Re: [users@httpd] ProxyPass ordering

2017-10-23 Thread Victor Engle
l-path, so using location to define proxypass adds unneeded > complexity. > > 2017-10-04 16:07 GMT+02:00 Eric Covener : > > My recollection is that the ordering is NOT handled similarly when in > > Location. Each directive will replace the last. > > > > On Wed, Oct 4,

[users@httpd] ProxyPass ordering

2017-10-04 Thread Victor Engle
I have a site where multiple locations are mapped to different Proxy balancers named balancer1, balancer2, balancer3 etc. One of the locations mapped is root, "/", and according to the documentation, if that ProxyPass mapping comes last in the config, it should work as expected. Instead, with Apach

[users@httpd] Authorization using group files

2017-02-17 Thread Victor Engle
I have an apache server and I want to allow users in group1 to access /. Then I want to restrict users further for location /test using group2. What I find is that if I authorize "/" for users in group1 I cannot restrict those users from "/test" even when they are left out of group2. I've tried u

[users@httpd] Personalized message

2015-09-10 Thread Sterpu Victor
I have a virtual host defined with "SSLVerifyClient require" and when the client does not presents a certificate the browser displays a message like this: "An error occurred during a connection to card.casnt.ro:444. SSL peer was unable to negotiate an acceptable set of security parameters. (Error

Re[2]: [users@httpd] SSL - How client certificates are verified?

2015-08-26 Thread Sterpu Victor
g all necessary intermediate certificates to your server will help? -- With Best Regards, Marat Khalili On 26/08/15 09:31, Sterpu Victor wrote: I installed apache 2.4.16 and I have activated SSLOCSPEnable on a virtual domain but the page is not loading at all with OCSPEnabled(without OCSP is working). Th

Re[2]: [users@httpd] SSL - How client certificates are verified?

2015-08-25 Thread Sterpu Victor
e verified? In this case, could you please post the results when you get the SSLOCSPEnable fixed? I'm particularly interested in performance. -- With Best Regards, Marat Khalili On 23/08/2015 19:57, Sterpu Victor wrote: There are 4 CAs, at least 1 uses OCSP(only 1 I called). I hope all of t

Re[2]: [users@httpd] SSL - How client certificates are verified?

2015-08-23 Thread Sterpu Victor
;m particularly interested in performance. -- With Best Regards, Marat Khalili On 23/08/2015 19:57, Sterpu Victor wrote: There are 4 CAs, at least 1 uses OCSP(only 1 I called). I hope all of them use OCSP, I don't know the legislation but it seems normal to be required by law. -- Original Message

Re[2]: [users@httpd] SSL - How client certificates are verified?

2015-08-23 Thread Sterpu Victor
th Best Regards, Marat Khalili On 23/08/2015 19:41, Sterpu Victor wrote: All clients already have PKCS11 tokens. It would be too complicated for them to get used with something else. -- Original Message -- From: "Marat Khalili" To: users@httpd.apache.org Sent: 8/23/2015 7:34:

Re[2]: [users@httpd] SSL - How client certificates are verified?

2015-08-23 Thread Sterpu Victor
ke them by yourself too if needed. -- With Best Regards, Marat Khalili On 23/08/2015 18:56, Sterpu Victor wrote: I want to make a page that will authenticate only with PKCS11 tokens. These tokens contain only certificates from a recognized authority. OCSP would be usefull if the token has been dec

Re[2]: [users@httpd] SSL - How client certificates are verified?

2015-08-23 Thread Sterpu Victor
gards, Marat Khalili On 23/08/2015 09:51, Sterpu Victor wrote: Hello I have a web page that asks for client certificate. These are the options for this: SSLVerifyClient require SSLVerifyDepth 10 How does SSLVerifyClient verifies the client certificate? This option protects against certificate

Re[2]: [users@httpd] SSL - How client certificates are verified?

2015-08-23 Thread Sterpu Victor
gards, Marat Khalili On 23/08/2015 09:51, Sterpu Victor wrote: Hello I have a web page that asks for client certificate. These are the options for this: SSLVerifyClient require SSLVerifyDepth 10 How does SSLVerifyClient verifies the client certificate? This option protects against certificate

Re[2]: [users@httpd] SSL - How client certificates are verified?

2015-08-23 Thread Sterpu Victor
re of the CA Is this right? Does this check includes OCSP verification? If not can this be done from apache? Thank you. -- Original Message -- From: "Mohanavelu Subramanian" To: users@httpd.apache.org; "Sterpu Victor" Sent: 8/23/2015 10:19:13 AM Subject: Re: [user

[users@httpd] SSL - How client certificates are verified?

