RE: [EMAIL PROTECTED] Custom error page 401 for reverse proxy

2006-10-17 Thread Boyle Owen
> -Original Message- > From: Devraj Mukherjee [mailto:[EMAIL PROTECTED] > Sent: Wednesday, October 18, 2006 6:29 AM > To: users@httpd.apache.org > Subject: [EMAIL PROTECTED] Custom error page 401 for reverse proxy > > Hi everyone, > > I am running a reverse proxy based on Apache. The roo

[EMAIL PROTECTED] Finding out excessive usage w/virtual hosts

2006-10-17 Thread Cabbar Duzayak
Hi, I have an apache server which has about 20 virtual hosts, and for some reason the cpu usage goes really high during sometimes, and I can see the apache process that is causing it, but not sure by which particular virtual host this load was generated? So, could you please tell how I can find/

[EMAIL PROTECTED] Custom error page 401 for reverse proxy

2006-10-17 Thread Devraj Mukherjee
Hi everyone, I am running a reverse proxy based on Apache. The root of the web server is protected (basic authentication) however I wish to present the user with a custom error page if they fail to authenticate (primarily to hide the details of the web server and operating system, presented by de

[EMAIL PROTECTED] Question about sharing IPs over different installs of Apache

2006-10-17 Thread Tom Ray [Lists]
I am trying to make my own little VPS system. I've managed to create a few virtual servers, all running their own installs of Apache 2.0.59/PHP 4.4.2 however, they are all on their own unique IPs. My question is in the instance of VPS systems like Ensim or Cpanel, where they create a VPS per do

[EMAIL PROTECTED] Configuring Apache 2.054 to automate authentication with Active Directory from within network

2006-10-17 Thread Gallardo, Lisa
Greetings, I've been researching the best way to have Windows Integrated Authentication using Apache2, Active Directory and either mod_auth_sspi, mod_ntlm2, or if possible using a rewrite command to bypass the username/password popup if a user is already logged into our network. At the moment, I'v

Re: [EMAIL PROTECTED] Namebased Virtual Hosts

2006-10-17 Thread Joshua Slive
On 10/17/06, Serge Dubrouski <[EMAIL PROTECTED]> wrote: > The channel is encrypted, but you have no idea who encrypted it. It > could, for example, be a "man in the middle" that puts himself on the > wire between you and server, decrypts the original content, Tell me how would you do that with

Re: [EMAIL PROTECTED] Namebased Virtual Hosts

2006-10-17 Thread Serge Dubrouski
On 10/17/06, Joshua Slive <[EMAIL PROTECTED]> wrote: On 10/17/06, Serge Dubrouski <[EMAIL PROTECTED]> wrote: > On 10/17/06, Joshua Slive <[EMAIL PROTECTED]> wrote: > > On 10/17/06, Gregor Schneider <[EMAIL PROTECTED]> wrote: > > > > And in addition, your second and third ssl sites are not going

Re: [EMAIL PROTECTED] CGI receives SIGTERM

2006-10-17 Thread Ravi Menon
Actually it is more subtle. Even during execution, apache starts the timer during start of header, and start of body. So a malicious script could potentially give data in trickles to restart these timers, but my point was that apache definetly takes care of runaway cgi scripts even in execution (a

Re: [EMAIL PROTECTED] Namebased Virtual Hosts

2006-10-17 Thread Joshua Slive
On 10/17/06, Serge Dubrouski <[EMAIL PROTECTED]> wrote: That's another story and all of this is true. But I wouldn't say that "it is no more secure than ordinary HTTP". Anyway I've got what you meant. Thanks. It's more secure than ordinary HTTP in the same sense that 'rot13'ing your email is m

Re: [EMAIL PROTECTED] Namebased Virtual Hosts

2006-10-17 Thread Serge Dubrouski
On 10/17/06, Joshua Slive <[EMAIL PROTECTED]> wrote: On 10/17/06, Serge Dubrouski <[EMAIL PROTECTED]> wrote: > On 10/17/06, Joshua Slive <[EMAIL PROTECTED]> wrote: > > On 10/17/06, Gregor Schneider <[EMAIL PROTECTED]> wrote: > > > > And in addition, your second and third ssl sites are not going

