Re: [us...@httpd] SSL received a record that exceeded the maximum permissible length.

2009-11-13 Thread Crypto Sal
On 11/13/2009 12:29 PM, Philip Wigg wrote: NameVirtualHost 192.168.1.47:443 NameVirtualHost 192.168.1.129:443 You can't use name based virtual hosting with SSL. Try these lines out. You need to make sure you have a Listen directive for those IP/port combinations though. Cheers, Phil.

[us...@httpd] Question about AuthUserFile and UserDir

2009-11-13 Thread Aristotelhs Glenths
Hello all, I have a question about the use of AuthUserFile of mod_auth module together with mod_userdir in apache 2.2.14 I have created this .htaccess file in the public_html directory AuthType Basic AuthName "Members Only" AuthUserFile ~arisg/.htpasswd Require valid-user I'm also using mod

Re: [us...@httpd] apache with 2 SSL Certs Problem

2009-11-13 Thread Randy Paries
On Fri, Nov 13, 2009 at 12:26 PM, Krist van Besien wrote: > On Fri, Nov 13, 2009 at 6:14 PM, Randy Paries wrote: >> also i have this in my httpd >> NameVirtualHost 216.186.190.101:80 >> NameVirtualHost 216.186.190.106:80 >> NameVirtualHost 216.186.190.101:443 > > You probably don't need these. >

Re: [us...@httpd] apache with 2 SSL Certs Problem

2009-11-13 Thread Krist van Besien
On Fri, Nov 13, 2009 at 6:14 PM, Randy Paries wrote: > also i have this in my httpd > NameVirtualHost 216.186.190.101:80 > NameVirtualHost 216.186.190.106:80 > NameVirtualHost 216.186.190.101:443 You probably don't need these. I asume you have your one SSL host on 216.186.190.101 and another on

Re: [us...@httpd] apache with 2 SSL Certs Problem

2009-11-13 Thread Krist van Besien
On Fri, Nov 13, 2009 at 4:40 PM, Randy Paries wrote: > On Fri, Nov 13, 2009 at 1:29 AM, Krist van Besien > this is how i have it set up. > when i generate the CSR do i need to do something special to bind the > CSR to a specific IP? No. > > >    ServerAdmin webmas...@unitnet.com >    DocumentRo

Re: [us...@httpd] SSL received a record that exceeded the maximum permissible length.

2009-11-13 Thread John Oliver
On Fri, Nov 13, 2009 at 05:29:07PM +, Philip Wigg wrote: > > NameVirtualHost 192.168.1.47:443 > > NameVirtualHost 192.168.1.129:443 > > You can't use name based virtual hosting with SSL. Try these lines > out. You need to make sure you have a Listen directive for those > IP/port combinations t

Re: [us...@httpd] SSL received a record that exceeded the maximum permissible length.

2009-11-13 Thread John Oliver
On Fri, Nov 13, 2009 at 12:31:50PM -0500, Eric Covener wrote: > > > > > > > When I visit https://virtual.host2/ I get: > > > > SSL received a record that exceeded the maximum permissible length. > > > > (Error code: ssl_error_rx_record_too_long) > > > > My guess is that your actually receving t

[us...@httpd] RE: Authenticate each user once for multiple applications

2009-11-13 Thread Yungwei Chen
I just found that using the same value of AuthName for each application seems to solve my problem. Is it the right way to go? From: Yungwei Chen [mailto:yung...@resolvity.com] Sent: Friday, November 13, 2009 10:00 AM To: users@httpd.apache.org Subject: [us...@httpd] Authenticate each user once fo

Re: [us...@httpd] SSL received a record that exceeded the maximum permissible length.

2009-11-13 Thread Eric Covener
> > > When I visit https://virtual.host2/ I get: > > SSL received a record that exceeded the maximum permissible length. > > (Error code: ssl_error_rx_record_too_long) > My guess is that your actually receving this connection on an interface not listed in any of your vhosts, so it's handled as

Re: [us...@httpd] SSL received a record that exceeded the maximum permissible length.

2009-11-13 Thread Philip Wigg
> NameVirtualHost 192.168.1.47:443 > NameVirtualHost 192.168.1.129:443 You can't use name based virtual hosting with SSL. Try these lines out. You need to make sure you have a Listen directive for those IP/port combinations though. Cheers, Phil. --

[us...@httpd] SSL received a record that exceeded the maximum permissible length.

