RE: [EMAIL PROTECTED] 2.2 proxy connection pool gone missing (?)

2008-02-01 Thread Axel-Stephane SMORGRAV
Hmmm. This made me think that there may not be any point in having a min for reverse proxy backends since it seems pretty pointless to initialise n connections that will be closed by the backend anyway 15 seconds later or whatever the backend's keepalive timeout is, if there is no activity on sa

RE: [EMAIL PROTECTED] Apache2 rewriting HTTP headers

2008-02-01 Thread Axel-Stephane SMORGRAV
Holy Molly Miss Sophie! And you say this only occurs when serving PDF and DOC files ? KeepAlive was a HTTP/1.0 extension, so I do not think that the Connection header violates RFC. That is besides the point here anyway... I do not see any Age header so I do not think you are caching, are you?

RE: [EMAIL PROTECTED] mod_rewrite

2008-02-01 Thread Axel-Stephane SMORGRAV
EMAIL PROTECTED] mod_rewrite Thanks a lot for your help Axel-Stephane SMORGRAV wrote: > RewriteCond %{QUERY_STRING} Country=4(&.+)?$ RewriteCond > %{QUERY_STRING} Conc=14(&.+)?$ RewriteRule ^/directory/country.php > http://www.domain-2.com/ [R] > I've just tried what

RE: [EMAIL PROTECTED] mod_rewrite

2008-02-01 Thread Axel-Stephane SMORGRAV
RewriteCond %{QUERY_STRING} Country=4(&.+)?$ RewriteCond %{QUERY_STRING} Conc=14(&.+)?$ RewriteRule ^/directory/country.php http://www.domain-2.com/ [R] As for your second requirement, I think it has already been widely discussed on this forum, and others, even recently. A little search through

RE: [EMAIL PROTECTED] Apache2 rewriting HTTP headers

2008-02-01 Thread Axel-Stephane SMORGRAV
I see why you can suspect Apache httpd of setting these headers, but AFAIK from having used Apache 2.0.x and mod_proxy for a number of years, Apache does not "rewrite" headers unless you do so explicitly in the configuration. You will note that in the first case the application replies HTTP/1.0

RE: [EMAIL PROTECTED] Customers getting "Page Cannot be Displayed" over SSL

2008-02-01 Thread Axel-Stephane SMORGRAV
Can't possibly be a keep-alive problem with the following line is in the config: SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown downgrade-1.0 force-response-1.0 I can however think of another issue with MSIE which may cause such behaviour. Do you happen to apply compressi

RE: [EMAIL PROTECTED] proxypass or redirect external https to internal https

2008-01-31 Thread Axel-Stephane SMORGRAV
Look at the mod_ssl man page, specifically for the SSLProxy* directives. And please spare us for lengthy configurations with tons of comments ;-) -ascs De : Shaw, Dan [mailto:[EMAIL PROTECTED] Envoyé : mercredi 30 janvier 2008 19:18 À : users@httpd.apache.org

RE: [EMAIL PROTECTED] Can Apache Proxy server to proxy the HTTP requests to the backend HTTPS/SSL server?

2008-01-31 Thread Axel-Stephane SMORGRAV
You need SSLProxyCipherSuite NULL-SHA You also need to make sure that your backend server is configured to accept NULL ciphers. -ascs -Message d'origine- De : Qingshan Xie [mailto:[EMAIL PROTECTED] Envoyé : jeudi 31 janvier 2008 01:37 À : Krist van Besien; users@httpd.apache.org Obj

RE: [EMAIL PROTECTED] [EMAIL PROTECTED] NOT Urgent

2008-01-30 Thread Axel-Stephane SMORGRAV
You may have a BrowserMatch directive or similar that defines the nokeepalive environment variable. That will force Apache to close the connection after each request. However, I cannot see how that would be related to the problem you encounter. On the contrary. Apache 2.0.49 is pretty old. Lot

RE: [EMAIL PROTECTED] A question on HTTPs protocol

2008-01-28 Thread Axel-Stephane SMORGRAV
I just realised I actually meant to say: SSLProxyCipherSuite NULL Of course, of course... a horse is a horse. -ascs -Message d'origine- De : Axel-Stephane SMORGRAV Envoyé : lundi 28 janvier 2008 08:26 À : users@httpd.apache.org Objet : RE: [EMAIL PROTECTED] A question on

RE: [EMAIL PROTECTED] A question on HTTPs protocol

2008-01-27 Thread Axel-Stephane SMORGRAV
You probably want to use SSLCipherSuite NULL $ openssl ciphers -v NULL AECDH-NULL-SHA SSLv3 Kx=ECDH Au=None Enc=None Mac=SHA1 ECDHE-RSA-NULL-SHA SSLv3 Kx=ECDH Au=RSA Enc=None Mac=SHA1 ECDH-RSA-NULL-SHA SSLv3 Kx=ECDH Au=RSA Enc=None Mac=SHA1

