en the ones I tested are
fixed or not.
* Install the latest httpd from elsewhere and not the ubuntu repo.
* Redo the config in a way that doesn't trigger the bug.
--Jose Stefan
url does support http2 push, the command
line tool has no way of showing that information. AFAIK.
--Jose Stefan
perform my tests I'm mostly using the command line:
nghttp -vn URL
But to remove PHP from the equation. I've now peformed the following test.
1. saved the generated content as a static fileA.html
2. changed to this line:
And after the test I still get the
Hello,
I have a weird issue while using "H2Push". I'm turning it off, but depending
where it's nested it doesn't work as expected. Subset of config shown at the
end. I'm using version: 2.4.52-1ubuntu4.6 on Ubuntu 22.04 LTS.
With the code as presented, it still triggers a push for "fileC.css". I
Severity: moderate
Affected versions:
- Apache HTTP Server 2.4.17 through 2.4.57
Description:
When a HTTP/2 stream was reset (RST frame) by a client, there was a time window
were the request's memory resources were not reclaimed immediately. Instead,
de-allocation was deferred to connection
Severity: low
Affected versions:
- Apache HTTP Server 2.4.55 through 2.4.57
Description:
An attacker, opening a HTTP/2 connection with an initial window size of 0, was
able to block handling of that connection indefinitely in Apache HTTP Server.
This could be used to exhaust worker resource
Severity: low
Affected versions:
- Apache HTTP Server through 2.4.57
Description:
Out-of-bounds Read vulnerability in mod_macro of Apache HTTP Server.This issue
affects Apache HTTP Server: through 2.4.57.
Credit:
David Shoon (github/davidshoon) (finder)
References:
https://httpd.apache.o
latency of the response varies depending on the existence of the resource.
Best regards
Stefan Helmert
Am 31.03.23 um 15:10 schrieb Yann Ylavic:
On Fri, Mar 31, 2023 at 2:46 PM Yann Ylavic wrote:
On Fri, Mar 31, 2023 at 2:27 PM Yann Ylavic wrote:
Hello,
On Fri, Mar 31, 2023 at 8:18 AM Stefan
OK, thanks. I also thought, there must be a way, because proxy module do
also suppress directory walk.
There are some other bugs in mpm_itk. I think, changing the behavior of
mpm_itk is the best thing. I do not really know, how to write apache2
httpd modules.
Best regards
Stefan Helmert
x27;t have the permissions to read the directory.
How can I disable ap_directory_walk() or delegate it to mpm_itk?
Best regards
Stefan Helmert
smime.p7s
Description: S/MIME Cryptographic Signature
Severity: critical
Description:
It was found that the fix for CVE-2021-41773 in Apache HTTP Server 2.4.50 was
insufficient. An attacker could use a path traversal attack to map URLs to
files outside the directories configured by Alias-like directives.
If files outside of these directories ar
Severity: important
Description:
A flaw was found in a change made to path normalization in Apache HTTP Server
2.4.49. An attacker could use a path traversal attack to map URLs to files
outside the expected document root.
If files outside of the document root are not protected by "require al
Severity: moderate
Description:
While fuzzing the 2.4.49 httpd, a new null pointer dereference was detected
during HTTP/2 request processing,
allowing an external source to DoS the server. This requires a specially
crafted request.
The vulnerability was recently introduced in version 2.4.49.
o Apache. The
virtual host configured by you would respond to "hostname" (I think the :8080
in ServerName is ignored at best) or "my.domain.com". All other requests will
be answered by the global server setup.
Hope this helps,
Stefan
>
>
>
> Shawn Bea
only on a particular host, you can disable it on all others.
Hope this helps,
Stefan
> Am 04.06.2021 um 06:17 schrieb Hildegard Meier :
>
> Solution to have TLSv1.2 and TLSv1.0 support together again with Apache
> 2.4.29 on Ubuntu 18:
>
> Changing
>
> SSLPro
able temporarily
That nothing was logged indicates to me that the script run and returned exit
code 0.
I would advise the following:
- configure 'LogLevel md:trace2' to see all the details the module does until
you have analyzed it
- remove the "staging/foo+bar" folder with
1.15.7 looks more like a mod_http2 version. Could you check again which mod_md
version you have?
