Re: [us...@httpd]

2009-11-10 Thread Norman Peelman
Stephen Love wrote: Ok, now we're getting somewhere... just ENOUGH to eliminate the path inbetween... I'd just like to ask APACHE for a unique signature of the machine sending the message to compare it against others. Nothing more, nothing less. nope... -- Norman Registered Linux user #

Re: [us...@httpd]

2009-11-10 Thread Norman Peelman
Stephen Love wrote: Don't want identification. I want point to point response capability, even if it goes away later... a way to know that I can send back to that exact address and know it went to that particular computer instead of randomly going all over the world. Sounds like either I hav

Re: [us...@httpd] apache configuration: always go to parent directory

2009-11-10 Thread J. Bakshi
Brian Mearns wrote: > On Tue, Nov 10, 2009 at 10:00 PM, J. Bakshi wrote: > >> Brian Mearns wrote: >> >>> On Tue, Nov 10, 2009 at 4:43 AM, J. Bakshi wrote: >>> >>> Hello, I have configured a personal work-space for mine in apache where I can experiment with diffe

Re: [us...@httpd] apache configuration: always go to parent directory

2009-11-10 Thread Brian Mearns
On Tue, Nov 10, 2009 at 10:00 PM, J. Bakshi wrote: > Brian Mearns wrote: >> On Tue, Nov 10, 2009 at 4:43 AM, J. Bakshi wrote: >> >>> Hello, >>> >>> I have configured a personal work-space for mine in apache where I can >>> experiment with different sites and here is the configuration >>> >>>

Re: [us...@httpd]

2009-11-10 Thread Brian Mearns
On Tue, Nov 10, 2009 at 10:29 PM, Stephen Love wrote: > Ok, now we're getting somewhere... just ENOUGH to eliminate the path > inbetween... I'd just like to ask APACHE for a unique signature of the > machine sending the message to compare it against others. Nothing more, > nothing less. > > > See

Re: [us...@httpd]

2009-11-10 Thread Brian Mearns
On Tue, Nov 10, 2009 at 6:37 PM, Eric Covener wrote: > On Tue, Nov 10, 2009 at 6:20 PM, Stephen Love wrote: >> So what you are telling me is that there IS no REAL 2-way handshaking going >> on. Then we've lost ALL hope of security. >> > > What's "REAL" in this context?  It's not authenticated and

Re: [us...@httpd]

2009-11-10 Thread Stephen Love
Ok, now we're getting somewhere... just ENOUGH to eliminate the path inbetween... I'd just like to ask APACHE for a unique signature of the machine sending the message to compare it against others. Nothing more, nothing less. See us online at http://www.LOVEnCompany.com. -- Original Me

Re: [us...@httpd] apache configuration: always go to parent directory

2009-11-10 Thread J. Bakshi
Brian Mearns wrote: > On Tue, Nov 10, 2009 at 4:43 AM, J. Bakshi wrote: > >> Hello, >> >> I have configured a personal work-space for mine in apache where I can >> experiment with different sites and here is the configuration >> >> >> Alias /personal

Re: [us...@httpd] Caching files on reverse proxy

2009-11-10 Thread Eric Covener
On Tue, Nov 10, 2009 at 8:10 PM, vara prasad wrote: > Hi Brian, > I have set up Apache with mod_proxy with following config > __ > > > CacheRoot d:/apache_cache > CacheEnable disk / > CacheDirLevels 2 > CacheDirLength 3 > > __ > .data and .header files are stored

Re: [us...@httpd] Disable ProxyPass rules within a virtual host on apache 2? Can this be done

2009-11-10 Thread Eric Covener
On Tue, Nov 10, 2009 at 8:21 PM, Kishore Chintoju wrote: > I would like to disable all global proxypass rules applying in this virtual > host? NoProxy doesn't seem to work. Have you tried the ProxyPass syntax that uses an exclamation point? The alternate solution would be to move your existng ru

[us...@httpd] Disable ProxyPass rules within a virtual host on apache 2? Can this be done

2009-11-10 Thread Kishore Chintoju
Hi All, *My Setup:* My website is served from apache with jboss acting as an application server. All of the webapp resides in jboss deployment directory. Apache talks to jboss using ProxyPass in development and AJP protocol in production. *My Goal:* I want to serve all the static content (e.g.