Re: [EMAIL PROTECTED] Namebased Virtual Hosts

2006-10-17 Thread Joshua Slive
On 10/17/06, Serge Dubrouski <[EMAIL PROTECTED]> wrote: On 10/17/06, Joshua Slive <[EMAIL PROTECTED]> wrote: > On 10/17/06, Gregor Schneider <[EMAIL PROTECTED]> wrote: > > > And in addition, your second and third ssl sites are not going to work > > > properly. You can only have one ssl site o

Re: [EMAIL PROTECTED] Namebased Virtual Hosts

2006-10-17 Thread Serge Dubrouski
On 10/17/06, Joshua Slive <[EMAIL PROTECTED]> wrote: On 10/17/06, Gregor Schneider <[EMAIL PROTECTED]> wrote: > So what is the best practise to specify this NameVirtualHost-directive? In > any file which contains the VirtualHost-directive (meaning one will contain > it, the others not? Or in ht

Re: [EMAIL PROTECTED] Namebased Virtual Hosts

2006-10-17 Thread Joshua Slive
On 10/17/06, Gregor Schneider <[EMAIL PROTECTED]> wrote: So what is the best practise to specify this NameVirtualHost-directive? In any file which contains the VirtualHost-directive (meaning one will contain it, the others not? Or in httpd.conf?) Makes no difference. I'd use httpd.conf. (Ac

Re: [EMAIL PROTECTED] Namebased Virtual Hosts

2006-10-17 Thread Adam Clater
Gregor Schneider wrote on 10/17/2006, 12:05 PM: Well, what  is going to happen  if I do specify more than one SSL-site per IP/port-pair? Do I just get the message that the cert is invalid (I could pretty much live with that)? Yes - The cert will only be valid for the vhost for which it

Re: [EMAIL PROTECTED] Namebased Virtual Hosts

2006-10-17 Thread Gregor Schneider
Hi Hoshua,first, thanks for your explanations, however, I'm havin 2 questions:On 10/17/06, Joshua Slive < [EMAIL PROTECTED]> wrote:You need only one NameVirtualHost directive for each IP-address/port combination.  And you should not use hostnames in NameVirtualHost or.  In a simple case like yours,

Re: [EMAIL PROTECTED] Namebased Virtual Hosts

2006-10-17 Thread Joshua Slive
On 10/17/06, Gregor Schneider <[EMAIL PROTECTED]> wrote: NameVirtualHost test-dom:80 I'm not sure where you found this example. Certainly not in the official docs: http://httpd.apache.org/docs/2.2/vhosts/name-based.html#using You need only one NameVirtualHost directive for each IP-address/p

[EMAIL PROTECTED] Namebased Virtual Hosts

2006-10-17 Thread Gregor Schneider
Hi guys,I'm having the honor to set up an environment where 3 different virtual hosts should be running on Apache 2.0.x, each listening on :80 and :443.Operating system is Debian Sarge.The problem: I'm just having ONE IP-adress. Since this is only a test- and development-server, I thought I'd  try

Re: [EMAIL PROTECTED] block IP range with mod_rewrite

2006-10-17 Thread Joshua Slive
On 10/17/06, Norman Khine <[EMAIL PROTECTED]> wrote: hello again, i have the following rewrite rule, ServerName domain.tld ServerAlias www.domain.tld RewriteEngine On RewriteMaphosts-deny txt:/home/user/apache/hosts.deny RewriteCond ${hosts-deny:%{REMOTE_HOST}|NOT-FOUND} !=NOT-