In a "new enough" version, there will be a file `job.json` in the domain and/or
staging folder where you can see details of the renewal attempts for that
specific MDomain. Do you see anythi
handler is called and the responses from
your proxied apps in detail.
Regards, Stefan
>
> -Yves
>
>
> Ursprüngliche Nachricht
> Von: Stefan Eissing
> Gesendet: Donnerstag, 17. Dezember 2020, 14:41 MEZ
> Betreff: [users@httpd] Disable HTTP2 connection co
ig. You
can always use "curl" to get an honest opinion and with "-v" also some good
output of what actually happens on the client side.
Best regards,
Stefan
> -Yves
>
>
> Ursprüngliche Nachricht
> Von: Stefan Eissing
> Gesendet: Dienstag,
this works, then the mixup happens somewhere in the proxy handling.
What requests do you see incoming in your proxy logs in that case?
Best regards, Stefan
> Am 15.12.2020 um 14:33 schrieb Yves Goergen :
>
> Hello,
>
> I just found out the hard way that HTTP2 has a great new fe
If I use
> openssl s_client -connect nc-mcd.helmholtz-muenchen.de:443
I get a connection using TLSv1.2. So far, so good.
If your client cannot connect, maybe it is old and wants to talk SSLv3 which is
no longer supported?
Your settings look fine otherwise, afaict.
- Stefan
> Am 27.1
gt;
> Am 14.10.2020 um 11:29 schrieb Stefan Eissing:
>> There has been work done by Ylavic regarding this. I do not known in which
>> release his changes made it.
>>
>> However, up to then, certain SSL* configs did only apply from the _first_
>> VirtuaLHost for
historical from the time before SNI was used
everywhere.)
- Stefan
> Am 14.10.2020 um 10:56 schrieb Thomas Plant :
>
> Hello,
>
> I have a virtualhost where i need to allow only TLSv1.2.
>
> Tried following config:
>
>
> ServerName xx
> ServerAlias xx
>
> Am 14.07.2020 um 16:48 schrieb Tom Browder :
>
> On Tue, Jul 14, 2020 at 02:01 Stefan Eissing
> wrote:
> > 1. For an auto renewal for the current managed domain, will I have to
> > manually restart each time?
> Clarification: only a reload (graceful) is necessary
more reliable and also offers monitoring. But it is a new
thing and bugs may be found.
Cheers, Stefan
>
> Thank you.
>
> Best regards,
>
> -Tom
>
> -
> To unsubscribe, e-mail: users-unsubscr..
There is a module called "mod_md" which gets and renews certificates from LE.
It's part of 2.4.43.
https://httpd.apache.org/docs/2.4/mod/mod_md.html
https://github.com/icing/mod_md
You do not need to have port 80 open to use it. It also works with port 443
alone.
Cheer
Hi Simon,
the internal HTTP/2 handling is done using the nghttp2 library, see
<https://www.nghttp2.org/documentation/> for details. That one does the HPACK
and this is the reason you seen no special code for that in mod_http2.
Cheers, Stefan
> Am 27.05.2020 um 16:23 schrieb
As far as I understand, you have
vhost1 *:443 siteA.com
vhost2 *:443 Zsize.com
If the definitions are included in this order, vhost1 is the default selection
initially. Then the client host name is inspected (send via TLS as SNI). If it
*matches* any other vhost, that vhost is then taken. Other
ee
<https://github.com/icing/mod_md#how-to-staple-all-my-certificates>
Cheers, Stefan
> Am 28.03.2020 um 11:28 schrieb Steffen :
>
> Yep very nice. In mod_status you can see :
>
> Managed Staplings
>
> DomainCertificate ID OCSP Status Stapling Valid Res
n than I can provide.
Stefan
> Am 23.10.2019 um 17:07 schrieb Wouter Verhelst :
>
> Hi Stefan,
>
> Stefan Eissing schreef op wo 23-10-2019 om 16:33 [+0200]:
>> I assume you have tried openssl standalone on such a certificate?
>>
>> https://stackoverflow.co
implementation. The command line should
let you verify that.
