RE: [EMAIL PROTECTED] Comparing environmental variables in httpd.conf for conditional logic

2007-05-22 Thread West, Chris
I was sure something was possible too, two days later I'm starting to
believe Joshua now.  The problem seems to be having the environment
variable in the regex side of the rewritecond statement.

Thanks for the reply

Chris West
Information Analyst
EDS - UKIMEA Commercial AIU
WoodHill House (2nd Floor)
Westburn Road
Aberdeen AB16 5GB
 
( Phone:+44 (0)1224 422517)
+ mailto:[EMAIL PROTECTED]

This email contains information which is confidential 
and may be privileged. Unless you are the intended 
addressee (or authorised to receive for the addressee) 
you may not use, forward, copy or disclose to anyone 
this email or any information contained in this email. If 
you have received this email in error, please advise 
the sender by reply email immediately and delete this email.

Electronic Data Systems Ltd
Registered Office:, Lansdowne House, Berkeley Square, London  W1J 6ER 
Registered in England no: 53419
VAT number: 432 99 5915

-Original Message-
From: Neil A. Hillard [mailto:[EMAIL PROTECTED] 
Sent: 21 May 2007 16:33
To: users@httpd.apache.org
Subject: Re: [EMAIL PROTECTED] Comparing environmental variables in
httpd.conf for conditional logic

Hi,

Joshua Slive wrote:
> On 5/21/07, Krist van Besien <[EMAIL PROTECTED]> wrote:
>> On 5/21/07, West, Chris <[EMAIL PROTECTED]> wrote:
>> > Hi Krist,
>> >
>> > Sorry to get back to you again, I have tried the format you 
>> > described and still have problems, is the following how you would 
>> > expect the rewrite condition to look?  I have tried both, neither 
>> > giving the
>> result
>> > expected.
>> >
>> > 1.
>> >
>> > RewriteCond %{HTTP_REFERER} ^.*%{ENV:SERVER_NAME}.*$ [OR]
>> > RewriteCond %{HTTP_REFERER} ^$
>> > RewriteRule .* - [E=dont_log_referer:true]
>> >
>> > 2.
>> >
>> > RewriteCond %{ENV:HTTP_REFERER} ^.*%{ENV:SERVER_NAME}.*$ [OR]
>> > RewriteCond %{ENV:HTTP_REFERER} ^$
>> > RewriteRule .* - [E=dont_log_referer:true]
>>
>> After your other mail I know know that it is the "internal variable"
>> SERVER_NAME that you want to test against, and in this case 
>> %{SERVER_NAME} ought to be correct. %{HTTP_REFERER} is also correct.
>>
>> What could be your problem is that SERVER_NAME is not containing what

>> you expect, and that therefore the rule doesn't match. Have you tried

>> turning rewritelog on, and setting the loglevel to 9? This ought to 
>> give you a ton of information.
> 
> In any case, this isn't going to work. The regular expression used in 
> RewriteCond (and RewriteRule and SetEnvIf) cannot contain variables.
> It is compiled at server-start and doesn't have access to anything 
> per-request.
> 
> I don't think there is any way to do exactly what you want with 
> standard modules. You'll need to specify the ServerName explicitly in 
> the rules.

I don't believe that's true.  I have the following rewrite to remove a
prefix from the REMOTE_USER variable:

RewriteCond%{LA-U:REMOTE_USER} ^EXT_(.*)$
RewriteRule.* - [env=RU:%1]

and:

RewriteRule ^/$ http://%{SERVER_NAME}/site/ [R]


I haven't got a spare server to play around with at the moment, but I'm
sure something is possible.  Is it just a case of it doesn't like the
environment variable on the RHS argument?

As someone else asked, have you enabled the RewriteLog?


HTH,


Neil.

-- 
Neil Hillard[EMAIL PROTECTED]
AgustaWestland  http://www.whl.co.uk/

Disclaimer: This message does not necessarily reflect the
views of Westland Helicopters Ltd.

-
The official User-To-User support forum of the Apache HTTP Server
Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] Authorization Fine Tuning

2007-05-22 Thread Chaim Keren Tzion
Hi,

I am running subversion through Apache/2.2.3.

I would like to set it up so that:
1. From within the LAN, Anonymous users can only checkout (read-only)
2. From within the LAN, Authenticated users can check in and out (Read-write)
3. From outside the LAN, Anonymous users should be rejected and Authenticated 
users will get read-write rights.

So far I have this which works for the internal network as desired but I don't 
know how to procede with the config for external connections.

   
  Require valid-user
   

Any ideas?

TIA,
Chaim

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] DocumentRoot - Apache2 - Ubuntu

2007-05-22 Thread Norman Peelman

Tim Johnson wrote:

On Tuesday 22 May 2007 02:05, Stephen wrote:
 
  

I don't see a `DocumentRoot' variable in the apache2 httpd.conf.
Can I add that variable and will it have the same effect .
  


 Hi Stephen:

  

Look at some of the nested/included *.conf files.

