debug logs not getting generated

2014-03-28 Thread Kunal Pariani
Hello, I followed this http://nginx.org/en/docs/debugging_log.html. Have nginx built with --with-debug and set the the error_log in the following 2 files (nginx.conf.main & inside http { } in nginx.conf.web). But still i don't see debug level logging getting generated in the files specified. error

Re: Transforming nginx for Windows

2014-03-28 Thread itpp2012
tonyschwartz Wrote: --- > Has anyone else experienced nginx.exe 1.5.9.1. Cheshire crashing on > Windows server 2003? Intermittently, it is crashing on me with this > message in the NT event logs: > 0.0.0.0, faulting module nginx.exe, version 0.0

Re: Transforming nginx for Windows

2014-03-28 Thread tonyschwartz
Has anyone else experienced nginx.exe 1.5.9.1. Cheshire crashing on Windows server 2003? Intermittently, it is crashing on me with this message in the NT event logs: Event Type: Information Event Source: Application Error Event Category: (100) Event ID: 1004 Date: 3/28/2014

Re: Accessing HTTP request headers in nginx module

2014-03-28 Thread Mapper Uno
Thanks Maxim for your reply. Since I am newbie, please excuse my questions. I am still unable to retrieve the variable. All I have in the handler routine is: ngx_http_request_t *r I can see that r->headers_in.headers is a list, but then when you say $http_operation, it is confusing me. Could yo

Re: SSL session cache lifetime vs session ticket lifetime

2014-03-28 Thread Valentin V. Bartenev
On Thursday 27 March 2014 20:23:15 Maxim Dounin wrote: > Hello! > > On Wed, Mar 26, 2014 at 01:34:19PM +0400, kyprizel wrote: > > > will be "log_alloc_failures" better? > > I think something like "log_nomem" will be good enough. > Patch: > > # HG changeset patch > # User Maxim Dounin > # Date

Re: Defining a default server for when vhost does not exist for requested hostname (including blank hostname), for http and https

2014-03-28 Thread Jonathan Matthews
On 28 March 2014 14:31, Ben Johnson wrote: > Is there any way to av,oid this certificate being presented, but still > return the 444 response under the conditions I've described? I'd /suspect/ not, as the 444 response can't be "delivered" (i.e. the connection closed) until sufficient information

Re: Defining a default server for when vhost does not exist for requested hostname (including blank hostname), for http and https

2014-03-28 Thread Maxim Dounin
Hello! On Fri, Mar 28, 2014 at 12:51:17PM -0400, Ben Johnson wrote: > > > On 3/28/2014 11:45 AM, Maxim Dounin wrote: > > Hello! > > > > On Fri, Mar 28, 2014 at 02:53:18PM +, Jonathan Matthews wrote: > > > >> On 28 March 2014 14:31, Ben Johnson wrote: > >>> Is there any way to av,oid this

Re: Defining a default server for when vhost does not exist for requested hostname (including blank hostname), for http and https

2014-03-28 Thread Jonathan Matthews
On 28 March 2014 16:51, Ben Johnson wrote: > Maxim, when you say, "If SNI is used, it's in theory possible to close a > connection early," do you mean to imply that while possible, this > capability has not yet been implemented in nginx (the tickets are still > open after almost two years)? I'd s

Radius and TACACS+ based authentication

2014-03-28 Thread Hari Miriyala
Hi Everyone, Currently I am using nginx (version 1.2.7) and would like to have authentication support using external security servers such as Radius and TACACS+. Are there are any extensions/plugins available to support this functionality? if not, any thoughts on how it can be achieved? Best Reg

Re: Radius and TACACS+ based authentication

2014-03-28 Thread itpp2012
AFAIK there is only a ldap module for nginx. Posted at Nginx Forum: http://forum.nginx.org/read.php?2,248820,248823#msg-248823 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Defining a default server for when vhost does not exist for requested hostname (including blank hostname), for http and https

2014-03-28 Thread itpp2012
Jonathan Matthews Wrote: --- > bugs/features like this will get exponentially more attention after > Windows XP goes EOL this April, as (I believe) it's the last major > platform not to support SNI. Which is a moot case since there are at least 5

Re: One webdav per user to their home directories ?