If this is the case, question would be if some openssl config parameter can
disable that for you. I think there are some people around here who should be
able to find that out, once you have verified that with your certs.
Cheers, Stefan
>
> Am 21.10.2019 um 22:53 schrieb Marian-Nicolae Ion :
>
> Hi!
>
> I recompiled and installed the new version... but I came back quickly to the
> "standard" one:
> - using "curl" I have noticed that effectively I could have TLS 1.3 only on
> the desired virtual host and TLS 1.2+ on the others
st Regards,
Stefan
> Am 25.06.2019 um 17:27 schrieb Nitin Kadam :
>
> Team awaiting for your response my production server is having this issue.
>
> On Tue, Jun 25, 2019 at 12:31 PM Nitin Kadam wrote:
> also disabling mod_ssl with a2dismod SSL site starts working on HTTP
> (di
Hi Andrew,
the overall test suite is at
<https://svn.apache.org/repos/asf/httpd/test/framework/trunk>.
For some modules, additional test suites are available. For example the ones in
<https://github.com/icing/mod_h2> and <https://github.com/icing/mod_md>.
Cheers, Stefan
>
Technical description in https://tools.ietf.org/html/rfc7231
Cheers, Stefan
> Am 23.05.2019 um 22:02 schrieb Mark DM :
>
> Hello, I have a project I have been working on where I need to dend "201
> Created" then "Loction http://IPADDRESS/result.
>
> I am setting headers i
that should happen
and will be happy to receive feedback on it.
Cheers, Stefan
> Am 25.04.2019 um 16:29 schrieb Hajo Locke :
>
> Hello,
>
> thanks to Tom, who informed me offlist about this. It seems that problem
> was triggered by some kind of maintenance.
> https://se
what happens?
AFIK, there have been no (intentional) changes regarding OCSP stapling in
recent versions. Are you doing the openssl test on the same machine that the
affected servers run?
- Stefan
-
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org
I made the change in trunk with revision r1856910 and will propose it for
backport to 2.4.x
> Am 04.04.2019 um 11:47 schrieb Rathore, Rajendra :
>
> Hi Stefan,
>
> Thanks for the help, Do I need to raise an issue with Apache Http server to
> update that file or we have a
In ./CMakeLists.txt, line 423
modules/http2/h2_switch.c modules/http2/h2_ngn_shed.c
change to
modules/http2/h2_switch.c
> Am 04.04.2019 um 11:42 schrieb Rathore, Rajendra :
>
> Hi Stefan,
>
> Thanks for the quick response, please let me know what entry s
The source file is gone. It needs to be removed from CMakeLists.txt. Sorry
about the confusion.
> Am 04.04.2019 um 11:34 schrieb Rathore, Rajendra :
>
> Hi Team,
>
> While building apache 2.4.39 using CMake command, I face below issue
>
> CMake Error at CMakeLists.txt:761 (ADD_LIBRARY):
>
this was fixed.
> * Or if this issue is not known, and it is a new bug I found?
>
> * Or if this is not a bug, but then there is something I really do not
> understand. Maybe someone can tell me what I did wrong.
It seems to have been a bug. Your understanding is correct.
Btw. in the upcomin
mod_reqtimeout uses the setting of the "base" host, not necessarily the virtual
host selected by SSL.
The "base" host is usually the first one for the given port. So when you have
virtual host A, X, C in
that order in your config, try changing the setting for A.
-Stefan
d together with other Lets Encrypt clients such as
certbot, you need to upgrade to a recent Apache httpd version or get the module
from github and compile it yourself.
Hope this helps,
Stefan
> Am 02.01.2019 um 14:36 schrieb Jens-U. Mozdzen :
>
> Hi Jerry,
>
> Zitat von Jer
The Option "TLSv1.3" in the directive SSLProtocol is available since httpd
2.4.37. Earlier versions will not recognize this and not enable it either.
Cheers,
Stefan
> Am 21.11.2018 um 11:19 schrieb Hemant Chaudhary
> :
>
> HI,
>
> I am using openssl-1.1.1 with
Try "openssl s_client -debug -connect host:port" to see if your machine can
contact the server at all.
