Re: [us...@httpd] Hardening Apache against attacks

2010-10-26 Thread Igor Galić
- "Jason Nunnelley" wrote: > > Why .htaccess? Security tip #1 should be 'disable .htaccess'. > Performance > > tip #1 too. > > I'm not running a vhost clients can control. I'm running a vhost for > production sites my dev team manages, and I don't always want my dev > team restarting Apache

Re: [us...@httpd] How can I configure setting a Header in httpd.conf based on content type?

2010-10-26 Thread Igor Galić
- "7BOOK" wrote: > Hi Tom, > > as this topic discussed, > (1).I tried following, it does not at all > Header set Cache-Control "no-cache" > > Header set Cache-Control "max-age=3600" > > (2).I am using proxy disk cache, I tried kinds of regex format using > FilesMatch, all failed >

Re: [us...@httpd] Hardening Apache against attacks

2010-10-26 Thread Jason Nunnelley
> Why .htaccess? Security tip #1 should be 'disable .htaccess'. Performance > tip #1 too. I'm not running a vhost clients can control. I'm running a vhost for production sites my dev team manages, and I don't always want my dev team restarting Apache to make changes. Also, .htaccess is in version

Re: [us...@httpd] How can I configure setting a Header in httpd.conf based on content type?

2010-10-26 Thread 7BOOK
Hi Tom, as this topic discussed, (1).I tried following, it does not at all Header set Cache-Control "no-cache" Header set Cache-Control "max-age=3600" (2).I am using proxy disk cache, I tried kinds of regex format using FilesMatch, all failed (3).Is there a solution to set header fields

Re: [us...@httpd] Re: possible to add multiple locations for the document root

2010-10-26 Thread J. Greenlees
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 e-letter wrote: ~snip~ > file://localhost/var/www/phppgadmin/login.php try http://localhost/phppgadmin if it is NOT http then it will never work right. no login.php or anything, you need to just point the browser to the folder. > The browser shows

[us...@httpd] Mod-jk doesn't work with Expect 100-continue

2010-10-26 Thread Mohit Anchlia
We are using mod-jk 1.28. We have a web server that forwards mod-jk requests to jboss. What I am seeing is that jboss is not able to parse the data (our servlet). When I looked further I saw that clients are sending "Expect 100-continue" and I also see this in mod-jk header that's being passed fr

Re: [us...@httpd] dynamic mpm-itk

2010-10-26 Thread Igor Galić
- "James Devine" wrote: > Is there a way to set the AssignUserId values associated with mpm-itk > based on the URI? Such as if a user accesses > http://domain.tld/~username > These users are in ldap so I would need to do some sort of external > processing such as through a rewritemap or mod

[us...@httpd] dynamic mpm-itk

2010-10-26 Thread James Devine
Is there a way to set the AssignUserId values associated with mpm-itk based on the URI? Such as if a user accesses http://domain.tld/~username These users are in ldap so I would need to do some sort of external processing such as through a rewritemap or mod_perl --

Re: [us...@httpd] Basic authentication for a virtual/rewritten URL?

2010-10-26 Thread Brian Hirt
I don't use htaccess anywhere, but we use things like this in our config that work just fine. You might want to make sure your Order and Allow are set up to work correctly. AuthType Basic AuthName "Restricted Directory" AuthUserFile

Re: [us...@httpd] Basic authentication for a virtual/rewritten URL?

2010-10-26 Thread Sacha Varma
On 19:59, Brian Hirt wrote: Use instead of That's the first thing I tried, and was surprised when it didn't work. The documentation is explicit though, the only valid contexts for the mod_auth directives are Directory and htaccess: http://httpd.apache.org/docs/2.0/mod/mod_auth.html Do

[us...@httpd] Re: possible to add multiple locations for the document root

2010-10-26 Thread e-letter
> -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > e-letter wrote: >> I deliberately changed permission just to get the service working. Of >> course, security will need to be improved in future. :) >> >> Below is extract from the file '/etc/httpd/logs/error_log': >> >> [Mon Oct 25 12:35:59 2010

Re: [us...@httpd] logrotate

2010-10-26 Thread Igor Galić
- Anurag Gujral wrote: > > > Hi All, >I am planning to use logrotate to rotate log files in apache can > you > guys plz share your experiences with it. How stable is it? Does it do > buffered > writes to the log files. logrotate is a standard Unix utility and not so much Ap

Re: [us...@httpd] Re: possible to add multiple locations for the document root

2010-10-26 Thread Krist van Besien
On Mon, Oct 25, 2010 at 3:28 PM, e-letter wrote: > Below is extract from the file '/etc/httpd/logs/error_log': > > [Mon Oct 25 12:35:59 2010] [notice] Apache/2.2.6 (Mandriva > Linux/PREFORK-8.2mdv2008.0) PHP/5.2.4 with Suhosin-Patch mod_put/2.0.8 > configured -- resuming normal operations > [Mon

Re: [us...@httpd] Re: possible to add multiple locations for the document root

2010-10-26 Thread J. Greenlees
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 e-letter wrote: > I deliberately changed permission just to get the service working. Of > course, security will need to be improved in future. :) > > Below is extract from the file '/etc/httpd/logs/error_log': > > [Mon Oct 25 12:35:59 2010] [notice]