[users@httpd] Difference between mod_jk and mod_proxy

2011-01-27 Thread Jehan Badshah
Dear

We can do loadbalancing using both mod_jk and mod_proxy.

what is the difference between them.


Regards


Re: [users@httpd] Difference between mod_jk and mod_proxy

2011-01-27 Thread Martin Kuba

Dne 27.1.2011 09:50, Jehan Badshah napsal(a):

Dear
We can do loadbalancing using both mod_jk and mod_proxy.
what is the difference between them.


Hi Jehan,

it is a FAQ:
http://wiki.apache.org/tomcat/FAQ/Connectors#Q2

In my experience, the only difference is the ability of mod_jk to
pass the SSL_* environment variables using the JkEnv directive,
mod_proxy_ajp cannot do this.

I have written my conclusions to
http://opencms-wiki.org/MultiSite_configuration_instructions_%28apache_%2B_mod_jk%29#mod_jk_or_mod_proxy_ajp_.3F
so please read it there.

Cheers

Martin
--
~~
Supercomputing Center Brno Martin Kuba
Institute of Computer Scienceemail: ma...@ics.muni.cz
Masaryk University http://www.ics.muni.cz/~makub/
Botanicka 68a, 60200 Brno, CZ mobil: +420-603-533775
--



smime.p7s
Description: S/MIME Cryptographic Signature


Re: [users@httpd] Difference between mod_jk and mod_proxy

2011-01-27 Thread Jehan Badshah
Thanks Martin.




On Thu, Jan 27, 2011 at 1:59 PM, Martin Kuba ma...@ics.muni.cz wrote:

 Dne 27.1.2011 09:50, Jehan Badshah napsal(a):

 Dear
 We can do loadbalancing using both mod_jk and mod_proxy.
 what is the difference between them.


 Hi Jehan,

 it is a FAQ:
 http://wiki.apache.org/tomcat/FAQ/Connectors#Q2

 In my experience, the only difference is the ability of mod_jk to
 pass the SSL_* environment variables using the JkEnv directive,
 mod_proxy_ajp cannot do this.

 I have written my conclusions to

 http://opencms-wiki.org/MultiSite_configuration_instructions_%28apache_%2B_mod_jk%29#mod_jk_or_mod_proxy_ajp_.3F
 so please read it there.

 Cheers

 Martin
 --
 ~~
 Supercomputing Center Brno Martin Kuba
 Institute of Computer Scienceemail: ma...@ics.muni.cz
 Masaryk University http://www.ics.muni.cz/~makub/
 Botanicka 68a, 60200 Brno, CZ mobil: +420-603-533775
 --




-- 

Regards

Jehan Badshah | Software Engineer
MS (Computer Science)
FAST - National University of Computer and Emerging Sciences
A.K. Brohi Road, H-11/4, Islamabad
UAN: +92 (0)51 - 111 128 128 ext 263
Cell: 0300-5847471


Re: [users@httpd] Difference between mod_jk and mod_proxy

2011-01-27 Thread Zeno Davatz
On Thu, Jan 27, 2011 at 9:59 AM, Martin Kuba ma...@ics.muni.cz wrote:

 Hi Jehan,

 it is a FAQ:
 http://wiki.apache.org/tomcat/FAQ/Connectors#Q2

 In my experience, the only difference is the ability of mod_jk to
 pass the SSL_* environment variables using the JkEnv directive,
 mod_proxy_ajp cannot do this.

 I have written my conclusions to
 http://opencms-wiki.org/MultiSite_configuration_instructions_%28apache_%2B_mod_jk%29#mod_jk_or_mod_proxy_ajp_.3F
 so please read it there.

Excellent question! Excellent links!

Thank you.

Best
Zeno

-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
  from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



[users@httpd] problem in Loadbalancing using mod_jk (configuration of worker.properties attached)

2011-01-27 Thread Jehan Badshah
Dear all

Following is the configuration of *worker.properties* file,
using that configuration my browser (or apache) goes in endless loop.

please help.


