EMAIL PROTECTED]
  For additional commands, e-mail:
  [EMAIL PROTECTED]
  
  
 
 
 
  

___
 
 Yahoo! For Good helps you make a difference  
 
 http://uk.promotions.yahoo.com/forgood/
 

-
 The official User-To-User support forum of the
 Apache HTTP Server Project.
 See URL:http://httpd.apache.org/userslist.html for
 more info.
 To unsubscribe, e-mail:
 [EMAIL PROTECTED]
   from the digest:
 [EMAIL PROTECTED]
 For additional commands, e-mail:
 [EMAIL PROTECTED]
 
 



  ___ 
Yahoo! For Good helps you make a difference  

http://uk.promotions.yahoo.com/forgood/

-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] mod_jk + apache 2.2 problem

2008-03-27 Thread Mamta Singh
Hello!!

Sorry for my earlier incomplete question. Actually I am a newbie and now
totally messed up with apache and tomcat. Let me try to explain the whole
scenario.


I have apache 2.2, tomcat 5.5 installed on  Debian linux.  Now I am trying
to configure mod_jk to connect tomcat and apache.
I did following configurations in different files:

1. apache2.conf

Include /etc/apache2/sites-enabled/
Include /content/apache-tomcat-5.5.26/conf/auto/mod_jk.conf
JkWorkersFile /etc/apache2/workers.properties
JkLogFile /var/log/apache2/mod_jk.log
JkLogLevel info
JkLogStampFormat [%a %b %d %H:%M:%S %Y] 

2. server.xml

 Connector port=8009
   enableLookups=false redirectPort=8443
 protocol=AJP/1.3 emptySessionPath=true /

  Host name=localhost appBase=webapps
   unpackWARs=true autoDeploy=true
   xmlValidation=false xmlNamespaceAware=false

Listener className=org.apache.jk.config.ApacheConfig
   modJk=/usr/lib/apache2/modules/mod_jk.so
 workersConfig=/etc/apache2/workers.properties
   jkWorker=default append=true
   forwardAll=false/

3. ../apache2/sites-available/default

NameVirtualHost *
VirtualHost *
ServerAdmin [EMAIL PROTECTED]

ServerName localhost
JkMount /* default
JkMount /*.jsp default
Jkmount /*/servlet/* default

RewriteEngine on
RewriteLog /var/log/apache2/server.rewrite.txt
RewriteLogLevel 2


DocumentRoot /content/subversion
Directory /
Options FollowSymLinks
AllowOverride All
/Directory
Directory /content/subversion
Options Indexes FollowSymLinks MultiViews
AllowOverride None
Order allow,deny
allow from all
# This directive allows us to have apache2's default start page
# in /apache2-default/, but still have / go to the right
place
#RedirectMatch ^/$ /apache2-default/
/Directory
/VirtualHost

4. worker.properties

   workers.tomcat_home=/content/tomcat
   workers.java_home=/usr/java
   ps=/
   worker.list=default

   worker.default.port=8009
   worker.default.host=localhost
   worker.default.type=ajp13
   worker.default.lbfactor=1

   worker.loadbalancer.type=lb
   worker.loadbalancer.balanced_workers=default


Now, according to mod_jk principle now I should be able to run apache as
http://localhost without mentioning the port. ex:
http://localhost:7690http://localhost:80like this if my apache's
listening port is 7690.

Now here is my problem I am not able to run apache server without mentioning
the port. Could any one help me.

I have gone through almost all google  articles , but didn't find solution.

Thanks


[EMAIL PROTECTED] using non-standard SSL ports

2008-03-27 Thread John Almberg
I run a web server with a bunch of websites, all of which need an SSL  
connection. Instead of buying a big block of new IP addresses, I'm  
thinking of running the SSL virtual hosts on non-standard ports, like  
444, 445, etc. (just an example... I'd probably use a higher set of  
numbers.)


Since the only time visitors use the SSL connection is when they are  
accessing private info or checking out, all of which are reached by  
clicking internal links, I don't see any reason why this should be a  
problem.


In other words, if a user on sample.com wants to login, for example,  
he'd click the 'login' link, which has an address like http:// 
sample.com:444/login.html


I don't see any reason why a normal visitor would have to type an  
https address for these particular websites, so they won't every have  
to enter the port # by hand.


Even if a visitor bookmarked a secure page, they would bookmark the  
port.


This seems like a very simple way to conserve IP addresses. I've  
tested it all, and it works fine. Am I missing some serious downside?  
The only problem I can see is that I have to open more ports on my  
firewall, but I don't see why 444 should be any more vulnerable than  
443.


Why don't you see more SSL addresses like this? Why shouldn't I do this?

Any comments, much appreciated.

Brgds: John


-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
 from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] how to change the response text of the httpd server while the server is sending its response text to the client.

2008-03-27 Thread Halil Ağın
Hello List;

I want to change the response text of the httpd server while the server is
sending its response text to the client.


However, i wnat to this action by looking at the its html header.
If html header has a special meta tag, i want to add a previosly determined
html code  as  a last html element of the html body.


I searched on the web and looked apache module list.
It seems that i can do this job by the help of mod_filter.
But i am not sure, maybe i have to write a apache module.

I am still searching, but maybe you know the answer.
How can i do this jod?


Thank you very much,

-halil agin.


Re: [EMAIL PROTECTED] how to change the response text of the httpd server while the server is sending its response text to the client.

2008-03-27 Thread Joshua Slive
On Thu, Mar 27, 2008 at 12:08 PM, Halil Ağın [EMAIL PROTECTED] wrote:
 Hello List;

 I want to change the response text of the httpd server while the server is
 sending its response text to the client.


 However, i wnat to this action by looking at the its html header.
 If html header has a special meta tag, i want to add a previosly determined
 html code  as  a last html element of the html body.


 I searched on the web and looked apache module list.
 It seems that i can do this job by the help of mod_filter.
 But i am not sure, maybe i have to write a apache module.

 I am still searching, but maybe you know the answer.
  How can i do this jod?

For prototyping, you could use mod_ext_filter. But if you need
high-performance, you'll probably need a custom module.

Joshua.


