Re: [users@httpd] Preventing Synology NAS WebStaion from overriding my customization

2025-06-01 Thread Daniel Ferradal Márquez
work around a lot of times but my config survives now. Lance On May 31, 2025, at 4:24 AM, Daniel Ferradal Márquez wrote:  On 15/4/25 16:00, Wilkinson, J Lance wrote:  Long time since I posted a query -- it's been 8+ years since retirement. Brought up my first Apache 2.4 httpd in that

Re: [users@httpd] Preventing Synology NAS WebStaion from overriding my customization

2025-05-31 Thread Daniel Ferradal Márquez
On 15/4/25 16:00, Wilkinson, J Lance wrote:  Long time since I posted a query -- it's been 8+ years since retirement.   Brought up my first Apache 2.4 httpd in that time, this time in a Synology NAS using WebStation.   Anybody found a way to counter WebStation's overwriting my http.conf

Re: [users@httpd] Crash in Version 2.4.57 with OpenSSL 3.1.4

2025-04-03 Thread Daniel Ferradal Márquez
On 3/4/25 20:43, Soujanya Rai wrote: Thank you for your response. When you say stable 3.0.x, are those multi-threaded deployments? Have you come across any similar issues with the 3.x version? Until I find enough data to corroborate the issues with 3.1, it might be hard to make the version sw

Re: [users@httpd] Crash in Version 2.4.57 with OpenSSL 3.1.4

2025-04-03 Thread Daniel Ferradal Márquez
On 27/3/25 19:21, Soujanya Rai wrote: Hello, Apache HTTP Version: 2.4.57 In our Org, we are currently in the process of upgrading OpenSSL version to 3.1.6 and httpd is being run as a multi-threaded process. Occasionally we are seeing crashes with backtrace in the OpenSSL code, usually relat

Re: [users@httpd] RE: proxy urlmapping outside of the path

2025-02-02 Thread Daniel Ferradal Márquez
On 1/2/25 0:24, Marc wrote: I have a config and actually only want to allow access to a specific path xxx of the proxied host nothing else. However that path on the proxied host is refering to files eg in the root ProxyPreserveHost Off ProxyAddHeaders On SetOutputFilter proxy-h

Re: [users@httpd] mod_remoteip and ErrorLogFormat

2024-10-20 Thread Daniel Ferradal Márquez
On 19/10/24 11:50, Gretton, Liam wrote: httpd 2.4.57-11 on Rocky 9 here. I've been trying to get ErrorLogFormat to log the client IP address rather than that of my proxy's, but it doesn't seem to work. For LogFormat it is working as expected. My suspicion is that mod_remoteip doesn't actual

Re: [users@httpd] Apache start up error after compiling OpenSSL and PHP8.1.29

2024-10-16 Thread Daniel Ferradal Márquez
On 14/10/24 12:48, Jack Swale wrote: httpd: Syntax error on line 150 of /usr/local/apache2/conf/httpd.conf: Cannot load modules/libphp.so into server: ld.so.1: httpd: fatal: relocation error: file /usr/local/apache2/modules/libphp.so: symbol EVP_md2: referenced symbol not found /usr/local/apa

Re: [users@httpd] Strange change in behavior of web page

2024-10-09 Thread Daniel Ferradal Márquez
On 9/10/24 17:59, Freek de Kruijf wrote: httpd does not interfere with your content. Perhaps the issue lies with https://, and some resources not being loaded. In any case, asking a web/css/design forum/mailing list would yield better results. I also tried to use Microsoft Edge and it also

Re: [users@httpd] mod_proxy_hcheck with Istio

2024-10-04 Thread Daniel Ferradal Márquez
On 30/9/24 10:50, Stanislav Samek wrote: Hi, I don't think that there is an issue with ssl. We have SSLProxyEngine turned on and also a backend name match with CN. In attachment you can find output from the curl command. Thank you What I would make sure in your case is SSLProtocols set u

Re: [users@httpd] RewriteMap and combining RewriteRules

2024-09-28 Thread Daniel Ferradal Márquez
On 14/7/24 19:56, Dave Wreski wrote: The problem is that it appears RewriteMap must consider ALL possibilities. It doesn't then fall back to actually see if the URL is valid or another RewriteRule exists. As I see it, you must define other patterns that will not fall into the rewritemap fi

Re: [users@httpd] Tomcat anibm semeru

2024-09-28 Thread Daniel Ferradal Márquez
On 23/9/24 16:52, andreas.moro...@wobi.bz.it wrote: Hello, we would like to use tomcat with ibm semeru as jre. I searched the web, but found no documentation. Is this combination supported and is there documentation on how to configure it? Greetings Andreas Although this is the user list

Re: [users@httpd] mod_proxy_hcheck with Istio

2024-09-28 Thread Daniel Ferradal Márquez
On 24/9/24 8:25, Stanislav Samek wrote: ... Probably it will be a problem that Istio is exposing endpoints in HTTP/2 revision. Don't you have a problem with this? Here is part of our configuration:   ProxyPassMatch ^/foobar/v1/(.*)$  balancer://application/api/$1   ProxyPassReverse ^/foobar

Re: [users@httpd] Flexible Worker Configuration for Dynamic Shared Object (DSO) Deployment

2024-04-27 Thread Daniel Ferradal Márquez
On 18/04/2024 16:50, Sarkar Tarun Kumar (ETAS-SEC/XPC-Bo1) wrote: Hello, ... My requirement is treating one of the services, specifically Service4, differently. Apache should only spawn a single instance of Service4 and refrain from terminating the process until Apache server restarts. Mea

Re: [users@httpd] RewriteMap and patterns

2024-03-15 Thread Daniel Ferradal Márquez
On 12/03/2024 20:45, Dave Wreski wrote: If I understood correctly you want the resulting path to be loaded by your php-fpm backend. Do you have a fallbackresource, such as: "FallbackResource /index.php" or similar? If not, then you may want to add it. Yes, that's correct, I'm using php-fp

