[us...@httpd] FastCgiExternalServer, PHP

2010-07-05 Thread Richard Hector
Hi all,

I'm getting really confused - the docs on FastCGI seem a little skimpy,
and other resources are how various people may have made it work, and I
haven't managed to get a configuration that works yet.

My objective is to run a particular PHP site as a particular user, for
security reasons. My understanding is that I can't use SuExec for
mod_php, so I have to use CGI or FastCGI, of which FastCGI is faster :-)

It seems that FastCgiExternalServer keeps everything nicely separated,
so that's the choice I'm going with at the moment.

Now is the point at which I get lost, because there are so many
different configs thrown up by google.

Some use Alias directives, some use AddType and Action directives; some
use real-looking paths for the first argument to FastCgiExternalServer
and others don't.

I'm pretty sure I got to a point where everything worked, except that a
url with no path didn't return index.php - the DirectoryIndex directive
appeared to have no effect, and php tried to run with no content.

Unfortunately I don't have that config working at the moment; I've
hacked around a bit aimlessly and lost track - and anyway, I should
really replicate it without client details before posting a config on
here.

So what I guess I'm asking for is a simple config that works, of which I
can ask explanations of the bits I don't understand - I think that's the
real problem with all the bits I've found, is that there are minimal
explanations of _why_ a particular directive is used, and why.

I'll try to get an experimental config up a bit later (hometime here
now).

Oh - the other thing is I need to support this in a Name based
VirtualHost - and only one. The other sites should continue to work on
mod_php, if that's possible.

I'm running Debian Lenny (Apache 2.2.9, PHP 5.2.6).

That's probably a big fail for 'Asking smart questions' -
sorry :-( Hopefully I'll be more coherent tomorrow, but I figured I'd
take advantage of my timezone difference from most of the world by
getting this out there now :-)

Thanks,

Richard



-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
   "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



[us...@httpd] apache memory consumption 91%

2010-07-05 Thread Tapas Mishra
I am having a problem with Apache 2.My all websites were in accessible
for some time.
There is no application/user on these websites and no database also.
The debug mode logging is on what should I check in from the log I am
not able to understand any thing in logs.


-- 
Tapas
http://mightydreams.blogspot.com
http://wiki.xensource.com/xenwiki/Xen_on_4_app_servers

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
   "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



Re: [us...@httpd] How to setup in Apache/mod_proxy an upper bound on the number of concurrent forwarded requests?

2010-07-05 Thread Igor Cicimov
http://httpd.apache.org/docs/2.2/mod/mod_proxy.html

read the ProxyPass section.

On Tue, Jul 6, 2010 at 10:37 AM, Alessandro Vernet  wrote:

> I have a fairly standard setup where a front-end Apache server
> forwards requests to Tomcat through mod_proxy/AJP. How can I setup
> Apache/mod_proxy so it only forwards at most N (say, N=4) concurrent
> requests to Tomcat? Other concurrent requests coming into Apache
> should not be rejected, and should instead be queued to later be sent
> to Tomcat.
>
> PS 1: I know this is something you can do this at the Tomcat level
> with the maxThreads attribute, but I prefer to handle this at the
> Apache level.
>
> PS 2: I see that Apache has a MaxClients configuration, which seems to
> be doing what I am looking for. But it is not clear to me how to have
> a MaxClient per server mod_proxy forwards to, rather than MaxClient
> per Apache. I.e. if Apache forward requests to a cluster of 4 Tomcat
> machine, I'd like Apache to limit the number of concurrent requests
> forwarded to any given Tomcat to N (say, N=4).
>
> Alex
> --
> Orbeon Forms - Web forms, open-source, for the Enterprise -
> http://www.orbeon.com/
> My Twitter: http://twitter.com/avernet
>
> -
> The official User-To-User support forum of the Apache HTTP Server Project.
> See http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
>   "   from the digest: users-digest-unsubscr...@httpd.apache.org
> For additional commands, e-mail: users-h...@httpd.apache.org
>
>


[us...@httpd] How to setup in Apache/mod_proxy an upper bound on the number of concurrent forwarded requests?

2010-07-05 Thread Alessandro Vernet
I have a fairly standard setup where a front-end Apache server
forwards requests to Tomcat through mod_proxy/AJP. How can I setup
Apache/mod_proxy so it only forwards at most N (say, N=4) concurrent
requests to Tomcat? Other concurrent requests coming into Apache
should not be rejected, and should instead be queued to later be sent
to Tomcat.