RE: [EMAIL PROTECTED] httpd 2.0.54 VHost not working

2008-01-27 Thread Axel-Stephane SMORGRAV
.76.6.1/> > DocumentRoot /var/www/html/www ServerName www.mydomain.com <http://www.mydomain.com/> And I'm using telnet to test virtual hosts with proper host names. Is there any way, I can trace how apache is finding the absolute path of the file to be served. Thanks, Anand

RE: [EMAIL PROTECTED] another instance of apache

2008-01-27 Thread Axel-Stephane SMORGRAV
You do not need (nor want) to install Apache twice unless you would like to run two different versions of httpd. Take a look at the -f option of httpd. You may also want to browser through a previous thread on this list entitled "Multiple Instances of Apache". -ascs ___

RE: [EMAIL PROTECTED] httpd 2.0.54 VHost not working

2008-01-25 Thread Axel-Stephane SMORGRAV
De : anand nalya [mailto:[EMAIL PROTECTED] Envoyé : vendredi 25 janvier 2008 15:36 À : users@httpd.apache.org Objet : [EMAIL PROTECTED] httpd 2.0.54 VHost not working > Hi, > > I've Apache httpd version 2.0.54 on Redhat Linux Fedora 4. I'm trying to > configure name based virtual hosts on it. H

RE: [EMAIL PROTECTED] mod_proxy not handling redirects correctly

2008-01-24 Thread Axel-Stephane SMORGRAV
You need ServerName www.mysite.com ProxyPassReverse / http://www.host1.com/ ProxyPassReverse / http://www.host2.com/ What ProxyPassReverse does is simply rewriting the Location headers that match the second argument: If the Location header of the HTTP 30[12] (redirect) starts with http://www

RE: [EMAIL PROTECTED] message logged to error log

2008-01-23 Thread Axel-Stephane SMORGRAV
This does not seem to me as anything to be worried about, but rather as perfectly normal operations of your apache. The entries are logged at level NOTICE. If you want to avoid having such messages in your logs, change the log level. Refer to http://httpd.apache.org/docs/2.0/mod/core.html#logl

RE: [EMAIL PROTECTED] Multiple Instances of Apache

2008-01-20 Thread Axel-Stephane SMORGRAV
Axel-Stephane SMORGRAV wrote: > Name-based virtual hosting saves IP addresses and does exactly the same. > No. Not when you specifically want to isolate apps running in different instances of apache - this was what the orignal poster

RE: [EMAIL PROTECTED] Multiple Instances of Apache

2008-01-19 Thread Axel-Stephane SMORGRAV
Name-based virtual hosting saves IP addresses and does exactly the same. -ascs -Message d'origine- De : Michael Clark [mailto:[EMAIL PROTECTED] Envoyé : samedi 19 janvier 2008 02:10 À : users@httpd.apache.org Objet : Re: [EMAIL PROTECTED] Multiple Instances of Apache Mandy Singh wrote

RE: [EMAIL PROTECTED] Multiple Instances of Apache

2008-01-19 Thread Axel-Stephane SMORGRAV
Given the nature of your question I am starting to suspect that what you actually want is name-based virtual hosting. If you are only doing HTTP (as opposed to httpS) you can serve as many sites as you like on the same IP/ports combination. In that case you only need one instance containing two

RE: [EMAIL PROTECTED] Multiple Instances of Apache

2008-01-18 Thread Axel-Stephane SMORGRAV
You can have as many instances of Apache as you wish on a Unix box. On Windows, I do not know but I suppose you can. Just like two Vhosts, two servers cannot bind the same IP/port combo. What I do is that I make a server root for each instance of Apache. In that server root I create the directo

RE: [EMAIL PROTECTED] mod_deflate config error

2008-01-17 Thread Axel-Stephane SMORGRAV
First thing to do is to take a look in the error log. -ascs De : Kranti K K Parisa [mailto:[EMAIL PROTECTED] Envoyé : jeudi 17 janvier 2008 12:14 À : users@httpd.apache.org Objet : [EMAIL PROTECTED] mod_deflate config error Hi, I am trying to use mod_de

RE: [EMAIL PROTECTED] mod_header

2008-01-17 Thread Axel-Stephane SMORGRAV
That means that mod_header is not loaded, which implies that you will have to contact the system administrator. What you mean about forcing the download of specific file types is not very clear to me however, and I do not see how you are going to solve that using the header directive. Maybe you

RE: [EMAIL PROTECTED] Passing REMOTE_ADDR on 2.0.x reverse proxy

2008-01-17 Thread Axel-Stephane SMORGRAV
I believe so, to the extent where it is mod_proxy that generates this header. -ascs -Message d'origine- De : Al Sparks [mailto:[EMAIL PROTECTED] Envoyé : mardi 15 janvier 2008 21:53 À : users@httpd.apache.org Objet : Re: [EMAIL PROTECTED] Passing REMOTE_ADDR on 2.0.x reverse proxy >

RE: [EMAIL PROTECTED] splitting out to different files in customlog in mass vhost

2008-01-11 Thread Axel-Stephane SMORGRAV
I can basically see two ways of doing this: 1. Include the host header in the log and use a script to split the resulting unique log file 2. set a distinct environment variable for each host (using RewriteCond/RewriteRule) and use the optional log condition to determine to what file to log, i.

