Re: [us...@httpd] dynamic mpm-itk
- James Devine fxmul...@gmail.com wrote: I wrote a module that runs prior to itk which checks for this special case and sets both the uid and gid, this seems to run fairly nicely So you wrote a hack to stand on the shoulders of another hack? Nce ;) i -- Igor Galić Tel: +43 (0) 664 886 22 883 Mail: i.ga...@brainsware.org URL: http://brainsware.org/ - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
[us...@httpd] Mod-rewrite problem
Hi, I am using ubunto 8.0.4 and apache 2.2.8 and I'm having some issue with mod rewrite and SSL redirection. I have two objectives. The first is to redirect http://www.site.co.zahttps://www.site.co.za/ and http://site.co.za https://www.site.co.za/ to the url https://www.site.co.za and the second is to redirect all traffic for https://site.co.za to https://www.site.co.za. I can get the first part working perfectly using the following: VirtualHost www.site.co.za:80 http://site.co.za/ ServerName www.site.co.za ServerAlias site.co.za DocumentRoot /var/www/site.co.za ErrorLog /var/log/apache2/site.co.za.co.za-error_log CustomLog /var/log/apache2/site.co.za-access_log common RewriteEngine on RewriteCond %{HTTPS} off RewriteRule (.*) https://www.site.co.za%{REQUEST_URI} RewriteLog /var/log/apache2/site.co.za-rewrite_log RewriteLogLevel 3 /VirtualHost But for the life of me I cannot get the second part working, I've tried of this: VirtualHost www.site.co.za:80 http://www.site.co.za/ ... RewriteEngine on RewriteCond %{HTTPS} on RewriteRule (.*) https://www.site.co.za%{REQUEST_URI} RewriteLog /var/log/apache2/site.co.za-rewrite_log RewriteLogLevel 3 RewriteEngine on RewriteCond %{SERVER_PORT} ^443$ RewriteRule (.*) https://www.site.co.za%{REQUEST_URI} RewriteLog /var/log/apache2/site.co.za-rewrite_log RewriteLogLevel 3 /VirtualHost and this: VirtualHost www.site.co.za:443 ... RewriteEngine On RewriteCond %{HTTPS} on RewriteCond %{HTTP_HOST} !^www\. RewriteRule ^(.*)$ http://www.%{HTTP_HOST}/$1 [R=301,L] RewriteLog /var/log/apache2/ssl-site.co.za-rewrite_log RewriteLogLevel 3 /VirtualHost I've even add this to the .htaccess file in /var/www/site.co.za but still no joy: RewriteEngine On RewriteCond %{HTTP_HOST} !^www\. RewriteRule ^(.*)$ http://www.%{HTTP_HOST}/$1 [R=301,L] RewriteLog /var/log/apache2/ssl-site.co.za-rewrite_log For some strange reason mod-rewrite seems to be ignoring the SSL traffic even when I remove all rules except for the SSL https://site.co.za to https://www.site.co.za rewrite rule and when I tryhttps://site.co.za I get nothing in the rewrite log files. Any ideas? Thanks
Re: [us...@httpd] Rewrite logs are empty (Apache 2.0.47)
When you say: I've tried the above both inside and outside the virtual host. do you mean you have already tried absolute path? For instance: RewriteLog /var/apache2/log/rewrite.log iñ 2010/11/13 Sai A arialwi...@gmail.com Hi inigo, I tried it out now but that doesn't seem to be help as well. I am really confused. What could be it? All your help is appreciated. Thanks for the replies. On Sat, Nov 13, 2010 at 10:18 PM, iñigo medina imed...@grosshat.comwrote: Have you tried with the directive as follows? RewriteLog logs/file.log iñ El 13/11/2010 16:24, Sai A arialwi...@gmail.com escribió: -- - imed...@grosshat.com es un mundo mágico
[us...@httpd] Buffering of huge POSTs to CGI and alternatives
Hi, I intend to have a CGI program extract a form field and deliver this data to an external system, but the field in question is likely to be huge. The server can't invoke the program until it knows the length of the request body, in order to set CONTENT_LENGTH in the program's environment. If the POST doesn't include a Content-Length field, the server will have to buffer the entire contents somewhere. Can it deal with huge message bodies, such as those exceeding virtual RAM, by saving to disc (for example)? How does FastCGI/fcgid compare? Will it handle huge POSTs any better? My cursory reading of the FastCGI spec suggests that it doesn't have to know the content length to deliver it, because it is sent in chunks. Thanks, Steven - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [us...@httpd] Limiting Request Body suggestion
On Thu, October 28, 2010 16:24, Tom Evans wrote: Why do you care what the status code is? (or rather, why do you want to return OK when an error occurs?) On 28.10.10 16:48, Joost de Heer wrote: To work around the Display userfriendly error messages bug^Wfeature? On Tue, Nov 9, 2010 at 2:17 AM, Matus UHLAR - fantomas uh...@fantomas.sk wrote: Is there any need for work around this? They may come with greater limits later. Simply give them what they have chosen: bullshit error messages. Providing .reg file that removes the lame setting is the best we can do about this. sorry for being semi-OT On 09.11.10 10:14, Mohit Anchlia wrote: Doesn't work for us. We have clients who pay for our products and electronically send there information to us and it's the requirement from the client products to send them back the graceful turnaway with good error message back to the user. This is hard requirement and that's why I am stuck. I am thinking of may be writing something of my own. Do you think I can write some cgi handler? apache provides localized error messages for error codes. You can translate them and add some bullshit to them to be over 512 bytes big. But since it's the web browser, who eats those messages and shows user own versions, who can tell when will microsoft come with bigger limit for error messages? My point is, you can (and apparently do) give useful error messages, but you can't to much for clients' browsers not to sabotage it. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. They that can give up essential liberty to obtain a little temporary safety deserve neither liberty nor safety. -- Benjamin Franklin, 1759 - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [us...@httpd] Mod-rewrite problem