Re: [users@httpd] Question Error apache

2023-11-09 Thread Daniel Ferradal
rror from Apache? > If Apache HTTPD shows nothing in its error.log, then your SIEM is not functioning correctly. -- Daniel Ferradal HTTPD Project #httpd help at Libera.Chat

Re: [users@httpd] Apache 2.4 Balancer still sends requests to the server with status "Init Err"

2023-11-03 Thread Daniel Ferradal
until the first has failed, so at least you will get one failure for 30 seconds and a wait of 10 every time httpd retries a backend that is failing. Someone may correct me though, but I haven't managed with your setup, perhaps reaching this point you can try with mod_proxy_hcheck. Although ti

Re: [users@httpd] Apache 2.4 Balancer still sends requests to the server with status "Init Err"

2023-11-01 Thread Daniel Ferradal
them to the other server in the cluster? > Thank you very much in advance for your help. > > "failontimeout" by default is off, you may want to turn it on for your testing purposes. -- Daniel Ferradal HTTPD Project #httpd help at Libera.Chat

Re: [users@httpd] Is it true that Nginx is faster, more secure and better than Apache?

2023-09-30 Thread Daniel Ferradal
> >> Why are they trollish? I am curious to learn more. >> >> Perhaps because you asked the same question in 2021, you got a very constructive response and still you are asking the same thing two years later... -- Daniel Ferradal HTTPD Project #httpd help at Libera.Chat

Re: [users@httpd] Inquiry about apache httpd compile option

2023-09-20 Thread Daniel Ferradal
mpiled along with httpd. So check the output of ./configure --help and test different options according to your needs and test in a non system path (at least at first until you get to know what you are doing), that is: ./configure --prefix=/home/your-user/httpd-test .. -- Daniel Ferradal HTTPD Project #httpd help at Libera.Chat

Re: [users@httpd] How do I choose the best settings for the Apache Server?

2023-09-15 Thread Daniel Ferradal
El vie, 15 sept 2023 a las 13:36, Daniel Ferradal () escribió: > > When I probably recommended MaxSpareThreads == to MaxRequestWorkers was > due to Apache httpd with third party modules not restarting gracefully, > that along to MaxConnectionsPerChild 0 would prevent HTTPD fr

Re: [users@httpd] How do I choose the best settings for the Apache Server?

2023-09-15 Thread Daniel Ferradal
MaxConnectionsPerChild 0 would prevent HTTPD from trying to restart them. Where did you get this? Also I keep wondering why people assign so many processes, StartServers 16? In a threaded mpm? Why not just assign just 2 or even 4, and assign 100, 200 worker threads each? -- Daniel Ferradal HTTPD Project #httpd help at Libera.Chat

Re: [users@httpd] Error log output specification

2023-09-06 Thread Daniel Ferradal
- > To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org > For additional commands, e-mail: users-h...@httpd.apache.org > > In my experience from a certain version is that the error does not repeat at all, at least for a long period of time. Lost track of which version

Re: [users@httpd] loading shop.example.com in www.test.com/shop/

2023-08-20 Thread Daniel Ferradal
ns in virtualhost, that would be the simplest, less painful, more straightforward way to do it generally. -- Daniel Ferradal HTTPD Project #httpd help at Libera.Chat

Re: [users@httpd] Enable two way SSL on Apache httpd web server.

2023-08-18 Thread Daniel Ferradal
yClient require and SSLCACertificateFile /path/to/list-of-cas.crt In this second directives you just need to add the root CA/s of the CA that signs your client certificates. -- Daniel Ferradal HTTPD Project #httpd help at Libera.Chat

Re: [users@httpd] allow general access after 1 auth

2023-08-13 Thread Daniel Ferradal
El dom, 13 ago 2023 14:45, Will Fatherley escribió: > > >> No, that doesn't satisfy the following: >> >> > If someone authenticates on https://www.example.com/webapp, the url is >> available for everyone. > > >> Could the complicating allow directive sequence be placed in an if/else > type of sc

Re: [users@httpd] loading shop.example.com in www.test.com/shop/

2023-08-04 Thread Daniel Ferradal
verseCookiePath. What it is for sure is you have low chances of getting away without paying close attention to the behaviour from your application. -- Daniel Ferradal HTTPD Project #httpd help at Libera.Chat

Re: [users@httpd] Need help with correlating HTTP request with a database call

2023-07-30 Thread Daniel Ferradal
can have your usual log and add another format and log to capture those you want to focus related to the database you mention. Cheers -- Daniel Ferradal HTTPD Project #httpd help at Libera.Chat

Re: [users@httpd] Cannot authenticate (after six years)

2023-07-26 Thread Daniel Ferradal
gt; AH00035: access to /~hoff/index.html denied (filesystem path '/home/hoff/public_html/index.html') because search permissions are missing on a component of the path - Perhaps /home has different permissions that do not allow apache user travel to /home/hoff/public_html/index.htmlor pe

Re: [users@httpd] Re: Apache2 certificate authentication

2023-07-25 Thread Daniel Ferradal
e server only allows TLSv1.2 you won't have this issue. As per the reason why browsers are doing this, can't remember it exactly what it is, a google search should shed some light I guess. -- Daniel Ferradal HTTPD Project #httpd help at Libera.Chat

Re: [users@httpd] RewriteRule and priorities

2023-07-25 Thread Daniel Ferradal
)(.+) /resources/blog/$1 [L,R=301] (not negative lookahead group is not captured therefore it generates no variable value. When dealing with regular expressions a site or somewhere where to test them is ideal too, I fancy debuggex.com in PCRE mode for example. -- Daniel Ferradal HTTPD Project #httpd help at Libera.Chat

