[users@httpd] Re: GET working but POST failing with error 502

2020-12-09 Thread Anton Shepelev
I wrote: > I have a problem with the Bitnami Redmine stack, based on > Apache, but being an inexpericed user, I do not even know > which component is causing it. Can you please review the > error details below and let me know if a misconfigured > Apache may be the culprit or I should look into Red

[users@httpd] Re: GET working but POST failing with error 502

2020-12-09 Thread Anton Shepelev
Yann Ylavic: > If this log shows up on the httpd side: > >[proxy_http:error] ... AH01102: error reading status line from remote > server 127.0.0.1:3002 It surely does. > it means that there *is* a ProxyPass (or RewriteRule [P]) > that configures httpd to do the proxying to > 127.0.0.1:3002.

[users@httpd] Re: GET working but POST failing with error 502

2020-12-09 Thread Anton Shepelev
Yann Ylavic, > This sounds like a crash or something which causes Redmine > to close the connection upon receipt of the POST request > (without any response). The people at Bitnami asked me to try with port 3001 instead of 81, explaining that Redmine's Thin server is on 3001, and Apache is just a

[users@httpd] Re: GET working but POST failing with error 502

2020-12-07 Thread Anton Shepelev
Yann Ylavic: > Do all the POST requests fail or only some of them? All POST requests fail: when I either repeat the same requiest over and over, or try different requrest. All GET requests work. > If some requests succeed, it may be a problem of > connection reuse between Redmine (running on 127

[users@httpd] Re: GET working but POST failing with error 502

2020-12-07 Thread Anton Shepelev
I wrote: > The problem is that Redmine's REST API works for reading > but not for writing, that is the GET command works whereas > the POST command fails with error 502 Even with the most detailed logging, the failed POST requests do not appear in the Redmine log, whereas successful GET request a

[users@httpd] GET working but POST failing with error 502

2020-12-02 Thread Anton Shepelev
Hello, all I have a problem with the Bitnami Redmine stack, based on Apache, but being an inexpericed user, I do not even know which component is causing it. Can you please review the error details below and let me know if a misconfigured Apache may be the culprit or I should look into Redmine its

Re: [users@httpd] protect apache to stop work if logdir is missing

2019-09-10 Thread Anton Gorlov
10.09.2019 5:09, @lbutlr пишет: On Sep 9, 2019, at 11:21 AM, Anton Gorlov wrote: I need to provide users with the ability to archive logs on their own Yes? And? You’ve been told two ways to do this that do not require modifying the source code. pipe logs to some script/program and

Re: [users@httpd] protect apache to stop work if logdir is missing

2019-09-09 Thread Anton Gorlov
09.09.2019 19:22, D'Arcy Cain пишет: On 9/9/19 12:13 PM, Anton Gorlov wrote: 09.09.2019 19:07, @lbutlr пишет: On 9 Sep 2019, at 09:57, Anton Gorlov wrote: I need the web server to continue working if the user has deleted the log directory. I would solve this by preventing the user

Re: [users@httpd] protect apache to stop work if logdir is missing

2019-09-09 Thread Anton Gorlov
09.09.2019 19:07, @lbutlr пишет: > On 9 Sep 2019, at 09:57, Anton Gorlov wrote: >> I need the web server to continue working if the user has deleted the log >> directory. > I would solve this by preventing the user from deleting the directory or > recreating it on deletion

[users@httpd] protect apache to stop work if logdir is missing

2019-09-09 Thread Anton Gorlov
Hi! I need the web server to continue working if the user has deleted the log directory. I wrote a small patch. Are there any obvious errors in it that disrupt the operation of the web server or lead to a memory / pointer leak? Index: apache2-2.4.10/modules/loggers/mod_log_config.c ===

Re: [users@httpd] reverse proxy to http 1.0 origin server

2013-08-05 Thread Christoph Anton Mitterer
Hi Nick. On Mon, 2013-08-05 at 15:38 +0100, Nick Kew wrote: > > AFAIU, strict HTTP 1.0 has neither persistent connections / keep-alives > > - a connection ends after a single request has been responded. > > Neither does it have Host: headers. > > No, it has keepalives and Host headers. But th

[users@httpd] reverse proxy to http 1.0 origin server

2013-08-05 Thread Christoph Anton Mitterer
Hi. 1) I'd have a question on how to set up a reverse proxy to a http 1.0 in the cleanest most standard conforming way. AFAIU, strict HTTP 1.0 has neither persistent connections / keep-alives - a connection ends after a single request has been responded. Neither does it have Host: headers. a) Do