- Rudi Kramer rudi.kra...@gmail.com wrote: Hi, I am using ubunto 8.0.4 and apache 2.2.8 and I'm having some issue with mod rewrite and SSL redirection. I have two objectives. The first is to redirect http://www.site.co.za and http://site.co.za to the url https://www.site.co.za and the second is to redirect all traffic for https://site.co.za to https://www.site.co.za . I can get the first part working perfectly using the following: VirtualHost www. site.co.za:80 Don't do that. Check http://wiki.apache.org/httpd/ExampleVhosts or http://httpd.apache.org/docs/current/vhosts/examples.html out to see some sensible examples For one, for the other: Why not just use Redirect? http://wiki.apache.org/httpd/WhenNotToUseRewrite bye, i -- Igor Galić Tel: +43 (0) 664 886 22 883 Mail: i.ga...@brainsware.org URL: http://brainsware.org/ - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [us...@httpd] Mod-rewrite problem
- Rudi Kramer rudi.kra...@gmail.com wrote: I am using ubunto 8.0.4 and apache 2.2.8 and I'm having some issue with mod rewrite and SSL redirection. I have two objectives. The first is to redirect http://www.site.co.za and http://site.co.za to the url https://www.site.co.za and the second is to redirect all traffic for https://site.co.za to https://www.site.co.za . There is no need for mod_rewrite. the Redirect directive can do exactly the same with less of workload. You don't need a cannon for shooting birds, do you? -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. One OS to rule them all, One OS to find them, One OS to bring them all and into darkness bind them - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [us...@httpd] Mod-rewrite problem
On 15 November 2010 14:40, Matus UHLAR - fantomas uh...@fantomas.sk wrote: There is no need for mod_rewrite. the Redirect directive can do exactly the same with less of workload. You don't need a cannon for shooting birds, do you? On 15 November 2010 14:40, Matus UHLAR - fantomas uh...@fantomas.sk wrote: There is no need for mod_rewrite. the Redirect directive can do exactly the same with less of workload. You don't need a cannon for shooting birds, do you? Depends on how big the birds are. My birds are not so big :-) I have have changed the port 80 virtual host to use redirectmatch and it looks much neater. VirtualHost *:80 ServerName www.site.co.za ServerAlias site.co.za RedirectMatch ^ https://www.site.co.za/ /VirtualHost but I still cannot get it right to redirect the https://site.co.za redirect to https://www.site.co.za, I think it might be my lack understanding of regex though. Does this look right? RedirectMatch ^http\://bpultimateride\.co\.za https://www.bpultimateride.co.za/ Regards Rudi
Re: [us...@httpd] Mod-rewrite problem
but I still cannot get it right to redirect the https://site.co.za redirect to https://www.site.co.za, I think it might be my lack understanding of regex though. Does this look right? RedirectMatch ^http\://bpultimateride\.co\.za No, the first argument is just the URL-path, not an entire URL. But you want plain old Redirect / anyway. All this confusion might add up to you're not working in the virtualhost handling the non-ssl request. - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
[us...@httpd] ssl_error_rx_unexpected_server_key_exch
Hello, We're getting these errors on some of our web servers (different instances running on different ports) being detected by Firefox 3.6.9+ This happens after about a week of normal use. A restart temporarily fixes the problem, but we have not been able to find a solution from the server side. Tried different iterations of the SSLProtocol and SSLCipherSuite but not able to get to one that works. I've posted and got no answers back. Supposedly the problem is Firefox does not like SSL DHE cipher suites, however there's no documentation on how to 'fix it' from the server side. Currently, I have the following (and still doesn't work): SSLProtocol all -SSLv2 SSLCipherSuite ALL:!EXP:!NULL:!ADH:!LOW:!SSLv2:!kEDH:+HIGH:!MEDIUM Thank you. - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [us...@httpd] ssl_error_rx_unexpected_server_key_exch
On Mon, Nov 15, 2010 at 6:43 PM, Ricardo Stella ste...@rider.edu wrote: Hello, We're getting these errors on some of our web servers (different instances running on different ports) being detected by Firefox 3.6.9+ This happens after about a week of normal use. A restart temporarily fixes the problem, but we have not been able to find a solution from the server side. Tried different iterations of the SSLProtocol and SSLCipherSuite but not able to get to one that works. I've posted and got no answers back. Supposedly the problem is Firefox does not like SSL DHE cipher suites, however there's no documentation on how to 'fix it' from the server side. Currently, I have the following (and still doesn't work): SSLProtocol all -SSLv2 SSLCipherSuite ALL:!EXP:!NULL:!ADH:!LOW:!SSLv2:!kEDH:+HIGH:!MEDIUM Thank you. Not sure if this will help with what you are seeing, but I used the info available here to setup the SSLCipherSuite etc settings: http://journal.paul.querna.org/articles/2010/07/10/overclocking-mod_ssl/ In particular this might be of some use http://httpd.apache.org/docs/2.2/mod/mod_ssl.html#sslhonorcipherorder The settings I use are: SSLProtocol TLSv1 SSLv3 SSLCipherSuite RC4-SHA:AES256-SHA:ALL:!ADH:!MD5:!EXP:!LOW:!NULL SSLHonorCipherOrder on and have not seen any problems with Firefox (or any other browser) so far...