 
  There is no path called `included'.

  the directories below /etc/apache2 are:

conf.d, mods-available, mods-enabled, sites-available, sites-enabled

Line 5 of /etc/apache2/sites-enabled/000-default
looks like this:
DocumentRoot /var/www/

Is that what you are referring to?

  

The idea is that changes are made to them, and not http.conf.

 
 Pointer/URLs to documentation on this subject are invited too.

thanks
tim

  
 As far as I know it can go into the main 'apache2.conf' file as well 
as  containers (as found in 000-default). You should'nt see 
anything in 'httpd.conf' unless you've added it. Mine has a brief 
description about backwards compat. and 1 line commented out as an example.


Norm

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] Apache2 hangs once in a while

2007-05-22 Thread Jens . Heinemann
> On 4/5/07, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote:
> 
> > The problem I have is that the server doesn't respond sometimes. Maybe
> > this happens after I have done a lot of mysql database requests in a 
short
> > time but since I can't reproduce the error by putting many requests in 
I
> > think this is not the cause.

Just for the record if someone else has this problem :)

The temporarly frozen apache was caused by mod_ntlm when it is in NTLM 
authentication mode. After I changed it to BASIC (still checking against 
the active directory) it runs smooth.

Jens

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] DocumentRoot - Apache2 - Ubuntu

2007-05-22 Thread Krist van Besien

> Line 5 of /etc/apache2/sites-enabled/000-default.
> looks like this:
> DocumentRoot /var/www/
>
> Is that what you are referring to?


Ubuntu stores website config ins /etc/apache2/sites-available. To
change the default host edit /etc/apache2/sites-available/000-default.
In /etc/apache2/sites-enabled you will find only links to
sites-available.

What I've done on my personal server (which also runs Ubuntu Linux) is
to have a seperate config file for each virtual server in
sites-available. In sites-enabled I've then made links to "activate"
those virtual hosts that I want to be active.

Krist

--
[EMAIL PROTECTED]
Bremgarten b. Bern, Switzerland
--
A: It reverses the normal flow of conversation.
Q: What's wrong with top-posting?
A: Top-posting.
Q: What's the biggest scourge on plain text email discussions?

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] Help needed in writing RewriteRule

2007-05-22 Thread Joshua Slive

On 5/22/07, Indraveni <[EMAIL PROTECTED]> wrote:


I pasted my apache2.conf file and my error log file
here, http://pastebin.ca/501636.

Need help in solving this issue.


Just some general advice:

I think you'll find that many people aren't all that interested in
wading through all your config and log details. You haven't even
identified what problem it is that you are trying to solve.

So how about telling us
1. Exactly what the problem is. (In other words, what happens when you
try to use this configuration.)
2. What are the relevant extracts from the log and config file.
(Providing the whole thing for backup is fine, but you should do the
work of identifying what the important parts are for and putting them
in your email.)

Joshua.

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] Memory consumption on Netware

2007-05-22 Thread Matt Rigor
Currently, I have a Netware 6.5 SP 5 box with Apache 2.2.4 & PHP 5.2.1. 
The Apache and PHP packages are built by a gentleman named Guenter.  The
server is a Xeon class processor with 4 GB of memory.  A few other
services reside on the box which are DNS/DHCP server by Netware, Tomcat,
and James.  I do not believe these other applications play a factor into
my issue, but want to be thorough.  Within Apache, there are
approximately 5 web sites with one receiving the bulk of the traffic. 
The site is primarily built with HTML, PHP, CSS, and Javascript.

Now on to the issue.  For quite sometime now, the Apache process loads
into memory and begins consuming the remaining memory.  After a period
of time the Netware OS adjusts to free more memory which Apache happily
consumes until it crashes the server with an out of memory error.  As an
example, in less than 24 hours the Apache process is 740 MB.  This
consumption appears to be load specific, meaning that during off-peak
hours the memory consumption stops or is negligible.  I have worked with
the builder of the Apache and PHP packages, but he has been unable to
replicate nor has he heard of any issue with similar symptoms from his
install base.  

The Apache process runs in threaded mode, and I have attempted to cause
the threads to be killed and restarted by adjusting the
MaxRequestsPerChild to 1,000 from infinite.  This was suggested by
gentleman that assists with the Apache documentation, but unfortunately
it did not make a noticeable difference. 

Being on a Netware box,I feel my options are somewhat limited at least
to my knowledge because I need to have packages or modules built for
Netware from source with some kind of special compiler software. 
Anyway, I would like some suggestions on debugging the issue.  Is there
something in Apache or for Apache that will let me see what is being
held within memory or just a way to narrow down my search to a certain
section(s) of a site.

Any assistance is appreciated.  Thanks for you time.

Matt Rigor
Bound To Stay Bound Books

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] Authorization Fine Tuning

2007-05-22 Thread Joshua Slive

On 5/22/07, Chaim Keren Tzion <[EMAIL PROTECTED]> wrote:

Hi,

I am running subversion through Apache/2.2.3.