-
*worker.properties* 



worker.list=loadbalancer,status

# Define Node1
worker.node1.port=8009
worker.node1.host=172.16.100.122
worker.node1.type=ajp13
*worker.node1.lbfactor=1*
worker.node1.socket_timeout=100
worker.node1.local_worker=*0*

# Define Node2
worker.node2.port=8009
worker.node2.host=172.16.100.121
worker.node2.type=ajp13
*worker.node2.lbfactor=1*
worker.node2.socket_timeout=100
worker.node2.local_worker=*0*

# Define Node3
worker.node3.port=8009
worker.node3.host=localhost
worker.node3.type=ajp13
*worker.node3.lbfactor=1*
worker.node3.socket_timeout=100
worker.node3.local_worker=*0*

# Status worker for managing load balancer
worker.status.type=status

# Load-balancing behaviour
worker.loadbalancer.type=lb
worker.loadbalancer.balance_workers=node1,node2,node3
worker.loadbalancer.sticky_session=1
*worker.loadbalancer.local_worker_only=1*


 ---
end
---


Regards

Jehan Badshah | Software Engineer
MS (Computer Science)
FAST - National University of Computer and Emerging Sciences
A.K. Brohi Road, H-11/4, Islamabad
UAN: +92 (0)51 - 111 128 128 ext 263
Cell: 0300-5847471


[users@httpd] problem in Loadbalancing using mod_jk (configuration of worker.properties attached)

2011-01-27 Thread Jehan Badshah
 Dear all

Following is the configuration of *worker.properties* file,
using that configuration my browser (or apache) goes in endless loop.

please help.


-
*worker.properties* 



worker.list=loadbalancer,status

# Define Node1
worker.node1.port=8009
worker.node1.host=172.16.100.122
worker.node1.type=ajp13
*worker.node1.lbfactor=1*
worker.node1.socket_timeout=100
worker.node1.local_worker=*1*

# Define Node2
worker.node2.port=8009
worker.node2.host=172.16.100.121
worker.node2.type=ajp13
*worker.node2.lbfactor=1*
worker.node2.socket_timeout=100
worker.node2.local_worker=*1*

# Define Node3
worker.node3.port=8009
worker.node3.host=localhost
worker.node3.type=ajp13
*worker.node3.lbfactor=1*
worker.node3.socket_timeout=100
worker.node3.local_worker=*1*

# Status worker for managing load balancer
worker.status.type=status

# Load-balancing behaviour
worker.loadbalancer.type=lb
worker.loadbalancer.balance_workers=node1,node2,node3
worker.loadbalancer.sticky_session=1
*worker.loadbalancer.local_worker_only=1*


 ---
end
---


Regards

Jehan Badshah | Software Engineer
MS (Computer Science)
FAST - National University of Computer and Emerging Sciences
A.K. Brohi Road, H-11/4, Islamabad
UAN: +92 (0)51 - 111 128 128 ext 263
Cell: 0300-5847471


[users@httpd] Re: experiencing Out of memory errors

2011-01-27 Thread Zeno Davatz
Hi 

Am 27.01.2011 um 12:57 schrieb Michiel Beijen michiel.bei...@otrs.com:

 Hi John,
 
 On Wed, 2011-01-26 at 10:17 -0500, John Deighan wrote:
 However, we're also not sure if either of these are needed to escape the
 2 GB memory limitation. E.g., can 64 bit Perl be used with a 32 bit
 Apache and/or mod_perl?
 
 You should use the same architecture for Perl and Apache.
 
 Any help with accomplishing what we need would be greatly appreciated,
 including the possibility of hiring someone on a contract basis to
 help us.
 
 Probably because of the fact that the Apache foundation does not ship
 64-bit builds for Windows (which is a shame!), ActiveState does not ship
 a mod_perl with their 64- bit Perl. Compiling your own mod_perl would be
 possible but you need to use preferably the same compiler that was used
 for Apache + perl.
 
 If you would want to switch to StrawberryPerl 5.12.x 64-bit, you can use
 this pre-compiled mod_perl:
 http://strawberryperl.com/package/kmx/mod_perl/

Is mod_perl compiled with MinGW or with cl.exe for windows?

Seems that apxs suggest MinGW.

I got the same problem with mod_ruby for windows.

Best
Zeno

-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
  from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



[users@httpd] Reverse proxy with digest auth to a webapp with basic auth

2011-01-27 Thread Jean-Pierre Bergamin

Hello everyone

We are using apache's mod_proxy (reverse proxy) to make two internal 
webapps available over the internet. It works fine so far.