Re: [us...@httpd] Mod-rewrite problem
On 15 November 2010 14:40, Matus UHLAR - fantomas uh...@fantomas.sk wrote: There is no need for mod_rewrite. the Redirect directive can do exactly the same with less of workload. You don't need a cannon for shooting birds, do you? On 15.11.10 15:27, Rudi Kramer wrote: VirtualHost *:80 ServerName www.site.co.za ServerAlias site.co.za RedirectMatch ^ https://www.site.co.za/ Redirect / https://www.site.co.za/ is even more simple. /VirtualHost but I still cannot get it right to redirect the https://site.co.za redirect to https://www.site.co.za, I think it might be my lack understanding of regex though. Does this look right? RedirectMatch ^http\://bpultimateride\.co\.za https://www.bpultimateride.co.za/ no, it has to be Redirect / https://www.site.co.za in the VirtualHost section for site.co.za (yes, you need separate virtual host) I hope you have SSL certificate for www.site.co.za with alternative name site.co.za, otherwise browsers will report a mismatch. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. We are but packets in the Internet of life (userfriendly.org) - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [us...@httpd] Rewrite logs are empty (Apache 2.0.47)
I didn't try with an absolute path, only with relative paths. The file does get generated inside the logs folder, just that it is empty. Inigo, thanks a lot for trying to help. I really appreciate everybody's help and time on these threads. A fellow colleague informed me that he'd earlier had a similar problem. It had to do with the mod_rewrite not being properly loaded or something like that... I am waiting for him to investigate the problem. I'll get back as soon as the problem resolves to say what the problem/solution was. On Mon, Nov 15, 2010 at 2:57 PM, iñigo medina imed...@grosshat.com wrote: When you say: I've tried the above both inside and outside the virtual host. do you mean you have already tried absolute path? For instance: RewriteLog /var/apache2/log/rewrite.log iñ 2010/11/13 Sai A arialwi...@gmail.com Hi inigo, I tried it out now but that doesn't seem to be help as well. I am really confused. What could be it? All your help is appreciated. Thanks for the replies. On Sat, Nov 13, 2010 at 10:18 PM, iñigo medina imed...@grosshat.comwrote: Have you tried with the directive as follows? RewriteLog logs/file.log iñ El 13/11/2010 16:24, Sai A arialwi...@gmail.com escribió: -- - imed...@grosshat.com es un mundo mágico
Re: [us...@httpd] Mod-rewrite problem
On 15 November 2010 17:17, Matus UHLAR - fantomas uh...@fantomas.sk wrote: Redirect / https://www.site.co.za in the VirtualHost section for site.co.za (yes, you need separate virtual host) I hope you have SSL certificate for www.site.co.za with alternative name site.co.za, otherwise browsers will report a mismatch. Hi, I think I see the problem here. I have two virtual host files, one for non-ssl and one for ssl. VirtualHost *:80 ServerName www.site.co.za ServerAlias site.co.za RedirectMatch ^ https://www.site.co.za/ /VirtualHost VirtualHost *:443 ServerName www.site.co.za ServerAlias site.co.za RedirectMatch ^http\://site\.co\.za https://www.site.co.za/ SSLEngine on SSLOptions +StrictRequire SSLCertificateFile /etc/apache2/ssl/site.co.za/server.crt SSLCertificateKeyFile /etc/apache2/ssl/site.co.za/server.key /VirtualHost As far as I can tell the ssl encryption means that Apache can't do the redirect and the cliet only has a valid cert for the https://www.site.co.zaand not https://site.co.za which is why I was trying to get the redirect working.. bugger.
