Re: [us...@httpd] AllowOverride: Pros and Cons

2010-07-07 Thread Scott Gifford
On Thu, Jul 8, 2010 at 2:28 AM, James Corteciano wrote: [ ... ] > I am just concern about security matters that will produce if I will give > the user full access on .htaccess (AllowOverride All) on their webroot? > AllowOverride All effectively allows a user who can create a .htaccess file to ac

[us...@httpd] AllowOverride: Pros and Cons

2010-07-07 Thread James Corteciano
Hi All, I would like to hear your idea's of what are the pros and cons if I will set a specific directive-type for AllowOverride like AuthConfig, FileInfo,Indexes, Limit, and Options? I am just concern about security matters that will produce if I will give the user full access on .htaccess (Allo

RE: [us...@httpd] mod_rewrite - Error when trying to rewrite one cgi script to another

2010-07-07 Thread S. Saberi
Alright, finally got the rewrite log to work and here is what it spits out when I attempt the redirect described earlier: [07/Jul/2010:15:05:07 --0700] [localhost/sid#6b5148][rid#75a040/initial] (3) [perdir C:/Program Files/Apache Software Foundation/Apache2.2/scripts/] strip per-dir prefix

[us...@httpd] Problem with in Apache httpd 2.2

2010-07-07 Thread John Gordon
I've been assigned (yay!) to support a homebrew Apache module that is used by some external customers. One customer is reporting that the tag is failing to recognize that the module is loaded. He has these lines in the config: SpiffyVariable1 abc SpiffyVariable2 xyz SpiffyVariabl

Re: [us...@httpd] mod_ldap not caching

2010-07-07 Thread Eric Covener
On Wed, Jul 7, 2010 at 9:54 AM, west alto wrote: > Thanks, it works but i cannot connect to my windows ad as i need those > certificates, where is the best ting to place LDAPTrustedClientCert? Is it inherited correctly if you place it in your base config outside of any ? -- Eric Covener cove.

Re: [us...@httpd] mod_ldap not caching

2010-07-07 Thread west alto
Thanks, it works but i cannot connect to my windows ad as i need those certificates, where is the best ting to place LDAPTrustedClientCert? On Wed, Jul 7, 2010 at 9:39 PM, Eric Covener wrote: > On Wed, Jul 7, 2010 at 9:29 AM, west alto wrote: >> This are the only mod_ldap directives inside my

Re: [us...@httpd] mod_ldap not caching

2010-07-07 Thread Eric Covener
On Wed, Jul 7, 2010 at 9:29 AM, west alto wrote: > This are the only mod_ldap directives inside my virtual host: > > > >    LDAPTrustedClientCert CERT_BASE64 /etc/apache2/ssl.crt/ad1.cer >    LDAPTrustedClientCert CERT_BASE64 /etc/apache2/ssl.crt/ad2.cer I think that would do it -- Eric Covene

Re: [us...@httpd] mod_ldap not caching

2010-07-07 Thread west alto
This are the only mod_ldap directives inside my virtual host: ServerName 172.23.13.244 HostnameLookups Off UseCanonicalName Off ServerSignature Off LogLevel debug ErrorLog /var/log/apache2/svn-ssl-error_log #CustomLog /var/log/apache2/svn-ssl-access_log "%t - %h - %

Re: [us...@httpd] mod_ldap not caching

2010-07-07 Thread Eric Covener
On Wed, Jul 7, 2010 at 9:18 AM, west alto wrote: > It's not a truncated page, its empty with only title in it. > Sounds like a match for the issue I described. Try to purge mod_ldap directives from your vhosts. -- Eric Covener cove...@gmail.com -

Re: [us...@httpd] mod_ldap not caching

2010-07-07 Thread west alto
It's not a truncated page, its empty with only title in it. This is the version of apache running in sles10 sp3. apache2-2.2.3-16.29.2 apache2-prefork-2.2.3-16.29.2 and the LDAPSharedCacheFile is empty. subversion:/etc/apache2 # cat /srv/home/svn/ldap_cache ¡subversion:/etc/apache2 # On Wed

Re: [us...@httpd] mod_ldap not caching

2010-07-07 Thread Eric Covener
On Wed, Jul 7, 2010 at 8:56 AM, west alto wrote: > Browsing https://localhost/ldap-status show an empty LDAP Cache Information > If it's a truncated page with just the title, it is a recently fixed defect. Using mod_ldap directives in your vhosts triggers it, which you may be able to avoid. --

[us...@httpd] mod_ldap not caching

2010-07-07 Thread west alto
Hi Gurus, I have a subversion server that authenticates with windows ad and i want to cache my authentication for better performance. here's my setting: LoadModule authnz_ldap_module /usr/lib/apache2-prefork/mod_authnz_ldap.so LoadModule ldap_module/usr/lib/apache2-prefork/mo

Re: [us...@httpd] mod_rewrite - Error when trying to rewrite one cgi script to another

2010-07-07 Thread Eric Covener
On Wed, Jul 7, 2010 at 1:41 AM, S. Saberi wrote: > actually I just put the directive into the httpd.conf file and i see that > the log file is being created upon restart of apache. > > But when I invokde the rewrite nothing gets logged into it. > > Any guidance is greatly appreciated. > It's gott