Re: [users@httpd] Double or chained proxy with mod_proxy

2023-06-27 Thread Daniel Ferradal
e mixing protocols, like reverse proxy responds to https and you have set up connection as http or similar, that is one of the most simple cases of "bad request", or maybe missing "SSLProxyEngine on" directive when backend you are proxying to uses SSL/TLS. In any case if you don&#

Re: [users@httpd] Re: [EXTERNAL] Re: [users@httpd] OCSP Stapling Configuration Setup

2023-04-18 Thread Daniel Ferradal
t require in a path and the request going for another and then that directive having no effect, etc. Also turn "SSLOCSPOverrideResponder off" for these tests. -- Daniel Ferradal HTTPD Project #httpd help at Libera.Chat

Re: [users@httpd] OCSP Stapling Configuration Setup

2023-04-17 Thread Daniel Ferradal
13 10:42:14.741644 2023] [ssl:error] [pid 1812:tid > 139698106267200] AH02969: stapling_check_response: response has certificate > status revoked (reason: n/a) for serial number > > —— > > > > In the information you provide you are at least missing the Location with: SSLVerifyclient require Do you have that? -- Daniel Ferradal HTTPD Project #httpd help at Libera.Chat

Re: [users@httpd] old gen workers sticking around post 2.4.49

2023-04-11 Thread Daniel Ferradal
I'd say much better to move to mpm_event and and php-fpm, ridding httpd of PHP module and it's quirks in the process. El mar, 11 abr 2023 23:24, escribió: > I wrote: > > I'll try to reproduce the problem without mod_php. > and: > > Using "dehydrated -c -x" to drive my testing, I've hit the 7-day

Re: [users@httpd] SSL_CLIENT_CERT sent empty.

2023-04-08 Thread Daniel Ferradal
/mnemo/> > [image: linkedin] <https://twitter.com/_Mnemo> > [image: Instagram] <https://www.instagram.com/mnemo_ciber/> > [image: Youtube] <https://www.youtube.com/user/GrupoMNEMO> > -- Daniel Ferradal HTTPD Project #httpd help at Libera.Chat

Re: [users@httpd] Compile with different version of ssl

2023-03-29 Thread Daniel Ferradal
rying to compile with --with-ssl=../openssl-1.1.1t, but it is being > ignored. How do I get this to work? -- Daniel Ferradal HTTPD Project #httpd help at Libera.Chat - To unsubscribe, e-mail: users-unsubscr...@httpd.apache

Re: [users@httpd] Apache2 fails to listen on open port

2022-12-15 Thread Daniel Ferradal
ider our wiki article for this: > > > > > > https://cwiki.apache.org/confluence/display/HTTPD/CouldNotBindToAddress > > > > > > > > > > > - > > > > To unsubscribe, e-ma

Re: [users@httpd] Bug? LDAPRetryDelay from mod_ldap uses the wrong unit

2022-12-02 Thread Daniel Ferradal
ntial and are intended solely for use by the > addressee. Read more here. > <https://sites.google.com/view/dcu-email-disclaimer>* > > > > <https://www.facebook.com/DCU/> <https://twitter.com/DCU> > <https://www.linkedin.com/company/dublin-city-university> > <https://www.instagram.com/dublincityuniversity/?hl=en> > <https://www.youtube.com/user/DublinCityUniversity> > -- Daniel Ferradal HTTPD Project #httpd help at Libera.Chat

Re: [users@httpd] mod proxy hcheck not observing timeout value

2022-12-02 Thread Daniel Ferradal
ines do represent >> workers which I presume corresponds with the worker object code looks to be >> pulling the value from. >> >> Kind regards >> >> Ben >> >> On Thu, 17 Nov 2022 at 18:35, Daniel Ferradal >> wrote: >> >>> Hello, >

Re: [users@httpd] Error AH03490: scoreboard is full, not at MaxRequestWorkers.Increase ServerLimit

2022-11-28 Thread Daniel Ferradal
24/11/2022 6:48 pm, Daniel Ferradal wrote: > > Some script is probably hogging the workers and not letting them close so if > you must, just restart, but judging by the amount of traffic you seem to have > at the time I would truncate in logrotate and not restart or reload the > se

Re: [users@httpd] Error AH03490: scoreboard is full, not at MaxRequestWorkers.Increase ServerLimit

2022-11-23 Thread Daniel Ferradal
Some script is probably hogging the workers and not letting them close so if you must, just restart, but judging by the amount of traffic you seem to have at the time I would truncate in logrotate and not restart or reload the server at all. El jue, 24 nov 2022 2:38, Mike Dewhirst escribió: > On

Re: [users@httpd] OCSP Stapling Logs with mod_md

2022-11-17 Thread Daniel Ferradal
gt; Is there any way to have these entries logged in the error log as well? > > > > Also, could the information in job.json be accessed over /md-status even when > there are no mod_md-managed certificates (currently the response only > contains the mod_md version string

Re: [users@httpd] mod proxy hcheck not observing timeout value

2022-11-17 Thread Daniel Ferradal
> Website: www.codeweavers.net > > > > > > Barn 4, Dunston Business Village, ST18 9AB. Registered in England and > Wales > > No. 04092394 VAT registration no. 974 9705 63 > > > -- Daniel Ferradal HTTPD Project #httpd help at Libera.Chat

Re: [users@httpd] firefox shows default site page

2022-11-11 Thread Daniel Ferradal
; Allow from all > Require all granted > > > > Require all denied > > > RewriteEngine on > RewriteCond %{SERVER_NAME} =mail.openmbox.net > RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,NE,R=permanent] > > > ------

Re: [users@httpd] Questionable URL being sent to our server

2022-11-01 Thread Daniel Ferradal
t there. Maybe a Dos attack or > worse. Anyone have a clue what is being attempted? > > > > Sketchy URL: > https://www.northwestern.edu/accounting-scrvices/Annual%252ORepothtm > > > > Darryl Baker, GSEC, GCLD (he/him/his) > > Sr. System Administrator &g