2009-11-13 Thread John Oliver
I have one physical server with two IP addresses. I created VirtualHosts for each: NameVirtualHost 192.168.1.47:443 NameVirtualHost 192.168.1.129:443 ServerName virtual.host1 DocumentRoot /var/www/html2 ErrorLog logs/ssl_error2_log CustomLog logs/ssl_request2_log \ "%t

Re: [us...@httpd] apache with 2 SSL Certs Problem

2009-11-13 Thread Randy Paries
On Fri, Nov 13, 2009 at 9:40 AM, Randy Paries wrote: > On Fri, Nov 13, 2009 at 1:29 AM, Krist van Besien > wrote: >> On Fri, Nov 13, 2009 at 3:15 AM, Randy Paries wrote: >>> Hello, >>> i have a box with two domains >>> CentOS release 5.3 >>> Server version: Apache/2.2.3 >>> >>> initially the box

Re: [us...@httpd] Authenticate each user once for multiple applications

2009-11-13 Thread Peter Schober
* Yungwei Chen [2009-11-13 17:39]: > The proxy server also needs to forward some requests (/nagios) to > another internal apache server. Any suggestions in this case? Exclude those from the proxy pass? -peter - The official User

RE: [us...@httpd] LDAP: ldap_set_option failed. Could not set LDAP_OPT_X_TLS to LDAP_OPT_X_TLS_HARD

2009-11-13 Thread Emmanuel Bailleul
> -Message d'origine- > De : Sandro Tosi [mailto:sandro.t...@register.it] > Envoyé : vendredi 13 novembre 2009 16:49 > À : users@httpd.apache.org > Objet : Re: [us...@httpd] LDAP: ldap_set_option failed. Could not set > LDAP_OPT_X_TLS to LDAP_OPT_X_TLS_HARD > > Just to follow this up for

Re: [us...@httpd] SPDY protocol

2009-11-13 Thread David Henderson
Brian Mearns wrote: On Fri, Nov 13, 2009 at 11:15 AM, David Henderson wrote: I would vote to make it a module over a patch due to Brian Mearns making a good point about it possibly not moving beyond the IEFT. At least a modular design can just be dropped from the operation of the server wit

Re: [us...@httpd] Authenticate each user once for multiple applications

2009-11-13 Thread Eric Covener
On Fri, Nov 13, 2009 at 11:00 AM, Yungwei Chen wrote: > My question is: How can I tell the reverse proxy server to authenticate each > user just once in this case? It authenticates you on every request, but your browser doesn't bother to prompt you when something is a sub-location of where you pr

RE: [us...@httpd] Authenticate each user once for multiple applications

2009-11-13 Thread Yungwei Chen
The proxy server also needs to forward some requests (/nagios) to another internal apache server. Any suggestions in this case? -Original Message- From: Peter Schober [mailto:peter.scho...@univie.ac.at] Sent: Friday, November 13, 2009 10:18 AM To: users@httpd.apache.org Subject: Re: [us.

Re: [us...@httpd] SPDY protocol

2009-11-13 Thread Brian Mearns
On Fri, Nov 13, 2009 at 11:15 AM, David Henderson wrote: > I would vote to make it a module over a patch due to Brian Mearns making a > good point about it possibly not moving beyond the IEFT.  At least a modular > design can just be dropped from the operation of the server without having > to rem

Re: [us...@httpd] Authenticate each user once for multiple applications

2009-11-13 Thread Peter Schober
* Yungwei Chen [2009-11-13 17:00]: > >Order Deny,Allow >Deny from all >Allow from ... >ProxyPasshttps://111.111.111.111/rpt >ProxyPassReverse https://111.111.111.111/rpt >ProxyPassReverseCookieDomain 111.111.111.111 100.100.100.100 >

Re: [us...@httpd] SPDY protocol

2009-11-13 Thread David Henderson
I would vote to make it a module over a patch due to Brian Mearns making a good point about it possibly not moving beyond the IEFT. At least a modular design can just be dropped from the operation of the server without having to remove code from the core of the project (and network admins havi

Re: [us...@httpd] SPDY protocol

2009-11-13 Thread Nick Kew
Mike Cardwell wrote: Does Apache intend to add support for Googles recently announced SPDY protocol? http://sites.google.com/a/chromium.org/dev/spdy/spdy-whitepaper Patches welcome! Or in this case, maybe a module. -- Nick Kew ---

[us...@httpd] Authenticate each user once for multiple applications

2009-11-13 Thread Yungwei Chen
Hi, I have a reverse proxy server that forwards to requests to an internal apache server. Here's the configuration on how the reverse proxy server works. Order Deny,Allow Deny from all Allow from ... ProxyPasshttps://111.111.111.111/rpt ProxyPassRev

