Re: [users@httpd] [httpd2.4.57]Possible conflicts between VHosts with SSL and LimitRequestLine

2024-01-21 Thread Florent Thomas
Great thanks for your quick answer. If I understand well setting LimitRequestLine 10240 in name based virtualhost ? So what is your recommendation. Anyway, thanks for the time already spent on this. Regards Florent THOMAS ☎ +33 972 457 755 ✉ [ mailto:florent.tho...@mind-and-go.com

[users@httpd] [httpd2.4.57]Possible conflicts between VHosts with SSL and LimitRequestLine

2024-01-21 Thread Florent Thomas
to be considered as the "master" of some options? Could anyone lead me to wha I am doing wrong? Sorry if I'm not clear, any question and/or feedback would be appreciated. Regards, Florent THOMAS

[users@httpd] proxying websocket and httpd in same VHOST

2023-06-03 Thread Florent Thomas
ackend still returning 400 on websocket url any ideas , proposal, debug procedure will be appreciated. Tanks in adavance for the time spent reading this thread. regards Florent THOMAS - To unsubscribe, e-mail: users-unsu

Re: [users@httpd] CVE-2023-25690: Apache HTTP Server: HTTP request splitting with mod_rewrite and mod_proxy

2023-03-13 Thread Thomas Åkesson
>>> Thanks for the suggestion. I am unable to make 2.4.52 (Ubuntu) accept space >>> for the B-flag. I have tried first, middle, last, only flag but always >>> getting "RewriteRule: bad flag delimiters". >>> >>> I am also having concerns whether this would work (unable to test at this >>> time

Re: [users@httpd] CVE-2023-25690: Apache HTTP Server: HTTP request splitting with mod_rewrite and mod_proxy

2023-03-13 Thread Thomas Åkesson
Try e.g. [R,B= ?,...] The question mark is to avoid the issue of not being able to have " " as the final character in this syntax. >>> >> >> Sorry, the above doesn't work. Someone reported in another thread: [R,B=\ ] > > The real trick seems to be quoting the entirety of t

Re: [users@httpd] CVE-2023-25690: Apache HTTP Server: HTTP request splitting with mod_rewrite and mod_proxy

2023-03-10 Thread Thomas Åkesson
> On 10 Mar 2023, at 16:32, Eric Covener wrote: > > On Fri, Mar 10, 2023 at 8:56 AM Thomas Åkesson > wrote: >> >> Hi, >> >> We are experiencing the effect that a RewriteRule resulting in R (redirect) >> are blocked (403) with AH10410 despite bein

RE: [users@httpd] CVE-2023-25690: Apache HTTP Server: HTTP request splitting with mod_rewrite and mod_proxy

2023-03-10 Thread Thomas Åkesson
:8080/elsewhere/?base=$1&target=$2 [R,QSA,L] We are evaluating this workaround: [R,B,BNP,NE,QSA,L] This results in encoded slashes which is not necessary. Any ideas how to achieve the previous result? Tested on the Ubuntu 22.04 and 20.04 backport of this fix. Thanks, Thomas Å. On 2023/03/0

Re: [users@httpd] Apache website conversion from alias to virtualhost

2022-06-14 Thread Thomas WILLIAMSON
/application1 and mydomain.fr/application2 are interpreted as being from the same domain (contrarily to URLs such as application1.mydomain.fr and application2.mydomain.fr). I do not know Symfony and I can't give you any more details on their problematic. Hope it helps you to understand the need, T

Re: [users@httpd] Apache website conversion from alias to virtualhost

2022-06-08 Thread Thomas WILLIAMSON
option didn't occur in my config files). But to be honest, I didn't exactly understand the issue, as I lack enough time to properly learn Apache configuration basics. I thank you all for precious help! Thomas -- Thomas WILLIAMSON • Technicien Systèmes et réseaux *Tél.* 05 49 61 25 25

Re: [users@httpd] Apache website conversion from alias to virtualhost

2022-06-08 Thread Thomas WILLIAMSON
: > /var/www/BaseCollDev/public/ Any idea? Thomas -- Thomas WILLIAMSON • Technicien Systèmes et réseaux *Tél.* 05 49 61 25 25 (*interne *: 2235) *Eaux de Vienne - Siveer* • 55 rue de Bonneuil-Matours • 86000 Poitiers Le mer. 8 juin 2022 à 14:40, Thomas WILLIAMSON a écrit : > Hello

Re: [users@httpd] Apache website conversion from alias to virtualhost

2022-06-08 Thread Thomas WILLIAMSON
Hello, Thank you for such a quick response! Modifying this option in file /etc/apache2/default-server.conf within returns a prohibited access (403 error) page: [image: image.png] -- Thomas WILLIAMSON • Technicien Systèmes et réseaux *Tél.* 05 49 61 25 25 (*interne *: 2235) *Eaux de Vienne

