Re: [us...@httpd] Can you go outside the .htaccess directory with Rewrite Rule?

2009-02-27 Thread Sean DeNigris
On Fri, Feb 27, 2009 at 4:27 PM, Sean DeNigris wrote: > If I put a .htaccess file in my webroot with the following rule: > RewriteRule ^(.*)$ /cgi-bin/scriptname.cgi?action=$1 > > Can I specify a script file outside the directory with the .htaccess file in > it (i.e. outside the webroot)? Y

Re: [us...@httpd] Can you go outside the .htaccess directory with Rewrite Rule?

2009-02-27 Thread Eric Covener
On Fri, Feb 27, 2009 at 4:27 PM, Sean DeNigris wrote: > If I put a .htaccess file in my webroot with the following rule: > RewriteRule ^(.*)$ /cgi-bin/scriptname.cgi?action=$1 > > Can I specify a script file outside the directory with the .htaccess file in > it (i.e. outside the webroot)? > > Exam

RE: [us...@httpd] Can you go outside the .htaccess directory with Rewrite Rule?

2009-02-27 Thread Anthony J. Biacco
I think you can if you used a ScriptAlias or something similar in your conf to map /cgi-bin to a directory of your choosing. -Tony --- Manager, IT Operations Format Dynamics, Inc. 303-573-1800x27 abia...@formatdynamics.com http://www.formatdynamics.com -Original Messa

[us...@httpd] exclude errorDocument from authentication

2009-02-27 Thread jblack4
Given that I have a locked down with authentication and that I want a custom "ErrorDocument 401 /register.html", how can I exclude the /register.html page from the authentication location pattern? -- View this message in context: http://www.nabble.com/exclude-errorDocument-from-authentication-t

[us...@httpd] Can you go outside the .htaccess directory with Rewrite Rule?

2009-02-27 Thread Sean DeNigris
If I put a .htaccess file in my webroot with the following rule: RewriteRule ^(.*)$ /cgi-bin/scriptname.cgi?action=$1 Can I specify a script file outside the directory with the .htaccess file in it (i.e. outside the webroot)? Example: /home/myname/public_html/.htaccess (see above) /home/mynam

Re: [us...@httpd] Re: Max-Forwards has reached zero

2009-02-27 Thread Nick Kew
Devon Harding wrote: Anyone? On Thu, Feb 26, 2009 at 11:23 AM, Devon Harding > wrote: All of a sudden, my Apache server stopped proxying request. On the browser, I get the following error. What causes this? Max-Forwards has reached zero - proxy loo

[us...@httpd] Re: Max-Forwards has reached zero

2009-02-27 Thread Devon Harding
Anyone? On Thu, Feb 26, 2009 at 11:23 AM, Devon Harding wrote: > All of a sudden, my Apache server stopped proxying request. On the > browser, I get the following error. What causes this? > Max-Forwards has reached zero - proxy loop? > * > * > -Devon >

RE: [us...@httpd] Alias/authentication precedence

2009-02-27 Thread Anthony J. Biacco
I'm no expert, but I think.. 1. No 2. No 3. NA 4. What you're missing is that the url path in ScriptAlias matches from the start of the uri..it's not a substring match. For the authentication, I would THINK that the Location authentication would take effect, yes. For the script alias thing, you

[us...@httpd] Authentication Stuck in a loop!

2009-02-27 Thread Griffith, Michael *
Hello Fellow List Readers ... I'm not sure if this is an Apache problem or CAS problem, or possibly a problem with my application Acegi configuration. I'm hoping someone can give me a shove in the right direction. We have a CAS server 3.3.1 running under Jboss 4.0.2. The CAS Server is config

Re: [us...@httpd] Re: Confused about LDAP authentication with Active Directory

2009-02-27 Thread Eric Covener
On Fri, Feb 27, 2009 at 12:19 PM, Ed Avis wrote: > Eric Covener gmail.com> writes: > >>>[Fri Feb 27 13:16:30 2009] [warn] [client 192.168.186.32] [2890] auth_ldap >>>authenticate: user eda authentication failed; URI >>>/cgi-bin/test_auth/index.html >>>[ldap_search_ext_s() for user failed][Operati

[us...@httpd] Re: Confused about LDAP authentication with Active Directory

2009-02-27 Thread Ed Avis
André Warnier ice-sa.com> writes: >Now, to the OP : since you can do that with Perl, won't you consider >writing your own Apache/mod_perl LDAP authentication module, where you >can do exactly the same as you did in your test program ? Yes that thought crossed my mind. There are four ways I ca

[us...@httpd] Re: Confused about LDAP authentication with Active Directory

2009-02-27 Thread Ed Avis
Eric Covener gmail.com> writes: >>[Fri Feb 27 13:16:30 2009] [warn] [client 192.168.186.32] [2890] auth_ldap >>authenticate: user eda authentication failed; URI >>/cgi-bin/test_auth/index.html >>[ldap_search_ext_s() for user failed][Operations error] >If it made it out onto the wire, wireshark b