Re: [us...@httpd] Mod-rewrite problem
On 11/15/2010 12:37 PM, Rudi Kramer wrote: On 15 November 2010 17:17, Matus UHLAR - fantomas uh...@fantomas.sk mailto:uh...@fantomas.sk wrote: Redirect / https://www.site.co.za in the VirtualHost section for site.co.za http://site.co.za (yes, you need separate virtual host) I hope you have SSL certificate for www.site.co.za http://www.site.co.za with alternative name site.co.za http://site.co.za, otherwise browsers will report a mismatch. Hi, I think I see the problem here. I have two virtual host files, one for non-ssl and one for ssl. VirtualHost *:80 ServerName www.site.co.za http://www.site.co.za ServerAlias site.co.za http://site.co.za RedirectMatch ^ https://www.site.co.za/ /VirtualHost VirtualHost *:443 ServerName www.site.co.za http://www.site.co.za ServerAlias site.co.za http://site.co.za RedirectMatch ^http\://site\.co\.za https://www.site.co.za/ SSLEngine on SSLOptions +StrictRequire SSLCertificateFile /etc/apache2/ssl/site.co.za/server.crt http://site.co.za/server.crt SSLCertificateKeyFile /etc/apache2/ssl/site.co.za/server.key http://site.co.za/server.key /VirtualHost As far as I can tell the ssl encryption means that Apache can't do the redirect and the cliet only has a valid cert for the https://www.site.co.za and not https://site.co.za which is why I was trying to get the redirect working.. bugger. Rudi, Also note that Redirect and RedirectMatch operate on REQUEST_URI. The protocol, hostname and port is not visible in that context. Frank. - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [us...@httpd] Buffering of huge POSTs to CGI and alternatives
On Mon, Nov 15, 2010 at 4:43 AM, Steven Simpson s...@comp.lancs.ac.uk wrote: Hi, I intend to have a CGI program extract a form field and deliver this data to an external system, but the field in question is likely to be huge. The server can't invoke the program until it knows the length of the request body, in order to set CONTENT_LENGTH in the program's environment. If the POST doesn't include a Content-Length field, the server will have to buffer the entire contents somewhere. Can it deal with huge message bodies, such as those exceeding virtual RAM, by saving to disc (for example)? mod_cgi/mod_cgid: request will fail with 411 if client doesn't send content-length; i.e., they don't have the logic to spool the body and compute CONTENT_LENGTH theoretically you could interject some other module to spool the body and set a computed content-length before the cgi handler runs How does FastCGI/fcgid compare? Will it handle huge POSTs any better? My cursory reading of the FastCGI spec suggests that it doesn't have to know the content length to deliver it, because it is sent in chunks. FastCGI spec indicates that CONTENT_LENGTH will be provided to the app, even though the request body will be sent to the application in chunks. Furthermore, it suggests that the app could compare CONTENT_LENGTH with the actual length received to determine if the client aborted before sending the entire body. mod_fastcgi: as with mod_cgi/mod_cgid: the request fails with 411 if the client doesn't send content-length mod_fcgid: request is fine if client doesn't send content-length, but application doesn't get CONTENT_LENGTH (bug) mod_fcgid spools the entire body to memory/disk before connecting to the app, so it should go ahead and pass over a computed CONTENT_LENGTH value; that would also resolve a Content-Length value from the client which becomes invalid because of a filter. So: mod_fcgid seems closest to what you need, and whether it works for you today is dependent on whether or not you need CONTENT_LENGTH set due to a chunked request body. - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
[us...@httpd] Group authentication to AD
I am having a problem with apache authenticating using an ldap group. I have version 2.2.3, of httpd, installed. My location block is configured as below: Location /test_repo dav svn SVNPath /disk01/home/test_repo AuthType Basic AuthName Subversion Repository AuthBasicProvider ldap-FCGNET ldap-VIET AuthzLDAPAuthoritative on Require valid-user Require ldap-group CN=Active_Directory Group Name,OU=U.S.,OU=Groups,DC=domain,DC=com #Require ldap-user pmoss /Location I've configured my aliases, in my http.conf file, as follows: AuthnProviderAlias ldap ldap-FCGNET AuthLDAPBindDN FCGNET\account_name AuthLDAPBindPassword xx AuthLDAPURL ldap://server.domain.com:3268/DC=domain,DC=com?samAccountName?sub?(objectCategory=person) /AuthnProviderAlias AuthnProviderAlias ldap ldap-VIET AuthLDAPBindDN CN=account_name,OU=Service Accounts,OU=Users,OU=Production,DC=domain,DC=com AuthLDAPBindPassword x AuthLDAPURL ldap://server.domain.com:3268/DC=domain,DC=com?samAccountName?sub?(objectCategory=person) /AuthnProviderAlias My goal(s): 1. Allow only 1 specific, Active Directory, group access to the repository. 