[users@httpd] Ignore errors in .htaccess

2011-11-22 Thread Sandro Tosi
) options instead of erroring out. Is is possible? If so, how? If not, what can I do (ask the users is not an option, sadly). Thanks in advance, -- Sandro Tosi Product Engineer Shared Hosting Products R&D | Dada.pro eml sandro.t.

Re: [us...@httpd] httpd vhost centralized logging

2010-05-24 Thread Sandro Tosi
We wanted to use syslog too, but it's very rigid (only 8 localX facility for custom logs) so we discarded this solution. We heard of scribe, the logs aggregator Facebook uses; it seems very flexible, and since FB is using it for his web servers, it's probably doing its job quite well. Sitll, w

Re: [us...@httpd] Is it possible to use mod_speling together with mod_rewrite?

2010-05-13 Thread Sandro Tosi
Hello, really no-one has ever used mod_speling together with mod_rewrite? Sandro On 04/21/2010 11:49 AM, Sandro Tosi wrote: Does someone have experience in using mod_speling together with mod_rewrite? On 04/19/2010 03:20 PM, Sandro Tosi wrote: Hello, we are using extensively mod_rewrite

Re: [us...@httpd] Is it possible to use mod_speling together with mod_rewrite?

2010-04-21 Thread Sandro Tosi
Does someone have experience in using mod_speling together with mod_rewrite? On 04/19/2010 03:20 PM, Sandro Tosi wrote: Hello, we are using extensively mod_rewrite to identify what's the path where the resource is locate. Now a new requirement (due to a migration from Windows to Linux)

[us...@httpd] Is it possible to use mod_speling together with mod_rewrite?

2010-04-19 Thread Sandro Tosi
Hello, we are using extensively mod_rewrite to identify what's the path where the resource is locate. Now a new requirement (due to a migration from Windows to Linux) makes us willing to use mod_speling to match a filename not case-sensitively. We added "CheckCaseOnly On" to the .htaccess (a

Re: [us...@httpd] Centralized logging.

2010-04-08 Thread Sandro Tosi
On 04/08/2010 10:52 PM, Ray Van Dolson wrote: So how are people out there in mailing list land handling centralized logging? We are considering using Scribe[1] to send logs to a remote log server and aggregate/elaborate them in real-time. [1] http://en.wikipedia.org/wiki/Scribe_%28log_se

[us...@httpd] Default HTTPS VH to redirect to a HTTP page

2010-03-29 Thread Sandro Tosi
Hello, we're setting up an Apache to respond for SSL traffic. We have a set of VHs, each one for a different domain (we use SNI), and that part works fine. The additional requirement is that, for every domain that doesn't have a separate VH (so that goes into the default SSL VH) we want to red

Re: [us...@httpd] Apache is slow at accepting connections

2010-02-07 Thread Sandro Tosi
Hello, we managed to fix this problem by setting: net.ipv4.tcp_syncookies=1 net.ipv4.tcp_tw_reuse=1 kernel params. tcp_syscookies is enough but since we had several connections in TIME_WAIT, we read tcp_tw_reuse helps those be reused more efficiently. HTH, Sandro Sandro Tosi wrote: Hello

Re: [us...@httpd] Apache is slow at accepting connections

2010-02-02 Thread Sandro Tosi
Hi Daniel, thanks for your reply. Daniel Reinhardt wrote: We are running Apache as a reverse proxy for a JBoss instance, so we can expect almost no memory leak, so we'll try either with 0 or with a very high value. Sandro, We use various applications at work that use JBoss, and I see th

Re: [us...@httpd] Apache is slow at accepting connections

2010-02-02 Thread Sandro Tosi
Hello Jeff, thanks a lot for your insightful reply! Jeff Trawick wrote: On Tue, Feb 2, 2010 at 8:59 AM, Sandro Tosi wrote: Hello, we have a rather busy Apache web server (~200/300 contemporary connections). There are time when Apache is really slow at letting client connects to it. For

Re: [us...@httpd] Apache is slow at accepting connections

2010-02-02 Thread Sandro Tosi
Hello Emmanuel, thanks for your reply. Emmanuel Bailleul wrote: Hi, Couldn't this latency come from dns lookups ? If that's the case, I'd expect to see the delay at each request; I do my tests on a single machine and I see results with no delay, 3 secs delay, 9 secs delay and conn-timeout.

[us...@httpd] Apache is slow at accepting connections

2010-02-02 Thread Sandro Tosi
Hello, we have a rather busy Apache web server (~200/300 contemporary connections). There are time when Apache is really slow at letting client connects to it. For example, with curl, I see: 02:05:17.885074 == Info: About to connect() to IP_ADDRESS port 80 (#0) 02:05:17.885280 == Info: Tryin

Re: [us...@httpd] auth_ldap returns "Password Mismatch" but the password is correct

2009-12-18 Thread Sandro Tosi
critical for us and we can't find any clear information about it. Regards, Sandro Sandro Tosi wrote: Hello, we've migrated part of our apache auth to LDAP, but suddenly we receive errors like "Password Mismatch" while the user's password is correct. In the log we can

[us...@httpd] auth_ldap returns "Password Mismatch" but the password is correct

2009-12-03 Thread Sandro Tosi
Hello, we've migrated part of our apache auth to LDAP, but suddenly we receive errors like "Password Mismatch" while the user's password is correct. In the log we can read: [Wed Dec 02 17:42:54 2009] [warn] [client ] [3659] auth_ldap authenticate: user authentication failed; URI / [ldap_sim

