Re: [users@httpd] "DSO load failed" when using mod_authn_dbm for Berkeley DB

2016-05-11 Thread Tianyin Xu
Sorry Luca, I misspelled your name in my last email. :-( On Wed, May 11, 2016 at 9:55 PM, Tianyin Xu wrote: > Thanks, Loca! > > Yes, I did set AuthDBMUserFile (the whole point for this module is to use > a DBM file to do the authn control, isn't it?) > > I generate the file

Re: [users@httpd] "DSO load failed" when using mod_authn_dbm for Berkeley DB

2016-05-11 Thread Tianyin Xu
Thanks, Loca! Yes, I did set AuthDBMUserFile (the whole point for this module is to use a DBM file to do the authn control, isn't it?) I generate the file called dbm-auth-file using dbmmanger $ file dbm-auth-file dbm-auth-file: Berkeley DB (Hash, version 9, native byte-order) and then I loaded

Re: [users@httpd] Re: Want friendly error message for failed attempt to access a restricted directory

2016-05-11 Thread Tom Browder
On Wed, May 11, 2016 at 8:50 AM, Marat Khalili wrote: > On 11/05/16 16:35, Tom Browder wrote: >> >> Is there any way via CGI to check for a valid client cert? If so, I >> could interject another script to do that at the Enter button. > > Client verification state should be visible

Re: [users@httpd] Re: Want friendly error message for failed attempt to access a restricted directory

2016-05-11 Thread Marat Khalili
On 11/05/16 16:35, Tom Browder wrote: Is there any way via CGI to check for a valid client cert? If so, I could interject another script to do that at the Enter button. Client verification state should be visible to a CGI script via SSL_* environment variables. SSL_CLIENT_VERIFY looks

Re: [users@httpd] One page hanging entire server

2016-05-11 Thread D'Arcy J.M. Cain
On Tue, 10 May 2016 07:55:27 -0400 "D'Arcy J.M. Cain" wrote: > I say "if" because I am trying something and so far it seems to be > working. I realized that this was a recent problem and that I > recently upgraded to 2.4.20. I reverted to 2.4.18 last night and so > far so good.

[users@httpd] Re: Want friendly error message for failed attempt to access a restricted directory

2016-05-11 Thread Tom Browder
On Wednesday, May 11, 2016, Marat Khalili wrote: > There's no code at all. HTTP connection is not even established. I don't > think it can be easily solved. You have to ALLOW connections from clients > without valid certificate in order to send them your custom message, and >

Re: [users@httpd] Re: Want friendly error message for failed attempt to access a restricted directory

2016-05-11 Thread Marat Khalili
There's no code at all. HTTP connection is not even established. I don't think it can be easily solved. You have to ALLOW connections from clients without valid certificate in order to send them your custom message, and resulting reduction of security probably does not worth it. -- With Best

[users@httpd] Re: Want friendly error message for failed attempt to access a restricted directory

2016-05-11 Thread Tom Browder
On Wed, May 11, 2016 at 7:19 AM, Tom Browder wrote: > I am running Apache 2.4.18 and have one site (https://usafa-1965.org) > that requires a client certificate to access a restricted directory > ("Classmates > Only"). How can I return a friendlier message than, e.g.,

[users@httpd] Want friendly error message for failed attempt to access a restricted directory

2016-05-11 Thread Tom Browder
I am running Apache 2.4.18 and have one site (https://usafa-1965.org) that requires a client certificate to access a restricted directory ("Classmates Only"). How can I return a friendlier message than, e.g., Chrome emits when a user without a valid certificate attempts to access the restricted