Re: [users@httpd] mod_ssl, client certificates and r->username

Hello. FYI; If you want to use the following: SSLUserName *SSL_CLIENT_S_DN_UID* You need (equal to, or greater than) httpd-2.2.14. See BUG https://issues.apache.org/bugzilla/show_bug.cgi?id=45107 I'm not sure why the BUG has been reopened - It works great, for me, with httpd-2.2.14. PS: Y

Re: [users@httpd] Re: Apache2+LDAP authentication problem

Tomas hello. It works for me, I have the following: httpd.conf: AuthLDAPURL "ldaps://:636/ou=internal,ou=People,o=group" # Note the above is simpler than yours # Note I don't use AuthzLDAPAuthoritative off ... AuthLDAPBindDN "cn=asdf,...,o=group"

Re: [us...@httpd] security: fully blown chroot environment vs chrootdir

Just a thought recommended to me by RedHat last year. Run SELinux : SELinux can enforce the access rights of every user, application, process, and file within a Red Hat system to a degree previously unavailable in enterprise operating systems. It ensures that a

Re: [users@httpd] Re-use of a Setenv directive

_SETENVIF_ENV_REMOTE_PORT_PERCENT="" A_SETENVIF_LA_F_REMOTE_PORT="" A_SETENVIF_LA_F_REMOTE_PORT_DOLLAR="" A_SETENVIF_LA_F_REMOTE_PORT_PERCENT="" A_SETENVIF_LA_U_REMOTE_PORT="" A_SETENVIF_LA_U_REMOTE_PORT_DOLLAR="" A_SETENVIF_

Re: [users@httpd] Re-use of a Setenv directive

Sébastien, hello. I don't have a solution for you but I'm waiting for a similar reply. I hope the following helps: From my e-mail thread entitled, 'Setting CGI environment variables, dynamically, from httpd.conf leveraging exising variables': ... 2. Technique 2: setenv DAVESETENV "text" ---

[us...@httpd] RewriteRule .* - [E=TEMP_SMUSER:%{SSL:OID("2.5.29.17")}] # Subject Alternate Name

Server version: Apache/2.2.4 (Win32) Hello and thanks for your much appreciated help in the past. I'm trying a re-write rule that uses OID "2.5.29.17" - Subject Alternate Name. I've tried various permutations: # 20101019 DD Following doesn't work with result: TEMP_SMUSER="" in getenv.cg

[us...@httpd] Re: RewriteRule E=SMUSER:%{LA-U:REMOTE_USER} works but not E=SMUSER:%{LA-U:SSL_CLIENT_S_DN_EMAIL}

My bad, it works as follows (worth noting for the archives). RewriteRule .* - [E=SMUSER:%{SSL:SSL_CLIENT_S_DN_Email}] Cdlt, Dave -- David (Dave) Donnan wrote: Hello again. I hope I've not overstayed my welcome. RewriteRule .* - [E=SMUSER:%{LA-U:REMOTE_USER}] works for bo

[us...@httpd] RewriteRule E=SMUSER:%{LA-U:REMOTE_USER} works but not E=SMUSER:%{LA-U:SSL_CLIENT_S_DN_EMAIL}

RIABLE } http://httpd.apache.org/docs/current/mod/mod_rewrite.html#rewriterule Is SSL_CLIENT_S_DN_EMAIL not supported or am I, perhaps, missing something ? Any help would be greatly appreciated, Dave --- David (Dave) Donnan wrote: Hello everybody. Eric, thanks for the rapide response. I too

Re: [us...@httpd] Setting CGI environment variables, dynamically, from httpd.conf leveraging exising variables

ave PS: I had no luck with setenvif but I'm more than happy with the RewriteRule. -- Eric Covener wrote: On Tue, Sep 28, 2010 at 10:02 AM, David (Dave) Donnan wrote: RewriteEngine on RewriteRule .* - [E=SMUSER:%{$REMOTE_USER}] RequestHeader set my_new_header %{SMUSER}e

Re: [us...@httpd] SSL_CLIENT_S_DN_UID not available with client certificate authentication

with httpd 2.2.14. Assuming the BUG is, in fact, my problem I'll wait and test with 2.2.14. Sorry, I was testing with 2.2.13. Cdlt, Dave ---- David (Dave) Donnan wrote: Hello and thanks for all your help in the past. I'm an x SUN (iplanet/Sun ONE) employee retraining on OpenSource so

[us...@httpd] SSL_CLIENT_S_DN_UID not available with client certificate authentication

Hello and thanks for all your help in the past. I'm an x SUN (iplanet/Sun ONE) employee retraining on OpenSource so I really appreciate any help that you can give me. It's incredible to see this community helping each other (for FREE !) and I intend to participate actively in the future. I've

[us...@httpd] What 'configure' options used to build RPM image of Apache, ie, --prefix=/etc/httpd --bindir etc.

Hello. I'm a new-bee and I apologize, in advance, for my ignorance. Also, I hope I've done sufficient research and, therefore, am asking questions the smart way! Alternate Subject: In order to install a patch, how can I overlay a squid 'configure/make/make install' onto an existing RPM instal