[users@httpd] Re: CVE-2019-0211 - Apache 2.2

2019-04-03 Thread LuKreme
On Apr 3, 2019, at 02:05, Hajo Locke wrote: > Is apache 2.2 exploitable by CVE-2019-0211 ? > Description says that first affected version is 2.4.17, but may be 2.2 was > not analyzed. “Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38” seems clear. -- My main job is trying to come up with new

[users@httpd] Re: Apache 2.4 and DirectoryIndex and htaccess

2018-06-14 Thread LuKreme
On Jun 13, 2018, at 11:50, Frank Gingras wrote: > > That isn't the relevant error from the error log. We need that entry to help > you. That is the ONLY thing logged in the error log. > A 403 as such is always logged in the error log, perhaps with the exception > of cases when you use a

[users@httpd] Re: Reditect HTTP to HTTPS .htaccess

2018-03-04 Thread LuKreme
I don't do this in .htaccess, I do it in ServerName www.example.com ServerAlias example.com Redirect / https://www.example.com/ But something like this should work in .htaccess as well: RewriteEngine On RewriteCond %{SERVER_PORT} 80 RewriteRule ^(.*)$ https://www.example.com/$1

[users@httpd] Re: Apache Unix

2015-01-07 Thread LuKreme
On Dec 29, 2014, at 12:01 PM, Gil Dawson g...@gildawson.com wrote: Apache V2.2 is running fine on my machine (a Mac Mini with MacOS 10.6.8). I am reading the \private\etc\apache2\httpd,conf file to understand Apache. Curious, why are you typing \’s for paths? -- Indecision is the key to

[users@httpd] Re: Mailing list issues

2015-01-07 Thread LuKreme
On Dec 29, 2014, at 11:52 PM, Rian Kruger riankru...@gmail.com wrote: Where can I find out why my previous email (yesterday) to the list was not distributed? This message: Date: Mon, 29 Dec 2014 20:50:17 +0200 Message-ID: cano9kmfxqhujbyxe4bmeibs_4o3__5cdcy1ugp3rvgub7ok...@mail.gmail.com

[users@httpd] Changes in 2.4 require Directory?

2014-10-01 Thread LuKreme
I had a domain that had been inactive for several years (as far as a web page is concerned, it still received email and some other services). I went to enable the domain by uncommenting it’s host block, and it did not work. VirtualHost *:80 ServerName www.thedomain.tld ServerAlias

[users@httpd] Re: Apache 2.4 - non adoption reasons??

2014-07-18 Thread LuKreme
On 18 Jul 2014, at 11:31 , Good Guy xfs...@hotmail.com wrote: Upgrades should be about new features and new codes/syntax but the old one should still work. I'm pretty happy not being stuck with apache 0.7¹ syntax, myself. ¹ I think that was the initial pre-release a patchy server version back

[users@httpd] Re: heartbleed and httpd configuration

2014-04-15 Thread LuKreme
On 15 Apr 2014, at 15:27 , Christopher Schultz ch...@christopherschultz.net wrote: Steven, On 4/12/14, 2:15 PM, Steven Siebert wrote: I think it would be unlikely because the httpd configuration data would be read into memory early on the heap (and in a very low volatile area where that

[users@httpd] Re: Escaping space in SetEnv

2014-04-11 Thread LuKreme
On 10 Apr 2014, at 00:48 , Nawalramka, Priyanka priyanka.nawalra...@hp.com wrote: SetEnv dir_root /dir1/m1/s1/my dir SetEnv dir_root /dir1/m1/s1/my\ dir (yes, quoted AND escaped). -- 'I don't see why everyone depends on me. I'm not dependable. Even I don't depend on me, and I'm me.'

[users@httpd] Re: !!! Urgently need apache 2.4.3 source code Urgent due to heartbleed bug]

2014-04-10 Thread LuKreme
On 10 Apr 2014, at 10:00 , Daniel Gruno rum...@cord.dk wrote: On 04/10/2014 09:42 AM, Sachin Goyal wrote: Where can I find apache 2.4.3 source code to download? I have apache 2.4.3 binaries running in production server but i don't that source code. Now I need to rebuild apache

[users@httpd] ApacheCon (OT question for US taxpayers)

2014-03-04 Thread LuKreme
For those of you who are US Taxpayers, are all costs of attending a convention like ApacheCon fully deductible? Including hotels and transportation? Food? Bar tab? (Yes, I know, but I figure there’s a load of you paying for this yourself who know, and trawling through the IRS web site will