PS 1: I know this is something you can do this at the Tomcat level
with the maxThreads attribute, but I prefer to handle this at the
Apache level.

PS 2: I see that Apache has a MaxClients configuration, which seems to
be doing what I am looking for. But it is not clear to me how to have
a MaxClient per server mod_proxy forwards to, rather than MaxClient
per Apache. I.e. if Apache forward requests to a cluster of 4 Tomcat
machine, I'd like Apache to limit the number of concurrent requests
forwarded to any given Tomcat to N (say, N=4).

Alex
-- 
Orbeon Forms - Web forms, open-source, for the Enterprise -
http://www.orbeon.com/
My Twitter: http://twitter.com/avernet

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
   "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



[us...@httpd] No killing/replacing of mod_fcgid processes with the status 'Exiting(communication error)'

2010-07-05 Thread Erik Wasser
Hello list,

I'm using httpd-2.2.3-31 on a cent os 5 system in combination with 
'mod_fcgid-2.3.5' and I'm having trouble with it. (More details of the used 
system are below in this mail.)

The problem is that the communication works at first (after a restart) and 
suddenly all 3 mod_fcgid process switches from the state 
'Exiting(communication error)'. Not at once but in a short time range 
(minutes).

I've activated the handler "server-status" ("ExtendedStatus On" was set too) 
so I can have a detailed look on the problem. Here's some output of /server-
status:

>  Process name: foo_fastcgi.fcgi
>
>Pid  Active Idle AccessesState
>   31845 64849  5340 542  Exiting(communication error)
>   31808 64861  5507 477  Exiting(communication error) 
>   
>  
>   31843 64852  5647 489  Exiting(communication error)

As you can clearly see all process are "brocken" and they will not be 
replaced. I thought that were a feature of mod_fcgid so I'm a little bit 
confused here.

Here are the log lines that will "turn" a mod_fcgid process from "Ready" or 
"Working" to "Exiting(communication error)":

[Sun Jul 04 00:27:35 2010] [warn] [client 10.0.11.230] mod_fcgid: read data 
timeout in 40 seconds
[Sun Jul 04 00:27:35 2010] [error] [client 10.0.11.230] Premature end of 
script headers: well_fastcgi.fcgi
[Sun Jul 04 00:29:55 2010] [warn] [client 10.0.11.230] mod_fcgid: read data 
timeout in 40 seconds
[Sun Jul 04 00:29:55 2010] [error] [client 10.0.11.230] Premature end of 
script headers: well_fastcgi.fcgi
[Sun Jul 04 00:32:42 2010] [warn] [client 10.0.11.230] mod_fcgid: read data 
timeout in 40 seconds
[Sun Jul 04 00:32:42 2010] [error] [client 10.0.11.230] Premature end of 
script headers: well_fastcgi.fcgi

The httpd will span just more processes and finally reaches MaxClients with 
this error message.

[Sun Jul 04 02:01:02 2010] [error] server reached MaxClients setting, consider 
raising the MaxClients setting

Did you spot the time difference? After one and a half hour the httpd runs out 
of httpd processes. Aren't they are supposed to be some "timeouts" for 
recreating the mod_fcgid processes?

I've decided to limit the request per process and switched on the option 
"FcgidMaxRequestsPerProcess 100". But this was only changing the error message 
from "Exiting(communication error)" to "Exiting(lifetime expired)".

Everything else stayed the same. All 3 processes in /server-status are marked 
with 'Exiting(lifetime expired)' but nothing happens. The number of httpd 
grows and the error message 'server reached MaxClients setting, consider 
raising the MaxClients setting' appeared again.

What I'm missing here? Isn't the module mod_fcgid not supposed to work this 
way? Spawn some processes, pipe in the data, kill non working processes and 
replace the killed process with a new (working) one.

Can I turn on some verbosity (for this modul)?
What else can I do/try? Any ideas?
Where can I get more information about this situation?
I've googled for the problem but I found only configurations problems. My app 
(to be clear) is working so it's not some kind of permission problem.

Thanks for your work and your help.

