Re: [users@httpd] Apache 2.2 authentication against a Mysql Database

2012-11-18 Thread David Mehler
Hello, I am still trying to get my apache to authenticate against a mysql database. I've looked at my available options and it looked like mod_auth_mysql was discontinued so that was a non-starter. My other option was mod_dbd with the apr-util-mysql driver, well that one also didn't work, I kept g

Re: [users@httpd] Exploit?

2012-11-18 Thread Issac Goldstand
not sure what it thinks its matching but both of those urls will return 200 with the homepage on a static site... Sent from my mobile. Please excuse any typos, spelling or other weirdness. Sent with AquaMail for Android http://www.aqua-mail.com On November 19, 2012 4:39:58 AM Knute Johnson

Re: [users@httpd] How to prevent mod_proxy from rewriting redirects into absolute URLs?

2012-11-18 Thread Igor Cicimov
On Mon, Nov 19, 2012 at 12:56 PM, Yang Zhang wrote: > (The app server is this: > http://gitit.net/README#proxying-to-httpmysite.comwiki) > > On Sun, Nov 18, 2012 at 5:55 PM, Yang Zhang > wrote: > > This is not an option because the point of my using the proxy in this > > case is that I need to r

[users@httpd] Exploit?

2012-11-18 Thread Knute Johnson
A total of 2 possible successful probes were detected (the following URLs contain strings that match one or more of a listing of strings that indicate a possible exploit): /?mod=../../../../../../../../proc/self/environ%00 HTTP Response 200 /?page=../../../../../../../../proc/self/envi

Re: [users@httpd] How to prevent mod_proxy from rewriting redirects into absolute URLs?

2012-11-18 Thread Yang Zhang
(The app server is this: http://gitit.net/README#proxying-to-httpmysite.comwiki) On Sun, Nov 18, 2012 at 5:55 PM, Yang Zhang wrote: > This is not an option because the point of my using the proxy in this > case is that I need to rewrite the URLs and content (with > mod_proxy_html). The app server

Re: [users@httpd] How to prevent mod_proxy from rewriting redirects into absolute URLs?

2012-11-18 Thread Yang Zhang
This is not an option because the point of my using the proxy in this case is that I need to rewrite the URLs and content (with mod_proxy_html). The app server hosts at / and I need to translate it to a subdirectory /sub. On Sun, Nov 18, 2012 at 5:53 PM, Igor Cicimov wrote: > > > > On Mon, Nov 19

Re: [users@httpd] How to prevent mod_proxy from rewriting redirects into absolute URLs?

2012-11-18 Thread Igor Cicimov
On Mon, Nov 19, 2012 at 12:38 PM, Yang Zhang wrote: > On Sun, Nov 18, 2012 at 3:21 PM, Igor Cicimov wrote: > > > > On Mon, Nov 19, 2012 at 9:48 AM, Yang Zhang > wrote: > >> > >> I have: nginx (port 80) reverse-proxying to apache2 (port 88) > >> reverse-proxying to a web app (port 5001). > >> >

Re: [users@httpd] How to prevent mod_proxy from rewriting redirects into absolute URLs?

2012-11-18 Thread Yang Zhang
`fgrep -ir usecanonicalname /etc/apache2/` turns up nothing. (FWIW I'm using the apache2 from Ubuntu 12.04) On Sun, Nov 18, 2012 at 5:04 PM, Igor Cicimov wrote: > > > > On Mon, Nov 19, 2012 at 11:03 AM, Nick Kew wrote: >> >> On Sun, 18 Nov 2012 14:48:35 -0800 >> Yang Zhang wrote: >> >> > I hav

Re: [users@httpd] How to prevent mod_proxy from rewriting redirects into absolute URLs?

2012-11-18 Thread Yang Zhang
On Sun, Nov 18, 2012 at 3:21 PM, Igor Cicimov wrote: > > On Mon, Nov 19, 2012 at 9:48 AM, Yang Zhang wrote: >> >> I have: nginx (port 80) reverse-proxying to apache2 (port 88) >> reverse-proxying to a web app (port 5001). >> >> However, when the web app responds with a redirect like `Location: >>

Re: [users@httpd] How to prevent mod_proxy from rewriting redirects into absolute URLs?

