Re: [users@httpd] ReverseProxy Exchange 2013

2014-02-17 Thread Thomas Eckert
> So i finally got apache2-devel installed... However, when running ./configure for mod_proxy_msrpc, i get an error due to the absence of ap_socache.h. It appears this file is included n apache 2.4. Now, will mod_proxy_msrpc only work in apache 2.4? If not, can i just get the ap_socache.h file

Re: [users@httpd] ReverseProxy Exchange 2013

2014-02-16 Thread Thomas Eckert
Chris, if you encounter any issues with mod_proxy_msrpc please report them at https://github.com/bombadil/mod_proxy_msrpc/issues. Note that OAB, OWA, Autodiscover, ActiveSync, etc. all use "normal" HTTP/S (and not MSRPC like OA) so they should work without mod_proxy_msrpc. There is an open issue wi

Re: [users@httpd] port redirecting mapping

2014-02-13 Thread Thomas Eckert
there any syntax error or something. Does this > rewrite part be inside <*VirtualHost *:3030*> ... <*/VirtualHost*> > > > > On Thu, Feb 13, 2014 at 3:16 PM, Thomas Eckert < > thomas.r.w.eck...@gmail.com> wrote: > >> I'm confused as to what your setup

Re: [users@httpd] port redirecting mapping

2014-02-13 Thread Thomas Eckert
request like this *http://domain_name <http://domain_name>* redirects > to *http://domain_name:3030 <http://domain_name:3030>* > > Also tries "Redirect" > *Redirect :3030 http://domain_name <http://domain_name>* > > rewrite_module is enabled. > > Is t

Re: [users@httpd] Re: reverse proxy choice to origin servers: https->https or https->http

2014-02-13 Thread Thomas Eckert
If you use httpd as reverse proxy then clients will perform SSL handshakes with your reverse proxy. In SSL there is no distinction between decrypting the HTTP headers only or decrypting the full HTTP request - it's simply "payload" and it will be decrypted as a whole. If you want to understand how

Re: [users@httpd] port redirecting mapping

2014-02-10 Thread Thomas Eckert
Assuming you have a working config for a server/vhost on domain_name:3030, then how about Redirect permanent / http://domain_name:3000/ ? See http://httpd.apache.org/docs/current/mod/mod_alias.html#redirect and friends. "Restricted" access is a bit vague but http://httpd.apache.org/docs/current/

Re: [users@httpd] Generating a gzip response from multiple pre-gzipped files on disk

2014-02-07 Thread Thomas Eckert
Can you post the headers, from sending the request(s) up to and including the response(s) ? I think you might be hitting the same spot as I recently did in (1). In short, most (if not all) popular clients do not unpack responses if they think they shouldn't even if the headers tell them to. So for

Re: [users@httpd] reverse proxy: connect to origin servers via http or https?

2014-02-07 Thread Thomas Eckert
> The question is: from the proxy performance/scalability point of view is it better to configure backends (origin servers) with http or with https? "Better" depends on what you want to achieve. Do you want to securely deliver simple html content with no fancy stuff ? Do you want to have authentic

[users@httpd] Using form based authentication sessions across locations

2014-01-20 Thread Thomas Eckert
Using form based auth, e.g. AuthName "forms_foo" AuthFormProvider my_provider AuthType form AuthFormLoginRequiredLocation "/foo_form" Session On SessionCookieName foo_cookie path=/foo/;httponly SessionCryptoPassphrase somereallyneatandnicepassphrase SessionCookieRe

Re: [users@httpd] #error mod_ssl requires OpenSSL 0.9.8a or later

2013-12-16 Thread Thomas Eckert
stall 2.4.x dev ? > > Regards, > Abdul > > On 12/16/2013 2:48 PM, Thomas Eckert wrote: > > Did you make sure to have the -dev package(s) installed ? > > > On Mon, Dec 16, 2013 at 10:10 AM, Abdul Anshad wrote: > >> I have made sure that the --with-ssl point

Re: [users@httpd] #error mod_ssl requires OpenSSL 0.9.8a or later

2013-12-16 Thread Thomas Eckert
Did you make sure to have the -dev package(s) installed ? On Mon, Dec 16, 2013 at 10:10 AM, Abdul Anshad wrote: > I have made sure that the --with-ssl points to the 1.0.1e, FYI i also > have another system binary installed which is openssl-0.9.7d. > > I have included the source of apr and apr-

Re: [users@httpd] Automatic OWA Form Based Authentication thru reverse proxy

2013-12-05 Thread Thomas Eckert
I've tried something simliar but didn't get it working. I would be interested in how your attempts on automatic-form-filling-in worked out - and if they did also in the "how" ;-) On Thu, Nov 28, 2013 at 11:48 AM, iridium1191 wrote: > Hi Apache users, > > I'm running Apache 2.2.22 on Ubuntu ser