2. Simultaneously, allow a single user account, that is not a member of the group, access to the repository My attempts: 1. Configuration, as above, allows any valid user access to the repository; whether they are a member of the group or not. 2. If I remove Require valid-user then I receive an error when attempting access the repository and the error.log is as follows: [Mon Nov 15 14:38:15 2010] [debug] mod_authnz_ldap.c(377): [client 20.8.xxx.18x] [27994] auth_ldap authenticate: using URL ldap://server.domain.com:3268/DC=domain,DC=com?samAccountName?sub?(objectCategory=person) [Mon Nov 15 14:38:15 2010] [debug] mod_authnz_ldap.c(474): [client 20.8.xxx.18x] [27994] auth_ldap authenticate: accepting pmoss [Mon Nov 15 14:38:15 2010] [crit] [client 20.8.232.187] configuration error: couldn't check access. No groups file?: /test_repo/ 3. I tried a LimitExcept block, shown below. Location /test_repo dav svn SVNPath /disk01/home/test_repo AuthType Basic AuthName Subversion Repository AuthBasicProvider ldap-FCGNET ldap-VIET AuthzLDAPAuthoritative on #Require valid-user # Limit R/W access to specified AD group LimitExcept GET PROPFIND OPTIONS REPORT Require ldap-group CN=Active_Directory Group Name,OU=U.S.,OU=Groups,DC=domain,DC=com /LimitExcept #Require ldap-user pmoss /Location I could successfully gain access to the repository, and I am not a member of the group. 4. I uncommented the Require valid-user line and was, again, successful in attempting access; and I am not a member of the group. 5. If I change the AuthzLDAPAuthoritative to off, I can still gain access to the repository. In my httpd.conf, I have the following modules: LoadModule ldap_module modules/mod_ldap.so LoadModule authnz_ldap_module modules/mod_authnz_ldap.so LoadModule dav_module modules/mod_dav.so LoadModule dav_fs_module modules/mod_dav_fs.so LoadModule cgi_module modules/mod_cgi.so LoadModule authz_host_module modules/mod_authz_host.so LoadModule auth_basic_module modules/mod_auth_basic.so LoadModule dav_svn_module modules/mod_dav_svn.so LoadModule authz_svn_module modules/mod_authz_svn.so LoadModule authn_alias_module modules/mod_authn_alias.so LoadModule authn_file_module modules/mod_authn_file.so LoadModule authz_owner_module modules/mod_authz_owner.so LoadModule authz_user_module modules/mod_authz_user.so LoadModule alias_module modules/mod_alias.so I've been searching around for answers but nothing seems to be solving my problem. I believe I have all the modules loaded that need to be there. I am not sure what I may be missing from my configuration or what may be mis-configured. Hopefully someone can help me in achieving the goals. Thanks in advance. PATI MOSS System Engineer Sr. Professional CSC
[us...@httpd] Distributed logging
Hi, what is the best way to handle the logging of multiple Apache instances? I'm looking for a way to have say 10 Apache servers efficiently log to central location so I can analyze the aggregated log-data there. I've seen mod_log_spread but the last changelog entry is from 2006 so I'm not sure if this is still recommended and I've also looked at gearman but I was hoping for something less complex at least for now. What are the recommended options here? Regards, Dennis - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [us...@httpd] Limiting Request Body suggestion
On Mon, Nov 15, 2010 at 3:56 AM, Matus UHLAR - fantomas uh...@fantomas.sk wrote: On Thu, October 28, 2010 16:24, Tom Evans wrote: Why do you care what the status code is? (or rather, why do you want to return OK when an error occurs?) On 28.10.10 16:48, Joost de Heer wrote: To work around the Display userfriendly error messages bug^Wfeature? On Tue, Nov 9, 2010 at 2:17 AM, Matus UHLAR - fantomas uh...@fantomas.sk wrote: Is there any need for work around this? They may come with greater limits later. Simply give them what they have chosen: bullshit error messages. Providing .reg file that removes the lame setting is the best we can do about this. sorry for being semi-OT On 09.11.10 10:14, Mohit Anchlia wrote: Doesn't work for us. We have clients who pay for our products and electronically send there information to us and it's the requirement from the client products to send them back the graceful turnaway with good error message back to the user. This is hard requirement and that's why I am stuck. I am thinking of may be writing something of my own. Do you think I can write some cgi handler? apache provides localized error messages for error codes. You can translate them and add some bullshit to them to be over 512 bytes big. But since it's the web browser, who eats those messages and shows user own versions, who can tell when will microsoft come with bigger limit for error messages? My point is, you can (and apparently do) give useful error messages, but you can't to much for clients' browsers not to sabotage it. Actually consumer of this message is a client API which then formats it to be displayed on the browser. So client product sends file to us we then sent the message back Too big ... as part of the API response. Client product parses this and then displays it on the browser. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. They that can give up essential liberty to obtain a little temporary safety deserve neither liberty nor safety. -- Benjamin Franklin, 1759 - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [us...@httpd] Re: LimitRequestBody http return code