2012-11-18 Thread Yang Zhang
On Sun, Nov 18, 2012 at 4:03 PM, Nick Kew wrote: > On Sun, 18 Nov 2012 14:48:35 -0800 > Yang Zhang wrote: > >> I have: nginx (port 80) reverse-proxying to apache2 (port 88) >> reverse-proxying to a web app (port 5001). >> >> However, when the web app responds with a redirect like `Location: >> /f

Re: [users@httpd] How to prevent mod_proxy from rewriting redirects into absolute URLs?

2012-11-18 Thread Igor Cicimov
On Mon, Nov 19, 2012 at 11:03 AM, Nick Kew wrote: > On Sun, 18 Nov 2012 14:48:35 -0800 > Yang Zhang wrote: > > > I have: nginx (port 80) reverse-proxying to apache2 (port 88) > > reverse-proxying to a web app (port 5001). > > > > However, when the web app responds with a redirect like `Location:

Re: [users@httpd] How to prevent mod_proxy from rewriting redirects into absolute URLs?

2012-11-18 Thread Nick Kew
On Sun, 18 Nov 2012 14:48:35 -0800 Yang Zhang wrote: > I have: nginx (port 80) reverse-proxying to apache2 (port 88) > reverse-proxying to a web app (port 5001). > > However, when the web app responds with a redirect like `Location: > /foo`, That is not valid HTTP. A Location header must be an

Re: [users@httpd] How to prevent mod_proxy from rewriting redirects into absolute URLs?

2012-11-18 Thread Igor Cicimov
On Mon, Nov 19, 2012 at 9:48 AM, Yang Zhang wrote: > I have: nginx (port 80) reverse-proxying to apache2 (port 88) > reverse-proxying to a web app (port 5001). > > However, when the web app responds with a redirect like `Location: > /foo`, apache2 rewrites this into `Location: > http://host.com:8

[users@httpd] How to prevent mod_proxy from rewriting redirects into absolute URLs?

2012-11-18 Thread Yang Zhang
I have: nginx (port 80) reverse-proxying to apache2 (port 88) reverse-proxying to a web app (port 5001). However, when the web app responds with a redirect like `Location: /foo`, apache2 rewrites this into `Location: http://host.com:88/sub/foo`, even though port 88 is publicly inaccessible. I'd li

Re: [users@httpd] Can Apache Forward/Proxy a Port?

2012-11-18 Thread Chris Arnold
Just for those following this or need the same thing. How i got it to work: -Made ProxyPass/Reverse entries in the default vhost SSL conf -For users that type http://, in the non-SSL vhost i made a rewrite rule to rewrite http: to https: -Stop/start apache and test Actually the http:// rewrite te

Re: [users@httpd] Can Apache Forward/Proxy a Port?

2012-11-18 Thread Chris Arnold
- Original Message - > I have a server that is sharing port 443. I need to use apache on a > different server to forward/proxy https traffic to another apache > server running on a different port, 2443. So, a user types in > https://mail.domain.com and is sent to https://ip.com:2443. Can >

Re: [users@httpd] Apache 2.2 authentication against a Mysql Database

2012-11-18 Thread David Mehler
Hello, Do you have this working? If so can I get a look at your config? Thanks. Dave. On 11/18/12, Igor Galić wrote: > > > - Original Message - >> Hello, >> >> I'm wanting to set up Apache 2.2 to authenticate using either basic >> or >> digest authentication whichever I decide to do, a

Re: [users@httpd] Apache 2.2 authentication against a Mysql Database

2012-11-18 Thread Igor Galić
- Original Message - > Hello, > > I'm wanting to set up Apache 2.2 to authenticate using either basic > or > digest authentication whichever I decide to do, against a Mysql > Database. I am running Apache 2.2 and mysql 5.52. > > Ive set up authentication using textfiles in the past now

Re: [users@httpd] Can Apache Forward/Proxy a Port?

2012-11-18 Thread Igor Galić
- Original Message - > I have a server that is sharing port 443. I need to use apache on a > different server to forward/proxy https traffic to another apache > server running on a different port, 2443. So, a user types in > https://mail.domain.com and is sent to https://ip.com:2443. Can