Re: [users@httpd] Flexible Worker Configuration for Dynamic Shared Object (DSO) Deployment

2024-04-27 Thread Daniel Ferradal Márquez
On 18/04/2024 16:50, Sarkar Tarun Kumar (ETAS-SEC/XPC-Bo1) wrote: Hello, ... My requirement is treating one of the services, specifically Service4, differently. Apache should only spawn a single instance of Service4 and refrain from terminating the process until Apache server restarts.

Re: [users@httpd] RewriteMap and patterns

2024-03-15 Thread Daniel Ferradal Márquez
On 12/03/2024 20:45, Dave Wreski wrote: If I understood correctly you want the resulting path to be loaded by your php-fpm backend. Do you have a fallbackresource, such as: "FallbackResource /index.php" or similar? If not, then you may want to add it. Yes, that's correct, I'm using

Re: [users@httpd] Question Error apache

2023-11-09 Thread Daniel Ferradal
this error from Apache? > If Apache HTTPD shows nothing in its error.log, then your SIEM is not functioning correctly. -- Daniel Ferradal HTTPD Project #httpd help at Libera.Chat

Re: [users@httpd] Apache 2.4 Balancer still sends requests to the server with status "Init Err"

2023-11-03 Thread Daniel Ferradal
ber until the first has failed, so at least you will get one failure for 30 seconds and a wait of 10 every time httpd retries a backend that is failing. Someone may correct me though, but I haven't managed with your setup, perhaps reaching this point you can try with mod_proxy_hcheck. Although timeout

Re: [users@httpd] Apache 2.4 Balancer still sends requests to the server with status "Init Err"

2023-11-01 Thread Daniel Ferradal
them to the other server in the cluster? > Thank you very much in advance for your help. > > "failontimeout" by default is off, you may want to turn it on for your testing purposes. -- Daniel Ferradal HTTPD Project #httpd help at Libera.Chat

Re: [users@httpd] Is it true that Nginx is faster, more secure and better than Apache?

2023-09-30 Thread Daniel Ferradal
> >> Why are they trollish? I am curious to learn more. >> >> Perhaps because you asked the same question in 2021, you got a very constructive response and still you are asking the same thing two years later... -- Daniel Ferradal HTTPD Project #httpd help at Libera.Chat

Re: [users@httpd] Inquiry about apache httpd compile option

2023-09-20 Thread Daniel Ferradal
mpiled along with httpd. So check the output of ./configure --help and test different options according to your needs and test in a non system path (at least at first until you get to know what you are doing), that is: ./configure --prefix=/home/your-user/httpd-test .. -- Daniel Ferradal HTTPD Project #httpd help at Libera.Chat

Re: [users@httpd] How do I choose the best settings for the Apache Server?

2023-09-15 Thread Daniel Ferradal
El vie, 15 sept 2023 a las 13:36, Daniel Ferradal () escribió: > > When I probably recommended MaxSpareThreads == to MaxRequestWorkers was > due to Apache httpd with third party modules not restarting gracefully, > that along to MaxConnectionsPerChild 0 would prevent HTTPD

Re: [users@httpd] How do I choose the best settings for the Apache Server?

2023-09-15 Thread Daniel Ferradal
to MaxConnectionsPerChild 0 would prevent HTTPD from trying to restart them. Where did you get this? Also I keep wondering why people assign so many processes, StartServers 16? In a threaded mpm? Why not just assign just 2 or even 4, and assign 100, 200 worker threads each? -- Daniel Ferradal HTTPD Project #httpd help at Libera.Chat

Re: [users@httpd] Error log output specification

2023-09-06 Thread Daniel Ferradal
- > To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org > For additional commands, e-mail: users-h...@httpd.apache.org > > In my experience from a certain version is that the error does not repeat at all, at least for a long period of time. Lost track of which version

Re: [users@httpd] loading shop.example.com in www.test.com/shop/

2023-08-20 Thread Daniel Ferradal
ualhost, that would be the simplest, less painful, more straightforward way to do it generally. -- Daniel Ferradal HTTPD Project #httpd help at Libera.Chat

Re: [users@httpd] Enable two way SSL on Apache httpd web server.

2023-08-18 Thread Daniel Ferradal
rifyClient require and SSLCACertificateFile /path/to/list-of-cas.crt In this second directives you just need to add the root CA/s of the CA that signs your client certificates. -- Daniel Ferradal HTTPD Project #httpd help at Libera.Chat

Re: [users@httpd] allow general access after 1 auth

2023-08-13 Thread Daniel Ferradal
El dom, 13 ago 2023 14:45, Will Fatherley escribió: > > >> No, that doesn't satisfy the following: >> >> > If someone authenticates on https://www.example.com/webapp, the url is >> available for everyone. > > >> Could the complicating allow directive sequence be placed in an if/else > type of

Re: [users@httpd] loading shop.example.com in www.test.com/shop/

2023-08-04 Thread Daniel Ferradal
t it is for sure is you have low chances of getting away without paying close attention to the behaviour from your application. -- Daniel Ferradal HTTPD Project #httpd help at Libera.Chat

Re: [users@httpd] Need help with correlating HTTP request with a database call

2023-07-30 Thread Daniel Ferradal
our usual log and add another format and log to capture those you want to focus related to the database you mention. Cheers -- Daniel Ferradal HTTPD Project #httpd help at Libera.Chat

Re: [users@httpd] Cannot authenticate (after six years)

2023-07-26 Thread Daniel Ferradal
5: access to /~hoff/index.html denied (filesystem path '/home/hoff/public_html/index.html') because search permissions are missing on a component of the path - Perhaps /home has different permissions that do not allow apache user travel to /home/hoff/public_html/index.htmlor perhaps your umask is

