Re: [users@httpd] Question: How to secure multiple URL's with SSL on a single host with a single domain?

2014-04-29 Thread Nick Tkach
So in that list of urls at the top, those are totally separate names and IPs? Something like this? 11.22.33.44/webmail is the main interface 55.66.77.88/web-admin is the administrative interface 99.00.11.22/webdav is for access to the WebDAV component On Tue, Apr 29, 2014 at 2:48 PM, Foster, N

Re: [users@httpd] Delete requests forbidden

2014-04-24 Thread Nick Tkach
Because that's typically a very dangerous operation to just leave open. Generally speaking it would mean that people could send requests to your Apache saying to delete something from it (granted, it would be "just" things the user running Apache has access to). Most configurations I've ever worke

Re: [users@httpd] Apache 2.4 - non adoption reasons??

2014-04-10 Thread Nick Tkach
Among other things I'm sure many are using modules that just plain won't build/run for 2.4.x. For example, I know at a place I worked a few years ago they were using a module that an app server depended on which would not build for anything beyond Apache 2.2 (we tried, believe me). On Thu, Apr 10

Re: [users@httpd] Apache major features

2014-02-20 Thread Nick Tkach
On Thu, Feb 20, 2014 at 12:28 PM, Joe Jensen (ConAgra Foods) < joe.jen...@conagrafoods.com> wrote: > We are on a current patch version and being old software there are likely > few remaining security vulnerabilities or bugs for me to worry about in the > version we run. > > > > Joe Jensen > (402)-

Re: [users@httpd] mod_rewrite config (UNCLASSIFIED)

2013-12-11 Thread Nick Tkach
I'd suggest enabling RewriteLog and setting a RewriteLogLevel to something like debug. So something like RewriteLog /var/log/apache/rewrite.log RewriteLogLevel debug Be careful though! If this site is live and gets a lot of traffic a debug rewrite log is going to grow fast! That should at least

Re: [users@httpd] New to apache

2013-10-02 Thread Nick Tkach
Yes, if it's an option I'd *strongly* urge you to clone one of the servers you're needing to upgrade (at least in terms of the Apache) and try the upgrade there. If you can clone it as a VM of some sort that would work even better because you could set everything up, snapshot it, do your work, and

Re: [users@httpd] Virtual Hosts Possible for SSL ?

2013-10-01 Thread Nick Tkach
e wrote: > Hi, > Thanks for that. Unfortunately, even after the changes, entering > domain2.com on a browser still goes directly to domain1.com. > > No, I don't have any intention to do SSL on domain2.com. Is this causing > a problem? > > D. > > > Le 1 octobre 201

Re: [users@httpd] Virtual Hosts Possible for SSL ?

2013-10-01 Thread Nick Tkach
Well, question is, are you trying to have domain2.com *also* do that same http->https ( http://domain2.com to https://domain2.com )? If so, do you have separate certificates for each (domain1 and domain2)? On Tue, Oct 1, 2013 at 10:36 AM, Pete Houston wrote: > On Tue, Oct 01, 2013 at 04:25:05P

Re: [users@httpd] Strange Problem with POST + mod_jk

2013-08-08 Thread Nick Tkach
On Thu, Aug 8, 2013 at 5:12 PM, Rainer Jung wrote: > On 08.08.2013 17:32, Nick Tkach wrote: > > Not quite sure if this needs to wind up in this group or the tomcat list > > since it kind of involves both. I'm fairly sure it involves an Apache > > misconfig,

[users@httpd] Strange Problem with POST + mod_jk

2013-08-08 Thread Nick Tkach
Not quite sure if this needs to wind up in this group or the tomcat list since it kind of involves both. I'm fairly sure it involves an Apache misconfig, so thought I'd start here. We've got an Apache facing the Internet with some Java app servers (both jboss and tomcat), pretty standard thing.

