[EMAIL PROTECTED] How can I limit access only to specific URLs?

2007-09-24 Thread Vitaly
 I have a website (virtual server) and many DNS
aliases pointed to the same server.

But I have some directory which should be accessible
only via specific DNS alias (== URL). 
If/How this can be done?

E.g, I have a.example.com, b.example.com,
c.example.com pointed to the same virtualhost.
And for a.example.com I'd like to provide access to
some dir as http://a.example.com/only_for_a.
(it sholdn't be accessible as 
http://b.example.com/only_for_a)




   

Need a vacation? Get great deals
to amazing places on Yahoo! Travel.
http://travel.yahoo.com/

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: [EMAIL PROTECTED] SSL server IP/port conflict

2007-09-24 Thread johan.boye
Thanks you very much for all answers. The best way seems to add an dedicated IP 
for the SSL stuff :-/  

   Take care & see you soon

> -Message d'origine-
> De : Matus UHLAR - fantomas [mailto:[EMAIL PROTECTED] 
> Envoyé : dimanche 23 septembre 2007 17:58
> À : users@httpd.apache.org
> Objet : Re: [EMAIL PROTECTED] SSL server IP/port conflict
> 
> On 21.09.07 16:33, Axel-Stéphane  SMORGRAV wrote: HTTPS and 
> NameVirtualHost
> > do not go well together. NVH is based on the Host header. 
> However Apache
> > cannot read the Host header before the SSL session has been 
> established.
> > But in order to establish the SSL session, Apache needs to know what
> > virtual host it is for to determine what certificate to 
> use. This is catch
> > 20...
> > 
> > Add another IP to the server.
> 
> wildcard certificates can help in some situations, but many ppl don't
> recommend them...
> -- 
> Matus UHLAR - fantomas, [EMAIL PROTECTED] ; http://www.fantomas.sk/
> Warning: I wish NOT to receive e-mail advertising to this address.
> Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
> "They say when you play that M$ CD backward you can hear 
> satanic messages."
> "That's nothing. If you play it forward it will install Windows."
> 
> -
> The official User-To-User support forum of the Apache HTTP 
> Server Project.
> See http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: [EMAIL PROTECTED]
>"   from the digest: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
> 
> 

"Les informations contenues dans ce message électronique peuvent être de nature 
confidentielles et soumises à une obligation de secret. Elles sont destinées à 
l'usage exclusif du réel destinataire. Si vous n'êtes pas le réel destinataire, 
ou si vous recevez ce message par erreur, merci de le détruire immédiatement et 
de le notifier à son émetteur."

 "The information contained in this e-mail may be privileged and confidential. 
It is intended for the exclusive use of the designated recipients named above. 
If you are not the intended recipient or if you receive this e-mail in error, 
please delete it and immediately notify the sender."


-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] How can I limit access only to specific URLs?

2007-09-24 Thread Thomas Antony



 I have a website (virtual server) and many DNS
aliases pointed to the same server.

But I have some directory which should be accessible
only via specific DNS alias (== URL). 
If/How this can be done?


E.g, I have a.example.com, b.example.com,
c.example.com pointed to the same virtualhost.
And for a.example.com I'd like to provide access to
some dir as http://a.example.com/only_for_a.
(it sholdn't be accessible as 
http://b.example.com/only_for_a)





Hi.

Use the Location directive in each virtual host block.
http://httpd.apache.org/docs/2.2/en/mod/core.html#location


Order Deny,Allow
Deny from all
Allow from 192.168.1 192.168.99


or


Order Allow,Deny
Allow from all
Deny from 192.168.22.5 192.168.33




Thomas

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: [EMAIL PROTECTED] How can I limit access only to specific URLs?

2007-09-24 Thread Boyle Owen
> -Original Message-
> From: Vitaly [mailto:[EMAIL PROTECTED] 
> Sent: Monday, September 24, 2007 9:59 AM
> To: users@httpd.apache.org
> Subject: [EMAIL PROTECTED] How can I limit access only to specific URLs? 
> 
>  I have a website (virtual server) and many DNS
> aliases pointed to the same server.


> 
> But I have some directory which should be accessible
> only via specific DNS alias (== URL). 
> If/How this can be done?
> 
> E.g, I have a.example.com, b.example.com,
> c.example.com pointed to the same virtualhost.
> And for a.example.com I'd like to provide access to
> some dir as http://a.example.com/only_for_a.
> (it sholdn't be accessible as 
> http://b.example.com/only_for_a)
> 
> 

Do you mean that the different aliases lead to the same website (ie you
are using many ServerAlias directives in a single VH)?

