Re: [us...@httpd] dynamic mpm-itk

2010-11-15 Thread Igor Galić

- James Devine fxmul...@gmail.com wrote:

 I wrote a module that runs prior to itk which checks for this special
 case and sets both the uid and gid, this seems to run fairly nicely

So you wrote a hack to stand on the shoulders of another hack?
Nce ;)
i

-- 
Igor Galić

Tel: +43 (0) 664 886 22 883
Mail: i.ga...@brainsware.org
URL: http://brainsware.org/

-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
  from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



[us...@httpd] Mod-rewrite problem

2010-11-15 Thread Rudi Kramer
Hi,

I am using ubunto 8.0.4 and apache 2.2.8 and I'm having some issue with mod
rewrite and SSL redirection.

I have two objectives. The first is to redirect
http://www.site.co.zahttps://www.site.co.za/
 and http://site.co.za https://www.site.co.za/  to the url
https://www.site.co.za and the second is to redirect all traffic for
https://site.co.za to https://www.site.co.za.

I can get the first part working perfectly using the following:

VirtualHost www.site.co.za:80 http://site.co.za/
ServerName www.site.co.za
ServerAlias site.co.za
DocumentRoot /var/www/site.co.za
ErrorLog /var/log/apache2/site.co.za.co.za-error_log
CustomLog /var/log/apache2/site.co.za-access_log common

RewriteEngine   on
RewriteCond %{HTTPS} off
RewriteRule (.*) https://www.site.co.za%{REQUEST_URI}
RewriteLog /var/log/apache2/site.co.za-rewrite_log
RewriteLogLevel 3
/VirtualHost

But for the life of me I cannot get the second part working, I've tried of
this:

VirtualHost www.site.co.za:80 http://www.site.co.za/
...
RewriteEngine   on
RewriteCond %{HTTPS} on
RewriteRule (.*) https://www.site.co.za%{REQUEST_URI}
RewriteLog /var/log/apache2/site.co.za-rewrite_log
RewriteLogLevel 3

RewriteEngine   on
RewriteCond %{SERVER_PORT} ^443$
RewriteRule (.*) https://www.site.co.za%{REQUEST_URI}
RewriteLog /var/log/apache2/site.co.za-rewrite_log
RewriteLogLevel 3
/VirtualHost

and this:

VirtualHost www.site.co.za:443
...
RewriteEngine On
RewriteCond %{HTTPS} on
RewriteCond %{HTTP_HOST} !^www\.
RewriteRule ^(.*)$ http://www.%{HTTP_HOST}/$1 [R=301,L]
RewriteLog /var/log/apache2/ssl-site.co.za-rewrite_log
RewriteLogLevel 3
/VirtualHost

I've even add this to the .htaccess file in  /var/www/site.co.za  but still
no joy:

RewriteEngine On
RewriteCond %{HTTP_HOST} !^www\.
RewriteRule ^(.*)$ http://www.%{HTTP_HOST}/$1 [R=301,L]
RewriteLog /var/log/apache2/ssl-site.co.za-rewrite_log

For some strange reason mod-rewrite seems to be ignoring the SSL traffic
even when I remove all rules except for the SSL https://site.co.za to
https://www.site.co.za rewrite rule and when I tryhttps://site.co.za I get
nothing in the rewrite log files.

Any ideas?

Thanks


Re: [us...@httpd] Rewrite logs are empty (Apache 2.0.47)

2010-11-15 Thread iñigo medina
When you say:

I've tried the above both inside and outside the virtual host.

do you mean you have already tried absolute path? For instance:

RewriteLog /var/apache2/log/rewrite.log

iñ


2010/11/13 Sai A arialwi...@gmail.com

 Hi inigo,

 I tried it out now but that doesn't seem to be help as well. I am really
 confused. What could be it?

 All your help is appreciated. Thanks for the replies.


 On Sat, Nov 13, 2010 at 10:18 PM, iñigo medina imed...@grosshat.comwrote:

 Have you tried with the directive as follows?

 RewriteLog logs/file.log

 iñ
 El 13/11/2010 16:24, Sai A arialwi...@gmail.com escribió:





-- 
-
imed...@grosshat.com
es un mundo mágico


[us...@httpd] Buffering of huge POSTs to CGI and alternatives

2010-11-15 Thread Steven Simpson
Hi,

I intend to have a CGI program extract a form field and deliver this
data to an external system, but the field in question is likely to be
huge.  The server can't invoke the program until it knows the length of
the request body, in order to set CONTENT_LENGTH in the program's
environment.  If the POST doesn't include a Content-Length field, the
server will have to buffer the entire contents somewhere.  Can it deal
with huge message bodies, such as those exceeding virtual RAM, by saving
to disc (for example)?

How does FastCGI/fcgid compare?  Will it handle huge POSTs any better? 
My cursory reading of the FastCGI spec suggests that it doesn't have to
know the content length to deliver it, because it is sent in chunks.

Thanks,

Steven


-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
  from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



Re: [us...@httpd] Limiting Request Body suggestion

2010-11-15 Thread Matus UHLAR - fantomas
  On Thu, October 28, 2010 16:24, Tom Evans wrote:
   Why do you care what the status code is? (or rather, why do you want
   to return OK when an error occurs?)
 
  On 28.10.10 16:48, Joost de Heer wrote:
  To work around the Display userfriendly error messages bug^Wfeature?

 On Tue, Nov 9, 2010 at 2:17 AM, Matus UHLAR - fantomas
 uh...@fantomas.sk wrote:
  Is there any need for work around this?
 
