Re: [us...@httpd] Many websites in different document roots behind a reverse proxy

2010-07-13 Thread Tapas Mishra
Any guesses now I have given all the response headers,logs and server configurations or any mistake in configurations on my side. - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache

Re: [us...@httpd] How to ignore common name during client certificate verification?

2010-07-13 Thread galaft wang
Hi, Normally, CN would be IP address of the client, if client IP do not match its certificate CN, Apache would deny its request. This is used in highly secured network. But we do not need such strict security configuration, we just need to verify whether the client certificate is issued by truste

Re: [us...@httpd] mod_proxy: ProxyPass max parameter has no effect

2010-07-13 Thread Alessandro Vernet
Igor, I am running Apache 2.2.14. Re-reading the documentation for "max", I see: The default for a Hard Maximum for the number of connections is the number of threads per process in the active MPM. In the Prefork MPM, this is always 1, while with the Worker MPM it is controlled by the ThreadsPerC

[us...@httpd] is there a way to cache authorized content?

2010-07-13 Thread Alex Aminoff
mod_cache can not cache authorized content because the mod_cache handler hook happens very early in the HTTP request cycle. We would like to cache content for our authorized subscribers. The files (moderate sized PDFs) are stored on an NFS server and we would like to use a local cache with al

[us...@httpd] RE: mod_headers edit Set-Cookie problem

2010-07-13 Thread John Hughes
We are trying to use mod_headers to append the httponly parameter on a HTTP response. We are using the latest 2.2 version But we can't seem to get it work To simplify our testing we have written a small cgi program to emit a set-cookie header. When we add the following line to the httpd.conf fi

Re: [us...@httpd] Troubleshooting namebased virtual websites

2010-07-13 Thread John Hudak
OK, thank you. I'll look into your suggestions. I do have a question about how default plays into this. Can default be views as just another virtual host? Currently, /sites-available/default looks like this: ServerAdmin webmas...@localhost DocumentRoot /var/www/

Re: [us...@httpd] Troubleshooting namebased virtual websites

2010-07-13 Thread Eric Covener
On Tue, Jul 13, 2010 at 2:43 PM, John Hudak wrote: > results of apache2ctl -S are: You have > > apache2: Could not reliably determine the server's fully qualified domain > name, using ubuntuserver.homeunix.com for ServerName > [Tue Jul 13 14:26:22 2010] [warn] VirtualHost 2150sunshine.homeip.net:

Re: [us...@httpd] Troubleshooting namebased virtual websites

2010-07-13 Thread John Hudak
results of apache2ctl -S are: apache2: Could not reliably determine the server's fully qualified domain name, using ubuntuserver.homeunix.com for ServerName [Tue Jul 13 14:26:22 2010] [warn] VirtualHost 2150sunshine.homeip.net:0overlaps with VirtualHost ubuntuserver.homeunix.com:0, the first has p

Re: [us...@httpd] 404 error with mod_jk

2010-07-13 Thread Michael Powe
On Tue, Jul 13, 2010 at 11:39:45AM -0400, Eric Covener wrote: > > > > Sure you're even hitting that virtualhost? Hello, Well ... no. But I went back and added a CustomLog directive to that vHost configuration section and it does log to the separate log file, so that would seem to indicate that

Re: [us...@httpd] Troubleshooting namebased virtual websites

2010-07-13 Thread Eric Covener
On Tue, Jul 13, 2010 at 1:06 PM, John Hudak wrote: > Perhaps I have a rogue domain name running around somewhere.in some > config file... apache2ctl -S > So, the *only* place I should have the FQDNs that I want to serve are in my > site-enabled 'configuration file' that corresponds to each

Re: [us...@httpd] Troubleshooting namebased virtual websites

2010-07-13 Thread John Hudak
I agree. with that observation..not finding virtual hostsI followed this example from the debian tutorials: http://www.debian-administration.org/articles/412 Changing the www.example.com, .net, .org to match my domain names. I created a file in /etc/apache2/conf.d/virtual.conf which contains

Re: [us...@httpd] Help with mod_authz_host

2010-07-13 Thread Joseph M. Morgan
On 7/13/2010 11:30 AM, Tom Evans wrote: On Tue, Jul 13, 2010 at 5:07 PM, Joseph M. Morgan wrote: OK... trying this Order deny,allow Deny from 221.192.0.0/14 Anyone know how to test it??? Or do I just wait??? And... how will I know? Ah yes, testing it. You could addi

