[users@httpd] Re: ETAG and Vary with reverse proxy and xsendfile

2022-07-04 Thread Phil Endecott
Yesterday I asked: 2. mod_xsendfile (see https://github.com/nmaier/mod_xsendfile) sends the specified file to the client. Currently, all responses seem to have ETAG: "0". I'd like the ETAG to be based in the normal way on the attributes of the file that mod_xsendfile actually sends. I belie

[users@httpd] ETAG and Vary with reverse proxy and xsendfile

2022-07-03 Thread Phil Endecott
Dear Experts, I have a server which functions as follows: 1. Incoming requests are sent to a reverse proxy which inspects the request headers and returns a response to Apache which contains an X-SendFile header containing the path of the file to serve. 2. mod_xsendfile (see https://github.com/n

[users@httpd] Best practice for mod_authn_dbd + postgresql; really SHA1?

2017-08-10 Thread Phil Endecott
Dear Experts, I'm trying to determine the best way to implement Apache authentication using mod_authn_dbd and PostgrSQL; my starting point has been this documentation: https://httpd.apache.org/docs/2.4/mod/mod_authn_dbd.html https://httpd.apache.org/docs/2.4/misc/password_encryptions.html

[EMAIL PROTECTED] Blacklists & similar to avoid e.g. forum spam

2008-02-11 Thread Phil Endecott
Dear Experts, Would anyone like to share any strategies for blocking forum spam and similar nastiness? I have a couple of forums which were totally filled with spam when I was once on holiday. When I got back I had to take them down for ages to clean them up, and then added a "captcha" mech

[EMAIL PROTECTED] Return error code for a

2008-01-20 Thread Phil Endecott
Dear experts, I was half-expecting to find that there was something like this: ErrorCode 404 that would make Apache return a particular error response for all matching requests. But I can't see anything; maybe I've overlooked something? Here's the application: I have a server with name-

[EMAIL PROTECTED] Re: Authentication not checked in proxied directory [NOT!]

2007-11-04 Thread Phil Endecott
I'm surprised to find that authentication does not seem to be checked in a directory which I proxy to another local server: Ooops, I was changing the wrong part of the file. Ignore most of what I wrote. Basically I originally had this: DocumentRoot /var/www/something ...auth stuff...

[EMAIL PROTECTED] Authentication not checked in proxied directory

2007-11-04 Thread Phil Endecott
Dear Experts, I'm surprised to find that authentication does not seem to be checked in a directory which I proxy to another local server: AuthName "my_auth_name" AuthType basic AuthPAM_Enabled off AuthBasicProvider dbd

Re: [EMAIL PROTECTED] authn_dbd: what format for encrypted password? [dbd now broken]

2007-08-20 Thread Phil Endecott
Dear All, I'm trying to set up auth with postgresql... Laurent FAILLIE wrote: My only advice is to not use it as it doesn't work :-( Yesterday I thought it was working, but since then it has fallen apart and I'm wondering if Laurent might be right after all... Yesterday I was running 2.2.3 (

Re: [EMAIL PROTECTED] authn_dbd: what format for encrypted password?

2007-08-19 Thread Phil Endecott
Tom Donovan wrote: Joshua Slive wrote: How about making a page on wiki.apache.org/httpd/ for that? Done! http://wiki.apache.org/httpd/Encrypted_Passwords Thanks Tom, that's excellent. You might like to make it explicit that the format is detected by inspection of the first part of the stri

Re: [EMAIL PROTECTED] authn_dbd: what format for encrypted password?

2007-08-18 Thread Phil Endecott
Tom Donovan wrote: Phil Endecott wrote: Dear Experts, I'm setting up mod_authn_dbd for the first time (having previously used the 3rd-party mod_auth_pgsql with apache2.0) and I'm unsure how the passwords should be encoded in the database. The docs at http://httpd.apache.org/do

[EMAIL PROTECTED] authn_dbd: what format for encrypted password?

2007-08-18 Thread Phil Endecott
Dear Experts, I'm setting up mod_authn_dbd for the first time (having previously used the 3rd-party mod_auth_pgsql with apache2.0) and I'm unsure how the passwords should be encoded in the database. The docs at http://httpd.apache.org/docs/2.2/mod/mod_authn_dbd.html just say: "The query m

[EMAIL PROTECTED] PostgreSQL authentication in 2.2; caching?

2007-07-04 Thread Phil Endecott
Dear Experts, I am in the process of migrating a system from 2.0 to 2.2 and need some advice about how to make PostgreSQL authentication work in the new system. In the old system, I used mod_auth_pgsql from the Debian package. I understand that the new auth framework in 2.2 provides database

[EMAIL PROTECTED] PAM authentication, migrating from 2.0 to 2.2

2007-07-04 Thread Phil Endecott
Dear Experts, I am in the process of migrating a 2.0.x system to 2.2 and need some advice about how best to do authentication in the new system. On the old machine I am using mod_auth_pam to do authentication for a Subversion repository and a personal Webmail system, and mod_auth_pgsql for a

[EMAIL PROTECTED] Generate 304 (not modified) response with mod_ext_filter

2005-12-30 Thread Phil Endecott
Dear All, I'm using mod_ext_filter to convert SVG files to PNG on the fly. It looks something like this: ExtFilterDefine render_svg_filter mode=output \ intype=image/svg+xml outtype=image/png \ cmd="/usr/local/bin/rsvg_filter.sh" where rsvg_filter is something like: #!/bin/sh tmpinfile="/tm

[EMAIL PROTECTED] Spawned process doesn't get termination signal in worker MPM

2005-11-22 Thread Phil Endecott
Dear List, I have an Apache2 module that forks a new process when it first handles a request. Subsequent request-handling processes/threads communicate with this "back-end" process via shared memory. This generally works, but I am having trouble at termination. It seems that my backend proc

Re: [EMAIL PROTECTED] Add header when access is denied

2005-11-19 Thread Phil Endecott
Joshua Slive wrote: >On 11/17/05, Phil Endecott wrote: >> Hi Joshua, thanks for the reply. Yes, when I comment-out my >> ErrorDocument directives I get what I had expected: >> My ErrorDocuments are the standard ones from the Debian package. Is >> there an

[EMAIL PROTECTED] Re: Add header when access is denied

2005-11-17 Thread Phil Endecott
Joshua Slive wrote: > On 11/16/05, Phil Endecott wrote: >> Dear List, >> >> According to the docs for mod_headers you can arange for the header >> to be added either for sucessful requests only, or for all requests. >> But it seems to me that the "always&q

[EMAIL PROTECTED] Add header when access is denied

2005-11-16 Thread Phil Endecott
Dear List, According to the docs for mod_headers you can arange for the header to be added either for sucessful requests only, or for all requests. But it seems to me that the "always" case doesn't really mean always, as the header is not added when access has been denied. Here's my particular