[us...@httpd] Apache modules and authentication?
Hi. This is the kind of authentication param I'm using: Directory /home/jsosic/www/admin AllowOverride None AuthType Basic AuthName Admin AuthUserFile /etc/httpd/myauthfile Require valid-user /Directory I've disabled all the auth modules except these two: authn_file_module (shared) authz_host_module (shared) Now, when I run: apachectl -t It says Syntax OK. But, in error log I can see: [Sat Mar 20 08:12:09 2010] [crit] [client xxx.xxx.xxx.xxx] configuration error: couldn't check user. No user file?: /admin/xxx So obviously I'm missing some modules... Is it the basic module or the user module? And how can I test this, if I currently don't have access to the web (only ssh), and syntax check is obviously not telling me some modules are missing :-/ -- |Jakov Sosic|ICQ: 28410271| PGP: 0x965CAE2D | = | start fighting cancer - http://www.worldcommunitygrid.org/ | - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [us...@httpd] Apache modules and authentication?
On Sat, Mar 20, 2010 at 6:58 AM, Jakov Sosic jakov.so...@srce.hr wrote: Hi. This is the kind of authentication param I'm using: Directory /home/jsosic/www/admin AllowOverride None AuthType Basic AuthName Admin AuthUserFile /etc/httpd/myauthfile Require valid-user /Directory I've disabled all the auth modules except these two: authn_file_module (shared) authz_host_module (shared) Now, when I run: apachectl -t It says Syntax OK. But, in error log I can see: [Sat Mar 20 08:12:09 2010] [crit] [client xxx.xxx.xxx.xxx] configuration error: couldn't check user. No user file?: /admin/xxx authn_default stops you from falling through. -- Eric Covener cove...@gmail.com - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [us...@httpd] Apache modules and authentication?
On 03/20/2010 12:14 PM, Eric Covener wrote: authn_default stops you from falling through. So I should enable authn_default? -- |Jakov Sosic|ICQ: 28410271| PGP: 0x965CAE2D | = | start fighting cancer - http://www.worldcommunitygrid.org/ | - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [us...@httpd] Apache modules and authentication?
On Sat, Mar 20, 2010 at 8:08 AM, Jakov Sosic jakov.so...@srce.hr wrote: On 03/20/2010 12:14 PM, Eric Covener wrote: authn_default stops you from falling through. So I should enable authn_default? try it and see. Someone probably got trigger-happy disabling unneeded modules in an effort to optimize your server. -- Eric Covener cove...@gmail.com - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [us...@httpd] Apache modules and authentication?
On 03/20/2010 01:26 PM, Eric Covener wrote: On Sat, Mar 20, 2010 at 8:08 AM, Jakov Sosic jakov.so...@srce.hr wrote: On 03/20/2010 12:14 PM, Eric Covener wrote: authn_default stops you from falling through. So I should enable authn_default? try it and see. Someone probably got trigger-happy disabling unneeded modules in an effort to optimize your server. That someone was me :) After research and testing, I've found out that I need the following modules for that piece of configuration to work: auth_basic_module (shared) authn_file_module (shared) authz_user_module (shared) -- |Jakov Sosic|ICQ: 28410271| PGP: 0x965CAE2D | = | start fighting cancer - http://www.worldcommunitygrid.org/ | - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
[us...@httpd] Apache modules question
Hello everyone , I have a project where i want to add a new phase between the content generation and the logging phase of a request. In other words i want after the response is generated and ready to be sent to the client to manipulate the html produced code (do my stuff) and then send it to the browser. I have already read stuff on how to write apache2 modules but i understood that modules can only substitute other modules that are enabled in the standard faces of a request processing and not involve somehow a new phase. My friend who works in the same project has done this with filters (i think) but we are looking for a faster way (maybe a new module enabled after the content generation). Please tell me how to do that. Sorry for bad english. Regards, Tony - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [us...@httpd] Apache modules question
On Wed, Oct 21, 2009 at 8:54 PM, antoine antonis...@gmail.com wrote: My friend who works in the same project has done this with filters (i think) but we are looking for a faster way (maybe a new module enabled after the content generation). I think anything but a filter is a complete dead end. -- Eric Covener cove...@gmail.com - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [us...@httpd] Apache modules question
antoine wrote: Hello everyone , I have a project where i want to add a new phase between the content generation and the logging phase of a request. In other words i want after the response is generated and ready to be sent to the client to manipulate the html produced code (do my stuff) and then send it to the browser. That's called an output filter. See http://www.apachetutor.org/dev/request for the brief overview, then get the book for details of how to implement it (and of why it would be hugely inefficient to make it a new phase). -- Nick Kew - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
[us...@httpd] apache modules
Hi I have one question about Apache modules.with loading more modules on apache, may apache responses with more delay ?? -- N.Chavoshi
RE: [us...@httpd] apache modules
If you just load modules but don't actually use them (ie, no directives in config), then no. From: nima chavooshi [mailto:nima0...@gmail.com] Sent: Wednesday, July 08, 2009 8:59 AM To: users@httpd.apache.org Subject: [us...@httpd] apache modules Hi I have one question about Apache modules.with loading more modules on apache, may apache responses with more delay ?? -- N.Chavoshi This message is for the named person's use only. It may contain confidential, proprietary or legally privileged information. If you receive this message in error, please notify the sender urgently and then immediately delete the message and any copies of it from your system. Please also immediately destroy any hardcopies of the message. The sender's company reserves the right to monitor all e-mail communications through their networks.
Re: [us...@httpd] apache modules
nima chavooshi wrote: Hi I have one question about Apache modules.with loading more modules on apache, may apache responses with more delay ?? Re these recent threads : - [us...@httpd] Apache under DOS - [us...@httpd] apache monitoring - [us...@httpd] apache modules It is always a good idea, indicative of the intelligent and considerate poster to a user's support list, to start by reading the available on-line documentation. For example, at http://httpd.apache.org/, one finds links to Documentation Version 2.2 which leads to a page full of information about Security Tips Authentication, Authorization, and Access Control Performance Tuning Log Files Modules (see S for mod_Status) and Frequently Asked Questions (FAQ) Reading this documentation beforehand is also a sign of respect and appreciation for the work of the many competent volunteers who have spent a lot of their time composing it and making it available. - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [us...@httpd] apache modules
Boyle Owen wrote: If you just load modules but don't actually use them (ie, no directives in config), then no. That is not entirely true. Most register a hook provider to evaluate if they are the candidate for providing auth, injecting filters or handling the request. Those hooks do cost some cycles to evaluate and answer, even if the answer is always 'no, not this module'. So you are wise to remove modules that are not used. Also, some security flaws in the past have exploited only one module of httpd. The users who had not loaded or enabled that module were not affected. So it is also a courtesy to the next administrator down the road (or yourself) to simplify the number of modules loaded. - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