I would like to set it up so that:
1. From within the LAN, Anonymous users can only checkout (read-only)
2. From within the LAN, Authenticated users can check in and out (Read-write)
3. From outside the LAN, Anonymous users should be rejected and Authenticated
users will get read-write rights.

So far I have this which works for the internal network as desired but I don't
know how to procede with the config for external connections.

   
  Require valid-user
   

Any ideas?


I believe it will work if you add this to the above:

Require valid-user
Satisfy Any
Order Allow,Deny
Allow from internal.example.com


Joshua.

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] Need installer of Apache 2.0.5x (64 bit) for windows 64-bit platform

2007-05-22 Thread renu tiwari
Hi, 
   
  I need installable of Apache 2.0.5x (64 bit) for windows 64-bit platform...
   
  Please let me know..
   
  Thanx...

   Shape Yahoo! in your own image.  Join our Network Research Panel 
today!http://us.rd.yahoo.com/evt=48517/*http://surveylink.yahoo.com/gmrs/yahoo_panel_invite.asp?a=7
 hot CTA = Join our Network Research Panel

Re: [EMAIL PROTECTED] Experience in mod_rewrite in Apache 2.2

2007-05-22 Thread Joshua Slive

On 5/21/07, Dmitriy Gorbenko <[EMAIL PROTECTED]> wrote:


And now, I did not understand how, by using only one
RewriteRule ^(.+)$ ${rd:%{THE_REQUEST}}
rule and one programs, I can achieve such goal.


I can't personally tell what question you are asking here. What
exactly are you having problems with? Do you want help writing the
external map program?

As general advice, I'd avoid the external map program if possible.
They tend to be complicated, fragile, and error-prone. Plus they are
serialized, so they could become a bottleneck for your site.

I bet you could accomplish the same thing use a dbm RewriteMap.

Joshua.

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] Reverse Proxy problem

2007-05-22 Thread sharath reddy

Hi All,

I am running apache server ver 2.0.59 on a Linux box on port443 (https).

Here are my Reverse proxy lines...


ServerName example.com

SSLEngine on
SSLOptions +StrictRequire

   SSLRequireSSL


SSLProtocol -all +TLSv1 +SSLv3
SSLCipherSuite HIGH:MEDIUM:!aNULL:+SHA1:+MD5:+HIGH:+MEDIUM

SSLMutex file:/opt/web/apache2/log/ssl_mutex

SSLRandomSeed startup file:/dev/urandom 1024
SSLRandomSeed connect file:/dev/urandom 1024

SSLSessionCache shm:/opt/web/apache2/logs/ssl_cache_shm
SSLSessionCacheTimeout 600

SSLPassPhraseDialog builtin
SSLCertificateFile /opt/web/apache2/ssl/certs/server.crt
SSLCertificateKeyFile /opt/web/apache2/ssl/private/server.key

SSLVerifyClient none
SSLProxyEngine on


ProxyPass / https://internal.com/mobi/
ProxyHTMLURLMap https://internal.com /
ProxyPassReverse / https://internal.com/mobi/

SetOutputFilter  proxy-html
ProxyHTMLURLMap  / /
RequestHeaderunset  Accept-Encoding



What i want to do is, to redirect all requests on this server to
https://internal.com/mobi/ (not transparently)

When i access https://example.com then apache is redirecting to
https://internal.com/mobi/ , which is a web page with form.

But when i fill out web form, and submit with button,  it is going no
where(showing blank page). ( i.e., when i submit with button,  it is
accessing "https://example.com/mobi/track.do"; instead of "
https://example.com/track.do"; )


Thanks,
Sharath


[EMAIL PROTECTED] Apache web server efficiency go down with increasing uptime.

2007-05-22 Thread kalaj

I use Apache 2.2.4,MySQL 5.0 and PHP 5.2.2 run on Debian VPS system,
I noticed that my web server efficiency go down with a web server
increasing uptime,for example,when I restart the web server that will
cut down the WordPress php page produce time half.
Any idea with this?
-- 
View this message in context: 
http://www.nabble.com/Apache-web-server-efficiency-go-down-with-increasing-uptime.-tf3797420.html#a10741507
Sent from the Apache HTTP Server - Users mailing list archive at Nabble.com.