[users@httpd] Apache website conversion from alias to virtualhost

2022-06-08 Thread Thomas WILLIAMSON
* - [E=BASE:%1] > RewriteCond %{HTTP:Authorization} .+ > RewriteRule ^ - [E=HTTP_AUTHORIZATION:%0] > RewriteCond %{ENV:REDIRECT_STATUS} ="" > RewriteRule ^index\.php(?:/(.*)|$) %{ENV:BASE}/$1 [R=301,L] > RewriteCond %{REQUEST_FILENAME} !-f > RewriteRule ^ %{ENV:BASE}/index.php [L] > > > > RedirectMatch 307 ^/$ /index.php/ > > Please note this case has been described here <https://stackoverflow.com/questions/72487821/apache-website-conversion-from-alias-to-virtualhost> but has not received any help so far. -- Thomas WILLIAMSON • Technicien Systèmes et réseaux *Tél.* 05 49 61 25 25 (*interne *: 2235) *Eaux de Vienne - Siveer* • 55 rue de Bonneuil-Matours • 86000 Poitiers

[users@httpd] mod_ssl env var to uniquely identify client certificate (sha1 fingerprint ?)

2022-06-07 Thread Thomas Fazekas
Right off the bat, I want to point out that this is NOT a bug report but rather a feature request/proposal (I don't know whether this is allowed or not ... my apologies if it isn't) In a nutshell what I would like to have is in the SSL environment variables a new variable that uniquely identifies

Re: [users@httpd] nod_session SessionMaxAge

2022-06-06 Thread Thomas Fazekas
; > > It looks to me like you don't actually have an authentication > requirement, so when your session expires it doesn't trigger a redirect to > your login form. Try protecting the cgi or some larger scope with e.g. > 'require valid-user' > > > > On

Re: [users@httpd] nod_session SessionMaxAge

2022-06-05 Thread Thomas Fazekas
t looks to me like you don't actually have an authentication requirement, > so when your session expires it doesn't trigger a redirect to your login > form. Try protecting the cgi or some larger scope with e.g. 'require > valid-user' > > On Sun, Jun 5, 2022, 6:00 AM

[users@httpd] nod_session SessionMaxAge

2022-06-05 Thread Thomas Fazekas
ment variables. Now, even though I keep the browser open, if I refresh the page after the expiration period shouldn't I be forced to the login page again ? What am I missing ? Thanks in advance, Thomas

[users@httpd] LimitRequestFieldSize / Context

2022-02-16 Thread Thomas Müller
who should be informed to update the documentation accordingly?   Cheers  Thomas   - To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org

[users@httpd] mod_ssl certificate (mutual) authentication

2021-08-29 Thread Thomas Fazekas
fyDepth 5 SSLOptions +StdEnvVars +ExportCertData +FakeBasicAuth SSLRequireSSL Require all granted After the certificate check the users are let in. What am I missing ? Obliviously my ultimate goal is to check the certificate CN value (as you can see in the first config). That doesn't work either. Thomas

[users@httpd] Client certificate authentication against (Open)LDAP server

2020-12-11 Thread Thomas Fazekas
OS : Debian 10.7 Apache HTTPD : 2.4.38 (from standard repo) Dear, my setup is as follows : above mentioned Apache connecting to OpenLDAP. User basic authentication (username/password) already works (against LDAP inetOrgPerson structure) What I would like to achieve is to have user certificates i

Re: [users@httpd] VirtualHost and SSLProtocol settings ignored.

2020-10-14 Thread Thomas Plant
Thanks for the explanation. I've read that using a dedicated IP for the Virtualhost would work? Am 14.10.2020 um 11:29 schrieb Stefan Eissing: There has been work done by Ylavic regarding this. I do not known in which release his changes made it. However, up to then, certain SSL* configs did o

Re: [users@httpd] VirtualHost and SSLProtocol settings ignored.

2020-10-14 Thread Thomas Plant
Am 14.10.2020 um 10:56 schrieb Thomas Plant: Hello, I have a virtualhost where i need to allow only TLSv1.2. Tried following config:   ServerName xx   ServerAlias xx .. ..  cut rest to shorten a bit ..   SSLEngine On   SSLProtocol -all +TLSv1.2   SSLCertificateFile /etc/letsencrypt

[users@httpd] VirtualHost and SSLProtocol settings ignored.

2020-10-14 Thread Thomas Plant
. As found on serverfault.com I tried the following directive too but without success: | |    SSLOpenSSLConfCmd Protocol "-ALL, TLSv1.2"| |Seems that the generic config file in /etc/httpd/conf.d/ssl.conf always overrides my settings in the virtualhost? Thanks for any help, Thomas

Re: [users@httpd] Apache2 2.4.18

2020-04-14 Thread Thomas Plant
Hi, do not know if this applies to your problem, but I had the same error a few months ago, in a server acting as 'normal' http server, not a proxy setup. I'm using MPM worker and an httpd, 2.4.6 from CentOS, and had to set MaxRequestsPerChild 0 in the worker configuration. On CentOS 7 it is und

Re: [users@httpd] No matter what I do, the httpd.pid file is created in the wrong location at runtime!