PS: Here are some more information about my system:

app backend
===

perl with catalyst (http://search.cpan.org/~bobtfish/Catalyst-
Runtime-5.80024/lib/Catalyst/Engine/FastCGI.pm)

os
==

CentOS release 5.4 (Final)

httpd
=

httpd-2.2.3-31.el5.centos.2

http configuration (important part):


LoadModule fcgid_module modules/mod_fcgid.2.3.5.so
AddHandler fcgid-script .fcgi .fcg
FcgidIPCDir /srv/www/app/tmp/fcgi_ipc

FCGIWrapper "/srv/www/app/sites/app/script/app_fastcgi.fcgi" .fcgi
ScriptAlias / /srv/www/app/sites/app/script/app_fastcgi.fcgi/
FcgidSpawnScoreUpLimit 100

-- 
So long... Fuzz

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
   "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



Re: [us...@httpd] Apache and phpapacherX.dll

2010-07-05 Thread Payne, Charles
O

- Original Message -
From: Yves 
To: users@httpd.apache.org 
Sent: Sun Jul 04 00:31:31 2010
Subject: Re: [us...@httpd] Apache and phpapacherX.dll

  Hi Frank
Thank you very much for your help mentioning the xampp soft
I worked great
I will be able to teach mysql to kids this summer
Thanks again
yves

Le 04/07/2010 01:21, Frank Gingras a écrit :
>
>
> On 07/03/2010 07:53 AM, Yves wrote:
>> Current system
>> Laptop Dell precision T4500, 3GB memory and plenty of space disk
>> Windows 7
>> Apache 2.0.63
>> PHP 5.2.11
>>
>> I need to setup apache with php to teach a summer camp here
>> I cannot get apache loading on my laptop
>> I hava had that situation in the past and remember that one has to pair
>> apache version with php version but I cannot remember or find what
>> version apache needs to be associated with php to work
>> §HEre is the error from the log
>> The Apache service named reported the following error:
>> >>> httpd.exe: Syntax error on line 61 of C:/Apache/conf/httpd.conf:
>> Cannot load C:/PHP/php5apache2.dll into server: Le module sp\xe9cifi\xe9
>> est introuvable.
>> I would appreciate if somebody could help me with that issue
>> Thank you very much
>> yves
>>
>>
>>
>>
>> -
>> The official User-To-User support forum of the Apache HTTP Server 
>> Project.
>> See http://httpd.apache.org/userslist.html> for more info.
>> To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
>> " from the digest: users-digest-unsubscr...@httpd.apache.org
>> For additional commands, e-mail: users-h...@httpd.apache.org
>>
>
> Yves,
>
> Install xampp instead.
>
> Frank.
>
>
> -
> The official User-To-User support forum of the Apache HTTP Server 
> Project.
> See http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
>   "   from the digest: users-digest-unsubscr...@httpd.apache.org
> For additional commands, e-mail: users-h...@httpd.apache.org
>
>
>



-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
   "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org




Re: [us...@httpd] Apache and phpapacherX.dll

2010-07-05 Thread Payne, Charles


- Original Message -
From: Yves 
To: users@httpd.apache.org 
Sent: Sun Jul 04 00:31:31 2010
Subject: Re: [us...@httpd] Apache and phpapacherX.dll

  Hi Frank
Thank you very much for your help mentioning the xampp soft
I worked great
I will be able to teach mysql to kids this summer
Thanks again
yves

Le 04/07/2010 01:21, Frank Gingras a écrit :
>
>
> On 07/03/2010 07:53 AM, Yves wrote:
>> Current system
>> Laptop Dell precision T4500, 3GB memory and plenty of space disk
>> Windows 7
>> Apache 2.0.63
>> PHP 5.2.11
>>
>> I need to setup apache with php to teach a summer camp here
>> I cannot get apache loading on my laptop
>> I hava had that situation in the past and remember that one has to pair
>> apache version with php version but I cannot remember or find what
>> version apache needs to be associated with php to work
>> §HEre is the error from the log
>> The Apache service named reported the following error:
>> >>> httpd.exe: Syntax error on line 61 of C:/Apache/conf/httpd.conf:
>> Cannot load C:/PHP/php5apache2.dll into server: Le module sp\xe9cifi\xe9
>> est introuvable.
>> I would appreciate if somebody could help me with that issue
>> Thank you very much
>> yves
>>
>>
>>
>>
>> -
>> The official User-To-User support forum of the Apache HTTP Server 
>> Project.
>> See http://httpd.apache.org/userslist.html> for more info.
>> To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
>> " from the digest: users-digest-unsubscr...@httpd.apache.org
>> For additional commands, e-mail: users-h...@httpd.apache.org
>>
>
> Yves,
>
> Install xampp instead.
>
> Frank.
>
>
> -
> The official User-To-User support forum of the Apache HTTP Server 
> Project.
> See http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
>   "   from the digest: users-digest-unsubscr...@httpd.apache.org
> For additional commands, e-mail: users-h...@httpd.apache.org
>
>
>



