[EMAIL PROTECTED] [OT] Define a domains DNS entry entirely in terms of another

2007-04-18 Thread John Steel

Say I have example.com set up like this:

example.com.  IN NS ns.example.com.
example.com.  IN NS ns0.example.com.
ns.example.com.   IN A  1.2.3.4
example.com.  IN A  1.2.3.4
webmail.example.com.  IN CNAME  example.com.
mail.example.com. IN CNAME  example.com.
ftp.example.com.  IN CNAME  example.com.
www.example.com.  IN CNAME  example.com.
example.com.  IN MX 10  mail.example.com.

I also have example.net and example.org, but as they always redirect to 
example.com
I don't want to refer to any IP addresses in their nameserver recs, just 
example.com.


I tried this which just gave host not found

example.net.  IN NS ns.example.net.
example.net.  IN NS ns0.example.net.
ns.example.net.   IN CNAME  example.com.
example.net.  IN CNAME  example.com.
webmail.example.net.  IN CNAME  example.net.
mail.example.net. IN CNAME  example.net.
ftp.example.net.  IN CNAME  example.net.
www.example.net.  IN CNAME  example.net.
example.net.  IN MX 10  mail.example.net.

I can fix it by explicitly repeating the IP's (ie, just use the 2 A recs 
from the first block)

but it struck me there must be a smarter way. Thanks.

--
--
http://www.phonewebcam.com
[EMAIL PROTECTED]


-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] Signal 11 (SIGSEV) and signal 10 (SIGBUS)

2007-04-18 Thread Arnab Ganguly

Hi All,
I am getting the following errors
child pid 26657 exit signal Bus Error (10)
child pid 26658 exit signal Segmentation Fault (11)  in error_log and my
child process is getting killed.Can you please let me know the work around
for this?Looking forward for response.
Thanks
-A


Re: [EMAIL PROTECTED] Signal 11 (SIGSEV) and signal 10 (SIGBUS)

2007-04-18 Thread POLONKAI Gergely

Hi,

I was experiencing the same problem, on an Ubuntu Dapper system. Maybe 
it is an ubuntu-specific problem?


Gergely POLONKAI

Arnab Ganguly írta:

Hi All,
I am getting the following errors
child pid 26657 exit signal Bus Error (10)
child pid 26658 exit signal Segmentation Fault (11)   in error_log and 
my child process is getting killed.Can you please let me know the work 
around for this?Looking forward for response.

Thanks
-A


[EMAIL PROTECTED] RE: Malformed header

2007-04-18 Thread Christiaan Ehlers
I have solved the problem...

 

The Beltane package has all its php script files with .cgi extentions.
Thus I just added .cgi to the AddHandler for php5...

 

Must say that the error message sent me down the wrong path for a while,
but got there in the end.

 

Sorry for wasting anybodies time...

 

Thanks.

Christiaan

 

-Original Message-
From: Christiaan Ehlers 
Sent: 18 April 2007 11:58
To: 'users@httpd.apache.org'
Subject: Malformed header

 

Hi All

 

I have installed Beltane (an web front end to Samhain HIDS).  I am
running httpd version 2.2.3 and php 5.1.6 on a fedora 6 box.  I get the
following error when I try and load the php page auth.cgi:

 

[Wed Apr 18 10:31:00 2007] [error] [client 10.0.0.1] malformed header
from script. Bad header=http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd";>

http://www.w3.org/1999/xhtml";>

Login





















 Login



 







 

 

 

 

RE: [EMAIL PROTECTED] IP address discimination

2007-04-18 Thread Boyle Owen
> -Original Message-
> From: John Steel [mailto:[EMAIL PROTECTED] 
> Sent: Dienstag, 17. April 2007 19:19
> To: users@httpd.apache.org
> Subject: Re: [EMAIL PROTECTED] IP address discimination
> 
> Boyle Owen wrote:
> > You must have a NameVirtualHost directive somewhere for 1.2.3.4 (any
> > included files?). Anyway, why fight it? You absolutely *need*
> > NameVirtualHost to do name-based virtual-hosting so just 
> type it in and
> > end the pain.
> >   
> I found them in httpd.include - it begins like this:
> NameVirtualHost 1.2.3.4:80
> NameVirtualHost 1.2.3.5:80

OK.

> ..
> NameVirtualHost 1.2.3.4:443
> NameVirtualHost 1.2.3.5:443

If you're planning to put SSL VHs on ports 443, this won't work as you
expect... Name-based VHs aren't supported by HTTP (see FAQa for
details).

> 
> > Couple of other points... 
> > - Why use ServerAlias instead of ServerName? Maybe it 
> works, but then I
> > guess you could drive a car by operating the clutch with your right
> > foot, too.
> >   
> So I changed httpd.conf to read as follows, and the 
> "overlapping" error 
> went away:
> 
> 
> ServerName example1.com
> Redirect permanent / http://www.example1.com/
> 
> 
> 
> ServerName example2.com
> Redirect permanent / http://www.example2.com/
> 
> 
> But using http://example1.com in a browser didn't do the redirect.
> Is this what you meant? Thanks for the help so far.