2015-08-22 Thread Sterpu Victor
Hello I have a web page that asks for client certificate. These are the options for this: SSLVerifyClient require SSLVerifyDepth 10 How does SSLVerifyClient verifies the client certificate? This option protects against certificates manual made with a fake public-private key pair? So can someoa

Re: [users@httpd] Security question

2015-07-02 Thread Victor Sterpu
s wrong. There is no gravity. The Earth sucks. ---- *Von:* Victor Sterpu [vic...@casnt.ro] *Gesendet:* Donnerstag, 2. Juli 2015 14:29 *An:* users@httpd.apache.org *Betreff:* **SPAM?** Re: [users@httpd] Security question [wd-vc] In th

Re: [users@httpd] Security question

2015-07-02 Thread Victor Sterpu
On 02.07.2015 17:55, Kurtis Rader wrote: On Thu, Jul 2, 2015 at 5:00 AM, Victor Sterpu <mailto:vic...@casnt.ro>> wrote: A hacker attacked a apache2 web server by HTTP injection. The log show what he has done: 62.1.212.154 - - [01/Jul/2015:17:02:06 +0300] "GE

Re: [users@httpd] Security question

2015-07-02 Thread Victor Sterpu
Yes. On 02.07.2015 21:16, David Grant wrote: Cgi module in php? Sent from my iPad On Jul 2, 2015, at 5:00 AM, Victor Sterpu wrote: Hello A hacker attacked a apache2 web server by HTTP injection. The log show what he has done: 62.1.212.154 - - [01/Jul/2015:17:02:06 +0300] "GET /ph

Re: [users@httpd] Security question

2015-07-02 Thread Victor Sterpu
specific configuration. By the fact that apache returned a 404 (the log line says so), you can see that attempt was not successful. - Y Sent from a gizmo with a very small keyboard and hyperactive autocorrect. On Jul 2, 2015 8:00 AM, "Victor Sterpu" <mailto:vic...@casnt.ro&

[users@httpd] Security question

2015-07-02 Thread Victor Sterpu
Hello A hacker attacked a apache2 web server by HTTP injection. The log show what he has done: 62.1.212.154 - - [01/Jul/2015:17:02:06 +0300] "GET /phppath/cgi_wrapper HTTP/1.1" 404 280 "-" "() { :;};/usr/bin/perl -e 'print \"Content-Type: text/plain\\r\\n\\r\\nXSUCCESS!\";system(\"cd /var/tmp/

Re: [users@httpd] StartSSL (not self-signed) cert but says "The certificate is not trusted because it is self-signed"

2015-04-06 Thread Victor Porton
On Mon, 2015-04-06 at 21:32 +0200, Sebastian Pipping wrote: > On 06.04.2015 21:07, Victor Porton wrote: > > I've verified my cert for a domain (withoutvowels.org) not for an IP. So > > I wonder where "d1stkfactory" got from. > > Have you tried > >

Re: [users@httpd] StartSSL (not self-signed) cert but says "The certificate is not trusted because it is self-signed"

2015-04-06 Thread Victor Porton
On Mon, 2015-04-06 at 20:31 +0200, Sebastian Pipping wrote: > On 06.04.2015 19:24, Victor Porton wrote: > > I've tried to set SSL for one site at my Debian Linux wheezy server > > (which serves multiple domains). > > > > I've prepared StartSSL keys and c

[users@httpd] StartSSL (not self-signed) cert but says "The certificate is not trusted because it is self-signed"

2015-04-06 Thread Victor Porton
withoutvowels.org Redirect permanent / https://withoutvowels.org/ -- Victor Porton - http://portonvictor.org

Re: [users@httpd] Re: Support for http/2 in Apache HTTPD?

2015-02-23 Thread Victor Williams
That module is only meant for the 2.2 branch. There is no official (or otherwise) support for the 2.4 branch (that I know of). On 2015-02-23 19:36, Eric Covener wrote: > On Mon, Feb 23, 2015 at 7:39 PM, curtis wrote: > >> A little research found that apache supports http/2 via the mod_spdy

[users@httpd] Help with authentication config -- need *optional* non-dialog configuration

2013-01-14 Thread Victor Danilchenko
Hi all, I am trying to set up mod_auth_kerberos on my server, and it's working fine in itself, but what I would like to do is make kerberos authentication optional; i.e. if a user has a kerberos ticket, they get authenticated, get the REMOTE_USERNAME and stuff -- but if the user does

RE: [us...@httpd] SetEnv HTTPS on... not working. (UNCLASSIFIED)

2010-12-13 Thread Victor, Dwight P CTR DISA PAC
Classification: UNCLASSIFIED Caveats: NONE Does this http://httpd.apache.org/docs/2.0/ssl/ssl_faq.html#relative work for you? --- Dwight Victor (Contractor), CISSP, RHCT, SCSECA DISA-PAC EMSS Gateway Hawaii EMAIL: dwight.victor@disa.mil TEL: (808) 653-3677 ext 229 -Original

RE: [us...@httpd] SSLFIPS Directive (UNCLASSIFIED)

2010-11-11 Thread Victor, Dwight P CTR DISA PAC
Classification: UNCLASSIFIED Caveats: NONE Related? http://rt.openssl.org/Ticket/Display.html?id=1278&user=guest&pass=guest --- Dwight Victor (Contractor), CISSP, RHCT, SCSECA DISA-PAC EMSS Gateway Hawaii EMAIL: dwight.victor@disa.mil TEL: (808) 653-3677 ext 229 -Original

RE: [us...@httpd] apache2.2 + ssl (UNCLASSIFIED)

2010-04-12 Thread Victor, Dwight P CTR DISA PAC
have apache listening on ssl port (443 by default) in your config -- do a netstat to confirm. --- Dwight Victor (Contractor), CISSP, RHCT, SCSECA DISA-PAC EMSS Gateway Hawaii EMAIL: dwight.victor@disa.mil TEL: (808) 653-3677 ext 229 -Original Message- From: motty.cruz [mailto:mo

Re: [us...@httpd] Word boundaries in regexps (Apache bug?)

