Re: [us...@httpd] mod_ssl Client authentication question

It was thus said that the Great Brian Mearns once stated: > I just want to double check some things because I implement ssl client > auth on my server, to make sure I really understand what I'm doing: > > First, if I use SSLRequire to check various fields in a client's > certificate, is it implied

Re: [us...@httpd] Running Apache reverse proxy on different https port

On 1/20/09, ananth desh wrote: > Hi All, > I am running a reverse proxy with one public address, And there > are 3 backend servers .My question is, can i have a https port > listening on port other than the standard 443. > Basically i want to achieve this way. > https://www.abc.com:440 >

[us...@httpd] suitable bandwidth monitor ?

Dear all, I am running a remote server with 5 virtual hosts. I need to configure a bandwidth monitor which can generate bandwidth report of each and every virtual host separately. It would be an added advantage to get the total bandwidth of the server (optional). What might be the good tool to kno

Re: [us...@httpd] A critical .htaccess problem

Craig Huffstetler wrote: > Krist is correct - you need to make sure Subversion a Virtual Host. > I'm including a few instructions as I'm sure you're all set on > Subversion and Apache. If you're still having problems let us know. Hello Craig and Krist, Thanks for your guidance. Craig, the points

[us...@httpd] Running Apache reverse proxy on different https port

Hi All, I am running a reverse proxy with one public address, And there are 3 backend servers .My question is, can i have a https port listening on port other than the standard 443. Basically i want to achieve this way. https://www.abc.com:440 https://www.xyz.com:441 https://www.pqr.com:44

Re: [us...@httpd] Authentication IP restriction by user?

>> I have 2 users who need to be able to access a website from anywhere >> and 2 users who only need to access it from a certain IP. Can >> authentication be restricted to a certain IP for certain users, and >> not restricted for others? >> > Hi. > You can do pretty much what you want with Apache

Re: [us...@httpd] LDAP authorisation with Unicode in the Base DN

Eric Covener wrote: > On Mon, Jan 19, 2009 at 7:06 PM, Craig McQueen > wrote: > >> Eric Covener wrote: >> >> On Mon, Dec 22, 2008 at 10:21 PM, Craig McQueen >> wrote: >> >> >> I'm trying to do LDAP authorisation with an Active Directory server, and the >> "Base DN" has Japanese characters in i

Re: [us...@httpd] Location based auth

On Mon, Jan 19, 2009 at 4:58 PM, Sheldon Ross wrote: > I can't seem to find information on using password authentication within > a tag. > > I've used .htaccess files in directories, but I'm using mod_jk to > connect to tomcat and a status worker, and would like to restrict access > to the status

Re: [us...@httpd] LDAP authorisation with Unicode in the Base DN

On Mon, Jan 19, 2009 at 7:06 PM, Craig McQueen wrote: > Eric Covener wrote: > > On Mon, Dec 22, 2008 at 10:21 PM, Craig McQueen > wrote: > > > I'm trying to do LDAP authorisation with an Active Directory server, and the > "Base DN" has Japanese characters in it. This should be no problem, but I >

Re: [us...@httpd] trouble installing Apache HTTP Server 2.2.11

On Mon, Jan 19, 2009 at 7:31 PM, Dharma Lion wrote: > Hello, > > I'm having trouble installing Apache HTTP Server 2.2.11. > > First, I downloaded the following file: > > httpd-2.2.11-win32-src-r2.zip > > Upon unzipping, I'm now looking at the INSTALL file for > instructions. These instructions, f

[us...@httpd] trouble installing Apache HTTP Server 2.2.11

Hello, I'm having trouble installing Apache HTTP Server 2.2.11. First, I downloaded the following file: httpd-2.2.11-win32-src-r2.zip Upon unzipping, I'm now looking at the INSTALL file for instructions.  These instructions, for Windows, direct me to run the following to install: bin\httpd.ex

[us...@httpd] Re: Multiple authentication sources

I tried AuthLDAPRemoteUserIsDN. I can login by just entering a username. It set REMOTE_USER to the full distinguished name, LDAP style: CN=Craig McQueen,OU=Users,OU=MyDepartment,OU=All,DC=mycompany,DC=com,DC=au That does enable the back-end to distinguish which domain the authentication is on.

Re: [us...@httpd] LDAP authorisation with Unicode in the Base DN

Eric Covener wrote: > On Mon, Dec 22, 2008 at 10:21 PM, Craig McQueen > wrote: > >> I'm trying to do LDAP authorisation with an Active Directory server, and the >> "Base DN" has Japanese characters in it. This should be no problem, but I >> can't get it to work. >> >> The Base DN is something l

[us...@httpd] Location based auth

I can't seem to find information on using password authentication within a tag. I've used .htaccess files in directories, but I'm using mod_jk to connect to tomcat and a status worker, and would like to restrict access to the status worker. There is no directory to put .htaccess in so how would I

[us...@httpd] Re: Short and easy flag to have configure compile default modules as shared objects?

