[users@httpd] Re: CVE-2019-0211 - Apache 2.2

2019-04-03 Thread LuKreme
On Apr 3, 2019, at 02:05, Hajo Locke wrote: > Is apache 2.2 exploitable by CVE-2019-0211 ? > Description says that first affected version is 2.4.17, but may be 2.2 was > not analyzed. “Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38” seems clear. -- My main job is trying to come up with new a

[users@httpd] Re: Apache 2.4 and DirectoryIndex and htaccess

2018-06-14 Thread LuKreme
On Jun 13, 2018, at 11:50, Frank Gingras wrote: > > That isn't the relevant error from the error log. We need that entry to help > you. That is the ONLY thing logged in the error log. > A 403 as such is always logged in the error log, perhaps with the exception > of cases when you use a Rewri

[users@httpd] Re: Reditect HTTP to HTTPS .htaccess

2018-03-04 Thread LuKreme
I don't do this in .htaccess, I do it in ServerName www.example.com ServerAlias example.com Redirect / https://www.example.com/ But something like this should work in .htaccess as well: RewriteEngine On RewriteCond %{SERVER_PORT} 80 RewriteRule ^(.*)$ https://www.example.com/$1

[users@httpd] HTTP/2?

2015-02-11 Thread LuKreme
What is the status of HTTP/2 support in apache? -- But I been sane a long while now, and change is good. - To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org

[users@httpd] Re: Mailing list issues

2015-01-07 Thread LuKreme
On Dec 29, 2014, at 11:52 PM, Rian Kruger wrote: > Where can I find out why my previous email (yesterday) to the list was not > distributed? This message: Date: Mon, 29 Dec 2014 20:50:17 +0200 Message-ID: From: Rian Kruger To: users@httpd.apache.org Content-Type: multipart/mixed; boundary=089

[users@httpd] Re: Apache & Unix

2015-01-07 Thread LuKreme
On Dec 29, 2014, at 12:01 PM, Gil Dawson wrote: > Apache V2.2 is running fine on my machine (a Mac Mini with MacOS 10.6.8). > > I am reading the \private\etc\apache2\httpd,conf file to understand Apache. Curious, why are you typing \’s for paths? -- Indecision is the key to flexibility.

[users@httpd] Changes in 2.4 require Directory?

2014-10-01 Thread LuKreme
I had a domain that had been inactive for several years (as far as a web page is concerned, it still received email and some other services). I went to enable the domain by uncommenting it’s host block, and it did not work. ServerName www.thedomain.tld ServerAlias thedomain.tld Documen

[users@httpd] Re: Apache 2.4 - non adoption reasons??

2014-07-18 Thread LuKreme
On 18 Jul 2014, at 11:31 , Good Guy wrote: > Upgrades should be about new features and new codes/syntax but the old one > should still work. I'm pretty happy not being stuck with apache 0.7¹ syntax, myself. ¹ I think that was the initial pre-release "a patchy server" version back in 1995. --

[users@httpd] Re: heartbleed and httpd configuration

2014-04-15 Thread LuKreme
On 15 Apr 2014, at 15:27 , Christopher Schultz wrote: > Steven, > > On 4/12/14, 2:15 PM, Steven Siebert wrote: >> I think it would be unlikely because the httpd configuration data >> would be read into memory early on the heap (and in a very low >> volatile area where that memory wouldn't ofte

[users@httpd] Re: Escaping space in SetEnv

2014-04-10 Thread LuKreme
On 10 Apr 2014, at 00:48 , Nawalramka, Priyanka wrote: > SetEnv dir_root "/dir1/m1/s1/my dir" SetEnv dir_root "/dir1/m1/s1/my\ dir" (yes, quoted AND escaped). -- 'I don't see why everyone depends on me. I'm not dependable. Even I don't depend on me, and I'm me.'

[users@httpd] Re: !!! Urgently need apache 2.4.3 source code Urgent due to heartbleed bug]

2014-04-10 Thread LuKreme
On 10 Apr 2014, at 10:00 , Daniel Gruno wrote: > On 04/10/2014 09:42 AM, Sachin Goyal wrote: >>Where can I find apache 2.4.3 source code to download? >>I have apache 2.4.3 binaries running in production server but i >>don't that source code. >> >>Now I need to rebuild apache 2.4

[users@httpd] ApacheCon (OT question for US taxpayers)

2014-03-04 Thread LuKreme
For those of you who are US Taxpayers, are all costs of attending a convention like ApacheCon fully deductible? Including hotels and transportation? Food? Bar tab? (Yes, I know, but I figure there’s a load of you paying for this yourself who know, and trawling through the IRS web site will prob