2019-07-31 Thread Thomas Cameron
x=/opt/apache --exec-prefix=/opt/apache --localstatedir=/opt/apache/var --runstatedir=/opt/apache/var/run Shouldn't that put the pid file in /opt/apache/var/run? Or am I not understanding something? Thomas - To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org

[users@httpd] No matter what I do, the httpd.pid file is created in the wrong location at runtime!

2019-07-31 Thread Thomas Cameron
: name="daemon" id=2 not_used Group: name="daemon" id=2 not_used What am I doing wrong? I want the pid file to go in /opt/apache/var/run not /opt/apache/var/logs. I am sure there's a configure argument I'm doing wrong, but I can't find what it is. Thanks! Thomas --

[users@httpd] Developing Private Cache Module

2018-09-13 Thread Thomas Salemy
ry in my research project. Thanks! –– Sincerely, Thomas Salemy

Re: [users@httpd] fcgi error ap_pass_brigade failed

2017-09-21 Thread Thomas Plant
Ähm, forgot the used software: running on Centos 7.4.1708 / httpd-2.4.6-67 / mod_fcgid-2.3.9-4 Am 21.09.2017 um 14:25 schrieb Thomas Plant: Hello all, I have setup a Webserver and see a lot of the following errors: [Wed Sep 20 16:28:48.332977 2017] [fcgid:warn] [pid 14969:tid

[users@httpd] fcgi error ap_pass_brigade failed

2017-09-21 Thread Thomas Plant
does the message mean, googled arround and already tried to set PHP_FCGI_MAX_REQUESTS=1 but no avail, message always there. Thanks for any advices, Thomas - To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For

Re: [users@httpd] Trubble with rewrite rules

2016-12-16 Thread Thomas Schweikle
On 16.12.2016 16:46, Eric Covener wrote: > On Fri, Dec 16, 2016 at 10:26 AM, Thomas Schweikle > wrote: >>RewriteRule ^/xyz/(.*) "/abc/$1" [R,L] > > > When this rule was first -- If it's in htaccess, the ^/ will not > match. Your other rule accoun

[users@httpd] Trubble with rewrite rules

2016-12-16 Thread Thomas Schweikle
to be redirected to the new place. I've added: RewriteRule ^/xyz/(.*) "/abc/$1" [R,L] But this does not work at all. My second rule is not touched at all. Moving the rule up does not help. It is touched now, but does not do anything ... What I am doing

[users@httpd] Apache: Avoiding users to access 'www.foo.com/subdomain1/'

2016-09-19 Thread thomas Armstrong
Hi. I have an Apache server, which main rootwebdir is '/usr/www/users/foo/' and 'foo.com' points there. However, I have some subdomains pointing within their directories: subdomain1.foo.com ---> /usr/www/users/foo/subdomain1subdomain2.foo.com ---> /usr/www/users/foo/subdomain2 This causes me a p

[users@httpd] Re: RewriteRule not working, 404 error obtained

2016-06-28 Thread thomas Armstrong
I fixed it. I modified "httpd.conf", replacing "AllowOverride None" with "AllowOverride All" within the "". On Tue, Jun 28, 2016 at 7:03 PM, thomas Armstrong wrote: > Hi. > > Using Apache/2.2.31, I created the following rule on my '.htacces

[users@httpd] RewriteRule not working, 404 error obtained

2016-06-28 Thread thomas Armstrong
Hi. Using Apache/2.2.31, I created the following rule on my '.htaccess' file: -- RewriteEngine on RewriteRule ^([^/]+)/$ /do.php?label=$1 [L] -- However, when accessing 'http://foo.com/whatever/', I get a 404 error message. I've checked my error log and: --- [Mon Jun 27 11

[users@httpd] Rewrite Issues

2016-05-14 Thread Thomas Schweikle
y - to be unable to access any other directory on the server Is this possibe with apache, user_dir and rewrites at all? -- Thomas - To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org

[users@httpd] Rewrite rules in .htaccess: Internal redirect loop

2016-04-15 Thread Thomas Ulrich
# don't rewrite if request URI points to existing file or folder RewriteCond %{REQUEST_FILENAME} -f [OR] RewriteCond %{REQUEST_FILENAME} -d RewriteRule ^ - [L] # Is there something wrong with these? RewriteRule ^([_0-9a-zA-Z-]+/)?(wp-(content|admin|incl

Re: [users@httpd] Refiring requests to proxy backend

2015-12-18 Thread Jose Thomas
> I'll keep you posted if I find a smart way to re-fire mod_proxy on demand. > > With regards, > Daniel. > > Thanks Daniel.