RE: [EMAIL PROTECTED] Update on --Unable to enable mod_ssl

2008-01-09 Thread Axel-Stephane SMORGRAV
Well. Have you: 1. Added a listen directive for the SSL port ? 2. A virtual host with the appropriate SSL directives ? 3. Tried to "telnet localhost 443" to make sure your server is actually listening the the https port? 4. Read the manual ? Your SSL config should be something like the follow

RE: [EMAIL PROTECTED] To upgrade or not to upgrade

2008-01-09 Thread Axel-Stephane SMORGRAV
Take a look at the list of changes on 2.0.x and see if there are any that may be relevant to you. My personal opinion is that 2.0.47 is awfully old, and a lot of bugs have been fixed since then. If you do not have any dependencies to third-party modules, I think you should definitely upgrade to

RE: [EMAIL PROTECTED] mod_cache

2008-01-09 Thread Axel-Stephane SMORGRAV
-- De : Campbell, Lance [mailto:[EMAIL PROTECTED] Envoyé : mercredi 9 janvier 2008 18:03 À : users@httpd.apache.org Cc : Axel-Stephane SMORGRAV Objet : RE: [EMAIL PROTECTED] mod_cache You mentioned applying the fixes from 2.2 to 2.0. Would I get the source code for mod_cache.so and mod_disk_cache.so fro

Re: [EMAIL PROTECTED] mod_cache

2008-01-09 Thread Axel-Stephane SMORGRAV
not see it, I also replied to your original thread "RE: [EMAIL PROTECTED] mod_disk_cache" -ascs -Message d'origine- De : Campbell, Lance [mailto:[EMAIL PROTECTED] Envoyé : mercredi 9 janvier 2008 16:33 À : users@httpd.apache.org Cc : Axel-Stephane SMORGRAV Objet : RE: [E

RE: [EMAIL PROTECTED] mod_proxy and keepalive question

2008-01-09 Thread Axel-Stephane SMORGRAV
À : users@httpd.apache.org Objet : RE: [EMAIL PROTECTED] mod_proxy and keepalive question That's scary. Thanks for your help anyway. Cheers, Balint On Wed, 9 Jan 2008, Axel-Stephane SMORGRAV wrote: > I'm sorry, but I did not realise that you were attempting to use SSL to t

RE: [EMAIL PROTECTED] mod_proxy and keepalive question

2008-01-09 Thread Axel-Stephane SMORGRAV
I'm sorry, but I did not realise that you were attempting to use SSL to the backend. http://issues.apache.org/bugzilla/show_bug.cgi?id=38602 It seems like there is a patch available which has been proposed for backport to 2.2.x. Unfortunately it currently only has one vote... well actually two

RE: [EMAIL PROTECTED] mod_cache

2008-01-08 Thread Axel-Stephane SMORGRAV
Yes you did. http://issues.apache.org/bugzilla/show_bug.cgi?id=19441 Many of the developers actively participate on this list also, so there is no need to post to the dev list. If you believe you have found a problem you should search Bugzilla for reports of problems similar to what you report

RE: [EMAIL PROTECTED] mod_disk_cache

2008-01-08 Thread Axel-Stephane SMORGRAV
Lance, I was surprised that you reported that the Cache: max-age=0 forced a revalidation of the resource with the origin server. There is a BR in Bugzilla for this (actually there are several) for which I provided a patch against 2.0.59: http://issues.apache.org/bugzilla/show_bug.cgi?id=19441

RE: [EMAIL PROTECTED] mod_proxy and keepalive question

2008-01-08 Thread Axel-Stephane SMORGRAV
Hi This is very surprising to me because this is one of the things about 2.2 that I was looking forward to and therefore tested specifically. Roughly speaking httpd 2.2 creates a connection pool for each ProxyPass. Actually it associates a "worker" (not to be mixed-up with MPM worker workers

RE: [EMAIL PROTECTED] make error

2008-01-08 Thread Axel-Stephane SMORGRAV
Did you at some point build httpd with LDAP support? In that case have you tried "make distclean" or building from a fresh distribution? -ascs -Message d'origine- De : [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Envoyé : mardi 8 janvier 2008 13:29 À : users@httpd.apache.org Objet :

RE: [EMAIL PROTECTED] Load balancing problem

2008-01-08 Thread Axel-Stephane SMORGRAV
Hello there, Although I am not very experienced in using proxy_balancer, I did experiment with it a little bit a while ago. >From what I remember, it expects the route to be appended to the balancer >cookie value. In your example it is expecting a cookie of >JSESSIONID=K8zpkCtCy6l9Y91Q86bE

RE: [EMAIL PROTECTED] Re: Re: Reverse Proxy to SSL web server: configuration example

2008-01-07 Thread Axel-Stephane SMORGRAV
mywebserver.com/ SSLEngine on SSLCertificateFile /etc/httpd/conf/server.crt SSLCertificateKeyFile /etc/httpd/conf/server.key ErrorLog logs/ssl-error.log TransferLog logs/ssl-access.log Best regards, Zvi "Axel-Stephane SMORGRAV" <[EMAIL PROTECTED]> wrote in