> Am 21.06.2018 um 10:29 schrieb Mahmood Naderan :
>
>
> Have you enabled ssl and rewrite modules? I would verify also that there is
> no firewall blocking 443.
>
> It seems that everythi
I advice to debug this step-by-step. First the SSL connection to your Apache.
Then the proxy setup. Then any restrictions with "Require...".
> Am 10.04.2018 um 13:31 schrieb Rajesh Cherukuri :
>
>
> configured HTTPS on 8080 port and here is the request sent to HTTP and HTTPS
> found two things
>
>
>
> NON-SSL configuration
> Listen 172.16.130.2:80
>
>
>
> ProxyRequests On
> ProxyVia On
>
>
>
> Require expr %{HTTP_HOST} =~ /^example.com:443$/
>
>
>
>
>
> On Tue, Apr 10, 2018 at 9:34 AM, Stefan Eissing
>
encryption between Browser and Backend.
As for the TLS c2 connection setup, you have to specify "https:" for your
proxied backend and can influence the setup with the various "SSLProxy*"
directives.
Cheers,
Stefan
-
t 2.4.x
release.
Cheers,
Stefan
> Am 28.03.2018 um 08:58 schrieb @lbutlr :
>
> Now that TLS 1.3 has been approved, what is the status of using it with
> Apache? Last I heard apache 2.4 couldn't build agains openssl 1.1, but
Thanks, Kazuhiko. Always nice to get feedback.
Cheers,
Stefan
> Am 28.03.2018 um 03:21 schrieb kohmoto :
>
> Hi,
>
> OS: CentOS7.4.1708
> kernel: 3.10.0-693.21.1
>
>
> Apache HTTP Server 2.4.33 has been installed successfully via rpmbuild on
> CentOS7.4.
>
2.4.33 has been voted for release and is now being processed. Except an
official announcement in the next days. *)
Cheers, Stefan
*) Unless disaster strikes, of course.
> Am 22.03.2018 um 10:59 schrieb Martin Knoblauch :
>
> Hi,
>
> sorry for the non-technical question. Is
No, because I do not have it. Afraid, you need to hunt on the internet yourself.
> Am 07.02.2018 um 11:05 schrieb Pietro Pesce :
>
> hello
>
> tnx for the response, you can give me the procedure?
>
> pls
>
> 2018-02-07 11:03 GMT+01:00 Stefan Eissing :
> Your o
any longer.
-Stefan
> Am 07.02.2018 um 10:44 schrieb Pietro Pesce :
>
> hello
>
> i have a solaris zone whit apache:
>
> # /app/apache/bin/httpd -version
> Server version: Apache/2.0.59
> Server built: Jun 18 2007 14:27:08
>
> when a try to start receive this e
Except in (mostly upstream) traffic (or downstream when having lots of cache
validations succeed).
In this example:
HTTP/1.1 upstream: 18.33MB
HTTP/2 upstream: 2.87MB (space savings 85.65%)
-Stefan
> Am 22.01.2018 um 15:14 schrieb Eric Covener :
>
> On Mon, Jan 22, 2018 at 9:02
the
server numbers such a requests/sec look great, but the
page load times will not.
Makes sense?
Cheers,
Stefan
> Am 22.01.2018 um 13:06 schrieb Hajo Locke :
>
> Hello List,
>
> separatly from other mail with proxy_fcgi/enablereuse problem i want to tell
> about my results.
or a special file in Case 1, when it generally
works? (Case 2)
2. Why does the restriction of a right (Case 3) does not lead to a restricted
view? As you can see in the log, the user is not known (like Case 1).
For me, especially Case 3 looks suspicious.
Any help would be appreciated.
Thanks and Kind Regards,
Stefan
Can someone with deeper proxy_(fcgi) knowledge than me jump in here. This goes
beyond where my area...
> Am 19.01.2018 um 13:23 schrieb Hajo Locke :
>
> Hello,
>
> thanks Daniel and Stefan. This is a good point.
> I did the test with a static file and this test was succes
Hej Hajo,
do you have the same effect with less connections? e.g.
> h2load -n10 -c10 -m10 https://example.com/phpinfo.php
and, as Daniel just wrote, do you have similar problems when serving static
files?
