RE: [EMAIL PROTECTED] Blocking direct access to *.jsp pages through Apache2

2007-04-23 Thread Nitin Dubey
Ohh.. All the URL access in our application will always end with *.do (we are using Struts). These .do URL's internally call JSPs (executed within tomcat) that we do not want the users of the application to know. Due to security reasons we do not want users to be able to directly access the

Re: [EMAIL PROTECTED] mod_rewrite and environment variables

2007-04-23 Thread Nikolai Lusan
Hey, For anyone interested I have solved this one. Instead of using SetEnv I am doing a catch all match after enabling the rewrite engine in each vhost: RewriteEngine On RewriteRule ^(.*)$ $1 [E=SISTER_SITE:foo.a.com] Then in the conf file for the rewrites i do the matches as:

[EMAIL PROTECTED] Proxying GET and POST requests

2007-04-23 Thread wi
Hi all We have a need (driven by some load/caching issues) to split our incoming traffic so that GET requests go to one set of servers and POST requests go to another part of the farm. Unfortunately, there's no simple URI based way of identifying which is which, so I'm wondering whether there is

[EMAIL PROTECTED] using apxs to make and install modules.

2007-04-23 Thread Pranav Choudhary
Hi I have successfully compiled apache 2.0.59 with --enable-do. I used the DESTDIR=/path/to/install option while doing make install. Now i want to use apxs to make and install a module, but it looks for the config_vars.mk in the wrong directory (does not consider DESTDIR). Further, all the

[EMAIL PROTECTED] Logging problem using mod_proxy and UsePreserveHost

2007-04-23 Thread Foster, Stephen \(ASPIRE\)
Hi all, i am utilising mod_proxy to serve locally held static content but to proxy any other requests to a different service. This works fine however i am having problems with the logging of requests. I have set up my logging format to pick up the client IP address from the headers as the

Re: [EMAIL PROTECTED] LDAP / Active Directory Authentication problem.

2007-04-23 Thread Christophe BOULAIN
Hi Anybody has an idea for my problem ? I tried ti sniff ldap packets, and I noticed that apache does not encode the password in UTF-8 : a 'é' in password is encode E9 (iso code), and when I try the same thing with LDAPSEARCH, the same letter is encoded C3E9 (utf-8 code) Is this relative to

Re: [EMAIL PROTECTED] mod_proxy_balancer

2007-04-23 Thread Christian
Hi Ryan, thanks for your response. yes, jvmRoute is already configured and running. my problem (or the one of the developers writing the application) is, that there are some checks performed on every single request. The result of these checks are needed for the next request (with different

[EMAIL PROTECTED] My apache server attacked

2007-04-23 Thread Jacky
Dear all, In our production environment, we have 2 apache servers firewalled to accept port 80 and 443 only. These apache servers will load balanced to 2 of our resin servlet container. Recently we checked from our logs and verified that there are certain unwelcomed individuals that did a

[EMAIL PROTECTED] Apache as a Proxy

2007-04-23 Thread Luis Moreira (ESI-GSQP)
Hints, anyone ??? -Original Message- From: Luis Moreira (ESI-GSQP) [mailto:[EMAIL PROTECTED] Sent: sexta-feira, 20 de Abril de 2007 13:11 To: users@httpd.apache.org Subject: [EMAIL PROTECTED] Apache 1.3 as a Proxy Hi I have been using Apache for quite a while, but only as a mere web

[EMAIL PROTECTED] Protecting a specific URL with Apache / Jabber server

2007-04-23 Thread Mário Gamito
Hi, I have this server with Apache 1.3.37, with mod_proxy. Let's say http://www.domain.foo In the same server, I have a Jabber server that has an HTTP admin console in ports 9090 (HTTP) and 9091 (HTTPS). Is it possible with apache to protect the URLs with those ports like if it were done with

Re: [EMAIL PROTECTED] Protecting a specific URL with Apache / Jabber server

2007-04-23 Thread Mário Gamito
Hi, That would probably be completely dependent of the functions in your Jabber server, since I assume that is responsible for serving those ports? If it uses Apache as it's web interface, just use .htaccess as normal. The Jabber server has no function for that and doesn't use Apache's web