RE: [EMAIL PROTECTED] Re: Reverse Proxy to SSL web server: configuration example

2008-01-07 Thread Axel-Stephane SMORGRAV
Definitely yes. -ascs -Message d'origine- De : news [mailto:[EMAIL PROTECTED] De la part de Zvi Kave Envoyé : lundi 7 janvier 2008 15:02 À : users@httpd.apache.org Objet : [EMAIL PROTECTED] Re: Reverse Proxy to SSL web server: configuration example Do you mean, that I must copy the S

RE: [EMAIL PROTECTED] Reverse Proxy to SSL web server: configuration example

2008-01-07 Thread Axel-Stephane SMORGRAV
If you add the config below to a vanilla httpd.conf, you'll be pretty close to what you are looking for. Just replace the tokens %%TOKEN%% with whatever value you want. Listen %%svcb_HTTP_ADDR%%:%%HTTP_PORT%% Listen %%svcb_HTTP_ADDR%%:%%HTTPS_PORT%% ServerName %%svcb_PUBLIC_NAME%%:%%HTTPS

RE: [EMAIL PROTECTED] Help with Caching Proxy with Ubuntu and Apach 2.2

2008-01-07 Thread Axel-Stephane SMORGRAV
Every thing goes into either httpd.conf or some file included from httpd.conf. The general configuration I use is as follows: CacheIgnoreHeaders Set-Cookie CacheIgnoreCacheControl Off CacheIgnoreNoLastMod Off = 2.2 > CacheStoreNoStore Off

RE: [EMAIL PROTECTED] Requests taking a lot of time

2008-01-02 Thread Axel-Stephane SMORGRAV
What MPM are you using? What is the output of httpd -l ?? -ascs De : Jean-Christophe Roux [mailto:[EMAIL PROTECTED] Envoyé : mercredi 2 janvier 2008 17:59 À : users@httpd.apache.org Objet : [EMAIL PROTECTED] Requests taking a lot of time Hello, I am strug

RE: [EMAIL PROTECTED] Needing help with mod_proxy

2008-01-02 Thread Axel-Stephane SMORGRAV
f RewriteRule . http://127.0.0.1:3000%{REQUEST_URI} [L,P] ProxyPassReverse /otherapp/ http://127.0.0.1:3001/ ProxyPassReverse / http://127.0.0.1:3000/ Thanks again! -- BTR On Jan 2, 2008 9:36 AM, Axel-Stephane SMORGRAV < [EMAIL PROTECTED]> wrote: My fault. I guess that what is

RE: [EMAIL PROTECTED] Needing help with mod_proxy

2008-01-02 Thread Axel-Stephane SMORGRAV
My fault. I guess that what is happening is that the browser is being redirected and the Location header is not rewritten because I omitted the ProxyPassReverse directives. Try adding: ProxyPassReverse /otherapp/ http://127.0.0.1:3001/ ProxyPassReverse / http://127.0.0.1:3000/ There is anot

RE: [EMAIL PROTECTED] Needing help with mod_proxy

2008-01-02 Thread Axel-Stephane SMORGRAV
There may be conflicts between mod_rewrite and mod_proxy wrt. the order in which the filename to uri translation is done. Either one or the other may do the translation first. In Apache 2.2 the order is well-defined. In 2.0 the order may depend on the order in which the modules are loaded. So w

RE: [EMAIL PROTECTED] mod_filter being ignored (ProxyReverse, IIS Backend forced deflate content)

2007-12-27 Thread Axel-Stephane SMORGRAV
Maybe I am being a little naive, but I am very surprised that IIS compresses the contents without adding a Content-Encoding header to the response in which case you your browser should be able to decompress it. It seems more likely that there is an application that generates compressed contents

RE: [EMAIL PROTECTED] how to re-read the configuration without restarting apache

2007-12-20 Thread Axel-Stephane SMORGRAV
If that server of yours really is critical, I would urge you NOT to change the operational configuration before having tested the changes elsewhere. -ascs -Message d'origine- De : Melanie Pfefer [mailto:[EMAIL PROTECTED] Envoyé : jeudi 20 décembre 2007 12:40 À : users@httpd.apache.org

RE: [EMAIL PROTECTED] Newbie question

2007-12-18 Thread Axel-Stephane SMORGRAV
No need for reverse proxying. No need for linking. No need for sub-domain. No need for additional IP addresses. 1. Have whoever manages your domain ewd.net create a DNS CNAME record app.ewd.net IN CNAME www.ewd.net 2. Read up on name-based virtual hosting at http://httpd.apache.org/docs/2

RE: [EMAIL PROTECTED] Custom hostname and Apache 2.2.6

2007-12-18 Thread Axel-Stephane SMORGRAV
I do not know whether there is anything about this in the doc. Looking at the source code (server/util.c and server/vhost.c) I figured out that Apache at some point tries to resolve the address associated with the host name on which it is running. Normally this does not pose any problem because