2014-03-28 Thread Francis Daly
On Fri, Mar 28, 2014 at 10:51:56AM +0100, BONNET, Frank wrote: Hi there, > I would like to setup the following configuration , run one nginx instance > per user to let them access to their home directories thru the webdav > protocol + LDAP AUTH like the following > > https://myserver.domain.tl

Re: Defining a default server for when vhost does not exist for requested hostname (including blank hostname), for http and https

2014-03-28 Thread Ben Johnson
On 3/28/2014 11:45 AM, Maxim Dounin wrote: > Hello! > > On Fri, Mar 28, 2014 at 02:53:18PM +, Jonathan Matthews wrote: > >> On 28 March 2014 14:31, Ben Johnson wrote: >>> Is there any way to av,oid this certificate being presented, but still >>> return the 444 response under the conditions

Defining a default server for when vhost does not exist for requested hostname (including blank hostname), for http and https

2014-03-28 Thread Ben Johnson
Hello, We run multiple vhosts in nginx. Occasionally, a vhost will be mis-configured or disabled (via the website management software that we use), and public requests for the domain will fall-back to nginx's default vhost, which can have very unintended consequences (e.g., an incorrect and comple

Re: Defining a default server for when vhost does not exist for requested hostname (including blank hostname), for http and https

2014-03-28 Thread Maxim Dounin
Hello! On Fri, Mar 28, 2014 at 02:53:18PM +, Jonathan Matthews wrote: > On 28 March 2014 14:31, Ben Johnson wrote: > > Is there any way to av,oid this certificate being presented, but still > > return the 444 response under the conditions I've described? > > I'd /suspect/ not, as the 444 re

Re: Accessing HTTP request headers in nginx module

2014-03-28 Thread Maxim Dounin
Hello! On Fri, Mar 28, 2014 at 01:06:00AM +0100, Mapper Uno wrote: > Thanks for reply. However, I am still not clear how to access the > "custom" headers in module handler. Pls see my comments inline. > > B.R. wrote in post #1141281: > > In nginx, you have the http_ embedded variable in the core

Re: SSL session cache lifetime vs session ticket lifetime

2014-03-28 Thread Maxim Dounin
Hello! On Fri, Mar 28, 2014 at 01:33:28PM +0400, kyprizel wrote: > Will this patch be applied to mainline? Most likely it will, but testing and review are appreciated, as usual. > > > > On Thu, Mar 27, 2014 at 8:23 PM, Maxim Dounin wrote: > > > Hello! > > > > On Wed, Mar 26, 2014 at 01:34

Re: nginx 1.4.1 - slow transfers / connection resets

2014-03-28 Thread Igor Anishchuk
We hit the same problem. First off, to work around this problem add the following to your nginx configuration: send_timeout 3600; This will increase the time out to one hour which is long enough to empty the buffer with a slow connection. As to what's happening during these 60 seconds I can ans

One webdav per user to their home directories ?

2014-03-28 Thread BONNET, Frank
hello I would like to setup the following configuration , run one nginx instance per user to let them access to their home directories thru the webdav protocol + LDAP AUTH like the following https://myserver.domain.tld/user1 https://myserver.domain.tld/user2 and so on ( I have approx 4000 us

Re: SSL session cache lifetime vs session ticket lifetime

2014-03-28 Thread kyprizel
Will this patch be applied to mainline? On Thu, Mar 27, 2014 at 8:23 PM, Maxim Dounin wrote: > Hello! > > On Wed, Mar 26, 2014 at 01:34:19PM +0400, kyprizel wrote: > > > will be "log_alloc_failures" better? > > I think something like "log_nomem" will be good enough. > Patch: > > # HG changeset

[ANNOUNCE] Tengine-2.0.2 is released

2014-03-28 Thread Chuanwen Chen
Hi folks, Tengine-2.0.2 (development version) has been released. You can either checkout the source code from GitHub: https://github.com/alibaba/tengine or download the tarball directly: http://tengine.taobao.org/download/tengine-2.0.2.tar.gz