Re: [users@httpd] client side certificate authentication

2013-12-16 Thread Toomas Aas
Hello! I am struggling to understand the concept of client side authentication enabled in SSL apache. I have been reading the posts, google pages but still clueless. What I could understand till now is 3 configuration parameter is required SSLVerifyClient SSLVerifyDepth SSLCACertificate File

Re: [users@httpd] Squidanalyzer site forbidden

2013-12-16 Thread Ethan Drower
Hey Anthony, It's got to be your permissions on that directory. Make sure it's readable/executable. Ethan Drower Sent from my iPhone > On Dec 16, 2013, at 10:47 AM, Anthony Lamb wrote: > > Hi, > > I don't know if you are able to help me or not but it is worth a go. > > I have set up a Cen

[users@httpd] Squidanalyzer site forbidden

2013-12-16 Thread Anthony Lamb
Hi, I don't know if you are able to help me or not but it is worth a go. I have set up a CentOS 6.4 server and installed Java, Apache and Tomcat as well as Squid proxy server. The idea is that I have a proxy server on my network so I can control and monitor internet access. To do the monitorin

Re: [users@httpd] Access controls

2013-12-16 Thread Otis DeWitt
The example I gave you does just that, it does not allow everyone in LDAP access, it uses LDAP as the source but only allows the required user such as bob.stanton or tom.scott or who ever else exists in the require user grabbing them from LDAP. Try it first. Thanks, Otis > On Dec 16, 2013, at

Re: [users@httpd] Access controls

2013-12-16 Thread Eric Covener
On Mon, Dec 16, 2013 at 5:06 AM, Ramesh Nadupalli wrote: > Also thank you for your suggestion on having multiple locations in the > config, I'll give it a shot.Is it possible to have some sort of an > accessfile to control the access for users? Not one that resembles the SVN file, no. Use the bas

Re: [users@httpd] Re: Apache fcgid suexec not deleting POSTed /tmp files

2013-12-16 Thread Eric Covener
On Mon, Dec 16, 2013 at 6:14 AM, Fester Zigterman Rustenburg wrote: > Thanks for your mail. > > You say php handles the file uploads. That may be true, however, I do have a > temp file named /tmp/fcgid.tmp.* which are owned by the *Apache* user > www-data, not the php [site-user]. > > Mod_fcgid i

[users@httpd] client side certificate authentication

2013-12-16 Thread Kumar Bijayant
Hello List, I am struggling to understand the concept of client side authentication enabled in SSL apache. I have been reading the posts, google pages but still clueless. What I could understand till now is 3 configuration parameter is required SSLVerifyClient SSLVerifyDepth SSLCACertificate Fil

Re: [users@httpd] Re: Apache fcgid suexec not deleting POSTed /tmp files

2013-12-16 Thread Fester Zigterman Rustenburg
Thanks for your mail. You say php handles the file uploads. That may be true, however, I do have a temp file named /tmp/fcgid.tmp.* which are owned by the *Apache* user www-data, not the php [site-user]. Mod_fcgid is creating temp files according to: http://httpd.apache.org/mod_fcgid/mod/mo

Re: [users@httpd] Access controls

2013-12-16 Thread Ramesh Nadupalli
Also thank you for your suggestion on having multiple locations in the config, I'll give it a shot.Is it possible to have some sort of an accessfile to control the access for users? On Mon, Dec 16, 2013 at 3:32 PM, Ramesh Nadupalli wrote: > sorry if I haven't made my requirement clear, Here is wh

Re: [users@httpd] #error mod_ssl requires OpenSSL 0.9.8a or later

2013-12-16 Thread Abdul Anshad
Sorry and yes, i have openssl-devel packages installed. Regards, Abdul On 12/16/2013 3:29 PM, Thomas Eckert wrote: Actually, I was referring to the openssl-dev package (and whatever other -dev package you might need to build). On Mon, Dec 16, 2013 at 10:53 AM, Abdul Anshad

Re: [users@httpd] Access controls

2013-12-16 Thread Ramesh Nadupalli
sorry if I haven't made my requirement clear, Here is what I am looking for...I was trying to achieve the below functionality, http://myurl.com/sitea -> user1 http://myurl.com/siteb -> user1 &user2. http://myurl.com/sitec -> user3. http://myurl.com/sited -> user1, user2 and user3. Using the requi

Re: [users@httpd] #error mod_ssl requires OpenSSL 0.9.8a or later

2013-12-16 Thread Thomas Eckert
Actually, I was referring to the openssl-dev package (and whatever other -dev package you might need to build). On Mon, Dec 16, 2013 at 10:53 AM, Abdul Anshad wrote: > yes, i have httpd-devel-2.2.26 package installed. FYI i'm trying to > build httpd-2.4.7. is it necessary to install 2.4.x dev

Re: [users@httpd] #error mod_ssl requires OpenSSL 0.9.8a or later

2013-12-16 Thread Abdul Anshad
yes, i have httpd-devel-2.2.26 package installed. FYI i'm trying to build httpd-2.4.7. is it necessary to install 2.4.x dev ? Regards, Abdul On 12/16/2013 2:48 PM, Thomas Eckert wrote: Did you make sure to have the -dev package(s) installed ? On Mon, Dec 16, 2013 at 10:10 AM, Abdul Anshad

Re: [users@httpd] #error mod_ssl requires OpenSSL 0.9.8a or later

2013-12-16 Thread Thomas Eckert
Did you make sure to have the -dev package(s) installed ? On Mon, Dec 16, 2013 at 10:10 AM, Abdul Anshad wrote: > I have made sure that the --with-ssl points to the 1.0.1e, FYI i also > have another system binary installed which is openssl-0.9.7d. > > I have included the source of apr and apr-

Re: [users@httpd] #error mod_ssl requires OpenSSL 0.9.8a or later

2013-12-16 Thread Abdul Anshad
I have made sure that the --with-ssl points to the 1.0.1e, FYI i also have another system binary installed which is openssl-0.9.7d. I have included the source of apr and apr-utils under apache srclib. Apache-2.4.6 builds fine but Apache-2.4.7 throws out that error. when i compared both versio

Re: [users@httpd] Access controls

2013-12-16 Thread Otis Dewitt - NOAA Affiliate
What do you mean? * "Since our requirement is to control access based on a path.*" AuthType basic AuthName "Example 1 use your LDAP login." AuthBasicProvider ldap AuthLDAPURL "ldaps:// example-ldap.example.com:636/o=example.com?uid??(&(objectClass=inetOrgPerson)(g

Re: [users@httpd] #error mod_ssl requires OpenSSL 0.9.8a or later

2013-12-16 Thread Otis Dewitt - NOAA Affiliate
Try: First make sure openssl-devel-1.0.1e is installed. --with-ssl= Example: --with-ssl=/usr/include/openssl Thanks, Otis On Mon, Dec 16, 2013 at 1:58 AM, Abdul Anshad wrote: > Hello All, > > I'm trying to compile httpd-2.4.7 from source, but i get the following > error "#error mod_ssl r

Re: [users@httpd] Access controls

2013-12-16 Thread Ramesh Nadupalli
Is this possible to implement using apache? On Sun, Dec 15, 2013 at 9:49 PM, Ramesh Nadupalli wrote: > I use Directory. This is how my config file look like > > > AuthType Basic > AuthName "Enter your ID" > AuthBasicProvider ldap > AuthBasicAuthoritative off >