2009-09-15 Thread Victor Porton
On Tue, 2009-09-15 at 15:05 +0200, Torsten Foertsch wrote: > On Tue 15 Sep 2009, Victor Porton wrote: > > > > > > > After this change the test 2 passes, but it does not pass if I enter > > http://localhost/test2.shtml?city=2 > > Perhaps you have to outwit

Re: [us...@httpd] Word boundaries in regexps (Apache bug?)

2009-09-15 Thread Victor Porton
On Tue, 2009-09-15 at 13:29 +0200, André Warnier wrote: > Tom Evans wrote: > > On Tue, 2009-09-15 at 12:52 +0200, André Warnier wrote: > >> Victor Porton wrote: > >> ... > >>> > >> I am not sure which add-on module of Apache, and which version yo

[us...@httpd] Word boundaries in regexps (Apache bug?)

2009-09-15 Thread Victor Porton
of Apache? How I specify word boundaries in regexps? -- Victor Porton - http://portonvictor.org - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more inf

[us...@httpd] How to set prefer-language from a URL parameter without cookies?

2009-08-18 Thread Victor Engmark
ie if it exists SetEnvIf Cookie "language=(.+)" prefer-language=$1 -- Victor Engmark - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To

Re: [EMAIL PROTECTED] Apache Log File 2GB

2008-06-03 Thread Victor Trac
nk you > Andre > > What is the advantage of having larger log files? Why not rotate daily? You don't want to rotate once it reaches 2GB. You should be doing it way before then. Large log files are harder to search through and make sense of. --Victor -- http://www.victortrac.com

Re: [EMAIL PROTECTED] Is Apache2.2 FIPS compliant?

2008-01-12 Thread Victor Trac
ou use a certified version of OpenSSL in Apache, I suppose you are compliant. --Victor -- http://www.victortrac.com - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.h

Re: [EMAIL PROTECTED] Virtual Hosts

2007-12-30 Thread Victor Trac
On Dec 30, 2007 6:18 PM, Joe <[EMAIL PROTECTED]> wrote: > On 17:52 Sun 30 Dec , Victor Trac wrote: > > On Dec 30, 2007 4:53 PM, Joe <[EMAIL PROTECTED]> wrote: > > > I used to be able to do this in 1.3 but now using 2.2 I can't get it to > > > work

Re: [EMAIL PROTECTED] Virtual Hosts

2007-12-30 Thread Victor Trac
On Dec 30, 2007 4:53 PM, Joe <[EMAIL PROTECTED]> wrote: > I used to be able to do this in 1.3 but now using 2.2 I can't get it to > work. Running on a Debian server in /etc/apache2/apache2.conf I have > (where nnn.nnn.nnn.nnn = my IP address) > > NameVirtualHost nnn.nnn.nnn.nnn > Listen nnn.nnn.nnn

Re: [EMAIL PROTECTED] outdated material on apache web-site

2007-12-22 Thread Victor Trac
On Dec 23, 2007 12:32 AM, Joshua Slive <[EMAIL PROTECTED]> wrote: > > On Dec 22, 2007 6:11 PM, Victor Trac <[EMAIL PROTECTED]> wrote: > > On Dec 22, 2007 10:55 PM, Joshua Slive <[EMAIL PROTECTED]> wrote: > > > > > On Dec 22, 2007 2:27 PM, Dan Mahone

Re: [EMAIL PROTECTED] outdated material on apache web-site

2007-12-22 Thread Victor Trac
ll. Just because it "shouldn't cause any problems" doesn't mean it shouldn't be fixed. The page should be fixed or deleted. --Victor -- http://www.victortrac.com

[EMAIL PROTECTED] apache 2.0.61 and mod_auth_xradius 0.4.6

2007-12-11 Thread Victor Sterpu
I use the folowing configuration: AuthType basic AuthName "Ambra-SectiunePrivata" AuthXRadiusAddServer 192.168.250.99:1900 secret AuthXRadiusTimeout 2 AuthXRadiusRetries 1 require valid-user AddHandler cgi-script .cgi Options +ExecCGI Allow from all The radius authentication is made succesfuly

Re: [EMAIL PROTECTED] Redirecting to internal server

2007-11-28 Thread Victor Trac
On Nov 28, 2007 12:28 PM, Paul Cocker <[EMAIL PROTECTED]> wrote: > Thanks, you're right, not only was it the wrong block it was the wrong > config file. I forgot that when we upgraded Apache we used the new > config locations but didn't delete the old configs "just in case". > > The proxy element

