Re: [EMAIL PROTECTED] Securing Apache configuration

2005-08-11 Thread William A. Rowe, Jr.
Neelay Shah wrote: Well, there are some programs like "junction" available on sysinternals that supposedly make hard link equivalent on windows...and the point is the user can create a hard link to c:\ in his user dir. No that's a junction, and Apache2 should treat it as a softlink. and it w

Re: [EMAIL PROTECTED] Problem in mod_Cern_meta

2005-08-11 Thread sridhar
hi Joshua, I know very well that response header cann't be viewed directly thru web browser. i am accessing the page using telnet or Apache jmeter which displays all the response header The content of the meta file is : MyHeader:Hello If i use mod_headers i am getting MyHeader in response. e.g:

Re: [EMAIL PROTECTED] Securing Apache configuration

2005-08-11 Thread Sean Conner
It was thus said that the Great Neelay Shah once stated: > > --- "Roger B.A. Klorese " <[EMAIL PROTECTED]> wrote: > > > Hard links don't exist in Windows, do they? > > > > And on Linux and other Unixen they require suitable > > permissions on the > > object. > > Well, there are some programs li

Re: [EMAIL PROTECTED] Securing Apache configuration

2005-08-11 Thread Neelay Shah
Well, there are some programs like "junction" available on sysinternals that supposedly make hard link equivalent on windows...and the point is the user can create a hard link to c:\ in his user dir. and it will expose the whole hard drive and that is why I am concerned about it...how to stop the

Re: [EMAIL PROTECTED] Using mod_rewrite with mod_jk2

2005-08-11 Thread Dan
RewriteRule will by default only match the request, that is the "/ profile" part. Apparently the RewriteRule can back-reference to the last-matched RewriteCond. So the following *should* work. Of course, mod_rewrite is called "voodoo" even by experts, so it's possible that my logic is flawed

[EMAIL PROTECTED] Using mod_rewrite with mod_jk2

2005-08-11 Thread brian papa
I'm trying to set it up so that users of my site can enter a url like "username.mysite.com/profile" that will rewrite to "mysite.com/profile.jsp?u=username", or something of that nature. From what I understand, using mod_rewrite is the best way to do this. I've added the following to my httpd.conf

Re: [EMAIL PROTECTED] implement keep-alive functionality

2005-08-11 Thread Nick Kew
On Thursday 11 August 2005 22:30, Oliver Pike wrote: > I'm trying to support a web-application and > unfortunatley I don't have access to the code, so I > have to come up with a workaround. Have you tried the solution suggested in the CGI FAQ? -- Nick Kew ---

Re: [EMAIL PROTECTED] Securing Apache configuration

2005-08-11 Thread Roger B.A. Klorese
Neelay Shah wrote: So, if one of the users in his home directory creates a hard link to C:/ there is no way I could configure the web server to avoid following that hard link..following the link would display the contents of the "C:/" Hard links don't exist in Windows, do they? And on Lin

Re: [EMAIL PROTECTED] Securing Apache configuration

2005-08-11 Thread Neelay Shah
So, if one of the users in his home directory creates a hard link to C:/ there is no way I could configure the web server to avoid following that hard link..following the link would display the contents of the "C:/" Neelay --- "William A. Rowe, Jr." <[EMAIL PROTECTED]> wrote: > Neelay Shah wrot

[EMAIL PROTECTED] implement keep-alive functionality

2005-08-11 Thread Oliver Pike
I'm trying to support a web-application and unfortunatley I don't have access to the code, so I have to come up with a workaround. The problem is that there is a client piece used to run queries, some of which take hours, and the end-users' firewalls are closing the connections because they sit idl

Re: [EMAIL PROTECTED] Securing Apache configuration

2005-08-11 Thread Neelay Shah
Got it! Thanks, Neelay --- "William A. Rowe, Jr." <[EMAIL PROTECTED]> wrote: > Neelay Shah wrote: > > Hi guys, > > > > I have two questions: > > > > 1. Is there any way I can specify in the config. > file > > for Apache that do not allow access to any > directory > > called 'foo' in my compl

Re: [EMAIL PROTECTED] Securing Apache configuration

2005-08-11 Thread William A. Rowe, Jr.
Neelay Shah wrote: 2. Is there a way for me to configure apache so as to disable showing/following hard links... Look at your operating system and prevent them from existing. A hard link is exactly what it says it is; once one is created between the directory /foo and the directory /bar, there

Re: [EMAIL PROTECTED] Securing Apache configuration

2005-08-11 Thread William A. Rowe, Jr.
Neelay Shah wrote: Hi guys, I have two questions: 1. Is there any way I can specify in the config. file for Apache that do not allow access to any directory called 'foo' in my complete root...i.e. for e.g. if I say Whoops; that's Bill -

Re: [EMAIL PROTECTED] .htaccess & php

2005-08-11 Thread James Carr
I think what your doing is completely preventing people from accessing images at all. They need to access images to see them on the web pages. You may try either placing an index file in the images directory, or in your .htaccess specify to use some other page as the directory index. Hope that hel

