[us...@httpd] activating xml2enc makes client getting HTML-Page take very long

2009-11-10 Thread Martin Gerdes
Alright, xml2enc works, does not crash, and correctly translates UTF8 back to ISO-8859-1 after it was converted to UTF-8 by mod_proxy_html. However, activating that translation back to ISO-8859-1 makes the whole process take up a lot of time, and I have no idea why, so I am asking for ideas.

[us...@httpd] Question: Different server behind path

2009-11-10 Thread Martijn Moret
Hi all, I have quitte some Apache httpd experience but I am not sure how to solve this question from my company: We have a corporate site at: http://www.example.com We are implementing a new webshop and our Marketing dep. decided om: http://www.example.com/order Due to the nature of the

Re: [us...@httpd] activating xml2enc makes client getting HTML-Page take very long

2009-11-10 Thread Nick Kew
On 10 Nov 2009, at 08:56, Martin Gerdes wrote: First, how slow is slow? Time from pushing the send button until the new webpage is loaded rises from 10.6 to 103 seconds. 10.6 is already horrendously slow (unless perhaps it's a 20-year-old PC), which leads me to wonder what you're doing.

[us...@httpd] apache configuration: always go to parent directory

2009-11-10 Thread J. Bakshi
Hello, I have configured a personal work-space for mine in apache where I can experiment with different sites and here is the configuration Alias /personal/joydeep /var/personal_work_area/joydeep DocumentRoot /var/personal_work_area/joydeep/

Re: [us...@httpd] Question: Different server behind path

2009-11-10 Thread Mark Watts
On Tue, 2009-11-10 at 10:28 +0100, Martijn Moret wrote: Hi all, I have quitte some Apache httpd experience but I am not sure how to solve this question from my company: We have a corporate site at: http://www.example.com We are implementing a new webshop and our Marketing dep. decided

[us...@httpd] best way to fix the tls renegotiation problem?

2009-11-10 Thread Torsten Foertsch
Hi, what is the best way to fix the tls renegotiation problem? On my site some locations require renegotiation to get a client cert. But that can simply be moved into the vhost config. I believe this is not sufficient, is it? Is OpenSSL 0.9.8l sufficient? Or do I have to patch apache as well?

[us...@httpd] 2.2.13 mod_proxy: ttl not working?

2009-11-10 Thread Oliver Schoett
It appears that the Apache 2.2.13 connection timeout (ttl) does not work. My client is using an Apache 2.2.13 reverse proxy to perform encryption, compression and persistent connections with a remote site. Every couple minutes, the following error appears in the log: [Tue Nov 10 10:47:52

Re: [us...@httpd] activating xml2enc makes client getting HTML-Page take very long

2009-11-10 Thread Martin Gerdes
On 10 Nov 2009, at 08:56, Martin Gerdes wrote: First, how slow is slow? Time from pushing the send button until the new webpage is loaded rises from 10.6 to 103 seconds. 10.6 is already horrendously slow (unless perhaps it's a 20-year-old PC), which leads me to wonder what you're doing.

[us...@httpd]

2009-11-10 Thread Stephen Love
I have set up a routine in my server that logs all incoming IP addresses and parses for duplicates in the same list. HOWEVER...a person posting almost NEVER has the same address. I believe I am not using the actual IP Address at all. What I WANT is the actual SERIAL NUMBER (If you could call it

Re: [us...@httpd]

2009-11-10 Thread Eric Covener
On Tue, Nov 10, 2009 at 8:19 AM, Stephen Love stephenl...@juno.com wrote: I have set up a routine in my server that logs all incoming IP addresses and parses for duplicates in the same list. HOWEVER...a person posting almost NEVER has the same address. I believe I am not using the actual IP

Re: [us...@httpd] activating xml2enc makes client getting HTML-Page take very long

2009-11-10 Thread Martin Gerdes
Can you get mod_diagnostics output to track the data running through the filter? I'll try that after lunch. Ask if you want to know anything else. (I can for example packet sniff the connection between IE and the proxy, and give you the debug output of mod_proxy_html in that