[users@httpd] Re: Allow access only from the index page

2014-02-24 Thread LuKreme
On 24 Feb 2014, at 09:55 , fabio.schm...@4linux.com.br wrote: Thanks for the answers, I will try with HTTP_REFERER. Be aware that this will mean that no pages on your site can contain any links to your site, so if someone goes to index.html and then to foo.html, foo.html cannot link to

[users@httpd] Re: WebDAV oddness

2014-01-24 Thread LuKreme
On 03 Jan 2014, at 14:34 , LuKreme krem...@kreme.com wrote: On my Apache 2.4.6 (under FreeBSD 8.0-RELEASE) I have two nearly identical directives setup for webdav. The first is in users/example.com.conf and the second is in extras/vhosts.conf: Still beating my head against this, nothing I

[users@httpd] Re: ApacheCon 2014 and Call for Papers

2014-01-14 Thread LuKreme
On 14 Jan 2014, at 06:57 , Rich Bowen rbo...@rcbowen.com wrote: The Apache Software Foundation is pleased to announce that ApacheCon North America will be held in Denver, Colorado, April 7-9, 2014. Well, that might be fun. -- showing snuffy is when Sesame Street jumped the shark

[users@httpd] Re: WebDAV oddness

2014-01-04 Thread LuKreme
In our previous episode (Friday, 03-Jan-2014), LuKreme said: This second dav will generate errors: After further testing (using cadaver) I now get this: cadaver http://webdav.example.net/ Authentication required for Randy on server `webdav.example.net'; Username: randy Password: wrongpassword

[users@httpd] WebDAV oddness

2014-01-03 Thread LuKreme
On my Apache 2.4.6 (under FreeBSD 8.0-RELEASE) I have two nearly identical directives setup for webdav. The first is in users/example.com.conf and the second is in extras/vhosts.conf: virtualhost *:80 ServerName virtual.example.net DocumentRoot /www/example.net/ DavLockDB

[users@httpd] Re: alias issue on mac

2014-01-01 Thread LuKreme
In our previous episode (Tuesday, 31-Dec-2014), Érico said: Hi no idea on this please? You said: [Fri Dec 27 14:29:42 2013] [error] [client 127.0.0.1] (13)Permission denied: access to /mysql/ denied (filesystem path '/Users/ericomtx/development/php/MySQL-Admin_3_4_0_full') because

[users@httpd] Checking SSLCiphersuite?

2013-12-04 Thread LuKreme
How do I checks what ciphers are available to the https compiled binary, and how do I check with of those are active in the configuration? Is there any technical reason that ECDHE-RSA-AES128-SHA256 cannot be used on a server with a self-signed cert (there's no e-commerce or any financial data

[users@httpd] Re: apache 2.4

2013-09-04 Thread LuKreme
On 04 Sep 2013, at 07:20 , Eric Covener cove...@gmail.com wrote: On Wed, Sep 4, 2013 at 9:03 AM, LuKreme krem...@kreme.com wrote: Is it the case that in apache 2.4 you must add a directory structure for every directory you want to access and then add explicit allow permissions

[users@httpd] Re: WebDAV sort of works

2013-08-10 Thread LuKreme
On Aug 10, 2013, at 3:37, Igor Cicimov icici...@gmail.com wrote: First, the statements are case sensitive so location should be Location and virtualhost should be VirtualHost. What? Since when? - To unsubscribe, e-mail:

[users@httpd] WebDAV sort of works

2013-08-09 Thread LuKreme
I have the following structure in /etc/httpd/extras/httpd-vhost.conf (apache 2.4) virtualhost *:80 ServerName webdav.example.com DocumentRoot /usr/local/www/ DavLockDB /tmp/DavLock.rotdav location / DAV On AuthType digest AuthName Root AuthUserFile

[users@httpd] Re: AuthType Digest in 2.4?