Re: [users@httpd] proxy_html: slowness problems when using ProxyHTMLEnable

2012-12-22 Thread Christoph Anton Mitterer
On Sat, 2012-12-22 at 10:13 -0500, Eric Covener wrote: > How slow? Without xml2enc it's about as fast as if I directly access the origin... so say few milliseconds... with xml2enc its (depending on the respective page) from 5-20 seconds. Cheers, Chris. smime.p7s Description: S/MIME cryptographi

Re: [users@httpd] proxy_html: slowness problems when using ProxyHTMLEnable

2012-12-22 Thread Christoph Anton Mitterer
Hi again. I did some more investigation and found out the following: The slowness is apparently not caused by any INFLATE/DEFLATE combination, cause when I use: #ProxyHTMLEnable off SetOutputFilter INFLATE;proxy-html;DEFLATE ... it's still fast. Actually the slowness seems to come from mod_xml2

[users@httpd] proxy_html: slowness problems when using ProxyHTMLEnable

2012-12-15 Thread Christoph Anton Mitterer
Hi. This is about using the external mod_proxy_html (3.1) with Apache 2.2... but I guess it’s largely identical to the one included in Apache 2.4. The setup I have is working, but it’s quite slow (and the machine is extremely powerful, 16 cores, 92 G RAM, fastest disks... 10GbE networking). The

Re: [users@httpd] how to use ProxyPassReverse* with more complex a ProxyPassMatch

2012-12-09 Thread Christoph Anton Mitterer
Hi Brian. On Sun, 2012-12-09 at 07:48 -0600, Brian Millett wrote: > > > Require all denied > > DirectoryIndex logon.jsp > RewriteEngine On > RewriteRule \.(pl|php|cgi) - [QSA,PT,L] > RewriteRule \.(jpg|jpeg|gif|png|html)$ - [QSA,PT,L] > RewriteRule

[users@httpd] how to use ProxyPassReverse* with more complex a ProxyPassMatch

2012-12-08 Thread Christoph Anton Mitterer
Hi. I'm using a reverse proxy set up with ProxyPassMatch as the space I map to is rather complex and can't be mapped with a normal ProxyPass. Now the problem is obviously that: ProxyPassReverse ProxyPassReverseCookieDomain ProxyPassReverseCookiePath are only made for the simply ProxyPass form an

[users@httpd] Re: Apache 2.4 for windows????

2012-10-21 Thread Anton
no binaries at the *official* apache download site? Is there a reason for the delay ... I mean if apachelounge can build the binaries ... why can't he apache project itself. I always prefer to download products on their *official* site than on third party

[users@httpd] Apache and BEAST and CRIME attacks

2012-09-14 Thread Christoph Anton Mitterer
Hi. I'm using Apache 2.2.22 and 2.2.16... and I wondered how vulnerable I'm for the BEAST and CRIME attacks... wrt to BEAST: I know most browsers fix that already,... but I'd rather have it really enforced by the server. Further I would not prefer to disable my AES or enabled RC4 at all. Also th

Re: [users@httpd] SSL+SNI+client-auth fakeBasicAuth "lost" after some time

2012-02-19 Thread Christoph Anton Mitterer
O=GermanGrid/OU=LMU/CN=Christoph Anton Mitterer SUCCESS 3 "/C=DE/O=GermanGrid/OU=LMU/CN=Christoph Anton Mitterer" "/C=DE/O=GermanGrid/CN=GridKa-CA" 3EC4; "GET /icinga/classic/images/interface/menu_less.gif HTTP/1.1" 200 200; 506 410 447; "lcg-lrz-monitoring

Re: [users@httpd] SSL+SNI+client-auth fakeBasicAuth "lost" after some time

2012-02-19 Thread Christoph Anton Mitterer
On Sun, 2012-02-19 at 09:04 -0500, Eric Covener wrote: > > 2nd access: > > I get an error, that no SNI hostname would have been provided, but still, > > the ouput appears in the log file of the non-default name based vhost, > > strange isn't it? > No, Apache will still do normal vhost resolution. B