Re: [us...@httpd] Caching files on reverse proxy

2009-11-10 Thread vara prasad
Hi Brian, I have set up Apache with mod_proxy with following config __ CacheRoot d:/apache_cache CacheEnable disk / CacheDirLevels 2 CacheDirLength 3 __ .data and .header files are stored in cache. Is it possible to retrieve the cached files on Apache? Thanks

Re: [us...@httpd]

2009-11-10 Thread Sean Conner
It was thus said that the Great Stephen Love once stated: > So what you are telling me is that there IS no REAL 2-way handshaking > going on. Then we've lost ALL hope of security. There is a 2-way handshake, but it's at the TCP layer, which is used to establish a reliable, stream-oriented sequen

Re: [us...@httpd]

2009-11-10 Thread Eric Covener
On Tue, Nov 10, 2009 at 6:24 PM, Stephen Love wrote: > Don't want identification. I want point to point response capability, even > if it goes away later... a way to know that I can send back to that exact > address and know it went to that particular computer instead of randomly > going all over

Re: [us...@httpd]

2009-11-10 Thread Eric Covener
On Tue, Nov 10, 2009 at 6:20 PM, Stephen Love wrote: > So what you are telling me is that there IS no REAL 2-way handshaking going > on. Then we've lost ALL hope of security. > What's "REAL" in this context? It's not authenticated and doesn't result in some session establishment unless you confi

Re: [us...@httpd]

2009-11-10 Thread Stephen Love
Don't want identification. I want point to point response capability, even if it goes away later... a way to know that I can send back to that exact address and know it went to that particular computer instead of randomly going all over the world. Sounds like either I have been misinformed about

Re: [us...@httpd]

2009-11-10 Thread Stephen Love
So what you are telling me is that there IS no REAL 2-way handshaking going on. Then we've lost ALL hope of security. See us online at http://www.LOVEnCompany.com. -- Original Message -- From: Rich Bowen To: users@httpd.apache.org Subject: Re: [us...@httpd] Date: Tue, 10 Nov 20

Re: [us...@httpd]

2009-11-10 Thread Stephen Love
You're getting close. I don't want ANY personal data. Just to know that it is really them and that the next time I see them I will see the same number. I simply want a REAL visitor and hit count. NO PERSONAL DATA of ANY KIND... just GUARANTEED UNIQUE to the user. See us online at http://www.LO

Re: [us...@httpd]

2009-11-10 Thread LuKreme
On 10-Nov-2009, at 13:49, André Warnier wrote: > And I would add that, from a user point of view, I would be very reluctant to > help at any system that would let me be identified in any way other than me > voluntarily and knowingly providing my id by means of some obvious login page > or certif

Re: [us...@httpd]

2009-11-10 Thread André Warnier
Mark H. Wood wrote: ... It's thus very unlikely that you will get any help from hardware manufacturers in identifying remote users or hosts in the manner you specified. You'll need cooperation from your users. And I would add that, from a user point of view, I would be very reluctant to help

Re: [us...@httpd]

2009-11-10 Thread Mark H. Wood
On Tue, Nov 10, 2009 at 10:52:18AM -0500, Brian Mearns wrote: > As Eric says, what you're looking for is a MAC address which is a > universally unique identifier that every network device has (though I > think even here, "universally unique" might have some qualifying > conditions). Yes. Occasion

Re: [us...@httpd] Caching files on reverse proxy

2009-11-10 Thread Brian Mearns
On Tue, Nov 10, 2009 at 1:36 PM, vara prasad wrote: > Hi  All, > I have set up a reverse proxy www.example.com for an internal tomcat server > http://internal:8080 > Few files are hosted on  http://internal:8080. > My requirement is when user downloads a file from http://internal:8080 using > the 

Re: [us...@httpd] AllowOverride

2009-11-10 Thread Ghislain Pruniaux
Next time i will open my eyes Thanks a lot On 11/10/2009 05:13 PM, Eric Covener wrote: On Tue, Nov 10, 2009 at 11:04 AM, Pruniaux Ghislain wrote: Hi, Some users on my apache server need to use RewriteEngine in there directory. They use .htaccess, but they say that does not work. I think i m

