Re: [users@httpd] Client certificate auth behind f5 loadbalancer

2014-06-25 Thread Eric Covener
On Wed, Jun 25, 2014 at 5:53 PM, Marc Schöchlin wrote: > in my understanding authentication using client certificates is just a > cryptographic validation of a public/private keypair over a already > established ssl-secured channel. > For example, it is possible to use a official certificate for t

Re: [users@httpd] Client certificate auth behind f5 loadbalancer

2014-06-25 Thread Marc Schöchlin
Hi, in my understanding authentication using client certificates is just a cryptographic validation of a public/private keypair over a already established ssl-secured channel. For example, it is possible to use a official certificate for the ssl channel and my own ca for client certificate validat

Re: [users@httpd] Client certificate auth behind f5 loadbalancer

2014-06-25 Thread Jens-U. Mozdzen
Hi Marc, Zitat von Marc Schöchlin : Hello apache-users, i'm trying to implement client certificate authentication behind a f5 loadbalancer. My loadbalancer terminates ssl, and dispatches the decrypted communication via network address translation to the backend apache server. The client certif

Re: [users@httpd] Client certificate auth behind f5 loadbalancer

2014-06-25 Thread Eric Covener
On Wed, Jun 25, 2014 at 3:08 PM, Marc Schöchlin wrote: > [Browser with client cert]-->[Loadbalancer with SSL > termination]>[Apache 2.2.11] What certificate would Apache have access to if the LB communicates to it with HTTP? -- Eric Covener cove...@gmail.com --

[users@httpd] Client certificate auth behind f5 loadbalancer

2014-06-25 Thread Marc Schöchlin
Hello apache-users, i'm trying to implement client certificate authentication behind a f5 loadbalancer. My loadbalancer terminates ssl, and dispatches the decrypted communication via network address translation to the backend apache server. The client certificate auth should be performed at the w

Re: [users@httpd] MaxClients exceeded error message

2014-06-25 Thread Jeff Trawick
On Wed, Jun 25, 2014 at 8:52 AM, Robin Becker wrote: > An apache 2.2 mpm prefork site which uses an external mod_fastcgi socket > to django was experiencing slowdowns during a busy period. > > The main symptom seemed to be a connection delay of up to 10 seconds. > > At the time I saw the machine

[users@httpd] MaxClients exceeded error message

2014-06-25 Thread Robin Becker
An apache 2.2 mpm prefork site which uses an external mod_fastcgi socket to django was experiencing slowdowns during a busy period. The main symptom seemed to be a connection delay of up to 10 seconds. At the time I saw the machine was not heavily loaded in cpu or memory, but there were a lar

Re: [users@httpd] Windows LDAP/AD authentication on apache2

2014-06-25 Thread Eric Covener
On Wed, Jun 25, 2014 at 4:50 AM, Rahul R wrote: > I am not sure what I am missing here. Is there a way to get more info in the > logs? or a solution to fix this issue. In 2.4, there is LDAPLibraryDebug or of course LogLevel debug authnz_ldap:trace8 ldap:trace8 In 2.2, you just have LogLevel debu

Re: [users@httpd] Windows LDAP/AD authentication on apache2

2014-06-25 Thread Anh Nguyen
L0p98u uh l0lff g 0] 0g0lu0l On Jun 25, 2014 1:50 AM, "Rahul R" wrote: Greetings, I am trying to setup an apache with windows AD authentication. Below is my entry on the httpd.conf. # Using this to bind AuthType Basic AuthName "R's Web Site: Login with user id" AuthBasicProvider ldap Authz

[users@httpd] Windows LDAP/AD authentication on apache2

2014-06-25 Thread Rahul R
Greetings, I am trying to setup an apache with windows AD authentication. Below is my entry on the httpd.conf. # Using this to bind AuthType Basic AuthName "R's Web Site: Login with user id" AuthBasicProvider ldap AuthzLDAPAuthoritative off AuthLDAPBindDN "cn=s0934095,ou=Groups,ou=PROD,dc=Global