Re: [users@httpd] Cannot authenticate (after six years)

2023-07-20 Thread Florian Schwalm
Using Chrome? Open a new tab and enter chrome://policy If the policy BasicAuthOverHttpEnabled is set to false that would be an explanation. Am 20. Juli 2023 15:28:12 MESZ schrieb Eric Covener : >On Thu, Jul 20, 2023 at 9:08 AM Andrew Hoff > wrote: >> >> Hello, >> >> Strange problem. Everything

Re: [users@httpd] Re: Apache2 certificate authentication

2023-07-09 Thread Florian Schwalm
I'm not sure if this command for signing the client certificate is correct as I don't see your corresponding openssl config and if it sets the correct keyUsage and extensions: sign client CSR openssl x509 -req -days 365 -in client.csr -CA ca.crt -CAkey ca.key -CAcreateserial -out client.crt

Re: [users@httpd] Could use some advice on what I'm doing wrong with securing Apache server

2023-05-07 Thread Florian Schwalm
That "Require all granted" effectively provides access regardless of authentication. Try removing this line, so only Require ldap-group applies. Am 1. Mai 2023 21:57:43 MESZ schrieb Kent Wick : >Environment: SLES 15 SP4, fully patched, uses SSSD to successfully logon to >the host as an Active

Re: [users@httpd] Best way to Install

2023-05-07 Thread Florian Schwalm
You can just install from the default package repositories on Rocky Linux. The distro follows the same update policy that CentOS had, meaning that software versions will never change unless you upgrade the OS version itself. The maintainers only integrate security fixes and they do so by cherry-

Re: [users@httpd] Product Bug h5bp/tls/certificate_files.conf

2023-02-10 Thread Florian Schwalm
What is the output of running journalctl -xeu apache2.service? If you included the file from the repository unchanged the files mentioned there probably do not exist on your machine and they shouldn't. The configurations from the h5bp/server-configs-apache repository are not all plug and play,

Re: [users@httpd] Re: style.css not updating

2023-02-09 Thread Florian Schwalm
The way you describe this your style.css is cached by the browser. You can verify this by opening the developer tools in the browser, then load the page and check the details in the Network tab. If that is indeed the case, "the world" will be able to see your changes exactly once and then stick

Re: [users@httpd] Proxy both HTTP, and WebSocket traffic to UNIX socket

2023-01-04 Thread Florian Schwalm
Nice, thank you for sharing the final result :) Am 5. Januar 2023 00:08:07 MEZ schrieb Jan Kohnert : >Am Mittwoch, 28. Dezember 2022, 11:53:58 CET schrieb Jan Kohnert: >> The config reads as: >> >> --- >> RequestHeader add X

Re: [users@httpd] Proxy both HTTP, and WebSocket traffic to UNIX socket

2022-12-27 Thread Florian Schwalm
x27;re still on the same page before investigating further ideas. Am 27. Dezember 2022 21:39:30 MEZ schrieb Jan Kohnert : >Am Dienstag, 27. Dezember 2022, 20:32:28 CET schrieb Florian Schwalm: >> As far as I understand Gitlab sends a HTTP GET request first to ask the >> backend

Re: [users@httpd] Proxy both HTTP, and WebSocket traffic to UNIX socket

2022-12-27 Thread Florian Schwalm
bination with unix domain sockets and websockets you may also want to consider this workaround, it's unclear to me if that bug has already been fixed: https://bz.apache.org/bugzilla/show_bug.cgi?id=65958 Am 27. Dezember 2022 19:38:11 MEZ schrieb Jan Kohnert : >Hi, > >Am Sonntag, 25. Deze

Re: [users@httpd] Proxy both HTTP, and WebSocket traffic to UNIX socket

2022-12-25 Thread Florian Schwalm
Specifying ws instead of http in the RewriteRule should be good. > If you are using a DSO version of mod_proxy, make sure the proxy submodules are included in the configuration using LoadModule. Did you explicitly load the mod_proxy_wstunnel module as is mentioned in the error message? The erro

[users@httpd] Aw: Re: [users@httpd] Apache Reverse Proxy for more than one website.