Re: [users@httpd] SSL+SNI+client-auth fakeBasicAuth "lost" after some time

2012-02-18 Thread Christoph Anton Mitterer
;%{User-Agent}i\"" This is all from the non-default name based vhost... the default one's is empty. 1st access with success: 02/19/12 03:30:35> 129.187.131.227:443 91.8.45.224; /C=DE/O=GermanGrid/OU=LMU/CN=Christoph Anton Mitterer SUCCESS 3 "/C=DE/O=GermanGrid/OU=LMU

[users@httpd] SSL+SNI+client-auth fakeBasicAuth "lost" after some time

2012-02-18 Thread Christoph Anton Mitterer
Hey. This is actually from https://issues.apache.org/bugzilla/show_bug.cgi?id=52703 but it seems bug hunting is not welcomed there anymore, as I've already had to experience in https://issues.apache.org/bugzilla/show_bug.cgi?id=52630 ... So I was redirected here to the list... Well maybe so

Re: [users@httpd] selectively disclaim on SSL client-auth for some directories [partially SOLVED]

2011-12-30 Thread Christoph Anton Mitterer
Hey. I guess I've found a solution on my own, well at least a partial one. Here it is for those interested: Don't set the "vhost-wide" SSLVerifyClient require directly in the block, but either in a SSLVerifyClient require or (if this is enough, as all the content lies in the filesystem

[users@httpd] how to limit usage (not location) of (specific) cgi scripts to

2011-12-30 Thread Christoph Anton Mitterer
Hi. Is it somehow possible to limit the _usage_ of cgi-scripts to one or . I do not mean the _location_ of the cgi-scripts themselves (which can be limited e.g. via ScriptAlias). Here's the case: I have a vhost, where PHP shall be enabled for a single , but only for this directory. This is ea

[users@httpd] CGI/suexec uid/gid per directory possible

2011-12-30 Thread Christoph Anton Mitterer
Hi. I'd like to run PHP via CGI,... and especially run it as separate user. But it seems that with suexec it's only possible to set a uid/gid für suexec per vhost. I would however like to set this per directory, as I have multiple subdirs, e.g. /davical /forum which all use CGI (or even PHP),.

[users@httpd] selectively disclaim on SSL client-auth for some directories

2011-12-29 Thread Christoph Anton Mitterer
Hi. I wondered whether the following is somehow possible (I guess it's not). I have a SSL vhost,... and I'd like to require SSL client cert authentication _per default_ ... but selectively being able to not demand it for some directories/files/locations. Having something like: SSLVerifyClient

Re: [users@httpd] setting options for a single file

2011-12-29 Thread Christoph Anton Mitterer
On Tue, 2011-12-27 at 10:28 -0500, Eric Covener wrote: > > Is there a different whether I match > > "^/path/tovHost$" > > or > > "^/path/tovHost/$" > > yes, the note unique to 2.3 is about that. I don't remember where it > mattered. Yeah,.. I've read the note in trunk-doc,... but it is unclear

Re: [users@httpd] setting options for a single file

2011-12-27 Thread Christoph Anton Mitterer
On Tue, 2011-12-27 at 09:54 -0500, Eric Covener wrote: > Probably doesn't make much practical sense, since you can just use > directory match in 2.3/2.4 and no change to Files or Directory would > likely to ever be available in any older release. Ah... now I've seen what you mean,... it now suppor

[users@httpd] some questions on inheritance/section merging

2011-12-27 Thread Christoph Anton Mitterer
Hi... When I have e.g. Options none AllowOverride none Satisfy all Order allow,deny Deny from all and I make a subdir with just: Allow from all 1) Then all of: Options none AllowOverride none Satisfy all Order

Re: [users@httpd] setting options for a single file

2011-12-27 Thread Christoph Anton Mitterer
On Tue, 2011-12-27 at 09:31 -0500, Eric Covener wrote: > You could undo it in a subsequent section that only matched longer > directory paths. DirectoryMatch is pretty limited in 2.2 and probably > not so helpful. Yeah,.. I've thought about this,.. but that also seems a bit hacky... Would it mak

Re: [users@httpd] setting options for a single file

2011-12-27 Thread Christoph Anton Mitterer
On Tue, 2011-12-27 at 03:31 -0500, Eric Covener wrote: > nest Files inside of Directory. That shouldn't help should it? When I want to do this for files in the root dir of my vhost (e.g. robots.txt),... I'd have to add the in that and it would also apply to all other subdirs of the vhost's r