We now tried to use digest authentication on the proxy to secure the 
access to the proxy itself. One webapp has no problem with that 
approach. You first have to enter the username and passwort of the 
digest auth of the proxy and then you can access the webapp and login 
there as usual.


The other application though is using basic auth - which does not work. 
You first have to enter the username and passwort of the proxy - good. 
Then you have to enter the username and password of the app. Now the 
browser falls into an infinte loop, where it sends always just the 
authentication of the proxy digest auth and gets back a 401 from the 
webapp behind the proxy, because this one does not expect the digest 
auth, but the basic auth.


Is there any pattern how digest and/or basic auth can be used for the 
reverse proxy itself and for the proxied webapp?



Best regards,
James


-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
 from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



[users@httpd] Re: experiencing Out of memory errors

2011-01-27 Thread John Deighan
I'd forgotten about Strawberry Perl (came across it about a year ago, but never got around to trying 
it). One question, though: I'm thinking there's not much point to using a 64-bit version of mod_perl 
unless I'm using it with a 64-bit version of Apache. Where can I get a 64-bit version of Apache that 
will with with the mod_perl below?


On 1/27/2011 6:57 AM, Michiel Beijen wrote:

Hi John,

... etc.

If you would want to switch to StrawberryPerl 5.12.x 64-bit, you can use
this pre-compiled mod_perl:
http://strawberryperl.com/package/kmx/mod_perl/

--
Mike


-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
 from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



Re: [users@httpd] Status 3221225480 and restart

2011-01-27 Thread Matus UHLAR - fantomas
On 24.01.11 11:09, wolfgang.mi...@geigerus.com wrote:
 In-Reply-To:
   E71BAE31C16E784380444F62AFD383C306F6141AB9@EMV02-UKBR.domain1.systemhos
   t.net
 References:
   E71BAE31C16E784380444F62AFD383C304FF0B38AD@EMV02-UKBR.domain1.systemhos
   t.net AANLkTi=f+2tn2ecae2fq8zvrs6r0pp1whim1-pjsj...@mail.gmail.com
   E71BAE31C16E784380444F62AFD383C306F6141AB9@EMV02-UKBR.domain1.systemhos
   t.net
 To: users@httpd.apache.org
 From: wolfgang.mi...@geigerus.com
 Subject: [users@httpd] Status 3221225480 and restart
 
 Hi All,
 
 I am running Apache 2.2.17 on a Windows XP and repeatedly I get the 
 following message:
 
 [notice] Parent: child process exited with status 3221225480 -- 
 Restarting.
 
 And Apache restarts.
 
 What does status 3221225480 mean?

Is this somehow related to the SSL problem you were replying to?
If not, please stop hijacking threads - send a new mail, not a reply.
-- 
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
LSD will make your ECS screen display 16.7 million colors

-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
  from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



Re: [users@httpd] mod_ssl, erratic performance

2011-01-27 Thread Matus UHLAR - fantomas
On 22.01.11 00:53, john.3.new...@bt.com wrote:
 
 We recently moved our production webserver from a sparc platform (T2000)
 to an x86/64 platform (x2270-m2) and we have noticed an erratic response
 time for downloads of files using SSL. This seems to randomly occur with
 any files about 10k or larger. For instance, I have been using a test file
 of 140K, and it can take 0.5 or 4.8 seconds to transfer. When using the
 sparc platform, it always only takes 0.5 seconds.
 
 I noticed this as we are using an external monitoring system (Gomez.com)
 and we started seeing these wildly varying times for transaction
 processing.
 
 I have tried a cut down SSL setup for testing, and examined every
 directive and option, and I can't make sense of the problem. I'm using the
 following configuration string, and I'd be happy to include the
 configuration setups..
 
 I can move the bare-bones configuration between the sparc and x86
 platforms and get normal response on the sparc, and irregular on the x86.

random device can make a huge difference. What do you use for random data?
/dev/random or /dev/urandom? If the rofmer, try the latter if it helps.
-- 
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Windows found: (R)emove, (E)rase, (D)elete

-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
  from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



RE: [users@httpd] problem in Loadbalancing using mod_jk (configuration of worker.properties attached)

2011-01-27 Thread Lukas Sklenar
To my unexperienced eye you need node1, node2 and node3 in your
worker.list property as well as the loadbalance and status workers.