-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] Experience in mod_rewrite in Apache 2.2

2007-05-22 Thread Dmitriy Gorbenko
Joshua Slive wrote:
> On 5/21/07, Dmitriy Gorbenko <[EMAIL PROTECTED]> wrote:
>
>> And now, I did not understand how, by using only one
>> RewriteRule ^(.+)$ ${rd:%{THE_REQUEST}}
>> rule and one programs, I can achieve such goal.
>
> I can't personally tell what question you are asking here. What
> exactly are you having problems with? Do you want help writing the
> external map program?
>
> As general advice, I'd avoid the external map program if possible.
> They tend to be complicated, fragile, and error-prone. Plus they are
> serialized, so they could become a bottleneck for your site.
>
> I bet you could accomplish the same thing use a dbm RewriteMap.
>
> Joshua.
>
> -
> The official User-To-User support forum of the Apache HTTP Server
> Project.
> See http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: [EMAIL PROTECTED]
>   "   from the digest: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
>
>

Well, I'll try to explain: let's look at fictitious session between
server and client:

C:  GET http://ofiice.domain.com/document.html
S:  302 - http://login.domain.com/ (redirect method)
C:  GET http://login.domain.com/?username=aaa&passwd=bbb
S:  302 - http://office.domain.com/afjgn39nxnx8n3f29ss/document.html
(redirect method)
C:  GET http://office.domain.com/afjgn39nxnx8n3f29ss/document.html
S:  gives resource content (proxy method)

Clients tries to acces some document, but server want client to be
authenticated before. Server create some session-id
(afjgn39nxnx8n3f29ss), and client should use this session-id to access
resource office.domain.com. And later, than client send this session-id.
server will proxy such request to local network server, which is not
public, and which contains 'document.html' resource.

Or another example, where client, 1 hour later, tries to access the same
document:

C:  GET http://office.domain.com/afjgn39nxnx8n3f29ss/document.html
S:  302 - http://login.domain.com/ (redirect method)
C:  GET http://login.domain.com/?username=aaa&passwd=bbb
S:  302 - http://office.domain.com/jh43hkjshdfsdyhskdvc/document.html
(redirect method)
C:  GET http://office.domain.com/jh43hkjshdfsdyhskdvc/document.html
S:  gives resource content (proxy method)

I think I could do it using mod_rewrite, but now I understand, that I
can't: in apache config file I can create rules, which will makes an
decision: redirect or proxy request of client (R and P flags).
But by using external program I can't make such decision.
And that is a problem.




smime.p7s
Description: S/MIME Cryptographic Signature


Re: [EMAIL PROTECTED] Experience in mod_rewrite in Apache 2.2

2007-05-22 Thread Joshua Slive

On 5/22/07, Dmitriy Gorbenko <[EMAIL PROTECTED]> wrote:


I think I could do it using mod_rewrite, but now I understand, that I
can't: in apache config file I can create rules, which will makes an
decision: redirect or proxy request of client (R and P flags).
But by using external program I can't make such decision.
And that is a problem.


Ahhh, so your question is: how do I activate rewrite flags from a prg:
RewriteMap. (Not at all clear from your first email.)

Indeed, this can't be done directly, but it can be easily done
indirectly. For example, have your map program prefix the URL with
proxy: or redirect: depending on what you want, and then:
RewriteRule ^(.+)$ ${rd:%{THE_REQUEST}}
RewriteRule ^proxy:(.*)$ $1 [P]
RewriteRule ^redirect:(.*)$ $1 [R]

(Use the RewriteLog to debug!)

Joshua.

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] httpd.conf for oracle app 10g

2007-05-22 Thread Red al tubor

Hello Guys,
I am new here, i am facing a problem in our Oracle Application Server 10g
... i configured httpd.conf in a recommended way from oracle...
The Problem is that when more than 500 session are opened the Server fails
down and the cpu is running full 100%
httpd process in top takes 100% from the cpu???

Any idea about how it works and how can i manage the TCP/IP connection? or
Maximize the performance

Any idea guys...
Thanks in advance...
Regards,
RN


Re: [EMAIL PROTECTED] httpd.conf for oracle app 10g

2007-05-22 Thread Joshua Slive

On 5/22/07, Red al tubor <[EMAIL PROTECTED]> wrote:

Hello Guys,
I am new here, i am facing a problem in our Oracle Application Server 10g
... i configured httpd.conf in a recommended way from oracle...
The Problem is that when more than 500 session are opened the Server fails
down and the cpu is running full 100%
httpd process in top takes 100% from the cpu???

Any idea about how it works and how can i manage the TCP/IP connection? or
Maximize the performance


To start, you need to change the MaxClients directive to limit the
number of apache connections to something your system can handle.

Then if you want to figure out why you can't handle more connections,
you need to do some work. Exactly what are the limiting resources? Do
you have enough memory? Is the database responding quickly enough?

It is rather likely that the problems are related to the oracle
modules included with apache, since all the heavy-lifting (database
connections and processing) are going on in those modules. To be sure,
you'd need to get a live backtrace of some of the httpd child
processes that are pegging the cpu:
http://httpd.apache.org/dev/debugging.html#backtrace

Joshua.

