Re: [users@httpd] Failure authing against LDAPS, web server tearing down connections

2011-08-09 Thread Darren Spruell
not load verify locations (file:`/etc/pki/tls/certs/foosomesuch.crt',dir:`/etc/openldap/cacerts'). A look at ldap.conf on the host reveals a configuration that's... iffy. Reverting ldap.conf to defaults results in success. Thanks for the recommendation! -- Darren Spruell phatbuck..

[users@httpd] Failure authing against LDAPS, web server tearing down connections

2011-08-05 Thread Darren Spruell
D APR_HAS_SENDFILE -D APR_HAS_MMAP -D APR_HAVE_IPV6 (IPv4-mapped addresses enabled) -D APR_USE_SYSVSEM_SERIALIZE -D APR_USE_PTHREAD_SERIALIZE -D SINGLE_LISTEN_UNSERIALIZED_ACCEPT -D APR_HAS_OTHER_CHILD -D AP_HAVE_RELIABLE_PIPED_LOGS -D DYNAMIC_MODULE_LIMIT=128 -D HTTPD_ROOT="/etc/httpd&q

Re: [users@httpd] LDAP validation using certificates

2011-08-05 Thread Darren Spruell
ed me well for this in the past: http://httpd.apache.org/docs/2.2/mod/mod_ssl.html -- Darren Spruell phatbuck...@gmail.com - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.or

Re: [users@httpd] LimitExcept group authorization not taking effect

2011-08-04 Thread Darren Spruell
the case. This new configuration seems a bit overexplicit and kludgey, is there anything I'm missing? Perhaps a directive similar to 'Satisfy' for authorization decisions that causes a more specific clause to override? Or is this the p

[users@httpd] LimitExcept group authorization not taking effect

2011-08-04 Thread Darren Spruell
che_module (shared) suexec_module (shared) disk_cache_module (shared) file_cache_module (shared) mem_cache_module (shared) cgi_module (shared) version_module (shared) authz_ldap_module (shared) perl_module (shared) php5_module (shared) proxy_ajp_module (shared) wsgi_module (shared) ssl_module (sh

Re: [EMAIL PROTECTED] Locating the terminal's IP

2007-01-31 Thread Darren Spruell
On 1/31/07, Liz Kim <[EMAIL PROTECTED]> wrote: So if I wanted to protect a site on server C to only allow access to certain IP's (say including A's IP). If A connects to B then has B make the requests, there is no way for C to receive any information about A's IP? Therefore the client may be deni

Re: [EMAIL PROTECTED] Frame Question.

2007-01-31 Thread Darren Spruell
On 1/31/07, Robert Cahn <[EMAIL PROTECTED]> wrote: Apologies if this is slightly off topic. [snip] fails. Can anyone suggest how to fix this problem with IE or where else to submit this question? A web development forum. Hopefully one that still supports the use of frames. DS -

Re: [EMAIL PROTECTED] Locating the terminal's IP

2007-01-31 Thread Darren Spruell
On 1/31/07, Liz Kim <[EMAIL PROTECTED]> wrote: Hi, This may be a simple question but I am a bit confused... Any input will be appreciated!! If the client is on a machine A then logs on to a different server B using ssh... then starts a web browser from the ssh and tries to access a site on serv

Re: [EMAIL PROTECTED] Virtual Hosts Reference/Tutorial Help?

2007-01-31 Thread Darren Spruell
On 1/31/07, Ralph E. Brickley <[EMAIL PROTECTED]> wrote: I have been using Apache for a couple years now, but have never dug any deeper than getting PHP and MySQL running with a server so I can program software. I'm Hoping someone has a good point of reference that I can learn quickly how to setu

Re: [EMAIL PROTECTED] SSL on IP Address

2007-01-26 Thread Darren Spruell
On 1/26/07, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: Hi, Please how do I install SSL certificate on a server that would be accessed by IP only? I mean something like https://10.l.10.241/. The same way you would one that was used on a site you access via hostname. DS

Re: [EMAIL PROTECTED] Massive number of users and authentication

2007-01-24 Thread Darren Spruell
On 1/24/07, Nestor Burma <[EMAIL PROTECTED]> wrote: For small numbers of users, we could play with .htaccess in the associated private directories, and some DBM or database to store the users credentials. But would this scale for tens of thousands of users ? Is there some better solution than to

[EMAIL PROTECTED] Re: Auth via LDAPS fails: Can't contact LDAP server

2007-01-22 Thread Darren Spruell
On 1/22/07, Darren Spruell <[EMAIL PROTECTED]> wrote: On 1/17/07, Darren Spruell <[EMAIL PROTECTED]> wrote: > When trying to authenticate clients via a remote LDAP directory (using > mod_authz_ldap), we fail and the following is logged: > > [Wed Jan 17 14:57:14 2007

[EMAIL PROTECTED] Re: Auth via LDAPS fails: Can't contact LDAP server

2007-01-22 Thread Darren Spruell
On 1/17/07, Darren Spruell <[EMAIL PROTECTED]> wrote: When trying to authenticate clients via a remote LDAP directory (using mod_authz_ldap), we fail and the following is logged: [Wed Jan 17 14:57:14 2007] [warn] [client a.b.c.d] [32492] auth_ldap authenticate: user authenti

Re: [EMAIL PROTECTED] Apache named virtual host

2007-01-21 Thread Darren Spruell
On 1/21/07, Alessandro Ilardo <[EMAIL PROTECTED]> wrote: Hi there, I can't run any virtual host except for the default. code: NameVirtualHost *:80 ServerName linux.domain.com DocumentRo

Re: [EMAIL PROTECTED] error with Find comand

2007-01-21 Thread Darren Spruell
On 1/21/07, Kalasa, Anil <[EMAIL PROTECTED]> wrote: Hi, Hi have an Linux SUSE 10.x installed in my system on AMD 64, I am facing problem with find command, When I enter find / -name test.sh -print or only find from root command it throws an error as # find / -name tes

Re: [EMAIL PROTECTED] os that uses default apache file structure?

2007-01-21 Thread Darren Spruell
On 1/21/07, Peter Michaux <[EMAIL PROTECTED]> wrote: Hi Is there an operating system that uses the apache default file structure? I'm using debian and it does not. If you're referring to an apache package for a platform that maintains it per the default were you to install from source, FreeBSD

[EMAIL PROTECTED] Auth via LDAPS fails: Can't contact LDAP server

2007-01-17 Thread Darren Spruell
ora) configured -- resuming normal operations [Wed Jan 17 16:01:40 2007] [info] Server built: Sep 11 2006 09:43:05 -- Darren Spruell [EMAIL PROTECTED] - The official User-To-User support forum of the Apache HTTP Server Project. Se