Re: [users@httpd] Re: Apache2 certificate authentication

2023-07-25 Thread Daniel Ferradal
e server only allows TLSv1.2 you won't have this issue. As per the reason why browsers are doing this, can't remember it exactly what it is, a google search should shed some light I guess. -- Daniel Ferradal HTTPD Project #httpd help at Libera.Chat

Re: [users@httpd] RewriteRule and priorities

2023-07-25 Thread Daniel Ferradal
exclude)(.+) /resources/blog/$1 [L,R=301] (not negative lookahead group is not captured therefore it generates no variable value. When dealing with regular expressions a site or somewhere where to test them is ideal too, I fancy debuggex.com in PCRE mode for example. -- Daniel Ferradal HTTPD Project #httpd help at Libera.Chat

Re: [users@httpd] Double or chained proxy with mod_proxy

2023-06-27 Thread Daniel Ferradal
mixing protocols, like reverse proxy responds to https and you have set up connection as http or similar, that is one of the most simple cases of "bad request", or maybe missing "SSLProxyEngine on" directive when backend you are proxying to uses SSL/TLS. In any case if you don't show

Re: [users@httpd] Re: [EXTERNAL] Re: [users@httpd] OCSP Stapling Configuration Setup

2023-04-18 Thread Daniel Ferradal
uire in a path and the request going for another and then that directive having no effect, etc. Also turn "SSLOCSPOverrideResponder off" for these tests. -- Daniel Ferradal HTTPD Project #httpd help at Libera.Chat

Re: [users@httpd] OCSP Stapling Configuration Setup

2023-04-17 Thread Daniel Ferradal
:42:14.741644 2023] [ssl:error] [pid 1812:tid > 139698106267200] AH02969: stapling_check_response: response has certificate > status revoked (reason: n/a) for serial number xxxx > > —— > > > > In the information you provide you are at least missing the Location with: SSLVerifyclient require Do you have that? -- Daniel Ferradal HTTPD Project #httpd help at Libera.Chat

Re: [users@httpd] old gen workers sticking around post 2.4.49

2023-04-12 Thread Daniel Ferradal
I'd say much better to move to mpm_event and and php-fpm, ridding httpd of PHP module and it's quirks in the process. El mar, 11 abr 2023 23:24, escribió: > I wrote: > > I'll try to reproduce the problem without mod_php. > and: > > Using "dehydrated -c -x" to drive my testing, I've hit the

Re: [users@httpd] SSL_CLIENT_CERT sent empty.

2023-04-08 Thread Daniel Ferradal
/mnemo/> > [image: linkedin] <https://twitter.com/_Mnemo> > [image: Instagram] <https://www.instagram.com/mnemo_ciber/> > [image: Youtube] <https://www.youtube.com/user/GrupoMNEMO> > -- Daniel Ferradal HTTPD Project #httpd help at Libera.Chat

Re: [users@httpd] Compile with different version of ssl

2023-03-29 Thread Daniel Ferradal
rying to compile with --with-ssl=../openssl-1.1.1t, but it is being > ignored. How do I get this to work? -- Daniel Ferradal HTTPD Project #httpd help at Libera.Chat - To unsubscribe, e-mail: users-unsubscr...@httpd.apache

Re: [users@httpd] Apache2 fails to listen on open port

2022-12-15 Thread Daniel Ferradal
r our wiki article for this: > > > > > > https://cwiki.apache.org/confluence/display/HTTPD/CouldNotBindToAddress > > > > > > > > > > > - > > > > To unsubscribe, e-mail: users-unsub

Re: [users@httpd] Bug? LDAPRetryDelay from mod_ldap uses the wrong unit

2022-12-02 Thread Daniel Ferradal
ed solely for use by the > addressee. Read more here. > <https://sites.google.com/view/dcu-email-disclaimer>* > > > > <https://www.facebook.com/DCU/> <https://twitter.com/DCU> > <https://www.linkedin.com/company/dublin-city-university> > <https://www.instagram.com/dublincityuniversity/?hl=en> > <https://www.youtube.com/user/DublinCityUniversity> > -- Daniel Ferradal HTTPD Project #httpd help at Libera.Chat

Re: [users@httpd] mod proxy hcheck not observing timeout value

2022-12-02 Thread Daniel Ferradal
ines do represent >> workers which I presume corresponds with the worker object code looks to be >> pulling the value from. >> >> Kind regards >> >> Ben >> >> On Thu, 17 Nov 2022 at 18:35, Daniel Ferradal >> wrote: >> >>> Hello, >

Re: [users@httpd] Error AH03490: scoreboard is full, not at MaxRequestWorkers.Increase ServerLimit

2022-11-28 Thread Daniel Ferradal
24/11/2022 6:48 pm, Daniel Ferradal wrote: > > Some script is probably hogging the workers and not letting them close so if > you must, just restart, but judging by the amount of traffic you seem to have > at the time I would truncate in logrotate and not restart or reload the > se

Re: [users@httpd] Error AH03490: scoreboard is full, not at MaxRequestWorkers.Increase ServerLimit

2022-11-23 Thread Daniel Ferradal
Some script is probably hogging the workers and not letting them close so if you must, just restart, but judging by the amount of traffic you seem to have at the time I would truncate in logrotate and not restart or reload the server at all. El jue, 24 nov 2022 2:38, Mike Dewhirst escribió: >

Re: [users@httpd] OCSP Stapling Logs with mod_md

2022-11-17 Thread Daniel Ferradal
s there any way to have these entries logged in the error log as well? > > > > Also, could the information in job.json be accessed over /md-status even when > there are no mod_md-managed certificates (currently the response only > contains the mod_md version string)? &g

Re: [users@httpd] mod proxy hcheck not observing timeout value

2022-11-17 Thread Daniel Ferradal
ebsite: www.codeweavers.net > > > > > > Barn 4, Dunston Business Village, ST18 9AB. Registered in England and > Wales > > No. 04092394 VAT registration no. 974 9705 63 > > > -- Daniel Ferradal HTTPD Project #httpd help at Libera.Chat

