Re: [users@httpd] What is configuration

2017-06-01 Thread Luiz Guilherme Nunes Fernandes
I make another tests, but my solution, i change port:



DocumentRoot "/var/www/html/jasmine/"
ServerName jasmine






ServerName cups
ProxyPreserveHost Off
ProxyPass / http://localhost:631/
ProxyPassReverse / http://localhost:631/




2017-06-01 15:41 GMT-03:00 Daniel <dferra...@gmail.com>:

> there is no problem if they have the same ip in common.
>
> This procedure is called Named Virtual Hosts. That is, Apache httpd
> looks at the hostname in the request to know where to deliver the
> requests, if no match is found it chooses the first virtualhost, hence
> the importance of defining servername correctly and make sure clients
> can resolve and use those names.
>
> You can also define ServerName 10.1.1.76 for one virtualhost and
> ServerName jasmine in the other. Note what you type in the url address
> bar goes in "Host" header and that's what apache checks when requests
> come in.
>
> 2017-06-01 20:33 GMT+02:00 Luiz Guilherme Nunes Fernandes
> <narutospi...@gmail.com>:
> > Ok tnx my last doubt, if i add this names in dns, cups and jasmine have
> the
> > same IPadrress.
> >
> > For example
> >
> > cups.mydomain 10.1.1.76
> > jasmine.mydomain 10.1.1.76
> >
> > 2017-06-01 15:20 GMT-03:00 Daniel <dferra...@gmail.com>:
> >>
> >> Servername is to specify the host header, defining different names but
> >> calling http://10.1.1.76 won't help apache determine to which
> >> virtualhost the request has to go, following the names you used, you
> >> need to request http://cups/ or http://jasmine/ to make Apache httpd
> >> recognize where requests will go, otherwise all requests will land in
> >> the first virtualhost.
> >>
> >> 2017-06-01 20:14 GMT+02:00 Luiz Guilherme Nunes Fernandes
> >> <narutospi...@gmail.com>:
> >> > Well, i chek in log.
> >> >
> >> > When I try to access the first virtualhost it works normally.
> >> >
> >> > 10.251.14.140 - - [01/Jun/2017:15:01:35 -0300] "GET / HTTP/1.1" 304 -
> >> > "http://10.1.1.76/admin; "Mozilla/5.0 (X11; Linux x86_64; rv:45.0)
> >> > Gecko/20100101 Firefox/45.0"
> >> > 10.251.14.140 - - [01/Jun/2017:15:01:35 -0300] "GET /cups.css
> HTTP/1.1"
> >> > 304
> >> > - "http://10.1.1.76/; "Mozilla/5.0 (X11; Linux x86_64; rv:45.0)
> >> > Gecko/20100101 Firefox/45.0"
> >> >
> >> > Second virtualhost:
> >> >
> >> > 10.251.14.140 - - [01/Jun/2017:15:01:58 -0300] "GET /jasmine/
> HTTP/1.1"
> >> > 404
> >> > 342 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101
> >> > Firefox/45.0"
> >> > 10.251.14.140 - - [01/Jun/2017:15:01:58 -0300] "GET /cups.css
> HTTP/1.1"
> >> > 304
> >> > - "http://10.1.1.76/jasmine/; "Mozilla/5.0 (X11; Linux x86_64;
> rv:45.0)
> >> > Gecko/20100101 Firefox/45.0"
> >> >
> >> > My new configuration:
> >> >
> >> > 
> >> >
> >> > ServerName cups
> >> > ProxyRequests off
> >> > ProxyPreserveHost Off
> >> > ProxyPass / http://localhost:631/
> >> > ProxyPassReverse / http://localhost:631/
> >> > 
> >> >
> >> > 
> >> >
> >> > ServerName jasmine
> >> > DocumentRoot /var/www/html/jasmine
> >> > 
> >> > Require all granted
> >> > 
> >> >
> >> > 
> >> >
> >> > Sorry, but I'm still confused, with 2 virtual hosts without reverse
> >> > proxy
> >> > work, but I need one with reverse proxy and another with documentroot
> >> > source
> >> > of apache. Why when I try to access jasmine, does it access my cups
> >> > virtualhost?
> >> >
> >> > # I use with parameter and without.
> >> > Log details:
> >> > AH00548: NameVirtualHost has no effect and will be removed in the next
> >> > release /etc/httpd/conf.d/teste.conf:1
> >> >
> >> >
> >> >
> >> > 2017-06-01 13:38 GMT-03:00 Daniel <dferra...@gmail.com>:
> >> >>
> >> >> Hello, if you define more than one virtualhost you need to
> distinguish
> >> >> them somehow, so Apache knows where requests will "land".
> >> >>
> >> >> This "somehow" you must use is called ServerN