Re: [users@httpd] Setting Headers on a Redirect Scenario

2012-06-21 Thread Nick Tkach
On Thu, Jun 21, 2012 at 3:51 PM, Nick Kew wrote: > > On 21 Jun 2012, at 20:21, Nick Tkach wrote: > > [chop] > > You're overcomplicating it.  The server that serves the PDF sets its headers. > The one you're redirecting from is irrelevant. > > (and it would

[users@httpd] Setting Headers on a Redirect Scenario

2012-06-21 Thread Nick Tkach
Ok, I'm pretty sure I know the answer to this, but wanted to run it by people more experienced. I have an unusual request from some business users. They want to be able to request a pdf document from one site (which we do control) when in a web page on a *different* site (which we do control) *an

[users@httpd] Less than MinSpareServers Active?

2012-02-10 Thread Nick Tkach
I'm just wondering, is it wrong/bad/unusual for Apache (specifically 2.2.3 with prefork mpm) to allow the number of idle/spare servers to drop below the MinSpareServers setting? It doesn't seem to be an issue, but we're specifically setting: MinSpareServers 5 In its config file, but if I look a

Re: [users@httpd] Consequences of https to https rewrites?

2011-11-10 Thread Nick Tkach
On Thu, Nov 10, 2011 at 2:23 PM, Mark Montague wrote: > On November 10, 2011 14:41 , Nick Tkach wrote: >> >> Been Googling all over >> trying to find details on any consequences/side-effects of using >> mod_rewrite to redirect secure urls to other secure urls on the sa

[users@httpd] Re: Consequences of https to https rewrites?

2011-11-10 Thread Nick Tkach
Stupid system messed up that formatting, sorry. There's a space in there between the "specialsale" and https:. Another "wrinkle", would it make any difference if it was a RedirectMatch as opposed to a RewriteRule? On Thu, Nov 10, 2011 at 1:41 PM, Nick Tkach wrote:

[users@httpd] Consequences of https to https rewrites?

2011-11-10 Thread Nick Tkach
I've been looking at a particular problem and it's one of those ones that's just really hard to describe in unique terms for a search (maybe no one else has hit it before :). Been Googling all over trying to find details on any consequences/side-effects of using mod_rewrite to redirect secure urls

Re: [users@httpd] htaccess: .com and .net shall go to .de

2011-11-08 Thread Nick Tkach
On Tue, Nov 8, 2011 at 3:19 PM, Lukas C. C. Hempel wrote: > Hi there, > > I have a problem with an htaccess file. > > I own three domains: example.com, example.de and example.net. They all refer > to the same webhosting space (= alias domains). > > What I have succeeded in is that when I enter ex

Re: [users@httpd] Re: SSL certificates and virtual hosts

2011-10-19 Thread Nick Tkach
As long as you don't need to support certain browsers. IIRC Android < 2.2 for example won't support wildcard certs. Sent from my iPhone On Oct 18, 2011, at 7:00 PM, Andrew Schulman wrote: >> Our website account with our ISP has one fixed IP address and allows >> a number of virtual hosts. Th

Re: [users@httpd] apache2-2.2.21 did not accept new connections

2011-10-17 Thread Nick Tkach
Can you post a snippet of what your config file for the mapping you're using for the reverse proxy setup looks like? I've run into that kind of thing sometimes and it's usually just been something like I accidentally was mapping https to http or vice-versa. On Mon, Oct 17, 2011 at 7:12 AM, Petr

[users@httpd] Cat request + query for rewrite?

2011-10-06 Thread Nick Tkach
Is there some way to make a RewriteRule concat together two back-references? What I want to do is take the REQUEST_URI and the QUERY_STRING of a request and use the two together as a key into a map. So if I have a request like this: http://mysite.com/bar/startpage?arg1=a&arg2=b and I want to r

Re: [users@httpd] Re: Vanity URL Rewrites Best Practices?

2011-10-06 Thread Nick Tkach
On Wed, Oct 5, 2011 at 2:48 PM, Nick Tkach wrote: > On Mon, Oct 3, 2011 at 1:41 PM, Andrew Schulman > wrote: >> >> > For example, >> > >> > http://foo.com/mmh/maintenance_plan/tip?contentCategoryType=MaintenanceTip&id=%2Fwww%2Favm_webapps%2Fmmh%2Fmain

Re: [users@httpd] Re: Vanity URL Rewrites Best Practices?

