Re: [users@httpd] Stupid question on mod_header

On Wed, Oct 6, 2021 at 8:58 PM Konstantin Kolinko wrote: > ср, 6 окт. 2021 г. в 13:10, Martin Knoblauch : > > > > Hi, > > > > sorry for asking this likely stupid question. This is with Apache HTTPD > 2.4.48. > > > > I want to change the value of the X

[users@httpd] Stupid question on mod_header

, one with SAMEORIGIN. And falls back to DENY :-( When I add an unset before the set, it works Header unset X-Frame-Options Header always set X-Frame-Options SAMEORIGIN Is my understanding of the mod_header documentation wrong, or do I miss somethiong subtle? Che

[users@httpd] Use of "exec" in apachectl in a Docker environment

APACHE_ARGUMENTS}\)/exec \1/' /usr/sbin/apache2ctl` ) Might it be a sensible change in the apachectl to always call the binary with "exec" (at least on the systems where exec exists) Thanks Best Martin ---- Dr

[users@httpd] Re: Weird SSLProtocol issue

.g. if TLS 1.0 and TLS 1.2 are both enabled, make sure to also leave TLS 1.1 enabled. Apparently this changed from 1.0.2 and I can no longer have TLSv1.0 without also enabling TLSv1.1. Time to beat up the old clients harder. Sorry for the noise Martin On Wed, Oct 21, 2020 at 11:37 PM Martin Knobla

[users@httpd] Weird SSLProtocol issue

ols: SSLv2 disabled SSLv3 disabled TLSv1.0 enabled TLSv1.1 enabled TLSv1.2 enabled TLSv1.3 enabled which is not what I want. So, any ideas? Am I doing something wrong? Cheers Martin -- ------ Martin Knoblauch email: k n o b i AT knobisoft

Re: [users@httpd] Recommended best practices or guides

orts no regular expressions. However, with wildcards, which does work in a sudoers file, you can construct almost any command you may need. It will not look pretty, but it will work. Use the Cmnd_Alias, avoid Asterisk! -- Martin signature.asc Description: OpenPGP digital signature

Re: [users@httpd] Apache and nextcloud - insecure ?

Hi Bernd, very short answer to 1.: Yes, you want to write data there. Hence you need rite privileges. Make sure, privileges of www-data are restricted to that directory, you will be fine. Off topic about 2.: Consider using ownCloud, because it has .deb repo, you can get updates if you want to.

[users@httpd] Modifying/adding cookie attributes on the fly?

ged to do "the right thing", or we could tell the Tomcat CookieProcessor to set the attribute to "None". Unfortunately not possible. See above. Now my question is, is there a trick to do that with "httpd" or a module? Chec

[users@httpd] Re: How to upload Files larger than 2GB

is meant to provide > whatever limits it considers appropriate. > > Thanks for clarifying that. > I wonder if httpd/mod_jk is trying cache the entire request body before > forwarding. How is the request sent? With chunked-encoding or with a > content-

[users@httpd] How to upload Files larger than 2GB

20GB, but it did not help. Any advice is highly welcome. Just not - Don't use HTTP for uploading large files. It is the mechanism the application offers - Don't allow upload of large files. Unfortunately it is a valid use-case. Thanks in advance Martin -- -----

Re: [users@httpd] Apache on windows

On Thu, Feb 27, 2020 at 8:52 AM Martin Grigorov wrote: > Hi, > > On Thu, Feb 27, 2020 at 3:41 AM Kumar Tadkala > wrote: > >> Hi there >> >> Whenever we do load test, our Apache is going down >> >> How can we understand, what causing this. >> &

Re: [users@httpd] Apache on windows

Hi, On Thu, Feb 27, 2020 at 3:41 AM Kumar Tadkala wrote: > Hi there > > Whenever we do load test, our Apache is going down > > How can we understand, what causing this. > Did you check the log files ? Maybe the Java process fails with OutOfMemoryError ?! > > > Thank you > > Kumar >

Re: [users@httpd] Optimal way to trigger logging if certain URL is accessed

Ok, thanks for replies! regards, Martin - To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org

[users@httpd] Optimal way to trigger logging if certain URL is accessed

RL is accessed. While this seems to work fine, then is this the correct/optimal way to accomplish this? I'm using Apache version 2.4.38 on Debian 10. thanks, Martin - To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org

Re: [users@httpd] Is it possible to have in Apache 2.4 VirtualHosts, each with its own SSLProtocol ?