[users@httpd] Re: Allow access only from the index page

2014-02-24 Thread LuKreme
On 24 Feb 2014, at 09:55 , fabio.schm...@4linux.com.br wrote: > Thanks for the answers, I will try with HTTP_REFERER. Be aware that this will mean that no pages on your site can contain any links to your site, so if someone goes to index.html and then to foo.html, foo.html cannot link to bar.h

[users@httpd] Re: WebDAV oddness

2014-01-24 Thread LuKreme
On 03 Jan 2014, at 14:34 , LuKreme wrote: > On my Apache 2.4.6 (under FreeBSD 8.0-RELEASE) I have two nearly identical > directives setup for webdav. The first is in users/example.com.conf and the > second is in extras/vhosts.conf: Still beating my head against this, nothing I do se

[users@httpd] Re: ApacheCon 2014 and Call for Papers

2014-01-14 Thread LuKreme
On 14 Jan 2014, at 06:57 , Rich Bowen wrote: > The Apache Software Foundation is pleased to announce that ApacheCon North > America will be held in Denver, Colorado, April 7-9, 2014. Well, that might be fun. -- showing snuffy is when Sesame Street jumped the shark ---

[users@httpd] Re: WebDAV oddness

2014-01-04 Thread LuKreme
In our previous episode (Friday, 03-Jan-2014), LuKreme said: > This second dav will generate errors: After further testing (using cadaver) I now get this: cadaver http://webdav.example.net/ Authentication required for Randy on server `webdav.example.net'; Username: randy Password: wrong

[users@httpd] WebDAV oddness

2014-01-03 Thread LuKreme
On my Apache 2.4.6 (under FreeBSD 8.0-RELEASE) I have two nearly identical directives setup for webdav. The first is in users/example.com.conf and the second is in extras/vhosts.conf: ServerName virtual.example.net DocumentRoot /www/example.net/ DavLockDB /tmp/DavLock.randy D

[users@httpd] Re: alias issue on mac

2014-01-01 Thread LuKreme
In our previous episode (Tuesday, 31-Dec-2014), Érico said: > Hi > > no idea on this please? You said: > [Fri Dec 27 14:29:42 2013] [error] [client 127.0.0.1] (13)Permission denied: > access to /mysql/ denied (filesystem path > '/Users/ericomtx/development/php/MySQL-Admin_3_4_0_full') because

[users@httpd] Checking SSLCiphersuite?

2013-12-04 Thread LuKreme
How do I checks what ciphers are available to the https compiled binary, and how do I check with of those are active in the configuration? Is there any technical reason that ECDHE-RSA-AES128-SHA256 cannot be used on a server with a self-signed cert (there's no e-commerce or any financial data of

[users@httpd] Re: apache 2.4

2013-09-04 Thread LuKreme
On 04 Sep 2013, at 07:20 , Eric Covener wrote: > On Wed, Sep 4, 2013 at 9:03 AM, LuKreme wrote: >> >> Is it the case that in apache 2.4 you must add a directory structure for >> every directory you want to access and then add explicit allow permissions >> for

[users@httpd] apache 2.4

2013-09-04 Thread LuKreme
Is it the case that in apache 2.4 you must add a directory structure for every directory you want to access and then add explicit allow permissions for that directory? For example, despite having added /usr/local/www to the apache config Options +Indexes +FollowSymLinks +Includes -SymLink

[users@httpd] Re: WebDAV sort of works

2013-08-10 Thread LuKreme
On Aug 10, 2013, at 3:37, Igor Cicimov wrote: > First, the statements are case sensitive so location should be Location and > virtualhost should be VirtualHost. What? Since when? - To unsubscribe, e-mail: users-unsubscr...@htt

[users@httpd] WebDAV sort of works

2013-08-09 Thread LuKreme
I have the following structure in /etc/httpd/extras/httpd-vhost.conf (apache 2.4) ServerName webdav.example.com DocumentRoot /usr/local/www/ DavLockDB /tmp/DavLock.rotdav DAV On AuthType digest AuthName Root AuthUserFile /usr/local/www/.htdigestpass Options All F

[users@httpd] Re: AuthType Digest in 2.4?

2013-08-08 Thread LuKreme
On 07 Aug 2013, at 17:17 , Ben Reser wrote: > On Wed, Aug 7, 2013 at 6:20 AM, LuKreme wrote: >> First, when we set this up ages ago-go, the way to go was >> >> AuthType digest >> >> And I rather suspect that is *nt* the recommended way to go with 2.4. >

[users@httpd] AuthType Digest in 2.4?