Re: [users@httpd] firefox shows default site page

2022-11-11 Thread Daniel Ferradal
w from all > Require all granted > > > > Require all denied > > > RewriteEngine on > RewriteCond %{SERVER_NAME} =mail.openmbox.net > RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,NE,R=permanent] > > > --------

Re: [users@httpd] Questionable URL being sent to our server

2022-11-01 Thread Daniel Ferradal
re. Maybe a Dos attack or > worse. Anyone have a clue what is being attempted? > > > > Sketchy URL: > https://www.northwestern.edu/accounting-scrvices/Annual%252ORepothtm > > > > Darryl Baker, GSEC, GCLD (he/him/his) > > Sr. System Administrator > &g

Re: [users@httpd] Tuning TLS of reverse proxy

2022-10-15 Thread Daniel Ferradal
tomcat will support, you just set SSLProxyProtocol or SSLProxyCipherSuite directives accordingly then. -- Daniel Ferradal HTTPD Project #httpd help at Libera.Chat - To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org

Re: [users@httpd] Apache PHP-FPM Integration with mod_proxy_fcgi and multiple Users

2022-10-15 Thread Daniel Ferradal
write rules in it's default htaccess file or also a > simple nextcloud installation contains e.g. "SetEnvIfNoCase" which both > will stop working. > It may be tedious work but it does not break anything if you integrate them in virtualhost. It pays off to do things right, altho

Re: [users@httpd] NameVirtualHost fails

2022-07-07 Thread Daniel Ferradal
Yes, and that config is a good compendium of bad advice and deprecated directives. El mié, 6 jul 2022 14:28, Frank Gingras escribió: > Paul, > > Not sure how your example helps with the OP issue at all. > > On Wed, 6 Jul 2022 at 06:40, Paul Kudla (SCOM.CA Internet Services Inc.) < >

Re: [users@httpd] Slow web site response..PHP-8/CSS/Apache/

2022-06-23 Thread Daniel Ferradal
ience to share how to trouble shoot or what may the > root cause making this site response too slow. > > Kindly shed some light here. Any hints where to start most welcome.. > > Any more data needed pls let me know ..I can share . > > Thanks in advance, > Krish. > -- Daniel Ferradal HTTPD Project #httpd help at Libera.Chat

Re: [users@httpd] Issue with Apache 2.4.51 hanging

2021-10-26 Thread Daniel Ferradal
k_verdon > > > > This entire communication is sent on behalf of > > Youreko Ltd and is strictly confidential to and > > for the sole use of the intended addressee. > > > > Registered in England - 7448349 > > > > > > > > On Tue, 26 Oct 2021 at