For sanity's sake, I always use *exactly* the same string in a VH
argument as I use in the accompanying NameVirtualHost directive. So try:
 instead of wildcard.

Generally, if a VH is not "working" it's usually because the request is
being assigned to another VH - either earlier in the config or a more
specific match. Re-check all your VH definitions and look out for
conflicts and overlaps.

Rgds,
Owen Boyle
Disclaimer: Any disclaimer attached to this message may be ignored. 

> 
> -- 
> --
> http://www.phonewebcam.com
> [EMAIL PROTECTED]
> 
> 
> -
> The official User-To-User support forum of the Apache HTTP 
> Server Project.
> See http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: [EMAIL PROTECTED]
>"   from the digest: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
>
 
 
This message is for the named person's use only. It may contain confidential, 
proprietary or legally privileged information. No confidentiality or privilege 
is waived or lost by any mistransmission. If you receive this message in error, 
please notify the sender urgently and then immediately delete the message and 
any copies of it from your system. Please also immediately destroy any 
hardcopies of the message. You must not, directly or indirectly, use, disclose, 
distribute, print, or copy any part of this message if you are not the intended 
recipient. The sender's company reserves the right to monitor all e-mail 
communications through their networks. Any views expressed in this message are 
those of the individual sender, except where the message states otherwise and 
the sender is authorised to state them to be the views of the sender's company.

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] LDAP / Active Directory Authentication problem.

2007-04-18 Thread Christophe BOULAIN
Hi,

I am trying to set up a reverse authenticated proxy for an internal site
of my company.
The authentication is done on a Microsoft Active Directory
Everything works almost fine, but I'm running into problem when users
has special chars (ex accentued letters) in their password. They are
rejected with an invalid password.

When I try to bind to ldap with a such user with ldapsearch command, if
the password is UTF-8 encoded, it's ok, if not, password is rejected

How can I tell apache to use UTF-8 when doing authentification, or to
convert the username/password to UTF-8 before binding to ldap ?
I already try to set AddDefaultCharset to utf-8, but that doesn(t help.

Server info : Gentoo Linux, apache-2.0.59

Thanks a lot.

Regards,
Christophe.



-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] Mapping URL to remote file system

2007-04-18 Thread sharath reddy

On 4/17/07, Joshua Slive <[EMAIL PROTECTED]> wrote:


On 4/17/07, detlev von davidson <[EMAIL PROTECTED]> wrote:
>
>
> sharath reddy wrote:
> > Hi all,
> >
> > How can i map URL to a file system on remote box?
> >
> > .. if my apache is running as  www.example.com
> >  , then if i want to serve content for
> > www.example.com/test  from different box
> > other than local server
> >
> > Any suggestions?
>
> presuming by "different box" you mean another webserver, mod_rewrite
> comes to mind, and as it is, this link here (not all to deeply hidden in
> the doc pages ;-) sports sort of a howto:
> http://httpd.apache.org/docs/2.2/misc/rewriteguide.html



is it possible to use mod_rewrite ,if the other box is not a web server ?


I think he's actually looking for a reverse proxy. An introduction to

the topic is here
http://www.apachetutor.org/admin/reverseproxies

Joshua.



I went through reverse proxy documentation, can i use this reverse proxy
solution, if i want to map URLs to remote file system which is not a
webserver

Thanks,
Sharath


[EMAIL PROTECTED] Apache 2.0.59 segfaults on CentOS 4.3 with SSL

2007-04-18 Thread Chad Morland

Recently we deployed a high volume SSL site on a custom RPM build of Apache
2.0.59 running on CentOS 4.3.

Things ran happily for about 5 days before we started noticing segfaults in
our logs along with blank pages for that particular SSL vhost. Restarting
apache makes the problem disappear for another few days before it crops up
again. Other HTTPS and HTTP hosts continue to serve requests without error.

I could be wrong, but I've never seen apache segfault for one vhost and work
perfectly fine for another.

Going over our past logs I see rare occurances of segfaults but nothing that
is regular or that has impacted service before. It seems to be isolated to
this one site.

How can I debug these segfaults in order to determine the exact cause of the
problem?

Here are the messages from our error_log during the time of the error:
[Tue Apr 17 07:29:11 2007] [notice] child pid 3952 exit signal Segmentation
fault (11)
[Tue Apr 17 07:29:12 2007] [notice] child pid 3931 exit signal Segmentation
fault (11)

Here is the relevant section of our custom spec file that we used to build
this RPM. Note that we added "-D_FILE_OFFSET_BITS=64" so that we can support
files larger than 2GB (our logs were growing past that limit occasionally.)