-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
   "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org




Re: [us...@httpd] (104)Connection reset by peer: SSL input filter read failed.

2010-07-05 Thread Eric Covener
> [Thu Jul 01 16:37:25 2010] [info] [client 10.10.0.1] (104)Connection reset
> by peer: SSL input filter read failed.

Stop debugging httpd, and figure out why tomcat is closing the
connection unexpectedly.

-- 
Eric Covener
cove...@gmail.com

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
   "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



Re: [us...@httpd] using ProxyPreserveReverseCookie

2010-07-05 Thread alin vasile
Try accessing the internet part with Firefox and an add-on that logs the http 
communication and check there if the cookies have the same domain as your 
internet address.





From: Tapas Mishra 
To: users@httpd.apache.org
Sent: Mon, July 5, 2010 2:10:01 PM
Subject: Re: [us...@httpd] using ProxyPreserveReverseCookie

>From intranet they are working absolutely perfect.But from internet it
is not working.
How do I check the cookies you are saying  I do not have any idea to
this problem of cookies.
see this link
http://www.atutor.ca/view/7/20279/1.html
this is what I am trying to do.


-- 
Tapas

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
   "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org


  

Re: [us...@httpd] using ProxyPreserveReverseCookie

2010-07-05 Thread Tapas Mishra
>From intranet they are working absolutely perfect.But from internet it
is not working.
How do I check the cookies you are saying  I do not have any idea to
this problem of cookies.
see this link
http://www.atutor.ca/view/7/20279/1.html
this is what I am trying to do.


-- 
Tapas

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
   "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



Re: [us...@httpd] (104)Connection reset by peer: SSL input filter read failed.

2010-07-05 Thread Mauri
Hi,

can someone help?

many thanks,
Mauri


2010/7/2 Mauri 

> Hi Igor,
>
> thanks for the response, u have right about the order, i have changed it.
>
> for the ProxyPassreverse this directive is wrong?
>
>
> 
> ProxyPassReverse https://itsmtest/
> ProxyHTMLEnable On
> ProxyHTMLMeta On
> ProxyHTMLURLMap  /  /
> RequestHeaderunset  Accept-Encoding
> 
>
> what I can change or do?
>
> many thanks for the support.
>
> Cheers,
> Mauri
>
>
> 2010/7/2 Igor Cicimov 
>
> Hi,
>>
>> Using "ProxyRequests off" means the apache is going to be a reverse proxy
>> but I can't see your ProxyPassreverse statement. Also the order of the proxy
>> commands is little bit weird. I wold do it in this way:
>>
>> ProxyRequests off
>>
>> ProxyHTMLLogVerbose On
>> ProxyPreserveHost On
>> ProxyPass / https://10.10.0.1:8443/
>> ProxyPassReverse / https://10.10.0.1:8443/
>> ProxyHTMLURLMap https://itsmtest/ /
>>
>> Cheers,
>> Igor
>>
>>
>> On Fri, Jul 2, 2010 at 12:28 AM, Mauri  wrote:
>>
>>> Hi expert,
>>>
>>> my application crashes (BMC Remedy) in the same point.
>>> This is my enviroment: Client --> SSL to Apache Prox --> Tomcat on 8996.
>>>
>>> In the apache log i'm reading this error:
>>>
>>> [Thu Jul 01 16:37:25 2010] [debug] ssl_engine_io.c(1821): OpenSSL: I/O
>>> error, 3237 bytes expected to read on BIO#8a2fdf8 [mem: 8a4d420]
>>> [Thu Jul 01 16:37:25 2010] [info] [client 10.10.0.1] (104)Connection
>>> reset by peer: SSL input filter read failed.
>>> [Thu Jul 01 16:37:25 2010] [error] [client 10.173.202.231]
>>> (104)Connection reset by peer: proxy: error reading status line from remote
>>> server 10.10.0.1, referer:
>>> https://itsmtest/arsys/atrium/AtriumConsole.swf
>>> [Thu Jul 01 16:37:25 2010] [debug] mod_proxy_http.c(1466): [client
>>> 10.173.202.231] proxy: NOT Closing connection to client although reading
>>> from backend server 10.10.0.1 failed., referer:
>>> https://itsmtest/arsys/atrium/AtriumConsole.swf
>>> [Thu Jul 01 16:37:25 2010] [error] [client 10.173.202.231] proxy: Error
>>> reading from remote server returned by
>>> /arsys/plugins/AtriumWidget/messagebroker/amfsecure, referer:
>>> https://itsmtest/arsys/atrium/AtriumConsole.swf
>>> [Thu Jul 01 16:37:25 2010] [debug] proxy_util.c(2062): proxy: HTTPS: has
>>> released connection for (10.10.0.1)
>>>
>>> What kind of check can I do?
>>>
>>> Many thanks for all suggest, as usual
>>> Cheers,
>>> Mauri
>>>
>>> this is my server:
>>>
>>> [r...@proxy1 httpd]# uname -a
>>> Linux Proxy1 2.6.18-128.el5 #1 SMP Wed Dec 17 11:42:39 EST 2008 i686 i686
>>> i386 GNU/Linux
>>> [r...@proxy1 httpd]# rpm -qa | grep httpd
>>> httpd-manual-2.2.3-31.el5_4.2
>>> system-config-httpd-1.3.3.3-1.el5
>>> httpd-2.2.3-31.el5_4.2
>>> httpd-devel-2.2.3-31.el5_4.2
>>>
>>> this is my ssl.conf configuration:
>>>
>>> LoadModule ssl_module modules/mod_ssl.so
>>> LoadFile   /usr/lib/libxml2.so
>>> LoadModule proxy_html_module modules/mod_proxy_html.so
>>> LoadModule xml2enc_module modules/mod_xml2enc.so
>>>
>>> Listen 443
>>> AddType application/x-x509-ca-cert .crt
>>> AddType application/x-pkcs7-crl.crl
>>> SSLPassPhraseDialog  builtin
>>> SSLSessionCache shmcb:/var/cache/mod_ssl/scache(512000)
>>> SSLSessionCacheTimeout  300
>>> SSLMutex default
>>> SSLRandomSeed startup file:/dev/urandom  256
>>> SSLRandomSeed connect builtin
>>> SSLCryptoDevice builtin
>>> NameVirtualHost itsmtest:443
>>> 
>>> ServerName itsmtest
>>> ErrorLog logs/ictitsm_ssl_error_log_443
>>> TransferLog logs/ictitsm_ssl_access_log_443
>>> LogLevel Debug
>>> ProxyHTMLLogVerbose On
>>> ProxyPreserveHost On
>>> ProxyPass / https://10.10.0.1:8443/
>>> ProxyHTMLURLMap https://itsmtest/ /
>>> ProxyRequests off
>>> SetEnv force-proxy-request-1.0 1
>>> SetEnv proxy-nokeepalive 1
>>> SetEnv proxy-initial-not-pooled 1
>>> timeout 900
>>>
>>> 
>>> ProxyPassReverse https://itsmtest/
>>> ProxyHTMLEnable On
>>> ProxyHTMLMeta On
>>> ProxyHTMLURLMap  /  /
>>> RequestHeaderunset  Accept-Encoding
>>> 
>>>
>>> SSLEngine on
>>> SSLProxyEngine on
>>> SSLProtocol all -SSLv2
>>> SSLCipherSuite ALL:!ADH:!EXPORT:!SSLv2:RC4+RSA:+HIGH:+MEDIUM:+LOW
>>> SSLCertificateFile /etc/httpd/cert/proxy_coll_new.crt
>>> SSLCertificateKeyFile /etc/httpd/cert/proxy_coll_new.key
>>> SSLCertificateChainFile /etc/httpd/cert/GlobalCA.cer
>>>
>>> 
>>> SSLOptions +StdEnvVars
>>> 
>>> 
>>> SSLOptions +StdEnvVars
>>> 
>>> SetEnv proxy-nokeepalive 1
>>> SetEnvIf User-Agent ".*MSIE.*" \
>>>  nokeepalive ssl-unclean-shutdown \
>>>  downgrade-1.0 force-response-1.0
>>> CustomLog logs/ssl_request_log \
>>>   "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
>>> 
>>
>>
>>
>


Re: [us...@httpd] using ProxyPreserveReverseCookie

2010-07-05 Thread alin vasile
try logging in both from the intranet and internet and check the http 
communication maybe the cookies are sent for the wrong domains.