[users@httpd] setting options for a single file

2011-12-26 Thread Christoph Anton Mitterer
Hi. Is it possible to set options (i.e. Allow from all) for a _single_ file while not using ? I'd like to have a default-deny policy for the whole vhost,... therefore I have something like: Order allow,deny deny from all But I'd like to allow access for single files or dirs. For dirs this is

[users@httpd] how to set qs with MultiViews

2011-08-04 Thread Christoph Anton Mitterer
Hi. I'd like to use content negotiation with MultiViews, but still being able to set a qs which applies in case several variants would have the same quality based on the client’s selection. E.g. if a client says "Accept: image/*; qs=0.5, */*; qs=0.1" and I have a image test.jpeg and test.png, Apac

[users@httpd] cleanest/fastest way of redirecting aliases to canonical server names

2011-01-28 Thread Christoph Anton Mitterer
Hi. I'm having a vhost, which is reachable via one canonical name, e.g. example.org, and also via several aliases, e.g. www.example.org, example.com, etc. I want that whenever requests are made via one of the aliases, that those are redirected to the canonical name. IMHO there are about the fol

[users@httpd] how is SSLRequireSSL merged?

2011-01-27 Thread Christoph Anton Mitterer
Hi... (Yes I've read the documentation section about merging sections, but IMHO it's not absolutely clear IMHO) I have one vhost containing about: ... SSLRequireSSL ... and possibly also a later location-section on /, containing other directives, e.g. #do e.g. some proxy stuff

[us...@httpd] how can I see the configuration used by a running apache

2010-11-18 Thread anton
n't see the settings/configuration read by apache. Does anybody know a tool or secret options to show them??? I googled around and searched the apache docs but I found nothing. Any help/hint is *very* appreciated. Anton -

[us...@httpd] Re: server Error 500: howto examine what apache got

2010-03-15 Thread anton
pache generates a nice correct html output page with an error message 3. my firefox sees this webpage (but not the bad code, its too late here) But again, thanks for the fast response ;-) Anton Charan wrote: > I guess you can use live http headers addon from firefox. > > >

[us...@httpd] server Error 500: howto examine what apache got

2010-03-15 Thread anton
che gets back from a cgi (or php script)?? I didn't find information about this in the wiki or in the documentation, but other people get 500 errors too ... so there must be any possibilities to examine such an error? Anton -

Re: [us...@httpd] authnz_ldap_module: [Bad search filter] error

2009-02-27 Thread Anton Yakimov
Oh, I will create a report, thanks for support! ps removed NONE - same error.. 2009/2/27 Eric Covener : > On Thu, Feb 26, 2009 at 9:13 AM, Anton Yakimov > wrote: > >>    AuthLDAPUrl                 "ldap://server.three.two.one:389/dc=three, >> dc=two, >> dc=one

Re: [us...@httpd] authnz_ldap_module: [Bad search filter] error

2009-02-27 Thread Anton Yakimov
Hi all, I have also tried apache+ldap on other network host and result is the same: [ldap_search_ext_s() for user failed][Bad search filter] Maybe I can contact authnz_ldap module developer/maintainer? Can you help me to find his|her contacts? Thanks in advance! 2009/2/27 Anton Yakimov

Re: [us...@httpd] authnz_ldap_module: [Bad search filter] error

2009-02-26 Thread Anton Yakimov
# numEntries: 1 # numReferences: 3 So it works OK. I must say, that other LDAP connections work fine: KnowledgeTree, Mantis, VisualSVN's ldap... 2009/2/26 Marc Patermann : > Hi, > > Anton Yakimov schrieb: >> >> Hi everyone, >> >> I have a strange error with auth

Re: [us...@httpd] authnz_ldap_module: [Bad search filter] error

2009-02-26 Thread Anton Yakimov
e digest: users-digest-unsubscr...@httpd.apache.org > For additional commands, e-mail: users-h...@httpd.apache.org > > -- Best Regards, Anton Yakimov - The official User-To-User support forum of the Apache HTTP

Re: [us...@httpd] authnz_ldap_module: [Bad search filter] error

2009-02-26 Thread Anton Yakimov
p://httpd.apache.org/userslist.html> for more info. > To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org >  "   from the digest: users-digest-unsubscr...@httpd.apache.org > For additional commands, e-mail: users-h...@httpd.apache.org > > -- Best Regards, Anton Yakimo