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] Apache 2.0.59 LDAP authentication

2007-05-22 Thread Srikanth S

Hi,

I am currently using Apache 1.3.28 for which I have customized
mod_ldap_auth.c file.  When I upgraded Apache to 2.0.59, this module
is not getting loaded and Apache is not coming up

Where Can I get source file for mod_ldap_auth.c file for 1.3.28
version and also for 2.0.59 version, so that I can compare those

Srikanth

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] httpd.conf for oracle app 10g

2007-05-22 Thread Josh Wyatt

Red al tubor wrote:

Hello Guys,
I am new here, i am facing a problem in our Oracle Application Server 10g
... i configured httpd.conf in a recommended way from oracle...
The Problem is that when more than 500 session are opened the Server fails
down and the cpu is running full 100%
httpd process in top takes 100% from the cpu???

Any idea about how it works and how can i manage the TCP/IP connection? or
Maximize the performance

Any idea guys...
Thanks in advance...
Regards,
RN



Hi, 


Can you provide us with more information about your installation?

1. Are you running SSL?

2. What class (architecture, number of CPUs, physical configuration) of 
webserver platform?

If your server hardware is moderately recent (i.e. pentium 4 xeon-class) with 
enough memory, you should be able to handle hundreds of clients easily.  We run 
our Oracle AS frontends with 'MaxClients 1024' on dual-CPU xeon systems, 
hyperthreaded, and normally see a load average of about 1 with ~400 clients.  
These also run SSL natively.

Thanks,
Josh


-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] DocumentRoot - Apache2 - Ubuntu

2007-05-22 Thread Tim Johnson
On Tuesday 22 May 2007 11:06, Krist van Besien wrote:
> > > Line 5 of /etc/apache2/sites-enabled/000-default.
> > > looks like this:
> > > DocumentRoot /var/www/
> > >
> > > Is that what you are referring to?
>
> Ubuntu stores website config ins /etc/apache2/sites-available. To
> change the default host edit /etc/apache2/sites-available/000-default.
> In /etc/apache2/sites-enabled you will find only links to
> sites-available.
>
> What I've done on my personal server (which also runs Ubuntu Linux) is
> to have a seperate config file for each virtual server in
> sites-available. In sites-enabled I've then made links to "activate"
> those virtual hosts that I want to be active.
   Hi Krist:
   To make sure that I follow you - as an example, I would put symlink
   called @cgi-bin under sites-enabled and then by able to access it as
   http://localhost/cgi-bin/script.extension ?

   I don't necessarily have to change the document root, I can handle symlinks
   being overwritten by an upgrade
   apache doesn't seem recognize /var/www/cgi-bin (where cgi-bin is a symlink)
   thanks
   tim 

-- 
Tim Johnson <[EMAIL PROTECTED]>
Palmer, Alaska, USA

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] RE:Oracle Application Server 10g HTTPD???

2007-05-22 Thread Red al tubor

Hello,

No we are not using SSL, the server is intel based loaded with 4 GB of RAM
and Intel(R) Xeon(TM) CPU 3.20GHz...
I dunno what is happening even the database works smoothly...

Regards,
RN


[EMAIL PROTECTED] A reverse proxy question

2007-05-22 Thread Dragon
Before asking my question, I need to explain a little about what I am 
trying to do.


I have a reverse proxy set up in Apache 2.0.54 using the instructions 
detailed in http://www.apachetutor.org/admin/reverseproxies


It works great for the most part but I have one little thing that 
causes me some problems in the Rails application I am proxying. The 
problem revolves around some internal redirects the application does 
that I am currently "fixing" by hard coding the URL as seen from the 
outside world into the application where it does these page 
redirects. This is not an ideal solution as it breaks things if I 
access the application directly instead of through the proxy.


What I want to be able to do is to inform the application that it is 
being accessed through the proxy so it can programmatically determine 
the correct redirect URL regardless of how it is being accessed. 
Essentially what I want to do is somehow pass the actual request URL 
through the proxy to the application so it can dynamically fix the 
URL to access the correct page.


So my question is this, is there some (easy?) way through either HTTP 
headers or some other mechanism that I can inform the application 
that it is being accessed through the proxy?


Dragon

~~~
 Venimus, Saltavimus, Bibimus (et naribus canium capti sumus)
~~~


-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] Problem with Internet Explorer

2007-05-22 Thread Marcos R. Cardoso
I might be missing something but I still couldn't figure it out, I'm 
trying to send a special caracter through a link, the character is ´ 
(acute). Using Firefox, Opera and Netscape it works, but using Internet 
Explorer I get an Apache error. Checking the log, the error is:


(22)Invalid argument: utf8 to ucs2 conversion failed on this string: 
REDIRECT_QUERY_STRING=acao=validar&idUnico=40ccca7f7eabc579a7091c62b77a64c0&login=bd\xb4amaral&cdPessoa=72991&link=


and the problem resides in the "login=bd\xb4amaral" section of the error.

If anyone went through this situation and managed to fix it, please help me.