Re: [users@httpd] Tuning TLS of reverse proxy

2022-10-15 Thread Daniel Ferradal
mcat will support, you just set SSLProxyProtocol or SSLProxyCipherSuite directives accordingly then. -- Daniel Ferradal HTTPD Project #httpd help at Libera.Chat - To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org

Re: [users@httpd] Apache PHP-FPM Integration with mod_proxy_fcgi and multiple Users

2022-10-15 Thread Daniel Ferradal
ontains rewrite rules in it's default htaccess file or also a > simple nextcloud installation contains e.g. "SetEnvIfNoCase" which both > will stop working. > It may be tedious work but it does not break anything if you integrate them in virtualhost. It pays off to do things

Re: [users@httpd] NameVirtualHost fails

2022-07-07 Thread Daniel Ferradal
Yes, and that config is a good compendium of bad advice and deprecated directives. El mié, 6 jul 2022 14:28, Frank Gingras escribió: > Paul, > > Not sure how your example helps with the OP issue at all. > > On Wed, 6 Jul 2022 at 06:40, Paul Kudla (SCOM.CA Internet Services Inc.) < > p...@scom.c

Re: [users@httpd] Slow web site response..PHP-8/CSS/Apache/

2022-06-23 Thread Daniel Ferradal
ience to share how to trouble shoot or what may the > root cause making this site response too slow. > > Kindly shed some light here. Any hints where to start most welcome.. > > Any more data needed pls let me know ..I can share . > > Thanks in advance, > Krish. > -- Daniel Ferradal HTTPD Project #httpd help at Libera.Chat

Re: [users@httpd] Issue with Apache 2.4.51 hanging

2021-10-26 Thread Daniel Ferradal
; Skype: patrick_verdon > > > > This entire communication is sent on behalf of > > Youreko Ltd and is strictly confidential to and > > for the sole use of the intended addressee. > > > > Registered in England - 7448349 > > > > > > > > On Tue,