I'm not sure why I didn't think of this before, but I added that one line to 'configure'. m...@mybox:~/httpd-2.2.11.jeff-1 $ diff configure configure.1 8162d8161 < module_default=shared And I ran: ./configure --enable-mods-shared And after I run 'make' I find what I was hoping for: all

RE: [us...@httpd] Sudden "Can't Contact LDAP Server"

Here's another one. The first line, [info] Initial (No.1) HTTPS request received for child 1 (server dev.company.com:443), ALWAYS appears before the error occurs from what i can see in the logs. * 140295168-[Mon Jan 19 20:53:28 2009] [info] Initial (No.1) HTTPS request

Re: [us...@httpd] Sudden "Can't Contact LDAP Server"

On Mon, Jan 19, 2009 at 3:56 PM, Oliver Marshall wrote: > Eric, > > Reproducing it is possible, you just have to keep hitting f5, but it occurs > at random. Maybe once ever hour, maybe once every ten mins. I would say that > rebuilding the httpd server with a patch may be beyond me, certainly be

Re: [us...@httpd] Authentication IP restriction by user?

Grant wrote: I have 2 users who need to be able to access a website from anywhere and 2 users who only need to access it from a certain IP. Can authentication be restricted to a certain IP for certain users, and not restricted for others? Hi. You can do pretty much what you want with Apache +

RE: [us...@httpd] Sudden "Can't Contact LDAP Server"

Eric, Reproducing it is possible, you just have to keep hitting f5, but it occurs at random. Maybe once ever hour, maybe once every ten mins. I would say that rebuilding the httpd server with a patch may be beyond me, certainly beyond my sanity level at the moment. I may look at setting up a

Re: [us...@httpd] Sudden "Can't Contact LDAP Server"

On Mon, Jan 19, 2009 at 2:37 PM, Oliver Marshall wrote: > Hi chaps, > We are seeing a problem with the server giving end users an "internal error" > page at random when viewing trac sites or checking out SVN files. If you hit > F5 a few times, for between 1 and 10'ish seconds, the pages start bein

[us...@httpd] Short and easy flag to have configure compile default modules as shared objects?

Howdy Folks, I was wondering if 'configure' had a short and sweet flag to tell it to do the following: * Compile the default modules, but compile them as shared objects instead of staticly. I see no short and easy way to do this. I could use --enable-mods-shared, but I'd have to then list every

[us...@httpd] Authentication IP restriction by user?

I have 2 users who need to be able to access a website from anywhere and 2 users who only need to access it from a certain IP. Can authentication be restricted to a certain IP for certain users, and not restricted for others? - Grant --

[us...@httpd] Sudden "Can't Contact LDAP Server"

Hi chaps, I'm running a Ubuntu Apache server (apache version 2.2.8) which serves up only SVN and TRAC sites. All the SVN and TRAC repos use LDAP to authenticate, and the LDAP server is a Windows Active Directory server on the same network. We are seeing a problem with the server giving end user

Re: [us...@httpd] passwords do not function

Have you tried putting the full path in the AuthUserFile section to your file containing your usernames and passwords? Also have you checked the username and password file contains some data? It should be a text file with the username and encrypted password. Failing that have you looked in

Re: [us...@httpd] IE7 Client Auth with SSL Certs

On Mon, Jan 19, 2009 at 12:20 PM, Eray Aslan wrote: > On 19.01.2009 17:47, Eric Covener wrote: >>> Jan 19 15:13:07 sunny apache2[23045]: [error] Re-negotiation handshake >>> failed: Not accepted by client!? >> >> Can you get away with not using he different SSL config in the >> container? > > Hmm

Re: [us...@httpd] passwords do not function

On Mon, Jan 19, 2009 at 12:03 PM, Keith Harris wrote: > > The password request box comes up but then the correct user and password > details are entered all I get is > > Internal Server Error > > The server encountered an internal error or misconfiguration and was unable > to complete your request

Re: [us...@httpd] passwords do not function

On Mon, 2009-01-19 at 17:03 +, Keith Harris wrote: > .htpasswd > .htaccess > I have followed all instructions on setting up a password protect > directory on my local server. > Nothing works. > AuthUserFile .htpasswd According to the documentation, a relative AuthUserFile is interpreted fro

Re: [us...@httpd] IE7 Client Auth with SSL Certs

On 19.01.2009 17:47, Eric Covener wrote: >> Jan 19 15:13:07 sunny apache2[23045]: [error] Re-negotiation handshake >> failed: Not accepted by client!? > > Can you get away with not using he different SSL config in the > container? Hmm, I am not sure I understand. I cannot ask for client auth fo

[us...@httpd] Re: httpd/2.2 Mod_proxy ProxyPass retry

Per doc for mon_proxy, seeting retry=0 in a ProxyPass directive should force mod_proxy to always retry connections to back end hosts. Connection pool worker retry timeout in seconds. If the connection pool worker to the backend server is in the error state, Apache will not forward any requests

