[us...@httpd] Deny from all force

2010-04-06 Thread Nilesh Govindarajan
Hi, I have installed mod_geoip. Now I want block Chinese and Russian visitors which should not overridden in .htaccess I.e. The Deny directive should work globally and should not be overridden by any other 'Allow from All' directives. Is this possible or I have to configure this in every .

Re: [us...@httpd] Apache serving static content with the uid of the owner of the file with mpm-prefork

2010-04-06 Thread Nilesh Govindarajan
On 04/07/10 08:40, André Ferraz wrote: Hi list, i'm using a mpm-prefork with a lot of virtualhosts created, splited between 200-500 different uids (different users), i need some way to make Apache change its uid to the user to send that static content to the client that requested that file.

[us...@httpd] Apache serving static content with the uid of the owner of the file with mpm-prefork

2010-04-06 Thread André Ferraz
Hi list, i'm using a mpm-prefork with a lot of virtualhosts created, splited between 200-500 different uids (different users), i need some way to make Apache change its uid to the user to send that static content to the client that requested that file. I saw that mpm-itk can do what i wan

Re: [us...@httpd] CombinedLog with IPv6

2010-04-06 Thread Sean Conner
It was thus said that the Great Marten Lehmann once stated: > Hello, > > I want to setup Apache with IPv6 hosts and so I asked myself, what > happens to REMOTE_ADDR in log files? A typical line would be > > 12.23.34.45 - - [06/Apr/2010:23:15:32 +0200] "GET /styles/navi.css > HTTP/1.0" 304 - "re

[us...@httpd] CombinedLog with IPv6

2010-04-06 Thread Marten Lehmann
Hello, I want to setup Apache with IPv6 hosts and so I asked myself, what happens to REMOTE_ADDR in log files? A typical line would be 12.23.34.45 - - [06/Apr/2010:23:15:32 +0200] "GET /styles/navi.css HTTP/1.0" 304 - "referer" "Mozilla/5.0 (compatible; Yahoo! Slurp/3.0)" Will the first ent

RE: [us...@httpd] How do I require more than one Require ldap-* directive match?

2010-04-06 Thread Thomas, Peter
Thanks. I'm in a production environment, so going to the trunk will be a tough sell. Ryan Patrick offered up a complete patch in 2005 to allow "and" -- reused "Satisfy all", which raised some controversy. I'll revive/update his patch suggestion, but add a one-off flag for "AuthzLDAPSatisfy al

Re: [us...@httpd] How do I require more than one Require ldap-* directive match?

2010-04-06 Thread Eric Covener
On Tue, Apr 6, 2010 at 1:50 PM, Thomas, Peter wrote: > I've looked at the mod_authnz_ldap code and the documentation.  "Out of the > box" it sems like there's no way to turn the "OR" behavior of Require ldap-* > lines into "AND."  I've been trying as hard as I can to avoid creating not > only a ne

[us...@httpd] Is uninstall really required before upgrade??

2010-04-06 Thread Bert McLees
This is a Windows platform question. Before upgrading to Apache v2.2.15 from v2.0.59, does the prior version need to be uninstalled? If I install the new version to a different drive, can I have both versions installed and control which one is running via just using the Services UI to control whi

[us...@httpd] Apache regex config for mass redirects

2010-04-06 Thread Jason Nunnelley
The goal: to provide for three kinds of applications and application structures (file structure driven here, so you don't have to understand what the applications are or do to understand what I'm trying to accomplish) in a single front end configuration. All app servers share same front ends, so

RE: [us...@httpd] How do I require more than one Require ldap-* directive match?

2010-04-06 Thread Thomas, Peter
I've looked at the mod_authnz_ldap code and the documentation. "Out of the box" it sems like there's no way to turn the "OR" behavior of Require ldap-* lines into "AND." I've been trying as hard as I can to avoid creating not only a new provider type but also a new provider. Unfortunately, the mo

Re: [us...@httpd] Re: Preventing DoS attacks from single client host

2010-04-06 Thread Nerius Landys
> > You using iptables? What rules did you end up using to accomplish this? > Using OpenBSD's Packet Filter. It's not perfect; I have to set the connection limit quite high (at 36) because the connection state stays in the firewall for about a minute even during the FIN_WAIT_2 stage. Here are my

[us...@httpd] How do I require more than one Require ldap-* directive match?

2010-04-06 Thread Thomas, Peter
How do I configure mod_authnz_ldap to require that I meet multiple authorization conditions [i.e. user must be a member of an LDAP group AND also posses one or more attributes]. As it is, the code returns "OK" as soon as the first "Require ldap-*" directive succeeds, short-circuiting subsequent re

RE: [us...@httpd] Re: Preventing DoS attacks from single client host

2010-04-06 Thread Geoff Millikan
> add Operating System wide firewall rules to > disallow more than N number of concurrent TCP connections to port 80 > from a single IP address. You using iptables? What rules did you end up using to accomplish this? smime.p7s Description: S/MIME cryptographic signature

[us...@httpd] Re: Directory Listing in Apache httpd

2010-04-06 Thread Sushant Gulati
The issue is resolved by using IndexOptions directive with NameWidth=* which automatically adjusts the display according to the file name character length. Regards, Sushant On Tue, Apr 6, 2010 at 8:46 PM, Sushant Gulati wrote: > Hi, > > I am facing a minor issue with the directory listing in A

[us...@httpd] htcacheclean

2010-04-06 Thread Geoff Millikan
How big do we set our mod_disk_cache cache? 100 Megs? 1 Gig? "Determining how frequently to run htcacheclean and what target size to use for the cache is somewhat complex and trial and error may be needed to select optimal values." http://httpd.apache.org/docs/2.1/caching.html#disk smime.p7s

[us...@httpd] Directory Listing in Apache httpd

2010-04-06 Thread Sushant Gulati
Hi, I am facing a minor issue with the directory listing in Apache httpd web server. When I turn FancyIndexing On, the directory listing doesn't display the complete file name of the files in the directory. The file names are long, but I just wanted to know if there is a max limit to the number of