[us...@httpd] DAV access control

2009-11-10 Thread skrishnam...@bloomberg.com
Hi, We are looking to setup SVN over apache, but it requires the use of DAV. There are apparently security concerns over the use of DAV over apache 2.2., in the sense that it would allow users to anonymously write content to apache, even outside of the context of SVN. Are there any workarounds

Re: [us...@httpd] apache configuration: always go to parent directory

2009-11-10 Thread Brian Mearns
On Tue, Nov 10, 2009 at 4:43 AM, J. Bakshi joyd...@infoservices.in wrote: Hello, I have configured a personal work-space for mine in apache where I can experiment with different sites and here is the configuration Alias /personal/joydeep  

Re: [us...@httpd] activating xml2enc makes client getting HTML-Page take very long: How about deactivating conversions?

2009-11-10 Thread Martin Gerdes
A completely different idea to solve my actual problem: Someone else suggested to just take out the conversions all together. I mean, I am converting right back into the encoding I converted from. I have been assured that no link uses a character above the first 128 (7 bit ASCII). As far as I

[us...@httpd] Re: DAV access control

2009-11-10 Thread LuKreme
On 10-Nov-2009, at 08:00, skrishnam...@bloomberg.com wrote: We are looking to setup SVN over apache, but it requires the use of DAV. requires? I though SVN over DAV was a particular configuration option? There are apparently security concerns over the use of DAV over apache 2.2., There are?

Re: [us...@httpd] activating xml2enc makes client getting HTML-Page take very long: How about deactivating conversions?

2009-11-10 Thread Martin Gerdes
Alright, just forget I suggested that. If in front of a html character a byte above 127 appears (a character outside of 7 bit ASCII), the control character would get interpreted as part of the same character in utf-8. In other words: It WILL break. The suggestion just sounded too good. Back to the

Re: [us...@httpd]

2009-11-10 Thread Brian Mearns
On Tue, Nov 10, 2009 at 8:28 AM, Eric Covener cove...@gmail.com wrote: On Tue, Nov 10, 2009 at 8:19 AM, Stephen Love stephenl...@juno.com wrote: I have set up a routine in my server that logs all incoming IP addresses and parses for duplicates in the same list. HOWEVER...a person posting almost

[us...@httpd] AllowOverride

2009-11-10 Thread Pruniaux Ghislain
Hi, Some users on my apache server need to use RewriteEngine in there directory. They use .htaccess, but they say that does not work. I think i must change AllowOverride for their directory (default is none) , but i could not find the AllowOverride directive for the RewriteEngine

Re: [us...@httpd] AllowOverride

2009-11-10 Thread Eric Covener
On Tue, Nov 10, 2009 at 11:04 AM, Pruniaux Ghislain ghislain.pruni...@univ-fcomte.fr wrote: Hi, Some users on my apache server need to use RewriteEngine in there directory. They use .htaccess, but they say that does not work. I think i must change AllowOverride for their directory (default is

Re: [us...@httpd] DAV access control

2009-11-10 Thread André Warnier
skrishnam...@bloomberg.com wrote: Hi, We are looking to setup SVN over apache, but it requires the use of DAV. There are apparently security concerns over the use of DAV over apache 2.2., in the sense that it would allow users to anonymously write content to apache, even outside of the

Re: [us...@httpd]

2009-11-10 Thread Rich Bowen
On Nov 10, 2009, at 08:19 , Stephen Love wrote: I have set up a routine in my server that logs all incoming IP addresses and parses for duplicates in the same list. HOWEVER...a person posting almost NEVER has the same address. I believe I am not using the actual IP Address at all. What I

[us...@httpd] Caching files on reverse proxy

2009-11-10 Thread vara prasad
Hi All, I have set up a reverse proxy www.example.com for an internal tomcat server http://internal:8080 Few files are hosted on http://internal:8080. My requirement is when user downloads a file from http://internal:8080 using the proxy, the proxy should cache the file with its original