[EMAIL PROTECTED] Securing Apache configuration

2005-08-11 Thread Neelay Shah
Hi guys, I have two questions: 1. Is there any way I can specify in the config. file for Apache that do not allow access to any directory called 'foo' in my complete root...i.e. for e.g. if I say Order Deny,Allow Deny from All This will disable access to 'c:\MyRoot\Dir1\foo' but if I h

Re: [EMAIL PROTECTED] mod_rewrite question, escaping quantifiers

2005-08-11 Thread John Hicks
Tony VanScoy wrote: I want to redirect certain requests to a pdf depending on a get variable. nothing new, but I just can't get it to work. So I started with the basics but just redirecting a certain page to a pdf, which works. RewriteRule ^/test\.php$ /pdf/somefile.pdf$ [R,T=application/pdf] W

[EMAIL PROTECTED] .htaccess & php

2005-08-11 Thread Hiep Nguyen
Hi everyone, I have this problem with my web server. I'm running mysql, apache, and php that come with fedora 4. I want to place .htaccess file in /var/www/html/images/ folder to prevent users to see all images in this dictory, but this causes my web page unable to display any images on the

[EMAIL PROTECTED] mod_rewrite question, escaping quantifiers

2005-08-11 Thread Tony VanScoy
I want to redirect certain requests to a pdf depending on a get variable. nothing new, but I just can't get it to work. So I started with the basics but just redirecting a certain page to a pdf, which works. RewriteRule ^/test\.php$ /pdf/somefile.pdf$ [R,T=application/pdf] Which works fine. But,

Re: [EMAIL PROTECTED] [P] flag in mod_rewrite

2005-08-11 Thread Joshua Slive
On 8/11/05, Anthony Browne <[EMAIL PROTECTED]> wrote: > The reason I need to proxy with mod_proxy after a rewrite is > because I need to check and see if the request can be satisfied from > our static cache of mirrored sites using mod_rewrite's -s and -d > flags. If the request cannot be sa

RE: [EMAIL PROTECTED] [P] flag in mod_rewrite

2005-08-11 Thread Anthony Browne
The reason I need to proxy with mod_proxy after a rewrite is because I need to check and see if the request can be satisfied from our static cache of mirrored sites using mod_rewrite's -s and -d flags. If the request cannot be satisfied from the filesystem, the request must be rewritten a

[EMAIL PROTECTED] Apache and Mod_jk error

2005-08-11 Thread Lyndon Tiu
Hello, I am getting this error. Googling brings up nothing conrete or related to my environment: [Fri Aug 12 05:05:33 2005] [error] channelApr.receive(): Error receiving message body -1 11 [Fri Aug 12 05:05:33 2005] [error] workerEnv.processCallbacks() Error reading reply [Fri Aug 12 05:05:3

[EMAIL PROTECTED] How to rewrite/redirect a forward proxied Http request ?

2005-08-11 Thread Bacchu, Anjan
Hi There, Thanks for any pointers. A buggy internet application(I.E 6.0x (win xp SP2)) running on a notebook has some issues. 1)I'm trying to inject a debugging version of the malfunctioning javascript file to get some clues. To do (1), I've tried putting an Apache server on the c

RE: [EMAIL PROTECTED] mod_proxy/mod_proxy_html

2005-08-11 Thread Shahzad Bhatti
Axel, Thanks again, it worked and I was able to go further, however I ran into another problem. We are using single-sign-on that stores ticket in cookie, however it looks like this cookie is not being passed to the client. And it goes into loop, i.e., -- AFTER SUCCESSFUL LOGIN, THE USER IS DIRE

Re: [EMAIL PROTECTED] Why does Apache use up all my memory?

2005-08-11 Thread Jon Snow
George, I have something similar... I have been debugging an issue where I have seen processes growing to 800Mb on a forward proxy configuration using the worker model. Perhaps interestingly on reverse proxy configurations I get 100% CPU states occasionally as well. What I have noticed is that

Re: [EMAIL PROTECTED] Managing enterprise deployments of Apache

2005-08-11 Thread Nathan Benson
Dale, thank you very much for the reply. i checked out webmin and it looks to provide some of the functionality i was looking for, but not quite what i was looking for. i was looking for a centrally managed place for all apache deployments, one place where you could make a change to a particular

[EMAIL PROTECTED] forcing ssl client dialog on all https requests

2005-08-11 Thread allan juul
hello, is it possible somehow to force a prompt for a client certificate more than once ? this will force the prompt once in a browser session SSLVerifyClient require but how to force the prompt on every subsequent requests ? basically im, looking for a way so that I control the prompts (