(just to track down where to look)
-Stefan
> Am 19.01.2018 um 12:38 schrie
> Am 18.01.2018 um 20:10 schrieb Johannes Bauer :
>
> Hi Stefan,
>
> On 18.01.2018 10:00, Stefan Eissing wrote:
>> Yes, this is definitely an area where the server can and should be
>> improved. Marat already provided the link to the article discussing
>> th
Have you tried something like:
ServerName mail.mydomain.com
DocumentRoot /usr/share/squirrelmail
SSLEngine on
...squirrelmail stuff...
> Am 18.01.2018 um 15:57 schrieb Rodrigo Cunha :
>
> Dear, i have a problem in config vhost squirremail.
> I'm following the
on my servers (beside what you already wrote) is
SSLStaplingCachedbm:ocsp-stapling
use a permanent cache, so a restart of the server does not require
it to refetch all responses.
-Stefan
> Am 17.01.2018 um 20:21 schrieb Johannes Bauer :
>
> Hi Apache users,
>
>
CVE-2017-9789 is a pure mod_http2 issue. If the protocol is not enabled, it
does not trigger. (You could even load the module without exposing the server
to the vulnerability)
You need to upgrade at least mod_http2 to a newer version.
Hope that clarifies it.
Cheers,
Stefan
> Am 21.09.2
ssume
that a certain time of day (or even time of week?) would be most desirable to
configure for such a restart? Anything else?
Looking forward to hear from you. Cheers,
Stefan
PS. To clarify: these are all features that you will need to configure. As long
as you do not enable Let'
There is no good comfort place for h2+prefork.
We think we can invest our time better in other places.
Cheers,
Stefan
> Thanks,
> Dave Copeland.
>
> On 11/07/17 10:03 AM, Yehuda Katz wrote:
>> H2 is threaded and prefork is not, so the performance is poor or it doesn't
Hi,
do you talk http: or https: to the backend? h2://mybackend is for the SSL case,
for unencrypted calls, use h2c://mybackend.
Maybe that is the problem?
-Stefan
> Am 17.06.2017 um 15:26 schrieb Olivier Mallassi :
>
> Hello all
>
> We are trying to use the mod_proxy_http2 of
inimal set that still causes the problems and
share that?
Thanks!
-Stefan
> Am 07.04.2017 um 17:28 schrieb John Iliffe :
>
> On Friday 07 April 2017 03:53:55 Konstantin Kolinko wrote:
>> 2017-04-07 7:19 GMT+03:00 John Iliffe :
>>> I just enabled http2 on our server and tes
Hi, this is a known issue with 2.4.23. It was fixed in the github version of
the module since v1.5.12 and is also fixed in the Apache subversion repository
(trunk and 2.4.x).
Cheers,
Stefan
> Am 08.09.2016 um 17:39 schrieb Michael Johnson :
>
> Hi there,
>
> I am trying to us
; autoconf
> ./configure
> make
> sudo make install
>
> For testing purposes I just built nghttp2 on the server (the same way I did
> on the client), started h2load and here it works without falling back to
> http/1.1
>
>
>> Am 25.08.2016 um 17:08 schrie
http2:debug] [pid 3936] h2_session.c(655):
> [client 10.0.0.4:52614] AH03068: h2_session(1): sent FRAME[GOAWAY[error=0,
> reason='timeout', last_stream=15]], frames=12/7 (r/s)
> [Thu Aug 25 16:38:34.262672 2016] [http2:debug] [pid 3936] h2_session.c(752):
> [client 10.0.0.4:52614] AH0
The following line does not look good:
[Thu Aug 25 15:19:43.851331 2016] [ssl:warn] [pid 4275] AH01909:
localhost:443:0 server certificate does NOT include an ID which matches the
server name
Can you make sure that all names do align? Maybe tweak /etc/hosts to make it
match your localhost?
>
If you add something like
LogLevel http2:debug
LogLevel ssl:debug
LogLevel core:debug
you should find information about negotiation in your error.log. Strange
that Firefox works and h2load does not. I use the later regularly in my tests.
Looking forward to see some log output...