[us...@httpd] Alias/authentication precedence

2009-02-27 Thread André Warnier
Hi. Apache 2.2 Suppose I have a VirtualHost configured (partially) such : DocumentRoot /var/www/site1/docs ScriptAlias /cgi-bin/ /var/www/site1/cgi-bin/ Order Allow,Deny Allow from all SetHandler xxx ... # Note : in the above directory is physically stored a script called "myscrip

Re: [us...@httpd] Re: Confused about LDAP authentication with Active Directory

2009-02-27 Thread Krist van Besien
On Fri, Feb 27, 2009 at 3:45 PM, André Warnier wrote: > Now, to the OP : since you can do that with Perl, won't you consider writing > your own Apache/mod_perl LDAP authentication module, where you can do > exactly the same as you did in your test program ? > There are some stubs already availabl

Re: [us...@httpd] Re: Confused about LDAP authentication with Active Directory

2009-02-27 Thread André Warnier
Marc Patermann wrote: Ed Avis schrieb: Marc Patermann ofd-sth.niedersachsen.de> writes: [...] This spits out details of every user in the domain, with the sAMAccountName being the user's login. You were lucky. :) No, he was just using Perl, and the magical CPAN library. Great stuff for

Re: [us...@httpd] Confused about LDAP authentication with Active Directory

2009-02-27 Thread Eric Covener
On Fri, Feb 27, 2009 at 9:30 AM, Mark H. Wood wrote: > On Thu, Feb 26, 2009 at 01:59:13PM -0500, Eric Covener wrote: >> In LDAPv3, the bind is optional. > > However, without a non-anonymous bind, ADS will cheerfully accept your > connection and as cheerfully return no information, regardless the >

Re: [us...@httpd] Re: Confused about LDAP authentication with Active Directory

2009-02-27 Thread Marc Patermann
Ed Avis schrieb: Marc Patermann ofd-sth.niedersachsen.de> writes: You mean the DN contains a component with a space in it!? ou=WCL user,dc=foo,dc=bar Ah... 'ou'... I was using 'cn'. This was only an example. Actually I know nothing about the DIT in AD. :) The corrected search query works

Re: [us...@httpd] Confused about LDAP authentication with Active Directory

2009-02-27 Thread Mark H. Wood
On Thu, Feb 26, 2009 at 01:59:13PM -0500, Eric Covener wrote: > In LDAPv3, the bind is optional. However, without a non-anonymous bind, ADS will cheerfully accept your connection and as cheerfully return no information, regardless the validity of your query. To actually get results out of ADS you

Re: [us...@httpd] Re: Confused about LDAP authentication with Active Directory

2009-02-27 Thread Mark H. Wood
On Fri, Feb 27, 2009 at 12:18:14PM +, Ed Avis wrote: > Davide Bianchi walterisookeensufferukker.nl> writes: > >>I don't know what the extra '?cn?sub' at the end of the query string is for > > > >"cn" means that the attibute to use to login is the CN = common name, > > Surely that's not what I

Re: [us...@httpd] Re: Confused about LDAP authentication with Active Directory

2009-02-27 Thread Eric Covener
On Fri, Feb 27, 2009 at 8:21 AM, Ed Avis wrote: > Upgrading to Apache 2.2.11 fixes the segfault.  Instead now I get an error_log > entry: > > [Fri Feb 27 13:16:30 2009] [warn] [client 192.168.186.32] [2890] auth_ldap > authenticate: user eda authentication failed; URI > /cgi-bin/test_auth/index.h

Re: [us...@httpd] authnz_ldap_module: [Bad search filter] error

2009-02-27 Thread Anton Yakimov
Oh, I will create a report, thanks for support! ps removed NONE - same error.. 2009/2/27 Eric Covener : > On Thu, Feb 26, 2009 at 9:13 AM, Anton Yakimov > wrote: > >>    AuthLDAPUrl                 "ldap://server.three.two.one:389/dc=three, >> dc=two, >> dc=one?sAMAccountName?sub?(objectClass=*

[us...@httpd] Re: Confused about LDAP authentication with Active Directory

2009-02-27 Thread Ed Avis
Upgrading to Apache 2.2.11 fixes the segfault. Instead now I get an error_log entry: [Fri Feb 27 13:16:30 2009] [warn] [client 192.168.186.32] [2890] auth_ldap authenticate: user eda authentication failed; URI /cgi-bin/test_auth/index.html [ldap_search_ext_s() for user failed][Operations error]

[us...@httpd] Re: Confused about LDAP authentication with Active Directory

2009-02-27 Thread Ed Avis
Ed Avis waniasset.com> writes: >Hmm, so what Apache does is first of all bind to the directory server, then do >a >search using the query string which returns the 'cn' (common name). Finally it >constructs a distinguished name using this value of 'cn' and the password >supplied by the user. I

[us...@httpd] Re: Confused about LDAP authentication with Active Directory

2009-02-27 Thread Ed Avis
Davide Bianchi walterisookeensufferukker.nl> writes: I don't know what the extra '?cn?sub' at the end of the query string is for >Heee... sorry (not enough coffee in my bloodstream), that is the >attribute that is returned Hmm, so what Apache does is first of all bind to the directory s