If so, you could do this using environment variables. First, set the env
depending on the Host name in the request;

SetEnvIf Host a.example.com allow_host_A

Second, "Allow" based on whether the env is set;


  Order Deny,Allow
  Deny from all
  Allow from env=allow_host_A


See http://httpd.apache.org/docs/2.2/mod/mod_authz_host.html#allow (esp
environment variables) and
http://httpd.apache.org/docs/2.2/mod/mod_setenvif.html#setenvif for more
details.



Rgds,
Owen Boyle
Disclaimer: Any disclaimer attached to this message may be ignored. 


> 
> 
>
> __
> __
> Need a vacation? Get great deals
> to amazing places on Yahoo! Travel.
> http://travel.yahoo.com/
> 
> -
> The official User-To-User support forum of the Apache HTTP 
> Server Project.
> See http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: [EMAIL PROTECTED]
>"   from the digest: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
>
 
 
This message is for the named person's use only. It may contain confidential, 
proprietary or legally privileged information. No confidentiality or privilege 
is waived or lost by any mistransmission. If you receive this message in error, 
please notify the sender urgently and then immediately delete the message and 
any copies of it from your system. Please also immediately destroy any 
hardcopies of the message. You must not, directly or indirectly, use, disclose, 
distribute, print, or copy any part of this message if you are not the intended 
recipient. The sender's company reserves the right to monitor all e-mail 
communications through their networks. Any views expressed in this message are 
those of the individual sender, except where the message states otherwise and 
the sender is authorised to state them to be the views of the sender's company.

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: [EMAIL PROTECTED] How can I limit access only to specific URLs?

2007-09-24 Thread Vitaly

--- Boyle Owen <[EMAIL PROTECTED]> wrote:

> > -Original Message-
> > From: Vitaly [mailto:[EMAIL PROTECTED] 
> > Sent: Monday, September 24, 2007 9:59 AM
> > To: users@httpd.apache.org
> > Subject: [EMAIL PROTECTED] How can I limit access only
> to specific URLs? 
> > 
> >  I have a website (virtual server) and many DNS
> > aliases pointed to the same server.
> 
> 
> > 
> > But I have some directory which should be
> accessible
> > only via specific DNS alias (== URL). 
> > If/How this can be done?
> > 
> > E.g, I have a.example.com, b.example.com,
> > c.example.com pointed to the same virtualhost.
> > And for a.example.com I'd like to provide access
> to
> > some dir as http://a.example.com/only_for_a.
> > (it sholdn't be accessible as 
> > http://b.example.com/only_for_a)
> > 
> > 
> 
> Do you mean that the different aliases lead to the
> same website (ie you
> are using many ServerAlias directives in a single
> VH)?
> 
> If so, you could do this using environment
> variables. First, set the env
> depending on the Host name in the request;
> 
> SetEnvIf Host a.example.com allow_host_A
> 
> Second, "Allow" based on whether the env is set;
> 
> 
>   Order Deny,Allow
>   Deny from all
>   Allow from env=allow_host_A
> 
> 
> See
>
http://httpd.apache.org/docs/2.2/mod/mod_authz_host.html#allow
> (esp
> environment variables) and
>
http://httpd.apache.org/docs/2.2/mod/mod_setenvif.html#setenvif
> for more
> details.
> 
> 
> 
> Rgds,
> Owen Boyle

Owen, thank you!
It works!
Vitaly


  

Shape Yahoo! in your own image.  Join our Network Research Panel today!   
http://surveylink.yahoo.com/gmrs/yahoo_panel_invite.asp?a=7 



-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] Re: Apache 2.2, rotatelogs.exe, and Windows

2007-09-24 Thread Norman Peelman

Sander Temme wrote:


On Sep 15, 2007, at 8:30 AM, Mark A. Craig wrote:

Nothing?  No one has ever used rotatelogs.exe?  Well, surely all you 
pros out there are rotating your companies' logs somehow... what and 
how are you doing it, and is it something I can use?


Rotatelogs should once again be usable as of 2.2.7.  Before, the 
brokenness lay in the fact that it would leak stale rotatelogs.exe 
processes and cmd.exe shells upon server stop, start, restart or child 
process recycling (like crashes).  Your config file problem is likely 
just that: a config file problem.  Your config files should be ASCII, 
and there should be no need to edit them with anything more 
sophisticated than Notepad.


I have the following invocation of rotatelogs commented out in one of 
my configurations:


CustomLog "|d:/httpd-2.2.3-ssl/bin/rotatelogs.exe 
d:/cedserver/logs/access-%Y-%m-%d.log 86400 -420" common


Note 1) forward slashes 2) no spaces in the paths (perhaps you can do 
that with careful quoting but I didn't have the patience" 3) 24 * 60 * 
60 == 86400 seconds in a day (not a week like another respondent seems 
to think) and -420 is 7 timezones west of GMT, your mileage may vary.