RE: [EMAIL PROTECTED] Custom hostname and Apache 2.2.6

2007-12-18 Thread Axel-Stephane SMORGRAV
In that case there is maybe another way around it. In /etc/hosts, change the line 127.0.0.1 localhost into 127.0.0.1 localhost laptop That should keep Apache happy. -ascs -Message d'origine- De : Hans Tovetjärn [mailto:[EMAIL PROTECTED] Envoyé : mardi 18 décembre 2007

RE: [EMAIL PROTECTED] Vhost issues

2007-12-17 Thread Axel-Stephane SMORGRAV
You can fix that by adding "ServerAlias www.teknerds.net" to the second VHost. BTW, next time you post a configuration, please remove all the comments that make it unreadable unless they are relevant for your problem... -ascs -Message d'origine- De : Chris Arnold [mailto:[EMAIL PROTECT

RE: [EMAIL PROTECTED] Custom hostname and Apache 2.2.6

2007-12-17 Thread Axel-Stephane SMORGRAV
Here's a shot in the dark. The file /etc/hosts most probably has a line containing host-xx-xxx-xx-xxx, associating the host name with an IP address, looking somewhat like this: 10.11.12.14 host-xx-xxx-xx-xxx Edit that line and add laptop: 10.11.12.14 host-xx-xxx-xx-xxx laptop I think that s

RE: [EMAIL PROTECTED] NameVirtualHost Directive

2007-12-17 Thread Axel-Stephane SMORGRAV
NameVirtualHost is used only if you want to host several web sites using the same IP/port combination as opposed to IP-based virtual hosting where exactly one site (server name) is hosted on each IP/port combination. If you use Name-based virtual hosting, you may provide several VirtualHost sec

RE: [EMAIL PROTECTED] Re: response time measurement at apache server

2007-12-12 Thread Axel-Stephane SMORGRAV
per0900aecd80693006.shtml But I didn't find implementation of these tools for free use. Please help me out. thanks , -Rahul Axel-Stephane SMORGRAV <[EMAIL PROTECTED]> wrote: Have a look at mod_log_config, specifically the %D and %T format strings. -ascs ___

RE: [EMAIL PROTECTED] response time measurement at apache server

2007-12-12 Thread Axel-Stephane SMORGRAV
Have a look at mod_log_config, specifically the %D and %T format strings. -ascs De : rahul gundecha [mailto:[EMAIL PROTECTED] Envoyé : mercredi 12 décembre 2007 10:40 À : users@httpd.apache.org Objet : [EMAIL PROTECTED] response time measurement at apache s

RE: [EMAIL PROTECTED] Apache mod_rewrite/mod_proxy conflict?

2007-12-11 Thread Axel-Stephane SMORGRAV
What you suggest would be security problem because it would allow anyone to use your RP to attack hosts on your network, or on external networks. Apart from that there is another mechanism (RewriteMap) that allows you to build the target URL dynamically. And no, neither ProxyPassReverse nor any

RE: [EMAIL PROTECTED] Apache mod_rewrite/mod_proxy conflict?

2007-12-11 Thread Axel-Stephane SMORGRAV
-Message d'origine- > De : Eric Covener [mailto:[EMAIL PROTECTED] > Envoyé : mercredi 12 décembre 2007 03:55 > À : users@httpd.apache.org > Objet : Re: [EMAIL PROTECTED] Apache mod_rewrite/mod_proxy conflict? > > In 2.0 it's ambiguous between proxy and rewrite in the translate_name hook.

RE: [EMAIL PROTECTED] Apache 2.2.6, problem with mod_proxy: "ProxyPass|ProxyPassMatch can not have a path when defined in a location."

2007-12-11 Thread Axel-Stephane SMORGRAV
Location goes under Directory - same thing. >From the manual: directory A directive marked as being valid in this context may be used inside , , , and containers in the server configuration files, subject to the restrictions outlined in Configuration Sections. -ascs -Message d'or

RE: [EMAIL PROTECTED] Enquiry about Reserve Proxy

2007-12-11 Thread Axel-Stephane SMORGRAV
mages. any idea what's wrong with my web server configuration? regards, Pdt Axel-Stephane SMORGRAV-2 wrote: > > The logs you sent show that every thing works perfectly. The access > log shows two requests both returning HTTP 200 OK. The debug log shows > that your RP connect

RE: [EMAIL PROTECTED] Intelligent/automatic cache expiry based on mtime

2007-12-11 Thread Axel-Stephane SMORGRAV
'origine- De : Jergen Dutch [mailto:[EMAIL PROTECTED] Envoyé : mardi 11 décembre 2007 14:00 À : users@httpd.apache.org Objet : Re: [EMAIL PROTECTED] Intelligent/automatic cache expiry based on mtime On Dec 7, 2007 2:29 PM, Axel-Stephane SMORGRAV <[EMAIL PROTECTED]> wrote: > ExpiresB

RE: [EMAIL PROTECTED] Enquiry about Reserve Proxy

2007-12-10 Thread Axel-Stephane SMORGRAV
perly but not for jpeg image. any idea? Thank you Pdt Axel-Stephane SMORGRAV-2 wrote: > > AS far as I can tell from the looks of your configuration, you are pretty > much on top of things. > > What you need to do is investigate the cause for the missing resources, > for example

Re: [EMAIL PROTECTED] Apache mod_rewrite/mod_proxy conflict?