Re: [EMAIL PROTECTED] Setting up Django and PHP with Apache

2007-11-27 Thread Victor Trac
On Nov 28, 2007 1:52 AM, Matt Magin <[EMAIL PROTECTED]> wrote: > Hi there. > > I'm trying to set up Apache so that Django and PHP5 will work together. I > want it so that Django is set up to control everything in the document root, > with PHP5 enabled for specific directories. I can get both to wo

Re: [EMAIL PROTECTED] Redirecting to internal server

2007-11-24 Thread Victor Trac
ost directive: ProxyRequests off ProxyPass /folder2 http://192.168.1.100 ProxyPassReverse /folder2 http://192.168.1.100 With this, anytime someone visits your externally accessible site at http://www.domain.co.uk/folder2, they'll see the html output by your windows server at http://192.168.1.100 and your internal IIS host is never directly accessible from the internet. cheers, Victor -- http://www.victortrac.com

Re: [EMAIL PROTECTED] vhosts

2007-09-13 Thread Victor Trac
On 9/13/07, Chris Ackford <[EMAIL PROTECTED]> wrote: > > okay ive tryed myself but i cant get it to work ... i would like > *.domain.com to go to the retropective folder i cant work out how :/ thanks > for your help :) > > > chris > http://www.google.com/se

Re: [EMAIL PROTECTED] Apache on Windows - PHP Failure - NO Restart

2007-08-14 Thread Victor Trac
irst place, so you would not need to worry about being able to gracefully recover. Hope that helps. --Victor On 8/14/07, Stephen Johnston <[EMAIL PROTECTED]> wrote: > > Victor, > > Just to be clear. Are you saying they all end up crashing Apache, or > causing Aache not to

Re: [EMAIL PROTECTED] Apache on Windows - PHP Failure - NO Restart

2007-08-13 Thread Victor Trac
de caching (eaccelerator, APC, etc) all end up doing this after a little load. The only long term "fix" I know of is to run php using fastcgi. However, another solution is to have a script monitor the apache error logs for the segmentation faults, at which point it restarts apache comple

Re: [EMAIL PROTECTED] Redirect Permanent Help

2007-08-13 Thread Victor Trac
sites. Hope that helps. --Victor On 8/13/07, Nathan <[EMAIL PROTECTED]> wrote: > > We need to 301 redirect all traffic bound for www.foo.com to foo.com. > > foo.com is set up as an IP based resource and www.foo.com is not > mentioned in vhosts. > > both www.foo.com an

Re: [EMAIL PROTECTED] Apache server service within a knoppix VMWare appliance?

2007-08-12 Thread Victor Trac
On 8/12/07, Kathi Porter <[EMAIL PROTECTED]> wrote: > > Hi; > I'm a brand-spanking new "newbie when it comes to Apache web server. I'll > be atking a class next spring, but wanted to install it and "play" with it a > bit before then. > I'm running a knoppix (linux/X Windows GUI) virtual appliance w

Re: [EMAIL PROTECTED] im stuck, plz help...

2007-08-06 Thread Victor Trac
ubscribe, e-mail: [EMAIL PROTECTED] > " from the digest: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] > > 192.168.x.x is safe because it is considered a private range and is not routable across the internet. So 192.168.1.1 is fine to use as long as no other computer on your local LAN is using that IP. However, before apache can use it, your OS has to actually be listening to that address in the first place. You can go to window's tcp/ip advanced settings and add that address as a secondary IP and Apache should be able to use it. However, it sounds like you've got an internal network already since you're using a gateway. Drop to a dos box and type "ipconfig /all" and look to see what your box's internal IP is. Use that and you should have the same results as 127.0.0.1. Don't even try to host a site on a dialup, dynamic IP. You're just wasting your time. --Victor -- http://www.victortrac.com

Re: [EMAIL PROTECTED] apache freezes after an hour

2007-08-06 Thread Victor Trac
On 8/6/07, Grzegorz J. Jankowski <[EMAIL PROTECTED]> wrote: > > Hi, > > I have a very strange problem and I cannot even determine the reason. > > First configuration: virgin instalation of Debian Etch with: > > -Apache 1.3.34 with modules: mod_so, mod_macro, config_log_module, > mime_magic_modul

Re: [EMAIL PROTECTED] Apache22 + PHP5 not execute

2007-07-31 Thread Victor Trac
hich should theoretically work, but I imagine is causing unnecessary load on Apache. --Victor On 7/31/07, Squirrel <[EMAIL PROTECTED]> wrote: > > Upgraded FreeBSD v6.1-RELEASE to v6.2-STABLE, with Apache-2.2.4_2 and > PHP5-5.2.3_1 ports. But cannot get the php to execute. I