[EMAIL PROTECTED] block IP range with mod_rewrite

2006-10-17 Thread Norman Khine
hello again, i have the following rewrite rule, ServerName domain.tld ServerAlias www.domain.tld RewriteEngine On RewriteMaphosts-deny txt:/home/user/apache/hosts.deny RewriteCond ${hosts-deny:%{REMOTE_HOST}|NOT-FOUND} !=NOT-FOUND [OR] RewriteCond ${hosts-deny:%{REMOTE_ADDR}|

[EMAIL PROTECTED] LDAP support apache 2.2.3 - solution compiling

2006-10-17 Thread s k
Dear Julien Garet,Problem mail ref:: http://mail-archives.apache.org/mod_mbox/httpd-users/200609.mbox/browser 1. First compile apr-util module with "--with-ldap" option"./configure --prefix=/home/openldap/apr-util/ --with-ldap --with-ldap-include=/home/openldap/Install/include --with-ldap-lib=/home

Re: [EMAIL PROTECTED] Proglem with RewriteMap directive (mod_rewrite module)

2006-10-17 Thread Sandeep Warikoo
Hi Georgi,   Changed RewriteLock to some other file. Still the problem persists.  On 10/17/06, Georgi Chorbadzhiyski <[EMAIL PROTECTED]> wrote: Sandeep Warikoo wrote:> I am facing a very strange problem with mod_rewrite module of Apache.> I am using an external program in perl to perform key-value

Re: [EMAIL PROTECTED] Proglem with RewriteMap directive (mod_rewrite module)

2006-10-17 Thread Georgi Chorbadzhiyski
Sandeep Warikoo wrote: > I am facing a very strange problem with mod_rewrite module of Apache. > I am using an external program in perl to perform key-value mapping using > RewriteMap Directive. > > I have a very simple program: > > - > #!/usr/bin/perl > > $|=1; > $i = 1; >

[EMAIL PROTECTED] Proglem with RewriteMap directive (mod_rewrite module)

2006-10-17 Thread Sandeep Warikoo
Hi All,I am facing a very strange problem with mod_rewrite module of Apache.I am using an external program in perl to perform key-value mapping using RewriteMap Directive.I have a very simple program: -#!/usr/bin/perl$|=1;$i = 1;while($input = ){    print "$i\n";    $i++;}--

Re: [EMAIL PROTECTED] make mod_cache ignore the query string?

2006-10-17 Thread Steve Swift
This is probably impossible on principle, as the two URL's could be expected to generate different results.On 17/10/06, Jeff Behl < [EMAIL PROTECTED]> wrote:running apache 2.2.x, i'm knocking my head against the table trying to get mod_cache to ignore the query string in a URL, such that :http://so

[EMAIL PROTECTED] make mod_cache ignore the query string?

2006-10-17 Thread Jeff Behl
running apache 2.2.x, i'm knocking my head against the table trying to get mod_cache to ignore the query string in a URL, such that : http://somedomain.comm/asdf.swf?aa http://somedomain.comm/asdf.swf?bb will only generate a single cache entry. i've tried using mod_rewrite to st

RE: [EMAIL PROTECTED] CGI receives SIGTERM

2006-10-17 Thread Steve Swift
Ah, that's different - your timeout is occurring trying to read your CGI script - it is not getting to execution. I've never had this problem, so I cannot help you Steve Swift http://www.swiftys.org.uk - The official User-To-Us

Re: [EMAIL PROTECTED] CGI receives SIGTERM

2006-10-17 Thread Ravi Menon
I repeated a similar test on my apache 1.3.33 and it works - I see the following lines in the error_log during timeout: read script header timed out Confirmed with ps that the script is actually killed. Also confirmed from the sources on where this error_log line originates from - ap

[EMAIL PROTECTED] mod_proxy (reverse): Problem after restarting backend

2006-10-17 Thread Nico -telmich- Schottelius
Hello! I am using Apache/2.2.3 on FreeBSD 6.1-RELEASE with mod_proxy enabled. When I restart the backend (same setup), the frontend server returns "Service temporarily not available" although the backend is already restarted. It looks like apache caches that the backend was unavailable and waits