Re: [users@httpd] Issue with Apache 2.4.51 hanging

2021-10-26 Thread Daniel Ferradal
APR-UTIL 1.5.4 >>>>>>> Architecture: 64-bit >>>>>>> Server MPM: prefork >>>>>>> threaded: no >>>>>>> forked: yes (variable process count) >>>>>>> Server compiled with >>>>>>> -D APR_HAS_SENDFILE >>>>>>> -D APR_HAS_MMAP >>>>>>> -D APR_HAVE_IPV6 (IPv4-mapped addresses enabled) >>>>>>> -D APR_USE_SYSVSEM_SERIALIZE >>>>>>> -D APR_USE_PTHREAD_SERIALIZE >>>>>>> -D SINGLE_LISTEN_UNSERIALIZED_ACCEPT >>>>>>> -D APR_HAS_OTHER_CHILD >>>>>>> -D AP_HAVE_RELIABLE_PIPED_LOGS >>>>>>> -D DYNAMIC_MODULE_LIMIT=256 >>>>>>> -D HTTPD_ROOT="/etc/httpd" >>>>>>> -D SUEXEC_BIN="/usr/sbin/suexec" >>>>>>> -D DEFAULT_PIDLOG="/var/run/httpd/httpd.pid" >>>>>>> -D DEFAULT_SCOREBOARD="logs/apache_runtime_status" >>>>>>> -D DEFAULT_ERRORLOG="logs/error_log" >>>>>>> -D AP_TYPES_CONFIG_FILE="conf/mime.types" >>>>>>> -D SERVER_CONFIG_FILE="conf/httpd.conf" >>>>>>> >>>>>>> # httpd -M >>>>>>> Loaded Modules: >>>>>>> core_module (static) >>>>>>> so_module (static) >>>>>>> http_module (static) >>>>>>> access_compat_module (shared) >>>>>>> actions_module (shared) >>>>>>> alias_module (shared) >>>>>>> allowmethods_module (shared) >>>>>>> auth_basic_module (shared) >>>>>>> auth_digest_module (shared) >>>>>>> authn_anon_module (shared) >>>>>>> authn_core_module (shared) >>>>>>> authn_dbd_module (shared) >>>>>>> authn_dbm_module (shared) >>>>>>> authn_file_module (shared) >>>>>>> authn_socache_module (shared) >>>>>>> authz_core_module (shared) >>>>>>> authz_dbd_module (shared) >>>>>>> authz_dbm_module (shared) >>>>>>> authz_groupfile_module (shared) >>>>>>> authz_host_module (shared) >>>>>>> authz_owner_module (shared) >>>>>>> authz_user_module (shared) >>>>>>> autoindex_module (shared) >>>>>>> cache_module (shared) >>>>>>> cache_disk_module (shared) >>>>>>> cache_socache_module (shared) >>>>>>> data_module (shared) >>>>>>> dbd_module (shared) >>>>>>> deflate_module (shared) >>>>>>> dir_module (shared) >>>>>>> dumpio_module (shared) >>>>>>> echo_module (shared) >>>>>>> env_module (shared) >>>>>>> expires_module (shared) >>>>>>> ext_filter_module (shared) >>>>>>> filter_module (shared) >>>>>>> headers_module (shared) >>>>>>> http2_module (shared) >>>>>>> include_module (shared) >>>>>>> info_module (shared) >>>>>>> log_config_module (shared) >>>>>>> logio_module (shared) >>>>>>> macro_module (shared) >>>>>>> mime_magic_module (shared) >>>>>>> mime_module (shared) >>>>>>> negotiation_module (shared) >>>>>>> remoteip_module (shared) >>>>>>> reqtimeout_module (shared) >>>>>>> request_module (shared) >>>>>>> rewrite_module (shared) >>>>>>> setenvif_module (shared) >>>>>>> slotmem_plain_module (shared) >>>>>>> slotmem_shm_module (shared) >>>>>>> socache_dbm_module (shared) >>>>>>> socache_memcache_module (shared) >>>>>>> socache_shmcb_module (shared) >>>>>>> status_module (shared) >>>>>>> substitute_module (shared) >>>>>>> suexec_module (shared) >>>>>>> unixd_module (shared) >>>>>>> userdir_module (shared) >>>>>>> version_module (shared) >>>>>>> vhost_alias_module (shared) >>>>>>> watchdog_module (shared) >>>>>>> dav_module (shared) >>>>>>> dav_fs_module (shared) >>>>>>> dav_lock_module (shared) >>>>>>> lua_module (shared) >>>>>>> mpm_prefork_module (shared) >>>>>>> proxy_module (shared) >>>>>>> lbmethod_bybusyness_module (shared) >>>>>>> lbmethod_byrequests_module (shared) >>>>>>> lbmethod_bytraffic_module (shared) >>>>>>> lbmethod_heartbeat_module (shared) >>>>>>> proxy_ajp_module (shared) >>>>>>> proxy_balancer_module (shared) >>>>>>> proxy_connect_module (shared) >>>>>>> proxy_express_module (shared) >>>>>>> proxy_fcgi_module (shared) >>>>>>> proxy_fdpass_module (shared) >>>>>>> proxy_ftp_module (shared) >>>>>>> proxy_http_module (shared) >>>>>>> proxy_hcheck_module (shared) >>>>>>> proxy_scgi_module (shared) >>>>>>> proxy_uwsgi_module (shared) >>>>>>> proxy_wstunnel_module (shared) >>>>>>> ssl_module (shared) >>>>>>> cgi_module (shared) >>>>>>> php7_module (shared) >>>>>>> >>>>>>> # yum list | grep mod_ >>>>>>> lighttpd-mod_authn_gssapi.x86_64 1.4.53-1.36.amzn1 >>>>>>> amzn-updates >>>>>>> lighttpd-mod_authn_mysql.x86_64 1.4.53-1.36.amzn1 >>>>>>> amzn-updates >>>>>>> lighttpd-mod_authn_pam.x86_641.4.53-1.36.amzn1 >>>>>>> amzn-updates >>>>>>> lighttpd-mod_geoip.x86_641.4.53-1.36.amzn1 >>>>>>> amzn-updates >>>>>>> lighttpd-mod_mysql_vhost.x86_64 1.4.53-1.36.amzn1 >>>>>>> amzn-updates >>>>>>> mod_auth_kerb.x86_64 5.4-10.9.amzn1 >>>>>>> amzn-main >>>>>>> mod_auth_mellon.x86_64 0.13.1-1.6.amzn1 >>>>>>> amzn-updates >>>>>>> mod_auth_mysql.x86_641:3.0.0-18.10.amzn1 >>>>>>> amzn-main >>>>>>> mod_auth_pgsql.x86_642.0.3-10.1.5.amzn1 >>>>>>> amzn-main >>>>>>> mod_authz_ldap.x86_640.26-16.8.amzn1 >>>>>>> amzn-main >>>>>>> mod_dav_svn.x86_64 1.9.7-1.54.amzn1 >>>>>>> amzn-main >>>>>>> mod_fcgid.x86_64 2.3.9-1.6.amzn1 >>>>>>> amzn-main >>>>>>> mod_geoip.x86_64 1.2.7-1.2.amzn1 >>>>>>> amzn-main >>>>>>> mod_nss.x86_64 1.0.10-1.13.amzn1 >>>>>>> amzn-main >>>>>>> mod_perl.x86_64 2.0.7-7.28.amzn1 >>>>>>> amzn-updates >>>>>>> mod_perl-devel.x86_642.0.7-7.28.amzn1 >>>>>>> amzn-updates >>>>>>> mod_proxy_html.x86_643.1.2-7.3.amzn1 >>>>>>> amzn-main >>>>>>> mod_python26.x86_64 3.3.1-17.20.amzn1 >>>>>>> amzn-main >>>>>>> mod_python27.x86_64 3.3.1-17.20.amzn1 >>>>>>> amzn-main >>>>>>> mod_security.x86_64 2.8.0-5.27.amzn1 >>>>>>> amzn-main >>>>>>> mod_security_crs.noarch 2.2.8-2.5.amzn1 >>>>>>> amzn-main >>>>>>> mod_security_crs-extras.noarch 2.2.8-2.5.amzn1 >>>>>>> amzn-main >>>>>>> mod_ssl.x86_64 1:2.2.34-1.16.amzn1 >>>>>>> amzn-main >>>>>>> mod_wsgi-python26.x86_64 3.2-6.12.amzn1 >>>>>>> amzn-updates >>>>>>> mod_wsgi-python27.x86_64 3.2-6.12.amzn1 >>>>>>> amzn-updates >>>>>>> >>>>>>> *--* >>>>>>> >>>>>>> *Patrick Verdon | Founder* >>>>>>> Web: www.youreko.com >>>>>>> Mobile: +44 (0)7809 296438 >>>>>>> Skype: patrick_verdon >>>>>>> >>>>>>> This entire communication is sent on behalf of >>>>>>> Youreko Ltd and is strictly confidential to and >>>>>>> for the sole use of the intended addressee. >>>>>>> >>>>>>> Registered in England - 7448349 >>>>>>> >>>>>>> >>>>>> -- Daniel Ferradal HTTPD Project #httpd help at Libera.Chat

Re: [users@httpd] Re: Is it possible to override ... ?