2007-12-10 Thread Axel-Stephane SMORGRAV
er -Original Message- From: Axel-Stephane SMORGRAV [mailto:[EMAIL PROTECTED] Sent: Monday, December 10, 2007 8:30 PM To: users@httpd.apache.org Subject: RE: [EMAIL PROTECTED] Apache mod_rewrite/mod_proxy conflict? Judging from your problem description, specifically the fact that modifying the o

RE: [EMAIL PROTECTED] Apache mod_rewrite/mod_proxy conflict?

2007-12-10 Thread Axel-Stephane SMORGRAV
Judging from your problem description, specifically the fact that modifying the ordering of the LoadModule directives changes the behaviour of the server, you must be using Apache 1.3. >From Apache 2.0 on the order of execution of the various hooks is independent >of the order of LoadModule dir

RE: [EMAIL PROTECTED] Enquiry about Reserve Proxy

2007-12-10 Thread Axel-Stephane SMORGRAV
AS far as I can tell from the looks of your configuration, you are pretty much on top of things. What you need to do is investigate the cause for the missing resources, for example by looking at the access- and errorlogs to see what URLs are requested that return a HTTP 404. There may be URLs

RE: [EMAIL PROTECTED] plain HTTP to an SSL-enabled server port

2007-12-10 Thread Axel-Stephane SMORGRAV
Strictly speaking you are right about not needing two virtual hosts. One virtual host would be sufficient e.g. for the SSL stuff. Although there may not be any technical reason that requires it, I personally like to do things with virtual hosts rather than at the server config level. I therefore

RE: [EMAIL PROTECTED] plain HTTP to an SSL-enabled server port

2007-12-10 Thread Axel-Stephane SMORGRAV
You need to create 2 virtual hosts: one for port 80 where SSL is NOT enabled, and one on port 443 where SSL is enabled. You will also need two Listen directives: one for each of ports 80 and 443. Listen *:80 Listen *:443 ServerName my.server.com:443 SSLCertificateFile /sslcerts/crt

RE: [EMAIL PROTECTED] Reverse proxy cache control problems

2007-12-09 Thread Axel-Stephane SMORGRAV
You are exactly right. However, the real question is: why does the request contain that max-age directive? Returning a s-max-age should not prevent the cache from revalidating the response with the origin server. To get the best performance you want to 1. avoid having the browser revalidating

RE: [EMAIL PROTECTED] Intelligent/automatic cache expiry based on mtime

2007-12-07 Thread Axel-Stephane SMORGRAV
mtime On Dec 7, 2007 11:25 AM, Axel-Stephane SMORGRAV <[EMAIL PROTECTED]> wrote: > Sorry for being crude, but why don't you just read the manual (mod_expires) ?? > > ExpiresByType image/jpeg "modification plus 1 day" Because this is doing something different to what I

RE: [EMAIL PROTECTED] Intelligent/automatic cache expiry based on mtime

2007-12-07 Thread Axel-Stephane SMORGRAV
Sorry for being crude, but why don't you just read the manual (mod_expires) ?? ExpiresByType image/jpeg "modification plus 1 day" I cannot recall that RFC2616 specifies exactly how the e-tag is computed, so I do not think that you can assume that the modification date will necessarily be part

RE: [EMAIL PROTECTED] Reverse proxy cache control problems

2007-12-06 Thread Axel-Stephane SMORGRAV
Could you possibly post the headers returned by http://localhost:5050/cachetest/jsp/cacheable/main.jsp along with your proxy configuration directives? The request headers could also be relevant. If you use Mozilla Firefox, you can obtain these headers using the add-on LiveHTTPHeaders. -ascs

RE: [EMAIL PROTECTED] HttpURLConnection - java.net.ConnectException: Connection timed out

2007-12-06 Thread Axel-Stephane SMORGRAV
Just a wild shot: 1. Verify that the URL you try to connect to ( _sServerURL+"/wsTestServiceServlet" ) is correct ( e.g. http://my.tomcat.com:8080/wsTestServiceServlet ) 2. Test the network connectivity between your java client host and the hosts on which Tomcat and Axis are running. To do so,

[EMAIL PROTECTED] RE: Analyzing access and error logs

2007-12-06 Thread Axel-Stephane SMORGRAV
Please do not cross-post to the users and dev lists. A lot of the people who read the dev list also read the users list anyway. Wrt your question, it probably depends on what you expect from such a tool. You could however start by taking a look at awstats. -ascs

RE: [EMAIL PROTECTED] Invalid URI in request

2007-12-04 Thread Axel-Stephane SMORGRAV
Now it is pretty clear that the problem is the missing method in the request. The URL should be prefixed with GET, PUT, POST or some other HTTP method. >From RFC 2616: Method = "OPTIONS"; Section 9.2 | "GET"; Section 9.3

RE: [EMAIL PROTECTED] apachectl startssl returns "assertion 'rv == APR_SUCCESS" failed'

2007-12-04 Thread Axel-Stephane SMORGRAV
You can circumvent this problem by configuring your host to use a DNS server for name resolution, ie. configure nsswitch.conf with "host: file dns" and have a resolv.conf with appropriate contents. The reason why you experience this error only on one of your servers is because one is configured

