[EMAIL PROTECTED] Virtual hosts and mod_rewrite

2008-09-08 Thread Jason Pruim
Good morning everyone, I am breaking into new territory in my knowledge, and I've hit a bit of a speed bump that searching and trial/error has not been able to fix for me. Here's some details: I am running Apache 1.3 PHP 5.2 I have setup a virtual host... http://purl.schreurprinting.com/ja

Re: [EMAIL PROTECTED] Indexes and Authentication

2008-09-08 Thread Staf Wagemakers
On Thu, Sep 4, 2008 at 9:47 PM, Justin Pasher <[EMAIL PROTECTED]> wrote: > Andrew Hall wrote: >> >> Hi there. >> >> I'd like to allow directory indexes for certain clients but not for >> others. >> >> Specifically to allow our internal network to view them but external >> connections to be refused.

Re: [EMAIL PROTECTED] Virtual hosts and mod_rewrite

2008-09-08 Thread Eric Covener
On Mon, Sep 8, 2008 at 6:09 AM, Jason Pruim <[EMAIL PROTECTED]> wrote: > Locally it works great.. Once.. As soon as the web page is loaded and you > attempt to refresh or go to a different page, it says "Forbidden you do not > have permission to access /jasonpruim112 on this server" Is there an

Re: [EMAIL PROTECTED] finding the cause of a hung apache with 500+ child processes

2008-09-08 Thread Eric Covener
On Mon, Sep 8, 2008 at 7:00 AM, Markus Mayer <[EMAIL PROTECTED]> wrote: > Does anyone have any suggestions as to how I can pinpoint this problem? Is > there any way I can log requests before they are fully served by apache, as > this might help the next time this shows up. Run pstack against all

Re: [EMAIL PROTECTED] HTTPS and SSL certificate issue + PKIX = javax.net.ssl.SSLHandshakeException

2008-09-08 Thread Eric Covener
On Mon, Sep 8, 2008 at 2:32 AM, sh_santosh <[EMAIL PROTECTED]> wrote: > > Dear all, > > I am getting this exception while invoking(web services) or accessing > through java code. > > The URL which i try to access is secured using Certificate. > Please see the exception - > > javax.net.ssl.SSLHandsh

Re: [EMAIL PROTECTED] Virtual hosts and mod_rewrite

2008-09-08 Thread Jason Pruim
On Sep 8, 2008, at 7:32 AM, Jason Pruim wrote: On Sep 8, 2008, at 7:12 AM, Eric Covener wrote: On Mon, Sep 8, 2008 at 6:09 AM, Jason Pruim <[EMAIL PROTECTED]> wrote: Locally it works great.. Once.. As soon as the web page is loaded and you attempt to refresh or go to a different page,

Re: [EMAIL PROTECTED] Virtual hosts and mod_rewrite

2008-09-08 Thread Jason Pruim
On Sep 8, 2008, at 7:12 AM, Eric Covener wrote: On Mon, Sep 8, 2008 at 6:09 AM, Jason Pruim <[EMAIL PROTECTED]> wrote: Locally it works great.. Once.. As soon as the web page is loaded and you attempt to refresh or go to a different page, it says "Forbidden you do not have permission t

[EMAIL PROTECTED] finding the cause of a hung apache with 500+ child processes

2008-09-08 Thread Markus Mayer
Hi, I have an apache 2.0.61 with PHP 5.2.6 and the sunosin patches on Solaris 10, Sun V440 with 4 x 1.6GHz CPU's, 16Gb ram and 16Gb swap. once or twice a year it hangs with hundreds of child processes. The serverlimit is set to 512, and all the child processes are busy with some request that

[EMAIL PROTECTED] Dual authN path with client certs and ldap

2008-09-08 Thread jblack4
Not sure if this is possible with a single apache server instance, so I'm curious if anyone has done this. We want apache to be configured to be single public entry point into our private web services. Additionally, we want users to be able to login based on a user/pass or a client certificate.

Re: [EMAIL PROTECTED] "Not a directory" errors with mod_disk_cache

2008-09-08 Thread Manik Taneja
We found the cause of this problem. It seems that the directory creation was failing when the mod_disk_cache was trying to create the subdirectory structure to store the header and data content . The reason this failed was because mod_disk_cache had already created a large number of directori

Re: [EMAIL PROTECTED] Query on Apache timers

2008-09-08 Thread charles reid
You want the Timeout directive (documentation covers it here: http://httpd.apache.org/docs/2.0/mod/core.html). It may already be in your httpd.conf file, the default value is 300 (seconds). Charles On Mon, Sep 8, 2008 at 12:30 AM, Arnab Ganguly <[EMAIL PROTECTED]> wrote: > Hi All, > Just wante

[EMAIL PROTECTED] Dual authN path with client certs and ldap

2008-09-08 Thread thomas.black
Not sure if this is possible with a single apache server instance, so I'm curious if anyone has done this. We want apache to be configured to be single public entry point into our private web services. Additionally, we want users to be able to login based on a user/pass or a client certificate. T

[EMAIL PROTECTED] Re: apache best practice

2008-09-08 Thread Jay Jesus Amorin
Hi, Can anyone help me on apache best practice? What is the recommended permission of the DocumentRoot? What is the recommended permission on the files and directories within the DocumentRoot? BTW my application is running on LAMP. Current permission settings: 600 for files 700 for directorie

[EMAIL PROTECTED] Reject request with incorrect HOST header...

2008-09-08 Thread jdrnb007-0
Hello, Have come across a security issue and one of the reason is Apache allowing serving of request with incorrect HOST header. Question in short: Is there an Apache Directive which will reject request with incorrect or missing HOST header ? I mean if my Apache is serving one.xyz.com, rejec