Re: [users@httpd] Refiring requests to proxy backend

2015-12-18 Thread Jose Thomas
; > I'm not a mod_lua expert, esp as it relates to exposing the > > full Apache httpd API... it is possible that using r.handler > > and specifying the proxy may work. > > > >> On Dec 18, 2015, at 8:05 AM, Jose Thomas wrote: > >> > >> Jim, >

Re: [users@httpd] Refiring requests to proxy backend

2015-12-18 Thread Jose Thomas
t will be processed as a proxy > request. > > On Dec 17, 2015, at 9:21 AM, Jose Thomas wrote: > > > > All, > > > > I am using httpd 2.4 with mod_proxy (http) routing requests to multiple > backends. > > > > I have a strange requirement. If a backend responds

[users@httpd] Refiring requests to proxy backend

2015-12-17 Thread Jose Thomas
All, I am using httpd 2.4 with mod_proxy (http) routing requests to multiple backends. I have a strange requirement. If a backend responds with a custom response code - i need to re-execute the request to a different backend. What would be the right way to implement this functionality ? I was l

[users@httpd] Re: 403 Forbidden on unicode urlencoded GET parameters (SecFilter issue)

2015-04-28 Thread Thomas DEBESSE
RLs > RewriteCond %{QUERY_STRING} ^.*(%0|%A|%B|%C|%D|%E|%F).* [NC] > RewriteRule ^(.*)$ - [F] This topic is solved. 2015-04-28 15:42 GMT+02:00 Thomas DEBESSE < thomas.debe...@diocese-frejus-toulon.com>: > Hi, sorry, I don't know why I got a false positive yesterday, but this is > not

[users@httpd] Re: 403 Forbidden on unicode urlencoded GET parameters (SecFilter issue)

2015-04-28 Thread Thomas DEBESSE
ed unicode character (like “%C3%A0”) Apache answers “403 Forbidden” without logging nothing. I just have to call something like that: http://domain/script.php?action=Mettre+%C3%A0+jour to get a 403 Forbidden answer. Do you know what is the cause of this problem? Thank you in advance -- Thomas DEBESSE

[users@httpd] 403 Forbidden on unicode urlencoded GET parameters (SecFilter issue)

2015-04-27 Thread Thomas DEBESSE
do you know what happens? Is this a bug? Thanks in advance. PS: I'm using Apache 2.2.22 on Debian 7 Wheezy. -- Thomas DEBESSE

Re: [users@httpd] httpd reverse proxy pass username per http_header

2015-01-19 Thread Thomas Peter
the trick. KR Thomas On 2015-01-18 17:29, Thomas Peter wrote: Hi, I'm trying to put httpd as reverse-proxy in front of a third party java application (running in tomcat) to handle authentication in httpd. The thirdparty app claims to be able to accept the user (that is authenticated before

[users@httpd] httpd reverse proxy pass username per http_header

2015-01-18 Thread Thomas Peter
http variable where the username is stored.) Is it possible to pass the username via http_header using httpd? Out of the box I only found authorization which is base64 encoded username:password Thanks! KR Thomas - To unsubscri

[users@httpd] htaccess in a directory under one with another htaccess

2014-10-26 Thread thomas Armstrong
Hi. On my Apache Server, I have this structure to host a website under '/' and a WordPress blog under '/myblog' directory: --- root_directory/.htaccess --- root_directory/php_stuff --- root_directory/myblog/.htaccess --- root_directory/myblog/php_wp_stuff Within 'root_directory/.htaccess' file I

[users@httpd] FallbackResource

2014-05-19 Thread Thomas E. Davis
I either have a problem with the use of the FallbackResource directive or I do not understand how it is designed to work. First, my setup: Win 7 desktop xampp 1.9.3 (Apache 2.4.9, PHP 5.11) I have a single point access website at My_Domain/test/ configured via the usual mod_rewrite .htaccess sc

Re: [users@httpd] ReverseProxy Exchange 2013

2014-02-17 Thread Thomas Eckert
> So i finally got apache2-devel installed... However, when running ./configure for mod_proxy_msrpc, i get an error due to the absence of ap_socache.h. It appears this file is included n apache 2.4. Now, will mod_proxy_msrpc only work in apache 2.4? If not, can i just get the ap_socache.h file

Re: [users@httpd] ReverseProxy Exchange 2013

2014-02-16 Thread Thomas Eckert
Chris, if you encounter any issues with mod_proxy_msrpc please report them at https://github.com/bombadil/mod_proxy_msrpc/issues. Note that OAB, OWA, Autodiscover, ActiveSync, etc. all use "normal" HTTP/S (and not MSRPC like OA) so they should work without mod_proxy_msrpc. There is an open issue wi