Re: [EMAIL PROTECTED] The Apache user

2007-07-25 Thread Victor Trac
There's no need to send out two emails to the wrong mailing list asking the same thing. While one of us may know the answer, it's more likely that you'll get a positive response when asking xfce folks. Perhaps one of these lists will help: http://www.xfce.org/community/lists --

Re: [EMAIL PROTECTED] Last Modified date of a document

2007-07-23 Thread Victor Trac
You'll need something a http version, e.g.: GET http://192.168.0.1/ HTTP/1.0 --Victor On 7/23/07, Kaushal Shriyan <[EMAIL PROTECTED]> wrote: Thanks Owen Boyle How do i run the GET or HEAD command is it telnet 192.168.0.1 80 GET http://192.168.0.1/ Correct me if I am wrong

Re: [EMAIL PROTECTED] Ask for suggestions - 25000 visitors

2007-06-27 Thread Victor Trac
traffic PER SECOND. I moved at least 100gbs of traffic in 48 hours. All of this was on a tuned dual-processor Opteron 246 with 2 gbs of RAM. So yeah, 25k visitors/week is nothing and can be handled easily by any modern hardware. --Victor On 6/27/07, Nick Kew <[EMAIL PROTECTED]> wrote: On W

Re: [EMAIL PROTECTED] Global Vhost/Redirect

2007-05-18 Thread Victor Trac
In your catchall vhost (first one), just have a: Redirect permanent / http://main.uri.com --Victor On 5/18/07, Scott Wilcox <[EMAIL PROTECTED]> wrote: hey folks. I have various virtual hosts set up on apache, and currently, the first handles all unreferenced domains. I'm

Re: [EMAIL PROTECTED] Unwanted URL rewriting - apache replaces server name with ip in address bar

2007-05-07 Thread Victor Trac
don't need the NameVirtualHost line, nor do you need the ServerAlias 1.2.3.4 line if you are only hosting on site on 1.2.3.4. --Victor On 5/6/07, akhayyami <[EMAIL PROTECTED]> wrote: I have a problem with one of my servers; When I enter http://www.myserver.com in address bar (IE &a

Re: [EMAIL PROTECTED] Apache2 and SSL support

2007-05-04 Thread Victor Trac
Don, If you want help, you're going to have to provide details. You are doing something wrong, and we don't know what it is unless you provide at least your configuration file. "How can I fix this" is not a valid question because we don't know what the problem is. --V

Re: [EMAIL PROTECTED] Virtual Host

2007-05-01 Thread Victor Trac
helps. --Victor On 5/1/07, j k <[EMAIL PROTECTED]> wrote: Maybe you need a different doc root for each site else it will end serving from the same doc root for all sites On 4/27/07, Alejandro Decchi < [EMAIL PROTECTED]> wrote: > > > > Here in this file i i

Re: [EMAIL PROTECTED] How to install Apache without a root account?

2007-04-27 Thread Victor Trac
Also be sure to configure your vhosts to listen to a port > 1024 if you aren't running as root. --Victor On 4/27/07, Ashutosh Mohanty <[EMAIL PROTECTED]> wrote: > $ /home/hwg300/apache/bin/apachectl start > fopen: No such file or directory > httpd: could not open docu

Re: [EMAIL PROTECTED] Service Unavailable - Zero size object

2007-04-27 Thread Victor Trac
It is possible that your PHP scripts are running out of memory. Try increasing memory_limit in your apache's php.ini. --Victor Trac On 4/24/07, thomas Armstrong <[EMAIL PROTECTED]> wrote: Hi. Using Apache 2.0.52 + PHP 4.3.10 on Linux (Fedora Core 2), I get this error message wh

Re: [EMAIL PROTECTED] Alias directive not being honored

2007-04-26 Thread Victor Trac
This may be a long shot, but have you tried getting rid of the trailing slashes? e.g.: Alias /news /path/to/codebase/newsletters --Victor On 4/26/07, Nikolai Lusan <[EMAIL PROTECTED]> wrote: Greetings, Not sure if anyone has seen anything similar to this one ... I have a number of

[EMAIL PROTECTED] mod_mem_cache sends back HTTP 304 incorrectly?

2006-12-09 Thread Victor Ng
Hi all, I'm having a problem with mod_mem_cache in Apache 2.0.58 where Apache is sending back HTTP 304 incorrectly. This seems to happen intermittently, about 1/8 requests if I hammer away on my server. Here's my trace from wget - as you can see, there's no If--Modified-Since or Etag header in

Re: [EMAIL PROTECTED] http://194.16.84.195 is running on my own Apache 2.2 on my own machine...