2021-03-16 Thread Florian Schwalm
No, you can only have one virtual host per port.Either you make the second server accessible on a different port or you separate them by server name (namebased virtual hosts) or path... Either way you'd need to decide how you want to distinguish from the user's point of view which server the

[users@httpd] Aw: Re: [users@httpd] Apache in under attack. [EXT]

2021-01-12 Thread Florian Schwalm
It can be done with iptables or take a look at fail2ban:https://security.stackexchange.com/q/35773/213194Am 12.01.21, 10:26 schrieb Jason Long : Thank you, but "Firewalld" or "iptables" can't do it automatically? When an IP sending many request then it automatically blocked.

[users@httpd] Re: How to proxy web server?

2017-05-16 Thread Florian Lindner
Am 15.05.2017 um 17:05 schrieb Florian Lindner: > Hello, > > Apache 2.4 on Debian Testing, mpm_itk > > I have the Discourse web forum running in a docker container. The container's > webserver is bount to localhost:2080. The > forum should be reachable at either

[users@httpd] How to proxy web server?

2017-05-15 Thread Florian Lindner
nfo][ client 129.69.213.139:55350] AH00128: File does not exist: /home/csc-stuttgart/csc-stuttgart.org/pub/login The webserver hat localhost:2080 redirected to /login/ which does not seem to rewritten by ProxyPassReverse to forum/login accordingly. Thanks for any ideas! Florian -

Re: [users@httpd] Make Apache react more graceful to SSL errors

2016-05-01 Thread Florian Lindner
ut is seems there is no other possibility and I need to implement some kind of rollback. Florian > I do have a forcestop which will stop an apache if the config is wrong - > as a last resort! > > James > > On 01/05/2016 14:27, Michael A. Peters wrote: > > On 05/01/2016

[users@httpd] Make Apache react more graceful to SSL errors

2016-05-01 Thread Florian Lindner
. Is it possible to make apache disable only the problematic vhost instead of refusing to start? Thanks, Florian - To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h

Re: [users@httpd] Get parameters at the end of URL on Apache Web Server

2015-11-09 Thread Marcel Florian
Thank you Daniel, "AcceptPathInfo On” seems to be the right approach. Where can I set this on Apache? Best, Marcel > On 09 Nov 2015, at 11:27, Daniel Gruno wrote: > > On 11/09/2015 11:24 AM, Marcel Florian wrote: >> Hello guys, >> >> I have a URL with the

[users@httpd] Get parameters at the end of URL on Apache Web Server

2015-11-09 Thread Marcel Florian
Hello guys, I have a URL with the following syntax: https://www.domain.com/pay/a1b2c In the /pay directory I have a simple payment form. I am using JavaScript to get the URL appendix a1b2c and process it in order to get further data to display in the payment form: var url = window.location.hre

Re: [us...@httpd] Re: phpMyAdmin session could not be invoked

2010-10-30 Thread Florian Effenberger
Hi, 2010/10/30 Joost de Heer : > Are you running out of inodes in /tmp? nope. Florian - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more in

[us...@httpd] Re: phpMyAdmin session could not be invoked

2010-10-30 Thread Florian Effenberger
Hi, anyone has an idea? Thanks, Florian 2010/10/22 Florian Effenberger : > Hello, > > I run phpMyAdmin 3.3.2 (Ubuntu 10.04 package) with mod_fcgid on > Apache. From time to time, instead of the logon screen, an error > message appears, telling me that the session could not be in

[us...@httpd] phpMyAdmin session could not be invoked

2010-10-22 Thread Florian Effenberger
it's sufficient to delete session files out of the tmp directory. All other scripts on the site seem to work like a charm. Any idea on how to nail down that bug? Thanks, Florian - The official User-To-User support fo

Re: [us...@httpd] Problem setting up SSL Proxy

2010-08-06 Thread Florian Lindner
Am Freitag 06 August 2010, 21:48:15 schrieb Joost de Heer: > On 08/06/2010 09:16 PM, Florian Lindner wrote: > > Hello! > > > > I want to set up an local ssl proxy. I have an certificate for > > *.centershock.net and want domains like xgm.de to be accessible with SSL. &g

