Re: [users] Server-side include problem in Apache 2.4.9 --#if expr

2014-06-06 Thread roger morgan
I solved this problem by not using server-side includes any more. Most of my site's pages were generated by programs anyway, so it wasn't a big task to have them all generated by programs, eliminating the need for SSI. Roger

Re: [users] Apache2 Trying to retrieve at least an index but Forbidden

2014-06-06 Thread Luigi Cirillo
No idea? very strange I will create another virtual machine with default conf. If it works I will diff the conf files and I let you know. A question there a way to get verbose infos about why Apache return Forbidden? I tried to set all logs to debug level but I got unuseful infos about the module

Re: [users] Apache2 Trying to retrieve at least an index but Forbidden

2014-06-06 Thread Luigi Cirillo
same configuration /etc/apache2 in new virtual machine works in the old one continue to not working. Please HELP!!! On Fri, Jun 6, 2014 at 11:07 AM, Luigi Cirillo appo...@gmail.com wrote: No idea? very strange I will create another virtual machine with default conf. If it works I will diff

[users] Re: Recommended practice for mitigating BREACH/CRIME attacks with Apache 2.4+, SSL/TLS-only sites, and use of mod_deflate?

2014-06-06 Thread Tom Browder
On Tue, Jun 3, 2014 at 3:52 PM, Tom Browder tom.brow...@gmail.com wrote: I have several SSL/TLS-only virtual sites running under Apache 2.4.7. I haven't turned on compression because of all the warnings about CRIME and BREACH. However, when I run my sites against web site analyzers they

Re: [users] Re: Recommended practice for mitigating BREACH/CRIME attacks with Apache 2.4+, SSL/TLS-only sites, and use of mod_deflate?

2014-06-06 Thread cain dickens
On Fri, 2014-06-06 at 09:21 -0500, Tom Browder wrote: On Tue, Jun 3, 2014 at 3:52 PM, Tom Browder tom.brow...@gmail.com wrote: I have several SSL/TLS-only virtual sites running under Apache 2.4.7. I haven't turned on compression because of all the warnings about CRIME and BREACH.

Re: [users] Re: Recommended practice for mitigating BREACH/CRIME attacks with Apache 2.4+, SSL/TLS-only sites, and use of mod_deflate?

2014-06-06 Thread Jeff Trawick
On Fri, Jun 6, 2014 at 10:21 AM, Tom Browder tom.brow...@gmail.com wrote: On Tue, Jun 3, 2014 at 3:52 PM, Tom Browder tom.brow...@gmail.com wrote: I have several SSL/TLS-only virtual sites running under Apache 2.4.7. I haven't turned on compression because of all the warnings about CRIME

Re: [users] Re: Recommended practice for mitigating BREACH/CRIME attacks with Apache 2.4+, SSL/TLS-only sites, and use of mod_deflate?

2014-06-06 Thread Tom Browder
On Fri, Jun 6, 2014 at 10:16 AM, Jeff Trawick traw...@gmail.com wrote: On Tue, Jun 3, 2014 at 3:52 PM, Tom Browder tom.brow...@gmail.com wrote: I have several SSL/TLS-only virtual sites running under Apache 2.4.7. I haven't turned on compression because of all the warnings about CRIME and

Re: [users] Re: Recommended practice for mitigating BREACH/CRIME attacks with Apache 2.4+, SSL/TLS-only sites, and use of mod_deflate?

2014-06-06 Thread Tom Browder
On Fri, Jun 6, 2014 at 10:35 AM, Tom Browder tom.brow...@gmail.com wrote: On Fri, Jun 6, 2014 at 10:16 AM, Jeff Trawick traw...@gmail.com wrote: On Tue, Jun 3, 2014 at 3:52 PM, Tom Browder tom.brow...@gmail.com wrote: I have several SSL/TLS-only virtual sites running under Apache 2.4.7. I

[users] getting stuck

2014-06-06 Thread georg chambert
Hi, I have a kind of problem. My computer running as Apache server under fedora/linux is getting stuck more or less regularly. It runs for around 2 days and then just does not respond, neither to internet nor to keybord/mouse. I do not know if its the httpd or the linux/pc that goes into

[users] Re: getting stuck

2014-06-06 Thread georg chambert
Oh one more thing that might be important. The current system is created by moving the harddrive from one machine to an identical (however with somewhat different plugged in Hw), as the first machine just went out and wouldnt boot at all. So having access to a second DellDimension5000 I just

[users] Re: Basic Login as domain\username

2014-06-06 Thread Darly Senecal Baptiste
Hi Community : Let's forget about NTLM module. It is a way to perform a Rewrite username? Like using mod_rewrite? Thanks On Thu, Jun 5, 2014 at 4:26 PM, Darly Senecal Baptiste dsenec...@gmail.com wrote: Hi Community: I had implemented a git repository server and its authentication is Basic

Re: [users] Re: Basic Login as domain\username

2014-06-06 Thread Eric Covener
On Fri, Jun 6, 2014 at 3:38 PM, Darly Senecal Baptiste dsenec...@gmail.com wrote: Hi Community : Let's forget about NTLM module. It is a way to perform a Rewrite username? Like using mod_rewrite? 2.4's mod_authnz_ldap has specific stuff to alter the username specifically for this scenario.

Re: [users] Re: Basic Login as domain\username

2014-06-06 Thread Darly Senecal Baptiste
What about in apache 2.2.3? On Fri, Jun 6, 2014 at 3:40 PM, Eric Covener cove...@gmail.com wrote: On Fri, Jun 6, 2014 at 3:38 PM, Darly Senecal Baptiste dsenec...@gmail.com wrote: Hi Community : Let's forget about NTLM module. It is a way to perform a Rewrite username? Like using

Re: [users] Re: Basic Login as domain\username

2014-06-06 Thread Eric Covener
On Fri, Jun 6, 2014 at 3:50 PM, Darly Senecal Baptiste dsenec...@gmail.com wrote: What about in apache 2.2.3? I don't think so. I think you'd need to write a small module to strip (or add?) that prefix - To unsubscribe, e-mail:

Re: [users] Re: Recommended practice for mitigating BREACH/CRIME attacks with Apache 2.4+, SSL/TLS-only sites, and use of mod_deflate?

2014-06-06 Thread David Benfell
On Fri, Jun 06, 2014 at 09:21:20AM -0500, Tom Browder wrote: On Tue, Jun 3, 2014 at 3:52 PM, Tom Browder tom.brow...@gmail.com wrote: I have several SSL/TLS-only virtual sites running under Apache 2.4.7. I haven't turned on compression because of all the warnings about CRIME and BREACH.