2013-08-07 Thread LuKreme
I had webDAV setup previously, but disabled it when transitioning to 2.4. Before I dive in and try to get it working again, I have a couple of questions. First, when we set this up ages ago-go, the way to go was AuthType digest And I rather suspect that is *nt* the recommended way to go with

[users@httpd] Re: How limit directives at htaccess file

2013-08-07 Thread LuKreme
On 06 Aug 2013, at 12:54 , Pol Hallen wrote: > Hi all, I'm study apache and I don't understand some things about htaccess. > > Reading, the advice is: never permit htaccess to users. That's terrible advice, or very outdated advice. .htaccess is required, for example, for a working wordpress i

[users@httpd] Re: Broken includes and cgis with Apache 2.4 update

2013-08-06 Thread LuKreme
On 06 Aug 2013, at 05:05 , Eric Covener wrote: > AllowOverride defaults to off in 2.4. Turn it on. Ah, I have it enabled in httpd.conf, but not for the user's directories. Thank you, I figured it was something simple. -- 99 percent of lawyers give the rest a bad name. ---

[users@httpd] Re: Broken includes and cgis with Apache 2.4 update

2013-08-05 Thread LuKreme
On 05 Aug 2013, at 16:12 , Jeff Trawick wrote: > Temporarily add a new line "Garbage In Out" in httpd.conf right after > > Options +Indexes +FollowSymLinks +Includes -SymLinksIfOwnerMatch apachectl -t AH00526: Syntax error on line 219 of /usr/local/etc/apache24/httpd.conf: Invalid command 'Garb

[users@httpd] Re: Broken includes and cgis with Apache 2.4 update

2013-08-05 Thread LuKreme
On 05 Aug 2013, at 15:01 , Jeff Trawick wrote: > what's in the error log (with LogLevel debug) when you request the resource > that doesn't get the proper include processing? [Mon Aug 05 15:37:46.560372 2013] [include:warn] [pid 89737] [client 23.24.150.141:59141] AH01374: mod_include: Option

[users@httpd] Re: Broken includes and cgis with Apache 2.4 update

2013-08-05 Thread LuKreme
On 04 Aug 2013, at 23:19 , LuKreme wrote: > I have a site with the following .htaccess: > > Options +ExecCGI +Includes > AddType text/html .shtml > AddOutputFilter INCLUDES .shtml > AddType application/x-httpd-cgi .cgi/ > AddType application/x-httpd-cgi .pl > AddType app

[users@httpd] Broken includes and cgis with Apache 2.4 update

2013-08-04 Thread LuKreme
I have a site with the following .htaccess: Options +ExecCGI +Includes AddType text/html .shtml AddOutputFilter INCLUDES .shtml AddType application/x-httpd-cgi .cgi/ AddType application/x-httpd-cgi .pl AddType application/x-httpd-cgi .pl/ AddType text/css .css I also have Addtype and AddOutputFil

[us...@httpd] Re: mod_webdav problem

2010-07-23 Thread LuKreme
On 23-Jul-2010, at 13:08, Joost de Heer wrote: > >>> < Server: Apache/2.2.8 (Ubuntu) DAV/2 mod_python/3.3.1 Python/2.5.2 > >> The Server: HTTP header doesn't mention mod_webdav. > > It does: DAV/2 > > I don't think this is a bug. Why would DAV have to do anything if a file with > 0 bytes shou

[us...@httpd] Re: mod_webdav problem

2010-07-22 Thread LuKreme
On 21-Jul-2010, at 14:38, Thorsten Steinbrenner wrote: > > problem is, that the webdav server does NOT update the timestamp after a > "HTTP PUT". Um… I don't see this. When I copy a file to the webdav server it gets the time stamp of the time it was created on the server. If you need to change

[us...@httpd] Re: VirtualHosts warning

2010-06-04 Thread LuKreme
On 4-Jun-2010, at 08:20, Tom Evans wrote: > > On Fri, Jun 4, 2010 at 3:13 PM, LuKreme wrote: >> # apachectl -S >> VirtualHost configuration: >> wildcard NameVirtualHosts and _default_ servers: >> *:*is a NameVirtualHost >> … >> S

[us...@httpd] VirtualHosts warning

2010-06-04 Thread LuKreme
# apachectl -S VirtualHost configuration: wildcard NameVirtualHosts and _default_ servers: *:*is a NameVirtualHost … Syntax OK Is this something that needs fixing? I ask because everything appears to work. And how does one fix it. I've read the docs and I have to say I don't

[us...@httpd] Re: How to prevent flashgot by .htaccess ?