Re: [users@httpd] port redirecting mapping

2014-02-13 Thread Thomas Eckert
k over that, in case you still wanted to use it. On Thu, Feb 13, 2014 at 11:24 AM, Varun Bhuvanendran < varun.bhuvanend...@gmail.com> wrote: > Thomas > This was what i am looking for. Thnaks thomas. > what i was trying to do is, allow access to *http://domain_name > <http:/

Re: [users@httpd] port redirecting mapping

2014-02-13 Thread Thomas Eckert
request like this *http://domain_name <http://domain_name>* redirects > to *http://domain_name:3030 <http://domain_name:3030>* > > Also tries "Redirect" > *Redirect :3030 http://domain_name <http://domain_name>* > > rewrite_module is enabled. > > Is t

Re: [users@httpd] Re: reverse proxy choice to origin servers: https->https or https->http

2014-02-13 Thread Thomas Eckert
If you use httpd as reverse proxy then clients will perform SSL handshakes with your reverse proxy. In SSL there is no distinction between decrypting the HTTP headers only or decrypting the full HTTP request - it's simply "payload" and it will be decrypted as a whole. If you want to understand how

Re: [users@httpd] port redirecting mapping

2014-02-10 Thread Thomas Eckert
Assuming you have a working config for a server/vhost on domain_name:3030, then how about Redirect permanent / http://domain_name:3000/ ? See http://httpd.apache.org/docs/current/mod/mod_alias.html#redirect and friends. "Restricted" access is a bit vague but http://httpd.apache.org/docs/current/

Re: [users@httpd] Generating a gzip response from multiple pre-gzipped files on disk

2014-02-07 Thread Thomas Eckert
Can you post the headers, from sending the request(s) up to and including the response(s) ? I think you might be hitting the same spot as I recently did in (1). In short, most (if not all) popular clients do not unpack responses if they think they shouldn't even if the headers tell them to. So for

Re: [users@httpd] reverse proxy: connect to origin servers via http or https?

2014-02-07 Thread Thomas Eckert
> The question is: from the proxy performance/scalability point of view is it better to configure backends (origin servers) with http or with https? "Better" depends on what you want to achieve. Do you want to securely deliver simple html content with no fancy stuff ? Do you want to have authentic

[users@httpd] Using form based authentication sessions across locations

2014-01-20 Thread Thomas Eckert
Using form based auth, e.g. AuthName "forms_foo" AuthFormProvider my_provider AuthType form AuthFormLoginRequiredLocation "/foo_form" Session On SessionCookieName foo_cookie path=/foo/;httponly SessionCryptoPassphrase somereallyneatandnicepassphrase SessionCookieRe

Re: [users@httpd] #error mod_ssl requires OpenSSL 0.9.8a or later

2013-12-16 Thread Thomas Eckert
stall 2.4.x dev ? > > Regards, > Abdul > > On 12/16/2013 2:48 PM, Thomas Eckert wrote: > > Did you make sure to have the -dev package(s) installed ? > > > On Mon, Dec 16, 2013 at 10:10 AM, Abdul Anshad wrote: > >> I have made sure that the --with-ssl point

Re: [users@httpd] #error mod_ssl requires OpenSSL 0.9.8a or later

2013-12-16 Thread Thomas Eckert
Did you make sure to have the -dev package(s) installed ? On Mon, Dec 16, 2013 at 10:10 AM, Abdul Anshad wrote: > I have made sure that the --with-ssl points to the 1.0.1e, FYI i also > have another system binary installed which is openssl-0.9.7d. > > I have included the source of apr and apr-

Re: [users@httpd] Automatic OWA Form Based Authentication thru reverse proxy

2013-12-05 Thread Thomas Eckert
I've tried something simliar but didn't get it working. I would be interested in how your attempts on automatic-form-filling-in worked out - and if they did also in the "how" ;-) On Thu, Nov 28, 2013 at 11:48 AM, iridium1191 wrote: > Hi Apache users, > > I'm running Apache 2.2.22 on Ubuntu ser

[users@httpd] Re: unsetting encrypted cookies when encryption key changes

2013-11-18 Thread Thomas Eckert
Ideas, anyone ? On Mon, Nov 11, 2013 at 5:26 PM, Thomas Eckert wrote: > Trying to figure out how to unset encrypted cookies for which the > encryption key was changed. Docs at > > http://httpd.apache.org/docs/current/mod/mod_session_crypto.html > > say > > "If

[users@httpd] mod_auth_form and proper redirection after login

2013-11-14 Thread Thomas Eckert
Using mod_auth_form, when a user tries to access a URL and is 'interrupted' by the form based login, how do I pass on the original URL to the form html or to the AuthFormLoginSuccessLocation directive, so I can redirect the client - upon successful login - to the URL where she wanted to go to. At