2021-10-21 Thread Daniel Ferradal
foo" > > > . > . > . > > === > > But I am getting a Forbidden response. Also sometimes the browser seems to > "loop", adding "/index.html" to the end of the URL in the address bar. > > So I was wondering: Is there a way to accomplish what I am trying to do, > without disturbing the ?? > > Thanks, > Jim > -- Daniel Ferradal HTTPD Project #httpd help at Libera.Chat - To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org

Re: [users@httpd] Stupid question on mod_header

2021-10-06 Thread Daniel Ferradal
Probably because the header is being added later in a different sub-context. That is, at the time apache sets the header for virtual host there is no other header of the same name defined, so there is nothing to eliminate and set instead, but then the path for the reverse proxy to tomcat is being

Re: [users@httpd] Browsers appear to be ignoring 401 responses with WWW-Authenticate

2021-10-04 Thread Daniel Ferradal
r to process the response? > > > > In this type of scenario, is there some other restriction that would > > prevent or cause the browser to not popup the login window, even though the > > requests and responses appear to be all right? > > > > Sorry about my description of this problem, but this scenario is > > complicated to explain :

Re: [users@httpd] Avoiding host header exploit in apache

2021-08-27 Thread Daniel Ferradal
Server is not configured with any domain names, so I cant use ServerName and > UseCanonicalName directives to address the issue properly. > > Pls help me, how to check the Host header to listening address and take > corrective action. >

Re: [users@httpd] Bug in mod_proxy_balancer or just a bad configuration?

2021-06-17 Thread Daniel Ferradal
03 >> >> going back to http://myserver/goog redirects to Yahoo and dets a set-cookie >> RZROUTEID=.02 >> >> Nick >> >> On Tue, Jun 15, 2021 at 7:57 PM Nick Folino wrote: >>> >>> I thought that too, but if the rz proxypass was catching all

Re: [users@httpd] Bug in mod_proxy_balancer or just a bad configuration?

2021-06-15 Thread Daniel Ferradal
If I am looking at it correctly the order of the ProxyPass directives you defined is not the correct one, /sz defined first would be overriding /sz2. So sz2 should be defined first. Perhaps that's why you are getting wrong values ? (Browser cache or similar?) El mar., 15 jun. 2021 19:00, Nick

Re: [users@httpd] [External] Re: [users@httpd] Struggling with "decryption failed or bad record mac" error

2021-06-14 Thread Daniel Ferradal
edHat 7.9), we have this random problem only > > from a customer that is using .net. In my opinion it should be a client > > problem but hard to demonstrate. > > Which specific directives do you want to see of httpd-ssl.conf? > > > > > > Matteo >

Re: [users@httpd] PreShared Key (PSK) possible? Configuration?

2021-05-31 Thread Daniel Ferradal
ion times - stop exaggerating!" >> >>Please reply to the list; >> please *don't* CC >> me. >

Re: [users@httpd] Poor Load Balancer performance

2021-05-27 Thread Daniel Ferradal
istake, > please notify the sender and proceed to its elimination, without spreading, > storing or copying its content. Print this email only if necessary. > > Le contenu de cet e-mail et de ses pièces jointes est strictement > confidentiel. Dans le cas où vous n'êtes pas le destinataire et avez reçu > ce message par erreur, veuillez en informer l'expéditeur et procéder à sa > suppression, sans diffuser, stocker ou copier son contenu. Imprimez cet > e-mail uniquement si nécessaire. > -- Daniel Ferradal HTTPD Project #httpd help at Libera.Chat

Re: [users@httpd] Struggling with "decryption failed or bad record mac" error

2021-05-23 Thread Daniel Ferradal
ease notify the sender immediately and delete the original. Any > other use of the e-mail by you is prohibited. Where allowed by local law, > electronic communications with Accenture and its affiliates, including e-mail > and instant m

Re: [users@httpd] Public viewing when it should be private

2021-05-20 Thread Daniel Ferradal
served up for authenticated users? > > I'm not finding a way to avoid a second authentication process just to view > documentation that is private info for only authorized users > > (Fyi we have thousands of users that need access to this documentation.)

Re: [users@httpd] Connect to a node instead of a cluster

2021-05-17 Thread Daniel Ferradal
I can I > suppose I will need to map it to same real dir? > > Thanks, > Asif > > > On Mon, May 17, 2021 at 1:39 PM Daniel Ferradal > wrote: > >> Define a ProxyPass directive with a unique path pointing to one of the >> node you want to use >> >>

Re: [users@httpd] Connect to a node instead of a cluster

2021-05-17 Thread Daniel Ferradal
Define a ProxyPass directive with a unique path pointing to one of the node you want to use Hint ProyPass /adminpath/ http://server1/admin/ El lun., 17 may. 2021 19:03, escribió: > Hi All, > > I have a load balancer setup like below > > > BalancerMember http://msts1acnf001:8098 route=1 >

Re: [users@httpd] Why so much difference in memory used per process in apache2 between two different systems

2021-05-17 Thread Daniel Ferradal
y procedas a su > eliminación, sin difundir, almacenar o copiar su contenido. Imprimir este > correo solo si es necesario. > > The content of this email and its attachments is strictly confidential. If > you are not the recipient and you have received this message by mistake, > please notify the sender and proceed to its elimination, without spreading, > storing or copying its content. Print this email only if necessary. > > Le contenu de cet e-mail et de ses pièces jointes est strictement > confidentiel. Dans le cas où vous n'êtes pas le destinataire et avez reçu > ce message par erreur, veuillez en informer l'expéditeur et procéder à sa > suppression, sans diffuser, stocker ou copier son contenu. Imprimez cet > e-mail uniquement si nécessaire. > -- Daniel Ferradal HTTPD Project #httpd help at Freenode

Re: [users@httpd] Is proxy to proxy improving the security?

