Re: newbie question

2016-10-12 Thread Alex Samad
Hi Thanks I ended up with this but still with issues map $cookie_SSOID $ssoid_cookie { default ""; ~SSOID=(?P.+) $ssoid; } location /imaadmin/ { proxy_cache off; proxy_pass http://IMAAdmin; auth_request /sso/validate; # must use %20 for url encoding set $sso_group "

Re: Clientbodyinfileonly - POST request is discarded

2016-10-12 Thread Francis Daly
On Wed, Oct 12, 2016 at 03:34:45PM -0400, yurai wrote: Hi there, > >Are you reporting that the content of the client-file upload.txt is not > >saved on the nginx server that is localhost, in a numbered file below > >your client_body_temp_path? > > Yes. Exactly this. My /tmp/nginx-client-body dir

Re: URL is not pointing to https on iframe

2016-10-12 Thread itpp2012
geopcgeo Wrote: --- > fine on https. But please let me know whats the issue? Is it on Iframe > or > on Nginx. Can anyone please help us? This needs to be fixed in the iframe (or whatever you use to generate this iframe). Posted at Nginx Forum:

Re: Clientbodyinfileonly - POST request is discarded

2016-10-12 Thread yurai
Hi, >Are you reporting that the content of the client-file upload.txt is not >saved on the nginx server that is localhost, in a numbered file below >your client_body_temp_path? Yes. Exactly this. My /tmp/nginx-client-body directory is empty. >There is more than one server involved. Please be ver

Re: Use ngx_stream_ssl_preread_module but also log client ip in access.log for https requests

2016-10-12 Thread Thomas Glanzmann
Hello Roman, * Roman Arutyunyan [2016-10-12 20:07]: > On Wed, Oct 12, 2016 at 07:50:06PM +0200, Thomas Glanzmann wrote: > > I would like to use ngx_stream_ssl_preread_module to multiplex a web > > server, openvpn, and squid to one ip address and port. However I would > > also like to keep the rea

Re: Use ngx_stream_ssl_preread_module but also log client ip in access.log for https requests

2016-10-12 Thread Roman Arutyunyan
Hi Thomas, On Wed, Oct 12, 2016 at 07:50:06PM +0200, Thomas Glanzmann wrote: > Hello, > I would like to use ngx_stream_ssl_preread_module to multiplex a web > server, openvpn, and squid to one ip address and port. However I would > also like to keep the real client ip address in my http logs, is t

Use ngx_stream_ssl_preread_module but also log client ip in access.log for https requests

2016-10-12 Thread Thomas Glanzmann
Hello, I would like to use ngx_stream_ssl_preread_module to multiplex a web server, openvpn, and squid to one ip address and port. However I would also like to keep the real client ip address in my http logs, is that possible, if so how? Cheers, Thomas

Re: Clientbodyinfileonly - POST request is discarded

2016-10-12 Thread Francis Daly
On Wed, Oct 12, 2016 at 06:28:47AM -0400, yurai wrote: Hi there, > >"The file should be transferred to the nginx server." > > This is the whole point. > With current configuration when I type curl --data-binary '@upload.txt' > http://localhost/upload file is NOT transffered from client to serve

Log response location headers when Nginx is used as reverse proxy

2016-10-12 Thread AKSHAYAA MOHAN
Hi, I have a usecase where I want to log the response location headers returned by the upstream servers. Is there a way I can do this without installing any third party tools? Regards ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mail

Re: newbie question

2016-10-12 Thread Maxim Dounin
Hello! On Wed, Oct 12, 2016 at 12:43:12PM +1100, Alex Samad wrote: > Hi > > I am trying to create a dynamic auth address > > > # grab ssoid > map $cookie_SSOID $ssoid_cookie { > default ""; > ~SSOID=(?P.+) $ssoid; > } > > >location /imaadmin/ { > proxy_cache off; >

Re: [nginx-announce] nginx-1.11.5

2016-10-12 Thread Maxim Dounin
Hello! On Wed, Oct 12, 2016 at 03:03:29PM +0530, Anoop Alias wrote: > *) Feature: the --with-compat configure option. > > What does this do actually? This option enables dynamic modules compatibility, that is, it ensures that appropriate fields in structures are present (or appropriately-size

Re: URL is not pointing to https on iframe

2016-10-12 Thread netcana
wish you all the best for your project but sorry i have no clue about your question. Thanks. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,270042,270198#msg-270198 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/lis

Re: Practical size limit of config files

2016-10-12 Thread netcana
same question here but i think no one knows that's why there is no reply. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,270109,270197#msg-270197 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Clientbodyinfileonly - POST request is discarded

2016-10-12 Thread yurai
Hello, >"The file should be transferred to the nginx server." This is the whole point. With current configuration when I type curl --data-binary '@upload.txt' http://localhost/upload file is NOT transffered from client to server at all - "proxy_pass" is performed and I only get HTTP response 200

Fwd: CAP_NET_ADMIN

2016-10-12 Thread Mathew Heard
I have also tried: InheritableCapabilities=CAP_NET_BIND_SERVICE CAP_NET_ADMIN CAP_SETGID CAP_SETUID CAP_SYS_RESOURCE and various other options without avail. -- Forwarded message -- From: Mathew Heard Date: Wed, Oct 12, 2016 at 9:01 PM Subject: CAP_NET_ADMIN To: nginx@nginx.o

CAP_NET_ADMIN

2016-10-12 Thread Mathew Heard
Hi All, I am stuck trying to get my nginx service which is launched via SystemD to give CAP_NET_ADMIN to its workers (required for IP_TRANSPARENT). I have tried /etc/security/capability.conf & setcap. SystemD has the permission whitelisted: CapabilityBoundingSet=CAP_NET_BIND_SERVICE CAP_NET_ADMI

Re: [nginx-announce] nginx-1.11.5

2016-10-12 Thread Anoop Alias
*) Feature: the --with-compat configure option. What does this do actually? On Tue, Oct 11, 2016 at 10:53 PM, Kevin Worthington wrote: > Hello Nginx users, > > Now available: Nginx 1.11.5 for Windows https://kevinworthington.com/ > nginxwin1115 (32-bit and 64-bit versions) > > These versions ar