Re: [us...@httpd] AllowOverride

2009-11-10 Thread Ghislain Pruniaux
Next time i will open my eyes Thanks a lot On 11/10/2009 05:13 PM, Eric Covener wrote: On Tue, Nov 10, 2009 at 11:04 AM, Pruniaux Ghislain ghislain.pruni...@univ-fcomte.fr wrote: Hi, Some users on my apache server need to use RewriteEngine in there directory. They use .htaccess, but they

Re: [us...@httpd] Caching files on reverse proxy

2009-11-10 Thread Brian Mearns
On Tue, Nov 10, 2009 at 1:36 PM, vara prasad vprasad.pendy...@gmail.com wrote: Hi  All, I have set up a reverse proxy www.example.com for an internal tomcat server http://internal:8080 Few files are hosted on  http://internal:8080. My requirement is when user downloads a file from 

Re: [us...@httpd]

2009-11-10 Thread Mark H. Wood
On Tue, Nov 10, 2009 at 10:52:18AM -0500, Brian Mearns wrote: As Eric says, what you're looking for is a MAC address which is a universally unique identifier that every network device has (though I think even here, universally unique might have some qualifying conditions). Yes. Occasionally

Re: [us...@httpd]

2009-11-10 Thread André Warnier
Mark H. Wood wrote: ... It's thus very unlikely that you will get any help from hardware manufacturers in identifying remote users or hosts in the manner you specified. You'll need cooperation from your users. And I would add that, from a user point of view, I would be very reluctant to help

Re: [us...@httpd]

2009-11-10 Thread LuKreme
On 10-Nov-2009, at 13:49, André Warnier wrote: And I would add that, from a user point of view, I would be very reluctant to help at any system that would let me be identified in any way other than me voluntarily and knowingly providing my id by means of some obvious login page or

Re: [us...@httpd]

2009-11-10 Thread Stephen Love
You're getting close. I don't want ANY personal data. Just to know that it is really them and that the next time I see them I will see the same number. I simply want a REAL visitor and hit count. NO PERSONAL DATA of ANY KIND... just GUARANTEED UNIQUE to the user. See us online at

Re: [us...@httpd]

2009-11-10 Thread Stephen Love
So what you are telling me is that there IS no REAL 2-way handshaking going on. Then we've lost ALL hope of security. See us online at http://www.LOVEnCompany.com. -- Original Message -- From: Rich Bowen rbo...@rcbowen.com To: users@httpd.apache.org Subject: Re: [us...@httpd]

Re: [us...@httpd]

2009-11-10 Thread Stephen Love
Don't want identification. I want point to point response capability, even if it goes away later... a way to know that I can send back to that exact address and know it went to that particular computer instead of randomly going all over the world. Sounds like either I have been misinformed

Re: [us...@httpd]

2009-11-10 Thread Eric Covener
On Tue, Nov 10, 2009 at 6:20 PM, Stephen Love stephenl...@juno.com wrote: So what you are telling me is that there IS no REAL 2-way handshaking going on. Then we've lost ALL hope of security. What's REAL in this context? It's not authenticated and doesn't result in some session establishment

Re: [us...@httpd]

2009-11-10 Thread Eric Covener
On Tue, Nov 10, 2009 at 6:24 PM, Stephen Love stephenl...@juno.com wrote: Don't want identification. I want point to point response capability, even if it goes away later... a way to know that I can send back to that exact address and know it went to that particular computer instead of randomly

Re: [us...@httpd]

2009-11-10 Thread Sean Conner
It was thus said that the Great Stephen Love once stated: So what you are telling me is that there IS no REAL 2-way handshaking going on. Then we've lost ALL hope of security. There is a 2-way handshake, but it's at the TCP layer, which is used to establish a reliable, stream-oriented

Re: [us...@httpd] Caching files on reverse proxy

2009-11-10 Thread vara prasad
Hi Brian, I have set up Apache with mod_proxy with following config __ IfModule mod_cache.c IfModule mod_disk_cache.c CacheRoot d:/apache_cache CacheEnable disk / CacheDirLevels 2 CacheDirLength 3 /IfModule __ .data and .header files are stored in cache. Is it

[us...@httpd] Disable ProxyPass rules within a virtual host on apache 2? Can this be done

2009-11-10 Thread Kishore Chintoju
Hi All, *My Setup:* My website is served from apache with jboss acting as an application server. All of the webapp resides in jboss deployment directory. Apache talks to jboss using ProxyPass in development and AJP protocol in production. *My Goal:* I want to serve all the static content (e.g.

