Re: [users@httpd] Apache modifies URL when offloading SSL

2012-06-29 Thread Daniel Ruggeri
On 6/29/2012 11:43 AM, Clinton J. Campbell wrote: > I'm trying to configure the logs so that I can confirm whether this is > generated by Apache or not. Any tips? mod_dumpio is the place to be for debugging this kind of stuff. All input and output will get logged to show you exactly what httpd i

Re: [users@httpd] Apache modifies URL when offloading SSL

2012-06-29 Thread Clinton J. Campbell
Thanks for the response. I spent my time initially focusing on the proxy until I found similar questions on the Squid mailing list that pointed to the backend server as the problem. The access logs for apache seem to correspond to what I described. I just ran a test a moment ago and this is f

[users@httpd] Apache 2.4 with Event MPM and mod_perl

2012-06-29 Thread linuxsupport
Hi All, Is it possible to run mod_perl with Apache event MPM (in Apache 2.4) ? anyone used this? Thanks

Re: [users@httpd] Secure htaccess in a non-SSL Apache (and withoutDigest...)

2012-06-29 Thread Alex Bligh
Daniel, --On 29 June 2012 14:04:01 +0200 Daniel Merino wrote: You have talked about perl and mod_perl. I understand that you can override htaccess to use a self-made bit of Perl code that process it and check the token. Is this right? You don't need to override htaccess. Here's a piece of

Re: [users@httpd] Secure htaccess in a non-SSL Apache (and withoutDigest...)

2012-06-29 Thread Daniel Merino
Hi, Alex. Having that Apache is serving the file and that we want only to protect several files placed on a specifical folder, your suggestion of adding some token to URLs pointing at that folder, and make Apache to deliver them, seems to be a good solution. You have talked about perl and mo

Re: [users@httpd] Secure htaccess in a non-SSL Apache (and withoutDigest...)

2012-06-29 Thread Alex Bligh
Daniel, --On 29 June 2012 10:38:24 +0200 Daniel Merino wrote: I'm not sure to understand at all this approach, but anyway, I think that will not be valid for us. Drupal's restricted access to the video works fine, but in the moment that some authorized user can see the video, he can see the

Re: [users@httpd] Secure htaccess in a non-SSL Apache (and withoutDigest...)

2012-06-29 Thread Daniel Merino
Hi, Alex, and thanks for that quick answer. I'm not sure to understand at all this approach, but anyway, I think that will not be valid for us. Drupal's restricted access to the video works fine, but in the moment that some authorized user can see the video, he can see the video's URL in the

Re: [users@httpd] Secure htaccess in a non-SSL Apache (and without Digest...)

2012-06-29 Thread Alex Bligh
--On 29 June 2012 10:06:04 +0200 Daniel Merino wrote: However, with some specially sensible videos we also have an extra protection. We set an htaccess with mod_authn_dbd linked with Drupal database, so direct access to these resources URLs is protected with the same user & password used in

[users@httpd] Secure htaccess in a non-SSL Apache (and without Digest...)

2012-06-29 Thread Daniel Merino
Hi everybody. We have a really complex issue and we aren't able to imagine how could it be solved. We hope that maybe some Apache expert will give us some ideas. Please, if this is not the correct list, tell me where should I send this email. We have a Drupal 6 installation which serves vide