Re: [users@httpd] What is configuration

2017-06-01 Thread Luiz Guilherme Nunes Fernandes
Ok tnx my last doubt, if i add this names in dns, cups and jasmine have the
same IPadrress.

For example

cups.mydomain 10.1.1.76
jasmine.mydomain 10.1.1.76

2017-06-01 15:20 GMT-03:00 Daniel <dferra...@gmail.com>:

> Servername is to specify the host header, defining different names but
> calling http://10.1.1.76 won't help apache determine to which
> virtualhost the request has to go, following the names you used, you
> need to request http://cups/ or http://jasmine/ to make Apache httpd
> recognize where requests will go, otherwise all requests will land in
> the first virtualhost.
>
> 2017-06-01 20:14 GMT+02:00 Luiz Guilherme Nunes Fernandes
> <narutospi...@gmail.com>:
> > Well, i chek in log.
> >
> > When I try to access the first virtualhost it works normally.
> >
> > 10.251.14.140 - - [01/Jun/2017:15:01:35 -0300] "GET / HTTP/1.1" 304 -
> > "http://10.1.1.76/admin; "Mozilla/5.0 (X11; Linux x86_64; rv:45.0)
> > Gecko/20100101 Firefox/45.0"
> > 10.251.14.140 - - [01/Jun/2017:15:01:35 -0300] "GET /cups.css HTTP/1.1"
> 304
> > - "http://10.1.1.76/; "Mozilla/5.0 (X11; Linux x86_64; rv:45.0)
> > Gecko/20100101 Firefox/45.0"
> >
> > Second virtualhost:
> >
> > 10.251.14.140 - - [01/Jun/2017:15:01:58 -0300] "GET /jasmine/ HTTP/1.1"
> 404
> > 342 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101
> > Firefox/45.0"
> > 10.251.14.140 - - [01/Jun/2017:15:01:58 -0300] "GET /cups.css HTTP/1.1"
> 304
> > - "http://10.1.1.76/jasmine/; "Mozilla/5.0 (X11; Linux x86_64; rv:45.0)
> > Gecko/20100101 Firefox/45.0"
> >
> > My new configuration:
> >
> > 
> >
> > ServerName cups
> > ProxyRequests off
> > ProxyPreserveHost Off
> > ProxyPass / http://localhost:631/
> > ProxyPassReverse / http://localhost:631/
> > 
> >
> > 
> >
> > ServerName jasmine
> > DocumentRoot /var/www/html/jasmine
> > 
> > Require all granted
> > 
> >
> > 
> >
> > Sorry, but I'm still confused, with 2 virtual hosts without reverse proxy
> > work, but I need one with reverse proxy and another with documentroot
> source
> > of apache. Why when I try to access jasmine, does it access my cups
> > virtualhost?
> >
> > # I use with parameter and without.
> > Log details:
> > AH00548: NameVirtualHost has no effect and will be removed in the next
> > release /etc/httpd/conf.d/teste.conf:1
> >
> >
> >
> > 2017-06-01 13:38 GMT-03:00 Daniel <dferra...@gmail.com>:
> >>
> >> Hello, if you define more than one virtualhost you need to distinguish
> >> them somehow, so Apache knows where requests will "land".
> >>
> >> This "somehow" you must use is called ServerName, each virtualhost
> >> must have a unique severname.
> >>
> >> Also if this is Apache httpd 2.2 you will need a directive called
> >> "NamedVirtualhost *:80" defined once in server/global config.
> >>
> >> 2017-06-01 18:31 GMT+02:00 Luiz Guilherme Nunes Fernandes
> >> <narutospi...@gmail.com>:
> >> > Dears,
> >> >  i need redirect my apache for use cups and i need use
> Directory
> >> > /var/www/html/jasmine with another application. What is a
> configuration
> >> > correct? in apache show "Not Found" for directory of Jasmine, if i
> >> > remove
> >> > proxy pass directory jasmine work.
> >> >
> >> > 
> >> >
> >> > ProxyPreserveHost Off
> >> > ProxyPass / http://localhost:631/
> >> > ProxyPassReverse / http://localhost:631/
> >> >
> >> > 
> >> >
> >> > 
> >> >
> >> > 
> >> > Require all granted
> >> > 
> >> >
> >> > 
> >> >
> >> >
> >> > --
> >> >
> >> > <<<<<<<<<<<<<<<<<<<-
> -->>>>>>>>>>>>>>>>>>>
> >> >
> >> > < Disse-lhe Jesus: Eu sou o caminho, e a verdade e a vida; ninguém vem
> >> > ao
> >> > Pai, senão por mim >
> >> >           