Re: [us...@httpd] Many websites in different document roots behind a reverse proxy

2010-07-13 Thread Tapas Mishra
Server A access log of http://mydomain.com http://pastebin.com/XMgZHCTi Server A error log http://mydomain.com http://pastebin.com/xkrEnwQ3 Server B docebolms access log http://mydomain.com/docebolms http://pastebin.com/2tTJazgr docebolms error log http://mydomain.com/docebolms http://pastebi

Re: [us...@httpd] Troubleshooting namebased virtual websites

2010-07-13 Thread Tom Evans
On Tue, Jul 13, 2010 at 4:58 PM, John Hudak wrote: > Yes, that is what is causing me to scratch my headWhy is it looking for > '/htdocs' > > The log files in the /logs directory are there for each namebased domain.  I > assume apache put them there when I restarted apache because I did not

Re: [us...@httpd] Help with mod_authz_host

2010-07-13 Thread Tom Evans
On Tue, Jul 13, 2010 at 5:07 PM, Joseph M. Morgan wrote: > OK... trying this > > >    Order deny,allow >    Deny from 221.192.0.0/14 > > > Anyone know how to test it???  Or do I just wait??? And... how will I know? > > Ah yes, testing it. You could additionally block another IP, just for testin

Re: [us...@httpd] Help with mod_authz_host

2010-07-13 Thread Joseph M. Morgan
OK... trying this Order deny,allow Deny from 221.192.0.0/14 Anyone know how to test it??? Or do I just wait??? And... how will I know? On 7/13/2010 10:40 AM, Tom Evans wrote: On Tue, Jul 13, 2010 at 3:27 PM, Joseph M. Morgan wrote: On 7/13/2010 9:03 AM, Tom Evans wrote:

Re: [us...@httpd] how to disable default site from being served in apache2

2010-07-13 Thread Tom Evans
On Tue, Jul 13, 2010 at 4:31 PM, Tapas Mishra wrote: > In this setup you have assumed server name default. > In case I want a request when does not match any of the ServerNames > I need to have a server name which is generating a redirect to an > index page which asks user to enter correct URL > d

Re: [us...@httpd] Troubleshooting namebased virtual websites

2010-07-13 Thread John Hudak
Yes, that is what is causing me to scratch my headWhy is it looking for '/htdocs' The log files in the /logs directory are there for each namebased domain. I assume apache put them there when I restarted apache because I did not (I just created the directories). The log files are empty.

Re: [us...@httpd] Many websites in different document roots behind a reverse proxy

2010-07-13 Thread Tom Evans
On Tue, Jul 13, 2010 at 4:28 PM, Tapas Mishra wrote: > Ok I am giving you the configuration > 2 Servers A and B > A (public IP) > B (LAN where all these applications are hosted) Log entries? From A and B. - The official User-To-

Re: [us...@httpd] Help with mod_authz_host

2010-07-13 Thread Tom Evans
On Tue, Jul 13, 2010 at 3:27 PM, Joseph M. Morgan wrote: > On 7/13/2010 9:03 AM, Tom Evans wrote: >> >> On Tue, Jul 13, 2010 at 1:13 PM, Joseph M. Morgan >>  wrote: >> >>> >>> This is an Apache 2.2 server running within a VM on CentOS. >>> >>> Both the authn_basic_module and the authn_host_module

Re: [us...@httpd] 404 error with mod_jk

2010-07-13 Thread Eric Covener
> Sure you're even hitting that virtualhost? -- Eric Covener cove...@gmail.com - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscr

[us...@httpd] 404 error with mod_jk

2010-07-13 Thread Michael Powe
Hello, I have installed mod_jk (current version built locally) in IBM httpd (IBM_HTTP_Server/6.0.2 Apache/2.0.47 (Unix) mod_jk/1.2.30 Server at localhost Port 80). I used the autoconfig option in tomcat to build the mod_jk.conf file and added an include for it to httpd.conf. I'm trying to config

Re: [us...@httpd] Many websites in different document roots behind a reverse proxy

2010-07-13 Thread Tapas Mishra
Ok I am giving you the configuration 2 Servers A and B A (public IP) B (LAN where all these applications are hosted) we want people from internet to be able to access applications on B as http://mydomain.com/claroline http://mydomain.com/dokebolms http://mydomain.com/doceolms and the main site htt