 

Hth,

 

Lukas

__

Lukas Sklenar 



From: Jehan Badshah [mailto:jehan.bads...@nu.edu.pk] 
Sent: 27 January 2011 09:51
To: users@httpd.apache.org
Subject: [users@httpd] problem in Loadbalancing using mod_jk
(configuration of worker.properties attached)

 

 

Dear all

 

Following is the configuration of worker.properties file,

using that configuration my browser (or apache) goes in endless loop.

 

please help.


 

-

worker.properties 



 


worker.list=loadbalancer,status


# Define Node1
worker.node1.port=8009
worker.node1.host=172.16.100.122
worker.node1.type=ajp13
worker.node1.lbfactor=1
worker.node1.socket_timeout=100
worker.node1.local_worker=1 


# Define Node2
worker.node2.port=8009
worker.node2.host=172.16.100.121
worker.node2.type=ajp13
worker.node2.lbfactor=1
worker.node2.socket_timeout=100
worker.node2.local_worker=1

 

# Define Node3
worker.node3.port=8009
worker.node3.host=localhost
worker.node3.type=ajp13
worker.node3.lbfactor=1
worker.node3.socket_timeout=100
worker.node3.local_worker=1


# Status worker for managing load balancer
worker.status.type=status


# Load-balancing behaviour
worker.loadbalancer.type=lb
worker.loadbalancer.balance_workers=node1,node2,node3
worker.loadbalancer.sticky_session=1
worker.loadbalancer.local_worker_only=1

 

 

---

end

---

 


Regards

Jehan Badshah | Software Engineer
MS (Computer Science)
FAST - National University of Computer and Emerging Sciences
A.K. Brohi Road, H-11/4, Islamabad
UAN: +92 (0)51 - 111 128 128 ext 263
Cell: 0300-5847471


Please consider the environment before printing this email.

This message should be regarded as confidential. If you have received this 
email in error please notify the sender and destroy it immediately.
Statements of intent shall only become binding when confirmed in hard copy by 
an authorised signatory.  The contents of this email may relate to dealings 
with other companies within the Detica Limited group of companies.

Detica Limited is registered in England under No: 1337451.

Registered offices: Surrey Research Park, Guildford, Surrey, GU2 7YP, England.



Re: [users@httpd] Status 3221225480 and restart

2011-01-27 Thread Wolfgang . Miska
Sorry!

Did not mean to!





Matus UHLAR - fantomas uh...@fantomas.sk 
01/27/2011 10:32 AM
Please respond to
users@httpd.apache.org


To
users@httpd.apache.org
cc

Subject
Re: [users@httpd] Status 3221225480 and restart






On 24.01.11 11:09, wolfgang.mi...@geigerus.com wrote:
 In-Reply-To:
 E71BAE31C16E784380444F62AFD383C306F6141AB9@EMV02-UKBR.domain1.systemhos
t.net
 References:
 E71BAE31C16E784380444F62AFD383C304FF0B38AD@EMV02-UKBR.domain1.systemhos
t.net 
AANLkTi=f+2tn2ecae2fq8zvrs6r0pp1whim1-pjsj...@mail.gmail.com
 E71BAE31C16E784380444F62AFD383C306F6141AB9@EMV02-UKBR.domain1.systemhos
t.net
 To: users@httpd.apache.org
 From: wolfgang.mi...@geigerus.com
 Subject: [users@httpd] Status 3221225480 and restart
 
 Hi All,
 
 I am running Apache 2.2.17 on a Windows XP and repeatedly I get the 
 following message:
 
 [notice] Parent: child process exited with status 3221225480 -- 
 Restarting.
 
 And Apache restarts.
 
 What does status 3221225480 mean?