Re: [users@httpd] What is configuration

2017-06-01 Thread Luiz Guilherme Nunes Fernandes
Well, i chek in log.

When I try to access the first virtualhost it works normally.

10.251.14.140 - - [01/Jun/2017:15:01:35 -0300] "GET / HTTP/1.1" 304 - "
http://10.1.1.76/admin; "Mozilla/5.0 (X11; Linux x86_64; rv:45.0)
Gecko/20100101 Firefox/45.0"
10.251.14.140 - - [01/Jun/2017:15:01:35 -0300] "GET /cups.css HTTP/1.1" 304
- "http://10.1.1.76/; "Mozilla/5.0 (X11; Linux x86_64; rv:45.0)
Gecko/20100101 Firefox/45.0"

Second virtualhost:

10.251.14.140 - - [01/Jun/2017:15:01:58 -0300] "GET /jasmine/ HTTP/1.1" 404
342 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101
Firefox/45.0"
10.251.14.140 - - [01/Jun/2017:15:01:58 -0300] "GET /cups.css HTTP/1.1" 304
- "http://10.1.1.76/jasmine/; "Mozilla/5.0 (X11; Linux x86_64; rv:45.0)
Gecko/20100101 Firefox/45.0"

My new configuration:



ServerName cups
ProxyRequests off
ProxyPreserveHost Off
ProxyPass / http://localhost:631/
ProxyPassReverse / http://localhost:631/




ServerName jasmine
DocumentRoot /var/www/html/jasmine

Require all granted




Sorry, but I'm still confused, with 2 virtual hosts without reverse proxy
work, but I need one with reverse proxy and another with documentroot
source of apache. Why when I try to access jasmine, does it access my cups
virtualhost?

# I use with parameter and without.
Log details:
AH00548: NameVirtualHost has no effect and will be removed in the next
release /etc/httpd/conf.d/teste.conf:1



2017-06-01 13:38 GMT-03:00 Daniel <dferra...@gmail.com>:

> Hello, if you define more than one virtualhost you need to distinguish
> them somehow, so Apache knows where requests will "land".
>
> This "somehow" you must use is called ServerName, each virtualhost
> must have a unique severname.
>
> Also if this is Apache httpd 2.2 you will need a directive called
> "NamedVirtualhost *:80" defined once in server/global config.
>
> 2017-06-01 18:31 GMT+02:00 Luiz Guilherme Nunes Fernandes
> <narutospi...@gmail.com>:
> > Dears,
> >  i need redirect my apache for use cups and i need use Directory
> > /var/www/html/jasmine with another application. What is a configuration
> > correct? in apache show "Not Found" for directory of Jasmine, if i remove
> > proxy pass directory jasmine work.
> >
> > 
> >
> > ProxyPreserveHost Off
> > ProxyPass / http://localhost:631/
> > ProxyPassReverse / http://localhost:631/
> >
> > 
> >
> > 
> >
> > 
> > Require all granted
> > 
> >
> > 
> >
> >
> > --
> > <<<<<<<<<<<<<<<<<<<-------------
> -->>>>>>>>>>>>>>>>>>>
> >
> > < Disse-lhe Jesus: Eu sou o caminho, e a verdade e a vida; ninguém vem ao
> > Pai, senão por mim >
> >  (João 14:6)
> >
> > Att.
> > ♪ ♫  Luiz Guilherme Nunes
> Fernandes
> > ♫ ♪
> >
> > <<<<<<<<<<<<<<<<<<<-
> -->>>>>>>>>>>>>>>>>>>
>
>
>
> --
> Daniel Ferradal
> IT Specialist
>
> email dferradal at gmail.com
> linkedin es.linkedin.com/in/danielferradal
>
> -
> To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
> For additional commands, e-mail: users-h...@httpd.apache.org
>
>