erver.on.my.domain > SSLProtocol-all +TLSv1.3 > > > For both I use wildcard certificates for *server.on.my.domain; what I > would like is to have the second server responding to TLS 1.3 only - > however, it seems that the configuration of the first virtual host prevails! > > Is it possible to do what I am looking for? if yes, what am I doing wrong? > > Marian Ion Martin signature.asc Description: OpenPGP digital signature

[users@httpd] Issue with 'Require expr' and pattern indents

lancer which terminates SSL/TLS as a HTTP-header. Works well so far. As long indents are made with space characters. Problem is, when indentation is done with a tab, the following expression never matches. Is this behavior plausible and/or wanted in any way? Thanks, Martin signature.asc Description: OpenPGP digital signature

[users@httpd] Re: Apache 2.4.33 with mod_jk 1.2.43 keeps shutting down when no Tomcat worker is available

Hi, please ignore. There was another component (corosync) that I did not consider. When all tomcats are down, that ends up in a 503 which confused the HA software ... Happy Weekend Martin On Fri, Aug 17, 2018 at 12:15 PM Martin Knoblauch wrote: > Hi, > > we have Apache-2.4.33 as a

[users@httpd] Apache 2.4.33 with mod_jk 1.2.43 keeps shutting down when no Tomcat worker is available

t/cb2/apache2/conf/httpd.conf' [Fri Aug 17 11:39:27.106795 2018] [mpm_worker:notice] [pid 2312:tid 139990203332352] AH00295: caught SIGTERM, shutting down Is there anything known along this lines? Thanks Martin -- ------ Martin Knoblauch email: k

Re: [users@httpd] Apache load balancer, etc

Hi John, care to share pointers to those comparisons? Curious myself ... Thanks Martin On Mon, Jul 2, 2018 at 7:24 PM, Rose, John B wrote: > Have been comparing Apache load balancing with some other possibilities > > As expected can do just about anything you want with Apach

Re: [users@httpd] How to print request headers before and after processing

riteCond "%{HTTP_COOKIE}" "(.*)" RewriteRule ^/xxx/facelets/logon.xhtml$ - [E=login_jsid:%1] Clearly, the logging is now much better than with the "forensic" stuff. Now to the main task :-) Cheers Martin On Thu, Mar 22, 2018 at 8:28 PM, Rainer Jung wrote: > Am

Re: [users@httpd] How to print request headers before and after processing

Hi Rainer, unfortunately mod_log_debug seems to work only on directory scope, not on virtual host. And I considered the mod_rewrite thingy, but feared it to be to expensive. In the meantime I found "mod_log_forensic". Ugly, I do not know the cost, but it works for my purpose. Tha

Re: [users@httpd] How to print request headers before and after processing

e how it helps me in this case. Thanks Martin On Thu, Mar 22, 2018 at 5:50 PM, Eric Covener wrote: > On Thu, Mar 22, 2018 at 12:50 PM, Eric Covener wrote: > > have you looked at mod_log_debug? > > > >> SetEnvIfExpr "%{REQUEST_URI} == '/cb2/facelets/logon.xhtml&

[users@httpd] How to print request headers before and after processing

tomLog "/apache2/logs/login_log" xxxlogheader env=login_get So I would actually expect the content of the Cookie being printed twice when doing no additional processing. Instead I get: "GET /xxx/facelets/logon.xhtml '%{HTTP_COOKIE}e' 'JSESSION

Re: [users@httpd] Next release ?

Hi Stefan, thanks. I think that will fly very well with my organisation, as OpenSSL will release their next security update also soon. Cheers Martin PS: dont't spell the word disaster in vain. It might listen :-) On Thu, Mar 22, 2018 at 11:08 AM, Stefan Eissing < stefan.eiss...@green

[users@httpd] Next release ?