[us...@httpd] Problem setting up SSL Proxy

2010-08-06 Thread Florian Lindner
d#bde8a0][rid#eb54f8/initial] (2) forcing proxy- throughput with http://xgm.de/forum 138.246.2.7 - - [06/Aug/2010:21:14:40 +0200] [xgm- de.centershock.net/sid#bde8a0][rid#eb54f8/initial] (1) go-ahead with proxy request proxy:http://

Re: [us...@httpd] Get string that matched on

2010-07-30 Thread Florian S.
riteRule/RewriteCond may be appropriate in your case, too (especially with the E-Flag?) Hope that helps: Florian - The official User-To-User support forum of the Apache HTTP Server Project. See http://h

Re: [us...@httpd] Custom ETags

2010-04-13 Thread Florian S.
t-Databases are supported, too. The output (the ETag?) could be stored in a Envar with a corresponding RewriteRule (E-flag). Then you can do a few checks and/or use 'Header set ETag new_tag env=new_tag' or something similiar. Not tested at all

[us...@httpd] ExtFilterDefine intype does not get matched for text/html

2009-10-29 Thread Florian S.
that text/html doesn't match the Content-type above. For me, something like text/* would be sufficient, but that doesn't seem to be supported. Any ideas to fix this for types that does not match exactly the intype? Or is the problem s

[us...@httpd] mod_proxy: Status-Flags vs. 'Hard-Disabling' for BalancerMembers

2009-08-31 Thread Florian S.
ounds more 'safe' to me ;-). Are there any issues with that? (Caching, active connections, etc..) What's the difference? Or should I use the 'stopped'-flag in addition? The backend should be disabled for for example maintaining purposes. Kin

[us...@httpd] Wildcard-domain environment var for ProxyHTMLURLMap

2009-06-25 Thread Florian S.
? Thanks in advance: Florian Schröder - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsub

Re: [us...@httpd] Apache won't start, nothing is logged.

2009-05-19 Thread Florian Bender
Hi, it turned out that this was some kind of misbehaviour of mod_ssl concerning wrong configuration with, however, correct syntax. In my case this was a file permission issue with the keyfile and a missing SSLCertificateKeyFile directive. I would consider this a bug, some Error message would be app

Re: [us...@httpd] Apache won't start, nothing is logged.

2009-05-18 Thread Florian Bender
Hi, it seems as if it's the same error I've encountered today, yet I've done slightly different things which may have caused it. Does Apache start when you disable mod_ssl? That has worked for me, yet isn't a satisfying solution. B

[us...@httpd] Re: Apache 2.2.9 won't start, leaves no error message

2009-05-18 Thread Florian Bender
Okay, I have tracked it down to be a problem with mod_ssl, the server starts after removing it. I will ask at the mod_ssl mailing lists, too. - The official User-To-User support forum of the Apache HTTP Server Project. See http://

[us...@httpd] Apache 2.2.9 won't start, leaves no error message

2009-05-18 Thread Florian Bender
che on freenode: # strace apache2ctl start &> /tmp/strace This strace dump can be grabbed from http://nicht.in-kiel.de/strace.txt (it's 19K and so I didn't want to attach it here). Best regards, Florian - The offici

Re: [us...@httpd] help with mod_proxy_html, trouble rewriting javascript content

2009-03-06 Thread Florian S.
put_filter some lines below (I dare interpret it that way). Adding the desired content-type in the if statement could resolve your problem. Hope, that may help, Florian Am Freitag, den 06.03.2009, 17:29 -0500 schrieb Brian Mearns: > On Fri, Mar 6, 2009 at 5:02 PM, Flowering Weeds > wrot

[us...@httpd] mod_proxy_balancer: additional lbmethods

2009-02-26 Thread florian schröder
: ap_register_provider(p, PROXY_LBMETHOD, "byfoobar", "0", &byfoobar); in the static void ap_proxy_balancer_register_hook(apr_pool_t *p) Very strange, since I did everything exactly in the same way as it had been done for the built-in methods. Hoping that I'm posting to th