Re: [EMAIL PROTECTED] Protecting a specific URL with Apache / Jabber server

2007-04-23 Thread Peter Hinse
Mário Gamito wrote: That would probably be completely dependent of the functions in your Jabber server, since I assume that is responsible for serving those ports? If it uses Apache as it's web interface, just use .htaccess as normal. The Jabber server has no function for that and doesn't

Re: [EMAIL PROTECTED] Blocking direct access to *.jsp pages through Apache2

2007-04-23 Thread Pid
Nitin Dubey wrote: Ohh.. All the URL access in our application will always end with *.do (we are using Struts). These .do URL's internally call JSPs (executed within tomcat) that we do not want the users of the application to know. Due to security reasons we do not want users to be able to

[EMAIL PROTECTED] resume disable

2007-04-23 Thread Subredu Manuel
Hi, I want to disable the resume support on our apache server. I read the documentation but I didn't find anything in the documentation. Can you please point me to the right direction ? Our apache server version is 2.2.x - The

Re: [EMAIL PROTECTED] Protecting a specific URL with Apache / Jabber server

2007-04-23 Thread Mário Gamito
Hi, Try to bind the Jabber HTTP interface to localhost and use apache as proxy. Then you can use all kind of restrictions in your httpd.conf. I can't bind the Jabber HTTP to localhost. Any ideas ? I'm no Apache guru :( Warm Regards, Mário Gamito

Re: [EMAIL PROTECTED] Proxying GET and POST requests

2007-04-23 Thread Pid
wi wrote: Hi all We have a need (driven by some load/caching issues) to split our incoming traffic so that GET requests go to one set of servers and POST requests go to another part of the farm. Unfortunately, there's no simple URI based way of identifying which is which, so I'm wondering

Re: [EMAIL PROTECTED] Apache as a Proxy

2007-04-23 Thread Gaël Lams
Which version of httpd? Did you load proxy_http? Regards, Gaël

Re: [EMAIL PROTECTED] Protecting a specific URL with Apache / Jabber server

2007-04-23 Thread Peter Hinse
Mário Gamito wrote: Try to bind the Jabber HTTP interface to localhost and use apache as proxy. Then you can use all kind of restrictions in your httpd.conf. I can't bind the Jabber HTTP to localhost. Any ideas ? I'm no Apache guru :( Then why don't you use mod_proxy_http and redirect

RE: [EMAIL PROTECTED] Apache as a Proxy

2007-04-23 Thread Luis Moreira (ESI-GSQP)
Thanks !! Apache version 1.3.23 (old, I know) The proxy module is loaded, and the proxy directives too. The question is : is there something missing ? If on a client I point to this machine, on port 80, and try to hit a URL, I get this error Proxy Error The proxy server could not handle the

Re: [EMAIL PROTECTED] My apache server attacked

2007-04-23 Thread Yannick Mercier
You may want to take a look at mod_evasive, depending on at what rate the mass posting took place, this could have blocked it On 4/23/07, Jacky [EMAIL PROTECTED] wrote: Dear all, In our production environment, we have 2 apache servers firewalled to accept port 80 and 443 only. These apache

RE: [EMAIL PROTECTED] Blocking direct access to *.jsp pages through Apache2

2007-04-23 Thread Nitin Dubey
NitinMy comments below.. -Original Message- From: Pid [mailto:[EMAIL PROTECTED] Sent: Monday, April 23, 2007 4:28 PM To: users@httpd.apache.org Subject: Re: [EMAIL PROTECTED] Blocking direct access to *.jsp pages through Apache2 Nitin Dubey wrote: Ohh.. All the URL access in our

Re: [EMAIL PROTECTED] Blocking direct access to *.jsp pages through Apache2

2007-04-23 Thread Pid
Nitin Dubey wrote: NitinMy comments below.. -Original Message- From: Pid [mailto:[EMAIL PROTECTED] Sent: Monday, April 23, 2007 4:28 PM To: users@httpd.apache.org Subject: Re: [EMAIL PROTECTED] Blocking direct access to *.jsp pages through Apache2 Nitin Dubey wrote: Ohh.. All

Re: [EMAIL PROTECTED] My apache server attacked

2007-04-23 Thread Sander Temme
On Apr 23, 2007, at 2:31 AM, Jacky wrote: In our production environment, we have 2 apache servers firewalled to accept port 80 and 443 only. These apache servers will load balanced to 2 of our resin servlet container. Recently we checked from our logs and verified that there are certain

[EMAIL PROTECTED] any luck using shared memory for mod_ssl SSLSessionCache ?