../configure -C \
   --prefix=%{contentdir} \
   --exec-prefix=%{contentdir} \
   --bindir=%{contentdir}/bin \
   --sbindir=%{contentdir}/bin \
   --mandir=%{contentdir}/man \
   --libdir=%{contentdir}/lib \
   --sysconfdir=%{contentdir}/conf \
   --includedir=%{contentdir}/include \
   --libexecdir=%{contentdir}/modules \
   --datadir=%{contentdir} \
   --with-mpm=prefork \
   --enable-so \
   --enable-ssl \
   --enable-rewrite \
   --enable-userdir \
   --disable-imap --disable-cgi \
   $*

make EXTRA_CFLAGS="-D_FILE_OFFSET_BITS=64" %{?_smp_mflags}



Let me know if you need more information.

-CM


Re: [EMAIL PROTECTED] Signal 11 (SIGSEV) and signal 10 (SIGBUS)

2007-04-18 Thread Arnab Ganguly

Hi,
I got this problem in Solaris 5.9.But when I reduce the MaxClient from 256
to 25 it doesn't come.
I guess it is the module which is getting data may be not able to handle so
fast when it was 256.But when we reduce it to 25 the request submission is
much slower so the apache is not getting any signals.Please correct me
if I am wrong.
Thanks
-A

On 4/18/07, POLONKAI Gergely <[EMAIL PROTECTED]> wrote:


 Hi,

I was experiencing the same problem, on an Ubuntu Dapper system. Maybe it
is an ubuntu-specific problem?

Gergely POLONKAI

Arnab Ganguly írta:

Hi All,
I am getting the following errors
child pid 26657 exit signal Bus Error (10)
child pid 26658 exit signal Segmentation Fault (11)   in error_log and my
child process is getting killed.Can you please let me know the work around
for this?Looking forward for response.
Thanks
-A




Re: [EMAIL PROTECTED] Mapping URL to remote file system

2007-04-18 Thread Joshua Slive

On 4/18/07, sharath reddy <[EMAIL PROTECTED]> wrote:


I went through reverse proxy documentation, can i use this reverse proxy
solution, if i want to map URLs to remote file system which is not a
webserver


No.

Obviously there is no way to access a remote file system unless it is
somehow shared with the webserver. So how is the remote filesystem
accessible to the webserver? If is accessible as a normal, mountable
filesystem, then just mount it, make sure the permissions are correct,
and then treat it like any other directory on the local filesystem.

(Or, in other words, your problem is way under-specified. If you want
specific help, you need to give us specifics of your setup.)

Joshua.

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] Apache 2.0.59 segfaults on CentOS 4.3 with SSL

2007-04-18 Thread Joshua Slive

On 4/18/07, Chad Morland <[EMAIL PROTECTED]> wrote:


How can I debug these segfaults in order to determine the exact cause of the
problem?


http://httpd.apache.org/dev/debugging.html#crashes

Joshua.

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] Enabling mod_headers on Apache v1.3.37?

2007-04-18 Thread Glenn Gillis
I am trying to enable the mod_headers module in Apache v1.3.37 (compiled
from source) running on FreeBSD 4.11-RELEASE-p26.

I have tried passing both:

  --enable-module=headers

and

  --activate-module=src/modules/standard/mod_headers.c
  --enable-module=headers

to configure before recompiling and reinstalling Apache.

Despite the lack of errors reported by configure, when I attempt to call
the module in my Apache configuration file I receive this error from
"apachectl configtest":

"[EMAIL PROTECTED]:glenn]$ sudo /usr/local/apache/bin/apachectl configtest
Syntax error on line 398 of /usr/local/apache/conf/httpd.conf:
Invalid command 'Header', perhaps mis-spelled or defined by a module not
included in the server configuration"

Line 398 in my httpd.conf is: "Header unset Content-Type" and is
contained within the following stanza:

393 
394   ServerName law.leat.or.tz
395   RewriteEngine On
396   RewriteRule ^/(.*)
http://localhost:8080/VirtualHostBase/http/law.leat.or.tz:80/www.leat.o
   r.tz/law/VirtualHostRoot/$1 [L,P]
397   ProxyVia on
398   Header unset Content-Type
399 

(The site is a Zope site running behind Apache 1.3.37)

Clearly, the module is not being found/configured/etc. when I recompile
the Apache server.

The mod_headers documentation claims it is available in "Available in
Apache 1.2 and later," however, there is no specific documentation about
activating the module. The file src/modules/standard/mod_headers.c does
exist, BTW, the 1.3.37 distribution.

I'm sure someone on the list has used this module under Apache 1.3. Care
to share any tips for getting the server to recognize the module?
-- 
Thanks!

Glenn Gillis
ELAW U.S. Information Technology Manager
Environmental Law Alliance Worldwide
http://www.elaw.org


smime.p7s
Description: S/MIME Cryptographic Signature


[EMAIL PROTECTED] problem with handler after upgrade from apache to apache2

2007-04-18 Thread Georgios Pallas

Hi to everybody!