2010-05-24 Thread LuKreme
On 24-May-2010, at 06:44, J. Bakshi wrote: > > Hello list, > > Can any one suggest me the signature of flashgot as seen by apache ? Does flashgot show up in your server logs? I don't think so. > I need that to prevent flashgot from .htaccess. Good luck with that. Why would you think this was

[us...@httpd] Re: multiple SSL on one computer - IP

2010-04-22 Thread LuKreme
On 21-Apr-2010, at 16:48, Michael Ni wrote: > > i have a situation where I have only one computer (one IP) with > 2 virtual hosts > > one virtual host is static.foobar.com > > one virtual host is www.foobar.com > > both have separate ssl certs registered to the corresponding domain. > > i trie

[us...@httpd] Re: Preventing DoS attacks from single client host

2010-04-04 Thread LuKreme
On 4-Apr-2010, at 05:40, Nick Kew wrote: > > On 4 Apr 2010, at 07:03, Morgan Gangwere wrote: > >> On a note, someone posted about Slowloris and Apache: >> http://bahumbug.wordpress.com/2009/06/21/slowloris/ > > FWIW, that's been overtaken by events. I wrote mod_noloris shortly after > that blog

[us...@httpd] Re: How to map http://www.myaddress.com to http://www.myaddress.com:8000 ?

2010-02-28 Thread LuKreme
On 28-Feb-10 12:56, Mike Hagerty wrote: I want apache to reroute all traffic coming in on the (httpd) default port 80 to port 8000. How do you think apache is going to see any traffic on port 80 when your firewall is blocking port 80? -- She'd always tried to face towards the light. She'd a

[us...@httpd] Re: Cacthing hosts

2010-02-28 Thread LuKreme
On 28-Feb-10 03:13, Nilesh Govindarajan wrote: On Sun, Feb 28, 2010 at 1:01 AM, LuKreme wrote: On 27-Feb-2010, at 10:17, Nilesh Govindarajan wrote: What if I want all IPs ? What I posted will do what you want. Request to www.example.com will go to the example.com dir, www.example.net will

[us...@httpd] Re: Cacthing hosts

2010-02-27 Thread LuKreme
On 27-Feb-2010, at 10:17, Nilesh Govindarajan wrote: > > What if I want all IPs ? Your not understanding the function of the first VirtualHost. It is special as it is the default for anything that doesn't match another VirtualHost. What I posted will do what you want. Request to www.example.com

[us...@httpd] Re: Cacthing hosts

2010-02-27 Thread LuKreme
On 27-Feb-2010, at 04:20, Nilesh Govindarajan wrote: > > This configuration has to be placed after all good vhosts; Otherwise all > hosts give Error 400. Why ? Because all hosts match. This is not the best way to do it, wildcards are discouraged. As Frank said: On 26-Feb-2010, at 10:22, Frank

[us...@httpd] Re: Apache 1.3 OS X 10.4 help

2010-02-25 Thread LuKreme
On 24-Feb-10 21:43, Jonathan Zuckerman wrote: I'm saying your webpage is weird, can you explain why your links are using the IP instead of the hostname? Can someone explain why these posts are 1) in HTML 2) contain multiple copies of the list footers 3) have no quote levels? I replied to the

[us...@httpd] Re: Apache 1.3 OS X 10.4 help

2010-02-25 Thread LuKreme
On 24-Feb-10 14:08, Jonathan Zuckerman wrote: are respectively forwarded to the above url's using my hosts framed web forwarding. This sound, then, like the issue is with the framed web forwarding which is specifically designed to do what you are describing. Your host would need to be setup

[us...@httpd] Re: Can I have 2 httpd servers running on 2 different ports?

2010-02-25 Thread LuKreme
On 24-Feb-10 10:49, Sheryl wrote: Instead, just have a different directory for each instance. For instance /usr/local/apache -- where you install your software /opt/server1 -- first server bin, build, error, icons, include, lib, man, manual, modules, mime-types, magic are links to equival

[us...@httpd] Re: hitting apache across home network with hosts file

2010-01-28 Thread LuKreme
On 28-Jan-2010, at 13:08, Matthew Smith wrote: > > I have modified the windows 7 machine host file to the following: > 192.168.1.2 mysite_com Is that the correct format for the hosts file in Windos? I seem to recall the Windows host file was 'different' Did you verify that the hosts file is in