TIA,

--
Marcos R. Cardoso
Seção de Documentação e Automação
Biblioteca Universitária
FURB - Blumenau
(047) 3321-0660


-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] Apache LDAP authentication module

2007-05-22 Thread Srikanth S

Hi,

I am currently using Apache 1.3.28 for which I have customized
mod_ldap_auth.c file.  When I upgraded Apache to 2.0.59, this module
is not getting loaded and Apache is not coming up

Where can I get source file for mod_ldap_auth.c file for 1.3.28
version and also for 2.0.59 version, so that I can compare those

Srikanth

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] A reverse proxy question

2007-05-22 Thread Joshua Slive

On 5/22/07, Dragon <[EMAIL PROTECTED]> wrote:

Before asking my question, I need to explain a little about what I am
trying to do.

I have a reverse proxy set up in Apache 2.0.54 using the instructions
detailed in http://www.apachetutor.org/admin/reverseproxies

It works great for the most part but I have one little thing that
causes me some problems in the Rails application I am proxying. The
problem revolves around some internal redirects the application does
that I am currently "fixing" by hard coding the URL as seen from the
outside world into the application where it does these page
redirects. This is not an ideal solution as it breaks things if I
access the application directly instead of through the proxy.

What I want to be able to do is to inform the application that it is
being accessed through the proxy so it can programmatically determine
the correct redirect URL regardless of how it is being accessed.
Essentially what I want to do is somehow pass the actual request URL
through the proxy to the application so it can dynamically fix the
URL to access the correct page.

So my question is this, is there some (easy?) way through either HTTP
headers or some other mechanism that I can inform the application
that it is being accessed through the proxy?


First question: Why aren't you just letting ProxyPassReverse do its
job? It should be able to handle rewriting of redirects.

Anyway, if you want the origin server to know that stuff went through
the proxy, there are lots of clues in the request headers by default.
Take a look at X-Forwarded-For, etc.

Or you can always add your own header:
RequestHeader Set X-Went-Through-Proxy Yes

Joshua.

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] A reverse proxy question

2007-05-22 Thread Dragon

Joshua Slive wrote:


First question: Why aren't you just letting ProxyPassReverse do its
job? It should be able to handle rewriting of redirects.


That is the crux of the problem. I am not sure if I can explain this 
correctly but it appears that the application is doing something 
internally that hijacks the normal HTTP redirect flow so the normal 
mechanism works fine for almost everything except a few cases. I 
really don't know how to capture the actual headers so I can tell you 
exactly what is happening here when it does not work.


On the application side, I can get to the method calls that force the 
redirects and add the correct path to them. I have not gotten into 
the internals of these methods and don't want to go rewriting 
libraries to "fix" the problem. This is a special case which has come 
about because I can't get Ruby and Rails to serve properly via Apache 
directly on a Plesk based machine. (I posted about that a couple of 
months ago and never found a resolution to the premature end of 
script headers problems I was seeing). I ended up having to run an 
instance of lighttpd on another port and then proxy to it to make the 
application work at all.


So because I can't get the application running directly under Apache, 
I am forced to kludge together something that works but has a few 
quirks that need a bit of help to get around.



Anyway, if you want the origin server to know that stuff went through
the proxy, there are lots of clues in the request headers by default.
Take a look at X-Forwarded-For, etc.

Or you can always add your own header:
RequestHeader Set X-Went-Through-Proxy Yes


OK, will do. Now I have to figure out how to retrieve those headers 
in a Ruby application.


Dragon

~~~
 Venimus, Saltavimus, Bibimus (et naribus canium capti sumus)
~~~


-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] changing the error status code for forbidden resources

2007-05-22 Thread Bhagwati Gupta

Hi,
   I am running Apache 2.2.3 on my Debian 3.1 sarge machine. My local 
web security team has examined the system and generated a detailed 
security report. One of the issues that I am having difficulty to fix 
relates to hidden directories. I have been advised to change the server 
configuration such that '404 - not found' response is issued for 
forbidden resources as opposed to '403 - forbidden' response. I have 
tried looking on the web but have yet to find anything that could solve 
my problem. I am not sure exactly how server responses for hidden 
directories (or missing files) can be customized. Could you please help? 
Thanks!


bpg

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] httpd.conf for oracle app 10g

2007-05-22 Thread Red al tubor

Hello,

Something else guys?? how can i make or view the html pages when the server
goes down... to know where exactly the server stop Responding??? ...
And when the httpd process takes 100% from the cpu... i cannot switch to
oracle user using ( su - ..) The error is
" Resource temporarily unavailable " ???

Thanks in advance 

Regards,
RN


orignial_httpd.conf
Description: Binary data
-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

[EMAIL PROTECTED] RE:httpd.conf for oracle app 10g

2007-05-22 Thread Red al tubor

Hello,

Something else guys?? how can i make or view the html pages when the server
goes down... to know where exactly the server stop Responding??? ...
And when the httpd process takes 100% from the cpu... i cannot switch to
oracle user using ( su - ..) The error is
" Resource temporarily unavailable " ???