-- 
<<<<<<<<<<<<<<<<<<<--->>>>>>>>>>>>>>>>>>>

< Disse-lhe Jesus: Eu sou o caminho, e a verdade e a vida; ninguém vem ao
Pai, senão por mim >
 (João 14:6)

Att.
♪ ♫  Luiz Guilherme Nunes
Fernandes  ♫ ♪

<<<<<<<<<<<<<<<<<<<--->>>>>>>>>>>>>>>>>>>


[users@httpd] What is configuration

2017-06-01 Thread Luiz Guilherme Nunes Fernandes
Dears,
 i need redirect my apache for use cups and i need use Directory
/var/www/html/jasmine with another application. What is a configuration
correct? in apache show "Not Found" for directory of Jasmine, if i remove
proxy pass directory jasmine work.



ProxyPreserveHost Off
ProxyPass / http://localhost:631/
ProxyPassReverse / http://localhost:631/






Require all granted





-- 
<<<<<<<<<<<<<<<<<<<--->>>>>>>>>>>>>>>>>>>

< Disse-lhe Jesus: Eu sou o caminho, e a verdade e a vida; ninguém vem ao
Pai, senão por mim >
 (João 14:6)

        Att.
♪ ♫  Luiz Guilherme Nunes
Fernandes  ♫ ♪

<<<<<<<<<<<<<<<<<<<--->>>>>>>>>>>>>>>>>>>


[users@httpd] Re: Error with Kerberos in Apache

2017-05-10 Thread Luiz Guilherme Nunes Fernandes
Help-me,

My new erros, i dont have any idea now. What is problem.

Erros:
[Wed May 10 16:44:38.642059 2017] [auth_kerb:error] [pid 13249] [client
10.251.14.140:47141] failed to verify krb5 credentials: Server not found in
Kerberos database, referer: http://10.1.1.76/

###
/etc/krb5.conf

[libdefaults]
 default_realm = REDE.COM.BR
 dns_lookup_realm = false
 dns_lookup_kdc = true
 ticket_lifetime = 24h
 renew_lifetime = 7d
 forwardable = true
 rdns = false
 default_ccache_name = KEYRING:persistent:%{uid}

[realms]
 REDE.COM.BR = {
 kdc = REDE.COM.BR
 admin_server = REDE.COM.BR
 }

[domain_realm]
 .rede.com.br=REDE.COM.BR
 rede.com.br=REDE.COM.BR

##
klist -k /etc/httpd/conf.d/krb5.keytab
Keytab name: FILE:/etc/httpd/conf.d/krb5.keytab
KVNO Principal

--
  14 host/delorean2.rede.com...@rede.com.br
  14 host/delorean2.rede.com...@rede.com.br
  14 host/delorean2.rede.com...@rede.com.br
  14 host/delorean2.rede.com...@rede.com.br
  14 host/delorean2.rrede.com...@rede.com.br
  14 host/delore...@rede.com.br
  14 host/delore...@rede.com.br
  14 host/delore...@rede.com.br
  14 host/delore...@rede.com.br
  14 host/delore...@rede.com.br
  14 DELOREAN2$@REDE.COM.BR
  14 DELOREAN2$@REDE.COM.BR
  14 DELOREAN2$@REDE.COM.BR
  14 DELOREAN2$@REDE.COM.BR
  14 DELOREAN2$@REDE.COM.BR


cat /etc/httpd/conf.d/proxy.conf

ProxyPreserveHost Off
ProxyPass / http://localhost:631/
ProxyPassReverse / http://localhost:631/


 AuthName "Login"
 AuthType Kerberos
 KrbMethodNegotiate on
 KrbMethodK5Passwd on
 KrbAuthRealms REDE.COM.BR
 Krb5Keytab /etc/httpd/conf.d/krb5.keytab
 KrbLocalUserMapping on
 Require valid-user