Re: [us...@httpd] how to disable default site from being served in apache2

2010-07-13 Thread Tapas Mishra
In this setup you have assumed server name default. In case I want a request when does not match any of the ServerNames I need to have a server name which is generating a redirect to an index page which asks user to enter correct URL do you mean this by above. -

Re: [us...@httpd] Troubleshooting namebased virtual websites

2010-07-13 Thread Tom Evans
On Tue, Jul 13, 2010 at 3:39 PM, John Hudak wrote: > I just checked in apache2.confServerRoot "/etc/apache2" > That is where all the apache config information is located.  Doesn't > DocumentRoot dictate where the files to be served are located? > Thanks > J > Yep, it does. It was just somewha

Re: [us...@httpd] how to disable default site from being served in apache2

2010-07-13 Thread Tom Evans
On Tue, Jul 13, 2010 at 3:21 PM, Tapas Mishra wrote: > On Tue, Jul 13, 2010 at 7:12 PM, Tom Evans wrote: > > >> Commonly, people set up the first vhost as a 'failure' vhost, that >> people only visit if they request a vhost that is not configured, >> which can then be used to redirect people on t

Re: [us...@httpd] Troubleshooting namebased virtual websites

2010-07-13 Thread John Hudak
I just checked in apache2.confServerRoot "/etc/apache2" That is where all the apache config information is located. Doesn't DocumentRoot dictate where the files to be served are located? Thanks J On Tue, Jul 13, 2010 at 10:34 AM, John Hudak wrote: > Hmmm, I don't know how to set ServerRoot

Re: [us...@httpd] Troubleshooting namebased virtual websites

2010-07-13 Thread John Hudak
Hmmm, I don't know how to set ServerRoot-where is it? by vhost config do you mean what sites are in sites-available? if so, here it is: # Example.com (/etc/apache2/sites-available/www.example.com) # ServerAdmin webmas...@example.com ServerName www.example.com ServerAli

Re: [us...@httpd] Help with mod_authz_host

2010-07-13 Thread Joseph M. Morgan
On 7/13/2010 9:03 AM, Tom Evans wrote: On Tue, Jul 13, 2010 at 1:13 PM, Joseph M. Morgan wrote: This is an Apache 2.2 server running within a VM on CentOS. Both the authn_basic_module and the authn_host_module are loaded. I have the following directive: Order deny,allow Deny fr

Re: [us...@httpd] how to disable default site from being served in apache2

2010-07-13 Thread Tapas Mishra
On Tue, Jul 13, 2010 at 7:12 PM, Tom Evans wrote: > Commonly, people set up the first vhost as a 'failure' vhost, that > people only visit if they request a vhost that is not configured, > which can then be used to redirect people on to the right vhost or > display an appropriate error message.

Re: [us...@httpd] Troubleshooting namebased virtual websites

2010-07-13 Thread Tom Evans
On Tue, Jul 13, 2010 at 3:16 PM, John Hudak wrote: > I am having an issue where none of the three virtual websites I've created > are being served when requested. I basically followed the approach > documented here: > http://www.debian-administration.org/articles/412 > > I am running Ubuntu server

[us...@httpd] Troubleshooting namebased virtual websites

2010-07-13 Thread John Hudak
I am having an issue where none of the three virtual websites I've created are being served when requested. I basically followed the approach documented here: http://www.debian-administration.org/articles/412 I am running Ubuntu server 8.04 LTS. My router successfully forwards the incomming page r

Re: [us...@httpd] Help with mod_authz_host

2010-07-13 Thread Tom Evans
On Tue, Jul 13, 2010 at 1:13 PM, Joseph M. Morgan wrote: > This is an Apache 2.2 server running within a VM on CentOS. > > Both the authn_basic_module and the authn_host_module are loaded. > > I have the following directive: > > >Order deny,allow >Deny from 221.192.0.0/14 > > > Yet, toda

Re: [us...@httpd] Many websites in different document roots behind a reverse proxy

2010-07-13 Thread Tom Evans
On Tue, Jul 13, 2010 at 1:23 PM, Tapas Mishra wrote: > I am having some applications which I have not developed. > The names are > docebolms http://www.dokeos.com/ > efront http://www.efrontlearning.net/ > dokeos http://www.dokeos.com/ > claroline http://www.claroline.net/ > atutor http://www.atut