On Sun, Nov 14, 2010 at 11:58 AM, Jonas Eckerman jonas_li...@frukt.org wrote: On 2010-11-04 23:38, Mohit Anchlia wrote: 500 (Internal Server Error) Can't read entity body: Connection reset by peer Content-Type: text/plain Client-Date: Thu, 04 Nov 2010 22:36:21 GMT Client-Warning: Internal response If this is in something done with perl LWP, the Client-Warning: Internal response header indicates that the error is generated by the perl or XS HTTP code and not by the server. http://search.cpan.org/~gaas/libwww-perl-5.837/lib/LWP/UserAgent.pm#REQUEST_METHODS But even access logs don't show http 403: 10.4.106.55 - - [04/Nov/2010:15:39:36 -0700] POST /val/validate.cgi HTTP/1.1 400 364 - libwww-perl/5.79 eitws1 0 - - - 188 522 Regards /Jonas -- Jonas Eckerman Fruktträdet Förbundet Sveriges Dövblinda http://www.fsdb.org/ http://www.frukt.org/ http://whatever.frukt.org/ - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [us...@httpd] Re: LimitRequestBody http return code
On 11/15/2010 10:12 PM, Mohit Anchlia wrote: On Sun, Nov 14, 2010 at 11:58 AM, Jonas Eckermanjonas_li...@frukt.org wrote: On 2010-11-04 23:38, Mohit Anchlia wrote: 500 (Internal Server Error) Can't read entity body: Connection reset by peer Content-Type: text/plain Client-Date: Thu, 04 Nov 2010 22:36:21 GMT Client-Warning: Internal response If this is in something done with perl LWP, the Client-Warning: Internal response header indicates that the error is generated by the perl or XS HTTP code and not by the server. http://search.cpan.org/~gaas/libwww-perl-5.837/lib/LWP/UserAgent.pm#REQUEST_METHODS But even access logs don't show http 403: 10.4.106.55 - - [04/Nov/2010:15:39:36 -0700] POST /val/validate.cgi HTTP/1.1 400 364 - libwww-perl/5.79 eitws1 0 - - - 188 522 No, it says 400 - bad request. Check the logs of your CGI for what went wrong. -- J. - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [us...@httpd] Re: LimitRequestBody http return code
On Mon, Nov 15, 2010 at 1:18 PM, Jeroen Geilman jer...@adaptr.nl wrote: On 11/15/2010 10:12 PM, Mohit Anchlia wrote: On Sun, Nov 14, 2010 at 11:58 AM, Jonas Eckermanjonas_li...@frukt.org wrote: On 2010-11-04 23:38, Mohit Anchlia wrote: 500 (Internal Server Error) Can't read entity body: Connection reset by peer Content-Type: text/plain Client-Date: Thu, 04 Nov 2010 22:36:21 GMT Client-Warning: Internal response If this is in something done with perl LWP, the Client-Warning: Internal response header indicates that the error is generated by the perl or XS HTTP code and not by the server. http://search.cpan.org/~gaas/libwww-perl-5.837/lib/LWP/UserAgent.pm#REQUEST_METHODS But even access logs don't show http 403: 10.4.106.55 - - [04/Nov/2010:15:39:36 -0700] POST /val/validate.cgi HTTP/1.1 400 364 - libwww-perl/5.79 eitws1 0 - - - 188 522 No, it says 400 - bad request. Check the logs of your CGI for what went wrong. Nothing is wrong in the request. If I just remove LimitRequestBody and send the same request it works. -- J. - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [us...@httpd] port 80 or port 8080
On 11/14/2010 6:02 AM, Jorge Schrauwen wrote: You can tell skype to use another port. (Somewhre onder settings, alteast on linux and mac) Then you can install httpd on port 80. You can use other ports like 8080 but if you do this you will need to include them in the URL. And if httpd starts before skype (system services usually will) I even think skype automatically dodges to another port. - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [us...@httpd] Re: LimitRequestBody http return code
On 11/15/2010 10:21 PM, Mohit Anchlia wrote: On Mon, Nov 15, 2010 at 1:18 PM, Jeroen Geilmanjer...@adaptr.nl wrote: On 11/15/2010 10:12 PM, Mohit Anchlia wrote: On Sun, Nov 14, 2010 at 11:58 AM, Jonas Eckermanjonas_li...@frukt.org wrote: On 2010-11-04 23:38, Mohit Anchlia wrote: 500 (Internal Server Error) Can't read entity body: Connection reset by peer Content-Type: text/plain Client-Date: Thu, 04 Nov 2010 22:36:21 GMT Client-Warning: Internal response If this is in something done with perl LWP, the Client-Warning: Internal response header indicates that the error is generated by the perl or XS HTTP code and not by the server. http://search.cpan.org/~gaas/libwww-perl-5.837/lib/LWP/UserAgent.pm#REQUEST_METHODS But even access logs don't show http 403: 10.4.106.55 - - [04/Nov/2010:15:39:36 -0700] POST /val/validate.cgi HTTP/1.1 400 364 - libwww-perl/5.79 eitws1 0 - - - 188 522 No, it says 400 - bad request. Check the logs of your CGI for what went wrong. Nothing is wrong in the request. If I just remove LimitRequestBody and send the same request it works. I am not claiming it is a bad request. Apache tells you it is. -- J. - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [us...@httpd] Buffering of huge POSTs to CGI and alternatives