RE: [EMAIL PROTECTED] Moving Apache Binary

2007-11-16 Thread Axel-Stephane SMORGRAV
Actually you also have a third possibility which would allow you to run your apache from /home/abc/apache. You would need to do the following (from the top of my head): * Edit the file /home/abc/apache/bin/envvars and modify the paths as appropriate * Edit the file /home/abc/apache/bin/apachectl

RE: [EMAIL PROTECTED] mainting session cookies with a reverse proxy

2007-11-15 Thread Axel-Stephane SMORGRAV
Since your ProxyPass directive does not modify the URL path, you will only need ProxyPassReverseCookieDomain. Rather than working in the dark, the best approach is to use a tool such as Firefox LiveHTTPheaders, or HTTPWatch (MSIE) to observe the cookies that are returned by the application serv

RE: [EMAIL PROTECTED] Lingering children tying up file handles

2007-11-14 Thread Axel-Stephane SMORGRAV
I wonder whether this could be related to a discussion on the dev list that took place around the last August-September timeframe, about the handling of file handles across restarts on different OS platforms. You can find the thread here: http://www.mail-archive.com/[EMAIL PROTECTED]/msg37412.h

RE: [EMAIL PROTECTED] Mod_Rewrite from old dynamic page

2007-11-13 Thread Axel-Stephane SMORGRAV
Try this instead: RewriteCond %{QUERY_STRING} ^([^,]*) [NC] If it still does not work, bump the RewriteLogLevel to 9 and look for answers in the log file. -ascs -Message d'origine- De : Ki Song [mailto:[EMAIL PROTECTED] Envoyé : mardi 13 novembre 2007 23:40 À : Apache List Objet :

RE: [EMAIL PROTECTED] apache2 mod_rewrite + mod_proxy internal proxying problem

2007-11-13 Thread Axel-Stephane SMORGRAV
You cannot use that combination of RewriteRule and ProxyPass. The fact is that ProxyPass actually gets the upper hand on RewriteRule. Furthermore you MUST specify the destination host in your RewriteRule when using the P flag. I would also drop the IfModule tests for any module which is necessar

RE: [EMAIL PROTECTED] Segmentation Fault

2007-11-13 Thread Axel-Stephane SMORGRAV
As far as I understand you cannot use PHP with an Apache using multi-threaded MPM. You can determine the MPM of your Apache by executing "httpd -l" or requesting http://myserver/server-info (assuming you have activated mod_info). If the module list contains worker.c or event.c, it is likely th

RE: [EMAIL PROTECTED] Using a proxy manually from a webbrowser?

2007-11-11 Thread Axel-Stephane SMORGRAV
nvoyé : jeudi 8 novembre 2007 17:48 À : users@httpd.apache.org Objet : RE: [EMAIL PROTECTED] Using a proxy manually from a webbrowser? --- Axel-Stephane SMORGRAV <[EMAIL PROTECTED]> wrote: > > Well there are 8 lines about implementation issues and 2 lines of > warning. I would not cal

RE: [EMAIL PROTECTED] apache as non-root

2007-11-08 Thread Axel-Stephane SMORGRAV
I understand that everything is black or white to you, and there are no shades of grey. Good for you. -ascs -Message d'origine- De : Michael McGlothlin [mailto:[EMAIL PROTECTED] Envoyé : jeudi 8 novembre 2007 17:17 À : users@httpd.apache.org Objet : Re: [EMAIL PROTECTED] apache as no

RE: [EMAIL PROTECTED] Using a proxy manually from a webbrowser?

2007-11-08 Thread Axel-Stephane SMORGRAV
Well there are 8 lines about implementation issues and 2 lines of warning. I would not call that a lecture... -ascs -Message d'origine- De : Martin Fick [mailto:[EMAIL PROTECTED] Envoyé : jeudi 8 novembre 2007 17:08 À : users@httpd.apache.org Objet : RE: [EMAIL PROTECTED] Using a proxy

RE: [EMAIL PROTECTED] apache as non-root

2007-11-08 Thread Axel-Stephane SMORGRAV
users@httpd.apache.org Objet : Re: [EMAIL PROTECTED] apache as non-root On Nov 8, 2007 3:50 PM, Axel-Stephane SMORGRAV <[EMAIL PROTECTED]> wrote: > -Message d'origine- > De : Krist van Besien [mailto:[EMAIL PROTECTED] > Envoyé : jeudi 8 novembre 2007 15:14 > À : users@h

RE: [EMAIL PROTECTED] apache as non-root

2007-11-08 Thread Axel-Stephane SMORGRAV
-Message d'origine- De : Krist van Besien [mailto:[EMAIL PROTECTED] Envoyé : jeudi 8 novembre 2007 15:14 À : users@httpd.apache.org Objet : Re: [EMAIL PROTECTED] apache as non-root > You could use a wrapper script (as I do) that the user can't change. You could, but AFAICS the only point