Re: [us...@httpd] authnz_ldap_module: [Bad search filter] error

2009-02-27 Thread Eric Covener
On Thu, Feb 26, 2009 at 9:13 AM, Anton Yakimov wrote: >    AuthLDAPUrl                 "ldap://server.three.two.one:389/dc=three, > dc=two, > dc=one?sAMAccountName?sub?(objectClass=*) NONE" Why is "NONE" inside the quotes? -- Eric Covener cove...@gmail.com ---

Re: [us...@httpd] authnz_ldap_module: [Bad search filter] error

2009-02-27 Thread Eric Covener
On Fri, Feb 27, 2009 at 6:45 AM, Anton Yakimov wrote: > Hi all, > > I have also tried apache+ldap on other network host and result is the same: > [ldap_search_ext_s() for user failed][Bad search filter] > > Maybe I can contact authnz_ldap module developer/maintainer? > Can you help me to find his|

Re: [us...@httpd] Re: Confused about LDAP authentication with Active Directory

2009-02-27 Thread Davide Bianchi
Ed Avis wrote: > Davide Bianchi walterisookeensufferukker.nl> writes: > >>> I don't know what the extra '?cn?sub' at the end of the query string is for >> "cn" means that the attibute to use to login is the CN = common name, Heee... sorry (not enough coffee in my bloodstream), that is the at

[us...@httpd] Re: Confused about LDAP authentication with Active Directory

2009-02-27 Thread Ed Avis
I installed debugging symbols and got a full backtrace. The top stack frame is #0 uldap_connection_init (r=0xb715d830, ldc=0xb7f086e0) at /usr/src/debug/httpd-2.2.10/modules/ldap/util_ldap.c:261 rc = ldap_option = 0 version = 3 result = (apr_ldap_err_t *) 0x0 timeOut = {

Re: [us...@httpd] ajp mod_jk problem

2009-02-27 Thread Halil Ağın
Thanks for the replies. I solved the problem. There was no entry in server.xml(of tomcat), i put the entries. Then, i follow directives of the Anthony. In virtual host, there was JkMount command, i changed its place.. But I use hostname(no ip) in workers file. Now, it works. thank you very much.

[us...@httpd] Re: Confused about LDAP authentication with Active Directory

2009-02-27 Thread Ed Avis
Davide Bianchi walterisookeensufferukker.nl> writes: >>I don't know what the extra '?cn?sub' at the end of the query string is for > >"cn" means that the attibute to use to login is the CN = common name, Surely that's not what I want? The username is in the sAMAccountName attribute. >>[Fri Feb

Re: [us...@httpd] Version of SSL Apache represents...

2009-02-27 Thread jmc
--- Tony Anecito [Thu, Feb 26, 2009 at 08:57:37PM -0800]: --- > Yes. I mean SSLv2 or SSLv3 a higher level approach would be to check SSLCipherSuite and SSLProtocol in httpd.con - The official User-To-User support forum of the Ap

Re: [us...@httpd] Re: Confused about LDAP authentication with Active Directory

2009-02-27 Thread Davide Bianchi
Ed Avis wrote: > I don't know what the extra '?cn?sub' at the end of the query string is for "cn" means that the attibute to use to login is the CN = common name, "sub" means that the query will return all the SUB-entries (as opposed to 'one' that returns max 1 entry). > [Fri Feb 27 11:26:09 2009

Re: [us...@httpd] authnz_ldap_module: [Bad search filter] error

2009-02-27 Thread Anton Yakimov
Hi all, I have also tried apache+ldap on other network host and result is the same: [ldap_search_ext_s() for user failed][Bad search filter] Maybe I can contact authnz_ldap module developer/maintainer? Can you help me to find his|her contacts? Thanks in advance! 2009/2/27 Anton Yakimov : > Hell

[us...@httpd] Re: Confused about LDAP authentication with Active Directory

2009-02-27 Thread Ed Avis
Marc Patermann ofd-sth.niedersachsen.de> writes: >You mean the DN contains a component with a space in it!? >ou=WCL user,dc=foo,dc=bar Ah... 'ou'... I was using 'cn'. The corrected search query works, as demonstrated by the following perl script: #!/usr/bin/perl die "usage: $0 host dom

RE: [us...@httpd] Range-Request

2009-02-27 Thread Jitesh Shah
Thanks Anthony! :) Jitesh On Thu, 2009-02-26 at 08:55 -0700, Anthony J. Biacco wrote: > “Header unset Accept-Ranges” to not send it or > > “Header set Accept-Ranges: none” to specifically set it to none > > > > Fyi, mod_headers module must be loaded. > > > > -Tony > >

Re: [us...@httpd] Re: Confused about LDAP authentication with Active Directory

2009-02-27 Thread Marc Patermann
Ed Avis schrieb: This means that to get the current code working, I must find the right LDAP search expression to locate users in the Directory. Yes. This might be complicated by the fact that they are under 'WCL users' which contains a space character. You mean the DN contains a component