Re: [EMAIL PROTECTED] using non-standard SSL ports

2008-03-27 Thread Joshua Slive
On Thu, Mar 27, 2008 at 12:02 PM, John Almberg [EMAIL PROTECTED] wrote:
 I run a web server with a bunch of websites, all of which need an SSL
  connection. Instead of buying a big block of new IP addresses, I'm
  thinking of running the SSL virtual hosts on non-standard ports, like
  444, 445, etc. (just an example... I'd probably use a higher set of
  numbers.)

  Why don't you see more SSL addresses like this? Why shouldn't I do this?

I'm not really an expert in this, but I'd say the reasons are:

1. Corporate firewall rules that block everything but 80 and 443.

2. Some users (smart ones) will take a careful look at the browser's
location bar before trusting an SSL site. Seeing a non-standard port
may give them doubts. (For example, perhaps a hacker broke into the
server and setup a site to steal info on a high-numbered port.)

I don't have any data to say whether these are serious problems or
not. Technically, your solution will work fine.

Joshua.

-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] mod_negotiate and source qualities by type, charset, language, and encoding

2008-03-27 Thread Daniel Aleksandersen
On 2008-03-27, Joshua Slive wrote:
 On Thu, Mar 27, 2008 at 11:14 AM, Daniel Aleksandersen wrote:
  Hi,
 
   I know I can set the source quality (qs) for language negotiation
  using the LanguagePriority option. For example, LanguagePriority
  nn nb en. But can I achieve the same on type, charset, and encoding?

 Actually, LanguagePriority does not set source quality.
 LanguagePriority has an effect only if the client doesn't send
 Accept-Language headers or if ForceLanguagePriority is set and Apache
 can't determine the best language in any other way.

   I want to set the priority for types like this for all URIs. For
   example, TypePriority application/xhtml+xml text/html text/plain.
  I know I can achieve this on a per URI basis using type maps. But I
  want a faster way to do it on all files.
 
   For example, I want to prioritise serving document.utf-8.xhtml.gz
  over document.iso-8859-15.txt.zip.

 As far as I know, there is no way to set source quality in apache
 other than through type maps.

Is there a way to set global type maps?
-- 
Daniel Aleksandersen

-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] mod_negotiate and source qualities by type, charset, language, and encoding

2008-03-27 Thread Joshua Slive
On Thu, Mar 27, 2008 at 12:11 PM, Daniel Aleksandersen
[EMAIL PROTECTED] wrote:
 On 2008-03-27, Joshua Slive wrote:

   As far as I know, there is no way to set source quality in apache
   other than through type maps.

  Is there a way to set global type maps?

No, I don't believe so.

Joshua.

-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] mod_jk, worker.properties reload

2008-03-27 Thread frannack Guimard

Hello,

I'm using mod_jk to load balance my tomcat instances. Everything is working 
fine (load balancing, fail over and fall back). But the problem is when I want 
to add a new instances of Tomcat to the load balancer list. I have a cgi script 
that update the worker.properties but then I need to restart Apache HTTP 
Server. Does any one knows a way to make Apache (or mod_jk) reload that file so 
I don't have to restart Apache?

Thank you

Franck

_
Test your Star IQ
http://club.live.com/red_carpet_reveal.aspx?icid=redcarpet_HMTAGMAR
-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: [EMAIL PROTECTED] using non-standard SSL ports

2008-03-27 Thread Wilda, Jet
I think the bigger issue is that you certificate will be for 1 FQDN i.e.
sample.com and hitting with any other FQDN will pop up a window saying
the certificate and servername don't match.

~Jet

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Joshua
Slive
Sent: Thursday, March 27, 2008 12:16 PM
To: users@httpd.apache.org
Subject: Re: [EMAIL PROTECTED] using non-standard SSL ports

On Thu, Mar 27, 2008 at 12:02 PM, John Almberg [EMAIL PROTECTED]
wrote:
 I run a web server with a bunch of websites, all of which need an SSL
  connection. Instead of buying a big block of new IP addresses, I'm
  thinking of running the SSL virtual hosts on non-standard ports, like
  444, 445, etc. (just an example... I'd probably use a higher set of
  numbers.)

  Why don't you see more SSL addresses like this? Why shouldn't I do
this?

I'm not really an expert in this, but I'd say the reasons are:

1. Corporate firewall rules that block everything but 80 and 443.

2. Some users (smart ones) will take a careful look at the browser's
location bar before trusting an SSL site. Seeing a non-standard port
may give them doubts. (For example, perhaps a hacker broke into the
server and setup a site to steal info on a high-numbered port.)

I don't have any data to say whether these are serious problems or
not. Technically, your solution will work fine.

Joshua.

-
The official User-To-User support forum of the Apache HTTP Server
Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
--
Learn more about Chase Paymentech Solutions,LLC payment processing services at 
www.chasepaymentech.com.

THIS MESSAGE IS CONFIDENTIAL.  This e-mail message and any attachments are 
proprietary and confidential information intended only for the use of the 
recipient(s) named above.  If you are not the intended recipient, you may not 
print, distribute, or copy this message or any attachments.  If you have 
received this communication in error, please notify the sender by return e-mail 
and delete this message and any attachments from your computer.


-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] using non-standard SSL ports

2008-03-27 Thread Joshua Slive
On Thu, Mar 27, 2008 at 1:52 PM, Wilda, Jet
[EMAIL PROTECTED] wrote:
 I think the bigger issue is that you certificate will be for 1 FQDN i.e.
  sample.com and hitting with any other FQDN will pop up a window saying
  the certificate and servername don't match.

No, he can supply a different certificate for each port. Port-based
and IP-based virtual hosting are almost-identical from an application
perspective. It is name-based virtual hosting that causes problems.

Joshua.

-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: [EMAIL PROTECTED] using non-standard SSL ports

2008-03-27 Thread Wilda, Jet
I see.