 AuthLDAPUrl ldap://
rede.com.br/ou=usuarios,dc=rede,dc=com,dc=br?sAMAccountName
 AuthLDAPBindDN cn=UsrLDAP,cn=Users,dc=rede,dc=com,dc=br
 AuthLDAPBindPassword XX
 LDAPReferrals Off





2017-05-09 9:53 GMT-03:00 Luiz Guilherme Nunes Fernandes <
narutospi...@gmail.com>:

> Well, i try my first test and work,  if i authentic with Ldap protocols
> without kerberos work, but i try add kerberos, show erros messages in log.
> Any idea?
>
> No errors in apachectl configtest
>
>
> ###
> cat /etc/krb5.conf
>
> [logging]
>  default = FILE:/var/log/krb5libs.log
>  kdc = FILE:/var/log/krb5kdc.log
>  admin_server = FILE:/var/log/kadmind.log
>
> [libdefaults]
>  default_realm = REDE.COM.BR
>  dns_lookup_realm = false
>  dns_lookup_kdc = true
>  dns_lookup_realm = false
>  ticket_lifetime = 24h
>  renew_lifetime = 7d
>  forwardable = true
>  rdns = false
>  default_ccache_name = KEYRING:persistent:%{uid}
>
> [realms]
>  REDE.COM.BR = {
>  kdc = REDE.COM.BR
>  admin_server = REDE.COM.BR
>  }
>
> [domain_realm]
>  .rede.com.br=REDE.COM.BR
>  rede.com.br=REDE.COM.BR
>
> ###
>
> kinit root
> Password for r...@rede.com.br:
>
> klist
> Ticket cache: KEYRING:persistent:0:0
> Default principal: r...@rede.com.br
>
> Valid starting   Expires  Service principal
> 05/09/2017 09:45:36  05/09/2017 19:45:36  krbtgt/rede.com...@rede.com.br
> renew until 05/16/2017 09:45:34
>
> ###
>  cat /etc/httpd/conf.d/proxy.conf
> 
> ProxyPreserveHost Off
> ProxyPass / http://localhost:631/
> ProxyPassReverse / http://localhost:631/
>
>
> LogLevel debug
>
> 
>
>  AuthType Kerberos
>  KrbMethodNegotiate On
>  AuthName "REDE.COM.BR Domain Login"
>  KrbMethodK5Passwd On
>  KrbAuthRealms REDE.COM.BR
>  Krb5KeyTab /etc/httpd/conf.d/httpd.keytab
>  KrbLocalUserMapping on
>  require valid-user
>
> #   AuthName "Informe usuario da rede"
> #   AuthType Basic
> #   AuthBasicProvider ldap
>AuthLDAPUrl ldap://rede.com.br/ou=usuarios,dc=rede,dc=com,dc=br?
> sAMAccountName
>AuthLDAPBindDN cn=users,dc=rede,dc=com,dc=br
>AuthLDAPBindPassword XX
>Require valid-user
>LDAPReferrals Off
>
> #
>
> 
>
>
> ###
>
> [root@delorean1 conf.d]# tail -f /var/log/httpd/error_log
> [Mon May 08 17:48:42.320886 2017] [auth_kerb:error] [pid 19879] [client
> 10.251.14.140:55636] failed to verify krb5 credentials: Server not found
> in Kerberos database, referer: http://10.1.1.75/
> [Mon May 08 17:48:42.320898 2017] [auth_kerb:debug] [pid 19879]
> src/mod_auth_kerb.c(1127): [client 10.251.14.140:55636]
> kerb_authenticate_user_krb5pwd ret=401 user=(NULL) authtype=(NULL),
> referer: http://10.1.1.75/
> [Mon 

[users@httpd] Error with Kerberos in Apache

2017-05-09 Thread Luiz Guilherme Nunes Fernandes
Well, i try my first test and work,  if i authentic with Ldap protocols
without kerberos work, but i try add kerberos, show erros messages in log.
Any idea?