  They may come with greater limits later. Simply give them what they have
  chosen: bullshit error messages.
  Providing .reg file that removes the lame setting is the best we can do
  about this.
 
  sorry for being semi-OT

On 09.11.10 10:14, Mohit Anchlia wrote:
 Doesn't work for us. We have clients who pay for our products and
 electronically send there information to us and it's the requirement
 from the client products to send them back the graceful turnaway with
 good error message back to the user. This is hard requirement and
 that's why I am stuck. I am thinking of may be writing something of my
 own. Do you think I can write some cgi handler?

apache provides localized error messages for error codes. You can translate
them and add some bullshit to them to be over 512 bytes big.

But since it's the web browser, who eats those messages and shows user own
versions, who can tell when will microsoft come with bigger limit for error
messages?

My point is, you can (and apparently do) give useful error messages, but you
can't to much for clients' browsers not to sabotage it.

-- 
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety. -- Benjamin Franklin, 1759

-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
  from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



Re: [us...@httpd] Mod-rewrite problem

2010-11-15 Thread Igor Galić

- Rudi Kramer rudi.kra...@gmail.com wrote:

 Hi,
 
 
 I am using ubunto 8.0.4 and apache 2.2.8 and I'm having some issue
 with mod rewrite and SSL redirection.
 
 
 I have two objectives. The first is to redirect http://www.site.co.za
 and http://site.co.za to the url https://www.site.co.za and the second
 is to redirect all traffic for https://site.co.za to
 https://www.site.co.za .
 
 
 I can get the first part working perfectly using the following:
 
 
 
 VirtualHost www. site.co.za:80 

Don't do that.

Check http://wiki.apache.org/httpd/ExampleVhosts or
http://httpd.apache.org/docs/current/vhosts/examples.html
out to see some sensible examples


For one, for the other: Why not just use Redirect?
http://wiki.apache.org/httpd/WhenNotToUseRewrite

bye,
i
-- 
Igor Galić

Tel: +43 (0) 664 886 22 883
Mail: i.ga...@brainsware.org
URL: http://brainsware.org/

-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
  from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



Re: [us...@httpd] Mod-rewrite problem

2010-11-15 Thread Matus UHLAR - fantomas
- Rudi Kramer rudi.kra...@gmail.com wrote:
 I am using ubunto 8.0.4 and apache 2.2.8 and I'm having some issue
 with mod rewrite and SSL redirection.
 
 I have two objectives. The first is to redirect http://www.site.co.za
 and http://site.co.za to the url https://www.site.co.za and the second
 is to redirect all traffic for https://site.co.za to
 https://www.site.co.za .

There is no need for mod_rewrite. the Redirect directive can do exactly the
same with less of workload.

You don't need a cannon for shooting birds, do you?


-- 
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
   One OS to rule them all, One OS to find them, 
One OS to bring them all and into darkness bind them 

-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
  from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



Re: [us...@httpd] Mod-rewrite problem

2010-11-15 Thread Rudi Kramer
On 15 November 2010 14:40, Matus UHLAR - fantomas uh...@fantomas.sk wrote:


 There is no need for mod_rewrite. the Redirect directive can do exactly the
 same with less of workload.

 You don't need a cannon for shooting birds, do you?



On 15 November 2010 14:40, Matus UHLAR - fantomas uh...@fantomas.sk wrote:

 There is no need for mod_rewrite. the Redirect directive can do exactly the
 same with less of workload.

 You don't need a cannon for shooting birds, do you?


Depends on how big the birds are. My birds are not so big :-)

I have have changed the port 80 virtual host to use redirectmatch and it
looks much neater.

VirtualHost *:80
ServerName www.site.co.za
ServerAlias site.co.za

RedirectMatch ^ https://www.site.co.za/
/VirtualHost

but I still cannot get it right to redirect the https://site.co.za redirect
to https://www.site.co.za, I think it might be my lack understanding of
regex though.

Does this look right?

RedirectMatch ^http\://bpultimateride\.co\.za
https://www.bpultimateride.co.za/


Regards
Rudi


Re: [us...@httpd] Mod-rewrite problem

2010-11-15 Thread Eric Covener
 but I still cannot get it right to redirect the https://site.co.za redirect
 to https://www.site.co.za, I think it might be my lack understanding of
 regex though.
 Does this look right?
 RedirectMatch ^http\://bpultimateride\.co\.za

No, the first argument is just the URL-path, not an entire URL.  But
you want plain old Redirect / anyway.

All this confusion might add up to you're not working in the
virtualhost handling the non-ssl request.

-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
  from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



[us...@httpd] ssl_error_rx_unexpected_server_key_exch

2010-11-15 Thread Ricardo Stella

Hello,

We're getting these errors on some of our web servers (different
instances running on different ports) being detected by Firefox 3.6.9+

This happens after about a week of normal use.  A restart temporarily
fixes the problem, but we have not been able to find a solution from the
server side.

Tried different iterations of the SSLProtocol and SSLCipherSuite but not
able to get to one that works.  I've posted and got no answers back. 
Supposedly the problem is Firefox does not like SSL DHE cipher suites,
however there's no documentation on how to 'fix it' from the server side.

Currently, I have the following (and still doesn't work):

SSLProtocol all -SSLv2
SSLCipherSuite ALL:!EXP:!NULL:!ADH:!LOW:!SSLv2:!kEDH:+HIGH:!MEDIUM

Thank you.




-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
  from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



Re: [us...@httpd] ssl_error_rx_unexpected_server_key_exch

2010-11-15 Thread Plot Lost
On Mon, Nov 15, 2010 at 6:43 PM, Ricardo Stella ste...@rider.edu wrote:


 Hello,

 We're getting these errors on some of our web servers (different
 instances running on different ports) being detected by Firefox 3.6.9+

 This happens after about a week of normal use.  A restart temporarily
 fixes the problem, but we have not been able to find a solution from the
 server side.

 Tried different iterations of the SSLProtocol and SSLCipherSuite but not
 able to get to one that works.  I've posted and got no answers back.
 Supposedly the problem is Firefox does not like SSL DHE cipher suites,
 however there's no documentation on how to 'fix it' from the server side.