Hi, sorry for the non-technical question. Is there already a date for the next official release post 2.4.29? I see internally version 2.4.33, but that does not seem to be official/public. I would like to have the information for plannig purposes (big, paranoid IT organisation :-( TIA Martin

Re: [users@httpd] Two questions on httpd tuning

Hi Luca, On Fri, Aug 18, 2017 at 9:01 AM, Luca Toscano wrote: > Hi Martin, > > 2017-08-17 17:40 GMT+02:00 Martin Knoblauch : > >> Hi, >> >> this is for httpd-2.4.26 with the mpm_worker_module. I have one >> practical and one more theoretical question. >

[users@httpd] Two questions on httpd tuning

configuration and I ever want to increase MaxRequestWorkers above 400 my understanding is that I need to either increase ServerLimit or ThreadsPerChild (or adjust both). Which should I touch first (why :-)? Thanks a lot in advance Martin -- -- Martin

Re: [users@httpd] Problems building httpd-2.4.26 with apr-1.6.2 and apr-util-1.6.0

page :-) All good now. Thanks Martin On Mon, Jun 26, 2017 at 11:21 AM, Nick Kew wrote: > On Mon, 2017-06-26 at 10:55 +0200, Martin Knoblauch wrote: > > > > So my question now is - was the removal of expat from apr-util > > intentional? I see no mentioning in the release

Re: [users@httpd] Problems building httpd-2.4.26 with apr-1.6.2 and apr-util-1.6.0

; is needed. Cheers Martin On Fri, Jun 23, 2017 at 7:16 PM, William A Rowe Jr wrote: > On Fri, Jun 23, 2017 at 11:22 AM, Eric Covener wrote: > > On Fri, Jun 23, 2017 at 10:55 AM, Martin Knoblauch > wrote: > >> Apparently apr-util no longer bundles "expat". So my q

Re: [users@httpd] Problems building httpd-2.4.26 with apr-1.6.2 and apr-util-1.6.0

build process. So my question now is - was the removal of expat from apr-util intentional? I see no mentioning in the release notes. Thanks Martin On Fri, Jun 23, 2017 at 6:22 PM, Eric Covener wrote: > On Fri, Jun 23, 2017 at 10:55 AM, Martin Knoblauch > wrote: > > Apparently

[users@httpd] Problems building httpd-2.4.26 with apr-1.6.2 and apr-util-1.6.0

on: what is the correct/intended way to work around this? Thanks in advance Martin -- -- Martin Knoblauch email: k n o b i AT knobisoft DOT de www: http://www.knobisoft.de

[users@httpd] Apache configuration - DirectoryMatch directive: Error in regex evaluation

Dear all, I am using Apache/2.4.10 (Debian). Following the Apache documentation, I am trying to configure my server using DirectoryMatch. I get the expected behavior concerning the directories I want to handle (only user whose name is the same as the directory name can access to the directory).

[users@httpd] Apache configuration - DirectoryMatch directive: Error in regex evaluation

Dear all, I am using Apache/2.4.10 (Debian). Following the Apache documentation, I am trying to configure my server using DirectoryMatch. I get the expected behavior concerning the directories I want to handle (only user whose name is the same as the directory name can access to the directory).

Re: [users@httpd] Content negotiation with language subtags

OK, thanks for the clarification. Martin On 15.07.16 14:46, Marat Khalili wrote: > According to RFC 2616 > <https://www.w3.org/Protocols/rfc2616/rfc2616-sec14.html>: >>Note: This use of a prefix matching rule does not imply that >>language tags are assigne

[users@httpd] Content negotiation with language subtags

as "de, de-DE, de-CH, de-AT" for German? Or is there at way to specify "match this language with any language subtags"? My naive approach "de-*" did not work. Or is it a bug in the HTTP client (in my case: Android WebView) if it

[users@httpd] Piped logs gotcha: multiple config stanzas pointing to the same cmd string

Hi Apache users, devs, I have recently switched an infra from straight logging to files to piped logs (using compresslog to compress the logs before they are written out -- http://repo.or.cz/w/compresslog.git/ ). Turns out there is a gotcha. When logging to files, it is harmless to have multiple

[users@httpd] compresslog: pipe log through gzip without the headaches

[ Using piped logs with gzip is rather painful. Here is what I came up with to improve the "user experience". Getting the scripts right so that no data was lost in normal operation is non-trivial, so I thought I'd share. ] =compresslog README= Save a ton of disk IO (or SAN traffic) in your webser

Re: [users@httpd] Deny by IP address unsuccessful

Just put allow from all to the bottom of configuration. You have order deny, allow so your config should look same :-) mh Sent from my iPhone On 27.4.2013, at 16:07, Angela Barone wrote: > Hello, > >I hope I'm in the right place for this question. I'm trying to block > undesirables by