No errors in apachectl configtest


###
cat /etc/krb5.conf

[logging]
 default = FILE:/var/log/krb5libs.log
 kdc = FILE:/var/log/krb5kdc.log
 admin_server = FILE:/var/log/kadmind.log

[libdefaults]
 default_realm = REDE.COM.BR
 dns_lookup_realm = false
 dns_lookup_kdc = true
 dns_lookup_realm = false
 ticket_lifetime = 24h
 renew_lifetime = 7d
 forwardable = true
 rdns = false
 default_ccache_name = KEYRING:persistent:%{uid}

[realms]
 REDE.COM.BR = {
 kdc = REDE.COM.BR
 admin_server = REDE.COM.BR
 }

[domain_realm]
 .rede.com.br=REDE.COM.BR
 rede.com.br=REDE.COM.BR

###

kinit root
Password for r...@rede.com.br:

klist
Ticket cache: KEYRING:persistent:0:0
Default principal: r...@rede.com.br

Valid starting   Expires  Service principal
05/09/2017 09:45:36  05/09/2017 19:45:36  krbtgt/rede.com...@rede.com.br
renew until 05/16/2017 09:45:34

###
 cat /etc/httpd/conf.d/proxy.conf

ProxyPreserveHost Off
ProxyPass / http://localhost:631/
ProxyPassReverse / http://localhost:631/


LogLevel debug



 AuthType Kerberos
 KrbMethodNegotiate On
 AuthName "REDE.COM.BR Domain Login"
 KrbMethodK5Passwd On
 KrbAuthRealms REDE.COM.BR
 Krb5KeyTab /etc/httpd/conf.d/httpd.keytab
 KrbLocalUserMapping on
 require valid-user

#   AuthName "Informe usuario da rede"
#   AuthType Basic
#   AuthBasicProvider ldap
   AuthLDAPUrl ldap://
rede.com.br/ou=usuarios,dc=rede,dc=com,dc=br?sAMAccountName
   AuthLDAPBindDN cn=users,dc=rede,dc=com,dc=br
   AuthLDAPBindPassword XX
   Require valid-user
   LDAPReferrals Off
   
#




###

[root@delorean1 conf.d]# tail -f /var/log/httpd/error_log
[Mon May 08 17:48:42.320886 2017] [auth_kerb:error] [pid 19879] [client
10.251.14.140:55636] failed to verify krb5 credentials: Server not found in
Kerberos database, referer: http://10.1.1.75/
[Mon May 08 17:48:42.320898 2017] [auth_kerb:debug] [pid 19879]
src/mod_auth_kerb.c(1127): [client 10.251.14.140:55636]
kerb_authenticate_user_krb5pwd ret=401 user=(NULL) authtype=(NULL),
referer: http://10.1.1.75/
[Mon May 08 17:48:55.301656 2017] [authz_core:debug] [pid 19881]
mod_authz_core.c(809): [client 10.251.14.140:55638] AH01626: authorization
result of Require valid-user : denied (no authenticated user yet), referer:
http://10.1.1.75/
[Mon May 08 17:48:55.301702 2017] [authz_core:debug] [pid 19881]
mod_authz_core.c(809): [client 10.251.14.140:55638] AH01626: authorization
result of Require valid-user : denied (no authenticated user yet), referer:
http://10.1.1.75/
[Mon May 08 17:48:55.301710 2017] [authz_core:debug] [pid 19881]
mod_authz_core.c(809): [client 10.251.14.140:55638] AH01626: authorization
result of : denied (no authenticated user yet), referer:
http://10.1.1.75/
[Mon May 08 17:48:55.301736 2017] [auth_kerb:debug] [pid 19881]
src/mod_auth_kerb.c(1954): [client 10.251.14.140:55638]
kerb_authenticate_user entered with user (NULL) and auth_type Kerberos,
referer: http://10.1.1.75/
[Mon May 08 17:48:55.302037 2017] [auth_kerb:debug] [pid 19881]
src/mod_auth_kerb.c(1048): [client 10.251.14.140:55638] Using
HTTP/10.1.1.75@ as server principal for password verification, referer:
http://10.1.1.75/
[Mon May 08 17:48:55.302062 2017] [auth_kerb:debug] [pid 19881]
src/mod_auth_kerb.c(752): [client 10.251.14.140:55638] Trying to get TGT
for user rede.com.brr...@rede.com.br, referer: http://10.1.1.75/
[Mon May 08 17:48:55.306313 2017] [auth_kerb:error] [pid 19881] [client
10.251.14.140:55638] krb5_get_init_creds_password() failed: Client not
found in Kerberos database, referer: http://10.1.1.75/
[Mon May 08 17:48:55.306348 2017] [auth_kerb:debug] [pid 19881]
src/mod_auth_kerb.c(1127): [client 10.251.14.140:55638]
kerb_authenticate_user_krb5pwd ret=401 user=(NULL) authtype=(NULL),
referer: http://10.1.1.75/
-- 
<<<<<<<<<<<<<<<<<<<--->>>>>>>>>>>>>>>>>>>