Thanks,
~Jet

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Joshua
Slive
Sent: Thursday, March 27, 2008 2:01 PM
To: users@httpd.apache.org
Subject: Re: [EMAIL PROTECTED] using non-standard SSL ports

On Thu, Mar 27, 2008 at 1:52 PM, Wilda, Jet
[EMAIL PROTECTED] wrote:
 I think the bigger issue is that you certificate will be for 1 FQDN
i.e.
  sample.com and hitting with any other FQDN will pop up a window
saying
  the certificate and servername don't match.

No, he can supply a different certificate for each port. Port-based
and IP-based virtual hosting are almost-identical from an application
perspective. It is name-based virtual hosting that causes problems.

Joshua.

-
The official User-To-User support forum of the Apache HTTP Server
Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
--
Learn more about Chase Paymentech Solutions,LLC payment processing services at 
www.chasepaymentech.com.

THIS MESSAGE IS CONFIDENTIAL.  This e-mail message and any attachments are 
proprietary and confidential information intended only for the use of the 
recipient(s) named above.  If you are not the intended recipient, you may not 
print, distribute, or copy this message or any attachments.  If you have 
received this communication in error, please notify the sender by return e-mail 
and delete this message and any attachments from your computer.


-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] Complex authentication problem with LDAP and Apache 2.2.3

2008-03-27 Thread Zembower, Kevin
I'm having a problem with a complex (to me, at least) authentication
scheme using OpenLDAP and Apache 2.2.3 and I'm hoping for some advice or
suggestions.

I'm trying to set up an intranet server so that all personnel on desktop
computers within our LAN can access the main areas without
authorization. Folks from outside our LAN have to authenticate using
OpenLDAP to access anything on the intranet site. I've pasted in the
whole included file for apache configuration at the end of this note.
The section below restricts the main DocumentRoot for the web site to
either the IP addresses listed or those who can authenticate with LDAP:

Directory /var/www/centernet/htdocs
 Options Indexes Includes FollowSymLinks MultiViews
 AllowOverride None
 
 # Controls who can get stuff from this server.
 AuthType Basic
 AuthName JHU/CCP
 AuthBasicProvider ldap
 require valid-user
 satisfy any
 AuthzLDAPAuthoritative Off
 AuthLDAPBindDN cn=,dc=jhuccp,dc=org
 AuthLDAPBindPassword 
 AuthLDAPURL
ldap://localhost:389/ou=ccpperson,dc=jhuccp,dc=org?uid?sub?(objectClass=
*)

 order deny,allow
 allow from 10.253.192.192/26 10.253.200.0/24 10.253.201.0/24
10.253.202.0/24
 deny from all
 /Directory

This section seems to be working correctly; I can view pages in the main
areas from outside our LAN after authenticating. I can also view the
pages from inside our LAN without authenticating.

However, in a separate section, I want to further restrict access to
just records in LDAP and exclude users who are originating from inside
our LAN but don't have records in the LDAP. This section is:
 #This uses LDAP to secure access to the /staffonly/ directory
 Directory /var/www/centernet/htdocs/staffonly
AuthType Basic
AuthName CCP Staff Only
AuthBasicProvider ldap
AuthzLDAPAuthoritative Off

satisfy all

AuthLDAPBindDN cn=,dc=jhuccp,dc=org
AuthLDAPBindPassword 
AuthLDAPURL
ldap://localhost:389/ou=ccpperson,dc=jhuccp,dc=org?uid?sub?(objectClass=
*)

require valid-user
 /Directory

This too seems to be working correctly from inside our LAN. I can access
everything on the intranet site without authenticating, but if I want
anything in /staffonly/, I have to authenticate. When I do so, I can
access a document, such as /staffonly/test.html.

However, when I try to go directly to
http://centernet.jhuccp.org/staffonly/test.html from a host outside of
our LAN, I get a 403 Forbidden error and this entry in the logs:
[Wed Mar 26 13:19:46 2008] [error] [client 98.218.13.184] client denied
by server configuration: /var/www/centernet/htdocs/staffonly/test.html

When I try to access the pages outside of the /staffonly/ directory from
a host outside of our LAN, everything seems to work correctly after I
enter my credentials.

Can anyone give me any suggestions for troubleshooting or fixing this
problem?

Thanks in advance for any help and advice.

-Kevin

Kevin Zembower
Internet Services Group manager
Center for Communication Programs
Bloomberg School of Public Health
Johns Hopkins University
111 Market Place, Suite 310
Baltimore, Maryland  21202
410-659-6139 
===
cn2:/etc/apache2/sites-available# cat default 
# The default VirtualHost, the main Centernet page
NameVirtualHost *
VirtualHost *
 ServerName centernet.jhuccp.org
 DocumentRoot /var/www/centernet/htdocs
 ServerAdmin [EMAIL PROTECTED]

 Directory /
Options FollowSymLinks
AllowOverride None
 /Directory

 Directory /var/www/centernet/htdocs
 Options Indexes Includes FollowSymLinks MultiViews
 
 AddType text/html .shtml
 AddHandler server-parsed .shtml
 AllowOverride None
 
 #
 # Controls who can get stuff from this server.
 #
 AuthType Basic
 AuthName JHU/CCP
 AuthBasicProvider ldap
 require valid-user
 satisfy any
 AuthzLDAPAuthoritative Off
 AuthLDAPBindDN cn=,dc=jhuccp,dc=org
 AuthLDAPBindPassword 
 AuthLDAPURL
ldap://localhost:389/ou=ccpperson,dc=jhuccp,dc=org?uid?sub?(objectClass=
*)

 order deny,allow
 #Added 10.253.20[012].* for new network numbering in SPH/CCP
network migration.
 #Added 10.253.192.192/26 (DMZ network) to allow access from ISG
host and localhost (for htDig).
 allow from 10.253.192.192/26 10.253.200.0/24 10.253.201.0/24
10.253.202.0/24
 deny from all
 /Directory

 #This uses LDAP to secure access to the /staffonly/ directory
 Directory /var/www/centernet/htdocs/staffonly
AuthType Basic
AuthName CCP Staff Only
AuthBasicProvider ldap
AuthzLDAPAuthoritative Off

satisfy all
#To filter with more granularity, replace objectClass=*
#with ccpDivisionID=10 

Re: [EMAIL PROTECTED] Complex authentication problem with LDAP and Apache 2.2.3

2008-03-27 Thread Joshua Slive
On Thu, Mar 27, 2008 at 2:14 PM, Zembower, Kevin [EMAIL PROTECTED] wrote:

  However, in a separate section, I want to further restrict access to
  just records in LDAP and exclude users who are originating from inside
  our LAN but don't have records in the LDAP.