Re: [us...@httpd] how to disable default site from being served in apache2

2010-07-13 Thread Tom Evans
On Tue, Jul 13, 2010 at 1:34 PM, Tapas Mishra wrote: > I am having some websites and by default a website whose vhost > configuration is first alphanumerically is being served. > I do not want this to happen. > i.e. when I am typing http://192.168.1.5/ > by default a website is being served > inst

Re: [us...@httpd] Re: How to regenerate 400 error code

2010-07-13 Thread Tom Evans
On Tue, Jul 13, 2010 at 2:01 PM, Sakthi Esakiappan wrote: > Any information guys... > > On 13 July 2010 10:16, Sakthi Esakiappan > wrote: >> >> Hello, >> >> Hack attempt is made in one of our server. The hacker used string >> "w00tw00t.at.ISC.SANS.DFind" to continuously generate 400 Bad request t

[us...@httpd] Re: How to regenerate 400 error code

2010-07-13 Thread Sakthi Esakiappan
Any information guys... On 13 July 2010 10:16, Sakthi Esakiappan wrote: > Hello, > > Hack attempt is made in one of our server. The hacker used string > "w00tw00t.at.ISC.SANS.DFind" to continuously generate 400 Bad request to our > server. He is capable of generating very large number of request

Re: [us...@httpd] Help with mod_authz_host

2010-07-13 Thread Joseph M. Morgan
#ProxyRequests On It's commented just like that. I suspect so (don't know the default off the top of my head) On 7/13/2010 7:18 AM, Eric Covener wrote: On Tue, Jul 13, 2010 at 8:13 AM, Joseph M. Morgan wrote: This is an Apache 2.2 server running within a VM on CentOS. Both the authn_

[us...@httpd] how to disable default site from being served in apache2

2010-07-13 Thread Tapas Mishra
I am having some websites and by default a website whose vhost configuration is first alphanumerically is being served. I do not want this to happen. i.e. when I am typing http://192.168.1.5/ by default a website is being served instead I need is some thing here which shows me different directories

[us...@httpd] Many websites in different document roots behind a reverse proxy

2010-07-13 Thread Tapas Mishra
I am having some applications which I have not developed. The names are docebolms http://www.dokeos.com/ efront http://www.efrontlearning.net/ dokeos http://www.dokeos.com/ claroline http://www.claroline.net/ atutor http://www.atutor.ca/ olat http://www.olat.org/website/en/html/index.html sakai ht

Re: [us...@httpd] Help with mod_authz_host

2010-07-13 Thread Eric Covener
On Tue, Jul 13, 2010 at 8:13 AM, Joseph M. Morgan wrote: > This is an Apache 2.2 server running within a VM on CentOS. > > Both the authn_basic_module and the authn_host_module are loaded. > > I have the following directive: > > >Order deny,allow >Deny from 221.192.0.0/14 > > > Yet, toda

[us...@httpd] Help with mod_authz_host

2010-07-13 Thread Joseph M. Morgan
This is an Apache 2.2 server running within a VM on CentOS. Both the authn_basic_module and the authn_host_module are loaded. I have the following directive: Order deny,allow Deny from 221.192.0.0/14 Yet, today I see in my access logs: 221.192.199.35 - - [12/Jul/2010:15:26:19 -500] -5

Re: [us...@httpd] When and how does the parent pid get notified that it is time for the child to die because MaxRequestsPerChild has been reached?

2010-07-13 Thread Eric Covener
On Tue, Jul 13, 2010 at 12:33 AM, Matty Ronald wrote: > Hi All, > > Can anyone help me Why parent httpd process isn't spawning a new > replacement child in a timely fashion, after MaxRequestsPerChild has > been hit and the child worker httpd has exited. > The parent doesn't necessarily have to re

Re: [us...@httpd] How to ignore common name during client certificate verification?

2010-07-13 Thread Eric Covener
On Tue, Jul 13, 2010 at 3:23 AM, galaft wang wrote: > Hi, > > As we know, directive SSLVerifyClient in mod_ssl can be used for Client > Authentication > > SSLVerifyClient require > > It means the client has to present a valid Certificate > > However, for specific purpose, I only want to verify: wh

[us...@httpd] How to ignore common name during client certificate verification?

2010-07-13 Thread galaft wang
Hi, As we know, directive SSLVerifyClient in mod_ssl can be used for Client Authentication SSLVerifyClient require It means the client *has to* present a valid Certificate However, for specific purpose, I only want to verify: whether client's certificate is issued by trusted CA. I do not want t