Re: [users@httpd] Basic Authentication question

2005-07-14 Thread K Anand
I tried with both IE and with FireFox..but both prompt me for the password twice...Did it ask you for the password only once ?? Anand > Works here using Mozilla.. what browser are you checking it with? > perhaps it's one that doesn't follow the standards properly :-) >

Re: [users@httpd] Basic Authentication question

2005-07-14 Thread zcat
K Anand wrote: That was my understanding alsoBut in my case, it is again prompting me for userid and password for subsequent pages also...Actually, it asks password 2 times when opening the main page..after that it does not ask for the password... http://ns.sail-steel.com/ userid is guest a

Re: [users@httpd] Basic Authentication question

2005-07-14 Thread K Anand
That was my understanding alsoBut in my case, it is again prompting me for userid and password for subsequent pages also...Actually, it asks password 2 times when opening the main page..after that it does not ask for the password... http://ns.sail-steel.com/ userid is guest and password is gs

Re: [users@httpd] Basic Authentication question

2005-07-14 Thread zcat
The browser prompts me for userid and password... now i click a link on that page and say the request goes as http://a.b.c.d/xyz.html Will it prompt again for user id and password ?? The browser keeps the username and password for the rest of the session, and will automatically send them with e

[users@httpd] Basic Authentication question

2005-07-14 Thread K Anand
Hi all, I have a very basic question regarding authentication on apache...I have in my httpd.conf a section like below : AuthType Basic AuthName "By Invitaion Only" AuthUserFile /etc/httpd/conf/passwd/passwords Require valid-user Does this mean that everytime I access a differen

[users@httpd] Compile errors from Apache HTTPD 2.0.54

2005-07-14 Thread Sean Levesque
Greetings all. I have a Red Hat Enterprise Linux 3ES server and am attempting to install Apache HTTPD. I used /usr/local/apache2 as my intended install directory, and Config appeared to complete successfully with no errors. Make seems to run successfully for several steps, but then ends with: ==

[users@httpd] Will be an issue if MaxClients > 150?

2005-07-14 Thread Qingshan Xie
Hi, All, We have apache-2.0.52 on Linux host, running worker MPM. It seems a lot of child processes are in hanging status. Is it possible caused by too big number of MaxClients(500)? Please help. Thanks, Q.Xie === The current configure httpd.conf is b

Re: [users@httpd] Apache + AWSTATS = Vulnerability????

2005-07-14 Thread Anderson Miranda
Thanks for all the replies. Strange thing about apache logs is that all requests done to AWSTATS cgi returned only 404 ... funny... About sanitizing my box, It will be most than difficult, almost impossible... Checked already a lot of "infected" files, and I'm sure there are a lot more. He

RE: [users@httpd] LDAP Authorization with Active Directory

2005-07-14 Thread Jeremy Weiland
I should be more clear. When I load the following modules: LoadModule ldap_module modules/util_ldap.so LoadModule auth_ldap_module modules/mod_auth_ldap.so Apache crashes in two cases: when I try to authenticate, and when I try to shut down the server. I'll try your tip with the [EMAIL PROTECTE

Re: [users@httpd] Apache + AWSTATS = Vulnerability????

2005-07-14 Thread Sean Conner
It was thus said that the Great Anderson Miranda once stated: > > Now I want to know just 2 things: > > First, how can I be sure that it all happened because of the awstats > security flaw? > Second, how could I completely remove this Unix/Hacktop from my system > (Linux RedHat9 k2.4) ? Firs

Re: [users@httpd] Apache + AWSTATS = Vulnerability????

2005-07-14 Thread Ivan Barrera A.
> >>Kk, here is what I've got so far: >> >>My system seems to be infected by some kind of trojan/worm/virus called >>Unix/Hacktop, wich does (for what I'm seeing) some kind of scanport via >>ssh (22). >>I found some related info saying that the intruder could be using a >>security flaw from AWSTAT

Re: [users@httpd] Apache + AWSTATS = Vulnerability????

2005-07-14 Thread Joshua Slive
On 7/14/05, Anderson Miranda <[EMAIL PROTECTED]> wrote: > Kk, here is what I've got so far: > > My system seems to be infected by some kind of trojan/worm/virus called > Unix/Hacktop, wich does (for what I'm seeing) some kind of scanport via > ssh (22). > I found some related info saying that the

[users@httpd] Apache + AWSTATS = Vulnerability????

2005-07-14 Thread Anderson Miranda
Kk, here is what I've got so far: My system seems to be infected by some kind of trojan/worm/virus called Unix/Hacktop, wich does (for what I'm seeing) some kind of scanport via ssh (22). I found some related info saying that the intruder could be using a security flaw from AWSTATS + Apache to

Re: [users@httpd] Apache trying to find .htaccess on VirtualHost's DocumentRoot

2005-07-14 Thread Joshua Slive
On 7/14/05, Dan Lyons <[EMAIL PROTECTED]> wrote: > > We have Apache running on a win2k server, with a mapped drive to a directory > on a Sun server(also running Apache). Using VirtualHost, we have made the > mapped drive our document root to the network shared drive: > > > ServerAdmin [EM