Re: [users@httpd] Issue with Apache 2.4.51 hanging

2021-10-26 Thread Daniel Ferradal
30:47 >>>>>>> Server's Module Magic Number: 20120211:118 >>>>>>> Server loaded: APR 1.6.3, APR-UTIL 1.5.4 >>>>>>> Compiled using: APR 1.6.3, APR-UTIL 1.5.4 >>>>>>> Architecture: 64-bit >>>>>>> Server MPM: prefork >>>>>>> threaded: no >>>>>>> forked: yes (variable process count) >>>>>>> Server compiled with >>>>>>> -D APR_HAS_SENDFILE >>>>>>> -D APR_HAS_MMAP >>>>>>> -D APR_HAVE_IPV6 (IPv4-mapped addresses enabled) >>>>>>> -D APR_USE_SYSVSEM_SERIALIZE >>>>>>> -D APR_USE_PTHREAD_SERIALIZE >>>>>>> -D SINGLE_LISTEN_UNSERIALIZED_ACCEPT >>>>>>> -D APR_HAS_OTHER_CHILD >>>>>>> -D AP_HAVE_RELIABLE_PIPED_LOGS >>>>>>> -D DYNAMIC_MODULE_LIMIT=256 >>>>>>> -D HTTPD_ROOT="/etc/httpd" >>>>>>> -D SUEXEC_BIN="/usr/sbin/suexec" >>>>>>> -D DEFAULT_PIDLOG="/var/run/httpd/httpd.pid" >>>>>>> -D DEFAULT_SCOREBOARD="logs/apache_runtime_status" >>>>>>> -D DEFAULT_ERRORLOG="logs/error_log" >>>>>>> -D AP_TYPES_CONFIG_FILE="conf/mime.types" >>>>>>> -D SERVER_CONFIG_FILE="conf/httpd.conf" >>>>>>> >>>>>>> # httpd -M >>>>>>> Loaded Modules: >>>>>>> core_module (static) >>>>>>> so_module (static) >>>>>>> http_module (static) >>>>>>> access_compat_module (shared) >>>>>>> actions_module (shared) >>>>>>> alias_module (shared) >>>>>>> allowmethods_module (shared) >>>>>>> auth_basic_module (shared) >>>>>>> auth_digest_module (shared) >>>>>>> authn_anon_module (shared) >>>>>>> authn_core_module (shared) >>>>>>> authn_dbd_module (shared) >>>>>>> authn_dbm_module (shared) >>>>>>> authn_file_module (shared) >>>>>>> authn_socache_module (shared) >>>>>>> authz_core_module (shared) >>>>>>> authz_dbd_module (shared) >>>>>>> authz_dbm_module (shared) >>>>>>> authz_groupfile_module (shared) >>>>>>> authz_host_module (shared) >>>>>>> authz_owner_module (shared) >>>>>>> authz_user_module (shared) >>>>>>> autoindex_module (shared) >>>>>>> cache_module (shared) >>>>>>> cache_disk_module (shared) >>>>>>> cache_socache_module (shared) >>>>>>> data_module (shared) >>>>>>> dbd_module (shared) >>>>>>> deflate_module (shared) >>>>>>> dir_module (shared) >>>>>>> dumpio_module (shared) >>>>>>> echo_module (shared) >>>>>>> env_module (shared) >>>>>>> expires_module (shared) >>>>>>> ext_filter_module (shared) >>>>>>> filter_module (shared) >>>>>>> headers_module (shared) >>>>>>> http2_module (shared) >>>>>>> include_module (shared) >>>>>>> info_module (shared) >>>>>>> log_config_module (shared) >>>>>>> logio_module (shared) >>>>>>> macro_module (shared) >>>>>>> mime_magic_module (shared) >>>>>>> mime_module (shared) >>>>>>> negotiation_module (shared) >>>>>>> remoteip_module (shared) >>>>>>> reqtimeout_module (shared) >>>>>>> request_module (shared) >>>>>>> rewrite_module (shared) >>>>>>> setenvif_module (shared) >>>>>>> slotmem_plain_module (shared) >>>>>>> slotmem_shm_module (shared) >>>>>>> socache_dbm_module (shared) >>>>>>> socache_memcache_module (shared) >>>>>>> socache_shmcb_module (shared) >>>>>>> status_module (shared) >>>>>>> substitute_module (shared) >>>>>>> suexec_module (shared) >>>>>>> unixd_module (shared) >>>>>>> userdir_module (shared) >>>>>>> version_module (shared) >>>>>>> vhost_alias_module (shared) >>>>>>> watchdog_module (shared) >>>>>>> dav_module (shared) >>>>>>> dav_fs_module (shared) >>>>>>> dav_lock_module (shared) >>>>>>> lua_module (shared) >>>>>>> mpm_prefork_module (shared) >>>>>>> proxy_module (shared) >>>>>>> lbmethod_bybusyness_module (shared) >>>>>>> lbmethod_byrequests_module (shared) >>>>>>> lbmethod_bytraffic_module (shared) >>>>>>> lbmethod_heartbeat_module (shared) >>>>>>> proxy_ajp_module (shared) >>>>>>> proxy_balancer_module (shared) >>>>>>> proxy_connect_module (shared) >>>>>>> proxy_express_module (shared) >>>>>>> proxy_fcgi_module (shared) >>>>>>> proxy_fdpass_module (shared) >>>>>>> proxy_ftp_module (shared) >>>>>>> proxy_http_module (shared) >>>>>>> proxy_hcheck_module (shared) >>>>>>> proxy_scgi_module (shared) >>>>>>> proxy_uwsgi_module (shared) >>>>>>> proxy_wstunnel_module (shared) >>>>>>> ssl_module (shared) >>>>>>> cgi_module (shared) >>>>>>> php7_module (shared) >>>>>>> >>>>>>> # yum list | grep mod_ >>>>>>> lighttpd-mod_authn_gssapi.x86_64 1.4.53-1.36.amzn1 >>>>>>> amzn-updates >>>>>>> lighttpd-mod_authn_mysql.x86_64 1.4.53-1.36.amzn1 >>>>>>> amzn-updates >>>>>>> lighttpd-mod_authn_pam.x86_641.4.53-1.36.amzn1 >>>>>>> amzn-updates >>>>>>> lighttpd-mod_geoip.x86_641.4.53-1.36.amzn1 >>>>>>> amzn-updates >>>>>>> lighttpd-mod_mysql_vhost.x86_64 1.4.53-1.36.amzn1 >>>>>>> amzn-updates >>>>>>> mod_auth_kerb.x86_64 5.4-10.9.amzn1 >>>>>>> amzn-main >>>>>>> mod_auth_mellon.x86_64 0.13.1-1.6.amzn1 >>>>>>> amzn-updates >>>>>>> mod_auth_mysql.x86_641:3.0.0-18.10.amzn1 >>>>>>> amzn-main >>>>>>> mod_auth_pgsql.x86_642.0.3-10.1.5.amzn1 >>>>>>> amzn-main >>>>>>> mod_authz_ldap.x86_640.26-16.8.amzn1 >>>>>>> amzn-main >>>>>>> mod_dav_svn.x86_64 1.9.7-1.54.amzn1 >>>>>>> amzn-main >>>>>>> mod_fcgid.x86_64 2.3.9-1.6.amzn1 >>>>>>> amzn-main >>>>>>> mod_geoip.x86_64 1.2.7-1.2.amzn1 >>>>>>> amzn-main >>>>>>> mod_nss.x86_64 1.0.10-1.13.amzn1 >>>>>>> amzn-main >>>>>>> mod_perl.x86_64 2.0.7-7.28.amzn1 >>>>>>> amzn-updates >>>>>>> mod_perl-devel.x86_642.0.7-7.28.amzn1 >>>>>>> amzn-updates >>>>>>> mod_proxy_html.x86_643.1.2-7.3.amzn1 >>>>>>> amzn-main >>>>>>> mod_python26.x86_64 3.3.1-17.20.amzn1 >>>>>>> amzn-main >>>>>>> mod_python27.x86_64 3.3.1-17.20.amzn1 >>>>>>> amzn-main >>>>>>> mod_security.x86_64 2.8.0-5.27.amzn1 >>>>>>> amzn-main >>>>>>> mod_security_crs.noarch 2.2.8-2.5.amzn1 >>>>>>> amzn-main >>>>>>> mod_security_crs-extras.noarch 2.2.8-2.5.amzn1 >>>>>>> amzn-main >>>>>>> mod_ssl.x86_64 1:2.2.34-1.16.amzn1 >>>>>>> amzn-main >>>>>>> mod_wsgi-python26.x86_64 3.2-6.12.amzn1 >>>>>>> amzn-updates >>>>>>> mod_wsgi-python27.x86_64 3.2-6.12.amzn1 >>>>>>> amzn-updates >>>>>>> >>>>>>> *--* >>>>>>> >>>>>>> *Patrick Verdon | Founder* >>>>>>> Web: www.youreko.com >>>>>>> Mobile: +44 (0)7809 296438 >>>>>>> Skype: patrick_verdon >>>>>>> >>>>>>> This entire communication is sent on behalf of >>>>>>> Youreko Ltd and is strictly confidential to and >>>>>>> for the sole use of the intended addressee. >>>>>>> >>>>>>> Registered in England - 7448349 >>>>>>> >>>>>>> >>>>>> -- Daniel Ferradal HTTPD Project #httpd help at Libera.Chat

Re: [users@httpd] Re: Is it possible to override ... ?