Re: [users@httpd] using multiple LimitExcept directives

On Sun, Mar 3, 2013 at 4:08 PM, Igor Cicimov wrote: > > On 04/03/2013 3:36 AM, "James Martin" wrote: >> >> On Sun, Mar 3, 2013 at 2:46 AM, Igor Cicimov wrote: >> > >> > On 03/03/2013 3:34 PM, "James Martin" wrote: >> >> &

Re: [users@httpd] using multiple LimitExcept directives

On Sun, Mar 3, 2013 at 2:46 AM, Igor Cicimov wrote: > > On 03/03/2013 3:34 PM, "James Martin" wrote: >> >> Folks, >> >> I'm attempting to using multiple LimitExcept directives in one >> Location. Basically I want to give a the "Actor&

[users@httpd] using multiple LimitExcept directives

Folks, I'm attempting to using multiple LimitExcept directives in one Location. Basically I want to give a the "Actor" ldap group GET & PUTT access, the "WeatherMan" ldap group only GET access, and the "Actor" ldap group PUT access. I'm open to using either apache 2.2 or 2.4, as I see that apac

RE: [users@httpd] mod_rewrite Question

ewriteRule ^/cmdbnew/(.*)/(.*)$ http://ckcftpa2/cmdbnew/assetdetail.php?srv=$1&cust=$2 [R,L] If you have any L rule preceeding it, then it may be overwriting it. Can you try putting the rule i gave you above , and see what the rewrite logs say. On Sat, Dec 29, 2012 at 10:02 AM, Martin, S

RE: [users@httpd] mod_rewrite Question

s: /cmdbnew/Server1/XXX And redirects them to the first one. Head getting flatter. Thanks for the quick first response. ___ [cid:image001.gif@01CDE54B.3B6A1BD0]Stanley Martin System Administrator | IM DCS US Wintel Server Tea

[users@httpd] mod_rewrite Question

I have been banging my head against the wall on this and when I think I finally have it, it doesn't work. I've been able to get some basic stuff to work like: Setting DirectoryIndex And doing a simple redirect. But, what I really want to do is make the URI cleaner so that the users don't see t

[users@httpd] Solved: [users@httpd] Setting REMOTE_USER to %{SSL:HTTP_SSL_CLIENT_S_DN_CN}

using mod_rewite: [...] RewriteEngine On RewriteCond %{HTTP:X-Forwarded-SSL_CLIENT_S_DN_CN} (.*) RewriteRule ^.*$ - [E=REMOTE_USER:%1] [...] Caution: The backend server trusts the reverse proxy requests fully! Sanitize your headers carefully there. Martin - -- Martin Drescher GnuP

Re: [users@httpd] Setting REMOTE_USER to %{SSL:HTTP_SSL_CLIENT_S_DN_CN}

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 05/11/12 14:35, Mark Montague wrote: > On November 5, 2012 6:32 , Martin Drescher > wrote: >> I would like to set the REMOTE_USER environment to the value of >> %{HTTP_SSL_CLIENT_S_DN_CN}. After reading the fine manual e few

[users@httpd] Setting REMOTE_USER to %{SSL:HTTP_SSL_CLIENT_S_DN_CN}

} (.+) RewriteRule ^.*$ - [E=REMOTE_USER:$1] Tried some variations, but it does not :-( Could someone help me out with this? Thanks, Martin - -- Martin Drescher GnuPG Key Fingerprint, KeyID '4FBE451A': '2237 1E95 8E50 E825 9FE8 AEE1 6FF4 1E34 4FBE 451A' -BEGIN PGP SIGNATURE

Re: [users@httpd] Citrix behind Apache HTTP reverse proxy sever problem

p > 3.User sees WI site and clicks on icon that represents application. > > then we go 4,5,6 exatcly as if we do not have any Apache reverse proxy! > > Client goes directly to Citrix gateway using ICA\SSL protocol. This is the > main problem: Why Apache does not proxy ICA\SSL? >

Re: [users@httpd] Citrix behind Apache HTTP reverse proxy sever problem

Hi after first look, configuration of apache looks fine. Please try to view source code of https://proxyserver.domain2.com/citrix/xenapp. Somewhere should be link, which is relative (like href="./citrix/...") or absolute (like href="https://proxyserver.domain2.com/citrix/...";). I expect, it is abs