On 11/15/2010 3:43 AM, Steven Simpson wrote: I intend to have a CGI program extract a form field and deliver this data to an external system, but the field in question is likely to be huge. The server can't invoke the program until it knows the length of the request body, in order to set CONTENT_LENGTH in the program's environment. If the POST doesn't include a Content-Length field, the server will have to buffer the entire contents somewhere. Can it deal with huge message bodies, such as those exceeding virtual RAM, by saving to disc (for example)? How does FastCGI/fcgid compare? Will it handle huge POSTs any better? My cursory reading of the FastCGI spec suggests that it doesn't have to know the content length to deliver it, because it is sent in chunks. This is really a flaw in your CGI; it should read to end of stream (httpd will mark that stream EOF when it's complete under either cgi or fastcgi) and if it wants to read it all into memory (hopefully with some limits imposed based on realistic expectations) then it's free to buffer. httpd will avoid buffering entirely, whenever it is possible. It isn't httpd's job to be buffering as a developer convenience. - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [us...@httpd] Re: LimitRequestBody http return code
On Mon, Nov 15, 2010 at 1:23 PM, Jeroen Geilman jer...@adaptr.nl wrote: On 11/15/2010 10:21 PM, Mohit Anchlia wrote: On Mon, Nov 15, 2010 at 1:18 PM, Jeroen Geilmanjer...@adaptr.nl wrote: On 11/15/2010 10:12 PM, Mohit Anchlia wrote: On Sun, Nov 14, 2010 at 11:58 AM, Jonas Eckermanjonas_li...@frukt.org wrote: On 2010-11-04 23:38, Mohit Anchlia wrote: 500 (Internal Server Error) Can't read entity body: Connection reset by peer Content-Type: text/plain Client-Date: Thu, 04 Nov 2010 22:36:21 GMT Client-Warning: Internal response If this is in something done with perl LWP, the Client-Warning: Internal response header indicates that the error is generated by the perl or XS HTTP code and not by the server. http://search.cpan.org/~gaas/libwww-perl-5.837/lib/LWP/UserAgent.pm#REQUEST_METHODS But even access logs don't show http 403: 10.4.106.55 - - [04/Nov/2010:15:39:36 -0700] POST /val/validate.cgi HTTP/1.1 400 364 - libwww-perl/5.79 eitws1 0 - - - 188 522 No, it says 400 - bad request. Check the logs of your CGI for what went wrong. Nothing is wrong in the request. If I just remove LimitRequestBody and send the same request it works. I am not claiming it is a bad request. Apache tells you it is. I don't believe right thing the return code is correctly returned when I use LimitRequestBody. I can't seem to explain why I would get http 400 for all the good requests that are over certain size but it works when I remove or increase the limit. -- J. - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [us...@httpd] port 80 or port 8080
-Original Message- From: William A. Rowe Jr. Sent: 15 November, 2010 21:22 To: users@httpd.apache.org Subject: Re: [us...@httpd] port 80 or port 8080 On 11/14/2010 6:02 AM, Jorge Schrauwen wrote: You can tell skype to use another port. (Somewhre onder settings, alteast on linux and mac) Then you can install httpd on port 80. You can use other ports like 8080 but if you do this you will need to include them in the URL. And if httpd starts before skype (system services usually will) I even think skype automatically dodges to another port. - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org You are mistaken, Skype will fail to start and throw out an error message. Thanks, Daniel - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
[us...@httpd] Apache22 + PHP52
Hello, I installed the following Apache 2.2 PHP 5.2 MySQL 5.1 But when I access domain.com/test.php I get the following ?php Phpinfo(); ? I don't get the usual output by PHP, instead I get the code; acting as if I don't have PHP enable in Apache22. In my httpd.conf LoadModule php5_modulelibexec/apache22/libphp5.so # # IfModule dir_module DirectoryIndex index.php index.html /IfModule # # Am I missing anything else? Your helped is appreciated Thanks, -Motty - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [us...@httpd] Apache22 + PHP52
On Mon, Nov 15, 2010 at 6:43 PM, motty.cruz motty.c...@gmail.com wrote: Hello, I installed the following Apache 2.2 PHP 5.2 MySQL 5.1 But when I access domain.com/test.php I get the following ?php Phpinfo(); ? I don't get the usual output by PHP, instead I get the code; acting as if I don't have PHP enable in Apache22. In my httpd.conf LoadModule php5_module libexec/apache22/libphp5.so # # IfModule dir_module DirectoryIndex index.php index.html /IfModule # # Am I missing anything else? Your helped is appreciated SetHandler is usually used to ask mod_php to handle certain content: http://www.php.net/manual/en/install.unix.apache2.php -- Eric Covener cove...@gmail.com - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