  This too seems to be working correctly from inside our LAN. I can access
  everything on the intranet site without authenticating, but if I want
  anything in /staffonly/, I have to authenticate. When I do so, I can
  access a document, such as /staffonly/test.html.

  However, when I try to go directly to
  http://centernet.jhuccp.org/staffonly/test.html from a host outside of
  our LAN, I get a 403 Forbidden error and this entry in the logs:
  [Wed Mar 26 13:19:46 2008] [error] [client 98.218.13.184] client denied
  by server configuration: /var/www/centernet/htdocs/staffonly/test.html

  When I try to access the pages outside of the /staffonly/ directory from
  a host outside of our LAN, everything seems to work correctly after I
  enter my credentials.

Because the Deny entries from the parent directory are inherited in
/staffonly/, when you change Satisfy to all, you completely deny
access to anyone on the Deny list. To fix that, just add
Allow from all
to the /staffonly/ directory section.

Joshua.

-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] url redirection

2008-03-27 Thread Melanie Pfefer
hello,

changing to [P] flag:
 RewriteRule ^/(.*web:jar.*) http://zeus:8086/src/$1
[P]

returns a page cannot be displayed.

This is when apache redirects to a tomcat. Why P flag
does not work in this redirection? Could it be that
tomcat needs additional configuration to accept Proxy?

thanks
--- Melanie Pfefer [EMAIL PROTECTED] wrote:

 things are ok now with this rewrite rule
 
 RewriteRule ^/(.*web:jar.*) http://zeus:8086/src/$1
 [R=301,L]
 
 I wanted to have 'jar' as pattern but couldn't do
 it.
 
 If someone can help, I appreciate.
 
 --- Melanie Pfefer [EMAIL PROTECTED]
 wrote:
 
  I tried this
  
  RewriteEngine On
  RewriteRule ^/(.*jar.*) http://zeus:8086/src/$1
  [R=301,L]
  
  However
  http://zeus/web:jar:001
  becomes
  http://zeus:8086/src/web:jar:/web:jar:001
  
  while I want it to be
  
  http://zeus:8086/src/web:jar:001
  
  could you please advise?
  thanks
  
  
  
  
  
  
  --- Mathew [EMAIL PROTECTED] wrote:
  
   The last time I had to configure something for
   tomcat I used proxy settings.  I don't have
 access
   to this information right now otherwise I'd give
  an
   example of what I did but I'm sure you can find
   something on Google.
   
   Mathew
   
   Melanie Pfefer wrote:
Hi,

How to redirect urls that contains �jar�
   string from

http://zeus:8085/web/sec:jar:001
to
http://zeus:8086/src/web:sec:jar:001

the first one is on apache
the 2nd web app is on tomcat

thanks bunches



 
  
 

__
Sent from Yahoo! Mail.
More Ways to Keep in Touch.
   http://uk.docs.yahoo.com/nowyoucan.html

   
  
 

-
The official User-To-User support forum of the
   Apache HTTP Server Project.
See
 URL:http://httpd.apache.org/userslist.html
   for more info.
To unsubscribe, e-mail:
   [EMAIL PROTECTED]
  from the digest:
   [EMAIL PROTECTED]
For additional commands, e-mail:
   [EMAIL PROTECTED]

   
   -- 
   Keep up with my goings on at
   http://theillien.blogspot.com
   
   
  
 

-
   The official User-To-User support forum of the
   Apache HTTP Server Project.
   See URL:http://httpd.apache.org/userslist.html
  for
   more info.
   To unsubscribe, e-mail:
   [EMAIL PROTECTED]
 from the digest:
   [EMAIL PROTECTED]
   For additional commands, e-mail:
   [EMAIL PROTECTED]
   
   
  
  
  
   
 

___
  
  Yahoo! For Good helps you make a difference  
  
  http://uk.promotions.yahoo.com/forgood/
  
 

-
  The official User-To-User support forum of the
  Apache HTTP Server Project.
  See URL:http://httpd.apache.org/userslist.html
 for
  more info.
  To unsubscribe, e-mail:
  [EMAIL PROTECTED]
from the digest:
  [EMAIL PROTECTED]
  For additional commands, e-mail:
  [EMAIL PROTECTED]
  
  
 
 
 
  

___
 
 Yahoo! For Good helps you make a difference  
 
 http://uk.promotions.yahoo.com/forgood/
 

-
 The official User-To-User support forum of the
 Apache HTTP Server Project.
 See URL:http://httpd.apache.org/userslist.html for
 more info.
 To unsubscribe, e-mail:
 [EMAIL PROTECTED]
   from the digest:
 [EMAIL PROTECTED]
 For additional commands, e-mail:
 [EMAIL PROTECTED]
 
 



  __
Sent from Yahoo! Mail.
More Ways to Keep in Touch. http://uk.docs.yahoo.com/nowyoucan.html

-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] url redirection

2008-03-27 Thread Peter J Milanese
Are you loading the proxy modules?




- Original Message -
From: Melanie Pfefer [EMAIL PROTECTED]
Sent: 03/27/2008 03:11 PM
To: users@httpd.apache.org
Subject: Re: [EMAIL PROTECTED] url redirection



hello,

changing to [P] flag:
 RewriteRule ^/(.*web:jar.*) http://zeus:8086/src/$1
[P]

returns a page cannot be displayed.

This is when apache redirects to a tomcat. Why P flag
does not work in this redirection? Could it be that
tomcat needs additional configuration to accept Proxy?

thanks
--- Melanie Pfefer [EMAIL PROTECTED] wrote:

 things are ok now with this rewrite rule

 RewriteRule ^/(.*web:jar.*) http://zeus:8086/src/$1
 [R=301,L]

 I wanted to have 'jar' as pattern but couldn't do
 it.

 If someone can help, I appreciate.