[users@httpd] unsetting encrypted cookies when encryption key changes

2013-11-11 Thread Thomas Eckert
Trying to figure out how to unset encrypted cookies for which the encryption key was changed. Docs at http://httpd.apache.org/docs/current/mod/mod_session_crypto.html say "If the encryption key is changed, sessions will be invalidated automatically." but using a config like AuthName

Re: [users@httpd] Reverse Proxy Questions

2013-10-18 Thread Thomas Eckert
Try setting the proxy-initial-not-pooled flag with mod_proxy_http, see http://httpd.apache.org/docs/current/mod/mod_proxy_http.html Apache 2.4 has an issue with the HTTP keep-alive time out which happens quite frequently with ActiveSync. There is an ongoing discussion ("mod_proxy, oooled backend c

[users@httpd] Question regarding ProxyPass and "!"

2013-09-26 Thread Thomas Eckert
Using a config like this BalancerMember http://backend.example.local status=-SE ServerName frontend.example.local SSLProxyEngine On RequestHeader set X-Forwarded-Proto http ProxyPass ! ProxyPassReverse !

[users@httpd] 302 endless loop with mod_auth_form config

2013-07-29 Thread Thomas Eckert
I'm looking for the erorr in this config : KeepAlive OnServerName server1.domain1.localServerAdmin me@domain1.localListen 10.10.10.10:80 http BalancerMember http://server1.domain2.local status=-SE ServerName secured.domain1.local SSLProxyEngine On RequestHeader set

Re: [users@httpd] Mod_proxy Slow After a Week

2013-06-26 Thread Thomas Eckert
This is interesting. I'm seeing similar events at one of my reverse proxy. After fixing a DNS infrastructure problem I started seeing lots of 304s with processing times well above 5 seconds. For header-only requests that's a lot of time. If there is any news here please let us know. At the very lea

[users@httpd] Reverse proxying and specific output filter chain manipulation

2013-06-13 Thread Thomas Eckert
kills compression support to the external clients as well. Cheers, Thomas

[users@httpd] SSL, SNI and SSLStrictSNIVHostCheck

2013-01-04 Thread Thomas Eckert
working as intended I suggest adding an IP literal detection at this place and if it is working as intended I would like to know the reasoning behind it. Cheers, Thomas - To unsubscribe, e-mail: users-unsubscr...@httpd.apache.

Re: [users@httpd] mod_proxy_html, HTML rewrite and content compression

2013-01-04 Thread Thomas Eckert
On 11/16/2012 05:12 PM, Nick Kew wrote: On Fri, 16 Nov 2012 11:31:38 +0100 Thomas Eckert wrote: Thanks for the hint but unfortunately "manually" adding xml2enc to the filtering chain does not help. Looks like you've got problems over and above anything to do with you

Re: [users@httpd] mod_proxy_html, HTML rewrite and content compression

2012-11-16 Thread Thomas Eckert
On 11/14/2012 06:12 PM, Nick Kew wrote: On 14 Nov 2012, at 15:53, Thomas Eckert wrote: Is there a way to work around this ? I do want the call to mod_xml2enc to happen but I also want the reverse proxy to support content compression. That's a lot of correct analysis. The output chai

[users@httpd] mod_proxy_html, HTML rewrite and content compression

2012-11-14 Thread Thomas Eckert
to mod_xml2enc to happen but I also want the reverse proxy to support content compression. Any suggestions on how to go forward/where to dig on this issue ? Regards, Thomas - To unsubscribe, e-mail: users-unsubs

[users@httpd] Multible SSL sites for a single httpd/IP

2012-09-24 Thread congo thomas
hello, Can I host multible SSL sites on the same IP and port? (x.x.x.x:443) I want to setup a grand proxy for in front of a vast number of apache and iis (and other webservers), in order to avoid complex ssl configs throughout the platform, i want to reverse proxy as plain http to the backend,

Re: [users@httpd] Cant modify LD_LIBRARY_PATH

2012-04-06 Thread congo thomas
Friends, Please, if this is obvious and thats why no one responded, please hint me. I am thinking that LD_LIBRARY_PATH might be a reserved word. However i cant believe that i couldnt modify this var, per vhost. br congo On Wed, March 28, 2012 09:49, congo thomas wrote: > Any ideas on why t

Re: [users@httpd] Cant modify LD_LIBRARY_PATH

2012-03-28 Thread congo thomas
Any ideas on why this bevaior? My httpd is apache 2.2.3 on centos. br congo On Sun, March 25, 2012 23:11, congo thomas wrote: > hello world, > > So i have this vhost that looks like: > > ServerName bar.foo > DocumentRoot /var/www/bar.foo/wwwroot > SetEnv

[users@httpd] Cant modify LD_LIBRARY_PATH

2012-03-25 Thread congo thomas
hello world, So i have this vhost that looks like: ServerName bar.foo DocumentRoot /var/www/bar.foo/wwwroot SetEnv LD_LIBRARY_PATH /usr/local/mapserver/v52/lib SetEnv XLD_LIBRARY_PATH /usr/local/mapserver/v52/lib AllowOverride None allow from all Opt