[us...@httpd] Re: outdated ssl cert

2010-01-16 Thread LuKreme
On 16-Jan-2010, at 09:58, Vadkan Jozsef wrote: > does an outdated self-signed certificate give the same security > as a normal cert? An outdated cert, self-signed or not, is invalid. So, no. -- 'An appointment is an engagement to see someone, while a morningstar is a large lump of metal used f

[us...@httpd] Re: %2f to "/"

2010-01-15 Thread LuKreme
On 15-Jan-2010, at 11:19, Kpadvel wrote: > In-Reply-To: <2e027be01001150934m482eb453p1d6bee636977a...@mail.gmail.com> Please do not hijack someone else's thread to start your own thread. Changing the subject is not enough. Start a new message addressed to the list. -- Vampires are [...] by natu

[us...@httpd] Re: Apache vs LiteSpeed

2010-01-15 Thread LuKreme
On 15-Jan-2010, at 12:38, Scott Gifford wrote: > I think using a LAN/VLAN connection would be a fair measure. You could also > consider running the tests as instances on Amazon EC2, which will let you > lease a small pool of servers for a few hours for $20 or so. That's a good idea. I'd forgotte

[us...@httpd] Re: Apache vs LiteSpeed

2010-01-15 Thread LuKreme
On 15-Jan-2010, at 10:34, Jarrod Slick wrote: >>> So, I should be more specific with my question: to the end of determining >>> strictly which webserver is more efficient do you see any problems with >>> this type of setup? >> >> More 'efficient' I think you mean. > > Is that not exactly what

[us...@httpd] Re: Apache vs LiteSpeed

2010-01-15 Thread LuKreme
On 15-Jan-2010, at 10:08, Jarrod Slick wrote: > On Jan 15, 2010, at 11:03 AM, Eric Covener wrote: >> On Fri, Jan 15, 2010 at 12:00 PM, Jarrod Slick >> wrote: >> >>> What about having a private VLAN between a testing machine and the apache >>> machine. I suppose that would solve the resource sep

[us...@httpd] Re: Apache vs LiteSpeed

2010-01-15 Thread LuKreme
On 15-Jan-2010, at 09:29, Jarrod Slick wrote: > I'm curious -- why do you think that the results will be inconsistent? If > anything I would be inclined to think that using localhost would improve > consistency as extraneous variables like network congestion at the time of > testing would not b

[us...@httpd] Re: SSI Rejection

2009-12-30 Thread LuKreme
On 30-Dec-2009, at 10:47, Wesley Stupar wrote: > But I don't know what you mean by " How have you told Apache to execute > the SHTML". How do you do that? Well, these are the shtml lines in my httpd.conf file: $ grep shtml /etc/httpd/httpd.conf AddType text/html .shtml AddHandler server-

[us...@httpd] Re: unsubscribe

2009-12-28 Thread LuKreme
On 28-Dec-2009, at 14:35, Ali Jawad wrote: > To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org > " from the digest: users-digest-unsubscr...@httpd.apache.org -- I WILL NOT DRIVE THE PRINCIPAL'S CAR Bart chalkboard Ep. 7F06 ---

[us...@httpd] Re: HTTPD Logwatch

2009-12-24 Thread LuKreme
On 24-Dec-2009, at 22:37, Kaustubh Deorukhkar wrote: > I am naive user..but this is what comes to my mind...please see if this > helps > > - create seperate logs per website… You do this by specifying the logfile name and format in the the VirtualHost directives. -- 'I'm a raven, aren't I?' it

[us...@httpd] Re: Sporadic Apache delays

2009-12-23 Thread LuKreme
On 22-Dec-2009, at 18:03, Alok Chugh wrote: Please don't hijack other threads. Your post has nothing to do with "Newbie Question:How to change chunk size" Start a NEW message. -- Mister Teatime had a truly brilliant mind, but it was brilliant like a fractured mirror, all marvellous facets an

[us...@httpd] Allowing users access to their websites (Possibly OT?)

2009-12-19 Thread LuKreme
I have several users who have websites on my Apache 2.2.13/FreeBSD 8.0-RELEASE server and I give them access to their files via webdav. This mostly has worked fine for years (Since FreeBSD 4.2-RELEASE), but I occasionally have weird problems with webdav (especially with things like Drupal or Wor

[us...@httpd] Re: .htaccess restricts write permission from webdav

2009-12-07 Thread LuKreme
On 6-Dec-2009, at 20:15, J. Bakshi wrote: > RewriteRule ^typo3$ - [L] > RewriteRule ^typo3/.*$ - [L] > ` ` ` > > and now webdav has no problem with create/delete operation One other thing, if you duplicate the RewriteCond above these rules, they should work as well. something like: Options +F

[us...@httpd] Re: .htaccess restricts write permission from webdav

2009-12-07 Thread LuKreme
On 6-Dec-2009, at 20:15, J. Bakshi wrote: > Though I have fond that creating a .htaccess or deleting it through webdav is > not possible. Usually apache is setup to refuse to serve .ht* files for security reasons. If this is not the case, there's no reason the htaccess file should not be avail

[us...@httpd] Re: href="frag.php&field=value" gets error 404.