2021-10-21 Thread Daniel Ferradal
nstances/apache_oam/foo" > > > . > . > . > > === > > But I am getting a Forbidden response. Also sometimes the browser seems to > "loop", adding "/index.html" to the end of the URL in the address bar. > > So I was wondering: Is there a way to accomplish what I am trying to do, > without disturbing the ?? > > Thanks, > Jim > -- Daniel Ferradal HTTPD Project #httpd help at Libera.Chat - To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org

Re: [users@httpd] Stupid question on mod_header

2021-10-06 Thread Daniel Ferradal
Probably because the header is being added later in a different sub-context. That is, at the time apache sets the header for virtual host there is no other header of the same name defined, so there is nothing to eliminate and set instead, but then the path for the reverse proxy to tomcat is being

Re: [users@httpd] Browsers appear to be ignoring 401 responses with WWW-Authenticate

2021-10-04 Thread Daniel Ferradal
se headers that should allow the > > browser to process the response? > > > > In this type of scenario, is there some other restriction that would > > prevent or cause the browser to not popup the login window, even though the > > requests and responses appear to be all right? > > > > Sorry about my description of this problem, but th

Re: [users@httpd] Avoiding host header exploit in apache

2021-08-27 Thread Daniel Ferradal
start.html";. > Server is not configured with any domain names, so I cant use ServerName and > UseCanonicalName directives to address the issue properly. > > Pls help me, how to check the Host header to listening address and take > cor

Re: [users@httpd] Bug in mod_proxy_balancer or just a bad configuration?

2021-06-17 Thread Daniel Ferradal
>> >> going back to http://myserver/goog redirects to Yahoo and dets a set-cookie >> RZROUTEID=.02 >> >> Nick >> >> On Tue, Jun 15, 2021 at 7:57 PM Nick Folino wrote: >>> >>> I thought that too, but if the rz proxypass was catching all

Re: [users@httpd] Bug in mod_proxy_balancer or just a bad configuration?

2021-06-15 Thread Daniel Ferradal
If I am looking at it correctly the order of the ProxyPass directives you defined is not the correct one, /sz defined first would be overriding /sz2. So sz2 should be defined first. Perhaps that's why you are getting wrong values ? (Browser cache or similar?) El mar., 15 jun. 2021 19:00, Nick Fol

Re: [users@httpd] [External] Re: [users@httpd] Struggling with "decryption failed or bad record mac" error

2021-06-14 Thread Daniel Ferradal
of RedHat 7.9), we have this random problem only > > from a customer that is using .net. In my opinion it should be a client > > problem but hard to demonstrate. > > Which specific directives do you want to see of httpd-ssl.conf? > > > > > > Matteo >

Re: [users@httpd] PreShared Key (PSK) possible? Configuration?

2021-05-31 Thread Daniel Ferradal
gt; -- >> "If I've told you once, I've told you a million times - stop exaggerating!" >> >>Please reply to the list; >> please *don't* CC >> m

Re: [users@httpd] Poor Load Balancer performance

2021-05-27 Thread Daniel Ferradal
you have received this message by mistake, > please notify the sender and proceed to its elimination, without spreading, > storing or copying its content. Print this email only if necessary. > > Le contenu de cet e-mail et de ses pièces jointes est strictement > confidentiel. Dans le cas où vous n'êtes pas le destinataire et avez reçu > ce message par erreur, veuillez en informer l'expéditeur et procéder à sa > suppression, sans diffuser, stocker ou copier son contenu. Imprimez cet > e-mail uniquement si nécessaire. > -- Daniel Ferradal HTTPD Project #httpd help at Libera.Chat

Re: [users@httpd] Struggling with "decryption failed or bad record mac" error

2021-05-23 Thread Daniel Ferradal
r, please notify the sender immediately and delete the original. Any > other use of the e-mail by you is prohibited. Where allowed by local law, > electronic communications with Accenture and its affiliates, including e-mail > and inst

Re: [users@httpd] Public viewing when it should be private

2021-05-19 Thread Daniel Ferradal
s and then served up for authenticated users? > > I'm not finding a way to avoid a second authentication process just to view > documentation that is private info for only authorized users > > (Fyi we have thousands of users that need access to this

Re: [users@httpd] Connect to a node instead of a cluster

2021-05-17 Thread Daniel Ferradal
can I > suppose I will need to map it to same real dir? > > Thanks, > Asif > > > On Mon, May 17, 2021 at 1:39 PM Daniel Ferradal > wrote: > >> Define a ProxyPass directive with a unique path pointing to one of the >> node you want to use >> >>

Re: [users@httpd] Connect to a node instead of a cluster

2021-05-17 Thread Daniel Ferradal
Define a ProxyPass directive with a unique path pointing to one of the node you want to use Hint ProyPass /adminpath/ http://server1/admin/ El lun., 17 may. 2021 19:03, escribió: > Hi All, > > I have a load balancer setup like below > > > BalancerMember http://msts1acnf001:8098 route=1 > Bala

Re: [users@httpd] Why so much difference in memory used per process in apache2 between two different systems

2021-05-17 Thread Daniel Ferradal
mos lo comuniques al remitente y procedas a su > eliminación, sin difundir, almacenar o copiar su contenido. Imprimir este > correo solo si es necesario. > > The content of this email and its attachments is strictly confidential. If > you are not the recipient and you have received this message by mistake, > please notify the sender and proceed to its elimination, without spreading, > storing or copying its content. Print this email only if necessary. > > Le contenu de cet e-mail et de ses pièces jointes est strictement > confidentiel. Dans le cas où vous n'êtes pas le destinataire et avez reçu > ce message par erreur, veuillez en informer l'expéditeur et procéder à sa > suppression, sans diffuser, stocker ou copier son contenu. Imprimez cet > e-mail uniquement si nécessaire. > -- Daniel Ferradal HTTPD Project #httpd help at Freenode

Re: [users@httpd] Is proxy to proxy improving the security?

2021-05-15 Thread Daniel Ferradal
The weakest link is always the application at the end of the chain. Reverse proxying is basically handing down the request to another server, so what really matters IMHO is what you expose of the application to the upper layers and what those who access it can do with it. Considering the applicati

Re: [users@httpd] Professional Product

2021-04-30 Thread Daniel Ferradal
co.uk/WildFly-Administration-Guide-Francesco-Marchioni/dp/8894038920 > > > > Best Regards > > > > back.button@aol. > > > > > > danawhite...@aol.com > > > -----

Re: [users@httpd] mod_proxy_hcheck response timeout?