RE: [us...@httpd] Apache22 + PHP52
Thanks Eric, I tried that too! To no success. Thanks, -Motty -Original Message- From: Eric Covener [mailto:cove...@gmail.com] Sent: Monday, November 15, 2010 3:51 PM To: users@httpd.apache.org Subject: Re: [us...@httpd] Apache22 + PHP52 On Mon, Nov 15, 2010 at 6:43 PM, motty.cruz motty.c...@gmail.com wrote: Hello, I installed the following Apache 2.2 PHP 5.2 MySQL 5.1 But when I access domain.com/test.php I get the following ?php Phpinfo(); ? I don't get the usual output by PHP, instead I get the code; acting as if I don't have PHP enable in Apache22. In my httpd.conf LoadModule php5_module libexec/apache22/libphp5.so # # IfModule dir_module DirectoryIndex index.php index.html /IfModule # # Am I missing anything else? Your helped is appreciated SetHandler is usually used to ask mod_php to handle certain content: http://www.php.net/manual/en/install.unix.apache2.php -- Eric Covener cove...@gmail.com - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [us...@httpd] Apache22 + PHP52
On Mon, Nov 15, 2010 at 6:55 PM, motty.cruz motty.c...@gmail.com wrote: Thanks Eric, I tried that too! To no success. http://wiki.apache.org/httpd/PHPDownload - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [us...@httpd] Buffering of huge POSTs to CGI and alternatives
On Mon, 15 Nov 2010 15:25:18 -0600 William A. Rowe Jr. wr...@rowe-clan.net wrote: This is really a flaw in your CGI; No it isn't! The CGI spec is clear: CONTENT_LENGTH is guaranteed; EOF is NOT guaranteed, so reading to EOF is a bug and means the CGI can only ever work by coincidence! CGI pre-dates chunked encoding (as do reports of the death of CGI, from proponents of alternative serverside application environments)! -- Nick Kew - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [us...@httpd] Buffering of huge POSTs to CGI and alternatives
On 11/15/2010 6:30 PM, Nick Kew wrote: The CGI spec is clear: CONTENT_LENGTH is guaranteed; EOF is NOT guaranteed, so reading to EOF is a bug and means the CGI can only ever work by coincidence! Ah yes, pre-HTTP/1.1, silly me. CGI pre-dates chunked encoding (as do reports of the death of CGI, from proponents of alternative serverside application environments)! Actually, the RFC doesn't. But point taken, saw Jeff's bug report, just EIGNORE my earlier comment. - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [us...@httpd] Apache22 + PHP52
it is so strange,check your httpd logs and server-info. Best regards, Sharl.Jimh.Tsin (From China **Obviously Taiwan INCLUDED**) 2010/11/16 Eric Covener cove...@gmail.com: On Mon, Nov 15, 2010 at 6:55 PM, motty.cruz motty.c...@gmail.com wrote: Thanks Eric, I tried that too! To no success. http://wiki.apache.org/httpd/PHPDownload - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [us...@httpd] Mod-rewrite problem
On 15 November 2010 17:17, Matus UHLAR - fantomas uh...@fantomas.sk wrote: Redirect / https://www.site.co.za in the VirtualHost section for site.co.za (yes, you need separate virtual host) I hope you have SSL certificate for www.site.co.za with alternative name site.co.za, otherwise browsers will report a mismatch. On 15.11.10 19:37, Rudi Kramer wrote: I think I see the problem here. I have two virtual host files, one for non-ssl and one for ssl. VirtualHost *:80 ServerName www.site.co.za ServerAlias site.co.za RedirectMatch ^ https://www.site.co.za/ put here simply: Redirect / https://www.site.co.za/ /VirtualHost VirtualHost *:443 ServerName www.site.co.za ServerAlias site.co.za RedirectMatch ^http\://site\.co\.za https://www.site.co.za/ This will never match, Redirect only sees local path, no http/https. Yes, the destination may contain http/https. SSLEngine on SSLOptions +StrictRequire SSLCertificateFile /etc/apache2/ssl/site.co.za/server.crt SSLCertificateKeyFile /etc/apache2/ssl/site.co.za/server.key /VirtualHost As far as I can tell the ssl encryption means that Apache can't do the redirect Apache _can_ do the redirect. But you don't read documentation and apparently neither our recommendations. and the cliet only has a valid cert for the https://www.site.co.zaand not https://site.co.za which is why I was trying to get the redirect working.. The redirection has nothing to do with the certificate. Actually, the server doesn't care about certificates... However, you must either have _two_ virtual hosts and redirect requests from one to another, or have third-party apache module that redirects request to the servername if an alias is specified. I know of mod_comon_redirect (available in gentoo linux) and mod_redirtoservname (debian) Unfortunately, mod_common_redirect doesn't seem to work within SSL virtual host. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. Linux IS user friendly, it's just selective who its friends are... - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org