[users@httpd] Apache2 - Logging

8840 "https:// <https://%3cmysever%3e/jenkins/> /jenkins/" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" :443 - - [24/Sep/2012:03:07:27 +0200] "GET /jenkins/static/7887a7e2/scripts/prototype.js HTTP/1.1" 200 39806 "https:// <https://%3cmysever%3e/jenkins/> /jenkins/" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" If you tell me the config, please tell me where to place it. Most of the time I find myself with config-snippets, but no location to put them in (about 70% of found help-resources don't provide this information or I can't see it) Regards, Martin

Re: [users@httpd] scoreboard is full, not at MaxRequestWorkers

gt; MinSpareThreads 64 >> MaxSpareThreads 64 >> ThreadLimit 64 >> ThreadsPerChild 64 >> MaxConnectionsPerChild 10240 >> AsyncRequestWorkerFactor 2 Just in case you still have this issue, we&#x

Re: [users@httpd] scoreboard is full, not at MaxRequestWorkers

Hello Sam, We're having the same exact issue. Did you found the solution? Cheers, Martin On Sun, Aug 19, 2012 at 8:25 AM, Sam wrote: > I upgraded to Apache 2.4 and use mod_event on a server > having average high load. > > My issue is that I am getting pretty much often

Re: [users@httpd] Cant modify LD_LIBRARY_PATH

Hi, try to use envvars to set Env ... Not sure, if this is what you want, but let's start somewhere :-) mh On Fri, Apr 6, 2012 at 8:40 PM, congo thomas wrote: > Friends, > > Please, if this is obvious and thats why no one responded, please hint me. > > I am thinking that LD_LIBRARY_PATH might

Re: [users@httpd] Apache configuration to catch any directory access

Hi, maybe you can pipe out the output of log file to some script CustomLog "|bin/doAcctionAfterDirectoryAccess" common of course, you can customized logfile output (check CustomLog directive) and you can set action only for specific directory (check Directory and CustomLog directive). Hope this

Re: [users@httpd] Apache as Proxy in a LAN, behind a proxy

Hi, I think, this part of documentation should be useful http://httpd.apache.org/docs/2.2/mod/mod_proxy.html mh On Tue, Mar 27, 2012 at 1:11 PM, Cristian Senchiu wrote: > Hi there, > > > I hope that someone knows the answer to this. > I'm in a LAN that's behind a squid proxy. Any access to the

Re: [users@httpd] Unable to create or access scoreboard (anonymous shared memory failure)

So you delete file, try to start apache and same error? Was this file recreated by apache? Please check again permissions to this file (directory). Best way is to switch to apache user and try to wtrite to this localtion. mh On Wed, Mar 21, 2012 at 5:29 PM, Tianyin Xu wrote: > Hi, Mar

Re: [users@httpd] Unable to create or access scoreboard (anonymous shared memory failure)

Hi, search for ScoreBoardFile directive in your configuration. When you will find it, please remove this file from your disk. After removal, apache will recreate this file again. Also please ensure, that apache runtime user has full access to this file. mh On Wed, Mar 21, 2012 at 4:47 PM, Tianyi

Re: [users@httpd] httpd crashes with segmentation fault: Incompatible libpng version in application and library

Hi, you can check if you use prelink feature. In such case, LD_LIBRARY_PATH is overwriten by LD_PRELOAD or prelink. mh On Mon, Mar 19, 2012 at 1:55 PM, Lenin wrote: > I tried the directive LoadFile, but with no luck. > > Igor Cicimov 於 2012年3月19日上午9:35 ��道： > > LoadFile >> >> >> On Mon, Mar 1

[users@httpd] mod_ssl, SSLRequire, and function file("filename") question

least I am not using it the correct way. eg. SSLRequire %{SSL_CLIENT_S_DN} =~ file("/tmp/listofDN.txt") Does anyone have any suggestions as to how I might get this file function to work? Is there a format that file must adhere to? Thanks, -- Terrence Martin System Manager UCS

Re: [users@httpd] Virtual hosts

$quoted_author = "Stormy" ; > > I just rem'd out all the "NameVirtualHost 192.168.0.90:80" and now > the warning has changed to: > > paul@nelson:/etc/apache2/sites-available$ sudo /etc/init.d/apache2 restart > * Restarting web server apache2 > [Wed Nov 30 15:02:51 2011] [warn] VirtualHost 192.168

RE: [users@httpd] HELP: apache 2.2.17 creating zombies that are increasing server load

Just a follow-up, upgrading to 2.2.21 has cleared this issue and we are no longer experiencing zombies. Thank you! Jeff -Original Message- From: Rainer Jung [mailto:rainer.j...@kippdata.de] Sent: Saturday, September 10, 2011 3:45 AM To: users@httpd.apache.org Cc: Martin, Jeff Subject