2006-09-26 Thread Victor Trac
Try everydns.net.. it's free and pretty good. -Victor On 9/23/06, Dan Ostberg <[EMAIL PROTECTED]> wrote: Next project is to link a .com domain to the static IP 194.16.84.195 (which is mine). Do I have to go to an ISP to get hold of a DNS or can I set up

Re[3]: [EMAIL PROTECTED] Corrupted source files

2006-09-25 Thread Victor Star
Hi Victor, > I'm in the process of upgrading to 6.1 right now. Will see if it changes > anything. > If not I guess I'll post it in freebsd forum and we'll see if we can dig > something out. > Thanks again for your help! I don't know what it was, but

Re[2]: [EMAIL PROTECTED] Corrupted source files

2006-09-25 Thread Victor Star
as. I'm in the process of upgrading to 6.1 right now. Will see if it changes anything. If not I guess I'll post it in freebsd forum and we'll see if we can dig something out. Thanks again for your help! Best regards,

Re: [EMAIL PROTECTED] Corrupted source files

2006-09-24 Thread Victor Star
uld it be with my FreeBSD installation to cause such a mess? Until now I didn't notice any problems with any other applications. I have FreeBSD 6.0 here. Not sure if 6.1 would make a difference... BTW did I mention I really appreciate your help? Thanks a lot! People like you ar

Re: [EMAIL PROTECTED] Corrupted source files

2006-09-24 Thread Victor Star
= 0 read(3, 0xbfbfeb53, 1) = -1 EAGAIN (Resource temporarily unavailable) accept(4, - 8< -=== -- Best regards, Victor - Th

Re: [EMAIL PROTECTED] Corrupted source files

2006-09-24 Thread Victor Star
ll([{fd=1764696148, events=POLLPRI|POLLOUT|POLLRDNORM|POLLERR|POLLNVAL|0x6400, revents=POLLIN|POLLOUT|POLLRDNORM|POLLNVAL|0x7800}], 1, 2000) = 0 close(16) = 0 read(5, 0xbfbfeb53, 1) = -1

Re: [EMAIL PROTECTED] Corrupted source files

2006-09-24 Thread Victor Star
Hi Joshua, > On 9/24/06, Victor Star <[EMAIL PROTECTED]> wrote: >> write(7, "[EMAIL PROTECTED]"..., 156) = 156 >> writev(16, [{NULL, 135209656}, >> {"@*\26\10\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\1\0\0\0LoadMo"..., 135211888}], >> 2) = 463 &

Re: [EMAIL PROTECTED] Corrupted source files

2006-09-24 Thread Victor Star
nts=0}], 1, 2000) = 1 42061 read(16, "", 512) = 0 42061 close(16) = 0 42061 read(5, 0xbfbfeb53, 1)= -1 EAGAIN (Resource temporarily unavailable) 42061 accept(3, - 8< -=== -- Best regards, Victor -

Re: [EMAIL PROTECTED] Corrupted source files

2006-09-24 Thread Victor Star
porarily unavailable) accept(3, {sa_family=AF_INET6, sin6_port=htons(1583), inet_pton(AF_INET6, ":::10.10.10.10", &sin6_addr), sin6_flowinfo=0, sin6_scope_id=0}, [28]) = 16 - 8< -=== Here's I'm requesting index2.html (which is getting corrupted). Also browser

Re: [EMAIL PROTECTED] Corrupted source files

2006-09-24 Thread Victor Star
t user to see if the setgid > is really the problem. I've tried strace -u www httpd -X but the result is exactly the same as above. As far as I know Apache needs to start as root to begin listening http ports and switches to www user later for securinty reasons. And yes, I'm star

Re: [EMAIL PROTECTED] Corrupted source files

2006-09-24 Thread Victor Star
've also tried strace-ing httpd itself, no difference. It does serve pages, it doesn't show anything. I suspect this might be due to httpd falling down to user and group "www" (last lines hint to that) and it can't be traced thereafte

Re: [EMAIL PROTECTED] Corrupted source files

2006-09-24 Thread Victor Star
file in there without changing any config. And it breaks. I started working from the working file and what I found is that it's the file size that matters. Any file over 512 bytes breaks. 512 bytes and under - work fine. Totally confused. -- Best regards, Victor ---

[EMAIL PROTECTED] Corrupted source files

2006-09-23 Thread Victor Star
served by php_mod) - everything is fine, nothing gets corrupted. I would greatly appreciate any hints on where to look for a fix. Thanks! -- Best regards, Victor - The official User-To-User support forum of the Apache HTTP Ser

Re: [EMAIL PROTECTED] Is this normal?

2006-07-27 Thread Victor Trac
Perhaps if you post the actual logs we can have more insight. -Victor On 7/27/06, Keith A <[EMAIL PROTECTED]> wrote: I am new to this site and have been reading through all the information presented here, but my search didn't answer my question. I run my site on an apache server and

Re: [EMAIL PROTECTED] FW: Apache Permission Error

2006-05-23 Thread Victor Trac
Instead of telling us your configuration is correct (which it obviously isn't) perhaps it would be easier for us to help if you post the actual configuration. I'd look at NameVirtualHost and all directives. -Victor On 5/23/06, Ming Tang <[EMAIL PROTECTED]> wrote: Hi there, I

Re: [EMAIL PROTECTED] Indexes Option in Virtual Host

2006-05-20 Thread Victor Trac
I take it the fedora test page and default host is in /var/www/html, which means that this VirtualHost is not being read by Apache. Are you trying to listen to multiple IPs? Make sure you have a NameVirtualHost 10.1.1.103 directive before this container. -Victor On 5/20/06, Clodoaldo Pinto