Re: [users@httpd] Upgrading from httpd 2.2.3 to 2.2.22

2012-02-10 Thread congo thomas
hello dain, just to make sure: you did ofcourse stop the old httpd before doing this upgrade? i know that a running version cannot be patched on the fly, you need at least to restart it for it to discover new version and other metadata, and propably reload the libs. but i would suggest, since you

[users@httpd] ssl need explicit https

2012-01-27 Thread congo thomas
hello world, i have this webserver (apache 2.2.15 redhat) on which i want a vhost with ssl. i only want one nic, so i configured a new public ip to nat its port 443 into my local ssl port (not 443) for the vhost. The nat tunnels are open and works as expected. However when i setup apache to listen

Re: [users@httpd] redirect based on HTTP_HOST using mod_rewrite

2012-01-26 Thread Thomas Carrié
You are right I have updated my conf for NameVirtualHost instead of mod_rewrite, it does the job Thanks On Wednesday, January 25, 2012 11:41:49 PM Pete Houston wrote: > On Wed, Jan 25, 2012 at 10:58:02PM +0100, Thomas Carrié wrote: > > It is the first time I use module mod_rewrite i

Re: [users@httpd] redirect based on HTTP_HOST using mod_rewrite

2012-01-25 Thread Thomas Carrié
e!! > They need to add GAL support on Android (star to agree) > http://code.google.com/p/android/issues/detail?id=4602 > > > 2012/1/25 Thomas Carrié > > > Hi, > > > > I have 2 DNS entries > > - a.domain.com > > - b.domain.com > > > > Th

[users@httpd] redirect based on HTTP_HOST using mod_rewrite

2012-01-25 Thread Thomas Carrié
mod_rewrite is totally new to me, 2 things are unclear to me: - how to do a logical AND condition : HTTP_HOST is b.domain.com and QUERY_STRING is not /unauthorized - what kind of option to add to RewriteRule to avoid infinite recursion Thomas

Re: [users@httpd] AllowOverride

2012-01-19 Thread congo thomas
Hello world, am i the only one with this trouble? br congo thomas On Tue, January 17, 2012 13:52, congo thomas wrote: > I am having the set to None for allowoverride. > My problem persists in having this set: > > > ... > > AllowOverride FileInfo > ... > > >

Re: [users@httpd] AllowOverride

2012-01-17 Thread congo thomas
r flag that i should raise, to allow overriding globals, inside a vhost container? Thomas On Tue, January 17, 2012 00:58, Igor Cicimov wrote: > This should absolutely work. From the documentation: > > For security and performance reasons, do not set AllowOverride to anything > other

[users@httpd] AllowOverride

2012-01-16 Thread congo thomas
Hello world, I am being bullied by the security considerations of a standard apache installation on centos-5.6 and rhel-6 aswell - these apache are recent flavors from the respective repos of these platforms. The problem is this snippet from httpd.conf ## Options FollowSymLinks AllowOverride N

Re: [users@httpd] attack on apache - solved -

2012-01-13 Thread congo thomas
On Fri, January 13, 2012 20:48, Luisa Ester Navarro wrote: > > Thanks a lot to everyone who help me to solve the problem. > I had installed phpmyadmin and they used it to attack my server. > I found this in /var/log/httpd/access_log So which measures did you take into account to fix the problem? -

Re: [users@httpd] Q) apache + W2008R2 + NLB

2011-12-06 Thread congo thomas
On Tue, December 6, 2011 20:35, Yehuda Katz wrote: > On Tue, Dec 6, 2011 at 2:23 PM, Alex Samad - Yieldbroker < > alex.sa...@yieldbroker.com> wrote: >> >> 1) any idea if there is a tomcat (AJP) connector that would work or are >> all the standard modules compiled >> > http://tomcat.apache.org/tomc

Re: [users@httpd] Proxy Tomcat

2011-11-18 Thread congo thomas
Hello Ricardo, What i usually do for geo services, is to have a dedicated vhost for each service, i.e. one for your geowebcache and one for the mapservice, then its easy to proxy all wms requests onwards to the geowebcache, which subsequently could parse the requests to a basic wms service somewhe

[users@httpd] Apache Proxy for non-web protocols

2011-10-31 Thread Richard Thomas
Hi, I have searched all round for information on my query and asked a number of colleagues who know Apache more then me and I'm still stuck! Does anyone know if it is possible or not to get Apache to proxy non-web protocols please? I've read that it can proxy http, ftp etc, but I want it to pr