 Currently, I have the following (and still doesn't work):

 SSLProtocol all -SSLv2
 SSLCipherSuite ALL:!EXP:!NULL:!ADH:!LOW:!SSLv2:!kEDH:+HIGH:!MEDIUM

 Thank you.

Not sure if this will help with what you are seeing, but I used the info
available here to setup the SSLCipherSuite etc settings:

http://journal.paul.querna.org/articles/2010/07/10/overclocking-mod_ssl/

In particular this might be of some use

http://httpd.apache.org/docs/2.2/mod/mod_ssl.html#sslhonorcipherorder

The settings I use are:

SSLProtocol TLSv1 SSLv3
SSLCipherSuite RC4-SHA:AES256-SHA:ALL:!ADH:!MD5:!EXP:!LOW:!NULL
SSLHonorCipherOrder on
and have not seen any problems with Firefox (or any other browser) so far...


Re: [us...@httpd] Mod-rewrite problem

2010-11-15 Thread Matus UHLAR - fantomas
 On 15 November 2010 14:40, Matus UHLAR - fantomas uh...@fantomas.sk wrote:
 
  There is no need for mod_rewrite. the Redirect directive can do exactly the
  same with less of workload.
 
  You don't need a cannon for shooting birds, do you?

On 15.11.10 15:27, Rudi Kramer wrote:
 VirtualHost *:80
 ServerName www.site.co.za
 ServerAlias site.co.za
 
 RedirectMatch ^ https://www.site.co.za/

Redirect / https://www.site.co.za/

is even more simple.

 /VirtualHost
 
 but I still cannot get it right to redirect the https://site.co.za redirect
 to https://www.site.co.za, I think it might be my lack understanding of
 regex though.
 
 Does this look right?
 
 RedirectMatch ^http\://bpultimateride\.co\.za
 https://www.bpultimateride.co.za/

no, it has to be

Redirect / https://www.site.co.za

in the VirtualHost section for site.co.za (yes, you need separate virtual
host)

I hope you have SSL certificate for www.site.co.za with alternative name
site.co.za, otherwise browsers will report a mismatch.

-- 
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
We are but packets in the Internet of life (userfriendly.org)

-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
  from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



Re: [us...@httpd] Rewrite logs are empty (Apache 2.0.47)

2010-11-15 Thread Sai A
I didn't try with an absolute path, only with relative paths. The file does
get generated inside the logs folder, just that it is empty.

Inigo, thanks a lot for trying to help. I really appreciate everybody's help
and time on these threads.

A fellow colleague informed me that he'd earlier had a similar problem. It
had to do with the mod_rewrite not being properly loaded or something like
that... I am waiting for him to investigate the problem. I'll get back as
soon as the problem resolves to say what the problem/solution was.

On Mon, Nov 15, 2010 at 2:57 PM, iñigo medina imed...@grosshat.com wrote:

 When you say:


 I've tried the above both inside and outside the virtual host.

 do you mean you have already tried absolute path? For instance:

 RewriteLog /var/apache2/log/rewrite.log

 iñ


 2010/11/13 Sai A arialwi...@gmail.com

 Hi inigo,

 I tried it out now but that doesn't seem to be help as well. I am really
 confused. What could be it?

 All your help is appreciated. Thanks for the replies.


 On Sat, Nov 13, 2010 at 10:18 PM, iñigo medina imed...@grosshat.comwrote:

 Have you tried with the directive as follows?

 RewriteLog logs/file.log

 iñ
 El 13/11/2010 16:24, Sai A arialwi...@gmail.com escribió:





 --
 -
 imed...@grosshat.com
 es un mundo mágico



Re: [us...@httpd] Mod-rewrite problem

2010-11-15 Thread Rudi Kramer
On 15 November 2010 17:17, Matus UHLAR - fantomas uh...@fantomas.sk wrote:

 Redirect / https://www.site.co.za

 in the VirtualHost section for site.co.za (yes, you need separate virtual
 host)

 I hope you have SSL certificate for www.site.co.za with alternative name
 site.co.za, otherwise browsers will report a mismatch.


 Hi,

I think I see the problem here. I have two virtual host files, one for
non-ssl and one for ssl.

VirtualHost *:80
ServerName www.site.co.za
ServerAlias site.co.za

RedirectMatch ^ https://www.site.co.za/

/VirtualHost


VirtualHost *:443
ServerName www.site.co.za
ServerAlias site.co.za

RedirectMatch ^http\://site\.co\.za https://www.site.co.za/

SSLEngine on
SSLOptions +StrictRequire
SSLCertificateFile /etc/apache2/ssl/site.co.za/server.crt
SSLCertificateKeyFile /etc/apache2/ssl/site.co.za/server.key

/VirtualHost

As far as I can tell the ssl encryption means that Apache can't do the
redirect and the cliet only has a valid cert for the
https://www.site.co.zaand not
https://site.co.za which is why I was trying to get the redirect working..

bugger.


Re: [us...@httpd] Mod-rewrite problem

2010-11-15 Thread Frank Gingras



On 11/15/2010 12:37 PM, Rudi Kramer wrote:

On 15 November 2010 17:17, Matus UHLAR - fantomas uh...@fantomas.sk
mailto:uh...@fantomas.sk wrote:

Redirect / https://www.site.co.za

in the VirtualHost section for site.co.za http://site.co.za (yes,
you need separate virtual
host)

I hope you have SSL certificate for www.site.co.za
http://www.site.co.za with alternative name
site.co.za http://site.co.za, otherwise browsers will report a
mismatch.


  Hi,

I think I see the problem here. I have two virtual host files, one for
non-ssl and one for ssl.