2013-08-08 Thread LuKreme
On 07 Aug 2013, at 17:17 , Ben Reser b...@reser.org wrote: On Wed, Aug 7, 2013 at 6:20 AM, LuKreme krem...@kreme.com wrote: First, when we set this up ages ago-go, the way to go was AuthType digest And I rather suspect that is *nt* the recommended way to go with 2.4. Unless you're

[users@httpd] Re: How limit directives at htaccess file

2013-08-07 Thread LuKreme
On 06 Aug 2013, at 12:54 , Pol Hallen apach...@fuckaround.org wrote: Hi all, I'm study apache and I don't understand some things about htaccess. Reading, the advice is: never permit htaccess to users. That's terrible advice, or very outdated advice. .htaccess is required, for example, for

[users@httpd] AuthType Digest in 2.4?

2013-08-07 Thread LuKreme
I had webDAV setup previously, but disabled it when transitioning to 2.4. Before I dive in and try to get it working again, I have a couple of questions. First, when we set this up ages ago-go, the way to go was AuthType digest And I rather suspect that is *nt* the recommended way to go with

[users@httpd] Re: Broken includes and cgis with Apache 2.4 update

2013-08-06 Thread LuKreme
On 06 Aug 2013, at 05:05 , Eric Covener cove...@gmail.com wrote: AllowOverride defaults to off in 2.4. Turn it on. Ah, I have it enabled in httpd.conf, but not for the user's directories. Thank you, I figured it was something simple. -- 99 percent of lawyers give the rest a bad name.

[users@httpd] Re: Broken includes and cgis with Apache 2.4 update

2013-08-05 Thread LuKreme
On 04 Aug 2013, at 23:19 , LuKreme krem...@kreme.com wrote: I have a site with the following .htaccess: Options +ExecCGI +Includes AddType text/html .shtml AddOutputFilter INCLUDES .shtml AddType application/x-httpd-cgi .cgi/ AddType application/x-httpd-cgi .pl AddType application/x-httpd

[users@httpd] Re: Broken includes and cgis with Apache 2.4 update

2013-08-05 Thread LuKreme
On 05 Aug 2013, at 15:01 , Jeff Trawick traw...@gmail.com wrote: what's in the error log (with LogLevel debug) when you request the resource that doesn't get the proper include processing? [Mon Aug 05 15:37:46.560372 2013] [include:warn] [pid 89737] [client 23.24.150.141:59141] AH01374:

[users@httpd] Re: Broken includes and cgis with Apache 2.4 update

2013-08-05 Thread LuKreme
On 05 Aug 2013, at 16:12 , Jeff Trawick traw...@gmail.com wrote: Temporarily add a new line Garbage In Out in httpd.conf right after Options +Indexes +FollowSymLinks +Includes -SymLinksIfOwnerMatch apachectl -t AH00526: Syntax error on line 219 of /usr/local/etc/apache24/httpd.conf: Invalid

[users@httpd] Broken includes and cgis with Apache 2.4 update

2013-08-04 Thread LuKreme
I have a site with the following .htaccess: Options +ExecCGI +Includes AddType text/html .shtml AddOutputFilter INCLUDES .shtml AddType application/x-httpd-cgi .cgi/ AddType application/x-httpd-cgi .pl AddType application/x-httpd-cgi .pl/ AddType text/css .css I also have Addtype and

[us...@httpd] Re: mod_webdav problem

2010-07-23 Thread LuKreme
On 23-Jul-2010, at 13:08, Joost de Heer wrote: Server: Apache/2.2.8 (Ubuntu) DAV/2 mod_python/3.3.1 Python/2.5.2 The Server: HTTP header doesn't mention mod_webdav. It does: DAV/2 I don't think this is a bug. Why would DAV have to do anything if a file with 0 bytes should be

[us...@httpd] Re: mod_webdav problem

2010-07-22 Thread LuKreme
On 21-Jul-2010, at 14:38, Thorsten Steinbrenner wrote: problem is, that the webdav server does NOT update the timestamp after a HTTP PUT. Um… I don't see this. When I copy a file to the webdav server it gets the time stamp of the time it was created on the server. If you need to change the

[us...@httpd] VirtualHosts warning

2010-06-04 Thread LuKreme
# apachectl -S VirtualHost configuration: wildcard NameVirtualHosts and _default_ servers: *:*is a NameVirtualHost … Syntax OK Is this something that needs fixing? I ask because everything appears to work. And how does one fix it. I've read the docs and I have to say I don't

[us...@httpd] Re: VirtualHosts warning

2010-06-04 Thread LuKreme
On 4-Jun-2010, at 08:20, Tom Evans wrote: On Fri, Jun 4, 2010 at 3:13 PM, LuKreme krem...@kreme.com wrote: # apachectl -S VirtualHost configuration: wildcard NameVirtualHosts and _default_ servers: *:*is a NameVirtualHost … Syntax OK Is this something that needs

[us...@httpd] Re: How to prevent flashgot by .htaccess ?