RE: [us...@httpd] post

2008-11-21 Thread Florian Yanez
I don't know anything about wampserver 2. As far as Apache goes, you should have downloaded a .zip or .msi file and not a .gz file. My suggestion would be to download one of the .msi files so you don't have to manually compile it. Florian Yanez From: Leah Taylor [mailto:[EMAIL

RE: [EMAIL PROTECTED] post

2008-11-21 Thread Florian Yanez
What OS are you implementing on, and what version did you download? Florian Yanez From: Leah Taylor [mailto:[EMAIL PROTECTED] Sent: Friday, November 21, 2008 2:34 PM To: users@httpd.apache.org Subject: [EMAIL PROTECTED] post i need a walk through or something of the sort to show me how to

Re: [us...@httpd] SSL Proxy

2008-11-05 Thread Florian Lindner
Am 05.11.2008 um 02:23 schrieb Eric Covener: On Tue, Nov 4, 2008 at 1:02 PM, Florian Lindner <[EMAIL PROTECTED]> wrote: RewriteRule ^(.*)$ http://target.com/$1 [P,L] There raises the problem that the application on target.com perfoms an redirection to /foo/bar/ (mind the first

[EMAIL PROTECTED] SSL Proxy

2008-11-04 Thread Florian Lindner
redirection to /foo/bar/ (mind the first slash) with proxy that makes example.org/foo/bar/ which raises an 404. example.org/proxy/foo/bar/ would be fine. How can I get around these problems? Thanks, Florian - The

[EMAIL PROTECTED] mod_suPHP: set php_admin options

2008-04-15 Thread Florian Lindner
Hello, I'm using mod_suphp. When using just mod_php I can set options in the virtual host config like that: php_admin_value sendmail_path How can this be done when using mod_suphp? Thanks, Florian - The official Us

[EMAIL PROTECTED] Which user to run?

2008-04-12 Thread Florian Lindner
users manages the data in the Document Root via SSH. The problem that occurs within that setup is that files created by apache are owned by user www thus read only to the human who manages these files. What is best way to cope with this problem? Thanks, Florian

Re: [EMAIL PROTECTED] basic authentication apache 2.2.8

2008-03-24 Thread Florian
Eric Covener schrieb: > On Mon, Mar 24, 2008 at 8:30 AM, Florian <[EMAIL PROTECTED]> wrote: > >> .htaccess >> - >> AuthType Basic >> AuthName "Interner Bereich" >> AuthUserFile /etc/htpasswd >> AuthGroupFile /etc/htgr

[EMAIL PROTECTED] basic authentication apache 2.2.8

2008-03-24 Thread Florian
user user1 to access /mak failed, reason: user is not part of the 'require'ed group(s). , referer: http://bla.bla... Please give me a hint, where i can search the solution. Regards, Florian The webserver ist compiled with defaults ../bin/httpd -l Compiled in module

[EMAIL PROTECTED] Disabling basic authentication

2008-02-04 Thread Florian Niedoba
andle basic authentication? About our env: AD as authentication source, all users use IE, we have full controll over their IE settings, we are using apache 2.0.59 Thanks, Florian

Re: [EMAIL PROTECTED] Vhost issues

2007-12-19 Thread Florian Schmidt
You must not delete the ServerName directive, it should look like: ... ServerName teknerds.net ServerAlias www.teknerds.net DocumentRoot /srv/www/htdocs/sites/teknerds ... On Thu, December 20, 2007 03:30, Chris Arnold wrote: > I am replying to the last email sent that said

Re: [EMAIL PROTECTED] Newbie question

2007-12-18 Thread Florian Schmidt
I think you're right. On Tue, December 18, 2007 17:53, EWD wrote: > > Florian, > > I had sent this email from Nabble and after about 30 minutes I came back to > see what's up and I saw that my email is not sent yet and Nabble offered me > to resend it. And then most p