< Disse-lhe Jesus: Eu sou o caminho, e a verdade e a vida; ninguém vem ao
Pai, senão por mim >
 (João 14:6)

Att.
♪ ♫  Luiz Guilherme Nunes
Fernandes  ♫ ♪

<<<<<<<<<<<<<<<<<<<--->>>>>>>>>>>>>>>>>>>


[users@httpd] Error in log, Idk problem

2017-05-03 Thread Luiz Guilherme Nunes Fernandes
Hi,
I have a problem and I do not know how to fix it,
Is problem with sub directories, I try redirect with cups. Although have
errors, I can navigate.

if i remove lines:
Order deny,allow
Deny from All

And i add no erros, and no have authentication with Active Directory
   Allow from all
   Order Deny,Allow

Attention: No erros in apache configure file, only erros in log.

My file configuration:


ProxyPreserveHost On
ProxyPass / http://10.1.1.75:631/
ProxyPassReverse / http://10.1.1.75:631/

   CacheEnable disk /
   CacheRoot /var/spool/httpd
   CacheDirLevels 5
   CacheDirLength 4
   CacheMinFileSize 1024
   CacheMaxFileSize 10485760
   CacheDefaultExpire 144000


Order deny,allow
Deny from All
# Allow from all
# Order Deny,Allow

AuthName "Informe usuario da rede LDAP"
AuthType Basic
AuthBasicProvider ldap
AuthLDAPUrl ldap://ldap/ou=ldap,dc=com,dc=br?sAMAccountName
AuthLDAPBindDN cn=UsrLDAP,cn=Users,ou=ldap,dc=com,dc=br
AuthLDAPBindPassword X
Require valid-user
Satisfy any





Error:
[Wed May 03 10:28:57.562769 2017] [access_compat:error] [pid 14722] [client
10.251.14.140:35328] AH01797: client denied by server configuration: proxy:
http://10.1.1.75:631/help/, referer: http://10.1.1.75/admin

[Wed May 03 10:47:38.214012 2017] [access_compat:error] [pid 14725] [client
10.251.14.140:36325] AH01797: client denied by server configuration: proxy:
http://10.1.1.75:631/help/, referer: http://10.1.1.75/admin
[Wed May 03 10:47:38.910394 2017] [access_compat:error] [pid 14727] [client
10.251.14.140:36328] AH01797: client denied by server configuration: proxy:
http://10.1.1.75:631/jobs/, referer: http://10.1.1.75/admin
[Wed May 03 10:47:44.151292 2017] [access_compat:error] [pid 14727] [client
10.251.14.140:36328] AH01797: client denied by server configuration: proxy:
http://10.1.1.75:631/jobs/, referer: http://10.1.1.75/jobs/
[Wed May 03 10:47:48.905561 2017] [access_compat:error] [pid 14727] [client
10.251.14.140:36328] AH01797: client denied by server configuration: proxy:
http://10.1.1.75:631/jobs/, referer: http://10.1.1.75/jobs/
[Wed May 03 10:47:51.476263 2017] [access_compat:error] [pid 14727] [client
10.251.14.140:36328] AH01797: client denied by server configuration: proxy:
http://10.1.1.75:631/help/, referer: http://10.1.1.75/jobs/
[Wed May 03 10:47:53.428483 2017] [access_compat:error] [pid 14727] [client
10.251.14.140:36328] AH01797: client denied by server configuration: proxy:
http://10.1.1.75:631/help/, referer: http://10.1.1.75/help/


-- 
<<<<<<<<<<<<<<<<<<<--->>>>>>>>>>>>>>>>>>>

< Disse-lhe Jesus: Eu sou o caminho, e a verdade e a vida; ninguém vem ao
Pai, senão por mim >
 (João 14:6)

        Att.
♪ ♫  Luiz Guilherme Nunes
Fernandes  ♫ ♪

<<<<<<<<<<<<<<<<<<<--->>>>>>>>>>>>>>>>>>>