Re: [EMAIL PROTECTED] port 80 and port 8080

2006-05-18 Thread Victor Trac
DocumentRoot /www/otherdomain-8080 Modify your httpd.conf and restart apache. -Victor On 5/18/06, Ana Lucía Zapata Barros <[EMAIL PROTECTED]> wrote: It's possible for apache have 2 different ports, 80 and 8080, for the same service?? I modify the httpd.conf file, and add Li

Re: [EMAIL PROTECTED] Keeping multiple logs in central location

2006-05-18 Thread Victor Trac
I run a very similar setup with 4 webservers.  I have a cron that rsyncs the logs over from each of the 4 servers to a central server, then runs logresolvemerg.pl against them and makes one big log file, which is then fed into AWStats.  Works well enough. -VictorOn 5/18/06, Krist van Besien <[EMAIL

Re: [EMAIL PROTECTED] Hosting off of Shared Storage

2006-05-16 Thread Victor Trac
I run NFS server with 4 connected apache servers without any problems.  Just make sure to run all logging locally.-VictorOn 5/15/06, Dan Trainor <[EMAIL PROTECTED]> wrote:Hello, all -I was wanting to see if I could get some feedback in regards to hosting with Apache off of shared storage.I have a

Re: [EMAIL PROTECTED] Access to Webpage

2006-05-12 Thread Victor Trac
By doing this with apache you are limiting access by source IP and not by actual user accounts.  A prohibited user could gain access from an allowed IP address.  I understood the problem to mean that he wanted to restrict certain users from anywhere on the internet. -VictorOn 5/12/06, Boyle Owen <[

Re: [EMAIL PROTECTED] Access to Webpage

2006-05-12 Thread Victor Trac
This is a mail server/webmail client problem and not an apache problem.  On 5/12/06, Ranjith Kumar <[EMAIL PROTECTED] > wrote:Hi,   I have a mail server running postfix, and using squirrel mail for webaccess. Its running based on apache. I have two ip addresses on the system, one is public and ano

Re: [EMAIL PROTECTED] help interpreting error msg

2006-05-08 Thread Victor Trac
Make sure you have "Listen 443" and a " ... " somewhere in your httpd.conf. -Victor On 5/5/06, Savage, Robert CTR USTRANSCOM J6 <[EMAIL PROTECTED]> wrote: Victor, Good question. The permissions *looked* OK. I went ahead and added "Authenticated Users" to th

Re: [EMAIL PROTECTED] Session Count Question From a Newbie

2006-05-05 Thread Victor Trac
May not be exactly what you're looking for, but try: http://www.webta.org/projects/apachetop/ -Victor On 5/5/06, Stuart, Ed <[EMAIL PROTECTED]> wrote: Hello all; I new to the administration of an Apache web server and am looking for a way to see how many clients are connected

Re: [EMAIL PROTECTED] help interpreting error msg

2006-05-05 Thread Victor Trac
I've never tried using Apache on Windows, but it sounds like it may be a permissions error. Have you checked to see if the apache process has the proper permissions to read that file? -Victor On 5/4/06, Savage, Robert CTR USTRANSCOM J6 <[EMAIL PROTECTED]> wrote: I'm reco

Re: [EMAIL PROTECTED] Apache 2 as front end?

2006-05-02 Thread Victor Trac
Try:NameVirtualHost 123.123.123.123a.com:80>  DocumentRoot /var/www/a.com/  ServerName a.com   ServerAlias www.a.com      [some stuff]  b.domain.com:2002>   DocumentRoot /var/www/b.domain.com/   ServerName b.domain.com       [some stuff]       bweb.com:80>  ServerName bweb.com   ServerAlias www.

Re: [EMAIL PROTECTED] Is there a how-to for building an Apacher server farm?

2006-04-27 Thread Victor Trac
Another alternative to the hardware load balancer is to build a Linux Virtual Server - http://www.linuxvirtualserver.org/.  Linux Enterprise Cluster is a good book, guiding you how to build this from scratch.-VictorOn 4/27/06, Richard de Vries < [EMAIL PROTECTED]> wrote:At work I've built several

Re: [EMAIL PROTECTED] Redirect Question

2006-04-13 Thread Victor Trac
Yes, that should work.  But if you're using name-based virtual hosting, it would be best to put an actual IP in there () rather than wildcards.Cheers,Victor On 4/13/06, Stuart, Ed <[EMAIL PROTECTED]> wrote: >>   If I'm reading this right, you could change to and the

Re: [EMAIL PROTECTED] Apache SSL port question

2006-04-13 Thread Victor Trac
Suggest you get new consultants.  ;)On 4/13/06, Schultz, Gary - COMM <[EMAIL PROTECTED] > wrote: I'm testing SSL (mod_ssl) on Apache 2.0.55 Win32. Some consultants that conducted a security analysis suggested using ports other than the default 443 port for SSL. Is it possible to configure

Re: [EMAIL PROTECTED] Redirect Question

2006-04-13 Thread Victor Trac
If I'm reading this right, you could change to and then have two separate VirtualHost containers , one listening for http and one for https (second one being ), with the exact same Redirect.  Using mod_rewrite may be a more elegant solution, though. -VictorOn 4/12/06, Stuart, Ed <[EMAIL PROTECTED

Re: [EMAIL PROTECTED] Documentroot does not redirect...