Re: [EMAIL PROTECTED] Newbie question

2007-12-18 Thread Florian Schmidt
. After that you can use apache's VirtualHost feature to direct your visitors to the correct websites. http://httpd.apache.org/docs/2.2/en/vhosts/ bye Florian On Mon, December 17, 2007 20:58, EWD wrote: > > I have a website that is running at http://www.ewd.com. I have also installed &g

Re: [EMAIL PROTECTED] NameVirtualHost Directive

2007-12-17 Thread florian . schmidt
exist", then a VirtualHost statement would mean "here is a configuration for ONE domain running under that virtualhost". That's why they have to have the same name and why a virtualhost needs a ServerName. I hope that was a little bit more precise. bye Florian On Mon, Decem

Re: [EMAIL PROTECTED] NameVirtualHost Directive

2007-12-16 Thread florian . schmidt
, etc. bye Florian On Mon, December 17, 2007 04:44, Bryan Richardson wrote: > Hello all, > > I'm curious as to why one would ever need to use the NameVirtualHost > directive in site configuration files. I just can't seem to get my head > around why it's *sometimes* r

Re: [EMAIL PROTECTED] Case insensitive authentication?

2007-12-04 Thread Florian Schmidt
dn't waste much time on, I'd suggest just to live with case sensitive authentication. Florian On Tue, December 4, 2007 17:50, Martin Strand wrote: > I'd like to use basic authentication with case insensitive usernames. Is > this possible? I guess it ought to work with mod_aut

RE: [EMAIL PROTECTED] Is it possible to view the current apache configuration

2007-08-09 Thread Florian Yanez
If you have server-info turned on then you should be able to see the current configuration. Florian Yanez Manager of Technical Systems Helzberg's Diamond Shops, Inc. Email : [EMAIL PROTECTED] Office: 816-627-1253 -Original Message- From: Puthick Hok [mailto:[EMAIL PROTECTED]

RE: [EMAIL PROTECTED] Cronolog for Windows?

2007-08-09 Thread Florian Yanez
There is a version of cronolog for Windows at http://cronolog.org/download/index.html It is one revision behind. I have not used it as we only run Apache on UNIX and Linux. Hope this helps. Florian Yanez Manager of Technical Systems Helzberg's Diamond Shops, Inc. Email : [EMAIL PROT

Re: [EMAIL PROTECTED] suEXEC and RewriteRule

2007-02-01 Thread Florian Effenberger
But I guess you can play with it to change the page title. exactly, the dynamically generated listing by mod_autoindex. I thought there was an easier solution to let suEXEC also execute CGI from within aliased userdirs. :-)

Re: [EMAIL PROTECTED] suEXEC and RewriteRule

2007-01-31 Thread Florian Effenberger
.* - [F] That would make a call to any script available, but trying to access root directory return a "Forbidden" response... thanks for your reply. Unfortunately, in that case I still have "Index of /~michael" as title of my Directory Listings. :-( Any idea on h

[EMAIL PROTECTED] suEXEC and RewriteRule

2007-01-30 Thread Florian Effenberger
^/projects/design/(.*) http://www.mydoma.in/~michael/$1 [P] However, in Directory Listings (of course) the ~michael address is shown. Is there a more elegant way of doing this other than patching suEXEC? Thanks Florian - The

[EMAIL PROTECTED] Status of per-user MPMs

2007-01-29 Thread Florian Lindner
Hello, what is the status of MPMs that can assign each vhost a userID and execute request for this vhosts as this user? Are there any MPMs (from apache or 3rd party) available that are stable for (very low load) systems with PHP? (Apache 2) Thanks, Florian

Re: [EMAIL PROTECTED] Templated config for vhost

2006-12-14 Thread Florian Lindner
Am Donnerstag, 14. Dezember 2006 19:22 schrieb Joshua Slive: > On 12/13/06, Florian Lindner <[EMAIL PROTECTED]> wrote: > > Hello, > > is is possible to define a template for a vhost config entry and use this > > template in other entries. > >

[EMAIL PROTECTED] Templated config for vhost

2006-12-13 Thread Florian Lindner
e $DIR xgmde $MORE_ALIASES someotherdomain.tld Can I do something like this? Thanks, Florian - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.htm