2010-05-24 Thread LuKreme
On 24-May-2010, at 06:44, J. Bakshi wrote: Hello list, Can any one suggest me the signature of flashgot as seen by apache ? Does flashgot show up in your server logs? I don't think so. I need that to prevent flashgot from .htaccess. Good luck with that. Why would you think this was

[us...@httpd] Re: multiple SSL on one computer - IP

2010-04-22 Thread LuKreme
On 21-Apr-2010, at 16:48, Michael Ni wrote: i have a situation where I have only one computer (one IP) with 2 virtual hosts one virtual host is static.foobar.com one virtual host is www.foobar.com both have separate ssl certs registered to the corresponding domain. i tried putting

[us...@httpd] Re: Preventing DoS attacks from single client host

2010-04-04 Thread LuKreme
On 4-Apr-2010, at 05:40, Nick Kew wrote: On 4 Apr 2010, at 07:03, Morgan Gangwere wrote: On a note, someone posted about Slowloris and Apache: http://bahumbug.wordpress.com/2009/06/21/slowloris/ FWIW, that's been overtaken by events. I wrote mod_noloris shortly after that blog entry.

[us...@httpd] Re: Cacthing hosts

2010-02-28 Thread LuKreme
On 28-Feb-10 03:13, Nilesh Govindarajan wrote: On Sun, Feb 28, 2010 at 1:01 AM, LuKremekrem...@kreme.com wrote: On 27-Feb-2010, at 10:17, Nilesh Govindarajan wrote: What if I want all IPs ? What I posted will do what you want. Request to www.example.com will go to the example.com dir,

[us...@httpd] Re: How to map http://www.myaddress.com to http://www.myaddress.com:8000 ?

2010-02-28 Thread LuKreme
On 28-Feb-10 12:56, Mike Hagerty wrote: I want apache to reroute all traffic coming in on the (httpd) default port 80 to port 8000. How do you think apache is going to see any traffic on port 80 when your firewall is blocking port 80? -- She'd always tried to face towards the light. She'd

[us...@httpd] Re: Cacthing hosts

2010-02-27 Thread LuKreme
On 27-Feb-2010, at 10:17, Nilesh Govindarajan wrote: What if I want all IPs ? Your not understanding the function of the first VirtualHost. It is special as it is the default for anything that doesn't match another VirtualHost. What I posted will do what you want. Request to www.example.com

[us...@httpd] Re: Can I have 2 httpd servers running on 2 different ports?

2010-02-25 Thread LuKreme
On 24-Feb-10 10:49, Sheryl wrote: Instead, just have a different directory for each instance. For instance /usr/local/apache -- where you install your software /opt/server1 -- first server bin, build, error, icons, include, lib, man, manual, modules, mime-types, magic are links to

[us...@httpd] Re: Apache 1.3 OS X 10.4 help

2010-02-25 Thread LuKreme
On 24-Feb-10 14:08, Jonathan Zuckerman wrote: are respectively forwarded to the above url's using my hosts framed web forwarding. This sound, then, like the issue is with the framed web forwarding which is specifically designed to do what you are describing. Your host would need to be

[us...@httpd] Re: Apache 1.3 OS X 10.4 help

2010-02-25 Thread LuKreme
On 24-Feb-10 21:43, Jonathan Zuckerman wrote: I'm saying your webpage is weird, can you explain why your links are using the IP instead of the hostname? Can someone explain why these posts are 1) in HTML 2) contain multiple copies of the list footers 3) have no quote levels? I replied to

[us...@httpd] Re: hitting apache across home network with hosts file

2010-01-28 Thread LuKreme
On 28-Jan-2010, at 13:08, Matthew Smith wrote: I have modified the windows 7 machine host file to the following: 192.168.1.2 mysite_com Is that the correct format for the hosts file in Windos? I seem to recall the Windows host file was 'different' Did you verify that the hosts file is in

[us...@httpd] Re: outdated ssl cert

2010-01-16 Thread LuKreme
On 16-Jan-2010, at 09:58, Vadkan Jozsef wrote: does an outdated self-signed certificate give the same security as a normal cert? An outdated cert, self-signed or not, is invalid. So, no. -- 'An appointment is an engagement to see someone, while a morningstar is a large lump of metal used