Re: [EMAIL PROTECTED] Problem in mod_Cern_meta

2005-08-11 Thread Joshua Slive
On 8/11/05, sridhar <[EMAIL PROTECTED]> wrote: > > Hi, > > The headers which are in the meta file are not displayed. > > I have done the following setting > > > Options Indexes > AllowOverride None > Order allow,deny > Allow from all > MetaDir . > MetaFiles on > MetaSuffix .meta > >

RE: [EMAIL PROTECTED] apache issue

2005-08-11 Thread Boyle Owen
> -Original Message- > From: FSA [mailto:[EMAIL PROTECTED] > Sent: Donnerstag, 11. August 2005 12:24 > To: users@httpd.apache.org > Subject: [EMAIL PROTECTED] apache issue > > > Hi, i wanna make a virtual host on my server and 1 directory > inside this > vhost i want to give access to us

Re: [EMAIL PROTECTED] Authentication on Solaris fails when password > 8 chars and using MD5 encoded passwords (or digest)

2005-08-11 Thread Joe Orton
On Thu, Aug 11, 2005 at 12:24:06PM +0200, [EMAIL PROTECTED] wrote: > When replacing getpass() with getpassphrase() on Solaris (does the same but > with passwords up to 256 chars) all works fine but this is not a portable > solution I guess. > Another option would be truncating the password that the

RE: [EMAIL PROTECTED] apache issue

2005-08-11 Thread Boyle Owen
> -Original Message- > From: FSA [mailto:[EMAIL PROTECTED] > Sent: Donnerstag, 11. August 2005 12:24 > To: users@httpd.apache.org > Subject: [EMAIL PROTECTED] apache issue > > > Hi, i wanna make a virtual host on my server and 1 directory > inside this > vhost i want to give access to us

Re: [EMAIL PROTECTED] apache issue

2005-08-11 Thread FSA
? Axel-Stéphane SMORGRAV wrote: > What is wrong with proper English and capital letters? > > -ascs > > -Original Message- > From: FSA [mailto:[EMAIL PROTECTED] > Sent: Thursday, August 11, 2005 12:24 PM > To: users@httpd.apache.org > Subject: [EMAIL PROTECTED] apache issue > > Hi, i w

RE: [EMAIL PROTECTED] apache issue

2005-08-11 Thread Axel-Stéphane SMORGRAV
What is wrong with proper English and capital letters? -ascs -Original Message- From: FSA [mailto:[EMAIL PROTECTED] Sent: Thursday, August 11, 2005 12:24 PM To: users@httpd.apache.org Subject: [EMAIL PROTECTED] apache issue Hi, i wanna make a virtual host on my server and 1 directory i

[EMAIL PROTECTED] Authentication on Solaris fails when password > 8 chars and using MD5 encoded passwords (or digest)

2005-08-11 Thread marcel . kuiper
Hi, I've looked through FAQ and bugdatabase but I could not find a reference to the following problem When adding a user to my AuthUserFile wtih a password > 8 chars that is MD5 hashed (-m option to htpasswd) on Solaris authentication to the webserver will fail. This is caused by the fact that h

[EMAIL PROTECTED] apache issue

2005-08-11 Thread FSA
Hi, i wanna make a virtual host on my server and 1 directory inside this vhost i want to give access to users that came from few ip's (duno if i can check if they ware redirected from another web page wich is what i actualy need). Anyone have any ideeas ? ty signature.asc Description: OpenPGP dig

[EMAIL PROTECTED] Memory of childprocess

2005-08-11 Thread Peter Huesser
Hello Our webserver (on linux) freezes from time to time. I checked the /var/log/messages file and found very often (but not allways in connection with the freezing time) an entry like: ... kernel: Out of Memory: Killed process ... (httpd) In the meantime I set the MaxMemFree too 900MB (the

[EMAIL PROTECTED] Problem in mod_Cern_meta

2005-08-11 Thread sridhar
Hi,   The headers which are in the meta file are not displayed.   I have done the following setting   Options IndexesAllowOverride NoneOrder allow,denyAllow from allMetaDir .MetaFiles onMetaSuffix .meta The html file xyz.html and the meta file xyz.html.meta are in test folder and i am acces

RE: [EMAIL PROTECTED] Re: apache question??

2005-08-11 Thread Boyle Owen
> -Original Message- > From: Joost de Heer [mailto:[EMAIL PROTECTED] > Sent: Mittwoch, 10. August 2005 19:58 > To: bruce > Cc: users@httpd.apache.org > Subject: [EMAIL PROTECTED] Re: apache question?? > > > bruce said: > > hi... > > > > i just discovered that i can fire up a browser from

RE: [EMAIL PROTECTED] mod_proxy/mod_proxy_html

2005-08-11 Thread Axel-Stéphane SMORGRAV
I think I must have been smoking something strong the day I replied to you last. What you probably need is ProxyPassReverse /wcs https://wd-prtlsrv1:8443/hendrickson instead of ProxyPassReverse https://wd-prtlsrv1:8443/hendrickson/j_security_check http://extranet.hendrickson-intl.com/wcs/mai