[us...@httpd] Caching files on reverse proxy

2009-11-10 Thread vara prasad
Hi All, I have set up a reverse proxy www.example.com for an internal tomcat server http://internal:8080 Few files are hosted on http://internal:8080. My requirement is when user downloads a file from http://internal:8080 using the proxy, the proxy should cache the file with its original extensio

Re: [us...@httpd]

2009-11-10 Thread Rich Bowen
On Nov 10, 2009, at 08:19 , Stephen Love wrote: I have set up a routine in my server that logs all incoming IP addresses and parses for duplicates in the same list. HOWEVER...a person posting almost NEVER has the same address. I believe I am not using the actual IP Address at all. What I W

Re: [us...@httpd] DAV access control

2009-11-10 Thread André Warnier
skrishnam...@bloomberg.com wrote: Hi, We are looking to setup SVN over apache, but it requires the use of DAV. There are apparently security concerns over the use of DAV over apache 2.2., in the sense that it would allow users to anonymously write content to apache, even outside of the contex

Re: [us...@httpd] AllowOverride

2009-11-10 Thread Eric Covener
On Tue, Nov 10, 2009 at 11:04 AM, Pruniaux Ghislain wrote: > Hi, > Some users on my apache server need to use RewriteEngine in there directory. > They use .htaccess, but they say that does not work. > I think i must change AllowOverride for their directory (default is none) , > but i could not fin

[us...@httpd] AllowOverride

2009-11-10 Thread Pruniaux Ghislain
Hi, Some users on my apache server need to use RewriteEngine in there directory. They use .htaccess, but they say that does not work. I think i must change AllowOverride for their directory (default is none) , but i could not find the AllowOverride directive for the RewriteEngine (AuthConfig,Fi

Re: [us...@httpd]

2009-11-10 Thread Brian Mearns
On Tue, Nov 10, 2009 at 8:28 AM, Eric Covener wrote: > On Tue, Nov 10, 2009 at 8:19 AM, Stephen Love wrote: >> I have set up a routine in my server that logs all incoming IP addresses and >> parses for duplicates in the same list. HOWEVER...a person posting almost >> NEVER has the same address. I

Re: [us...@httpd] activating xml2enc makes client getting HTML-Page take very long: How about deactivating conversions?

2009-11-10 Thread Martin Gerdes
Alright, just forget I suggested that. If in front of a html character a byte above 127 appears (a character outside of 7 bit ASCII), the control character would get interpreted as part of the same character in utf-8. In other words: It WILL break. The suggestion just sounded too good. Back to the

[us...@httpd] Re: DAV access control

2009-11-10 Thread LuKreme
On 10-Nov-2009, at 08:00, skrishnam...@bloomberg.com wrote: > We are looking to setup SVN over apache, but it requires the use of DAV. requires? I though SVN over DAV was a particular configuration option? > There are apparently security concerns over the use of DAV over apache 2.2., There are

Re: [us...@httpd] activating xml2enc makes client getting HTML-Page take very long: How about deactivating conversions?

2009-11-10 Thread Martin Gerdes
A completely different idea to solve my actual problem: Someone else suggested to just take out the conversions all together. I mean, I am converting right back into the encoding I converted from. I have been assured that no link uses a character above the first 128 (7 bit ASCII). As far as I know

Re: [us...@httpd] apache configuration: always go to parent directory

2009-11-10 Thread Brian Mearns
On Tue, Nov 10, 2009 at 4:43 AM, J. Bakshi wrote: > Hello, > > I have configured a personal work-space for mine in apache where I can > experiment with different sites and here is the configuration > > > Alias /personal/joydeep  /var/personal_work_area/

[us...@httpd] DAV access control

2009-11-10 Thread skrishnam...@bloomberg.com
Hi, We are looking to setup SVN over apache, but it requires the use of DAV. There are apparently security concerns over the use of DAV over apache 2.2., in the sense that it would allow users to anonymously write content to apache, even outside of the context of SVN. Are there any workarounds