2007-04-23 Thread Yannick Mercier
I wonder if anyone is succesfully using shm for mod_ssl SessionCache I dont.. under Solaris8 with apache 2.2 when I set SSLSessionCache to shm:/opt/apache/logs/ssl_scache(512000) or to shmcb:/opt/apache/logs/ssl_scache(512000) httpd childs dump core with this output to the error_log when

Re: [EMAIL PROTECTED] any luck using shared memory for mod_ssl SSLSessionCache ?

2007-04-23 Thread Sander Temme
On Apr 23, 2007, at 8:12 AM, Yannick Mercier wrote: [Mon Mar 19 08:45:28 2007] [notice] child pid 27827 exit signal Bus error (10), possible coredump in /opt/apache If the httpd child can write to /opt/apache, you're likely to find a core file there. We'd be hugely interested in a

Re: [EMAIL PROTECTED] any luck using shared memory for mod_ssl SSLSessionCache ?

2007-04-23 Thread Yannick Mercier
Yep Ive got some core files in /var/core, one for every time a child crashes my SSLMutex is set to pthreads ive tried different settings for SSLMutex in combination with different settings for SSLSessionCache and I concluded that problems happen when SSLSessionCache is set to shm independently

[EMAIL PROTECTED] send mmap timed out

2007-04-23 Thread Martijn
Hello. This is a bit of a long shot. I've done a bit of Google-search, but that only gives a small number of hits, most of which are unanswered questions on mailing lists or message boards. Our web server occasionally gives the following 'errors' in the error_log file: [Mon Apr 23 12:41:40

Re: [EMAIL PROTECTED] Apache 2.2.23 with IPV6

2007-04-23 Thread William A. Rowe, Jr.
SAVERIO FERRARO wrote: I'm tring to work with Apache 2.2.23 on IPv6, on Windows XP. Somone could help me? I doubt it, there's a 2.2.2 and 2.2.3 version but nobody here's ever seen 2.2.23. I have just tried to replace IPv4 Address with IPv6 address in httpd.conf but doesn't work! You

Re: [EMAIL PROTECTED] send mmap timed out

2007-04-23 Thread Joshua Slive
On 4/23/07, Martijn [EMAIL PROTECTED] wrote: [Mon Apr 23 12:41:40 2007] [info] [client 12.34.56.78] send mmap timed out and, more frequently: [Mon Apr 23 12:41:40 2007] [info] [client 12.34.56.78] (32)Broken pipe: client stopped connection before send mmap completed This usually isn't a

Re: [EMAIL PROTECTED] resume disable

2007-04-23 Thread Joshua Slive
On 4/23/07, Subredu Manuel [EMAIL PROTECTED] wrote: Hi, I want to disable the resume support on our apache server. I read the documentation but I didn't find anything in the documentation. Can you please point me to the right direction ? Our apache server version is 2.2.x This may work:

[EMAIL PROTECTED] Problem with mod_proxy_ajp with apache2.2+tomcat5.5

2007-04-23 Thread aordin
Hi to all! i'm newbie and this is my first question. I have one problem when go to one link, my problem is something put a duplicated component into the url, exemple: The link url is: http://www.myportal.com/myapp/portal/intranet and, when i click on it, the browser show this error: http 404

Re: [EMAIL PROTECTED] send mmap timed out

2007-04-23 Thread Martijn
In all likelihood, those messages are only tangentially related to your problem. They simply indicate that the client end of the connection disappeared, which is a perfectly normal thing for a busy webserver. The 206 responses are probably caused by a very impolite download accelerator making

Re: [EMAIL PROTECTED] send mmap timed out

2007-04-23 Thread Joshua Slive
On 4/23/07, Martijn [EMAIL PROTECTED] wrote: In all likelihood, those messages are only tangentially related to your problem. They simply indicate that the client end of the connection disappeared, which is a perfectly normal thing for a busy webserver. The 206 responses are probably caused

[EMAIL PROTECTED] Apache2.2.4 - LDAP

2007-04-23 Thread Atluri, Vamsi
Hi All, I finally got my Apache2.2.4 installation to talk to LDAP (I think) Ive encountered the following error - And was hoping it might ring a bell for someone - I have also included my configuration from httpd.conf [Mon Apr 23 13:37:34 2007] [notice] Child 3880: Starting thread to

[EMAIL PROTECTED] IE works, Mozilla doesn't - no clue why!