VirtualHost *:80
ServerName www.site.co.za http://www.site.co.za
ServerAlias site.co.za http://site.co.za

RedirectMatch ^ https://www.site.co.za/

/VirtualHost


VirtualHost *:443
ServerName www.site.co.za http://www.site.co.za
ServerAlias site.co.za http://site.co.za

RedirectMatch ^http\://site\.co\.za https://www.site.co.za/

SSLEngine on
SSLOptions +StrictRequire
SSLCertificateFile /etc/apache2/ssl/site.co.za/server.crt
http://site.co.za/server.crt
SSLCertificateKeyFile /etc/apache2/ssl/site.co.za/server.key
http://site.co.za/server.key

/VirtualHost

As far as I can tell the ssl encryption means that Apache can't do the
redirect and the cliet only has a valid cert for the
https://www.site.co.za and not https://site.co.za which is why I was
trying to get the redirect working..

bugger.










Rudi,

Also note that Redirect and RedirectMatch operate on REQUEST_URI. The 
protocol, hostname and port is not visible in that context.


Frank.

-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
 from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



Re: [us...@httpd] Buffering of huge POSTs to CGI and alternatives

2010-11-15 Thread Jeff Trawick
On Mon, Nov 15, 2010 at 4:43 AM, Steven Simpson s...@comp.lancs.ac.uk wrote:
 Hi,

 I intend to have a CGI program extract a form field and deliver this
 data to an external system, but the field in question is likely to be
 huge.  The server can't invoke the program until it knows the length of
 the request body, in order to set CONTENT_LENGTH in the program's
 environment.  If the POST doesn't include a Content-Length field, the
 server will have to buffer the entire contents somewhere.  Can it deal
 with huge message bodies, such as those exceeding virtual RAM, by saving
 to disc (for example)?

mod_cgi/mod_cgid: request will fail with 411 if client doesn't send
content-length; i.e., they don't have the logic to spool the body and
compute CONTENT_LENGTH

theoretically you could interject some other module to spool the body
and set a computed content-length before the cgi handler runs


 How does FastCGI/fcgid compare?  Will it handle huge POSTs any better?
 My cursory reading of the FastCGI spec suggests that it doesn't have to
 know the content length to deliver it, because it is sent in chunks.

FastCGI spec indicates that CONTENT_LENGTH will be provided to the
app, even though the request body will be sent to the application in
chunks.  Furthermore, it suggests that the app could compare
CONTENT_LENGTH with the actual length received to determine if the
client aborted before sending the entire body.

mod_fastcgi: as with mod_cgi/mod_cgid: the request fails with 411 if
the client doesn't send content-length

mod_fcgid: request is fine if client doesn't send content-length, but
application doesn't get CONTENT_LENGTH (bug)

mod_fcgid spools the entire body to memory/disk before connecting to
the app, so it should go ahead and pass over a computed CONTENT_LENGTH
value; that would also resolve a Content-Length value from the client
which becomes invalid because of a filter.

So: mod_fcgid seems closest to what you need, and whether it works for
you today is dependent on whether or not you need CONTENT_LENGTH set
due to a chunked request body.

-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
  from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



[us...@httpd] Group authentication to AD

2010-11-15 Thread Patricia A Moss
I am having a problem with apache authenticating using an ldap group. I 
have version 2.2.3, of httpd, installed. 

My location block is configured as below:
Location /test_repo
dav svn
SVNPath /disk01/home/test_repo
AuthType Basic
AuthName Subversion Repository
AuthBasicProvider ldap-FCGNET ldap-VIET
AuthzLDAPAuthoritative on
Require valid-user
Require ldap-group CN=Active_Directory Group 
Name,OU=U.S.,OU=Groups,DC=domain,DC=com
#Require ldap-user pmoss
/Location
 
I've configured my aliases, in my http.conf file, as follows:
AuthnProviderAlias ldap ldap-FCGNET
AuthLDAPBindDN FCGNET\account_name
AuthLDAPBindPassword xx
AuthLDAPURL 
ldap://server.domain.com:3268/DC=domain,DC=com?samAccountName?sub?(objectCategory=person)
/AuthnProviderAlias
AuthnProviderAlias ldap ldap-VIET
AuthLDAPBindDN CN=account_name,OU=Service 
Accounts,OU=Users,OU=Production,DC=domain,DC=com
AuthLDAPBindPassword x
AuthLDAPURL 
ldap://server.domain.com:3268/DC=domain,DC=com?samAccountName?sub?(objectCategory=person)
/AuthnProviderAlias


My goal(s):
 1. Allow only 1 specific, Active Directory, group access to the 
repository.
 2. Simultaneously, allow a single user account, that is not a member of 
the group, access to the repository


My attempts:
1. Configuration, as above, allows any valid user access to the 
repository; whether they are a member of the group or not.

2. If I remove Require valid-user then I receive an error when 
attempting access the repository and the error.log is as follows:
[Mon Nov 15 14:38:15 2010] [debug] mod_authnz_ldap.c(377): [client 
20.8.xxx.18x] [27994] auth_ldap authenticate: using URL 
ldap://server.domain.com:3268/DC=domain,DC=com?samAccountName?sub?(objectCategory=person)
[Mon Nov 15 14:38:15 2010] [debug] mod_authnz_ldap.c(474): [client 
20.8.xxx.18x] [27994] auth_ldap authenticate: accepting pmoss
[Mon Nov 15 14:38:15 2010] [crit] [client 20.8.232.187] configuration 
error:  couldn't check access.  No groups file?: /test_repo/

3. I tried a LimitExcept block, shown below.
Location /test_repo
dav svn
SVNPath /disk01/home/test_repo
AuthType Basic
AuthName Subversion Repository
AuthBasicProvider ldap-FCGNET ldap-VIET
AuthzLDAPAuthoritative on
#Require valid-user
# Limit R/W access to specified AD group
LimitExcept GET PROPFIND OPTIONS REPORT
Require ldap-group CN=Active_Directory Group 
Name,OU=U.S.,OU=Groups,DC=domain,DC=com
/LimitExcept
#Require ldap-user pmoss
/Location
I could successfully gain access to the repository, and I am not a member 
of the group.

4. I uncommented the Require valid-user line and was, again, successful 
in attempting access; and I am not a member of the group.

5. If I change the AuthzLDAPAuthoritative to off, I can still gain access 
to the repository. 


In my httpd.conf, I have the following modules:
LoadModule ldap_module modules/mod_ldap.so
LoadModule authnz_ldap_module modules/mod_authnz_ldap.so
LoadModule dav_module modules/mod_dav.so
LoadModule dav_fs_module modules/mod_dav_fs.so
LoadModule cgi_module modules/mod_cgi.so
LoadModule authz_host_module modules/mod_authz_host.so
LoadModule auth_basic_module modules/mod_auth_basic.so
LoadModule dav_svn_module modules/mod_dav_svn.so
LoadModule authz_svn_module   modules/mod_authz_svn.so
LoadModule authn_alias_module modules/mod_authn_alias.so
LoadModule authn_file_module modules/mod_authn_file.so
LoadModule authz_owner_module modules/mod_authz_owner.so
LoadModule authz_user_module modules/mod_authz_user.so
LoadModule alias_module modules/mod_alias.so


I've been searching around for answers but nothing seems to be solving my 
problem. 

I believe I have all the modules loaded that need to be there. 
I am not sure what I may be missing from my configuration or what may be 
mis-configured.  Hopefully someone can help me in achieving the goals.

 Thanks in advance.

PATI MOSS
System Engineer Sr. Professional
CSC

[us...@httpd] Distributed logging

2010-11-15 Thread Dennis Jacobfeuerborn

Hi,
what is the best way to handle the logging of multiple Apache instances? 
I'm looking for a way to have say 10 Apache servers efficiently log to 
central location so I can analyze the aggregated log-data there.
I've seen mod_log_spread but the last changelog entry is from 2006 so I'm 
not sure if this is still recommended and I've also looked at gearman but I 
was hoping for something less complex at least for now.

What are the recommended options here?

Regards,
  Dennis

-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
 from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



Re: [us...@httpd] Limiting Request Body suggestion

2010-11-15 Thread Mohit Anchlia
On Mon, Nov 15, 2010 at 3:56 AM, Matus UHLAR - fantomas
uh...@fantomas.sk wrote:
  On Thu, October 28, 2010 16:24, Tom Evans wrote:
   Why do you care what the status code is? (or rather, why do you want
   to return OK when an error occurs?)
 
  On 28.10.10 16:48, Joost de Heer wrote:
  To work around the Display userfriendly error messages bug^Wfeature?

 On Tue, Nov 9, 2010 at 2:17 AM, Matus UHLAR - fantomas
 uh...@fantomas.sk wrote:
  Is there any need for work around this?
 
  They may come with greater limits later. Simply give them what they have
  chosen: bullshit error messages.
  Providing .reg file that removes the lame setting is the best we can do
  about this.
 
  sorry for being semi-OT

 On 09.11.10 10:14, Mohit Anchlia wrote:
 Doesn't work for us. We have clients who pay for our products and
 electronically send there information to us and it's the requirement
 from the client products to send them back the graceful turnaway with
 good error message back to the user. This is hard requirement and
 that's why I am stuck. I am thinking of may be writing something of my
 own. Do you think I can write some cgi handler?

 apache provides localized error messages for error codes. You can translate
 them and add some bullshit to them to be over 512 bytes big.

 But since it's the web browser, who eats those messages and shows user own
 versions, who can tell when will microsoft come with bigger limit for error
 messages?

 My point is, you can (and apparently do) give useful error messages, but you
 can't to much for clients' browsers not to sabotage it.
Actually consumer of this message is a client API which then formats
it to be displayed on the browser. So client product sends file to us
we then sent the message back Too big ... as part of the API
response. Client product parses this and then displays it on the
browser.

 --
 Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
 Warning: I wish NOT to receive e-mail advertising to this address.
 Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
 They that can give up essential liberty to obtain a little temporary
 safety deserve neither liberty nor safety. -- Benjamin Franklin, 1759

 -
 The official User-To-User support forum of the Apache HTTP Server Project.
 See URL:http://httpd.apache.org/userslist.html for more info.
 To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
      from the digest: users-digest-unsubscr...@httpd.apache.org
 For additional commands, e-mail: users-h...@httpd.apache.org



-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
  from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



Re: [us...@httpd] Re: LimitRequestBody http return code

2010-11-15 Thread Mohit Anchlia
On Sun, Nov 14, 2010 at 11:58 AM, Jonas Eckerman jonas_li...@frukt.org wrote:
 On 2010-11-04 23:38, Mohit Anchlia wrote:

 500 (Internal Server Error) Can't read entity body: Connection reset by peer
 Content-Type: text/plain
 Client-Date: Thu, 04 Nov 2010 22:36:21 GMT
 Client-Warning: Internal response

 If this is in something done with perl LWP, the Client-Warning:
 Internal response header indicates that the error is generated by the
 perl or XS HTTP code and not by the server.

 http://search.cpan.org/~gaas/libwww-perl-5.837/lib/LWP/UserAgent.pm#REQUEST_METHODS


But even access logs don't show http 403:

10.4.106.55 - - [04/Nov/2010:15:39:36 -0700] POST /val/validate.cgi
HTTP/1.1 400 364 - libwww-perl/5.79 eitws1 0 - - - 188 522