[us...@httpd] Re: Apache vs LiteSpeed

2010-01-15 Thread LuKreme
On 15-Jan-2010, at 09:29, Jarrod Slick wrote: I'm curious -- why do you think that the results will be inconsistent? If anything I would be inclined to think that using localhost would improve consistency as extraneous variables like network congestion at the time of testing would not be

[us...@httpd] Re: Apache vs LiteSpeed

2010-01-15 Thread LuKreme
On 15-Jan-2010, at 10:08, Jarrod Slick wrote: On Jan 15, 2010, at 11:03 AM, Eric Covener wrote: On Fri, Jan 15, 2010 at 12:00 PM, Jarrod Slick jar...@e-sensibility.com wrote: What about having a private VLAN between a testing machine and the apache machine. I suppose that would solve the

[us...@httpd] Re: Apache vs LiteSpeed

2010-01-15 Thread LuKreme
On 15-Jan-2010, at 10:34, Jarrod Slick wrote: So, I should be more specific with my question: to the end of determining strictly which webserver is more efficient do you see any problems with this type of setup? More 'efficient' I think you mean. Is that not exactly what I said? My

[us...@httpd] Re: Apache vs LiteSpeed

2010-01-15 Thread LuKreme
On 15-Jan-2010, at 12:38, Scott Gifford wrote: I think using a LAN/VLAN connection would be a fair measure. You could also consider running the tests as instances on Amazon EC2, which will let you lease a small pool of servers for a few hours for $20 or so. That's a good idea. I'd forgotten

[us...@httpd] Re: %2f to /

2010-01-15 Thread LuKreme
On 15-Jan-2010, at 11:19, Kpadvel wrote: In-Reply-To: 2e027be01001150934m482eb453p1d6bee636977a...@mail.gmail.com Please do not hijack someone else's thread to start your own thread. Changing the subject is not enough. Start a new message addressed to the list. -- Vampires are [...] by nature

[us...@httpd] Re: SSI Rejection

2009-12-30 Thread LuKreme
On 30-Dec-2009, at 10:47, Wesley Stupar wrote: But I don't know what you mean by How have you told Apache to execute the SHTML. How do you do that? Well, these are the shtml lines in my httpd.conf file: $ grep shtml /etc/httpd/httpd.conf AddType text/html .shtml AddHandler

[us...@httpd] Re: unsubscribe

2009-12-28 Thread LuKreme
On 28-Dec-2009, at 14:35, Ali Jawad wrote: To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org from the digest: users-digest-unsubscr...@httpd.apache.org -- I WILL NOT DRIVE THE PRINCIPAL'S CAR Bart chalkboard Ep. 7F06

[us...@httpd] Re: HTTPD Logwatch

2009-12-24 Thread LuKreme
On 24-Dec-2009, at 22:37, Kaustubh Deorukhkar wrote: I am naive user..but this is what comes to my mind...please see if this helps - create seperate logs per website… You do this by specifying the logfile name and format in the the VirtualHost directives. -- 'I'm a raven, aren't I?' it

[us...@httpd] Re: Sporadic Apache delays

2009-12-23 Thread LuKreme
On 22-Dec-2009, at 18:03, Alok Chugh wrote: Please don't hijack other threads. Your post has nothing to do with Newbie Question:How to change chunk size Start a NEW message. -- Mister Teatime had a truly brilliant mind, but it was brilliant like a fractured mirror, all marvellous facets and

[us...@httpd] Allowing users access to their websites (Possibly OT?)

2009-12-19 Thread LuKreme
I have several users who have websites on my Apache 2.2.13/FreeBSD 8.0-RELEASE server and I give them access to their files via webdav. This mostly has worked fine for years (Since FreeBSD 4.2-RELEASE), but I occasionally have weird problems with webdav (especially with things like Drupal or

[us...@httpd] Re: .htaccess restricts write permission from webdav

2009-12-07 Thread LuKreme
On 6-Dec-2009, at 20:15, J. Bakshi wrote: Though I have fond that creating a .htaccess or deleting it through webdav is not possible. Usually apache is setup to refuse to serve .ht* files for security reasons. If this is not the case, there's no reason the htaccess file should not be

[us...@httpd] Re: .htaccess restricts write permission from webdav

2009-12-07 Thread LuKreme
On 6-Dec-2009, at 20:15, J. Bakshi wrote: RewriteRule ^typo3$ - [L] RewriteRule ^typo3/.*$ - [L] ` ` ` and now webdav has no problem with create/delete operation One other thing, if you duplicate the RewriteCond above these rules, they should work as well. something like: Options

[us...@httpd] Re: href=frag.phpfield=value gets error 404.