RE: [EMAIL PROTECTED] apache as non-root

2007-11-08 Thread Axel-Stephane SMORGRAV
-Message d'origine- >De : [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] De la part de Joshua Slive >Envoyé : jeudi 8 novembre 2007 14:56 >À : users@httpd.apache.org >Objet : Re: [EMAIL PROTECTED] apache as non-root > >On Nov 8, 2007 7:11 AM, Axel-Stephane SMORGRAV &l

RE: [EMAIL PROTECTED] apache as non-root

2007-11-08 Thread Axel-Stephane SMORGRAV
I think you would need to elaborate on that statement. Frankly I can see a few differences, but I am not sure whether those are what you were thinking about. Apache also does a chuid/chgid effectively changing the UID/GID of the process to something which is hopefully not privileged. Whether Ap

RE: [EMAIL PROTECTED] Using a proxy manually from a webbrowser?

2007-11-07 Thread Axel-Stephane SMORGRAV
you're cruising for a bruising. The only way I can imagine it would possible to achieve this would be by creating a reverse proxy. First of all, even if this is possible using mod_rewrite, you will not be able to rewrite the Location headers (ProxyPassReverse) to make redirects work correctly

RE: [EMAIL PROTECTED] Allowed path in VHosts

2007-11-06 Thread Axel-Stephane SMORGRAV
DocumentRoot ?? -ascs -Message d'origine- De : Alberto García Gómez [mailto:[EMAIL PROTECTED] Envoyé : mardi 6 novembre 2007 19:18 À : users@httpd.apache.org; [EMAIL PROTECTED] Objet : [EMAIL PROTECTED] Allowed path in VHosts Is there some directive that configure a vistual host to o

RE: [EMAIL PROTECTED] RE: Apache + DEFLATE : Does not work

2007-11-06 Thread Axel-Stephane SMORGRAV
I have not had much luck using AddOutputFilterByType either. You would be better off using mod_filter. Although mod_filter is not in the 2.0 branch, it is possible to compile it for 2.0. 1. Replace ~/src/httpd-2.0.59/include/util_filter.h with util_filter.h from Apache 2.2.x (I used 2.2.4) 2

RE: [EMAIL PROTECTED] Suggestion for apachectl

2007-11-04 Thread Axel-Stephane SMORGRAV
You can certainly do something like what you propose in your apachectl, but you also probably want to avoid doing anything as clumsy as ps -ef | grep `cat /usr/apache/logs/httpd.pid` | grep -v grep > /dev/null 2>&1 Rather try something like kill -0 `cat /usr/apache/logs/httpd.pi

RE: [EMAIL PROTECTED] rewrite or proxypass?

2007-10-17 Thread Axel-Stephane SMORGRAV
Could it possibly be this simple?? You probably want to have two virtual hosts, one for port 80 and one for port 8080. In the former, add the following lines: ProxyRequests Off ProxyPass http://www.ourcompany.com/ http://www.ourcompany.com:8080/ ProxyPassReverse http://www.ourcompany.com/ http://

RE: [EMAIL PROTECTED] Problems with ProxyPassReverseCookieDomain

2007-10-15 Thread Axel-Stephane SMORGRAV
ot; (no leading period) would only be sent to example.com. Browsers should add the leading period if domain is specified. solprovider On 10/15/07, Axel-Stephane SMORGRAV <[EMAIL PROTECTED]> wrote: > The behaviour observed by the original poster is correct: www.example.com is > the host FQDN -

RE: [EMAIL PROTECTED] Problems with ProxyPassReverseCookieDomain

2007-10-15 Thread Axel-Stephane SMORGRAV
The behaviour observed by the original poster is correct: www.example.com is the host FQDN - not the domain. The cookie _domain_ is example.com. A cookie which domain is example.com will be submitted by the UA to both www1.example.com and www.example.com. The conclusion is that no rewriting of

RE: [EMAIL PROTECTED] 502 Error

2007-10-09 Thread Axel-Stephane SMORGRAV
HTTP 502 means that your proxy cannot connect to the backend. Off hand I cannot see any reason why it should treat requests from IE6 differently than those from FF/Safari. 1. Try to access the backend directly and see how it behaves 2. Check your rewrite log -ascs -Message d'origine

RE: [EMAIL PROTECTED] Re: Struggling with Apache 2.0.54 & mod_rewrite

2007-10-08 Thread Axel-Stephane SMORGRAV
Did not test this, but if you are looking for compactness, try this out: RewriteEngine On RewriteCond %{HTTP_USER_AGENT} CFNetwork [OR] RewriteCond %{HTTP_USER_AGENT} AppTapp RewriteRule ^iphone-apps(-test)?/$ iphone-apps$1/repo.cache [L] RewriteRule ^iphone-apps(-test)?/$ iphone-apps/info/ [L]

RE: [EMAIL PROTECTED] mod_disk_cache and mod_rewrite

2007-10-08 Thread Axel-Stephane SMORGRAV
I do something similar. I rewrite the URL path prefixing it with /cache or /nocache and do a recursive request to the _same_ vhost in which I have "cacheenable disk /cache". Then I strip the prefix before passing it on to the backend -ascs -Message d'origine- De : Vincent Bray [mailt