Re: [users@httpd] Combine digest and basic auth over SSL authentication

2012-11-19 Thread Igor Cicimov
On Tue, Nov 20, 2012 at 2:58 PM, Ferdie Romero wrote: > Is it possible to combine digest and basic auth (over ssl)?Or you can only > use one at a time per directory? > On first thought I don't see a reason why not since they'll be configured in separate virtual hosts, the digest in http vhost and

[users@httpd] Combine digest and basic auth over SSL authentication

2012-11-19 Thread Ferdie Romero
Is it possible to combine digest and basic auth (over ssl)? Or you can only use one at a time per directory? Thanks. Ferdie

Re: [users@httpd] Apache 2.2 authentication against a Mysql Database

2012-11-19 Thread Ben Johnson
On 11/19/2012 6:07 PM, David Mehler wrote: > Hello, > > Thanks to everyone who helped. I have it working. Here it is for > anyone this might help. > > Hth > Dave. > > Set up for Mysql authentication: > > Create a mysql database: > create database web; > grant select, insert, update, delete on

Re: [users@httpd] Apache 2.2 authentication against a Mysql Database

2012-11-19 Thread David Mehler
Hello, Thanks to everyone who helped. I have it working. Here it is for anyone this might help. Hth Dave. Set up for Mysql authentication: Create a mysql database: create database web; grant select, insert, update, delete on web.* to web_user@localhost identified by 'xxx'; flush privileges; use

Re: [users@httpd] Apache 2.2 authentication against a Mysql Database

2012-11-19 Thread FINESEC
Hello, Apache doesn't support password hashes generated by mysql. Use htpasswd or openssl to generate hashes that are supported by apache: htpasswd -nbm username password openssl passwd -apr1 password Adam Black, FINESEC.COM - authentication software for Apache On Mon, Nov 19, 2012 at 4:10 PM,

Re: [users@httpd] Apache 2.2 authentication against a Mysql Database

2012-11-19 Thread Igor Galić
- Original Message - > Hello, > > When I inserted the user in to the mysql database I have a field > called password it's a varchar(64) field. For the password value I > used mysql's sha function so the entry looked like: > > sha('password') > > won the insert line. > > I'm not sure i

Re: [users@httpd] Exploit?

2012-11-19 Thread Ben Johnson
On 11/19/2012 9:54 AM, Miles Fidelman wrote: > I'm guessing it might be trying a probe against a content management > system that has a hole in it (e.g., Wordpress has been known to leak > information in the past). > > Clearly some security scanner wrote those entries in your log file. If > you

Re: [users@httpd] Exploit?

2012-11-19 Thread Miles Fidelman
I'm guessing it might be trying a probe against a content management system that has a hole in it (e.g., Wordpress has been known to leak information in the past). Clearly some security scanner wrote those entries in your log file. If you have something checking for that kind of exploit, you

[users@httpd] Using SSL configuration and SSLVerifyClient Directive

2012-11-19 Thread Guillaume BOULAMERY
Hello, I would like to use SSLVerifiyClient in order to do 2-ways authentication. Here is my situation: Client < --- > HAProxy < --- > Apache (SSL authentication **) < --- > tomcat/apache (Application server) I have to authenticate clients before they can access to the applica

Re: [users@httpd] Apache 2.2 authentication against a Mysql Database

2012-11-19 Thread David Mehler
Hello, When I inserted the user in to the mysql database I have a field called password it's a varchar(64) field. For the password value I used mysql's sha function so the entry looked like: sha('password') won the insert line. I'm not sure if that answers your question. Thanks. Dave. On 11/

Re: [users@httpd] Proxy Config Issues

2012-11-19 Thread Tom Evans
On Sun, Nov 18, 2012 at 1:44 AM, Chris Arnold wrote: >> I did read the docs and they were some what helpful but not completely. >> Hence, my email to the list. What i am trying to understand is the sections >> and what they mean. For instance, ProxyPass /. Does >this refer to what will >> be proxi

Re: [users@httpd] How to prevent mod_proxy from rewriting redirects into absolute URLs?

2012-11-19 Thread Sharl.Jimh.Tsin
read more @ http://httpd.apache.org/docs/trunk/mod/mod_proxy.html#proxypassreverse Best regards, Sharl.Jimh.Tsin (From China **Obviously Taiwan INCLUDED**) Using Gmail? Please read this important notice: http://www.fsf.org/campaigns/jstrap/gmail?10073. 2012/11/19 Yang Zhang : > (The app server

Re: [users@httpd] Apache 2.2 authentication against a Mysql Database

2012-11-19 Thread Igor Galić
- Original Message - > Hello, > > I am still trying to get my apache to authenticate against a mysql > database. I've looked at my available options and it looked like > mod_auth_mysql was discontinued so that was a non-starter. My other > option was mod_dbd with the apr-util-mysql drive