RE: [users@httpd] LDAP Authorization with Active Directory

2005-07-14 Thread Gary W. Smith
With the exception of changing the user, domain name and password, this was cut from a working ldap congfiguration. Note the [EMAIL PROTECTED] I could never get the full DN to work properly. This works like a charm. Also, I use forestdnszones as the ldap server as it will pickup any domain cont

[users@httpd] LDAP Authorization with Active Directory

2005-07-14 Thread Jeremy Weiland
Hi, I'm trying to get Apache 2 to authenticate users with mod_auth_ldap based on Active Directory settings. I've got an LDAP browser on my computer and can connect to the Win2k3 server perfectly, but for some reason when I authenticate over the website it brings Apache down with an error in wldap

Re: [users@httpd] Apache trying to find .htaccess on VirtualHost's DocumentRoot

2005-07-14 Thread Craig Dunigan
Dan, I haven't stopped to research any of this, but some shots in the dark: Are you sure the problem isn't that Apache can't find H:, not that it just can't find .htaccess? I have to say I don't like the look of a path in httpd.conf of just "H:" without slashes. Even if that's okay, it could

[users@httpd] zlib weirdness

2005-07-14 Thread Preston Podaril
So have have installed zlib version 1.2.2, then recompiled apache and php, but when I look at phpinfo.php from the web (aka apache 1.3.33) it tells me the following: ZLib Supportenabled Compiled Version1.2.2 Linked Version 1.2.1 I have checked the libphp4.so file in apache/libexe

Re: [users@httpd] Starting Apache2 on Win2k as another user

2005-07-14 Thread Tony Karakashian
Did you apply the "Log on as a service" right to apacheuser? -T - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAI

Re: [users@httpd] Starting Apache2 on Win2k as another user

2005-07-14 Thread DaedalWorks
Stephen Cook wrote: I am trying to get Apache2 (v2.0.54) to run as a service on Windows 2000 as a specific user ("apacheuser", original name huh?), which only has rights to read and execute on Apache2 root directory, and full access to the logs directory. When I start the service as local us

[users@httpd] Apache trying to find .htaccess on VirtualHost's DocumentRoot

2005-07-14 Thread Dan Lyons
We have Apache running on a win2k server, with a mapped drive to a directory on a Sun server(also running Apache).  Using VirtualHost, we have made the mapped drive our document root to the network shared drive:   ourDNSname:80>  ServerAdmin [EMAIL PROTECTED]  DocumentRoot H:  ServerName ourDNSna

Re: [users@httpd] Re: Alias not matching warning

2005-07-14 Thread André Malo
* Kvetch <[EMAIL PROTECTED]> wrote: > Thanks Joshua. Do you know of a way to supress that warnging message? It > will take me some time to clean up all the overlapping Aliases so if I start > adding new virtual hosts I would still want to see any messages startup > would spit out and with the 1

Re: [users@httpd] Handler added with AddHandler gets invoked when is not really an extension

2005-07-14 Thread Joshua Slive
On 7/13/05, dAniel hAhler <[EMAIL PROTECTED]> wrote: > Thank you, Joshua. After reading it, it makes sense. > > I've now used FilesMatch to force vi backups to not been shown unparsed with: > > > SetHandler php-fastcgi > > > > As a side note, it would make sens

Re: [users@httpd] Re: Alias not matching warning

2005-07-14 Thread Kvetch
Thanks Joshua.  Do you know of a way to supress that warnging message?  It will take me some time to clean up all the overlapping Aliases so if I start adding new virtual hosts I would still want to see any messages startup would spit out and with the 100 odd warnings it makes it hard to see if any

RE: [users@httpd] Starting Apache2 on Win2k as another user

2005-07-14 Thread ed elliott
I would get filemon from sysinternals site and use to see which "Access Denied" error messages you get for that user and then give them rights to access them.Boyle Owen <[EMAIL PROTECTED]> wrote: > -Original Message-> From: Stephen Cook [mailto:[EMAIL PROTECTED]> Sent: Donnerstag, 14. Juli

RE: [users@httpd] Starting Apache2 on Win2k as another user

2005-07-14 Thread Boyle Owen
> -Original Message- > From: Stephen Cook [mailto:[EMAIL PROTECTED] > Sent: Donnerstag, 14. Juli 2005 12:56 > To: apache list > Subject: [EMAIL PROTECTED] Starting Apache2 on Win2k as another user > > > I am trying to get Apache2 (v2.0.54) to run as a service on > Windows 2000 > as a sp

Re: [users@httpd] .phps extension with mod_fastcgi

2005-07-14 Thread Chris Hall
it's a PHP thing. add: # display formatted, syntax hilighted php source code AddType application/x-httpd-php-source .phps to httpd.conf and restart the server On 7/13/05, dAniel hAhler <[EMAIL PROTECTED]> wrote: > Hi, > > is the handling of .phps extensions (probably as text/html, with syntax

[users@httpd] Starting Apache2 on Win2k as another user

2005-07-14 Thread Stephen Cook
I am trying to get Apache2 (v2.0.54) to run as a service on Windows 2000 as a specific user ("apacheuser", original name huh?), which only has rights to read and execute on Apache2 root directory, and full access to the logs directory. When I start the service as local user (when I am logged i