 Regards
 /Jonas

 --
 Jonas Eckerman
 Fruktträdet  Förbundet Sveriges Dövblinda
 http://www.fsdb.org/
 http://www.frukt.org/
 http://whatever.frukt.org/

 -
 The official User-To-User support forum of the Apache HTTP Server Project.
 See URL:http://httpd.apache.org/userslist.html for more info.
 To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
      from the digest: users-digest-unsubscr...@httpd.apache.org
 For additional commands, e-mail: users-h...@httpd.apache.org



-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
  from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



Re: [us...@httpd] Re: LimitRequestBody http return code

2010-11-15 Thread Jeroen Geilman

On 11/15/2010 10:12 PM, Mohit Anchlia wrote:

On Sun, Nov 14, 2010 at 11:58 AM, Jonas Eckermanjonas_li...@frukt.org  wrote:
   

On 2010-11-04 23:38, Mohit Anchlia wrote:

 

500 (Internal Server Error) Can't read entity body: Connection reset by peer
Content-Type: text/plain
Client-Date: Thu, 04 Nov 2010 22:36:21 GMT
Client-Warning: Internal response
   

If this is in something done with perl LWP, the Client-Warning:
Internal response header indicates that the error is generated by the
perl or XS HTTP code and not by the server.

http://search.cpan.org/~gaas/libwww-perl-5.837/lib/LWP/UserAgent.pm#REQUEST_METHODS

 

But even access logs don't show http 403:

10.4.106.55 - - [04/Nov/2010:15:39:36 -0700] POST /val/validate.cgi
HTTP/1.1 400 364 - libwww-perl/5.79 eitws1 0 - - - 188 522

   


No, it says 400 - bad request.
Check the logs of your CGI for what went wrong.



--
J.


-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
 from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



Re: [us...@httpd] Re: LimitRequestBody http return code

2010-11-15 Thread Mohit Anchlia
On Mon, Nov 15, 2010 at 1:18 PM, Jeroen Geilman jer...@adaptr.nl wrote:
 On 11/15/2010 10:12 PM, Mohit Anchlia wrote:

 On Sun, Nov 14, 2010 at 11:58 AM, Jonas Eckermanjonas_li...@frukt.org
  wrote:


 On 2010-11-04 23:38, Mohit Anchlia wrote:



 500 (Internal Server Error) Can't read entity body: Connection reset by
 peer
 Content-Type: text/plain
 Client-Date: Thu, 04 Nov 2010 22:36:21 GMT
 Client-Warning: Internal response


 If this is in something done with perl LWP, the Client-Warning:
 Internal response header indicates that the error is generated by the
 perl or XS HTTP code and not by the server.


 http://search.cpan.org/~gaas/libwww-perl-5.837/lib/LWP/UserAgent.pm#REQUEST_METHODS



 But even access logs don't show http 403:

 10.4.106.55 - - [04/Nov/2010:15:39:36 -0700] POST /val/validate.cgi
 HTTP/1.1 400 364 - libwww-perl/5.79 eitws1 0 - - - 188 522



 No, it says 400 - bad request.
 Check the logs of your CGI for what went wrong.

Nothing is wrong in the request. If I just remove LimitRequestBody and
send the same request it works.



 --
 J.


 -
 The official User-To-User support forum of the Apache HTTP Server Project.
 See URL:http://httpd.apache.org/userslist.html for more info.
 To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
     from the digest: users-digest-unsubscr...@httpd.apache.org
 For additional commands, e-mail: users-h...@httpd.apache.org



-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
  from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



Re: [us...@httpd] port 80 or port 8080

2010-11-15 Thread William A. Rowe Jr.
On 11/14/2010 6:02 AM, Jorge Schrauwen wrote:
 You can tell skype to use another port. (Somewhre onder settings,
 alteast on linux and mac)
 Then you can install httpd on port 80.
 
 You can use other ports like 8080 but if you do this you will need to
 include them in the URL.

And if httpd starts before skype (system services usually will) I even
think skype automatically dodges to another port.

-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
  from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



Re: [us...@httpd] Re: LimitRequestBody http return code

2010-11-15 Thread Jeroen Geilman

On 11/15/2010 10:21 PM, Mohit Anchlia wrote:

On Mon, Nov 15, 2010 at 1:18 PM, Jeroen Geilmanjer...@adaptr.nl  wrote:
   

On 11/15/2010 10:12 PM, Mohit Anchlia wrote:
 

On Sun, Nov 14, 2010 at 11:58 AM, Jonas Eckermanjonas_li...@frukt.org
  wrote:

   

On 2010-11-04 23:38, Mohit Anchlia wrote:


 

500 (Internal Server Error) Can't read entity body: Connection reset by
peer
Content-Type: text/plain
Client-Date: Thu, 04 Nov 2010 22:36:21 GMT
Client-Warning: Internal response

   

If this is in something done with perl LWP, the Client-Warning:
Internal response header indicates that the error is generated by the
perl or XS HTTP code and not by the server.


http://search.cpan.org/~gaas/libwww-perl-5.837/lib/LWP/UserAgent.pm#REQUEST_METHODS


 

But even access logs don't show http 403:

10.4.106.55 - - [04/Nov/2010:15:39:36 -0700] POST /val/validate.cgi
HTTP/1.1 400 364 - libwww-perl/5.79 eitws1 0 - - - 188 522


   

No, it says 400 - bad request.
Check the logs of your CGI for what went wrong.
 

Nothing is wrong in the request. If I just remove LimitRequestBody and
send the same request it works.
   


I am not claiming it is a bad request. Apache tells you it is.

--
J.