2007-04-23 Thread Richard Dunne
I am executing a php script via an xmlhttprequest with apache2. I have gone through readystates 1,2,3,4 and status 200 in IE, but in Mozilla, I am only getting readystate 1. Does anyone know of any conflict with apache2/ajax/mozilla. I tried disabling the firewall, but that did not work

RE: [EMAIL PROTECTED] Apache2.2.4 - LDAP

2007-04-23 Thread Atluri, Vamsi
Hey Thanks - that totally got me to my hopefully last problem - Any idea on the below ? [Mon Apr 23 14:45:21 2007] [warn] [client 127.0.0.1] [2124] auth_ldap authenticate: user X\\VTLU authentication failed; URI / [LDAP: ldap_simple_bind_s() failed][Invalid Credentials] [Mon Apr 23 14:45:21

Re: [EMAIL PROTECTED] Apache2.2.4 - LDAP

2007-04-23 Thread Sascha Kersken
Hi again, Hey Thanks - that totally got me to my hopefully last problem - Any idea on the below ? [Mon Apr 23 14:45:21 2007] [warn] [client 127.0.0.1] [2124] auth_ldap authenticate: user X\\VTLU authentication failed; URI / [LDAP: ldap_simple_bind_s() failed][Invalid Credentials] [Mon Apr

Re: [EMAIL PROTECTED] any luck using shared memory for mod_ssl SSLSessionCache ?

2007-04-23 Thread Serge Dubrouski
Works fine for me. Apache 2.2.3 compiled with gcc 2.95.3 under Solaris 8. On 4/23/07, Yannick Mercier [EMAIL PROTECTED] wrote: I wonder if anyone is succesfully using shm for mod_ssl SessionCache I dont.. under Solaris8 with apache 2.2 when I set SSLSessionCache to

[EMAIL PROTECTED] Segmentation fault in Apache

2007-04-23 Thread Diego F. Fernandez
It would be thankful to who can help me with these errors that leave in log of apache. [Mon Apr 23 11:35:52 2007] [notice] child pid 26936 exit signal Segmentation fault (11) *** glibc detected *** /usr/sbin/httpd: corrupted double-linked list: 0x097712d8 *** [Mon Apr 23 11:36:21 2007] [notice]

RE: [EMAIL PROTECTED] Apache2.2.4 - LDAP

2007-04-23 Thread Atluri, Vamsi
Hi - Thank you Sascha for your help. I am still dealing with an issue - but I think that I need more info from my people managing the ldap server I did have one more question, im not to familiar with it, or how exactly to word it. But I am also looking to incorporate NTLM authentication, this

[EMAIL PROTECTED] Mod_rewrite RewriteRules and Error log problem

2007-04-23 Thread Lori Sutton
In general, does anyone know why I would keep getting the following error in my Apache error log when I hit a URL that has some mod_rewrite RewriteRules applied to it? [Mon Apr 23 15:14:36 2007] [error] Can't parse URI string ''. Skipping... I ultimately get to the URL I want to get to fine.

Re: [EMAIL PROTECTED] Mod_rewrite RewriteRules and Error log problem

2007-04-23 Thread William A. Rowe, Jr.
Lori Sutton wrote: [Mon Apr 23 15:14:36 2007] [error] Can't parse URI string ''. Skipping... One of your rewrite rules collapsed the result to nothing at all, which mod_rewrite refuses to continue processing. - The official

Re: [EMAIL PROTECTED] hide alternate service ports using mod_proxy

2007-04-23 Thread DJ Lucas
DJ Lucas wrote: When going to 'http://www.example.com/webmail' I get the text, but not the pictures. When I add the trailing slash and it seems to work as expected. As it is now, I need only 80/443 open. However, upon logging in, I receive a Not Found error: