Re: [EMAIL PROTECTED] How in the name of LINUX do u set apache2.2 to run as user www-data

2007-07-25 Thread Dmitri Colebatch
Hi Demetri, Change the User parameter in httpd.conf. Here's what I have in mine: # If you wish httpd to run as a different user or group, you must run # httpd as root initially and it will switch. # # User/Group: The name (or #number) of the user/group to run httpd as. # . On SCO (ODT 3) use "

Re: [EMAIL PROTECTED] Re: authentication - one of several groups

2007-07-23 Thread Dmitri Colebatch
Hi Eric, On 7/24/07, Eric Covener <[EMAIL PROTECTED]> wrote: It looks to me like 2.0.x mod_auth_ldap wants require group cn=foo require group cn=bar Instead of require group cn=foo cn=bar Which is different then the way he treates require user (where he'll iterate through multiple users on on

[EMAIL PROTECTED] Re: authentication - one of several groups

2007-07-23 Thread Dmitri Colebatch
I'm assuming that the lack of response means no one else is using this feature. I'd like to ask one more time before raising a bug - can anyone see any reason why I shouldn't raise a bug for this? cheers, dim On 7/20/07, Dmitri Colebatch <[EMAIL PROTECTED]> wrote: Hi al

[EMAIL PROTECTED] authentication - one of several groups

2007-07-19 Thread Dmitri Colebatch
Hi all, This is a problem thats been irking me for a while and I'm hopeful that some other users might be able to shed some light on the issue. We use LDAP authentication and would like to allow access to a location if a user is in one of a number of groups. From reading http://httpd.apache.org/

[EMAIL PROTECTED] Re: hack to provide "single username/password store" appearance to another app

2007-04-25 Thread Dmitri Colebatch
Sorry - I'd been experimenting, my filter isn't: On 4/26/07, Dmitri Colebatch <[EMAIL PROTECTED]> wrote: sub handler : FilterConnectionHandler { print STDERR "test\n"; Apache::Const::OK; } 1; b

[EMAIL PROTECTED] hack to provide "single username/password store" appearance to another app

2007-04-25 Thread Dmitri Colebatch
Hi all, I've been asked to provide a proxy that authenticates users against our LDAP tree, and then proxies their requests to an external system that requires a different password (for the same user). I can do this with a hardcoded username/password for the external system like this:

Re: [EMAIL PROTECTED] SECOND REQUEST: mod_authnz_ldap.so module

2007-03-21 Thread Dmitri Colebatch
Hi Zac, Not sure if you're still looking for this (I'm playing catch-up), but this config snippet might provide something to compare against: AuthType Basic AuthName "LDAP Authentication" AuthLDAPUrl ldap://ldap/o=users?cn?sub?(objectclass=Person) AuthLDAPBindDN cn=readonly,o=admin

Re: [EMAIL PROTECTED] Stripping white space from HTML

2007-03-09 Thread Dmitri Colebatch
If you're concerned about bandwidth mod_gzip may well give you most of the benefits without the risk of stripping whitespace (in some circumstances browsers _do_ pay attention to it). cheers dim On 3/10/07, Grant <[EMAIL PROTECTED]> wrote: Hello, The shopping cart I use produces a lot of white

Re: [EMAIL PROTECTED] Problem with mod_auth_ldap

2007-02-26 Thread Dmitri Colebatch
Hi Andy, On 2/26/07, Andy Kannberg <[EMAIL PROTECTED]> wrote: AuthName "Login" AuthType Basic AuthLDAPURL ldap://ldapx.snow.nl/ou=people,dc=snow,dc=nl?uid AuthLDAPGroupAttribute somegroup require valid-user All this does is require that the username/password is correct. Instead of: requir

Re: [EMAIL PROTECTED] getting source via subversion

2007-02-25 Thread Dmitri Colebatch
Hi Sam, Are you behind a proxy? cheers dim On 2/26/07, Sam Carleton <[EMAIL PROTECTED]> wrote: Sanders, According to t

[EMAIL PROTECTED] mod_proxy and intermittant 502s - is my config incorrect?

2007-02-25 Thread Dmitri Colebatch
Hi all, I'm trying to track down an intermittant problem with our apache servers where they intermittantly serve 502 responses when I believe they should be able to contact the server. Our situation is that we have apache sitting in front of BEA Weblogic (both 8.1 and 9.1). We are simply using

Re: [EMAIL PROTECTED] apache with mod_wl strips Content-type header value on 202 response from WLS

2006-08-22 Thread Dmitri Colebatch
For the archives: On 8/22/06, Dmitri Colebatch <[EMAIL PROTECTED]> wrote: It could of course be a bug in mod_wl. Turns out this was a bug in mod_wl - I've upgraded to the newer version and its fixed there (8.1 SP5 was the fixed version apparently).

Re: [EMAIL PROTECTED] Filters in Apache?

2006-08-22 Thread Dmitri Colebatch
On 8/23/06, Anthony Smith <[EMAIL PROTECTED]> wrote: I basically want a way to provide some control/security over all the sites without have the sites modified. Have you looked at http://httpd.apache.org/docs/2.0/howto/auth.html? Sounds to me like that's what you're after. cheers dim

Re: [EMAIL PROTECTED] apache with mod_wl strips Content-type header value on 202 response from WLS

2006-08-22 Thread Dmitri Colebatch
On 8/22/06, Alexander Lazic <[EMAIL PROTECTED]> wrote: >Unfortunately 2.2 isn't supported by mod_wl although I've been starting >to wonder what it is I'm getting out of mod_wl rather than using >mod_proxy. Any other mod_wl users out there have thoughts on this? Yep but not yet testet :-( What

Re: [EMAIL PROTECTED] apache with mod_wl strips Content-type header value on 202 response from WLS

2006-08-21 Thread Dmitri Colebatch
On 8/22/06, Nick Kew <[EMAIL PROTECTED]> wrote: Smells of bug (unless of course it's confusion on your end). But 2.0.46 is very old. Have you tried a more recent version (preferably 2.2 , where there are quite a few proxy changes)? Unfortunately 2.2 isn't supported by mod_wl although I've bee

[EMAIL PROTECTED] apache with mod_wl strips Content-type header value on 202 response from WLS

2006-08-21 Thread Dmitri Colebatch
Hi all, I'm setting up an apache box to give us some additional configuration options between our load balancer and weblogic. Most of this is going to plan but yesterday someone pointed out that for 202 responses apache is returning an empty Content-type header. When I make the request directly

Re: [EMAIL PROTECTED] Re: question about URL displaying

2006-06-07 Thread Dmitri Colebatch
I think you want ReWrite instead of Redirect. redirect sends a 302 to the browser and so the browser displays the new address. Have a look at the rewrite docs and see if they help you. cheers dim On 6/7/06, Tao Yaoning <[EMAIL PROTECTED]> wrote: Anybody knows? On 5/26/06, Tao Yaoning <[EMAI

Re: [EMAIL PROTECTED] Auth Apache 2 agaisnt AD Groups

2006-05-25 Thread Dmitri Colebatch
On 5/25/06, Robin P. Blanchard <[EMAIL PROTECTED]> wrote: Yup. Two identical lines apart from the hosts. I'm a *bsd guy so I'm a bit more familiar with ipfilter / pf syntax. Perhaps you could send me a simple iptables scenario to block traffic to/from host ? Sure - will do tomorrow when I get a

Re: [EMAIL PROTECTED] Auth Apache 2 agaisnt AD Groups

2006-05-25 Thread Dmitri Colebatch
On 5/25/06, Robin P. Blanchard <[EMAIL PROTECTED]> wrote: For what it's worth (this is httpd-2.0.58), I just tried: AuthLDAPURL "ldap://server1/OU=Divisions,OU=Users,OU=gactr,DC=gc,DC=nat?sAMAccountName?su b?(objectclass=*)" AuthLDAPURL "ldap://server2/OU=Divisions,OU=Users,OU=gactr,DC=gc,DC=nat

Re: [EMAIL PROTECTED] Auth Apache 2 agaisnt AD Groups

2006-05-24 Thread Dmitri Colebatch
Hi Robin, On 5/25/06, Robin P. Blanchard <[EMAIL PROTECTED]> wrote: [snip] AuthLDAPURL "ldap://server.name/OU==Divisions,OU=Users,OU=gactr,DC=gc,DC=nat?sAMAccountNa me?sub?(objectclass=*)" I don't suppose you've had the need to try this with multiple servers? I posted last week (see http://m

Re: [EMAIL PROTECTED] Apache 2.0.55 on WinXP sends only part of file

2006-05-21 Thread Dmitri Colebatch
sounds like a mimetype issue to me. what are the response headers? On 5/22/06, Herr Bohm verboom <[EMAIL PROTECTED]> wrote: Hello When i'm trying to download a file bigger then 150kb both Firefox and Internet Explorer dont ask me if i want to download it but apache displays a small part of the

Re: [EMAIL PROTECTED] port 80 and port 8080

2006-05-18 Thread Dmitri Colebatch
On 5/19/06, Ana Lucía Zapata Barros <[EMAIL PROTECTED]> wrote: This is the part that I modif. # # Listen: Allows you to bind Apache to specific IP addresses and/or # ports, in addition to the default. See also the # directive. # #Listen 3000 #Listen 12.34.56.78:80 Listen 80 Where have you mod

Re: [EMAIL PROTECTED] port 80 and port 8080

2006-05-18 Thread Dmitri Colebatch
Hi, On 5/18/06, Ana Lucía Zapata Barros <[EMAIL PROTECTED]> wrote: It's possible for apache have 2 different ports, 80 and 8080, for the same service?? Yes. I modify the httpd.conf file, and add Listen 80 and start apache at port 80 with the sudo command. And when I start the apache at 8080

Re: [EMAIL PROTECTED] url reformat - howto

2006-05-18 Thread Dmitri Colebatch
Hi, What are you running your java servlets on? You want to have a look at something like http://tomcat.apache.org/connectors-doc/ cheers dim On 5/18/06, Oliver A. Rojo <[EMAIL PROTECTED]> wrote: Hi all! Im running Java pages on my server. Basically, all pages will have a direct url like htt

[EMAIL PROTECTED] AuthLDAPUrl failover not working

2006-05-18 Thread Dmitri Colebatch
Hi all, I've spent an hour googling this so am really hoping this isn't just a case of me being stupid (although a quick fix would be nice). We have a apache 2.2.0 (built Dec 21 2005 15:12:36) instance with the following ldap config: Options FollowSymLinks AllowOverride None Auth