Yes, that was a typo on my part... was waiting for someone to notice. :)

Norm

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] Apache2 file upload speed limit

2007-09-24 Thread mczip

I have website where users are able to upload some files to my website.
Is there some mod or way that allows me to limit speed of maximum upload 
speed from user to my webserver ? (iptables isn't option)

Im looking for "limiting speed per virtualhost".
I know mod-cband but it only limits download speed and not upload speed.

Im using dedicated server on Linux and  Apache/2.2.4.



-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] How can I limit access only to specific URLs?

2007-09-24 Thread Vitaly

--- Thomas Antony <[EMAIL PROTECTED]> wrote:

> 
> >  I have a website (virtual server) and many DNS
> > aliases pointed to the same server.
> > 
> > But I have some directory which should be
> accessible
> > only via specific DNS alias (== URL). 
> > If/How this can be done?
> > 
> > E.g, I have a.example.com, b.example.com,
> > c.example.com pointed to the same virtualhost.
> > And for a.example.com I'd like to provide access
> to
> > some dir as http://a.example.com/only_for_a.
> > (it sholdn't be accessible as 
> > http://b.example.com/only_for_a)
> > 
> > 
> 
> Hi.
> 
> Use the Location directive in each virtual host
> block.
>
http://httpd.apache.org/docs/2.2/en/mod/core.html#location
> 
> 
>   Order Deny,Allow
>   Deny from all
>   Allow from 192.168.1 192.168.99
> 
> 
> or
> 
> 
>   Order Allow,Deny
>   Allow from all
>   Deny from 192.168.22.5 192.168.33
> 
> 
>
 
Thomas, Thanks for  your answer!
In fact, I want to limit access by URL, not by source
IP/domain. 
Solution with Apache variables, suggested by Thomas,
solved my problem.


   

Looking for a deal? Find great prices on flights and hotels with Yahoo! 
FareChase.
http://farechase.yahoo.com/

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] help about a rewrite rule

2007-09-24 Thread tech user
Hello,

I need to rewrite a request url,but I'm not sure how to do it correctly.
The incoming url form is like,

http://www.example.com/script?param1=xx¶m2=yy

The desired rewritten url is,

http://www.example.com/xx_yy.html


Please help me the correct syntax.Thanks in advance.



  Sick of deleting your inbox? Yahoo!7 Mail has free unlimited storage.
http://au.docs.yahoo.com/mail/unlimitedstorage.html


-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] Question about proxy_ajp, sessions and paths...

2007-09-24 Thread Haim Ashkenazi
On 9/24/07, Sander Temme <[EMAIL PROTECTED]> wrote:
>
> On Sep 23, 2007, at 5:13 AM, Haim Ashkenazi wrote:
>
> > ProxyPass / ajp://localhost:8009/abc/
> > sessions are not kept in tomcat. every request is like a new one.
> >
> > Is this a normal behavior? Is there a workaround for that?
>
> Yes, because Tomcat will set a JSESSIONID cookie for path /abc, and
> the browser will not send that back because it's going to path /
> foo.jsp and not /abc/foo.jsp.
>
> You need to have mod_proxy munge the cookie path on the way out.  It
> has a directive for that, but I'm too tired to look that up right now.
Thanx, I've looked it up, found it and it solved the problem.

The directive was:
ProxyPassReverseCookiePath /abc /

Bye
--
Haim

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] mod_log_config-question: Forcing Apache to resolve address

2007-09-24 Thread Rikard Bosnjakovic
Some week ago I solved this problem, but accidentally my httpd.conf
got removed (no backups) so I don't remember how I did and I cannot
find anything of value on Google or on
http://httpd.apache.org/docs/2.0/mod/mod_log_config.html where I
thought I found it last time.

What I want to do is to force Apache to resolve the addresses (of the
incoming request) before writing to the log-file. Which log-format, or
config-hack, does this for me?


-- 
- Rikard - http://bos.hack.org/cv/

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] help about a rewrite rule

2007-09-24 Thread Joshua Slive
On 9/24/07, tech user <[EMAIL PROTECTED]> wrote:
> Hello,
>
> I need to rewrite a request url,but I'm not sure how to do it correctly.
> The incoming url form is like,
>
> http://www.example.com/script?param1=xx¶m2=yy
>
> The desired rewritten url is,
>
> http://www.example.com/xx_yy.html
>
>
> Please help me the correct syntax.Thanks in advance.

See:
http://wiki.apache.org/httpd/RewriteQueryString

It is unclear to me exactly what you mean by "incoming" url and
"desired" url. What exactly is the user going to type in their browser
(or in their links), what do you want them to see in the URL bar of
their browser, and what exactly needs to be called on the server?