2021-05-15 Thread Daniel Ferradal
The weakest link is always the application at the end of the chain. Reverse proxying is basically handing down the request to another server, so what really matters IMHO is what you expose of the application to the upper layers and what those who access it can do with it. Considering the

Re: [users@httpd] Professional Product

2021-04-30 Thread Daniel Ferradal
dministration-Guide-Francesco-Marchioni/dp/8894038920 > > > > Best Regards > > > > back.button@aol. > > > > > > danawhite...@aol.com > > > --------- &g

Re: [users@httpd] mod_proxy_hcheck response timeout?

2021-04-27 Thread Daniel Ferradal
then.. I just checked.. nothing, zero to the second worker. (I had previously stop|started apache and the module is even loaded from some other path to make sure I don't confuse one for the other...) El mar, 27 abr 2021 a las 12:55, Daniel Ferradal () escribió: > > Wow Yann, > > Th

Re: [users@httpd] mod_proxy_hcheck response timeout?

2021-04-27 Thread Daniel Ferradal
ing URI (not the rest of normal uri). So mod_proxy_hcheck should be disabling this worker constantly. Am I correct? If you need more information or some specific logging do not hesitate to ask. Cheers El lun, 26 abr 2021 a las 22:51, Yann Ylavic () escribió: > > Hi Daniel, > >

Re: [users@httpd] mod_proxy_hcheck response timeout?

2021-04-26 Thread Daniel Ferradal
Ahh, thanks now I understand. I appreciate your feedback. El lun, 26 abr 2021 a las 17:48, Suvendu Sekhar Mondal () escribió: > > Hello Daniel, > > On Mon, Apr 26, 2021 at 7:02 PM Daniel Ferradal wrote: > > > > Thanks for answering > > > > Can you please ela

Re: [users@httpd] mod_proxy_hcheck response timeout?

2021-04-26 Thread Daniel Ferradal
l the health check module is enhanced. -- Daniel Ferradal HTTPD Project #httpd help at Freenode - To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org

[users@httpd] mod_proxy_hcheck response timeout?

2021-04-22 Thread Daniel Ferradal
to mention response timeout, rather than checks piling up. Thanks in advance -- Daniel Ferradal HTTPD Project #httpd help at Freenode - To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For additional commands, e-mail

Re: [users@httpd] Random 500 errors

2021-04-20 Thread Daniel Ferradal
If rewriterules cause the error you would get the log in the httpd error log too. Possibly what you mention, php or whatever backend.. El mar, 20 abr 2021 a las 19:01, Dave Wreski () escribió: > > > > On 4/20/21 12:41 PM, Daniel Ferradal wrote: > > We can just speculate here

Re: [users@httpd] Random 500 errors

2021-04-20 Thread Daniel Ferradal
We can just speculate here to those questions. Rule of thumb if not showing in httpd error log, not httpd error. El mar, 20 abr 2021 a las 15:59, Dave Wreski () escribió: > > > > On 4/20/21 8:54 AM, Daniel Ferradal wrote: > > That's the key then, you are probably reverse

Re: [users@httpd] SSLCipherSuite DEFAULT

2021-04-20 Thread Daniel Ferradal
ng for any > cipher-based vulnerabilities that are announced or reported by any > vulnerability testing you might have performed. > > https://www.ssllabs.com/ssltest/ > is a pretty nice site to check on your httpd SSL configs. > > Jim > > > > > > > --

Re: [users@httpd] Logging issue

2021-04-20 Thread Daniel Ferradal
name instead of > IP address: > > - Create multiple VirtualHost directives where the ServerName would be > app1.domain.com, app2.domain.com. These can then be mapped to different > directory trees. > > - This should allow for using a different php

Re: [users@httpd] Random 500 errors

2021-04-20 Thread Daniel Ferradal
es this mean? Is this just reporting the error or something > > related to mod_sec causing the error? > > > > Thanks, > > Dave > > > > > > > > - > > To unsubscribe

Re: [users@httpd] config is silently ignored

2021-04-20 Thread Daniel Ferradal
ve. > > Thanks > Adrian > > On Tue, 20 Apr 2021 13:38:08 +0200 > Daniel Ferradal wrote: > > > Hello, > > > > This says you have two virtualhosts pointing to the same name, so only > > the first one will be used: > > > > (/etc/apache2/s

Re: [users@httpd] config is silently ignored

2021-04-20 Thread Daniel Ferradal
gt; > LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" > \"%{User-agent}i\"" combined > CustomLog /var/log/apache2/access.log combined ServerSignature > On > > Alias /doc/ "/usr/share/doc/" >

Re: [users@httpd] config is silently ignored

2021-04-20 Thread Daniel Ferradal
ave no remaining 2.2 syntax in my config. > > Let me know what else you may need and I'll provide it. > > Thanks > > > - > To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org >

Re: [users@httpd] Random 500 errors

2021-04-19 Thread Daniel Ferradal
Hello, If the error comes from apache itself you should have an error log entry, what does it say? El mar., 20 abr. 2021 4:03, Dave Wreski escribió: > Hi, > > I have an apache-2.4.46 system on fedora33 and having weird 500 errors > that I can't explain. > > 72.70.38.104 - -

Re: [users@httpd] Logging issue

2021-04-17 Thread Daniel Ferradal
s you can tell me what I am > doing wrong? That would solve two issues, I no longer have to post questions > on this topic and you could show that you are helpful and knowledgable... > Obviously I have consulted other sources, including the documentation. > > This is a user supp

