Re: [users@httpd] Could Apache login support CAPTCHA and lockout?

2011-10-09 Thread Mark Montague
On October 9, 2011 17:39 , Neal Rhodes wrote: One would suppose from the responses that using .htpasswd and Basic Auth is really a lousy approach to security, since an attacker can just wail away indefinitely trying repeatedly, unless one configured something like fail2ban to cut off repeated

Re: [users@httpd] Could Apache login support CAPTCHA and lockout?

2011-10-09 Thread Neal Rhodes
Yes, thank for the responses and clarification. True the Basic Auth isn't really a login, as there is no logout per se. One would suppose from the responses that using .htpasswd and Basic Auth is really a lousy approach to security, since an attacker can just wail away indefinitely trying repe

Re: [users@httpd] How to decide about shared memory

2011-10-09 Thread Igor Galić
- Original Message - > Hi, > > during APR configuring a decision is made what type of shared memory > to > use. Is there a way to influence this decision in favor for a certain > kind via environment variables or command line options? Not really. The decision is made based on the best kn

Re: [users@httpd] Apache Load balancer Issue in Solaris server

2011-10-09 Thread Igor Galić
- Original Message - > > > > Hi, > > > > Need some guidance on configuring Apache load balancer in Solaris > server . > > Load Balancer : Apache > > Apache version : 2.2.16 > > Implemented using “ > http://httpd.apache.org/docs/current/mod/mod_proxy_balancer.html ” > > Algorithm Used for

Re: [users@httpd] vulnerabilities-oval.xml

2011-10-09 Thread Rainer Jung
On 08.10.2011 22:51, Pascal HERAUD wrote: > Hello, > > Does anybody know where did go the > http://httpd.apache.org/security/vulnerabilities-oval.xml page ? The page was removed: http://svn.apache.org/viewvc?view=revision&revision=1179600 Regards, Rainer --