The following unwanted feature(?) appeared after I upgraded from  
apache to apache2:


In Apache, I had in the configuration the following lines, in order to  
create picture thumbnails on-the-fly:


Action thumbnail /cgi-bin/resize.cgi
AddHandler thumbnail .jpgTN

The user hits the url of a jpg image, say: http://myserv/test.jpg and  
gets the original image. If the user hits http://myserv/test.jpgTN,  
the handler calls the resize.cgi which gets the 'test.jpgTN' (using  
$ENV{"PATH_TRANSLATED"}), understands that the thumbnail of test.jpg  
is needed, resizes test.jpg and throws it to the browser. Note:  
test.jpgTN does not really exist on disk.


That worked in apache, but as soon as I upgraded to apache2, it  
stopped working, and after some troubleshooting I realized that it  
only works when test.jpgTN exists on the disk (even if it is a  
zero-length file created by 'touch test.jpgTN'.


The error.log just prints that file blah-blah.jpgTN does not exist.  
That means that the handler is not invoked...


Why? :-(

My set-up is: Debian Etch, Apache/2.2.3. If anybody has heard of that  
feature(?)

 or imagines what is wrong, I can send the config files.

And a meta-question because I'm new to the list: how do you send a  
config file? Simply paste? Can you send attachments to the list?


Thanks!
Giorgos




-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] problem with handler after upgrade from apache to apache2

2007-04-18 Thread Joshua Slive

On 4/18/07, Georgios Pallas <[EMAIL PROTECTED]> wrote:


That worked in apache, but as soon as I upgraded to apache2, it
stopped working, and after some troubleshooting I realized that it
only works when test.jpgTN exists on the disk (even if it is a
zero-length file created by 'touch test.jpgTN'.


Check the docs
http://httpd.apache.org/docs/2.2/mod/mod_actions.html#action
with special attention to the "virtual" option.

Joshua.

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] multiple c file problem with apxs.

2007-04-18 Thread Jason

Ok,

Im getting a error with a module im trying to compile using apxs.

What we have is two source files and a header.

File number one compiles fine, but once we try to run a function in the 
second source file, it gives a error saying that it cant find the function.


We have the function defined in the header and every thing seams to be 
right, we can compile fine if we comment out the function call.


We used this line.

apxs -c -i -a -n xpx mod_force.c mod_doc.c

Thanks in Advance,
Jason

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] Re: apostrophe character reference?

2007-04-18 Thread Robert T Wyatt
I've received no responses to this inquiry and am a little surprised
that no one here has any idea of what the problem may be. Perhaps spam
filters picked it up?

Any help is appreciated.

Thank you,
Robert

Robert T Wyatt wrote:
> Hi folks,
> 
> I'm having a little trouble understanding something and I hope you
> will be able to help. I have a band with some albums that we've made
> available in mp3 format for free online.
> 
> Webjay.org allows us to distribute the music through their site [see
> http://webjay.org/by/chupacerveza/thebentones--beeronthetracks for an
> example].
> 
> The problem is that the songs containing apostrophes only work when
> playing them directly with the "URI link" link (from the Webjay site).
> When playing them through the "Play this page" link those songs
> produce 404 errors.
> 
> I've already determined that a difference between these methods is
> that Webjay's software replaces the apostrophes with ' when using
> the "Play this page" link but the direct link does not.
> 
> I'm not exactly sure what the problem is, perhaps it is the wrong
> character entity reference or it ought to be ', or perhaps my
> server needs to be configured, or a combination of these.
> 
> Do you have suggestions or ideas that may help?
> 
> Thank you!
> Robert
> 
> 
> -
> The official User-To-User support forum of the Apache HTTP Server Project.
> See http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: [EMAIL PROTECTED]
>"   from the digest: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
> 
> 

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] multiple c file problem with apxs.

2007-04-18 Thread Joshua Slive

On 4/18/07, Jason <[EMAIL PROTECTED]> wrote:

Ok,

Im getting a error with a module im trying to compile using apxs.


You'd probably be better off on the module developers mailing list:
http://httpd.apache.org/lists.html#modules-dev

Joshua.

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] Re: apostrophe character reference?

2007-04-18 Thread Dragon

Robert T Wyatt wrote:

I've received no responses to this inquiry and am a little surprised
that no one here has any idea of what the problem may be. Perhaps spam
filters picked it up?

Any help is appreciated.

 End original message. -

I saw the post and had nothing to contribute, thus I did not reply. 
It could simply be that the same is true of other list members.


Or it could be that the person who knows the answer has not checked 
the list posts yet. I should probably also point out that the people 
who frequent lists for open source software are very often doing so 
on their own time and very often such lists take a low priority for many.


Posting a question to a list like this is a crap shoot. Sometimes you 
win and sometimes you don't.


Dragon

~~~
 Venimus, Saltavimus, Bibimus (et naribus canium capti sumus)
~~~


-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: [EMAIL PROTECTED] Apache proxy problem with https/http and 302 redirects

2007-04-18 Thread Campbell, Scott
Jerome, thanks for this insight.  We tried it, but it is not working.  Our 
apache server is using ProxyPass to talk HTTP to the tomcat server, not HTTPS.  
Attempting the change you note seems to hang up the communication between 
tomcat and apache, causing an eventual timeout to the browser.