Is this somehow related to the SSL problem you were replying to?
If not, please stop hijacking threads - send a new mail, not a reply.
-- 
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
LSD will make your ECS screen display 16.7 million colors

-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
  from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org




Re: [users@httpd] mod_ssl, erratic performance

2011-01-27 Thread Edgar Frank

Am 27.01.2011 16:34, schrieb Matus UHLAR - fantomas:

On 22.01.11 00:53, john.3.new...@bt.com wrote:


We recently moved our production webserver from a sparc platform (T2000)
to an x86/64 platform (x2270-m2) and we have noticed an erratic response
time for downloads of files using SSL. This seems to randomly occur with
any files about 10k or larger. For instance, I have been using a test file
of 140K, and it can take 0.5 or 4.8 seconds to transfer. When using the
sparc platform, it always only takes 0.5 seconds.

I noticed this as we are using an external monitoring system (Gomez.com)
and we started seeing these wildly varying times for transaction
processing.

I have tried a cut down SSL setup for testing, and examined every
directive and option, and I can't make sense of the problem. I'm using the
following configuration string, and I'd be happy to include the
configuration setups..

I can move the bare-bones configuration between the sparc and x86
platforms and get normal response on the sparc, and irregular on the x86.


random device can make a huge difference. What do you use for random data?
/dev/random or /dev/urandom? If the rofmer, try the latter if it helps.


Good point. But to have some prove at hand, don't change the random
device yet - instead monitor /proc/sys/kernel/random/entropy_avail with
e.g. watch. If your're going of of random bytes - ka-ching :)

Regards,
Edgar

-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
 from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



[users@httpd] how is SSLRequireSSL merged?

2011-01-27 Thread Christoph Anton Mitterer
Hi...

(Yes I've read the documentation section about merging sections, but
IMHO it's not absolutely clear IMHO)

I have one vhost containing about:
...
Location /
SSLRequireSSL
/Location
...
and possibly also a later location-section on /, containing other
directives, e.g.
Location /
#do e.g. some proxy stuff
/Location

(and yes it's unfortunately required to have two separate sections)


Is the SSLRequireSSL still active, after the merging?

I now it says later sections override earlier ones... but what exactly
does override mean here,.. completely or just those directives which
are defined in the later section?


Or in more general words, having:
Location /
directiveA value1
directiveB value1
/Location
Location /
directiveB value2
directiveC value2
/Location

Will the merged result be like:
Location /
directiveA value1
directiveB value2
directiveC value2
/Location
or just
Location /
directiveB value2
directiveC value2
/Location


I used to thought it's always (except for +/- directives like Options or
so) like the former of the two ways, but it seems to be not always like
that, at least with Order/Deny/Allow.


Thanks,
Chris.


smime.p7s
Description: S/MIME cryptographic signature


Re: [users@httpd] how is SSLRequireSSL merged?

2011-01-27 Thread Rich Bowen

On Jan 27, 2011, at 7:45 PM, Christoph Anton Mitterer wrote:

 Hi...
 
 (Yes I've read the documentation section about merging sections, but
 IMHO it's not absolutely clear IMHO)
 
 I have one vhost containing about:
 ...
 Location /
   SSLRequireSSL
 /Location
 ...
 and possibly also a later location-section on /, containing other
 directives, e.g.
 Location /
   #do e.g. some proxy stuff
 /Location
 
 (and yes it's unfortunately required to have two separate sections)
 
 
 Is the SSLRequireSSL still active, after the merging?

Yes

 
 I now it says later sections override earlier ones... but what exactly
 does override mean here,.. completely or just those directives which
 are defined in the later section?

Directive A in a later scope overrides Directive A in the earlier one. 
Directive A in the later scope does not affect Directive B in the earlier.

--
Rich Bowen
rbo...@rcbowen.com


-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
  from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



[users@httpd] mod_ssl and virtual host

2011-01-27 Thread bf...@free-man.net


Apache version 2.2.3
CentOS Linux 5.5
/etc/httpd/conf.d/ssl.config
changes
#VirtualHost _default_:443
VirtualHost free-man.net:443
#SSLCertificateFile /etc/pki/tls/certs/localhost.crt
SSLCertificateFile /etc/pki/tls/certs/free-man-net.crt
#SSLCertificateKeyFile /etc/pki/tls/private/localhost.key
SSLCertificateKeyFile /etc/pki/tls/private/free-mman-net.key

this works I get no errors on my https free-man.net.