RE: [users@httpd] HELP: apache 2.2.17 creating zombies that are increasing server load

Thank you for your help with this.. We are pursuing an upgrade. -Original Message- From: Rainer Jung [mailto:rainer.j...@kippdata.de] Sent: Saturday, September 10, 2011 3:45 AM To: users@httpd.apache.org Cc: Martin, Jeff Subject: Re: [users@httpd] HELP: apache 2.2.17 creating zombies

RE: [users@httpd] Re: HELP: apache 2.2.17 creating zombies that are increasing server load

are increasing server load Hi Jeff, Martin, Jeff wrote: > 16042 csdrd 20M 16M cpu20 500 3:52:05 3.1% httpd/24 > 16042 csdrd 20M 16M zombie 0- 0:00:00 0.0% httpd/65 > 16042 csdrd 20M 16M zombie 0- 0:00:00 0.0% httpd/64 > 16042 csdrd

[users@httpd] HELP: apache 2.2.17 creating zombies that are increasing server load

Hello, I have a Solaris 10 server running apache 2.2.17 and on a weekly basis its creating zombies and increasing the load to the point where we have to restart it every Thursday night. There are 6 apache instances running on this box but this is the only one seeing the issue. There have been no ch

Re: [users@httpd] LDAP validation using certificates

s and that is that I don't want to do. 2011/8/8 Eric Covener > On Mon, Aug 8, 2011 at 5:45 AM, Martin Sanchez wrote: > > Hi, > > Thank you for the reply. > > Eric, I know that I can use the mod_ssl to store certificates in one > Apache, > > but I want have the ce

Re: [users@httpd] LDAP validation using certificates

ug: https://issues.apache.org/bugzilla/show_bug.cgi?id=48780 But there isn't examples how to configure the Apache, I'll tell you how to do this work if I have successful. Kings Regards Martin 2011/8/5 Darren Spruell > On Fri, Aug 5, 2011 at 1:56 AM, Martin Sanchez wrote: > > Hello, >

[users@httpd] LDAP validation using certificates

Hello, I've read about this topic in mailing list but I didn't found the solution. I want validate LDAP users against Apache using the certificates than the user store in LDAP. I mean, I create and store the X509 certificates in LDAP. Afterwards I send to my clients the certificate and they insta

[users@httpd] Re: Weird problerm accessing request headers from tomcat

Hi Martin, the reverse proxy (gateway) in my case would be "apache1" me thinks. "apache2" definitely does not use mod_proxy/ProxyPass. It is just loadbalancing two tomcat instances using "mod_jk". My problem is (maybe I was not clear) that "apache2" do

[users@httpd] Weird problerm accessing request headers from tomcat

are generated. If I add 'RequestHeader set X_FORWARDED_HOST "xxx.yyy.net"' to the configuration from apache2, the application sees that header as well. Confused? so am I :-( Happy weekend Martin

Re: [users@httpd] Load Balancer with HTTPS

$quoted_author = "Christian Pascher" ; > > If I would activate > RequestHeader set Front-End-Https "On" > I need all the SSL config stuff also at the back end servers? No. That setting just let's Apache know that, even though it is seeing http connections, the client is seeing https with the SSL

Re: [users@httpd] Rewrite Conditions & Rules

Hi Ian $quoted_author = "Ian Stradling" ; > > Here is what I've gleaned from the log I started. FYI, I clicked on a > link within the website that is supposed to go to ../insurance-tips/ > Anything related to /insurance-tips, /add-a-tip, /home, and / are supposed > to NOT be HTTPS...yet, wheneve

Re: [users@httpd] URI with European characters‏

have experience with Czech websites for the last fourteen years. Cheers Martin -- ~~ Supercomputing Center Brno Martin Kuba Institute of Computer Scienceemail: ma...@ics.muni.cz Masaryk University http://www.ics.mu

Re: [users@httpd] apache as a front end to tomcat instance

which is not a CSS but some HTML page with embedded video. Probably you want to replace that with ProxyPass / ajp://192.168.1.4:8009/ Cheers Martin Dne 2.2.2011 11:35, James Godrej napsal(a): Hi please check this site http://research.openitup.in/portal I am referring to this one. So I have many