2009-12-05 Thread LuKreme
On Dec 5, 2009, at 10:18, Brian Hooper wrote: Frag Input & is used to separate values from each other. ? Is used to seperate the values from the URL.

[us...@httpd] Re: Building Apache 2.2 without IPv6

2009-12-04 Thread LuKreme
On 4-Dec-2009, at 07:47, Jorge Medina wrote: > What a nasty member of the user list! Nah, just a bad case of myopia. -- BUGS: There is no conversion specification for the phase of the moon." strftime(3) man page - The

[us...@httpd] Re: .htaccess restricts write permission from webdav

2009-12-04 Thread LuKreme
On 3-Dec-2009, at 22:22, J. Bakshi wrote: > Options +FollowSymLinks > > RewriteEngine On > RewriteRule ^typo3$ - [L] > RewriteRule ^typo3/.*$ - [L] > > RewriteCond %{REQUEST_FILENAME} !-f > RewriteCond %{REQUEST_FILENAME} !-d > RewriteCond %{REQUEST_FILENAME} !-l > > RewriteCond %{REQUEST_URI}

[us...@httpd] Re: .htaccess restricts write permission from webdav

2009-12-03 Thread LuKreme
On Dec 3, 2009, at 20:13, "J. Bakshi" wrote: RewriteCond %{REQUEST_URI} !^webdav That's wrong. !^/webdav The / is part of the uri - The official User-To-User support forum of the Apache HTTP Server Project. See http://http

[us...@httpd] Re: .htaccess restricts write permission from webdav

2009-12-03 Thread LuKreme
On 2-Dec-2009, at 22:36, J. Bakshi wrote: > RewriteEngine On > RewriteRule ^typo3$ - [L] > RewriteRule ^typo3/.*$ - [L] I just went through this with wordpress. You have to exempt webdav from all the rewrites. On 25-Nov-2009, at 11:15, LuKreme wrote: > I modified the htaccess f

[us...@httpd] Re: SSL on Apache 2.2.14

2009-11-27 Thread LuKreme
On 27-Nov-2009, at 04:41, Zachary Uram wrote: > On Thu, Nov 26, 2009 at 11:09 AM, LuKreme wrote: >> On 26-Nov-2009, at 05:15, daniel.goul...@and.co.uk wrote: >>> Maybe you could try --enable-shared in your configure arguments? >> >> Really? Purple text AND TOFU po

[us...@httpd] Re: SSL on Apache 2.2.14

2009-11-26 Thread LuKreme
On 26-Nov-2009, at 05:15, daniel.goul...@and.co.uk wrote: > Maybe you could try --enable-shared in your configure arguments? Really? Purple text AND TOFU posting? Ugh -- FUNNY NOISES ARE NOT FUNNY Bart chalkboard Ep. 8F20 ---

[us...@httpd] Re: webdav and permissions [Solved]

2009-11-25 Thread LuKreme
On 23-Nov-2009, at 18:10, LuKreme wrote: > < > RewriteEngine On > RewriteBase / > RewriteCond %{REQUEST_FILENAME} !-f > RewriteCond %{REQUEST_FILENAME} !-d > RewriteRule . /index.php [L] > RewriteRule ^u/([0-9]+)$ wp-content/plugins/short-url-plugin/u.php?$1|$2 > I

[us...@httpd] webdav and permissions

2009-11-23 Thread LuKreme
I posted this on the OS X Talk list first, but haven't gotten a solution yet. I have a remote server (FreeBSD, apache 2.2.11_7) with a wordpress (current) install. The permissions on the main root folder for the install are: $ ls -lsa total 92 2 drwxr-xr-x 7 www wheel512 Nov 22 13:20 .