2021-04-27 Thread Daniel Ferradal
then.. I just checked.. nothing, zero to the second worker. (I had previously stop|started apache and the module is even loaded from some other path to make sure I don't confuse one for the other...) El mar, 27 abr 2021 a las 12:55, Daniel Ferradal () escribió: > > Wow Yann, > > T

Re: [users@httpd] mod_proxy_hcheck response timeout?

2021-04-27 Thread Daniel Ferradal
imes to that /ping URI (not the rest of normal uri). So mod_proxy_hcheck should be disabling this worker constantly. Am I correct? If you need more information or some specific logging do not hesitate to ask. Cheers El lun, 26 abr 2021 a las 22:51, Yann Ylavic () escribió: > > Hi Daniel, &g

Re: [users@httpd] mod_proxy_hcheck response timeout?

2021-04-26 Thread Daniel Ferradal
Ahh, thanks now I understand. I appreciate your feedback. El lun, 26 abr 2021 a las 17:48, Suvendu Sekhar Mondal () escribió: > > Hello Daniel, > > On Mon, Apr 26, 2021 at 7:02 PM Daniel Ferradal wrote: > > > > Thanks for answering > > > > Can you please ela

Re: [users@httpd] mod_proxy_hcheck response timeout?

2021-04-26 Thread Daniel Ferradal
l the health check module is enhanced. -- Daniel Ferradal HTTPD Project #httpd help at Freenode - To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org

[users@httpd] mod_proxy_hcheck response timeout?

2021-04-22 Thread Daniel Ferradal
case as it does not seem to mention response timeout, rather than checks piling up. Thanks in advance -- Daniel Ferradal HTTPD Project #httpd help at Freenode - To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For

Re: [users@httpd] Random 500 errors

2021-04-20 Thread Daniel Ferradal
If rewriterules cause the error you would get the log in the httpd error log too. Possibly what you mention, php or whatever backend.. El mar, 20 abr 2021 a las 19:01, Dave Wreski () escribió: > > > > On 4/20/21 12:41 PM, Daniel Ferradal wrote: > > We can just speculate here

Re: [users@httpd] Random 500 errors

2021-04-20 Thread Daniel Ferradal
We can just speculate here to those questions. Rule of thumb if not showing in httpd error log, not httpd error. El mar, 20 abr 2021 a las 15:59, Dave Wreski () escribió: > > > > On 4/20/21 8:54 AM, Daniel Ferradal wrote: > > That's the key then, you are probably reverse

Re: [users@httpd] SSLCipherSuite DEFAULT

2021-04-20 Thread Daniel Ferradal
lly a pretty good > starting point for a public web server. Then watching for any > cipher-based vulnerabilities that are announced or reported by any > vulnerability testing you might have performed. > > https://www.ssllabs.com/ssltest/ > is a pretty nice site to check on you

Re: [users@httpd] Logging issue

2021-04-20 Thread Daniel Ferradal
use a common domain name instead of > IP address: > > - Create multiple VirtualHost directives where the ServerName would be > app1.domain.com, app2.domain.com. These can then be mapped to different > directory trees. > > - This should allow for u

Re: [users@httpd] Random 500 errors

2021-04-20 Thread Daniel Ferradal
gt; > What does this mean? Is this just reporting the error or something > > related to mod_sec causing the error? > > > > Thanks, > > Dave > > > > > > > > ----- > >

Re: [users@httpd] config is silently ignored

2021-04-20 Thread Daniel Ferradal
7;t tell how a port 80 request would behave. > > Thanks > Adrian > > On Tue, 20 Apr 2021 13:38:08 +0200 > Daniel Ferradal wrote: > > > Hello, > > > > This says you have two virtualhosts pointing to the same name, so only > > the first one will be used:

Re: [users@httpd] config is silently ignored

2021-04-20 Thread Daniel Ferradal
LogLevel warn > > LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" > \"%{User-agent}i\"" combined > CustomLog /var/log/apache2/access.log combined ServerSignature > On > > Alias /doc/ "/usr/share/doc/" >

Re: [users@httpd] config is silently ignored

2021-04-20 Thread Daniel Ferradal
an see I have no remaining 2.2 syntax in my config. > > Let me know what else you may need and I'll provide it. > > Thanks > > > - > To unsubscribe, e-mail: users-unsubscr...@httpd

Re: [users@httpd] Random 500 errors

2021-04-19 Thread Daniel Ferradal
Hello, If the error comes from apache itself you should have an error log entry, what does it say? El mar., 20 abr. 2021 4:03, Dave Wreski escribió: > Hi, > > I have an apache-2.4.46 system on fedora33 and having weird 500 errors > that I can't explain. > > 72.70.38.104 - - [19/Apr/2021:21:38:

Re: [users@httpd] Logging issue

2021-04-17 Thread Daniel Ferradal
my problem is so easily solved, perhaps you can tell me what I am > doing wrong? That would solve two issues, I no longer have to post questions > on this topic and you could show that you are helpful and knowledgable... > Obviously I have consulted other sources, including the docu

Re: [users@httpd] apache error 500 weirdness

2021-04-12 Thread Daniel Ferradal
T/%D %I/%O/%B H:%H U:%U ls443 s:%>s V:%V v:%v" timing > > The %b in the entry above appears to be 121 megabytes. How is that possible? > How can I debug this? I have display_errors = On in my PHP settings and have > debugging enabled for php-fpm but no errors are being reported

Re: [users@httpd] Running php 7.0 and 7.2 for different websites with apache

2021-04-09 Thread Daniel Ferradal
las 18:10, H () escribió: > > On 04/09/2021 11:48 AM, Daniel Ferradal wrote: > > That´s probably it. You still have php7_module, and are probably > > pointing to it somewhere in your config. For the looks of it you need > > a serious and thorough cleanup of your configuration t