[us...@httpd] passwords do not function

.htpasswd .htaccess I have followed all instructions on setting up a password protect directory on my local server. Nothing works. I am usaing Windows Vista Ultimate and Apache2.2, with php5.2.8 and Perl I have followed the instructions to the letter, used .htpasswd to create the password fi

Re: [us...@httpd] A critical .htaccess problem

Krist is correct - you need to make sure Subversion a Virtual Host. I'm including a few instructions as I'm sure you're all set on Subversion and Apache. If you're still having problems let us know. Also, is port 443 open on your router and is Apache listening on this port? Ensure nothing is block

Re: [us...@httpd] IE7 Client Auth with SSL Certs

> Jan 19 15:13:07 sunny apache2[23045]: [error] Re-negotiation handshake > failed: Not accepted by client!? Can you get away with not using he different SSL config in the container? -- Eric Covener cove...@gmail.com - The off

Re: [us...@httpd] Perl UNIX shell PATH problem with apache www user

Hi Davide, yep, apache is running as www, and has no homedir as I mention. And yet the path that apache has set is different between my two servers. My question is how if /etc/profile is the same and the user has no home dir and the perl script is the same on both systems, thanks, Andy.

Re: [us...@httpd] Perl UNIX shell PATH problem with apache www user

Hi Davide, yep, apache is running as www, and has no homedir as I mention. And yet the path that apache has set is different between my two servers. My question is how if /etc/profile is the same and the user has no home dir and the perl script is the same on both systems, thanks, Andy.

Re: [us...@httpd] IE7 Client Auth with SSL Certs

On 19.01.2009 01:43, Justin Pasher wrote: >> -Original Message- >> From: Eray Aslan [mailto:eray.as...@caf.com.tr] >> Sent: Sunday, January 18, 2009 8:10 AM >> To: users@httpd.apache.org >> Subject: [us...@httpd] IE7 Client Auth with SSL Certs >> >> I cannot get IE7 Windows Vista clients to

Re: [us...@httpd] IE7 Client Auth with SSL Certs

On 18.01.2009 20:12, Brian Mearns wrote: > I've got this in my ssl config, based on something that was in > examples config file: > > # Bend forward for MicroSloth > BrowserMatch ".*MSIE.*" \ > nokeepalive ssl-unclean-shutdown \ > downgrade-1.0 force-response-1.0

Re: [us...@httpd] Perl UNIX shell PATH problem with apache www user

Andy Smith wrote: > Hi List, > > probably quite a basic question, but where does perl get its PATH > variable from when executig shell commands? By the PATH defined for the user that "runs" the web server, that most of the time is the 'default' PATH. > have is that I have the same version of s

[us...@httpd] Perl UNIX shell PATH problem with apache www user

Hi List, probably quite a basic question, but where does perl get its PATH variable from when executig shell commands? My problem is running Tr.pm which is part of the open source tool smokeping, it does some nice things with traceroute. The weird problem I have is that I have the same

Re: [us...@httpd] Debug logging when starting apache

On Mon, Jan 19, 2009 at 8:24 AM, Oliver Marshall wrote: > Hi all, > > > > When I set the logging level in apache to debug, then restart apache, SSH > shows me the same lot of LDAP configuration information twice. I get a > handful of mod_authnz_ldap.c lines, then some util_ldap.c lines, and then >

Re: [us...@httpd] A critical .htaccess problem

On Mon, Jan 19, 2009 at 8:12 AM, J. Bakshi wrote: > How can I force svn to stick with https:// along with the above > .htaccess configuration ? > Please enlighten me. Make your SVN config part of your https virtual host. That way svn will not be accessible via http. Krist -- krist.vanbes...

[us...@httpd] Debug logging when starting apache

Hi all, When I set the logging level in apache to debug, then restart apache, SSH shows me the same lot of LDAP configuration information twice. I get a handful of mod_authnz_ldap.c lines, then some util_ldap.c lines, and then the same info shown again. Theres only one config file with ldap inf

Re: [us...@httpd] HTTPS request received for child 0 (server dev.mydomain.com.mydomain.com:443)

Oliver Marshall wrote: > I’ve got the following line showing up in my error.log. Each time this > appears, our Apache server shows Internal Error to the visitors and dies. > > HTTPS request received for child 0 (server > dev.mydomain.com.mydomain.com:443) > > Firstly, where could apache be gettin

[us...@httpd] HTTPS request received for child 0 (server dev.mydomain.com.mydomain.com:443)

Hi chaps, I've got the following line showing up in my error.log. Each time this appears, our Apache server shows Internal Error to the visitors and dies. HTTPS request received for child 0 (server dev.mydomain.com.mydomain.com:443) The odd thing is the dev.mydomain.com.mydomain.com string. Our

Re: [us...@httpd] mod_proxy_html.c: error: initializer element is not constant

An acknowledgement, with thanks to Nick Kew.I'm working on the patch but no success to report (yet). Will feedback if outcome is positive - thanks for your help.Regards, Arthur Mead - The official User-To-User suppor