> A
On 7/4/2016 01:22, Stefan wrote:
> Hi,
>
> I understand that building Apache httpd on Windows using VS has a couple
> of undocumented issues. Namely using VS 2015 I run into these problems:
> 1. parallel builds cause spurious build failures
> 2. Apache monitor fails to link
bugreports, or was it for some
reason decided not to have them listed as bugs in the bugtracker?
Regards,
Stefan
smime.p7s
Description: S/MIME Cryptographic Signature
Good to hear! I will update the bug. Thanks.
> Am 14.03.2016 um 13:08 schrieb Russel Van Tuyl :
>
> Stefan, version 1.2.8 works great. Thanks for the fix and for your help. I
> create a bug report with Apache yesterday. Do you want to update it or would
> you like me to? https:
n the pure 2.4.18, you can apply this patch:
proxy-authority.patch
Description: Binary data
Let me know if this works for you.
-Stefan
> Am 14.03.2016 um 11:35 schrieb Russel Van Tuyl :
>
> I've never applied or tested a patch before, but i'm willing to give it a
> shot
authority header. nghttpx does
everything right and mod_http2 has it wrong.
Are you able to apply/test a patch?
-Stefan
-
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org
common.conf:
ServerName foo.tld
SSLCertificateFile foo.pem
Include common.con
ServerName bar.tld
SSLCertificateFile bar.pem
Include common.con
> Am 03.02.2016 um 11:45 schrieb Felipe Gasper :
>
> What if I have a vhost with:
>
> ServerName foo.tld
> ServerAlias bar.tld
>
>
Unfortunately, I am not familiar with google searches for apache windows
problems. You probably have to do your own search.
> Am 15.01.2016 um 12:36 schrieb Subhendu mohanty :
>
> Iink is for http Apache I guess I am need of help for windows
>
> On 15 Jan 2016 4:52 pm, "St
Sure, 1st link on the search:
https://docs.oracle.com/middleware/1212/webtier/PLGWL/apache.htm#PLGWL395
guides you step-by-step.
> Am 15.01.2016 um 12:17 schrieb Subhendu mohanty :
>
> Thanks could you please help with a example config file
>
> On 15 Jan 2016 4:32 pm, "St
Sure, please have a look:
https://www.google.de/search?q=apache+https+http+welogic&ie=utf-8&oe=utf-8&gws_rd=cr&ei=f9GYVrL-AoP0Uuawl9gO
> Am 15.01.2016 um 11:53 schrieb Subhendu mohanty :
>
> Can we configure Apache with https and weblogic on http
> Please help with example configuration file ht
&revision=r1708124
In case you build your server yourself, I can setup a 2.4.x branch
with changes applied...
//Stefan
> Am 20.10.2015 um 15:12 schrieb Zoltán Halassy :
>
> Hello!
>
> Using 2.4.17.
>
> There seem to be an issue with http/2:
>
> I have these in the vhost
This 3rd party checker still fails tho.
>
> https://www.h2check.org/
>
> However I think that checker is duff because it is listed in
> chrome://net-internals/#http2:)
>
> Thanks for your time stefan. Also thanks for your work on getting
> this into apache.
>
> On 16 Oct
> Datum: 16. Oktober 2015 um 11:22:57 MESZ
> An: d...@httpd.apache.org
> Betreff: Aw: mod_http2 protocols directive broken
> =20
> Hi Stefan, here is the output of both checks. Note I will confirm also
> curl is compiled with http2 support and will also show curl -V output.
>
On OS X, you need your own pcre. I did that for my mod_h2 sandbox:
https://github.com/icing/mod_h2
Hope that helps,
Stefan
> Am 07.10.2015 um 17:29 schrieb Doyle Jonathan :
>
> I am trying to install Apache2 locally on my Yosemite Mac.
> I successfully installed the latest ver
SPDY has been superceeded by HTTP/2 as a protocol. Some browsers still support
SPDY, however it will int the mid-term go away.
All major browsers nowadays support HTTP/2. That should make it a safer
investment.