[users@httpd] Re: unsetting encrypted cookies when encryption key changes

2013-11-18 Thread Thomas Eckert
Ideas, anyone ? On Mon, Nov 11, 2013 at 5:26 PM, Thomas Eckert wrote: > Trying to figure out how to unset encrypted cookies for which the > encryption key was changed. Docs at > > http://httpd.apache.org/docs/current/mod/mod_session_crypto.html > > say > > "If

[users@httpd] mod_auth_form and proper redirection after login

2013-11-14 Thread Thomas Eckert
Using mod_auth_form, when a user tries to access a URL and is 'interrupted' by the form based login, how do I pass on the original URL to the form html or to the AuthFormLoginSuccessLocation directive, so I can redirect the client - upon successful login - to the URL where she wanted to go to. At

[users@httpd] unsetting encrypted cookies when encryption key changes

2013-11-11 Thread Thomas Eckert
Trying to figure out how to unset encrypted cookies for which the encryption key was changed. Docs at http://httpd.apache.org/docs/current/mod/mod_session_crypto.html say "If the encryption key is changed, sessions will be invalidated automatically." but using a config like AuthName

Re: [users@httpd] Reverse Proxy Questions

2013-10-18 Thread Thomas Eckert
Try setting the proxy-initial-not-pooled flag with mod_proxy_http, see http://httpd.apache.org/docs/current/mod/mod_proxy_http.html Apache 2.4 has an issue with the HTTP keep-alive time out which happens quite frequently with ActiveSync. There is an ongoing discussion ("mod_proxy, oooled backend c

[users@httpd] Question regarding ProxyPass and "!"

2013-09-26 Thread Thomas Eckert
Using a config like this BalancerMember http://backend.example.local status=-SE ServerName frontend.example.local SSLProxyEngine On RequestHeader set X-Forwarded-Proto http ProxyPass ! ProxyPassReverse !

[users@httpd] 302 endless loop with mod_auth_form config

2013-07-29 Thread Thomas Eckert
I'm looking for the erorr in this config : KeepAlive OnServerName server1.domain1.localServerAdmin me@domain1.localListen 10.10.10.10:80 http BalancerMember http://server1.domain2.local status=-SE ServerName secured.domain1.local SSLProxyEngine On RequestHeader set

Re: [users@httpd] Mod_proxy Slow After a Week

2013-06-26 Thread Thomas Eckert
This is interesting. I'm seeing similar events at one of my reverse proxy. After fixing a DNS infrastructure problem I started seeing lots of 304s with processing times well above 5 seconds. For header-only requests that's a lot of time. If there is any news here please let us know. At the very lea

[users@httpd] Reverse proxying and specific output filter chain manipulation

2013-06-13 Thread Thomas Eckert
In a simple reverse proxy setup, such as BalancerMember http://mydomain.org status=-SE ServerName secure.mydomain.local SSLProxyEngine On RequestHeader set X-Forwarded-Proto http ProxyPass balancer://cd107d9706d71153bafd4ab15f1c6b5d/ lbme

[users@httpd] SSL, SNI and SSLStrictSNIVHostCheck

2013-01-04 Thread Thomas Eckert
Is the directive SSLStrictSNIVHostCheck On meant to block connections to a virtual host if the connecting client uses an IP literal as URL ? RFC 6066 states that Literal IPv4 and IPv6 addresses are not permitted in "HostName". since a SNI doesn't make sense at all for an IP literal and

Re: [users@httpd] mod_proxy_html, HTML rewrite and content compression

2013-01-04 Thread Thomas Eckert
On 11/16/2012 05:12 PM, Nick Kew wrote: On Fri, 16 Nov 2012 11:31:38 +0100 Thomas Eckert wrote: Thanks for the hint but unfortunately "manually" adding xml2enc to the filtering chain does not help. Looks like you've got problems over and above anything to do with you

Re: [users@httpd] mod_proxy_html, HTML rewrite and content compression

2012-11-16 Thread Thomas Eckert
On 11/14/2012 06:12 PM, Nick Kew wrote: On 14 Nov 2012, at 15:53, Thomas Eckert wrote: Is there a way to work around this ? I do want the call to mod_xml2enc to happen but I also want the reverse proxy to support content compression. That's a lot of correct analysis. The output chai

[users@httpd] mod_proxy_html, HTML rewrite and content compression

2012-11-14 Thread Thomas Eckert
Hi folks I'm using apache (2.4.3) as reverse proxy with mod_proxy_html (as delivered with 2.4.3) and encountered an issue using HTML rewriting in combination with content compression, as with the "Accept-Encoding" and "Content-Encoding" HTTP headers. This issue has been encountered by numero