[us...@httpd] Re: RewriteBase is not working in apache configuration file

2009-11-16 Thread LuKreme
On 15-Nov-2009, at 21:27, J. Bakshi wrote: > RewriteBase is working perfectly OK in .htaccess but not in apache > configuration file. I'm trying to imagine a scenario in which you would need RewriteBase in the apache configuration file. Isn't the point of it to be in .htaccess? I'm almost positi

[us...@httpd] Re: Apache error if using Basic AuthType under Location directive

2009-11-15 Thread LuKreme
On 15-Nov-2009, at 12:22, Eric Covener wrote: > On Sun, Nov 15, 2009 at 11:42 AM, Iacopo Benesperi wrote: >> Eric Covener ha scritto: >>> As the error message says, You can't put in htaccess. It's >>> got nothing to do with what's inside the . >> >> So where can I use the location directive? >

[us...@httpd] Re: Dynamically block certain requests on trigger?

2009-11-14 Thread LuKreme
On 14-Nov-2009, at 08:24, kofal...@umn.edu wrote: > What would would be perfect is a module that watches for conditions like > these, and if they trigger, drops requests from that IP for the next 24 > hours. For example. if anybody requests "phpmyadmin" at all, I don't want the > server to even

[us...@httpd] Re: setting up webdav

2009-11-11 Thread LuKreme
On 11-Nov-2009, at 17:11, LuKreme wrote: > I have the following directive for one domain, which works just fine with > webdav: Never mind. Someone enabled 'evasive20_module' sometime this afternoon, and it was this event that stopped webdav mounts (all of them) to stop working.

[us...@httpd] Re: setting up webdav

2009-11-11 Thread LuKreme
On 11-Nov-2009, at 18:04, André Warnier wrote: > LuKreme wrote: >> any file named .ht* is never served by apache, and there's really nowhere >> else to place the .htdavpass file. > What do you mean there is nowhere else ? > What about under /usr/local/www, and name it

[us...@httpd] Re: setting up webdav

2009-11-11 Thread LuKreme
On 11-Nov-2009, at 17:28, André Warnier wrote: > LuKreme wrote: > ... >> DocumentRoot /usr/local/www/example.com/ > ... >> AuthUserFile /usr/local/www/example.com/.htdavpass > > I think that you have managed to do what no developer of Apache ever thought

[us...@httpd] setting up webdav

2009-11-11 Thread LuKreme
I have a server running Apache 2.2.11_7 on FreeBSD 6-2-RELEASE with webdav enabled. I have several domains on the machine. I have the following directive for one domain, which works just fine with webdav: ServerName webdav.example.com ServerAlias files.example.com DocumentRoot /usr/lo

Re: [us...@httpd]

2009-11-10 Thread LuKreme
On 10-Nov-2009, at 13:49, André Warnier wrote: > And I would add that, from a user point of view, I would be very reluctant to > help at any system that would let me be identified in any way other than me > voluntarily and knowingly providing my id by means of some obvious login page > or certif

[us...@httpd] Re: DAV access control

2009-11-10 Thread LuKreme
On 10-Nov-2009, at 08:00, skrishnam...@bloomberg.com wrote: > We are looking to setup SVN over apache, but it requires the use of DAV. requires? I though SVN over DAV was a particular configuration option? > There are apparently security concerns over the use of DAV over apache 2.2., There are

[us...@httpd] Re: Httpd configuration error

2009-11-05 Thread LuKreme
On 5-Nov-2009, at 09:39, Sheryl wrote: On 5-Nov-2009, at 05:31, daulat khan wrote: SunOS earms-sj-test 5.10 Generic_118822-25 sun4u sparc SUNW,Sun- Fire- V490 Well, your OS is pushing 20 years old, and has been OELed for over a decade. ??? It's been a few years since I worked with Solaris,

[us...@httpd] Re: Conditional .htaccess

2009-10-19 Thread LuKreme
On 19-Oct-2009, at 17:23, Scott Haneda wrote: php admin value and php flag values, I would like to only be enabled for my IP address, but publicly, I want them off, so the public does not see errors, only I do. I think the way to do this is to setup a different location. Something like this

[us...@httpd] IndexIgnore

2009-09-24 Thread LuKreme
I have an htaccess file with a directive IndexIgnore head.html foot.html .. Which prevents the "Parent Directory" from showing up in the directory listing. Now, I want to show the "Parent Directory" in the directories under this one, but there doesn't seem to be an IndexUnignore directive

[us...@httpd] Cascading dirs and .htaccess

2009-09-23 Thread LuKreme
I have a directory structure in which I have a .htaccess file at the top level: Options All +MultiViews IndexOptions FancyIndexing FoldersFirst NameWidth=* DescriptionWidth=* IconsAreLinks SuppressHTMLPreamble IconHeight=20 IconWidth=20 AddIcon /icons/zip.gif .gz .zip .tgz AddIcon /icons/dir