Apache httpd will support HTTP/2 in one of the next 2.4.x releases - hopefully
the
Check user-agent header too. Mobile phones might just be too slow or get
disconnected
Sendt fra min iPhone
> Den 26. nov. 2014 kl. 15.11 skrev Kristian Rink :
>
>> Am 26.11.2014 um 14:48 schrieb Stefan Magnus Landrø:
>> I'd add response time logging %D to the acce
I'd add response time logging %D to the access log config to see if requests
are slow
You can add that to jetty too.
Stefan
Sendt fra min iPhone
> Den 26. nov. 2014 kl. 14.34 skrev Kristian Rink :
>
> Hi Nick;
>
> thanks for your comment.
>
>> Am 26.11.2014
I highly recommend Gatling for load testing. It features non blocking io and
can easily drive 50.000 connections from one machine.
Nice DSL too.
Stefan
Sendt fra min iPhone
> Den 17. nov. 2014 kl. 22.29 skrev Rose, John B :
>
> | Maybe the question is what combination of load te
I'd try to make the backend generate a valid http response instead. What
kind of web-server is it?
Stefan
2014-11-17 10:50 GMT+01:00 Blomme Dieter :
> We have fixed this problem temporarily. What I've noticed is that the
> header isn't there and inserting it (e.g. with bu
The transfer encoding header is missing, right?
Sendt fra min iPhone
> Den 13. nov. 2014 kl. 18.13 skrev Blomme Dieter :
>
> Hi,
>
> We have a problem with mod_proxy and chunked content.
> We use mod_proxy to selectively request pages from a second site, the
> ProxyPass and ProxyPassReverse st
time (microseconds)
Also, we're using big ip as a load balancer in front of this server, and
the big ip health check considers this apache as down during this
timeframe.
BTW, in total there are exactly 200 weird entries like this. Are we hitting
some crazy default?
What could be going on?
Chee
Sent with AquaMail for Android
http://www.aqua-mail.com
On October 28, 2014 5:06:54 PM John Mark Mitchell
wrote:
All,
I have worked with Apache for well over a decade now and have come to
understand that there is usually more than one way to accomplish desired
outcomes. I have been trying
>On Tue, Jul 8, 2014 at 9:18 AM, Schnyder Stefan (schf)
> wrote:
>> 2) Telling mod_authnz_ldap, that a static text (DOMAIN\\) precedes the
>> username, so mod_authnz_ldap will only look at the part after DOMAIN\\
>> for a matching attribute (wxyz)
>This modi
m_winbind returns from DOMAIN\\wxyz to wxyz in the source code
& recompile it
Is anyone able to provide a pointer in the right direction here? Any help would
be much appreciated.
Thanks in advance,
Stefan
___
ZHAW Zurich University of Applied Sciences
Information & Communication Technology
Stefan Schnyder
if you have no session,
you can only:
either pass original url as post parameter in you login forms action
or
set a cookie
Cheers Stefan
2014-06-21 14:50 GMT+02:00 Tim Daley :
> I finally got my login form working with LDAP authentication and pure html.
>
> I have coded the httpd_lo
Hello
maybe a good htaccess file can solve what you are looking for ...
(pretty sure thats the case)
Cheers Stefan
2014-06-18 19:17 GMT+02:00 Lou Henry :
> Hi,
>
> I am fairly new to configuring apache web servers. Currently, I have a
> vanity url set up in an Apache Load Balancer a
regards
Stefan
-
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org
n1.com
DocumentRoot /var/www/html
ErrorLog /var/log/httpd/error_log
CustomLog /var/log/httpd/access.log combined
##$ that is fine
ServerName domain2.com
ServerAlias domain2.com *.domain2.com
DocumentRoot /var/www/html/domain2
Stefan Pielmeier
email:ste...@symlin
.
This you can do by reviewing the HTML code of the page you send to the client.
If that doesn't help, I would try to reproduce the problem in lab conditions.
then check if the transfer of the pictures is completed by
- checking the apache log
- using wireshark
Hope it helps,
Stefan.
S
Hej Eric,
that was quite right, thanks! Inside the file called ports.conf, another
NameVirtualHost statements was hidden (from my limited knowledge).
Now, as I have removed my double statements, everything works and I do not get
any disturbing warnings anymore.
Thanks a lot,
Stefan.
Stefan
1 - 100 of 136 matches
Mail list logo