Any other ideas from anyone?

Thank you!
Scott

-Original Message-
From: Jerome GAUTHIER [mailto:[EMAIL PROTECTED] 
Sent: Thursday, April 12, 2007 5:30 PM
To: users@httpd.apache.org
Subject: RE: [EMAIL PROTECTED] Apache proxy problem with https/http and 302 
redirects

Hello, 

The problem come from your tomcat configuration

In your web.xml file add:
  
 
Protected Context
  /*
  
  
  
 CONFIDENTIAL
  
   

/jerome

-Message d'origine-
De : Campbell, Scott [mailto:[EMAIL PROTECTED] 
Envoyé : jeudi 12 avril 2007 22:29
À : users@httpd.apache.org
Objet : [EMAIL PROTECTED] Apache proxy problem with https/http and 302 redirects

Greetings.  I am having a problem with the Apache Proxy directives.

Here is my setup:

CLIENT <--> Apache SSL <--> http proxy to tomcat server

A client comes in with an https:// request.  Apache receives that
request and proxies the connection to our backend tomcat server via
http.  The tomcat server sends back data.  Apache then sends that tomcat
data back to the client over the SSL connection.  This part works
perfectly.

However, when the tomcat server sends a 302 redirect (we're using
j_security_check), Apache is sending that redirect back to the client as
HTTP and not HTTPS, therefore triggering the CLIENT IE6/7 browser to
popup "Warning, you are about to enter an unsecure site...".

Has anyone else experienced this, or have ideas why the HTTPS connection
is being broken?

*Another note, when I switch to using a JkMount with
worker/properties/ajp, and do not use ProxyPass/ProxyPassReverse/http,
there is no problem.

Here are our configs:

httpd-ssl.conf
--

DocumentRoot "/usr/local/apache2/htdocs/MYSITE"
ServerName www.MYSITE.com:443

...SSL STUFF...

ProxyPreserveHost On

ProxyPass /distrib/ http://172.27.162.132:8080/distrib/
ProxyPassReverse /distrib/ http://172.27.162.132:8080/distrib/
ProxyPass /content/ http://172.27.162.132:8080/content/
ProxyPassReverse /content/ http://172.27.162.132:8080/content/

#JkMount  /distrib/* worker1
#JkMount  /content/* worker1


Apache Version (64-bit)
---
Server version: Apache/2.2.4 (Unix)
Server built:   Feb 22 2007 11:00:07

Apache Build Configuration
--
--enable-modules=ssl rewrite proxy proxy-connect proxy-http
--with-mpm=worker

OS Information
--
Linux HOSTNAME.wrightexpress.com 2.6.9-42.ELsmp #1 SMP Wed Jul 12
23:32:02 EDT 2006 x86_64 x86_64 x86_64 GNU/Linux

Thanks for any help or ideas.

Scott Campbell
Web Systems Administrator
Wright Express
http://www.wrightexpress.com


-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] Apache proxy problem with https/http and 302 redirects

2007-04-18 Thread Nick Kew
On Wed, 18 Apr 2007 15:40:32 -0400
"Campbell, Scott" <[EMAIL PROTECTED]> wrote:


> However, when the tomcat server sends a 302 redirect (we're using
> j_security_check), Apache is sending that redirect back to the client
> as HTTP and not HTTPS, therefore triggering the CLIENT IE6/7 browser
> to popup "Warning, you are about to enter an unsecure site...".

See:
ProxyPassReverse
Header edit
http://www.apachetutor.org/admin/reverseproxies

-- 
Nick Kew

Application Development with Apache - the Apache Modules Book
http://www.apachetutor.org/

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] Is it possible for Apache to randomly select different URLs to serve up?

2007-04-18 Thread mraible

Is it possible for Apache to randomly select different URLs to serve up?  For
example:

User1 -> http://my.domain.com/1
User2 -> http://my.domain.com/2
User3 -> http://my.domain.com/3

And after a certain point, start over again?  I'm not really looking for
random, ordered would work.

For more information, please read more below.

Thanks,

Matt

[More]

I have configured Apache with mod_jk and mod_rewrite to forward to different
applications deployed in Tomcat based on a parameter.  For example:

http://my.domain.com/?v=1 --> tomcat/webapps/app1
http://my.domain.com/?v=2 --> tomcat/webapps/app2

If this parameter is not in the URL, the default Tomcat application
(tomcat/webapps/ROOT) will be served up.

The reason I'm doing this for A/B Testing - so a new app can be deployed
with small changed and users will get routed to it. The reason for the "v"
parameter is to ensure users are routed to a particular app when they pass
URLs around to friends and such. In addition to a "v" parameter, I'm looking
for a "v" cookie and routing appropriately. 

This all works great and I'm happy with my current setup. If you need more
details, please see my blog entry[1] where I documented my experience.