Thanks in advance 

Regards,
RN


[EMAIL PROTECTED] Can't find index.html

2007-05-22 Thread Richard Luckhurst
Hi 

This is probably a silly simple question. I have just set up Apache 2.2.4 on a
Fedora Core 4 box and am having a little trouble. When I browse to the website
url I find I get a messsage wanting to save or open the home page. I f I browse
to the url/index.html then the page opens fine. What have I forgotten to set up?

Regards,
Richard Luckhurst  



-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] Apache2 hangs once in a while

2007-05-22 Thread William A. Rowe, Jr.
[EMAIL PROTECTED] wrote:
>> On 4/5/07, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote:
>>
>>> The problem I have is that the server doesn't respond sometimes. Maybe
>>> this happens after I have done a lot of mysql database requests in a 
> short
>>> time but since I can't reproduce the error by putting many requests in 
> I
>>> think this is not the cause.
> 
> Just for the record if someone else has this problem :)
> 
> The temporarly frozen apache was caused by mod_ntlm when it is in NTLM 
> authentication mode. After I changed it to BASIC (still checking against 
> the active directory) it runs smooth.

You are limited to 10 NTLM/login sessions on a windows desktop os (this
is enforced at the GNI provider layer).  Are you actually running on Windows
Server?  If not this will continue to be a problem for you with ntlm auth.
With windows server, you are limited to whatever number of *authenticated*
connections that specific OS permits.



-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] changing the error status code for forbidden resources

2007-05-22 Thread Joshua Slive

On 5/22/07, Bhagwati Gupta <[EMAIL PROTECTED]> wrote:

Hi,
I am running Apache 2.2.3 on my Debian 3.1 sarge machine. My local
web security team has examined the system and generated a detailed
security report. One of the issues that I am having difficulty to fix
relates to hidden directories. I have been advised to change the server
configuration such that '404 - not found' response is issued for
forbidden resources as opposed to '403 - forbidden' response. I have
tried looking on the web but have yet to find anything that could solve
my problem. I am not sure exactly how server responses for hidden
directories (or missing files) can be customized. Could you please help?
Thanks!


Sounds like a silly waste of time to me. (Actually, it's more than a
waste of time, it is deliberately crippling of HTTP.)

But anyway, if you want to lie about error codes, you can go all the
way and change the to redirects:

ErrorDocument 404 http://example.com/not_found.html
ErrorDocument 403 http://example.com/not_found.html

If you just want to lie about 403 only, then the only way I know
(other than editing the code)  is to point to a cgi script that emits
its own "Status: 404" header:
ErrorDocument 403 /cgi-bin/lie-about-the-status-code.pl

Joshua.

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] RE:httpd.conf for oracle app 10g

2007-05-22 Thread Joshua Slive

On 5/22/07, Red al tubor <[EMAIL PROTECTED]> wrote:

Hello,

Something else guys?? how can i make or view the html pages when the server
goes down... to know where exactly the server stop Responding??? ...
And when the httpd process takes 100% from the cpu... i cannot switch to
oracle user using ( su - ..) The error is
" Resource temporarily unavailable " ???


The whole idea is that you need to see exactly what resource is
running out. How you do that depends on your OS and your specific
setup.

The technique that I referenced for getting a backtrace does not
require viewing html pages.

Joshua.

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] fully qualified domain name - Problem

2007-05-22 Thread Tim Johnson
When I restart apache2 on ubuntu 7.04 (amd_64) with the following command:
/etc/init.d/apache2 restart
I get the following message:
"""
Could not reliably determine the server's fully qualified domain name, using 
127.0.1.1 for ServerName
"""
What is the solution?
Is there documentation on this subject?
thanks
Tim

-- 
Tim Johnson <[EMAIL PROTECTED]>
Palmer, Alaska, USA

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] fully qualified domain name - Problem

2007-05-22 Thread Joshua Slive

On 5/22/07, Tim Johnson <[EMAIL PROTECTED]> wrote:

When I restart apache2 on ubuntu 7.04 (amd_64) with the following command:
/etc/init.d/apache2 restart
I get the following message:
"""
Could not reliably determine the server's fully qualified domain name, using
127.0.1.1 for ServerName


http://wiki.apache.org/httpd/Errors/CouldNotDetermineServerName

Joshua.

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] fully qualified domain name - Problem

2007-05-22 Thread Dragon

Tim Johnson did speak thusly:

When I restart apache2 on ubuntu 7.04 (amd_64) with the following command:
/etc/init.d/apache2 restart
I get the following message:
"""
Could not reliably determine the server's fully qualified domain name, using
127.0.1.1 for ServerName
"""
What is the solution?


You need to have a ServerName directive in your configuration.

If you do not, and you don't have your DNS configured to allow a 
reverse lookup on the IP address, you will get exactly what you see.



Is there documentation on this subject?


Yes, on the Apache web site. The documentation there is quite good, 
actually, I will say that it is outstanding for an open source 
project such as Apache.


All configuration directives for the core functions and modules are 
documented there. Third party modules will be documented elsewhere 
(sometimes quite minimally), you'll have to search for them.