2009-12-05 Thread LuKreme
On Dec 5, 2009, at 10:18, Brian Hooper brian_hoo...@hotmail.co.uk wrote: a href=frag.phpinput=xxxFrag Input/a is used to separate values from each other. ? Is used to seperate the values from the URL.

[us...@httpd] Re: .htaccess restricts write permission from webdav

2009-12-04 Thread LuKreme
On 3-Dec-2009, at 22:22, J. Bakshi wrote: Options +FollowSymLinks RewriteEngine On RewriteRule ^typo3$ - [L] RewriteRule ^typo3/.*$ - [L] RewriteCond %{REQUEST_FILENAME} !-f RewriteCond %{REQUEST_FILENAME} !-d RewriteCond %{REQUEST_FILENAME} !-l RewriteCond %{REQUEST_URI} !^/webdav

[us...@httpd] Re: Building Apache 2.2 without IPv6

2009-12-04 Thread LuKreme
On 4-Dec-2009, at 07:47, Jorge Medina wrote: What a nasty member of the user list! Nah, just a bad case of myopia. -- BUGS: There is no conversion specification for the phase of the moon. strftime(3) man page - The

[us...@httpd] Re: .htaccess restricts write permission from webdav

2009-12-03 Thread LuKreme
On 2-Dec-2009, at 22:36, J. Bakshi wrote: RewriteEngine On RewriteRule ^typo3$ - [L] RewriteRule ^typo3/.*$ - [L] I just went through this with wordpress. You have to exempt webdav from all the rewrites. On 25-Nov-2009, at 11:15, LuKreme wrote: I modified the htaccess file hoping I could

[us...@httpd] Re: .htaccess restricts write permission from webdav

2009-12-03 Thread LuKreme
On Dec 3, 2009, at 20:13, J. Bakshi joyd...@infoservices.in wrote: RewriteCond %{REQUEST_URI} !^webdav That's wrong. !^/webdav The / is part of the uri - The official User-To-User support forum of the Apache HTTP Server

[us...@httpd] Re: SSL on Apache 2.2.14

2009-11-27 Thread LuKreme
On 27-Nov-2009, at 04:41, Zachary Uram wrote: On Thu, Nov 26, 2009 at 11:09 AM, LuKreme krem...@kreme.com wrote: On 26-Nov-2009, at 05:15, daniel.goul...@and.co.uk wrote: Maybe you could try --enable-shared in your configure arguments? Really? Purple text AND TOFU posting? Eh? Zach

[us...@httpd] Re: SSL on Apache 2.2.14

2009-11-26 Thread LuKreme
On 26-Nov-2009, at 05:15, daniel.goul...@and.co.uk wrote: Maybe you could try --enable-shared in your configure arguments? Really? Purple text AND TOFU posting? Ugh -- FUNNY NOISES ARE NOT FUNNY Bart chalkboard Ep. 8F20

[us...@httpd] Re: webdav and permissions [Solved]

2009-11-25 Thread LuKreme
On 23-Nov-2009, at 18:10, LuKreme wrote: EOF IfModule mod_rewrite.c RewriteEngine On RewriteBase / RewriteCond %{REQUEST_FILENAME} !-f RewriteCond %{REQUEST_FILENAME} !-d RewriteRule . /index.php [L] RewriteRule ^u/([0-9]+)$ wp-content/plugins/short-url-plugin/u.php?$1|$2 /IfModule I

[us...@httpd] webdav and permissions

2009-11-23 Thread LuKreme
I posted this on the OS X Talk list first, but haven't gotten a solution yet. I have a remote server (FreeBSD, apache 2.2.11_7) with a wordpress (current) install. The permissions on the main root folder for the install are: $ ls -lsa total 92 2 drwxr-xr-x 7 www wheel512 Nov 22 13:20 .