For those users who come in w/o a "v" parameter or "v" cookie, I'd like to
evenly distribute them to the different version of the site. I'm not so
concerned about the "evenly" aspect, but I would like to send users to
different applications.  Is this something that's possible with Apache or
should I do this in the ROOT webapp in Tomcat?

[1] http://raibledesigns.com/rd/entry/mixing_apache_http_server_mod
-- 
View this message in context: 
http://www.nabble.com/Is-it-possible-for-Apache-to-randomly-select-different-URLs-to-serve-up--tf3603013.html#a10065662
Sent from the Apache HTTP Server - Users mailing list archive at Nabble.com.


-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] Is it possible for Apache to randomly select different URLs to serve up?

2007-04-18 Thread Serge Dubrouski

A simple JavaScript serving as a main page and redirecting users to a
random URI from your site would do. I don't think that it would be
possible to do on Apache configuration level

On 4/18/07, mraible <[EMAIL PROTECTED]> wrote:


Is it possible for Apache to randomly select different URLs to serve up?  For
example:

User1 -> http://my.domain.com/1
User2 -> http://my.domain.com/2
User3 -> http://my.domain.com/3

And after a certain point, start over again?  I'm not really looking for
random, ordered would work.

For more information, please read more below.

Thanks,

Matt

[More]

I have configured Apache with mod_jk and mod_rewrite to forward to different
applications deployed in Tomcat based on a parameter.  For example:

http://my.domain.com/?v=1 --> tomcat/webapps/app1
http://my.domain.com/?v=2 --> tomcat/webapps/app2

If this parameter is not in the URL, the default Tomcat application
(tomcat/webapps/ROOT) will be served up.

The reason I'm doing this for A/B Testing - so a new app can be deployed
with small changed and users will get routed to it. The reason for the "v"
parameter is to ensure users are routed to a particular app when they pass
URLs around to friends and such. In addition to a "v" parameter, I'm looking
for a "v" cookie and routing appropriately.

This all works great and I'm happy with my current setup. If you need more
details, please see my blog entry[1] where I documented my experience.

For those users who come in w/o a "v" parameter or "v" cookie, I'd like to
evenly distribute them to the different version of the site. I'm not so
concerned about the "evenly" aspect, but I would like to send users to
different applications.  Is this something that's possible with Apache or
should I do this in the ROOT webapp in Tomcat?

[1] http://raibledesigns.com/rd/entry/mixing_apache_http_server_mod
--
View this message in context: 
http://www.nabble.com/Is-it-possible-for-Apache-to-randomly-select-different-URLs-to-serve-up--tf3603013.html#a10065662
Sent from the Apache HTTP Server - Users mailing list archive at Nabble.com.


-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] Is it possible for Apache to randomly select different URLs to serve up?

2007-04-18 Thread Joshua Slive

On 4/18/07, Serge Dubrouski <[EMAIL PROTECTED]> wrote:

A simple JavaScript serving as a main page and redirecting users to a
random URI from your site would do. I don't think that it would be
possible to do on Apache configuration level

On 4/18/07, mraible <[EMAIL PROTECTED]> wrote:
>
> Is it possible for Apache to randomly select different URLs to serve up?  For
> example:
>
> User1 -> http://my.domain.com/1
> User2 -> http://my.domain.com/2
> User3 -> http://my.domain.com/3


Actually, mod_rewrite can do it using a rnd: RewriteMap.

Joshua.

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] Is it possible for Apache to randomly select different URLs to serve up?

2007-04-18 Thread Nick Kew
On Wed, 18 Apr 2007 13:03:39 -0700 (PDT)
mraible <[EMAIL PROTECTED]> wrote:

> 
> Is it possible for Apache to randomly select different URLs 

The browser requests a URL.  What apache serves at that URL
is your business and can of course be random.

> User1 -> http://my.domain.com/1
> User2 -> http://my.domain.com/2
> User3 -> http://my.domain.com/3

Many ways to do that.  For example, RewriteMap.

> For those users who come in w/o a "v" parameter or "v" cookie, I'd
> like to evenly distribute them to the different version of the site.

That's called load balancing.  You want mod_proxy_balancer.

-- 
Nick Kew

Application Development with Apache - the Apache Modules Book
http://www.apachetutor.org/

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] problem with handler after upgrade from apache to apache2

2007-04-18 Thread Giorgos Pallas

Joshua Slive wrote:


On 4/18/07, Georgios Pallas <[EMAIL PROTECTED]> wrote:


That worked in apache, but as soon as I upgraded to apache2, it
stopped working, and after some troubleshooting I realized that it
only works when test.jpgTN exists on the disk (even if it is a
zero-length file created by 'touch test.jpgTN'.



Check the docs
http://httpd.apache.org/docs/2.2/mod/mod_actions.html#action
with special attention to the "virtual" option.

Joshua.



Ouch, and imagine that I went through the Action and AddHandler sections...

Thank you my friend, and sorry for not having RTFM properly...