Re: [EMAIL PROTECTED] Different users for different vhosts

2006-06-22 Thread Florian Lindner
Am Donnerstag, 22. Juni 2006 22:56 schrieb Rainer Sokoll: > On Thu, Jun 22, 2006 at 10:26:45PM +0200, Florian Lindner wrote: > > Hello, > > is it possible to assign each vhost a own process (or a process pool) > > with a distinct user? So that a apache process can not abu

[EMAIL PROTECTED] Different users for different vhosts

2006-06-22 Thread Florian Lindner
, florian - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] " from the digest: [EMAIL PROTEC

RE: [EMAIL PROTECTED] Log rotate for Apache 2.0

2006-04-19 Thread Florian Yanez
I run on Solaris 8 and have not had any problems. -Original Message- From: Tony Guadagno [mailto:[EMAIL PROTECTED] Sent: Wednesday, April 19, 2006 10:02 AM To: Florian Yanez; users@httpd.apache.org Subject: RE: [EMAIL PROTECTED] Log rotate for Apache 2.0 Have you had any issues with

RE: [EMAIL PROTECTED] Log rotate for Apache 2.0

2006-04-19 Thread Florian Yanez
I have been using cronolog 1.6.2 since 2002, first with Apache 1.3 and for the past two years with Apache 2.0. I have never had any problems with it. -Original Message- From: Rony [mailto:[EMAIL PROTECTED] Sent: Tuesday, April 18, 2006 10:22 PM To: users@httpd.apache.org Subject: [EMAIL

Re: [EMAIL PROTECTED] fs permiss. prob err(13) in error_log and path missing

2005-08-12 Thread Florian Konnertz
2005/8/12, Joshua Slive <[EMAIL PROTECTED]>: > On 8/12/05, Florian Konnertz <[EMAIL PROTECTED]> wrote: > > 2005/8/12, Joshua Slive <[EMAIL PROTECTED]>: > > > On 8/12/05, Florian Konnertz <[EMAIL PROTECTED]> wrote: > > > > Hi apache users, >

Re: [EMAIL PROTECTED] fs permiss. prob err(13) in error_log and path missing

2005-08-12 Thread Florian Konnertz
2005/8/12, Joshua Slive <[EMAIL PROTECTED]>: > On 8/12/05, Florian Konnertz <[EMAIL PROTECTED]> wrote: > > Hi apache users, > > > > > > error_log: > > [Fri Aug 12 13:04:59 2005] [error] [client 65.214.44.128] (13)Permission > > denied: ac

[EMAIL PROTECTED] Re: fs permiss. prob err(13) in error_log and path missing

2005-08-12 Thread Florian Konnertz
Hi again people, This is the strangest thing i've ever seen... Thx to all on #apache irc who helped me. We had no chance, no idea what's happening here. I even tried installing other versions (2.0.51; .and .52), but always the same... Any idea would be greatly appreciated! Florian

[EMAIL PROTECTED] fs permiss. prob err(13) in error_log and path missing

2005-08-12 Thread Florian Konnertz
in Directory / additionally to Directory /var/www/localhost/htdocs where it is the default. What could i try next to track down the problem??? TIA Florian PS LogLevel i set to "debug" but it's not really verbose, just this one line in the error_log -- http://florian-ko

[users@httpd] Limit Traffic for specific files

2005-06-08 Thread Florian Lindner
Hello, how can I limit the traffic which certain files generate in a certain time. For example: I don't want downloading of the file xyz.iso to generate more traffic that 10 GB per month? I'm using Apache 2. Thanks

[users@httpd] Re: SSL-Proxy

2005-05-22 Thread Florian Lindner
roxy to reach that > vhost. http://xgm.de ist public available. (go ahead and check it out). The xgm.de ist pointing on the same machine and the vhost is running on the same machine. Thanks, Florian - The official Use

[users@httpd] SSL-Proxy

2005-05-20 Thread Florian Lindner
correct. I get a 403 error (not allowed) What is wrong? Thanks, Florian - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-m