[us...@httpd] Re: RewriteBase is not working in apache configuration file

2009-11-16 Thread LuKreme
On 15-Nov-2009, at 21:27, J. Bakshi wrote: RewriteBase is working perfectly OK in .htaccess but not in apache configuration file. I'm trying to imagine a scenario in which you would need RewriteBase in the apache configuration file. Isn't the point of it to be in .htaccess? I'm almost

[us...@httpd] Re: Apache error if using Basic AuthType under Location directive

2009-11-15 Thread LuKreme
On 15-Nov-2009, at 12:22, Eric Covener wrote: On Sun, Nov 15, 2009 at 11:42 AM, Iacopo Benesperi iac...@iacchi.org wrote: Eric Covener ha scritto: As the error message says, You can't put location in htaccess. It's got nothing to do with what's inside the location. So where can I use the

[us...@httpd] Re: Dynamically block certain requests on trigger?

2009-11-14 Thread LuKreme
On 14-Nov-2009, at 08:24, kofal...@umn.edu wrote: What would would be perfect is a module that watches for conditions like these, and if they trigger, drops requests from that IP for the next 24 hours. For example. if anybody requests phpmyadmin at all, I don't want the server to even

[us...@httpd] setting up webdav

2009-11-11 Thread LuKreme
I have a server running Apache 2.2.11_7 on FreeBSD 6-2-RELEASE with webdav enabled. I have several domains on the machine. I have the following directive for one domain, which works just fine with webdav: VirtualHost * ServerName webdav.example.com ServerAlias files.example.com

[us...@httpd] Re: setting up webdav

2009-11-11 Thread LuKreme
On 11-Nov-2009, at 17:28, André Warnier wrote: LuKreme wrote: ... DocumentRoot /usr/local/www/example.com/ ... AuthUserFile /usr/local/www/example.com/.htdavpass I think that you have managed to do what no developer of Apache ever thought that a user would ever do : place

[us...@httpd] Re: setting up webdav

2009-11-11 Thread LuKreme
On 11-Nov-2009, at 18:04, André Warnier wrote: LuKreme wrote: any file named .ht* is never served by apache, and there's really nowhere else to place the .htdavpass file. What do you mean there is nowhere else ? What about under /usr/local/www, and name it example.com.davpasswd

[us...@httpd] Re: setting up webdav

2009-11-11 Thread LuKreme
On 11-Nov-2009, at 17:11, LuKreme wrote: I have the following directive for one domain, which works just fine with webdav: Never mind. Someone enabled 'evasive20_module' sometime this afternoon, and it was this event that stopped webdav mounts (all of them) to stop working. I'd been using

[us...@httpd] Re: DAV access control

2009-11-10 Thread LuKreme
On 10-Nov-2009, at 08:00, skrishnam...@bloomberg.com wrote: We are looking to setup SVN over apache, but it requires the use of DAV. requires? I though SVN over DAV was a particular configuration option? There are apparently security concerns over the use of DAV over apache 2.2., There are?

Re: [us...@httpd]

2009-11-10 Thread LuKreme
On 10-Nov-2009, at 13:49, André Warnier wrote: And I would add that, from a user point of view, I would be very reluctant to help at any system that would let me be identified in any way other than me voluntarily and knowingly providing my id by means of some obvious login page or

[us...@httpd] Re: Httpd configuration error

2009-11-05 Thread LuKreme
On 5-Nov-2009, at 09:39, Sheryl wrote: On 5-Nov-2009, at 05:31, daulat khan wrote: SunOS earms-sj-test 5.10 Generic_118822-25 sun4u sparc SUNW,Sun- Fire- V490 Well, your OS is pushing 20 years old, and has been OELed for over a decade. ??? It's been a few years since I worked with

[us...@httpd] Re: Conditional .htaccess

2009-10-19 Thread LuKreme
On 19-Oct-2009, at 17:23, Scott Haneda wrote: php admin value and php flag values, I would like to only be enabled for my IP address, but publicly, I want them off, so the public does not see errors, only I do. I think the way to do this is to setup a different location. Something like

[us...@httpd] IndexIgnore

2009-09-24 Thread LuKreme
I have an htaccess file with a directive IndexIgnore head.html foot.html .. Which prevents the Parent Directory from showing up in the directory listing. Now, I want to show the Parent Directory in the directories under this one, but there doesn't seem to be an IndexUnignore directive or