Re: [users@httpd] apache error 500 weirdness

2021-04-12 Thread Daniel Ferradal
/%B H:%H U:%U ls443 s:%>s V:%V v:%v" timing > > The %b in the entry above appears to be 121 megabytes. How is that possible? > How can I debug this? I have display_errors = On in my PHP settings and have > debugging enabled for php-fpm but no errors are being reported. > >

Re: [users@httpd] Running php 7.0 and 7.2 for different websites with apache

2021-04-09 Thread Daniel Ferradal
a las 18:10, H () escribió: > > On 04/09/2021 11:48 AM, Daniel Ferradal wrote: > > That´s probably it. You still have php7_module, and are probably > > pointing to it somewhere in your config. For the looks of it you need > > a serious and thorough cleanup of your configuration t

Re: [users@httpd] Running php 7.0 and 7.2 for different websites with apache

2021-04-09 Thread Daniel Ferradal
: > > On 04/09/2021 06:03 AM, Daniel Ferradal wrote: > > Looks correct yes. But still lots of things you are not showing could be > > wrong. > > > > To solve issues you have to go one thing at a time, you know for sure > > apache is pointing to different ports,

Re: [users@httpd] Running php 7.0 and 7.2 for different websites with apache

2021-04-09 Thread Daniel Ferradal
port, that you disabled all mod_php stuff, etc. things we can't see because you don't show, so it is quite hard to hand-guide you with just small bits of info. El vie, 9 abr 2021 a las 3:26, H () escribió: > > On 04/08/2021 08:57 PM, Daniel Ferradal wrote: > > There is no such thing as

Re: [users@httpd] Running php 7.0 and 7.2 for different websites with apache

2021-04-08 Thread Daniel Ferradal
SetHandler "proxy:fcgi://localhost:9003" > >> > >> > >> Apache is really much more simple and easier than many examples out > >> there try to show. > >> > >> El jue, 8 abr 2021 a las 23:54, H () escribió: > >>> O

Re: [users@httpd] Running php 7.0 and 7.2 for different websites with apache

2021-04-08 Thread Daniel Ferradal
lhost:9002" In the other virtualhost you want to have pointing to 9003: SetHandler "proxy:fcgi://localhost:9003" Apache is really much more simple and easier than many examples out there try to show. El jue, 8 abr 2021 a las 23:54, H () escribió: > > On 04/08/2021

Re: [users@httpd] Running php 7.0 and 7.2 for different websites with apache

2021-04-08 Thread Daniel Ferradal
-------- > To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org > For additional commands, e-mail: users-h...@httpd.apache.org > -- Daniel Ferradal HTTPD Project #httpd help at Freenode - To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org

Re: [users@httpd] Wordpress | user:group setting

2021-04-04 Thread Daniel Ferradal
I should indentify my user:group setting for my personal > website? > Currently I own my website as www:www (for Wordpress auto-update sake). > Would it be more safe to set this to www:me ? > > Thanks, Jos -- Daniel Ferradal HTTPD Project

Re: [users@httpd] Apache 2.4.37 graceful restart causes error “scoreboard is full, not at MaxRequestWorkers.Increase ServerLimit.”

2021-03-30 Thread Daniel Ferradal
rt multiple times in succession for > many log files? > > - > To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org > For additional commands, e-mail: users-h...@httpd.apach

Re: [users@httpd] time based not working

2021-03-19 Thread Daniel Ferradal
We replied to him in irc, I think he is past that but hasn't updated his findings here. Suggestions were check rewritelog, consider not using OR El vie., 19 mar. 2021 14:35, Rich Bowen escribió: > > > On 3/18/21 3:06 AM, Jens Kallup wrote: > > Hello, > > how can I time based open times? > >

Re: [users@httpd] Apache Reverse Proxy for more than one website.

2021-03-16 Thread Daniel Ferradal
the list; > please *don't* CC me. > > > - > To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org > For additional commands, e-mail: us

Re: [users@httpd] The number of child processes is less than MinSpareThreads.

2021-03-14 Thread Daniel Ferradal
; > This is working as designed, the server checks only once per second to > see if processes need to be started or killed based on the current > idle threads. > > ----- > To unsubscribe,

Re: [users@httpd] Expected behavior for "If-Modified-Since: " and CGI generated content?

2021-03-14 Thread Daniel Ferradal
internet & unix support - > Heiko Schlittermann, Dipl.-Ing. (TU) - {fon,fax}: +49.351.802998{1,3} - > gnupg encrypted messages are welcome --- key ID: F69376CE - -- Daniel Ferradal HTTPD Project #httpd help at Freenode ---

Re: [users@httpd] Apache Reverse Proxy and Load Balancer.

2021-03-14 Thread Daniel Ferradal
- > To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org > For additional commands, e-mail: users-h...@httpd.apache.org > -- Daniel Ferradal HTTPD Project #httpd help at Freenode - To unsubscribe, e-mail: users-unsu

Re: [users@httpd] Distribution of workers between processes and threads

2021-03-14 Thread Daniel Ferradal
users-unsubscr...@httpd.apache.org > For additional commands, e-mail: users-h...@httpd.apache.org > -- Daniel Ferradal HTTPD Project #httpd help at Freenode - To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org

Re: [users@httpd] Re: httpd[803535]:

2021-03-14 Thread Daniel Ferradal
HTTP > > Server. > > > > > > What is the correct syntax? > > > > Thank you. > > > > > How are loaded your conf files? > > Something like: > Include conf.d/*.conf > somewhere? > > CJ > > --

Re: [users@httpd] HTTPD Proxy Errors

2021-03-11 Thread Daniel Ferradal
idance into how we can successfully pinpoint where > the issue lies. Is it the fact that the application is simply not responding > to the request in the allotted configured settings? We can certainly test > that option but being a PRD environment we'll need to schedule the process. > Therefore, I'd like to get some thoughts on what we can do to pinpoint > exactly what is going on here. > > Thanks in advance, > > HB > -- Daniel Ferradal HTTPD Project #httpd help at Freenode - To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org