/etc/httpd/conf/conf.config
VirtualHost www.specialtymarket.com:443
SSLEngine on
SSLProtocol all -SSLv2
 SSLCipherSuite ALL:!ADH:!EXPORT:!SSLv2:RC4+RSA:+HIGH:+MEDIUM:+LOW

 SSLCertificateFile
/etc/pki_free-man_net/myCA/certs/specialtymarketCA.crt
 SSLCertificateKeyFile
/etc/pki_free-man_net/myCA/private/specialtymarketCA.key

when I restart httpd I get
Starting httpd: Apache/2.2.3 mod_ssl/2.2.3 (Pass Phrase Dialog)
Some of your private key files are encrypted for security reasons.
In order to read them you have to provide the pass phrases.

Server specialtymarket.com:443 (RSA)
Enter pass phrase:

OK: Pass Phrase Dialog successful.

when I do a https for specialtymarket.com in a browser I get
www.specialtymarket.com uses an invalid security certificate.

The certificate is not trusted because it is self-signed.
The certificate is only valid for free-man.net

what am I doing wrong?


-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
 from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



[users@httpd] mod_dir with HTTPS

2011-01-27 Thread Tao Lei
Hello.

It seems that mod_dir does not work properly with SSL (https).

When working with http, there is no problem:
If url http://www.abc.com/test; is requested, apache appends a / to the url 
and then respones to browser with code 301, telling it to request the 
newly-modified url http://www.abc.com/test/;.

However, with https, things are not going as expected:
If url https://www.abc.com/test; is requested, the new url responsed by apache 
is http://www.abc.com/test/;, but not https://...;, resulting in browser's 
page load error.

Any suggestion or solution, please?

[users@httpd] problem in Loadbalancing using mod_jk (configuration of worker.properties attached)

2011-01-27 Thread Jehan Badshah
 Dear all

Following is the configuration of *worker.properties* file,
using that configuration my browser (or apache) goes in endless loop.

please help.


-
*worker.properties* 



worker.list=loadbalancer,status

# Define Node1
worker.node1.port=8009
worker.node1.host=172.16.100.122
worker.node1.type=ajp13
*worker.node1.lbfactor=1*
worker.node1.socket_timeout=100
worker.node1.local_worker=*1*

# Define Node2
worker.node2.port=8009
worker.node2.host=172.16.100.121
worker.node2.type=ajp13
*worker.node2.lbfactor=1*
worker.node2.socket_timeout=100
worker.node2.local_worker=*1*

 # Define Node3
worker.node3.port=8009
worker.node3.host=localhost
worker.node3.type=ajp13
*worker.node3.lbfactor=1*
worker.node3.socket_timeout=100
worker.node3.local_worker=*1*

# Status worker for managing load balancer
worker.status.type=status

# Load-balancing behaviour
worker.loadbalancer.type=lb
worker.loadbalancer.balance_workers=node1,node2,node3
worker.loadbalancer.sticky_session=1
*worker.loadbalancer.local_worker_only=1*


 ---
end
---


Regards

Jehan Badshah | Software Engineer
MS (Computer Science)
FAST - National University of Computer and Emerging Sciences
A.K. Brohi Road, H-11/4, Islamabad
UAN: +92 (0)51 - 111 128 128 ext 263
Cell: 0300-5847471


Re: [users@httpd] problem in Loadbalancing using mod_jk (configuration of worker.properties attached)

2011-01-27 Thread Igor Cicimov
Did you configure the Tomcats though? Make sure that jvmRoute attribute is
set at your Engine so for the first one you need to have

Engine name=Catalina jvmRoute=node1

for second one

Engine name=Catalina jvmRoute=node2

etc.

On Fri, Jan 28, 2011 at 3:20 PM, Jehan Badshah jehan.bads...@nu.edu.pkwrote:


  Dear all

 Following is the configuration of *worker.properties* file,
 using that configuration my browser (or apache) goes in endless loop.

 please help.