 --- Melanie Pfefer [EMAIL PROTECTED]
 wrote:

  I tried this
 
  RewriteEngine On
  RewriteRule ^/(.*jar.*) http://zeus:8086/src/$1
  [R=301,L]
 
  However
  http://zeus/web:jar:001
  becomes
  http://zeus:8086/src/web:jar:/web:jar:001
 
  while I want it to be
 
  http://zeus:8086/src/web:jar:001
 
  could you please advise?
  thanks
 
 
 
 
 
 
  --- Mathew [EMAIL PROTECTED] wrote:
 
   The last time I had to configure something for
   tomcat I used proxy settings.  I don't have
 access
   to this information right now otherwise I'd give
  an
   example of what I did but I'm sure you can find
   something on Google.
  
   Mathew
  
   Melanie Pfefer wrote:
Hi,
   
How to redirect urls that contains �jar�
   string from
   
http://zeus:8085/web/sec:jar:001
to
http://zeus:8086/src/web:sec:jar:001
   
the first one is on apache
the 2nd web app is on tomcat
   
thanks bunches
   
   
   
   
  
 

__
Sent from Yahoo! Mail.
More Ways to Keep in Touch.
   http://uk.docs.yahoo.com/nowyoucan.html
   
   
  
 

-
The official User-To-User support forum of the
   Apache HTTP Server Project.
See
 URL:http://httpd.apache.org/userslist.html
   for more info.
To unsubscribe, e-mail:
   [EMAIL PROTECTED]
  from the digest:
   [EMAIL PROTECTED]
For additional commands, e-mail:
   [EMAIL PROTECTED]
   
  
   --
   Keep up with my goings on at
   http://theillien.blogspot.com
  
  
  
 

-
   The official User-To-User support forum of the
   Apache HTTP Server Project.
   See URL:http://httpd.apache.org/userslist.html
  for
   more info.
   To unsubscribe, e-mail:
   [EMAIL PROTECTED]
 from the digest:
   [EMAIL PROTECTED]
   For additional commands, e-mail:
   [EMAIL PROTECTED]
  
  
 
 
 
 
 

___
 
  Yahoo! For Good helps you make a difference
 
  http://uk.promotions.yahoo.com/forgood/
 
 

-
  The official User-To-User support forum of the
  Apache HTTP Server Project.
  See URL:http://httpd.apache.org/userslist.html
 for
  more info.
  To unsubscribe, e-mail:
  [EMAIL PROTECTED]
from the digest:
  [EMAIL PROTECTED]
  For additional commands, e-mail:
  [EMAIL PROTECTED]
 
 





___

 Yahoo! For Good helps you make a difference

 http://uk.promotions.yahoo.com/forgood/


-
 The official User-To-User support forum of the
 Apache HTTP Server Project.
 See URL:http://httpd.apache.org/userslist.html for
 more info.
 To unsubscribe, e-mail:
 [EMAIL PROTECTED]
   from the digest:
 [EMAIL PROTECTED]
 For additional commands, e-mail:
 [EMAIL PROTECTED]





  __
Sent from Yahoo! Mail.
More Ways to Keep in Touch. http://uk.docs.yahoo.com/nowyoucan.html

-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] Apache Password authentication issues

2008-03-27 Thread Sailesh Krishnamurthy
Hi,


We tried setting up password authentication on one of the directories in our
apache virtualhost using a .htaccess file . we now notice that
the password authentication is working only for some users and not others.
Has anyone else noticed this. Ami I missing something here.
The directory and .htacess configs are as below:

47   Directory /ab/web/virthosts/abportal/prod/abcd
48 AllowOverride ALL
49 Options Indexes FollowSymLinks Includes ExecCGI
50  Order allow,deny
51  Allow from all
52  AddType text/plain .txt
53  DefaultType text/plain
54  AddHandler cgi-script .cgi .pl
55  /Directory

.htacess:

deny from all
AuthType Basic
AuthName Password Required
AuthUserFile /ab/web/virthosts/abortal/prod/abcd/passwd
AuthGroupFile /ab/web/virthosts/bbiportal/prod/abcd/groups
Require group abcd
Require user efgh
satisfy any


[EMAIL PROTECTED] modify Host header

2008-03-27 Thread Eqbal Z
I need to modify the Host header for my application in order to add the port
information.
I tried the following directive

RequestHeader set Host %{HOST_NAME}e:443

This sets it to (null):443

How do I get the host name value here? For example if the request comes in
as http://www.myhostname.com:8100/requested_resource
I am trying to get the www.myhostname.com part in the above directive by
using %{HOST_NAME}e

Any help is greatly appreciated.

Thanks.


Re: [EMAIL PROTECTED] using non-standard SSL ports

2008-03-27 Thread John Almberg
Technically, it all work fine. I think Joshua put his finger on the  
fatal flaw -- corporate firewalls that block access to 'suspicious'  
ports. Not a problem for most home users, but a serious problem for  
people working behind paranoid/appropriately concerned corporate  
firewalls...


Oh well. It sounded like a good idea! Luckily IP addresses are still  
cheap and available. Guess I'll grab another block of 64.


Thanks: John



On Mar 27, 2008, at 2:00 PM, Joshua Slive wrote:


On Thu, Mar 27, 2008 at 1:52 PM, Wilda, Jet
[EMAIL PROTECTED] wrote:
I think the bigger issue is that you certificate will be for 1  
FQDN i.e.
 sample.com and hitting with any other FQDN will pop up a window  
saying

 the certificate and servername don't match.


No, he can supply a different certificate for each port. Port-based
and IP-based virtual hosting are almost-identical from an application
perspective. It is name-based virtual hosting that causes problems.

Joshua.

-
The official User-To-User support forum of the Apache HTTP Server  
Project.

See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




Websites for On-line Collectible Dealers

Identry, LLC
John Almberg
(631) 546-5079
[EMAIL PROTECTED]
www.identry.com




-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
 from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] url redirection

2008-03-27 Thread Melanie Pfefer
the proxy module should be loaded since [P] is working
on another rewrite rule (but not to a tomcat server)



--- Peter J Milanese [EMAIL PROTECTED] wrote:

 Are you loading the proxy modules?
 