2006-04-13 Thread Victor Trac
For name based hosting you have to define at least one IP and port using NameVirtualHost.  So change NameVirtualHost *:80 to NameVirtualHost IP:80 and then you have to use for every VirtualHost container.  Otherwise the or will result in the first Virtual Host to be served by Apache.  So what yo

Re: [EMAIL PROTECTED] an api to administrate apache

2006-04-07 Thread Victor Trac
Try webmin with the Virtualmin module.  On 4/7/06, Joshua Slive <[EMAIL PROTECTED]> wrote: On 4/7/06, Zouari Fourat <[EMAIL PROTECTED]> wrote:> Hello,> Having Apache2 installed on my server, i would like if there's some> low-level apis in GPL world to add, disable, delete virtualhosts and > users o

Re: [EMAIL PROTECTED] RE: failure notice

2006-04-06 Thread Victor Trac
If the UID of the apache process somehow gets compromised, it would be better to have that account running as a non-privileged account than as root.  At least then the UID is somewhat confined to the account's access restrictions, rather than have access to the entire file system as root. -VictorOn

Re: [EMAIL PROTECTED] "Include" lines not being included?

2006-04-03 Thread Victor Trac
Please post output of: ls -laR /etc/apache (or /etc/apache2 or /etc/httpd, etc - whatever apache's config dir is).-VictorOn 4/3/06, Stewart, Eric <[EMAIL PROTECTED]> wrote:I have a configuration that includes two vhosts in separate files, one for regular httpd and the other for ssl connect

Re: [EMAIL PROTECTED] Can apache and ssh share port 80?

2006-04-02 Thread Victor Trac
I'm not suggesting that anyone should screw with the military's local firewall.  .Mil networks generally allow 80/tcp and 443/tcp outbound connections, and so making a remote SSH server listen on 443 is just a way to connect to it while still passing local firewall rules.  As far as the local netwo

Re: [EMAIL PROTECTED] Can apache and ssh share port 80?

2006-04-02 Thread Victor Trac
You can get around this by making SSH listen to 443, as the military firewall will allow 443 (https) outbound.  Another option is to set up another box to listen to 80 as a proxy to the http server.  However, having ssh listen to both 22 and 443 would be the easiest solution. Cheers.On 4/1/06, Jon

[EMAIL PROTECTED] logout authtype basic

2006-03-31 Thread Sterpu Victor
How do I logout from a "authtype basic" directory? - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED]

Re: [EMAIL PROTECTED] self-signed SSL cert problems with httpd-2.0.55 and openssl-0.9.7i

2006-03-20 Thread Victor Trac
DB_ENDIAN::-D_REENTRANT:MACOSX::BN_LLONG RC4_CHAR RC4_CHUNK -> DL_ENDIAN::-D_REENTRANT:MACOSX::BN_LLONG RC4_CHAR RC4_CHUNK DB changed to DL. -Victor On 3/20/06, Boyle Owen <[EMAIL PROTECTED]> wrote: > > -Original Message- > > From: Mark Slater [mailto:[EMAIL PRO

Re: [EMAIL PROTECTED] warning message and virtual hosts

2006-03-09 Thread Victor Trac
; somewhere. Do you have two different NameVirtualHost directives? Have you checked to see if the conf file is including another config file somewhere? -Victor On 3/9/06, Jonathan S. Abrams <[EMAIL PROTECTED]> wrote: > Perhaps the syntax in my .conf file is wrong. Here is a more expli

Re: [EMAIL PROTECTED] Re: Redirecting urls to a server on a different port

2006-03-05 Thread victor
Try RedirectMatch instead Redirect. You can find all the necesary docs here: http://httpd.apache.org/docs/1.3/mod/mod_alias.html#redirectmatch. Bart Braem wrote: victor wrote: Try sometring like this Redirect /index.php http://localhost:8081 I use it with virtual host. index.php is a

Re: [EMAIL PROTECTED] Redirecting urls to a server on a different port

2006-03-05 Thread victor
Try sometring like this Redirect /index.php http://localhost:8081 I use it with virtual host. index.php is a file from the docroot of that virtual host. Bart Braem wrote: Hello, Is it possible to redirect requests on a certain url to a local server on a different port? Something like www.some

Re: [EMAIL PROTECTED] "missing configuration" errors in log

2006-02-14 Thread Victor Trac
If you're not using the module you could just disable it from loading. I don't know how Fedora packages the apache configuration files, but you should be able to edit something like /etc/apache2/modules.conf to comment out the line that loads mod_auth_pgsql. On my debian box, apache2 modules are l

  1   2   >