Re: [us...@httpd] activating xml2enc makes client getting HTML-Page take very long

2009-11-10 Thread Martin Gerdes
> > > Can you get mod_diagnostics >> output to track the data running through the filter? >> >> I'll try that after lunch. Ask if you want to know anything else. (I can > for example packet sniff the connection between IE and the proxy, and give > you the debug output of mod_proxy_html in that con

Re: [us...@httpd]

2009-11-10 Thread Eric Covener
On Tue, Nov 10, 2009 at 8:19 AM, Stephen Love wrote: > I have set up a routine in my server that logs all incoming IP addresses and > parses for duplicates in the same list. HOWEVER...a person posting almost > NEVER has the same address. I believe I am not using the actual IP Address > at all. Wha

[us...@httpd]

2009-11-10 Thread Stephen Love
I have set up a routine in my server that logs all incoming IP addresses and parses for duplicates in the same list. HOWEVER...a person posting almost NEVER has the same address. I believe I am not using the actual IP Address at all. What I WANT is the actual SERIAL NUMBER (If you could call it

Re: [us...@httpd] activating xml2enc makes client getting HTML-Page take very long

2009-11-10 Thread Martin Gerdes
> > On 10 Nov 2009, at 08:56, Martin Gerdes wrote: > > First, how slow is slow? Time from pushing the send button until the new >> webpage is loaded rises from 10.6 to 103 seconds. >> > > 10.6 is already horrendously slow (unless perhaps it's a 20-year-old PC), > which leads me to wonder what you'

[us...@httpd] 2.2.13 mod_proxy: ttl not working?

2009-11-10 Thread Oliver Schoett
It appears that the Apache 2.2.13 connection timeout (ttl) does not work. My client is using an Apache 2.2.13 reverse proxy to perform encryption, compression and persistent connections with a remote site. Every couple minutes, the following error appears in the log: [Tue Nov 10 10:47:52 2

[us...@httpd] best way to fix the tls renegotiation problem?

2009-11-10 Thread Torsten Foertsch
Hi, what is the best way to fix the tls renegotiation problem? On my site some locations require renegotiation to get a client cert. But that can simply be moved into the vhost config. I believe this is not sufficient, is it? Is OpenSSL 0.9.8l sufficient? Or do I have to patch apache as well?

Re: [us...@httpd] Question: Different server behind path

2009-11-10 Thread Mark Watts
On Tue, 2009-11-10 at 10:28 +0100, Martijn Moret wrote: > Hi all, > > I have quitte some Apache httpd experience but I am not sure how to solve > this question from my company: > > We have a corporate site at: http://www.example.com > We are implementing a new webshop and our Marketing dep. deci

[us...@httpd] apache configuration: always go to parent directory

2009-11-10 Thread J. Bakshi
Hello, I have configured a personal work-space for mine in apache where I can experiment with different sites and here is the configuration Alias /personal/joydeep /var/personal_work_area/joydeep DocumentRoot /var/personal_work_area/joydeep/

Re: [us...@httpd] activating xml2enc makes client getting HTML-Page take very long

2009-11-10 Thread Nick Kew
On 10 Nov 2009, at 08:56, Martin Gerdes wrote: First, how slow is slow? Time from pushing the send button until the new webpage is loaded rises from 10.6 to 103 seconds. 10.6 is already horrendously slow (unless perhaps it's a 20-year-old PC), which leads me to wonder what you're doing.

[us...@httpd] Question: Different server behind path

2009-11-10 Thread Martijn Moret
Hi all, I have quitte some Apache httpd experience but I am not sure how to solve this question from my company: We have a corporate site at: http://www.example.com We are implementing a new webshop and our Marketing dep. decided om: http://www.example.com/order Due to the nature of the reques

[us...@httpd] activating xml2enc makes client getting HTML-Page take very long

2009-11-10 Thread Martin Gerdes
Alright, xml2enc works, does not crash, and correctly translates UTF8 back to ISO-8859-1 after it was converted to UTF-8 by mod_proxy_html. However, activating that translation back to ISO-8859-1 makes the whole process take up a lot of time, and I have no idea why, so I am asking for ideas. First