 
 
 
 - Original Message -
 From: Melanie Pfefer [EMAIL PROTECTED]
 Sent: 03/27/2008 03:11 PM
 To: users@httpd.apache.org
 Subject: Re: [EMAIL PROTECTED] url redirection
 
 
 
 hello,
 
 changing to [P] flag:
  RewriteRule ^/(.*web:jar.*) http://zeus:8086/src/$1
 [P]
 
 returns a page cannot be displayed.
 
 This is when apache redirects to a tomcat. Why P
 flag
 does not work in this redirection? Could it be that
 tomcat needs additional configuration to accept
 Proxy?
 
 thanks
 --- Melanie Pfefer [EMAIL PROTECTED]
 wrote:
 
  things are ok now with this rewrite rule
 
  RewriteRule ^/(.*web:jar.*)
 http://zeus:8086/src/$1
  [R=301,L]
 
  I wanted to have 'jar' as pattern but couldn't do
  it.
 
  If someone can help, I appreciate.
 
  --- Melanie Pfefer [EMAIL PROTECTED]
  wrote:
 
   I tried this
  
   RewriteEngine On
   RewriteRule ^/(.*jar.*) http://zeus:8086/src/$1
   [R=301,L]
  
   However
   http://zeus/web:jar:001
   becomes
   http://zeus:8086/src/web:jar:/web:jar:001
  
   while I want it to be
  
   http://zeus:8086/src/web:jar:001
  
   could you please advise?
   thanks
  
  
  
  
  
  
   --- Mathew [EMAIL PROTECTED] wrote:
  
The last time I had to configure something for
tomcat I used proxy settings.  I don't have
  access
to this information right now otherwise I'd
 give
   an
example of what I did but I'm sure you can
 find
something on Google.
   
Mathew
   
Melanie Pfefer wrote:
 Hi,

 How to redirect urls that contains �jar�
string from

 http://zeus:8085/web/sec:jar:001
 to
 http://zeus:8086/src/web:sec:jar:001

 the first one is on apache
 the 2nd web app is on tomcat

 thanks bunches




   
  
 

__
 Sent from Yahoo! Mail.
 More Ways to Keep in Touch.
http://uk.docs.yahoo.com/nowyoucan.html


   
  
 

-
 The official User-To-User support forum of
 the
Apache HTTP Server Project.
 See
  URL:http://httpd.apache.org/userslist.html
for more info.
 To unsubscribe, e-mail:
[EMAIL PROTECTED]
   from the digest:
[EMAIL PROTECTED]
 For additional commands, e-mail:
[EMAIL PROTECTED]

   
--
Keep up with my goings on at
http://theillien.blogspot.com
   
   
   
  
 

-
The official User-To-User support forum of the
Apache HTTP Server Project.
See
 URL:http://httpd.apache.org/userslist.html
   for
more info.
To unsubscribe, e-mail:
[EMAIL PROTECTED]
  from the digest:
[EMAIL PROTECTED]
For additional commands, e-mail:
[EMAIL PROTECTED]
   
   
  
  
  
  
  
 

___
  
   Yahoo! For Good helps you make a difference
  
   http://uk.promotions.yahoo.com/forgood/
  
  
 

-
   The official User-To-User support forum of the
   Apache HTTP Server Project.
   See URL:http://httpd.apache.org/userslist.html
  for
   more info.
   To unsubscribe, e-mail:
   [EMAIL PROTECTED]
 from the digest:
   [EMAIL PROTECTED]
   For additional commands, e-mail:
   [EMAIL PROTECTED]
  
  
 
 
 
 
 

___
 
  Yahoo! For Good helps you make a difference
 
  http://uk.promotions.yahoo.com/forgood/
 
 

-
  The official User-To-User support forum of the
  Apache HTTP Server Project.
  See URL:http://httpd.apache.org/userslist.html
 for
  more info.
  To unsubscribe, e-mail:
  [EMAIL PROTECTED]
from the digest:
  [EMAIL PROTECTED]
  For additional commands, e-mail:
 
=== message truncated ===



  __
Sent from Yahoo! Mail.
More Ways to Keep in Touch. http://uk.docs.yahoo.com/nowyoucan.html

-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] url redirection

2008-03-27 Thread Peter J Milanese
No.

Make sure you are loading proxy and the proxy_http mods.




- Original Message -
From: Melanie Pfefer [EMAIL PROTECTED]
Sent: 03/27/2008 05:40 PM
To: users@httpd.apache.org
Subject: Re: [EMAIL PROTECTED] url redirection



the proxy module should be loaded since [P] is working
on another rewrite rule (but not to a tomcat server)



--- Peter J Milanese [EMAIL PROTECTED] wrote:

 Are you loading the proxy modules?




 - Original Message -
 From: Melanie Pfefer [EMAIL PROTECTED]
 Sent: 03/27/2008 03:11 PM
 To: users@httpd.apache.org
 Subject: Re: [EMAIL PROTECTED] url redirection



 hello,

 changing to [P] flag:
  RewriteRule ^/(.*web:jar.*) http://zeus:8086/src/$1
 [P]

 returns a page cannot be displayed.

 This is when apache redirects to a tomcat. Why P
 flag
 does not work in this redirection? Could it be that
 tomcat needs additional configuration to accept
 Proxy?

 thanks
 --- Melanie Pfefer [EMAIL PROTECTED]
 wrote:

  things are ok now with this rewrite rule
 
  RewriteRule ^/(.*web:jar.*)
 http://zeus:8086/src/$1
  [R=301,L]
 
  I wanted to have 'jar' as pattern but couldn't do
  it.
 
  If someone can help, I appreciate.
 
  --- Melanie Pfefer [EMAIL PROTECTED]
  wrote:
 
   I tried this
  
   RewriteEngine On
   RewriteRule ^/(.*jar.*) http://zeus:8086/src/$1
   [R=301,L]
  
   However
   http://zeus/web:jar:001
   becomes
   http://zeus:8086/src/web:jar:/web:jar:001
  
   while I want it to be
  
   http://zeus:8086/src/web:jar:001
  
   could you please advise?
   thanks
  
  
  
  
  
  
   --- Mathew [EMAIL PROTECTED] wrote:
  
The last time I had to configure something for
tomcat I used proxy settings.  I don't have
  access
to this information right now otherwise I'd
 give
   an
example of what I did but I'm sure you can
 find
something on Google.
   
