Re: Proposed: PKI Authentication for secure web access

2010-11-21 Thread Edward Z. Yang
Hello Rob, We use SSL Client Certificates extensively here at MIT. They are quite convenient for developers: if you want to plug into the existing campus wide authentication system, just ask for a client cert and you don't need to reimplement any authentication system. Cheers, Edward

Re: mod_fcgid does not appear to bound max processes

2010-11-12 Thread Edward Z. Yang
Hello Jeff, We're running the latest released version of mod_fcgid and everything seems to be well. Thanks for getting this fixed. Cheers, Edward

Re: mod_fcgid does not appear to bound max processes

2010-10-28 Thread Edward Z. Yang
Hello, Latest trunk segfaults for us. Program received signal SIGSEGV, Segmentation fault. 0x7f37938786f8 in pm_main () from /etc/httpd/modules/mod_fcgid.so (gdb) gcore /root/core.fcgid Saved corefile /root/core.fcgid (gdb) bt #0 0x7f37938786f8 in pm_main () from /etc/httpd/modules/mod_f

Major memory leak, advice diagnosing

2010-10-27 Thread Edward Z. Yang
Hello all, We've observed that our httpd.workers on Fedora 13 have been leaking some major amounts of memory: 7343 apache20 0 2560m 1.1g 3940 S 35.1 28.6 21:06.49 httpd.worker Unfortunately, we don't have much more information than that (and the fact that the httpd.workers refuse to

Re: mod_fcgid does not appear to bound max processes

2010-10-27 Thread Edward Z. Yang
Hello Jeff, We tested the latest version of mod_fcgid in trunk (r1028094) and found that, while the total number of fcgis did not explode and overwhelm the server, that after a ramp up time new FCGIs were not being spawned and we were getting responses like: $ curl http://andersk.scripts.mit.

Re: mod_fcgid does not appear to bound max processes

2010-10-23 Thread Edward Z. Yang
Excerpts from Jeff Trawick's message of Sat Oct 23 08:29:50 -0400 2010: > Do you have some sort of mass vhost configuration, or is ServerName not set? We use mod_vhost_ldap. > Have a look at http://svn.apache.org/viewvc?view=revision&revision=939472 > > I suggest trying mod_fcgid trunk anyway, a

mod_fcgid does not appear to bound max processes

2010-10-23 Thread Edward Z. Yang
Hello all, We recently switched from Fedora 11 to Fedora 13, and were quite puzzled by the fact that our servers, despite running on all the same hardware, were being extremely hosed. We tracked down the problem to continually spawning FastCGI processes: one virtualhost had 200 of dispatch.fcgi r

Re: confirm unsubscribe from dev@httpd.apache.org

2009-05-01 Thread Edward Z. Yang
th ESMTP id > n41FEHg1009223 > for ; Fri, 1 May 2009 11:14:18 -0400 > (EDT) > Received: from localhost (EASTMAN-TWO-NINETY.MIT.EDU [18.74.6.35]) > (authenticated bits=0) > (User authenticated as ezy...@athena.mit.edu) > by outgoing.mit.edu (8.13.6/8.12.4)

Re: svn commit: r760167 - in /httpd/httpd/trunk: CHANGES server/util_script.c

2009-03-31 Thread Edward Z. Yang
On Mon, 30 Mar 2009, Roy T. Fielding wrote: Filling obscure areas of the server with stupid hacks that modify the request structure because of something the content generator *might* do is harmful to overall stability. A common error in content generators is to have gzip compression enabled glo

[PATCH] Send no response on 304/204

2009-03-23 Thread Edward Z. Yang
Hello all, A patch was attached to Bug 40953, and it would be nice if some developers could take a look at it and give some feedback and/or commit it to the tree. I've reposted the patch here for your convenience: --- server/util_script.c(revision 745696) +++ server/util_script.c