Re: [us...@httpd] SPDY protocol

2009-11-13 Thread Brian Mearns
On Fri, Nov 13, 2009 at 9:51 AM, Mike Cardwell wrote: > Does Apache intend to add support for Googles recently announced SPDY > protocol? > > http://sites.google.com/a/chromium.org/dev/spdy/spdy-whitepaper > > -- > Mike Cardwell - IT Consultant and LAMP developer > Cardwell IT Ltd. (UK Reg'd Compa

Re: [us...@httpd] LDAP: ldap_set_option failed. Could not set LDAP_OPT_X_TLS to LDAP_OPT_X_TLS_HARD

2009-11-13 Thread Sandro Tosi
Just to follow this up for people that might have the same problem: it turns out it was because - php was *not* compiled with ldap options - php was loaded *before* mod_ldap and modp_authnz_ldap A simple solution was to import mod_{authnz,}_ldap before php. The right solution though is to add

Re: [us...@httpd] SPDY protocol

2009-11-13 Thread David Henderson
After investigating this protocol, I agree that this would make a fine addition to the worlds greatest web server! Mike Cardwell wrote: Does Apache intend to add support for Googles recently announced SPDY protocol? http://sites.google.com/a/chromium.org/dev/spdy/spdy-whitepaper -

Re: [us...@httpd] apache with 2 SSL Certs Problem

2009-11-13 Thread Randy Paries
On Fri, Nov 13, 2009 at 1:29 AM, Krist van Besien wrote: > On Fri, Nov 13, 2009 at 3:15 AM, Randy Paries wrote: >> Hello, >> i have a box with two domains >> CentOS release 5.3 >> Server version: Apache/2.2.3 >> >> initially the box only had one IP and domain. >> >> I went and got a SSL cert for

[us...@httpd] SPDY protocol

2009-11-13 Thread Mike Cardwell
Does Apache intend to add support for Googles recently announced SPDY protocol? http://sites.google.com/a/chromium.org/dev/spdy/spdy-whitepaper -- Mike Cardwell - IT Consultant and LAMP developer Cardwell IT Ltd. (UK Reg'd Company #06920226) http://cardwellit.com/ Technical Blog: https://secure

Re: [us...@httpd] mod_authnz_ldap with wildcard certificate

2009-11-13 Thread Eric Covener
On Fri, Nov 13, 2009 at 9:03 AM, Francois Pernet wrote: > Ok I can also post this question on openldap forum, but : > - my main question is : is there anybody 's running wilcard certificates for > LDAPs authentication under Apache ? > - configuration for openldap is different than inside the mod_l

Re: [us...@httpd] mod_authnz_ldap with wildcard certificate

2009-11-13 Thread Francois Pernet
Ok I can also post this question on openldap forum, but : - my main question is : is there anybody 's running wilcard certificates for LDAPs authentication under Apache ? - configuration for openldap is different than inside the mod_ldap (only few directives in mod_ldap) so what if I can make it

Re: [us...@httpd] mod_authnz_ldap with wildcard certificate

2009-11-13 Thread Peter Schober
* Francois Pernet [2009-11-13 09:12]: > B) Tests with OpenLdap [...] > Doesn't work. I guess then you'd better get this working on its own, before continuing with httpd (it's certainly easier to debug LDAP connections with a full blown LDAP command line tool), -peter

[us...@httpd] Apache 2.2.11 and "Allow service to interact with desktop"

2009-11-13 Thread Daniel López Robles
Hello: I have a weird problem with Apache and Windows 2003 Server that I haven't been able to figure out: HP Proliant DL580 G5 Windows Server 2003 R2 Standard x64 Apache 2.2.11 With that configuration, if I double-click "My PC", "Manage" and I go to "Disk manage", an error is given: "Unable to

Re: [us...@httpd] apache with 2 SSL Certs Problem

2009-11-13 Thread Suresh Visvanathan
IP based virtual hosting will help you. read thru this http://httpd.apache.org/docs/1.3/vhosts/ip-based.html also you can have 2 include file with different IP listening and map there in the include file, to make it easy to maintenance. also can you paste your httpd.conf file thanks -suresh

RE: [us...@httpd] mod_authnz_ldap with wildcard certificate

2009-11-13 Thread Francois Pernet
Hi, you are right... more details ... I must also specify that apache in SSL (https) is working fine with these certificates ...I do not say this is an apache problem, but more on the ldap module and certainly on the libraries under ... A) Apache Syntax inside Apache : LDAPTrustedMode SS