Mathew
   
Melanie Pfefer wrote:
 Hi,

 How to redirect urls that contains �jar�
string from

 http://zeus:8085/web/sec:jar:001
 to
 http://zeus:8086/src/web:sec:jar:001

 the first one is on apache
 the 2nd web app is on tomcat

 thanks bunches




   
  
 

__
 Sent from Yahoo! Mail.
 More Ways to Keep in Touch.
http://uk.docs.yahoo.com/nowyoucan.html


   
  
 

-
 The official User-To-User support forum of
 the
Apache HTTP Server Project.
 See
  URL:http://httpd.apache.org/userslist.html
for more info.
 To unsubscribe, e-mail:
[EMAIL PROTECTED]
   from the digest:
[EMAIL PROTECTED]
 For additional commands, e-mail:
[EMAIL PROTECTED]

   
--
Keep up with my goings on at
http://theillien.blogspot.com
   
   
   
  
 

-
The official User-To-User support forum of the
Apache HTTP Server Project.
See
 URL:http://httpd.apache.org/userslist.html
   for
more info.
To unsubscribe, e-mail:
[EMAIL PROTECTED]
  from the digest:
[EMAIL PROTECTED]
For additional commands, e-mail:
[EMAIL PROTECTED]
   
   
  
  
  
  
  
 

___
  
   Yahoo! For Good helps you make a difference
  
   http://uk.promotions.yahoo.com/forgood/
  
  
 

-
   The official User-To-User support forum of the
   Apache HTTP Server Project.
   See URL:http://httpd.apache.org/userslist.html
  for
   more info.
   To unsubscribe, e-mail:
   [EMAIL PROTECTED]
 from the digest:
   [EMAIL PROTECTED]
   For additional commands, e-mail:
   [EMAIL PROTECTED]
  
  
 
 
 
 
 

___
 
  Yahoo! For Good helps you make a difference
 
  http://uk.promotions.yahoo.com/forgood/
 
 

-
  The official User-To-User support forum of the
  Apache HTTP Server Project.
  See URL:http://httpd.apache.org/userslist.html
 for
  more info.
  To unsubscribe, e-mail:
  [EMAIL PROTECTED]
from the digest:
  [EMAIL PROTECTED]
  For additional commands, e-mail:

=== message truncated ===



  __
Sent from Yahoo! Mail.
More Ways to Keep in Touch. http://uk.docs.yahoo.com/nowyoucan.html

-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
The official User-To-User support forum of the Apache 

Re: [EMAIL PROTECTED] url redirection

2008-03-27 Thread Melanie Pfefer
Hi

httpd -M shows
proxy_module (shared)
 proxy_connect_module (shared)
 proxy_ftp_module (shared)
 proxy_http_module (shared)
 proxy_ajp_module (shared)
 proxy_balancer_module (shared)


My rewrite lines are:
RewriteEngine On
RewriteRule ^/(RAS.*) http://zeus:8089/$1 [P,L]
RewriteRule ^/(.*web:jar.*) http://zeus:8086/src/$1
[P,L]
RewriteLog /usr/local/apache2/logs/rewrite.log
RewriteLogLevel 9

The first rewrite rule is ok (port 8089 is a servlet)
The 2nd displays the 2 frames but the content is not
displayed (port 8086 is tomcat)


thanks for any hints

--- Peter J Milanese [EMAIL PROTECTED] wrote:

 No.
 
 Make sure you are loading proxy and the proxy_http
 mods.
 
 
 
 
 - Original Message -
 From: Melanie Pfefer [EMAIL PROTECTED]
 Sent: 03/27/2008 05:40 PM
 To: users@httpd.apache.org
 Subject: Re: [EMAIL PROTECTED] url redirection
 
 
 
 the proxy module should be loaded since [P] is
 working
 on another rewrite rule (but not to a tomcat server)
 
 
 
 --- Peter J Milanese [EMAIL PROTECTED] wrote:
 
  Are you loading the proxy modules?
 
 
 
 
  - Original Message -
  From: Melanie Pfefer [EMAIL PROTECTED]
  Sent: 03/27/2008 03:11 PM
  To: users@httpd.apache.org
  Subject: Re: [EMAIL PROTECTED] url redirection
 
 
 
  hello,
 
  changing to [P] flag:
   RewriteRule ^/(.*web:jar.*)
 http://zeus:8086/src/$1
  [P]
 
  returns a page cannot be displayed.
 
  This is when apache redirects to a tomcat. Why P
  flag
  does not work in this redirection? Could it be
 that
  tomcat needs additional configuration to accept
  Proxy?
 
  thanks
  --- Melanie Pfefer [EMAIL PROTECTED]
  wrote:
 
   things are ok now with this rewrite rule
  
   RewriteRule ^/(.*web:jar.*)
  http://zeus:8086/src/$1
   [R=301,L]
  
   I wanted to have 'jar' as pattern but couldn't
 do
   it.
  
   If someone can help, I appreciate.
  
   --- Melanie Pfefer [EMAIL PROTECTED]
   wrote:
  
I tried this
   
RewriteEngine On
RewriteRule ^/(.*jar.*)
 http://zeus:8086/src/$1
[R=301,L]
   
However
http://zeus/web:jar:001
becomes
http://zeus:8086/src/web:jar:/web:jar:001
   
while I want it to be
   
http://zeus:8086/src/web:jar:001
   
could you please advise?
thanks
   
   
   
   
   
   
--- Mathew [EMAIL PROTECTED] wrote:
   
 The last time I had to configure something
 for
 tomcat I used proxy settings.  I don't have
   access
 to this information right now otherwise I'd
  give
an
 example of what I did but I'm sure you can
  find
 something on Google.