Re: [us...@httpd] authnz_ldap_module: [Bad search filter] error

2009-02-26 Thread Anton Yakimov
> for more info. > To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org >  "   from the digest: users-digest-unsubscr...@httpd.apache.org > For additional commands, e-mail: users-h...@httpd.apache.org > > -- Best Regards, Anton Yakimov --

[us...@httpd] authnz_ldap_module: [Bad search filter] error

2009-02-26 Thread Anton Yakimov
Server Error. Please help me! Thanks in advance and good luck! -- Best Regards, Anton Yakimov - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more i

[EMAIL PROTECTED] mod_status bytes counters

2008-03-16 Thread Anton Menshutin
We are running apache web server for serving software downloads over http. Some users are using download managers that fetch data in multiple threads with byte range requests. But apache counts this request as a whole file being downloaded. So stat in access log is absolutly wrong. I found a way

Re: [EMAIL PROTECTED] Help: how to configure multiple apache servers behind a hardware load balancer

2007-03-12 Thread anton
/partner1 ServerName partner1.mydomain.com ... Cheers, Anton --- matt farey <[EMAIL PROTECTED]> wrote: > anton wrote: > > Thanks, Matt. I'll try the packet sniffer next. > > Meanwhile, I narrowed the problem down to virtual > > hosts. Her

Re: [EMAIL PROTECTED] Help: how to configure multiple apache servers behind a hardware load balancer

2007-03-08 Thread anton
this makes 10% of the requests fail. If I comment out all of the virtual host stuff above, everything works (but then, of course, I don't get canonical hostname or partner1 to work). Anton --- matt farey <[EMAIL PROTECTED]> wrote: > > anton wrote: > > Thanks, Krist.

Re: [EMAIL PROTECTED] Help: how to configure multiple apache servers behind a hardware load balancer

2007-03-08 Thread anton
se we need things like partner1.mydomain.com and partner2.mydomain.com. I am not sure what to do at this point. Anton --- Krist van Besien <[EMAIL PROTECTED]> wrote: > On 3/8/07, anton <[EMAIL PROTECTED]> wrote: > > Hi there, > > > > I'm a decently experie

[EMAIL PROTECTED] Help: how to configure multiple apache servers behind a hardware load balancer

2007-03-07 Thread anton
correctly resolving to the balancer's ip and the balancer correctly forwarding the requests to each server. That's working fine. Things get confusing when I try to configure each server's ServerName and virtual hosts. Any help would be greatly ap

Re: [EMAIL PROTECTED] apache2 looking for /htdocs on any request

2006-07-27 Thread Anton Piatek
Joshua Slive wrote: > On 7/27/06, Anton Piatek <[EMAIL PROTECTED]> wrote: > >> Hi, >> I was messing around with my config earlier and seem to have screwed >> something up. Apache2-ctl says the config is syntactically correct, but >> the root of the server "

[EMAIL PROTECTED] apache2 looking for /htdocs on any request

2006-07-27 Thread Anton Piatek
just shows /htdocs not found. I cannot figure out why it is looking for that file... reuqesting ~anton/ works fine, but I cannot see anything wrong with my config below. Anyone got any ideas what is wrong with it? (I have removed anything I thought might be causing problems and now have the followi

RE: [EMAIL PROTECTED] limit max number of simultaneous connections from same ip

2005-10-27 Thread Anton Krall
o: users@httpd.apache.org |Subject: Re: [EMAIL PROTECTED] limit max number of simultaneous |connections from same ip | |On Sunday 23 October 2005 21:09, Anton Krall wrote: |> Is there a way to limit the max number of httpd connections from a |> single ip? |> |> For example: |>

RE: [EMAIL PROTECTED] limit max number of simultaneous connections from same ip

2005-10-24 Thread Anton Krall
simultaneous |connections from same ip | |On 10/24/05, Jean-Christophe Montigny <[EMAIL PROTECTED]> wrote: |> Hello, |> |> Anton Krall wrote: |> > Is there a way to limit the max number of httpd connections from a |> > single ip? |> There is : just use iptables. Other

[EMAIL PROTECTED] limit max number of simultaneous connections from same ip

2005-10-23 Thread Anton Krall
Is there a way to limit the max number of httpd connections from a single ip? For example: tcp0 30492 207.36.86.205:80162.84.172.175:50784 ESTABLISHED 31208/httpd tcp0 33396 207.36.86.205:80162.84.172.175:50785 ESTABLISHED 14245/httpd tcp0 0 207.36.8