-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
 from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



Re: [us...@httpd] Buffering of huge POSTs to CGI and alternatives

2010-11-15 Thread William A. Rowe Jr.
On 11/15/2010 3:43 AM, Steven Simpson wrote:
 
 I intend to have a CGI program extract a form field and deliver this
 data to an external system, but the field in question is likely to be
 huge.  The server can't invoke the program until it knows the length of
 the request body, in order to set CONTENT_LENGTH in the program's
 environment.  If the POST doesn't include a Content-Length field, the
 server will have to buffer the entire contents somewhere.  Can it deal
 with huge message bodies, such as those exceeding virtual RAM, by saving
 to disc (for example)?
 
 How does FastCGI/fcgid compare?  Will it handle huge POSTs any better? 
 My cursory reading of the FastCGI spec suggests that it doesn't have to
 know the content length to deliver it, because it is sent in chunks.

This is really a flaw in your CGI; it should read to end of stream (httpd
will mark that stream EOF when it's complete under either cgi or fastcgi)
and if it wants to read it all into memory (hopefully with some limits
imposed based on realistic expectations) then it's free to buffer.

httpd will avoid buffering entirely, whenever it is possible.  It isn't
httpd's job to be buffering as a developer convenience.

-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
  from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



Re: [us...@httpd] Re: LimitRequestBody http return code

2010-11-15 Thread Mohit Anchlia
On Mon, Nov 15, 2010 at 1:23 PM, Jeroen Geilman jer...@adaptr.nl wrote:
 On 11/15/2010 10:21 PM, Mohit Anchlia wrote:

 On Mon, Nov 15, 2010 at 1:18 PM, Jeroen Geilmanjer...@adaptr.nl  wrote:


 On 11/15/2010 10:12 PM, Mohit Anchlia wrote:


 On Sun, Nov 14, 2010 at 11:58 AM, Jonas Eckermanjonas_li...@frukt.org
  wrote:



 On 2010-11-04 23:38, Mohit Anchlia wrote:




 500 (Internal Server Error) Can't read entity body: Connection reset
 by
 peer
 Content-Type: text/plain
 Client-Date: Thu, 04 Nov 2010 22:36:21 GMT
 Client-Warning: Internal response



 If this is in something done with perl LWP, the Client-Warning:
 Internal response header indicates that the error is generated by the
 perl or XS HTTP code and not by the server.



 http://search.cpan.org/~gaas/libwww-perl-5.837/lib/LWP/UserAgent.pm#REQUEST_METHODS




 But even access logs don't show http 403:

 10.4.106.55 - - [04/Nov/2010:15:39:36 -0700] POST /val/validate.cgi
 HTTP/1.1 400 364 - libwww-perl/5.79 eitws1 0 - - - 188 522




 No, it says 400 - bad request.
 Check the logs of your CGI for what went wrong.


 Nothing is wrong in the request. If I just remove LimitRequestBody and
 send the same request it works.


 I am not claiming it is a bad request. Apache tells you it is.

I don't believe right thing the return code is correctly returned when
I use LimitRequestBody. I can't seem to explain why I would get http
400 for all the good requests that are over certain size but it works
when I remove or increase the limit.

 --
 J.


 -
 The official User-To-User support forum of the Apache HTTP Server Project.
 See URL:http://httpd.apache.org/userslist.html for more info.
 To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
     from the digest: users-digest-unsubscr...@httpd.apache.org
 For additional commands, e-mail: users-h...@httpd.apache.org



-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
  from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



Re: [us...@httpd] port 80 or port 8080

2010-11-15 Thread Daniel Reinhardt
-Original Message- 
From: William A. Rowe Jr. 
Sent: 15 November, 2010 21:22 
To: users@httpd.apache.org 
Subject: Re: [us...@httpd] port 80 or port 8080 


On 11/14/2010 6:02 AM, Jorge Schrauwen wrote:

You can tell skype to use another port. (Somewhre onder settings,
alteast on linux and mac)
Then you can install httpd on port 80.

You can use other ports like 8080 but if you do this you will need to
include them in the URL.


And if httpd starts before skype (system services usually will) I even
think skype automatically dodges to another port.

-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
 from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org

You are mistaken, Skype will fail to start and throw out an error message. 


Thanks,
Daniel


-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
 from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



[us...@httpd] Apache22 + PHP52

2010-11-15 Thread motty.cruz
Hello, 
I installed the following 
Apache 2.2 
PHP 5.2
MySQL 5.1

But when I access domain.com/test.php I get the following
?php
Phpinfo();
?

I don't get the usual output by PHP, instead I get the code; acting as if I
don't have PHP enable in Apache22. 

In my httpd.conf 
LoadModule php5_modulelibexec/apache22/libphp5.so
#
#

IfModule dir_module
DirectoryIndex index.php index.html
/IfModule
#
#
Am I missing anything else?  Your helped is appreciated 
Thanks, 
-Motty


-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
  from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



Re: [us...@httpd] Apache22 + PHP52

2010-11-15 Thread Eric Covener
On Mon, Nov 15, 2010 at 6:43 PM, motty.cruz motty.c...@gmail.com wrote:
 Hello,
 I installed the following
 Apache 2.2
 PHP 5.2
 MySQL 5.1

 But when I access domain.com/test.php I get the following
 ?php
        Phpinfo();
 ?

 I don't get the usual output by PHP, instead I get the code; acting as if I
 don't have PHP enable in Apache22.

 In my httpd.conf
 LoadModule php5_module        libexec/apache22/libphp5.so
 #
 #

 IfModule dir_module
    DirectoryIndex index.php index.html
 /IfModule
 #
 #
 Am I missing anything else?  Your helped is appreciated

SetHandler is usually used to ask mod_php to handle certain content:
http://www.php.net/manual/en/install.unix.apache2.php

-- 
Eric Covener
cove...@gmail.com

-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
  from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



RE: [us...@httpd] Apache22 + PHP52

2010-11-15 Thread motty.cruz
Thanks Eric, 
I tried that too! To no success. 