Dragon

~~~
 Venimus, Saltavimus, Bibimus (et naribus canium capti sumus)
~~~


-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] Apache LDAP authentication module

2007-05-22 Thread Joshua Slive

On 5/22/07, Srikanth S <[EMAIL PROTECTED]> wrote:

Hi,

I am currently using Apache 1.3.28 for which I have customized
mod_ldap_auth.c file.  When I upgraded Apache to 2.0.59, this module
is not getting loaded and Apache is not coming up

Where can I get source file for mod_ldap_auth.c file for 1.3.28
version and also for 2.0.59 version, so that I can compare those


Recent version of apache come with an ldap auth module:
http://httpd.apache.org/docs/2.0/mod/mod_auth_ldap.html

I have no idea how it compares to the 1.3 solutions, since I've never
used ldap auth.

Joshua.

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] Help needed in writing RewriteRule

2007-05-22 Thread Indraveni
Hi, 

 My problem was that, I am not able access my site,
and when I am tring to do that, I am see a message
like 

Forbidden:
You dont have permission to access this page.

I attached my error log file also in pastebin.

But my problem is solved yesterday.

I missed enabling proxy_http and proxy_balancer
modules. Once I enabled them it worked fine.

Thankyou for your mail

Regards
Indraveni



--- Joshua Slive <[EMAIL PROTECTED]> wrote:

> On 5/22/07, Indraveni <[EMAIL PROTECTED]> wrote:
> 
> > I pasted my apache2.conf file and my error log
> file
> > here, http://pastebin.ca/501636.
> >
> > Need help in solving this issue.
> 
> Just some general advice:
> 
> I think you'll find that many people aren't all that
> interested in
> wading through all your config and log details. You
> haven't even
> identified what problem it is that you are trying to
> solve.
> 
> So how about telling us
> 1. Exactly what the problem is. (In other words,
> what happens when you
> try to use this configuration.)
> 2. What are the relevant extracts from the log and
> config file.
> (Providing the whole thing for backup is fine, but
> you should do the
> work of identifying what the important parts are for
> and putting them
> in your email.)
> 
> Joshua.
> 
>
-
> The official User-To-User support forum of the
> Apache HTTP Server Project.
> See http://httpd.apache.org/userslist.html> for
> more info.
> To unsubscribe, e-mail:
> [EMAIL PROTECTED]
>"   from the digest:
> [EMAIL PROTECTED]
> For additional commands, e-mail:
> [EMAIL PROTECTED]
> 
> 



  Office firewalls, cyber cafes, college labs, don't allow you to download 
CHAT? Click here: http://in.messenger.yahoo.com/webmessengerpromo.php

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: [EMAIL PROTECTED] Can't find index.html

2007-05-22 Thread Boyle Owen
> -Original Message-
> From: Richard Luckhurst [mailto:[EMAIL PROTECTED] 
> Sent: Wednesday, May 23, 2007 1:09 AM
> To: users@httpd.apache.org
> Subject: [EMAIL PROTECTED] Can't find index.html
> 
> Hi 
> 
> This is probably a silly simple question. I have just set up 
> Apache 2.2.4 on a
> Fedora Core 4 box and am having a little trouble. When I 
> browse to the website
> url 

"website url"? would that be http://server or http://server/?

> I find I get a messsage wanting to save or open the home 
> page. 

That looks like a wrong mime-type.. Can you check the response header
(eg, via LiveHTTPHeaders extension in FireFox)? 

BTW, what *exactly* is the browser prompting you to save (ie, the "home
page")?

> I f I browse
> to the url/index.html then the page opens fine. What have I 
> forgotten to set up?

Something to do with apache's self-referential URLs and/or the
directory-indexing mechanism...

Check out these two directives:
http://httpd.apache.org/docs/2.2/mod/core.html#usecanonicalname
http://httpd.apache.org/docs/2.2/mod/mod_dir.html#directoryindex

If, after digesting the information therein and trying a few things, it
still "doesn't work", post back. If you can, quote the headers returned
by the server.

Rgds,
Owen Boyle
Disclaimer: Any disclaimer attached to this message may be ignored. 

> 
> Regards,
> Richard Luckhurst  
> 
> 
> 
> -
> The official User-To-User support forum of the Apache HTTP 
> Server Project.
> See http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: [EMAIL PROTECTED]
>"   from the digest: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
>
 
 
This message is for the named person's use only. It may contain confidential, 
proprietary or legally privileged information. No confidentiality or privilege 
is waived or lost by any mistransmission. If you receive this message in error, 
please notify the sender urgently and then immediately delete the message and 
any copies of it from your system. Please also immediately destroy any 
hardcopies of the message. You must not, directly or indirectly, use, disclose, 
distribute, print, or copy any part of this message if you are not the intended 
recipient. The sender's company reserves the right to monitor all e-mail 
communications through their networks. Any views expressed in this message are 
those of the individual sender, except where the message states otherwise and 
the sender is authorised to state them to be the views of the sender's company.

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]