[us...@httpd] Re: Automatically grant authenticated users access to a dir matching their username

2009-09-22 Thread LuKreme
On 22-Sep-2009, at 05:31, Joahnn Gile wrote: Is there some other solution for automatically granting authenticated users access to "their" individual directory? Have your user-creation tools create /etc/apache2/users/user999.conf file when the user is created. Isn't that the usual way? --

[us...@httpd] Re: how do I *define* a default virtual host

2009-09-16 Thread LuKreme
On 16-Sep-2009, at 08:22, Eric Covener wrote: On Wed, Sep 16, 2009 at 10:02 AM, LuKreme wrote: OTOH, _default_ is dangerous, and you have to be sure that it is the LAST directive as it stomps everything that follows it. Whether it comes first or last, it never "covers up" a V

[us...@httpd] Re: how do I *define* a default virtual host

2009-09-16 Thread LuKreme
On 16-Sep-2009, at 07:17, Geurts, G.P.T.M. wrote: Hello, Thanks for your reply! I don't think it whould work for us we use ip based virtual hosting so a virtualhost directive looks like What does the __default__ directive do anyways? _default_ is useful. Say you have 20 IPs on a single

[us...@httpd] Re: how do I *define* a default virtual host

2009-09-15 Thread LuKreme
On 15-Sep-2009, at 09:34, Jan G.B. wrote: 2009/9/15 LuKreme I always put my default VirtualHost directly into the httpd.conf file, just before the Include line. I'd say this way it's always unclear which is the default vhost. As you have to dig through instead of just issu

[us...@httpd] Re: how do I *define* a default virtual host

2009-09-15 Thread LuKreme
On 15-Sep-2009, at 01:54, Krist van Besien wrote: On Tue, Sep 15, 2009 at 9:02 AM, robert rottermann wrote: hi ther, I load my VH's from a directory with a number of VH's is it possible to define which one is the default one? it seems to select the first in alphabetical order. I asume you

[us...@httpd] Re: how to create payment gateway

2009-08-20 Thread LuKreme
On 20-Aug-2009, at 06:51, Richard Peacock wrote: Ps. Sorry for the spam but Krist, you have really made me laugh out loud! Too bad you didn't read Krist's signature about top posting. http://en.wikipedia.org/wiki/TOFU#Top-posting -- Well I've seen the Heart of Darkness/Read the writing on the

[us...@httpd] Re: Allow directive - limitation?

2009-08-14 Thread LuKreme
On 14-Aug-2009, at 00:30, Stephen Vaughan wrote: Is there a limitation on the number of characters you can have per line for 'Allow from'? I don't know about Allow from specifically, but often 'lines' are limited internally to eithe 255 characters or 1024 characters. Are you around any of

[us...@httpd] Re: backup & restore apache & mysql

2009-08-06 Thread LuKreme
On 6-Aug-2009, at 10:22, Richard Peacock wrote: What would be the best way to perform a full Apache backup and MySQL (I know it's not exactly related and understand if you can't make any suggestions for this)? /usr/local/bin/rsync -aCHh --stats --delete-after --delete-excluded \ --exclude

[us...@httpd] Re: Secure and unsecure apache

2009-08-06 Thread LuKreme
On 3-Aug-2009, at 18:39, Eric Covener wrote: On Mon, Aug 3, 2009 at 8:16 PM, LuKreme wrote: ServerName securemail.example.com SSLCertificateFile /usr/local/etc/apache22/server.pem SSLCertificateKeyFile /usr/local/etc/apache22/server.key ServerAdmin ad...@example.com DocumentRoot /usr

[us...@httpd] Re: Secure and unsecure apache

2009-08-03 Thread LuKreme
[Sorry, premature send] On 3-Aug-2009, at 18:16, LuKreme wrote: I can list the .key and .pem files: $ ls -ls /usr/local/etc/apache22/server.key 0 lrwxr-xr-x 1 root wheel 17 May 3 2007 /usr/local/etc/apache22/ server.key -> server.key.nopass $ ls -ls /usr/local/etc/apach

[us...@httpd] Secure and unsecure apache

2009-08-03 Thread LuKreme
I have a FreeBSD-6.2 server with apache-2.2.4 which unly runs an instance of the webmail client Squirrelmail so, I have the server name set to ServerName webmail.example.com and I have DocumentRoot "/usr/local/www/squirrelmail" and then I have: Listen 80 Listen 443 NameVirtualHost *:443 Na