Thanks, 
-Motty

-Original Message-
From: Eric Covener [mailto:cove...@gmail.com] 
Sent: Monday, November 15, 2010 3:51 PM
To: users@httpd.apache.org
Subject: Re: [us...@httpd] Apache22 + PHP52

On Mon, Nov 15, 2010 at 6:43 PM, motty.cruz motty.c...@gmail.com wrote:
 Hello,
 I installed the following
 Apache 2.2
 PHP 5.2
 MySQL 5.1

 But when I access domain.com/test.php I get the following ?php
        Phpinfo();
 ?

 I don't get the usual output by PHP, instead I get the code; acting as 
 if I don't have PHP enable in Apache22.

 In my httpd.conf
 LoadModule php5_module        libexec/apache22/libphp5.so # #

 IfModule dir_module
    DirectoryIndex index.php index.html /IfModule # # Am I missing 
 anything else?  Your helped is appreciated

SetHandler is usually used to ask mod_php to handle certain content:
http://www.php.net/manual/en/install.unix.apache2.php

--
Eric Covener
cove...@gmail.com

-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
  from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org


-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
  from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



Re: [us...@httpd] Apache22 + PHP52

2010-11-15 Thread Eric Covener
On Mon, Nov 15, 2010 at 6:55 PM, motty.cruz motty.c...@gmail.com wrote:
 Thanks Eric,
 I tried that too! To no success.

http://wiki.apache.org/httpd/PHPDownload

-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
  from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



Re: [us...@httpd] Buffering of huge POSTs to CGI and alternatives

2010-11-15 Thread Nick Kew
On Mon, 15 Nov 2010 15:25:18 -0600
William A. Rowe Jr. wr...@rowe-clan.net wrote:

 This is really a flaw in your CGI;

No it isn't!

The CGI spec is clear: CONTENT_LENGTH is guaranteed;
EOF is NOT guaranteed, so reading to EOF is a bug and
means the CGI can only ever work by coincidence!

CGI pre-dates chunked encoding (as do reports of the 
death of CGI, from proponents of alternative serverside
application environments)!

-- 
Nick Kew

-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
  from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



Re: [us...@httpd] Buffering of huge POSTs to CGI and alternatives

2010-11-15 Thread William A. Rowe Jr.
On 11/15/2010 6:30 PM, Nick Kew wrote:
 
 The CGI spec is clear: CONTENT_LENGTH is guaranteed;
 EOF is NOT guaranteed, so reading to EOF is a bug and
 means the CGI can only ever work by coincidence!

Ah yes, pre-HTTP/1.1, silly me.

 CGI pre-dates chunked encoding (as do reports of the 
 death of CGI, from proponents of alternative serverside
 application environments)!

Actually, the RFC doesn't.

But point taken, saw Jeff's bug report, just EIGNORE my earlier comment.

-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
  from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



Re: [us...@httpd] Apache22 + PHP52

2010-11-15 Thread Sharl.Jimh.Tsin
it is so strange,check your httpd logs and server-info.

Best regards,
Sharl.Jimh.Tsin (From China **Obviously Taiwan INCLUDED**)



2010/11/16 Eric Covener cove...@gmail.com:
 On Mon, Nov 15, 2010 at 6:55 PM, motty.cruz motty.c...@gmail.com wrote:
 Thanks Eric,
 I tried that too! To no success.

 http://wiki.apache.org/httpd/PHPDownload

 -
 The official User-To-User support forum of the Apache HTTP Server Project.
 See URL:http://httpd.apache.org/userslist.html for more info.
 To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
      from the digest: users-digest-unsubscr...@httpd.apache.org
 For additional commands, e-mail: users-h...@httpd.apache.org



-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
  from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



Re: [us...@httpd] Mod-rewrite problem

2010-11-15 Thread Matus UHLAR - fantomas
 On 15 November 2010 17:17, Matus UHLAR - fantomas uh...@fantomas.sk wrote:
 
  Redirect / https://www.site.co.za
 
  in the VirtualHost section for site.co.za (yes, you need separate virtual
  host)
 
  I hope you have SSL certificate for www.site.co.za with alternative name
  site.co.za, otherwise browsers will report a mismatch.

On 15.11.10 19:37, Rudi Kramer wrote:
 I think I see the problem here. I have two virtual host files, one for
 non-ssl and one for ssl.
 
 VirtualHost *:80
 ServerName www.site.co.za
 ServerAlias site.co.za
 
 RedirectMatch ^ https://www.site.co.za/

put here simply:

Redirect / https://www.site.co.za/

 /VirtualHost

 VirtualHost *:443
 ServerName www.site.co.za
 ServerAlias site.co.za
 
 RedirectMatch ^http\://site\.co\.za https://www.site.co.za/

This will never match, Redirect only sees local path, no http/https.
Yes, the destination may contain http/https.

 SSLEngine on
 SSLOptions +StrictRequire
 SSLCertificateFile /etc/apache2/ssl/site.co.za/server.crt
 SSLCertificateKeyFile /etc/apache2/ssl/site.co.za/server.key
 
 /VirtualHost

 As far as I can tell the ssl encryption means that Apache can't do the
 redirect

Apache _can_ do the redirect. But you don't read documentation and
apparently neither our recommendations.

 and the cliet only has a valid cert for the
 https://www.site.co.zaand not
 https://site.co.za which is why I was trying to get the redirect working..

The redirection has nothing to do with the certificate. Actually, the server
doesn't care about certificates...

However, you must either have _two_ virtual hosts and redirect requests from
one to another, or have third-party apache module that redirects request to
the servername if an alias is specified. I know of mod_comon_redirect
(available in gentoo linux) and mod_redirtoservname (debian)

Unfortunately, mod_common_redirect doesn't seem to work within SSL virtual
host.

-- 
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Linux IS user friendly, it's just selective who its friends are...

-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
  from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org