Re: [users@httpd] Running php 7.0 and 7.2 for different websites with apache

2021-04-09 Thread Daniel Ferradal
: > > On 04/09/2021 06:03 AM, Daniel Ferradal wrote: > > Looks correct yes. But still lots of things you are not showing could be > > wrong. > > > > To solve issues you have to go one thing at a time, you know for sure > > apache is pointing to different ports,

Re: [users@httpd] Running php 7.0 and 7.2 for different websites with apache

2021-04-09 Thread Daniel Ferradal
port, that you disabled all mod_php stuff, etc. things we can't see because you don't show, so it is quite hard to hand-guide you with just small bits of info. El vie, 9 abr 2021 a las 3:26, H () escribió: > > On 04/08/2021 08:57 PM, Daniel Ferradal wrote: > > There is no suc

Re: [users@httpd] Running php 7.0 and 7.2 for different websites with apache

2021-04-08 Thread Daniel Ferradal
;> SetHandler "proxy:fcgi://localhost:9003" > >> > >> > >> Apache is really much more simple and easier than many examples out > >> there try to show. > >> > >> El jue, 8 abr 2021 a las 23:54, H () escribió: > >

Re: [users@httpd] Running php 7.0 and 7.2 for different websites with apache

2021-04-08 Thread Daniel Ferradal
/localhost:9002" In the other virtualhost you want to have pointing to 9003: SetHandler "proxy:fcgi://localhost:9003" Apache is really much more simple and easier than many examples out there try to show. El jue, 8 abr 2021 a las 23:54, H () escribió: > > On 04/08

Re: [users@httpd] Running php 7.0 and 7.2 for different websites with apache

2021-04-08 Thread Daniel Ferradal
gt; --------- > To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org > For additional commands, e-mail: users-h...@httpd.apache.org > -- Daniel Ferradal HTTPD Project #httpd help at Freenode - To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org

Re: [users@httpd] Wordpress | user:group setting

2021-04-04 Thread Daniel Ferradal
I should indentify my user:group setting for my personal > website? > Currently I own my website as www:www (for Wordpress auto-update sake). > Would it be more safe to set this to www:me ? > > Thanks, Jos -- Daniel Ferradal HTTPD Project

Re: [users@httpd] Apache 2.4.37 graceful restart causes error “scoreboard is full, not at MaxRequestWorkers.Increase ServerLimit.”

2021-03-30 Thread Daniel Ferradal
restart multiple times in succession for > many log files? > > - > To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org > For additional commands, e-mail: users-h...@httpd.

Re: [users@httpd] time based not working

2021-03-19 Thread Daniel Ferradal
We replied to him in irc, I think he is past that but hasn't updated his findings here. Suggestions were check rewritelog, consider not using OR El vie., 19 mar. 2021 14:35, Rich Bowen escribió: > > > On 3/18/21 3:06 AM, Jens Kallup wrote: > > Hello, > > how can I time based open times? > > The

Re: [users@httpd] Apache Reverse Proxy for more than one website.

2021-03-16 Thread Daniel Ferradal
the list; > please *don't* CC me. > > > - > To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org > For additional commands, e-mai

Re: [users@httpd] The number of child processes is less than MinSpareThreads.

2021-03-14 Thread Daniel Ferradal
- > > This is working as designed, the server checks only once per second to > see if processes need to be started or killed based on the current > idle threads. > > ----- > To unsubsc

Re: [users@httpd] Expected behavior for "If-Modified-Since: " and CGI generated content?

2021-03-14 Thread Daniel Ferradal
CHLITTERMANN.de internet & unix support - > Heiko Schlittermann, Dipl.-Ing. (TU) - {fon,fax}: +49.351.802998{1,3} - > gnupg encrypted messages are welcome --- key ID: F69376CE - -- Daniel Ferradal HTTPD Project #httpd help at Freen

Re: [users@httpd] Apache Reverse Proxy and Load Balancer.

2021-03-14 Thread Daniel Ferradal
- > To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org > For additional commands, e-mail: users-h...@httpd.apache.org > -- Daniel Ferradal HTTPD Project #httpd help at Freenode - To unsubscribe, e-mail: users-unsu

Re: [users@httpd] Distribution of workers between processes and threads

2021-03-14 Thread Daniel Ferradal
ail: users-unsubscr...@httpd.apache.org > For additional commands, e-mail: users-h...@httpd.apache.org > -- Daniel Ferradal HTTPD Project #httpd help at Freenode - To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org

Re: [users@httpd] Re: httpd[803535]:

2021-03-14 Thread Daniel Ferradal
he Apache HTTP > > Server. > > > > > > What is the correct syntax? > > > > Thank you. > > > > > How are loaded your conf files? > > Something like: > Include conf.d/*.conf > somewhere? > > CJ > >

Re: [users@httpd] HTTPD Proxy Errors

2021-03-11 Thread Daniel Ferradal
for some guidance into how we can successfully pinpoint where > the issue lies. Is it the fact that the application is simply not responding > to the request in the allotted configured settings? We can certainly test > that option but being a PRD environment we'll need to schedule the process. > Therefore, I'd like to get some thoughts on what we can do to pinpoint > exactly what is going on here. > > Thanks in advance, > > HB > -- Daniel Ferradal HTTPD Project #httpd help at Freenode - To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org

Re: [users@httpd] some questions to mod_rewrite

2021-01-02 Thread Daniel Ferradal
To find out if they are reasonable I would ask the nextcloud guys. They may be placeholder directives in case you are using certain plugin of theirs or similar. Cheers El jue, 17 dic 2020 a las 19:36, Lentes, Bernd () escribió: > > > > - On Dec 17, 2020, at 5:19 PM, Daniel Fer

  1   2   >