From: Tapas Mishra 
To: users@httpd.apache.org
Sent: Mon, July 5, 2010 12:07:48 PM
Subject: Re: [us...@httpd] using ProxyPreserveReverseCookie

On two websites when people are logging they get a session if they
login from inside LAN.
but if people login from internet then it is not possible for them to login.

These applications are not developed by me so some one suggested me
X-Forwarded-For header is not being properly handled by
these applications so this problem is coming.

I have not developed any of those applications
I downloaded them from internet and I am trying to use them.

If some one is trying to reach them by internet i.e. login then this
problem is coming.

-- 
Tapas

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
   "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org


  

Re: [us...@httpd] using ProxyPreserveReverseCookie

2010-07-05 Thread Tapas Mishra
On two websites when people are logging they get a session if they
login from inside LAN.
but if people login from internet then it is not possible for them to login.

These applications are not developed by me so some one suggested me
X-Forwarded-For header is not being properly handled by
these applications so this problem is coming.

I have not developed any of those applications
I downloaded them from internet and I am trying to use them.

If some one is trying to reach them by internet i.e. login then this
problem is coming.

-- 
Tapas

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
   "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



Re: [us...@httpd] using ProxyPreserveReverseCookie

2010-07-05 Thread alin vasile
What do you mean by 

"My virtual host configuration is as follows
I  want to use 
ProxyPassReverseCookieDomain
2 websites are not working while rest 
are working in this setup"

What doesn't work?





From: Tapas Mishra 
To: users@httpd.apache.org
Sent: Mon, July 5, 2010 8:45:39 AM
Subject: [us...@httpd] using ProxyPreserveReverseCookie

I am not clear with
ProxyPassReverseCookieDomain and ProxyPassReverseCookiePath
I checked this page
http://httpd.apache.org/docs/2.2/mod/mod_proxy.html#proxypassreverse
but I am not able to understand it
I am having 8 websites running on a machine one of them is not getting
connected via internet



My virtual host configuration is as follows
I  want to use ProxyPassReverseCookieDomain
2 websites are not working while rest are working in this setup

is it some how possible to make it I am totally confused



ServerAdmin webmas...@localhost
ServerName mydomain.com
ProxyRequests off

Order deny,allow
Allow from all


ProxyPreserveHost On

ProxyPass /something1 http://192.168.1.5/something1
ProxyPassReverse /something1 http://192.168.1.5/something1

ProxyPass /something2 http://192.168.1.5/something2/www/
ProxyPassReverse /something2 http://192.168.1.5/something2/www/

ProxyPass /something3 http://192.168.1.5/something3/
ProxyPassReverse /something3 http://192.168.1.5/something3/

ProxyPass /something4 http://192.168.1.5/something4/
ProxyPassReverse /something4 http://192.168.1.5/something4/

ProxyPass /something5 http://192.168.1.5/something5
ProxyPassReverse /something5 http://192.168.1.5/something5

   ProxyPass /something6 http://192.168.1.5:8080/something6
   ProxyPassReverse /something6 http://192.168.1.5:8080/something6

ProxyPass /something7 http://192.168.1.5:6060/portal
ProxyPassReverse /something7 http://192.168.1.5:6060/portal

ProxyPass / http://192.168.1.5/
ProxyPassReverse / http://192.168.1.5/

ErrorLog /var/log/apache2/mydomain_error.log

# Possible values include: debug, info, notice, warn, error, crit,
# alert, emerg.
LogLevel debug

CustomLog /var/log/apache2/mydomain_access.log combined

CustomLog /var/log/apache2/mydomain-resp_log resp
LogFormat "%D %{X-Forwarded-For}i %t" resp





-- 
Tapas

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
   "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org