Re: [us...@httpd] LDAP: ldap_set_option failed. Could not set LDAP_OPT_X_TLS to LDAP_OPT_X_TLS_HARD

2009-11-13 Thread Sandro Tosi
--with-ldap-sasl --with-ldap configure options to php. After that, in any order the above modules are imported, apache and LDAP can communicate and authenticate users. Thanks, Sandro Sandro Tosi wrote: Hello, we are enabling LDAP auth on our apache stack. Starting from apache/2.2.9+php

Re: [us...@httpd] LDAP: ldap_set_option failed. Could not set LDAP_OPT_X_TLS to LDAP_OPT_X_TLS_HARD

2009-11-09 Thread Sandro Tosi
Hello Eric, do you have some other suggestions on this topic? We're open to any input or test you'd like us to do. Thanks in advance, Sandro Sandro Tosi wrote: Eric Covener wrote: On Wed, Nov 4, 2009 at 9:45 AM, Sandro Tosi wrote: Sandro Tosi wrote: Hel

Re: [us...@httpd] LDAP: ldap_set_option failed. Could not set LDAP_OPT_X_TLS to LDAP_OPT_X_TLS_HARD

2009-11-04 Thread Sandro Tosi
Eric Covener wrote: On Wed, Nov 4, 2009 at 9:45 AM, Sandro Tosi wrote: Sandro Tosi wrote: Hello, we are enabling LDAP auth on our apache stack. Starting from apache/2.2.9+php/5.2.8 we are upgrading to apache/2.2.14+php/5.2.11 . Just to give more information in order to

Re: [us...@httpd] LDAP: ldap_set_option failed. Could not set LDAP_OPT_X_TLS to LDAP_OPT_X_TLS_HARD

2009-11-04 Thread Sandro Tosi
Sandro Tosi wrote: Hello, we are enabling LDAP auth on our apache stack. Starting from apache/2.2.9+php/5.2.8 we are upgrading to apache/2.2.14+php/5.2.11 . Just to give more information in order to (hopefully) solve this, the same problem happens also using apache 2.2.9 (recompiled to

Re: [us...@httpd] LDAP: ldap_set_option failed. Could not set LDAP_OPT_X_TLS to LDAP_OPT_X_TLS_HARD

2009-11-04 Thread Sandro Tosi
Hello Eric (and others), do you have any other ideas about what I can look or test about this issue? I'm really out of ideas and I don't know what else to do. Thanks a lot in advance, Sandro Sandro Tosi wrote: Eric Covener wrote: On Mon, Nov 2, 2009 at 10:14 AM, Sandro T

Re: [us...@httpd] LDAP: ldap_set_option failed. Could not set LDAP_OPT_X_TLS to LDAP_OPT_X_TLS_HARD

2009-11-02 Thread Sandro Tosi
Eric Covener wrote: On Mon, Nov 2, 2009 at 10:14 AM, Sandro Tosi wrote: Apache builds fine this time, but the info doesn't seems much more verbose than before (with debug level on): Did you set the directive mentioned in the HTML and check your main server errorlog? Yeah, so

Re: [us...@httpd] LDAP: ldap_set_option failed. Could not set LDAP_OPT_X_TLS to LDAP_OPT_X_TLS_HARD

2009-11-02 Thread Sandro Tosi
Eric Covener wrote: On Mon, Nov 2, 2009 at 9:20 AM, Eric Covener wrote: util_ldap.c:1891: error: 'util_ldap_state_t' has no member named 'debug_level' I probably missed a file in the 2.2.x diff, will followup here when patch is updated. updated at http://people.apache.org/~c

Re: [us...@httpd] LDAP: ldap_set_option failed. Could not set LDAP_OPT_X_TLS to LDAP_OPT_X_TLS_HARD

2009-11-02 Thread Sandro Tosi
Eric Covener wrote: I think there's something related to SSL and how recent apache (it seems from 2.2.12?) handle it: in fact, we had to move SSLCertificateFile into httpd.conf and set explicitly "SSLEngine On" where needed (while before it was a bit implicitly). This version is where SNI

Re: [us...@httpd] LDAP: ldap_set_option failed. Could not set LDAP_OPT_X_TLS to LDAP_OPT_X_TLS_HARD

2009-11-02 Thread Sandro Tosi
I don't think that how mod_ssl was built has anything to do with your ldaps problems, but as you could see in https://issues.apache.org/bugzilla/show_bug.cgi?id=41041 , the error you mentioned could clearly be due to different libs used at compile time and at run time. Maybe you could try to

Re: [us...@httpd] LDAP: ldap_set_option failed. Could not set LDAP_OPT_X_TLS to LDAP_OPT_X_TLS_HARD

2009-11-02 Thread Sandro Tosi
Emmanuel Bailleul wrote: Hi, Did you try your LDAPS connection with ldapsearch first ? (sth like ldapsearch -H -x ...). Sorry I didn't mentioned: yes, I have tested, and with ldapsearch it works fine (using the name address and not the IP address) An important thing : when calling your ld

[us...@httpd] LDAP: ldap_set_option failed. Could not set LDAP_OPT_X_TLS to LDAP_OPT_X_TLS_HARD

2009-11-02 Thread Sandro Tosi
Hello, we are enabling LDAP auth on our apache stack. Starting from apache/2.2.9+php/5.2.8 we are upgrading to apache/2.2.14+php/5.2.11 . The configure line we used for apache is: $ ./configure --prefix=/usr/local/apache --mandir=/path/to/man --with-ssl=/path/to/openssl-0.9.8g-16052008 --enab