Re: [users@httpd] some questions to mod_rewrite

2021-01-02 Thread Daniel Ferradal
To find out if they are reasonable I would ask the nextcloud guys. They may be placeholder directives in case you are using certain plugin of theirs or similar. Cheers El jue, 17 dic 2020 a las 19:36, Lentes, Bernd () escribió: > > > > - On Dec 17, 2020, at 5:19 PM, Daniel Fer

Re: [users@httpd] some questions to mod_rewrite

2020-12-17 Thread Daniel Ferradal
Helmholtz Zentrum München > > Helmholtz Zentrum Muenchen > Deutsches Forschungszentrum fuer Gesundheit und Umwelt (GmbH) > Ingolstaedter Landstr. 1 > 85764 Neuherberg > www.helmholtz-muenchen.de > Aufsichtsratsvorsitzende: MinDir.in Prof. Dr. Veronika von Messling > Geschae

Re: [users@httpd] Alternative to Let's Encrypt?

2020-12-17 Thread Daniel Ferradal
Rodriguez () escribió: > > Is there any? > Asking because don't want to use snap. -- Daniel Ferradal HTTPD Project #httpd help at Freenode - To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For additional co

Re: [users@httpd] Ratelimiting Apache File Upload Speed

2020-12-17 Thread Daniel Ferradal
ubscr...@httpd.apache.org > For additional commands, e-mail: users-h...@httpd.apache.org > -- Daniel Ferradal HTTPD Project #httpd help at Freenode - To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org

Re: [users@httpd] virtual host DocumentRoot being ignored

2020-12-13 Thread Daniel Ferradal
; DocumentRoot. > >> > >> Any help will be greatly appreciated. > >> > >> Thanks, > >> --Richard > >> > >> ----- > >> To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org > >> For additional commands, e-mail: users-h...@htt

Re: [users@httpd] Questions to SSLciphersuite

2020-11-28 Thread Daniel Ferradal
Matthias Tschoep, Kerstin Guenther > Registergericht: Amtsgericht Muenchen HRB 6466 > USt-IdNr: DE 129521671 > > > - > To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org > For additional commands, e-mail: users-h...@httpd.apache.org > -- Daniel Ferradal HTTPD Project #httpd help at Freenode - To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org

Re: [users@httpd] Disable directory indexing for a specific directory.

2020-11-28 Thread Daniel Ferradal
t;>> > >>> > >>> Thank you. > >>> > >>> - > >>> To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org > >>> For additional commands, e-mail: users-h...@httpd.apache.org > >>> - > >>> To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org > >>> For additional commands, e-mail: users-h...@httpd.apache.org > > >>> > >> - > >> To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org > >> For additional commands, e-mail: users-h...@httpd.apache.org > >> > >> > >> - > >> To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org > >> For additional commands, e-mail: users-h...@httpd.apache.org > >> > > - > > To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org > > For additional commands, e-mail: users-h...@httpd.apache.org > > > > > > - > > To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org > > For additional commands, e-mail: users-h...@httpd.apache.org > > > > - > To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org > For additional commands, e-mail: users-h...@httpd.apache.org > -- Daniel Ferradal HTTPD Project #httpd help at Freenode - To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org

Re: [users@httpd] Configuring KeepAliveTimeout to individual URIs

2020-10-13 Thread Daniel Ferradal
keepalive timeout is n/a in the middle of a >> response. >> >> ----- >> To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org >> For additional commands, e-mail: users-h...@httpd.apache.org

Re: [users@httpd] CentOS 8 / Apache 2.4.37 / Optimzing

2020-10-13 Thread Daniel Ferradal
eed and also to take load off the web server as much as > possible. > > Any suggestions? > > Thanks a lot. > > Devin Acosta -- Daniel -- Daniel Ferradal HTTPD Project #httpd help at Freenode - To unsubscribe, e

Re: [users@httpd] To Gzip or not? [EXT]

2020-10-12 Thread Daniel Ferradal
ute is operated by Genome Research > Limited, a charity registered in England with number 1021457 and a > company registered in England with number 2742969, whose registered > office is 215 Euston Road, London, NW1 2BE. > > - > To unsubscribe, e-mail: users-unsubscr...@httpd.apache.or

Re: [users@httpd] SAMEORIGIN and multiple ALLOWFROM X-Frame-Options

2020-10-12 Thread Daniel Ferradal
t the response is: > > example.com refused to connect > > Is this the proper way to set up this need (SAMEORIGIN and multiple URL > allows)? Are there any concerns with this type of configuration? > > Any guidance is

Re: [users@httpd] Make apache2 (httpd) portable under Linux

2020-02-03 Thread Daniel Ferradal
> >> make >> >> to build httpd, then >> >> sudo make install >> >> to install it /usr/local/httpd-2.4.41 >> >> Other configure options can be found via command : >> >> ./configure --help >> >> thx >> >> -- >> Alain >> > > > -- > Alain > --- > Kubuntu 17.10 > MySQL 5.6.x > Apache 2.4.25 / OpenSSL 1.0.2j > Tomcat 7.17 > PHP 7.1.x -- Daniel Ferradal HTTPD Project #httpd help at Freenode - To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org

Re: [users@httpd] SSL certificate update failed - httpd-2.4.6-90.el7

2020-01-07 Thread Daniel Ferradal
hout adding the Alias directive. > > make clients connecting ignore the name mismatches - How to do that for > Chrome > > Regards > Sachin Kumar > > > > On Tue, Jan 7, 2020 at 6:58 PM Daniel Ferradal > wrote: > >> Hello, >> >> The key to your cer

  1   2   >