 Mathew

 Melanie Pfefer wrote:
  Hi,
 
  How to redirect urls that contains
 �jar�
 string from
 
  http://zeus:8085/web/sec:jar:001
  to
  http://zeus:8086/src/web:sec:jar:001
 
  the first one is on apache
  the 2nd web app is on tomcat
 
  thanks bunches
 
 
 
 

   
  
 

__
  Sent from Yahoo! Mail.
  More Ways to Keep in Touch.
 http://uk.docs.yahoo.com/nowyoucan.html
 
 

   
  
 

-
  The official User-To-User support forum of
  the
 Apache HTTP Server Project.
  See
   URL:http://httpd.apache.org/userslist.html
 for more info.
  To unsubscribe, e-mail:
 [EMAIL PROTECTED]
from the digest:
 [EMAIL PROTECTED]
  For additional commands, e-mail:
 [EMAIL PROTECTED]
 

 --
 Keep up with my goings on at
 http://theillien.blogspot.com



   
  
 

-
 The official User-To-User support forum of
 the
 Apache HTTP Server Project.
 See
  URL:http://httpd.apache.org/userslist.html
for
 more info.
 To unsubscribe, e-mail:
 [EMAIL PROTECTED]
   from the digest:
 [EMAIL PROTECTED]
 For additional commands, e-mail:
 [EMAIL PROTECTED]


   
   
   
   
   
  
 

___
   
Yahoo! For Good helps you make a difference
   
http://uk.promotions.yahoo.com/forgood/
   
   
  
 

-
 
=== message truncated ===



  __
Sent from Yahoo! Mail.
More Ways to Keep in Touch. http://uk.docs.yahoo.com/nowyoucan.html

-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] url redirection

2008-03-27 Thread Joshua Slive
On Thu, Mar 27, 2008 at 6:32 PM, Melanie Pfefer
[EMAIL PROTECTED] wrote:
 Hi

  httpd -M shows
  proxy_module (shared)
   proxy_connect_module (shared)
   proxy_ftp_module (shared)
   proxy_http_module (shared)
   proxy_ajp_module (shared)
   proxy_balancer_module (shared)


  My rewrite lines are:
  RewriteEngine On
  RewriteRule ^/(RAS.*) http://zeus:8089/$1 [P,L]

 RewriteRule ^/(.*web:jar.*) http://zeus:8086/src/$1
  [P,L]
  RewriteLog /usr/local/apache2/logs/rewrite.log
  RewriteLogLevel 9

  The first rewrite rule is ok (port 8089 is a servlet)
  The 2nd displays the 2 frames but the content is not
  displayed (port 8086 is tomcat)

If some of the content (the frameset) from the backend is displaying
but not all, then the problem is likely broken links created by the
change in context of the request or some problem like that. Examine
exactly what is being sent back to the client and see where the
problem is. Also check to see if the apache error log says anything.

Joshua.

-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] httpd segfaults?

2008-03-27 Thread ohaya
Hi,

Apache may not be able to write to the /tmp unless you do:

ulimit -c unlimited

before starting Apache. 

At least that's what worked for me on RHEL4.

Jim



 Devraj Mukherjee [EMAIL PROTECTED] wrote: 
 I already have that in httpd.conf and don't see any CoreDump files in /tmp.
 
 
 On Thu, Mar 27, 2008 at 5:11 AM, Joshua Slive [EMAIL PROTECTED] wrote:
  On Mon, Mar 24, 2008 at 3:35 AM, Devraj Mukherjee [EMAIL PROTECTED] wrote:
Hi everyone,
   
 I administer a web server running CentOS running httpd 2.0.59
 distributed from the centosplus repository. I noticed that dmesg
 splits out a heap of these messages. However httpd was still running,
 I am suspecting that a child process spat the dummy.
   
 httpd[17570]: segfault at 007fbf3ffca0 rip 002a9a59cc5b rsp
 007fbf3ffc80 error 6
   
 Can anyone shed any light on what this might be?
 
   Here's how to get more info on segfaults:
   http://httpd.apache.org/dev/debugging.html#crashes
 
   Joshua.
 
   -
   The official User-To-User support forum of the Apache HTTP Server Project.
   See URL:http://httpd.apache.org/userslist.html for more info.
   To unsubscribe, e-mail: [EMAIL PROTECTED]
from the digest: [EMAIL PROTECTED]
   For additional commands, e-mail: [EMAIL PROTECTED]
 
 
 
 
 
 -- 
 I never look back darling, it distracts from the now, Edna Mode (The
 Incredibles)
 
 -
 The official User-To-User support forum of the Apache HTTP Server Project.
 See URL:http://httpd.apache.org/userslist.html for more info.
 To unsubscribe, e-mail: [EMAIL PROTECTED]
   from the digest: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]
 


-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] mmap cache can't open foo.php - Too many open files

2008-03-27 Thread Arnab Ganguly
Increase your soft limit to the hard limit value allowed to max open
files.You can use the apachectl script which internally does the same or
issue the following command from the command prompt ulimit -S -n `ulimit -H
-n` and then start the Apache, hopefully it will resolve the issue :)
Thanks
-A

On Thu, Mar 27, 2008 at 2:38 PM, thomas Armstrong [EMAIL PROTECTED]
wrote:

 Hi.

 Using Apache version 2.2.3 on 'Linux CentOS', my webpages are very
 slow and I get this error messages on my 'error_log' file:
 ---
 [Wed Mar 26 13:05:39 2008] [warn-phpd] mmap cache can't open
 /var/www/classes/Threads.php - Too many open files (pid 17650)
 [Wed Mar 26 13:05:42 2008] [warn-phpd] mmap cache can't open
 /var/www/classes/User.php - Too many open files (pid 17650)
 [Wed Mar 26 13:05:46 2008] [warn-phpd] mmap cache can't open
 /var/www/lib/Functions.php - Too many open files (pid 17650)
 ---

 I've got PHP 5.2.5 and APC (a Cache System) 3.0.17. Does it something
 to do with Apache?

 Thank you very much.

 -
 The official User-To-User support forum of the Apache HTTP Server Project.
 See URL:http://httpd.apache.org/userslist.html for more info.
 To unsubscribe, e-mail: [EMAIL PROTECTED]
  from the digest: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]