Re: [users@httpd] mod_authz_ldap - Authenticating users in Apache

2011-10-25 Thread Thomas Smith
On Fri, Oct 21, 2011 at 12:16 PM, Kalimuthu Samayan wrote: > but I am failing to have additional features listed below to authentication > like, > > -Search and Bind a user in LDAP by passing Group ID who can authorise any > specific user belongs to the group Look here for group-based authorizati

Re: [users@httpd] mod_authz_ldap - Authenticating users in Apache

2011-10-17 Thread Thomas Smith
I did this using a directive--you can put your LDAP auth stuff there and apply it to the top-level file system directory of your application. Users won't be able to bypass that. (I'm assuming that you're currently using a directive and that your entire application lives in a single directory

Re: [users@httpd] Configuration issue allowing unauthenticated access from 127.0.0.1 to a single directory within a password-protected directory structure

2011-10-12 Thread Thomas Smith
Thanks Mark! On Wed, Oct 5, 2011 at 5:01 PM, Mark Montague wrote: > On October 5, 2011 17:44 , Thomas Smith wrote: >> >> Can someone help me get my desired configuration to work? > > Maybe someone who is not me can :)  I'd be able to help you better if you >

[users@httpd] Fwd: Configuration issue allowing unauthenticated access from 127.0.0.1 to a single directory within a password-protected directory structure

2011-10-05 Thread Thomas Smith
alid-user > > >Order deny,allow >Deny from all >SetEnvIf Request_URI "^/(NoAuth|REST/1.0/NoAuth)(.*)$" allow > Allow from env=allow >Satisfy Any >Options +ExecCGI

[users@httpd] Configuration issue allowing unauthenticated access from 127.0.0.1 to a single directory within a password-protected directory structure

2011-10-05 Thread Thomas Smith
Hi, I'm configuring the Request Tracker to use Apache authentication. I've had RT running for quite a few years, but (up to this point) only using its internal database for authentication. Software: * CentOS 4.8 * Apache 2.0.63 * RT 4.0.2 * mod_fastcgi 2.4.6 I created a Directory directive for /

[users@httpd] Healthcheck of proxy config

2011-09-29 Thread congo thomas
Hello good people, This is a request for sanity check of a running config under Apache 2.0.52. I have this single vhost that was configured long ago. I recently was handed over the ownership of the config, and it struct me that it was a bit peculiarly, in the sense that i am not all sure if the Lo

[users@httpd] Proxy all but one location

2011-09-19 Thread congo thomas
t? (tomcat serves it aswell, but since its static content, i want to skip this layer due to heavy load; hence performance issues with the java tomcat serving it). br congo thomas - The official User-To-User support forum of the A

[users@httpd] limit access to certain query strings

2011-07-05 Thread congo thomas
erious safty gaps in such setup - if you dont feel the same, please make your approach explicit... br thomas - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.htm

Re: [users@httpd] mod_jk2 Shutting down

2011-04-11 Thread Thomas Freitag
gt; My apache instance crashes very often, we don't know the root cause, I > wonder if this is the problem. > Please advise how it can be fixed. I'd bet mod_jk2 is the reason, it is dead for some years. Regards, - -- Thomas Freitag -BEGIN PGP SIGNATURE- Version: Gn

Re: [users@httpd] Load balancer worker status

2011-04-11 Thread Thomas Freitag
he tomcat-users list (us...@tomcat.apache.org) is a better place to ask. Best regards, - -- Thomas Freitag -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.10 (GNU/Linux) iEYEARECAAYFAk2jRgsACgkQGE5pHr3PKuUUpwCfYCrSrLrYE2Gizkf8GKIsmWfZ 0T4

[users@httpd] Issue with rewrite rule on Apache behind F5 load balancer

2011-02-18 Thread Anders, Thomas (EXT)
at apache side to make this work? We unfortunatelly have no direct access to the F5 system and would like to achieve a solution on web server side. Regards, Thomas

Re: [us...@httpd] A question about log rotation (/etc/logrotation.d and /etc/logrotation.d/httpd)

2010-12-29 Thread Thomas Chang
:55, Thomas Chang wrote: > Hello all, > > By default the log rotate every week and add the running number after the > log file. Now I want to change this so that all the log files under > /var/log/httpd rotate every day and end with date with format ddmm. > > I change the /

[us...@httpd] A question about log rotation (/etc/logrotation.d and /etc/logrotation.d/httpd)

2010-12-28 Thread Thomas Chang
omeone help? Regards Thomas

RE: Re: [us...@httpd] Pack200 & Content Negotiation

2010-10-22 Thread Beer Dr. Thomas
let invocation: ... Kind regards, Thomas Von: Jess Holle [mailto:je...@ptc.com] Gesendet: Donnerstag, 21. Oktober 2010 19:20 An: users@httpd.apache.org Cc: Beer Dr. Thomas Betreff: Re: [us...@httpd] Pack200 & Content Negotiation Hmm I used to try to do something via Apache f

  1   2   3   >