Re: [users@httpd] apache as a front end to tomcat instance

://en.wikipedia.org/wiki/Ip_address#IPv4_private_addresses Cheers Martin -- ~~ Supercomputing Center Brno Martin Kuba Institute of Computer Scienceemail: ma...@ics.muni.cz Masaryk University http://www.ics.muni.cz/~makub

Re: [users@httpd] setting variables for mod_proxy_ajp

Hi all, no response so far, but I have figured it myself, the right directive is RewriteRule .* - [E=AJP_SSL_CLIENT_S_DN:%{SSL:SSL_CLIENT_S_DN}] Cheers Martin Dne 12.1.2011 12:36, Martin Kuba napsal(a): Hi all, I am trying to pass an arbitrary environment variable from Apache (2.2) to

Re: [users@httpd] mod_ssl and virtual host

/ssl_faq.html#vhosts http://en.wikipedia.org/wiki/Server_Name_Indication Use IP-based virtual hosts instead. Cheers Martin -- ~~ Supercomputing Center Brno Martin Kuba Institute of Computer Scienceemail: ma...@ics.muni.cz

Re: [users@httpd] Difference between mod_jk and mod_proxy

SSL_* environment variables using the JkEnv directive, mod_proxy_ajp cannot do this. I have written my conclusions to http://opencms-wiki.org/MultiSite_configuration_instructions_%28apache_%2B_mod_jk%29#mod_jk_or_mod_proxy_ajp_.3F so please read it there. Cheers Martin

Re: [users@httpd] Name-based SSL virtual hosts

works for all browsers, but it is some hassle to create a new certificate for all names each time a new SSL server is added. Cheers Martin Dne 21.1.2011 22:18, wolfgang.mi...@geigerus.com napsal(a): Hi, I am not too familiar with Apache, so the following message has stumped me. [warn] Init

Re: [users@httpd] mod_ssl, client certificates and r->username

t you are looking for is the SSLUserName directive http://httpd.apache.org/docs/2.2/mod/mod_ssl.html#sslusername Cheers Martin -- ~~ Supercomputing Center Brno Martin Kuba Institute of Computer Scienceemail: ma...@ics.mu

Re: [users@httpd] mod_ssl, client certificates and r->username

ou have written, instead of some weird browser popup dialog window with an internal SSL error code. Best regards Martin Dne 21.1.2011 11:24, Tom Evans napsal(a): Hi all Apache/2.2.17 (FreeBSD) I'm trying to use client certificates to authenticate my few users. I created a self-signed C

Re: [users@httpd] SSL library error 1 in handshake

Dne 18.1.2011 18:12, g f napsal(a): Hey Martin, common access cards are smart cards that allow a user to authenticate to a domain using just the card(inserted into the card reader) and a pin number. The directive */SSLVerifyClient require/* requires all https access utilize a smart card. no

Re: [users@httpd] SSL library error 1 in handshake

-side script to another server-side script. The reason is that it is not the certificate alone what is needed to make an authentication to an SSL server, also the private key is needed. Cheers Martin Dne 18.1.2011 16:36, g f napsal(a): Hello Martin, thanks for the reply. I have those directives

Re: [users@httpd] SSL library error 1 in handshake

The "Allow" directives play no role in this, because the error you have got happened during the SSL handshake, which is sooner than the Allow directives are applied. Martin Dne 18.1.2011 16:16, g f napsal(a): Hello all, I have a debian os running Apache 2.2.16(debian) along with tomcat 6.0.

[users@httpd] setting variables for mod_proxy_ajp

der why the mod_proxy_ajp documentation mentions the AJP_ prefixed variables when it is impossible to set them. Or why the mod_proxy_ajp dpes not provide a directive similar to the JkEnvVar directive of mod_jk. Best regards Martin -- ~~ S

Re: [us...@httpd] http-tomcat - AJP ilink receive failed - 500/503 errors

Hi, you should try to telnet tomcat server from web server. telnet If the telnet is successful, you need to check configuration of mod_proxy_ajp. If the telnet will be not successful, you have network problem. mh Sent from my iPhone On 17.9.2010, at 18:18, Shantanu Pavgi wrote: > Hi,

Re: [us...@httpd] Mythweb Access Forbidden

ed/tmpl/default/header.php'; c) ask developer of application for a help or recommendation what to do. mh On Wed, Aug 25, 2010 at 6:56 PM, Mark Adams wrote: > I do have that file tree Martin, but it's slightly different: > > /var/www/html/mythweb/modules/_shared/tmpl/default/