Re: [us...@httpd] Disable ProxyPass rules within a virtual host on apache 2? Can this be done

2009-11-10 Thread Eric Covener
On Tue, Nov 10, 2009 at 8:21 PM, Kishore Chintoju kishore.chint...@gmail.com wrote: I would like to disable all global proxypass rules applying in this virtual host? NoProxy doesn't seem to work. Have you tried the ProxyPass syntax that uses an exclamation point? The alternate solution would

Re: [us...@httpd] Caching files on reverse proxy

2009-11-10 Thread Eric Covener
On Tue, Nov 10, 2009 at 8:10 PM, vara prasad vprasad.pendy...@gmail.com wrote: Hi Brian, I have set up Apache with mod_proxy with following config __ IfModule mod_cache.c IfModule mod_disk_cache.c CacheRoot d:/apache_cache CacheEnable disk / CacheDirLevels 2 CacheDirLength

Re: [us...@httpd] apache configuration: always go to parent directory

2009-11-10 Thread J. Bakshi
Brian Mearns wrote: On Tue, Nov 10, 2009 at 4:43 AM, J. Bakshi joyd...@infoservices.in wrote: Hello, I have configured a personal work-space for mine in apache where I can experiment with different sites and here is the configuration Alias

Re: [us...@httpd]

2009-11-10 Thread Stephen Love
Ok, now we're getting somewhere... just ENOUGH to eliminate the path inbetween... I'd just like to ask APACHE for a unique signature of the machine sending the message to compare it against others. Nothing more, nothing less. See us online at http://www.LOVEnCompany.com. -- Original

Re: [us...@httpd]

2009-11-10 Thread Brian Mearns
On Tue, Nov 10, 2009 at 6:37 PM, Eric Covener cove...@gmail.com wrote: On Tue, Nov 10, 2009 at 6:20 PM, Stephen Love stephenl...@juno.com wrote: So what you are telling me is that there IS no REAL 2-way handshaking going on. Then we've lost ALL hope of security. What's REAL in this context?  

Re: [us...@httpd]

2009-11-10 Thread Brian Mearns
On Tue, Nov 10, 2009 at 10:29 PM, Stephen Love stephenl...@juno.com wrote: Ok, now we're getting somewhere... just ENOUGH to eliminate the path inbetween... I'd just like to ask APACHE for a unique signature of the machine sending the message to compare it against others. Nothing more, nothing

Re: [us...@httpd] apache configuration: always go to parent directory

2009-11-10 Thread Brian Mearns
On Tue, Nov 10, 2009 at 10:00 PM, J. Bakshi joyd...@infoservices.in wrote: Brian Mearns wrote: On Tue, Nov 10, 2009 at 4:43 AM, J. Bakshi joyd...@infoservices.in wrote: Hello, I have configured a personal work-space for mine in apache where I can experiment with different sites and here is

Re: [us...@httpd] apache configuration: always go to parent directory

2009-11-10 Thread J. Bakshi
Brian Mearns wrote: On Tue, Nov 10, 2009 at 10:00 PM, J. Bakshi joyd...@infoservices.in wrote: Brian Mearns wrote: On Tue, Nov 10, 2009 at 4:43 AM, J. Bakshi joyd...@infoservices.in wrote: Hello, I have configured a personal work-space for mine in apache where I can

Re: [us...@httpd]

2009-11-10 Thread Norman Peelman
Stephen Love wrote: Don't want identification. I want point to point response capability, even if it goes away later... a way to know that I can send back to that exact address and know it went to that particular computer instead of randomly going all over the world. Sounds like either I