2011-10-05 Thread Nick Tkach
On Mon, Oct 3, 2011 at 1:41 PM, Andrew Schulman wrote: > > > For example, > > > > http://foo.com/mmh/maintenance_plan/tip?contentCategoryType=MaintenanceTip&id=%2Fwww%2Favm_webapps%2Fmmh%2Fmaintenance-tips%2Fcontent%2Fafter_blizzard.xml > > > > Being sent to > > > >  http://foo.com/mmh/articles/au

[users@httpd] Limit + LimitExcept Blocks?

2011-10-04 Thread Nick Tkach
Isn't it redundant to have *both* a Limit and LimitExcept if all you're trying to do is limit HTTP methods for everything on a given httpd to only GET POST HEAD? Options FollowSymLinks AllowOverride None Order allow,deny Allow from all Order Deny,Allow Deny from all

[users@httpd] Track + Trace HTTP Methods

2011-10-04 Thread Nick Tkach
I know I've read in the past that the TRACK method is not supported by Apache. Is that correct? Anyone have a reference they could point me to that explains that?I just need something to point our engineering group to to explain that only TraceEnable Off is needed (not the rewrite rule).

[users@httpd] Vanity URL Rewrites Best Practices?

2011-10-03 Thread Nick Tkach
Does anyone have any pointers/suggestions on the best way to do vanity url rewrites? For example, http://foo.com/mmh/maintenance_plan/tip?contentCategoryType=MaintenanceTip&id=%2Fwww%2Favm_webapps%2Fmmh%2Fmaintenance-tips%2Fcontent%2Fafter_blizzard.xml Being sent to http://foo.com/mmh/arti

Re: [users@httpd] Load Balancing mod_webdav?

2011-03-30 Thread Nick Tkach
- Original Message - > - Original Message - > > This may be a stupid idea, but has anyone had any experience > > load-balancing two Apache (2.2 in our case) servers that are running > > mod_dav? We've searched and searched and it looks like it's just > > something that no one at all

[users@httpd] Load Balancing mod_webdav?

2011-03-30 Thread Nick Tkach
This may be a stupid idea, but has anyone had any experience load-balancing two Apache (2.2 in our case) servers that are running mod_dav? We've searched and searched and it looks like it's just something that no one at all talks about. We've got a setup in production where we've got Apache 2.2

Re: [us...@httpd] apxs: not found

2010-05-05 Thread Nick Tkach
Okay, this is probably a stupid question, but what directory are you in when you run the apxs? I noticed you use "./apxs"... That's only going to work if you're in the same directory as the apxs binary(/usr/local/apache2/bin apparently, from what you've said). This email message and any attach

[us...@httpd] Combining mod_jk and Location Directives

2010-04-19 Thread Nick Tkach
Is it possible, for a given URL that's being directed to mod_jk, to lock it down so that you can only access it from a particular subnet? For example, let's say I have an app with JkMounts defined: JkMount /myapp worker1 JkMount /myapp/sub worker2 JkMount / worker3 Then I have a sub-directory,

Re: [us...@httpd] use mod_rewrite and mod_jk

2010-03-03 Thread Nick Tkach
Yes, you want to look at JkUnmount directive (something like JkUnmount /images/*). Just put it before your JkMount statement(s). This email message and any attachments are for the sole use of the intended recipient(s) and may contain information that is proprietary to Ahold and/or its subsidia

[us...@httpd] SSL Server "Ignoring" mod_proxy ProxyPass directives

2009-10-16 Thread Nick Tkach
Hi, we're trying to get mod_proxy_balancer to work with an SSL virtual host, but having problems. It seems like HTTPD is "ignoring" any kind of ProxyPass at all. I have balancers and the SSL host set up as follows below. I've even tried changing the directives: ProxyPass /uim balancer://uim-