Giorgos

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] php

2007-04-18 Thread Richard Dunne
I am trying to render php webpages on localhost with apache tomcat.  I was able 
to view these using jakarta, but I was trying to execute php scripts via 
xmlhttprequests as well.  I was told that php works with apache but I am having 
a spot of bother.  I can view the files in the project folder at 
http://localhost/ProjectFolder and can view the webpages in windows using 
http://localhost/ProjectFolder/file.php.  My problem is that when I execute ths 
request, I get access denied with this line "http.open("GET", url, true);" 
where the url is as above.  I was able to execute the request with jakarta, so 
this leaves me to believe this is an apache issue.  Does anyone have an insight 
into this? 

Richard.

__
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 

[EMAIL PROTECTED] can't get apache to talk ldap to netware ldap server-HELP

2007-04-18 Thread Tony Guadagno
Hi,
  I am trying to get Apache 2.2.4(windows) to talk LDAP to my Netware 6.5sp6 
server.  I get the following error when trying to connect

[Tue Apr 17 22:47:50 2007] [warn] [client 10.1.1.1] [3372] auth_ldap 
authenticate: user tonyg authentication failed; URI / [LDAP: 
ldap_simple_bind_s() failed][Unavailable]

this is what dstrace shows on the server

New TLS connection 0xa1e68a80 from 172.30.0.20:3648, monitor = 0x1c4, index = 12
Monitor 0x1c4 initiating TLS handshake on connection 0xa1e68a80
DoTLSHandshake on connection 0xa1e68a80
TLS accept failure 5 on connection 0xa1e68a80, setting err = -5875. Error 
stack: TLS handshake failed on connection 0xa1e68a80, err = -5875
BIO ctrl called with unknown cmd 7
Server closing connection 0xa1e68a80, socket error = -5875
Connection 0xa1e68a80 closed

are these errors cert issues?

Here is my apache config

(Global Config)
LDAPTrustedGlobalCert CA_DER conf/FlightLineCA.der
LDAPTrustedGlobalCert CA_BASE64 conf/FlightLineCA.pem
LDAPTrustedGlobalCert CA_DER conf/FlightLineCA-SS.der
LDAPTrustedGlobalCert CA_BASE64 conf/FlightLineCA-SS.pem

(Directory Config)

AuthType basic
AuthBasicProvider ldap
AuthName "LdapTest"
AuthLDAPURL ldaps://fs0.ultra-fei.com:636/o=xyxx?cn?sub
AuthLDAPBindDN cn=admin,o=xyxx
AuthLDAPBindPassword xyxx
AllowOverride None
Order allow,deny
Allow from 172.30
Allow from 10.1
require valid-user


***
Tony Guadagno
Guadagno Consulting
[EMAIL PROTECTED]
585.703.6700
***

BEGIN:VCARD
VERSION:2.1
X-GWTYPE:USER
FN:Tony Guadagno
EMAIL;WORK;PREF;NGW:[EMAIL PROTECTED]
N:Guadagno;Tony
END:VCARD


-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: [EMAIL PROTECTED] [OT] Define a domains DNS entry entirely in terms of another

2007-04-18 Thread Martin Barry
$quoted_author = "John Steel" ;
> 
> I tried this which just gave host not found
> 
> example.net.  IN NS ns.example.net.
> example.net.  IN NS ns0.example.net.
> ns.example.net.   IN CNAME  example.com.
> example.net.  IN CNAME  example.com.
> webmail.example.net.  IN CNAME  example.net.
> mail.example.net. IN CNAME  example.net.
> ftp.example.net.  IN CNAME  example.net.
> www.example.net.  IN CNAME  example.net.
> example.net.  IN MX 10  mail.example.net.

does making these all CNAME to example.com. fix the host not found?

sometimes CNAMEs pointing at CNAMEs which point at A records confuse
resolvers.

this is really a DNS question, best answered on a DNS list. feel free to
contact me off-list if you want some more help...

cheers
marty

-- 
"Nod.  Mindreading is a less useful skill than mindwriting, considering
 all the blank media on the hoof in every major city." - Anthony de Boer

alt.sysadmin.recovery - <[EMAIL PROTECTED]> 

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] Apache on Linux truncates file

2007-04-18 Thread Lena . Stevanoska




Hi,

I have a java servlets that uses the HttpClient to submit the credentials
for a basic authorization to an Apache 2.0.46 server running on Red Hat
linux. After passing on the credentials, the requested file is displayed in
the client's browser. When accessing tiff or pdf images, all the files are
opened correctly regardless of their size (from couple of KB to couple of
MB), but when I want to open a .pfx file I don't receive the whole file and
I can't run it. When I tried the same application to access the same file
on a Apache 2.0.46 server running on Win32, I received the complete file.
Here is an abstract of my log file from the Apache on Red Hat, where I can
see that the file size that is returned by the HTTPClient is the exact file
size, but from the access log it shows that the GET returns less bytes.

