Re: [users@httpd] Q1. Apache httpd-2.4.9 configuration : client denied by server configuration error

2014-09-26 Thread Edgar Pettijohn
Try: | AllowOverride none Require all denied || ||Options +Indexes -Multiviews AllowOverride All Require all granted | On 09/26/2014 11:24 AM, James B. Byrne wrote: > OS=CentOS-6.5 > > We have locally built and packaged this version of httpd to replace httpd-2.2 > which ships with Ce

Re: [users@httpd] Q1. Apache httpd-2.4.9 configuration : client denied by server configuration error

2014-09-26 Thread James B. Byrne
On Fri, September 26, 2014 19:03, Eric Covener wrote: > On Fri, Sep 26, 2014 at 6:44 PM, Edgar Pettijohn > wrote: > >> > The virtual server that reported the error contains this: >> > > ​​ >> 216.185.71.167:443> >> > DocumentRoot "/var/data/ca.harte-lyne/public_html" >> > . . . >> > > ​10

Re: [users@httpd] Q1. Apache httpd-2.4.9 configuration : client denied by server configuration error

2014-09-26 Thread James B. Byrne
On Fri, September 26, 2014 18:44, Edgar Pettijohn wrote: > Could you post the actual logs? > > /var/log/httpd/hll_www_public_ssl_error.log:[Fri Sep 26 15:54:13.332996 2014] [authz_core:error] [pid 5822:tid 139947878967040] [client 216.185.71.44:32777] AH01630: client denied by server configuration

Re: [users@httpd] Q1. Apache httpd-2.4.9 configuration : client denied by server configuration error

2014-09-26 Thread Eric Covener
On Fri, Sep 26, 2014 at 6:44 PM, Edgar Pettijohn wrote: > > The virtual server that reported the error contains this: > > ​​ > 216.185.71.167:443> > > DocumentRoot "/var/data/ca.harte-lyne/public_html" > > . . . > ​10:1 says you never made it into this virtualhost because the local interface

Re: [users@httpd] Q1. Apache httpd-2.4.9 configuration : client denied by server configuration error

2014-09-26 Thread Edgar Pettijohn
Could you post the actual logs? On 09/26/2014 11:24 AM, James B. Byrne wrote: > OS=CentOS-6.5 > > We have locally built and packaged this version of httpd to replace httpd-2.2 > which ships with CentOS-6.5. Upon restarting the upgraded httpd server we > received the error message "client denied

Re: AW: [users@httpd] rotatelogs.exe keeps one giant file [wd-vc]

2014-09-26 Thread Ethan Grant
Kurt, Why is there no gravity? Ethan Grant On Thursday, September 25, 2014 6:10 PM, Wei-min Lee wrote: What's the date/time stamp on the one error log? As Kurt said, and from what I read online, files are only generated when there's output for that log. I think 2.4.10 has a -c option t

[users@httpd] Q1. Apache httpd-2.4.9 configuration : client denied by server configuration error

2014-09-26 Thread James B. Byrne
OS=CentOS-6.5 We have locally built and packaged this version of httpd to replace httpd-2.2 which ships with CentOS-6.5. Upon restarting the upgraded httpd server we received the error message "client denied by server configuration". The distributed conf/httpd.conf configuration file contains th

[users@httpd] Proposed simple shell-shock protection

2014-09-26 Thread Nick Kew
I've revisited mod_taint this morning, and made some updates: a bugfix, a new option to apply an untainting rule to all headers. But topically, a canned configuration option to protect against shell-shock patterns: LoadModule modules/mod_taint.so Untaint shellshock Untaint works in a director

Re: [users@httpd] OpenSSL Multiple Remote Security Vulnerabilities

2014-09-26 Thread Rainer M. Canavan
On Sep 26, 2014, at 15:33 , "Kannan Narayanasamy -X (kannanar - HCL TECHNOLOGIES LIMITED at Cisco)" wrote: > Anyone share your thoughts on this??? apparently, apache.org hasn't provided any windows binaries for a while. If you need binaries, the usual recommendation here is to head over to apa

RE: [users@httpd] OpenSSL Multiple Remote Security Vulnerabilities

2014-09-26 Thread Kannan Narayanasamy -X (kannanar - HCL TECHNOLOGIES LIMITED at Cisco)
Hi All, Anyone share your thoughts on this??? Thanks, Kannan Narayanasamy. From: muthamilan Sargunaanandan [mailto:muthami...@gmail.com] Sent: Thursday, September 25, 2014 3:56 AM To: users@httpd.apache.org Subject: [users@httpd] OpenSSL Multiple Remote Security Vulnerabilities Hello SMEs, I'm

RE: [users@httpd] Apache 2.2 RewriteRule/Proxypass and general processing flow

2014-09-26 Thread Lesley Kimmel
Ok, thanks for that. Can you explain a little more about that? I did see some stuff but didn't fully grasp it. I did try the same rules with the preceding '/' which is apparently how one would do it at the server level, but that didn't seem to make a difference. How do I change the context of my

Re: [users@httpd] Apache 2.2 RewriteRule/Proxypass and general processing flow

2014-09-26 Thread Eric Covener
On Fri, Sep 26, 2014 at 9:20 AM, Lesley Kimmel wrote: > This leads me to believe that proxypass takes precedence over RewriteRule, > can you confirm this? ​Depends on the context of your RewriteRules. Yours imply or htaccess which runs later. ProxyPass happens before (instead of) the URL has

[users@httpd] Apache 2.2 RewriteRule/Proxypass and general processing flow

2014-09-26 Thread Lesley Kimmel
Hi All! I'll try to make this as short as I can, but I need some assistance in understanding the Apache processing flow. I am using Apache 2.2 I have a requirement to disable access to a certain context (say, /xyz) for users of Firefox. From what I can gather the best way to do this is using m