 -
 *worker.properties* 
 


 worker.list=loadbalancer,status

 # Define Node1
 worker.node1.port=8009
 worker.node1.host=172.16.100.122
 worker.node1.type=ajp13
 *worker.node1.lbfactor=1*
 worker.node1.socket_timeout=100
 worker.node1.local_worker=*1*

 # Define Node2
 worker.node2.port=8009
 worker.node2.host=172.16.100.121
 worker.node2.type=ajp13
 *worker.node2.lbfactor=1*
 worker.node2.socket_timeout=100
 worker.node2.local_worker=*1*

  # Define Node3
 worker.node3.port=8009
 worker.node3.host=localhost
 worker.node3.type=ajp13
 *worker.node3.lbfactor=1*
 worker.node3.socket_timeout=100
 worker.node3.local_worker=*1*

 # Status worker for managing load balancer
 worker.status.type=status

 # Load-balancing behaviour
 worker.loadbalancer.type=lb
 worker.loadbalancer.balance_workers=node1,node2,node3
 worker.loadbalancer.sticky_session=1
 *worker.loadbalancer.local_worker_only=1*


  ---
 end
 ---


 Regards
 
 Jehan Badshah | Software Engineer
 MS (Computer Science)
 FAST - National University of Computer and Emerging Sciences
 A.K. Brohi Road, H-11/4, Islamabad
 UAN: +92 (0)51 - 111 128 128 ext 263
 Cell: 0300-5847471






Re: [users@httpd] problem in Loadbalancing using mod_jk (configuration of worker.properties attached)

2011-01-27 Thread Jehan Badshah
Yes! to tomcat/conf/server.xml

 I have already added


Engine name=*Catalina* defaultHost=*localhost* jvmRoute=*node1*
to 172.16.100.122


Engine name=*Catalina* defaultHost=*localhost* jvmRoute=*node2*
to 172.16.100.121


Engine name=*Catalina* defaultHost=*localhost* jvmRoute=*node3*
to localhost


On Fri, Jan 28, 2011 at 10:40 AM, Igor Cicimov icici...@gmail.com wrote:

 Did you configure the Tomcats though? Make sure that jvmRoute attribute is
 set at your Engine so for the first one you need to have

 Engine name=Catalina jvmRoute=node1

 for second one

 Engine name=Catalina jvmRoute=node2

 etc.


 On Fri, Jan 28, 2011 at 3:20 PM, Jehan Badshah jehan.bads...@nu.edu.pkwrote:


  Dear all

 Following is the configuration of *worker.properties* file,
 using that configuration my browser (or apache) goes in endless loop.

 please help.


 -
 *worker.properties* 
 


 worker.list=loadbalancer,status

 # Define Node1
 worker.node1.port=8009
 worker.node1.host=172.16.100.122
 worker.node1.type=ajp13
 *worker.node1.lbfactor=1*
 worker.node1.socket_timeout=100
 worker.node1.local_worker=*1*

 # Define Node2
 worker.node2.port=8009
 worker.node2.host=172.16.100.121
 worker.node2.type=ajp13
 *worker.node2.lbfactor=1*
 worker.node2.socket_timeout=100
 worker.node2.local_worker=*1*

  # Define Node3
 worker.node3.port=8009
 worker.node3.host=localhost
 worker.node3.type=ajp13
 *worker.node3.lbfactor=1*
 worker.node3.socket_timeout=100
 worker.node3.local_worker=*1*

 # Status worker for managing load balancer
 worker.status.type=status

 # Load-balancing behaviour
 worker.loadbalancer.type=lb
 worker.loadbalancer.balance_workers=node1,node2,node3
 worker.loadbalancer.sticky_session=1
 *worker.loadbalancer.local_worker_only=1*


  ---
 end
 ---


 Regards
 
 Jehan Badshah | Software Engineer
 MS (Computer Science)
 FAST - National University of Computer and Emerging Sciences
 A.K. Brohi Road, H-11/4, Islamabad
 UAN: +92 (0)51 - 111 128 128 ext 263
 Cell: 0300-5847471







-- 

Regards

Jehan Badshah | Software Engineer
MS (Computer Science)
FAST - National University of Computer and Emerging Sciences
A.K. Brohi Road, H-11/4, Islamabad
UAN: +92 (0)51 - 111 128 128 ext 263
Cell: 0300-5847471


Re: [users@httpd] problem in Loadbalancing using mod_jk (configuration of worker.properties attached)

2011-01-27 Thread Igor Cicimov
Whats the URI that is not working? What is your jk_module configuration in
the httpd.conf file? Do you have the appropriate JkMount statements in it?
Post it here please the code between these two