   
 [18/Apr/2007:16 CORE3283: stderr: 2007/04/18 06:07:10:562 GMT [DEBUG] 
 :07:10] warning HttpMethodDirector - Authentication scope: BASIC 'By  
 ( 2352):authorization Only'@myhost:80 
   


   
 [18/Apr/2007:16:07:1 CORE3283: stderr: 2007/04/18 06:07:10:562 GMT
 0] warning ( 2352):  [DEBUG] HttpMethodDirector - Retry authentication
   


   
 [18/Apr/2007:16:0 CORE3283: stderr: 2007/04/18 06:07:10:562 GMT [DEBUG]   
 7:10] warning (   HttpMethodBase - Should close connection in response to 
 2352):directive: close
   


   
 [18/Apr/2007:16: CORE3283: stderr: 2007/04/18 06:07:10:562 GMT [DEBUG]
 07:10] warning ( HttpConnection - Connection is locked. Call to   
 2352):   releaseConnection() ignored. 
   


   
 [18/Apr/2007:16 CORE3283: stderr: 2007/04/18 06:07:10:562 GMT [DEBUG] 
 :07:10] warning HttpMethodDirector - Authenticating with BASIC 'By
 ( 2352):authorization Only'@myhost:80 
   


   
 [18/Apr/2007:16: CORE3283: stderr: 2007/04/18 06:07:10:562 GMT [DEBUG]
 07:10] warning ( HttpMethodParams - Credential charset not configured,
 2352):   using HTTP element charset   
   


   
 [18/Apr/2007:16:07 CORE3283: stderr: 2007/04/18 06:07:10:562 GMT [DEBUG]  
 :10] warning ( HttpConnection - Open connection to myhost:80  
 2352):
   


   
 [18/Apr/2007:1 CORE3283: stderr: 2007/04/18 06:07:10:562 GMT [DEBUG]  
 6:07:10]   header - >> "GET   
 warning (  /vault/users_volume/sunh_41c62016/mat0001_any_adi00lk0tfe2 
 2352): u.pfx HTTP/1.1[\r][\n]"
   


   
 [18/Apr/2007:16:07: CORE3283: stderr: 2007/04/18 06:07:10:562 GMT [DEBUG] 
 10] warning (   HttpMethodBase - Adding Host request header   
 2352):
   


   
 [18/Apr/2007:16 CORE3283: stderr: 2007/04/18 06:07:10:562 GMT [DEBUG] 
 :07:10] warning header - >> "User-Agent: Mozilla/4.0 (compatible; MSIE
 ( 2352):6.0; Windows NT 5.0)[\r][\n]" 
   


   
 [18/Apr/2007:16: CORE3283: stderr: 2007/04/18 06:07:10:562 GMT [DEBUG]
 07:10] warning ( header - >> "Authorization: Basic
 2352):   dGVjaHdlYjpUMjg5VDFEODkxMg==[\r][\n]"
   

[EMAIL PROTECTED] new user

2007-04-18 Thread Stefan Cobb

I found apache, sourceforge.org and xxamp.  How do I configure what
files to offer on the ftp site?

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] (13)Permission denied: exec of ... failed

2007-04-18 Thread Scott Dudley


I'm working on a friend's FC 3 server running Apache/2.0.54.

We're getting the following error accessing 
http://domain/cgi-bin/subdir/index.html:


(13)Permission denied: exec of 
'/www/docs/domain/cgi-bin/subdir/index.html' failed


Permissions all appear correct:

drwxr-xr-x  20 apache apache 4096 Apr 19 01:07 cgi-bin/
drwxr-xr-x  10 apache apache 4096 Apr 19 00:35 cgi-bin/subdir/
-rw-r--r--  1 apache apache 15 Apr 19 00:43 cgi-bin/subdir/index.html

No suExec and SELinux is disabled.

We can execute CGI's placed in the top-most cgi-bin directory but cannot 
seem to access any contents located deeper in that tree.


What am I missing?

--

Regards,

Scott Dudley


-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] (13)Permission denied: exec of ... failed

2007-04-18 Thread Steve Swift

Does the file which failed to execute contain a #! (shebang) pointing at an
executable that apache cannot execute?

On 19/04/07, Scott Dudley <[EMAIL PROTECTED]> wrote:



I'm working on a friend's FC 3 server running Apache/2.0.54.

We're getting the following error accessing
http://domain/cgi-bin/subdir/index.html:

(13)Permission denied: exec of
'/www/docs/domain/cgi-bin/subdir/index.html' failed

Permissions all appear correct:

drwxr-xr-x  20 apache apache 4096 Apr 19 01:07 cgi-bin/
drwxr-xr-x  10 apache apache 4096 Apr 19 00:35 cgi-bin/subdir/
-rw-r--r--  1 apache apache 15 Apr 19 00:43 cgi-bin/subdir/index.html

No suExec and SELinux is disabled.

We can execute CGI's placed in the top-most cgi-bin directory but cannot
seem to access any contents located deeper in that tree.

What am I missing?

--

Regards,

Scott Dudley


-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]





--
Steve Swift
http://www.swiftys.org.uk