[us...@httpd] Cascading dirs and .htaccess

2009-09-23 Thread LuKreme
I have a directory structure in which I have a .htaccess file at the top level: Options All +MultiViews IndexOptions FancyIndexing FoldersFirst NameWidth=* DescriptionWidth=* IconsAreLinks SuppressHTMLPreamble IconHeight=20 IconWidth=20 AddIcon /icons/zip.gif .gz .zip .tgz AddIcon

[us...@httpd] Re: Automatically grant authenticated users access to a dir matching their username

2009-09-22 Thread LuKreme
On 22-Sep-2009, at 05:31, Joahnn Gile wrote: Is there some other solution for automatically granting authenticated users access to their individual directory? Have your user-creation tools create /etc/apache2/users/user999.conf file when the user is created. Isn't that the usual way? --

[us...@httpd] Re: how do I *define* a default virtual host

2009-09-16 Thread LuKreme
On 16-Sep-2009, at 07:17, Geurts, G.P.T.M. wrote: Hello, Thanks for your reply! I don't think it whould work for us we use ip based virtual hosting so a virtualhost directive looks like VitualHost 1.2.3.4:80 What does the __default__ directive do anyways? _default_ is useful. Say you

[us...@httpd] Re: how do I *define* a default virtual host

2009-09-16 Thread LuKreme
On 16-Sep-2009, at 08:22, Eric Covener wrote: On Wed, Sep 16, 2009 at 10:02 AM, LuKreme krem...@kreme.com wrote: OTOH, _default_ is dangerous, and you have to be sure that it is the LAST directive as it stomps everything that follows it. Whether it comes first or last, it never covers up

[us...@httpd] Re: how do I *define* a default virtual host

2009-09-15 Thread LuKreme
On 15-Sep-2009, at 01:54, Krist van Besien wrote: On Tue, Sep 15, 2009 at 9:02 AM, robert rottermann rob...@redcor.ch wrote: hi ther, I load my VH's from a directory with a number of VH's is it possible to define which one is the default one? it seems to select the first in alphabetical

[us...@httpd] Re: how do I *define* a default virtual host

2009-09-15 Thread LuKreme
On 15-Sep-2009, at 09:34, Jan G.B. wrote: 2009/9/15 LuKreme krem...@kreme.com I always put my default VirtualHost directly into the httpd.conf file, just before the Include line. I'd say this way it's always unclear which is the default vhost. As you have to dig through config_file

[us...@httpd] Re: how to create payment gateway

2009-08-20 Thread LuKreme
On 20-Aug-2009, at 06:51, Richard Peacock wrote: Ps. Sorry for the spam but Krist, you have really made me laugh out loud! Too bad you didn't read Krist's signature about top posting. http://en.wikipedia.org/wiki/TOFU#Top-posting -- Well I've seen the Heart of Darkness/Read the writing on

[us...@httpd] Re: Allow directive - limitation?

2009-08-14 Thread LuKreme
On 14-Aug-2009, at 00:30, Stephen Vaughan wrote: Is there a limitation on the number of characters you can have per line for 'Allow from'? I don't know about Allow from specifically, but often 'lines' are limited internally to eithe 255 characters or 1024 characters. Are you around any

[us...@httpd] Re: Secure and unsecure apache

2009-08-06 Thread LuKreme
On 3-Aug-2009, at 18:39, Eric Covener wrote: On Mon, Aug 3, 2009 at 8:16 PM, LuKremekrem...@kreme.com wrote: VirtualHost *:443 ServerName securemail.example.com SSLCertificateFile /usr/local/etc/apache22/server.pem SSLCertificateKeyFile /usr/local/etc/apache22/server.key ServerAdmin

[us...@httpd] Re: backup restore apache mysql

2009-08-06 Thread LuKreme
On 6-Aug-2009, at 10:22, Richard Peacock wrote: What would be the best way to perform a full Apache backup and MySQL (I know it's not exactly related and understand if you can't make any suggestions for this)? /usr/local/bin/rsync -aCHh --stats --delete-after --delete-excluded \

[us...@httpd] Secure and unsecure apache

2009-08-03 Thread LuKreme
I have a FreeBSD-6.2 server with apache-2.2.4 which unly runs an instance of the webmail client Squirrelmail so, I have the server name set to ServerName webmail.example.com and I have DocumentRoot /usr/local/www/squirrelmail and then I have: Listen 80 Listen 443 NameVirtualHost *:443