Re: [us...@httpd] Mythweb Access Forbidden

a second frontend running on my primary web server because my dls > provider has all the ports locked down. > > Martin: I added mythweb to the DirectoryIndex and that is progress, I > guess. I got a web page that said: > > *Warning* at > /var/www/html/mythweb/modules

Re: [us...@httpd] Mythweb Access Forbidden

mh On Wed, Aug 25, 2010 at 6:21 PM, Mark Adams wrote: > I'm sorry Martin, that makes little sense to me. This thing is setup by > defaults to point to /var/www/html/mythweb and execute mythweb.php. It isn't > supposed to display a file index, so disabling Autoindex seems

Re: [us...@httpd] Mythweb Access Forbidden

Hi Mark, by directive DirectoryIndex you are enumerate files, which will be listed in case, when client will point only to dorectory. So in case that client will call http://mythweb/ apache will check existence of files enumerated by DirectoryIndex. If it is not able to find them, apache try to do

Re: [us...@httpd] Mythweb Access Forbidden

Hi Mark, first, please send us error.log where is the 403 error. mh On Wed, Aug 25, 2010 at 6:05 PM, Mark Adams wrote: > I really hate to bother the group with this issue because my ignorance > about apache access is so profound. But here goes. > > I was attempting to get mythweb accessible fr

Re: [us...@httpd] Invalid command includes/log.std', perhaps mis-spelled or defined by a module not included in the server configuration

Hi, in front of each line, you should add Include directive. It is working like from httpd.conf Include , from Include , etc ... mh On Tue, Aug 24, 2010 at 9:55 AM, Amol Puglia wrote: > Hello Joost, > > It is a file which is loading all the configuration files. > > The file contains the foll

Re: [us...@httpd] 32 or 64 bit install

httpd -V will show you the architecture type. Architecture: 64-bit for 32bit compilation you need all necessary libraries 32bit. I'm sure, that you will find lot of howto on google about cross compilation. Just hint, maybe you should use another httpd server as a loadbalancer with mod_proxy...

[us...@httpd] 32bit module on 64bit Apache

t support 32bit version of binaries because of one product. Thank you for any answer Martin

[us...@httpd] mod_auth_kerb and mod_proxy: Two requests while authorization

on. And the second is the true request after succellful authentication. Is this right and if so, is there a way to prevent the double request? Thanks in advance, Martin Koerner -- GRATIS für alle GMX-Mitglieder: Die maxdome Movie-FLAT! Jetzt freischalten unter

[us...@httpd] Re: Inifite loop with mod_sspi,mod_proxy and mod_rewrite

#x27;t be rewritten to it self again and again... By, Martin Koerner - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To un

Re: [us...@httpd] Re: Conditionally process directives based on environment variable values in Apache conf?

Hmmm, in other words, use mod_perl, then, right? On Wed, Mar 31, 2010 at 8:48 PM, Nilesh Govindarajan wrote: > On 04/01/10 00:58, Jeffery Martin wrote: >> >> I found this in the mail archives. >> >> >> http://mail-archives.apache.org

[us...@httpd] Re: Conditionally process directives based on environment variable values in Apache conf?

2010 at 1:16 PM, Jeffery Martin wrote: > Hello, > > Is there a way in the Apache conf syntax to conditionally process > directives based on a string comparison using environment variables? > > I am aware of using the IfDefine directive and the -D flag of httpd, > but that funct

[us...@httpd] Conditionally process directives based on environment variable values in Apache conf?

Hello, Is there a way in the Apache conf syntax to conditionally process directives based on a string comparison using environment variables? I am aware of using the IfDefine directive and the -D flag of httpd, but that functionality is not quite when I am looking for. For example, suppose the d

Re: [us...@httpd] Virtual hosting problem

$quoted_author = "Sean H." ; > > Presume you have the correct NameVirturalHost definition > ServerName primary.com > ServerAlias primary.com www.primary.com > ServerAlias primary.com www.secondaryA.net > ServerAlias primary.com secondaryB.tv > ServerAlias primary.com www.se

Re: [us...@httpd] RewriteCond question

$quoted_author = "James Smallacombe" ; > > > >Nope... https://www.domain.gov/ still gives a certificate error. > > Interesting...in my case, it works perfectly redirecting between two > different ssl certificate virtual hosts. However, both of my certs > are valid...is it possible that the certif

  1   2   3   >