IfModule jk_module

/IfModule

On Fri, Jan 28, 2011 at 4:52 PM, Jehan Badshah jehan.bads...@nu.edu.pkwrote:


 Yes! to tomcat/conf/server.xml

  I have already added


 Engine name=*Catalina* defaultHost=*localhost* jvmRoute=*node1*
 to 172.16.100.122


 Engine name=*Catalina* defaultHost=*localhost* jvmRoute=*node2*
 to 172.16.100.121


 Engine name=*Catalina* defaultHost=*localhost* jvmRoute=*node3*
 to localhost


 On Fri, Jan 28, 2011 at 10:40 AM, Igor Cicimov icici...@gmail.com wrote:

 Did you configure the Tomcats though? Make sure that jvmRoute attribute is
 set at your Engine so for the first one you need to have

 Engine name=Catalina jvmRoute=node1

 for second one

 Engine name=Catalina jvmRoute=node2

 etc.


 On Fri, Jan 28, 2011 at 3:20 PM, Jehan Badshah 
 jehan.bads...@nu.edu.pkwrote:


  Dear all

 Following is the configuration of *worker.properties* file,
 using that configuration my browser (or apache) goes in endless loop.

 please help.


 -
 *worker.properties* 
 


 worker.list=loadbalancer,status

 # Define Node1
 worker.node1.port=8009
 worker.node1.host=172.16.100.122
 worker.node1.type=ajp13
 *worker.node1.lbfactor=1*
 worker.node1.socket_timeout=100
 worker.node1.local_worker=*1*

 # Define Node2
 worker.node2.port=8009
 worker.node2.host=172.16.100.121
 worker.node2.type=ajp13
 *worker.node2.lbfactor=1*
 worker.node2.socket_timeout=100
 worker.node2.local_worker=*1*

  # Define Node3
 worker.node3.port=8009
 worker.node3.host=localhost
 worker.node3.type=ajp13
 *worker.node3.lbfactor=1*
 worker.node3.socket_timeout=100
 worker.node3.local_worker=*1*

 # Status worker for managing load balancer
 worker.status.type=status

 # Load-balancing behaviour
 worker.loadbalancer.type=lb
 worker.loadbalancer.balance_workers=node1,node2,node3
 worker.loadbalancer.sticky_session=1
 *worker.loadbalancer.local_worker_only=1*


  ---
 end
 ---


 Regards
 
 Jehan Badshah | Software Engineer
 MS (Computer Science)
 FAST - National University of Computer and Emerging Sciences
 A.K. Brohi Road, H-11/4, Islamabad
 UAN: +92 (0)51 - 111 128 128 ext 263
 Cell: 0300-5847471







 --

 Regards
 
 Jehan Badshah | Software Engineer
 MS (Computer Science)
 FAST - National University of Computer and Emerging Sciences
 A.K. Brohi Road, H-11/4, Islamabad
 UAN: +92 (0)51 - 111 128 128 ext 263
 Cell: 0300-5847471




Re: [users@httpd] mod_ssl and virtual host

2011-01-27 Thread Martin Kuba

Dne 28.1.2011 02:51, bf...@free-man.net napsal(a):

The certificate is not trusted because it is self-signed.
The certificate is only valid for free-man.net

what am I doing wrong?


You can not use name-based virtual hosts for SSL if your Apache is older than 
2.2.12
or your OpenSSL does not support SNI or the client is MSIE on Windows XP.

In other words, you need a separate IP address for each SSL certificate,
because the SSL connection is established before the HTTP connection takes place
and the server does not know which certificate to choose.

See
http://httpd.apache.org/docs/2.2/ssl/ssl_faq.html#vhosts
http://en.wikipedia.org/wiki/Server_Name_Indication

Use IP-based virtual hosts instead.

Cheers

Martin
--
~~
Supercomputing Center Brno Martin Kuba
Institute of Computer Scienceemail: ma...@ics.muni.cz
Masaryk University http://www.ics.muni.cz/~makub/
Botanicka 68a, 60200 Brno, CZ mobil: +420-603-533775
--



smime.p7s
Description: S/MIME Cryptographic Signature