Joshua.

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] mod_log_config-question: Forcing Apache to resolve address

2007-09-24 Thread Joshua Slive
On 9/24/07, Rikard Bosnjakovic <[EMAIL PROTECTED]> wrote:
> Some week ago I solved this problem, but accidentally my httpd.conf
> got removed (no backups) so I don't remember how I did and I cannot
> find anything of value on Google or on
> http://httpd.apache.org/docs/2.0/mod/mod_log_config.html where I
> thought I found it last time.
>
> What I want to do is to force Apache to resolve the addresses (of the
> incoming request) before writing to the log-file. Which log-format, or
> config-hack, does this for me?

http://httpd.apache.org/docs/2.2/mod/core.html#hostnamelookups

Joshua.

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] Apache in embedded product

2007-09-24 Thread Malluru, Puri
Hi
I got Apache built for our embedded product (Linux running on Powerpc
platform). I configured it for http running on port 9090 and https
running on port 9091. I made htdocs a sym link to a folder with contents
that I created using "wget -m ..." command.
I found Apache serving https just fine. When I try to access the same
site with http, IE just waits forever.

Please note that this whole build folder is mounted as nfs folder to
embedded codec before starting apache.

Am I missing any gotchas?

Thanks for your help.
puri

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] Apache in embedded product

2007-09-24 Thread Sander Temme


On Sep 24, 2007, at 3:09 PM, Malluru, Puri wrote:


I found Apache serving https just fine. When I try to access the same
site with http, IE just waits forever.

Please note that this whole build folder is mounted as nfs folder to
embedded codec before starting apache.

Am I missing any gotchas?


Yeah, don't use IE.

I'm serious. IE is fine for browsing web sites, but for testing your  
configuration you'd be much better off with a tool that tells you  
what's going wrong.  For instance


curl -I http://yourbox:9090/ should give you a header back
curl -kI https://yourbox:9091/ should give you a header back, or a  
connection error, or an openssl error, or...


So, the two million dollar questions:

1) What error does your client give you, and at which level?
2) What Does The Apache Error Log Say?

S.

--
Sander Temme
[EMAIL PROTECTED]
PGP FP: 51B4 8727 466A 0BC3 69F4  B7B8 B2BE BC40 1529 24AF





smime.p7s
Description: S/MIME cryptographic signature


RE: [EMAIL PROTECTED] Apache in embedded product

2007-09-24 Thread Malluru, Puri
I did what you suggested. Below is my shell session contents.

+++
/home/pmalluru/work> curl -k  -I https://puritruman:9091/
HTTP/1.1 200 OK
Date: Mon, 24 Sep 2007 22:27:17 GMT
Server: Apache/2.2.6 (Unix) mod_ssl/2.2.6 OpenSSL/0.9.8a
Last-Modified: Fri, 07 Sep 2007 14:06:23 GMT
ETag: "51d8080-1e2a-24d535c0"
Accept-Ranges: bytes
Content-Length: 7722
Content-Type: text/html

/home/pmalluru/work> curl  -I http://puritruman:9090/

/home/pmalluru/work>
++
I pressed Ctrl+C to kill curl session above.
I don't see an entry in access_log or in error_log for 9090 access.

Then I logged in to embedded box to make sure apache is listening on
port 9090.

Below is out of "netstat -l"
+
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address   Foreign Address
State  
tcp0  0 *:login *:*
LISTEN  
tcp0  0 *:shell *:*
LISTEN  
tcp0  0 *:webcache  *:*
LISTEN  
tcp0  0 *:tproxy*:*
LISTEN  
tcp0  0 *:7070  *:*
LISTEN  
tcp0  0 *:9090  *:*
LISTEN  
tcp0  0 *:9091  *:*
LISTEN  
tcp0  0 *:telnet*:*
LISTEN  
tcp0  0 *:polycom_api   *:*
LISTEN  
udp0  0 *:792   *:*

Active UNIX domain sockets (only servers)
Proto RefCnt Flags   Type   State I-Node Path
++

Thanks

-Original Message-
From: Sander Temme [mailto:[EMAIL PROTECTED] 
Sent: Monday, September 24, 2007 5:23 PM
To: users@httpd.apache.org
Subject: Re: [EMAIL PROTECTED] Apache in embedded product


On Sep 24, 2007, at 3:09 PM, Malluru, Puri wrote:

> I found Apache serving https just fine. When I try to access the same
> site with http, IE just waits forever.
>
> Please note that this whole build folder is mounted as nfs folder to
> embedded codec before starting apache.
>
> Am I missing any gotchas?

Yeah, don't use IE.

I'm serious. IE is fine for browsing web sites, but for testing your  
configuration you'd be much better off with a tool that tells you  
what's going wrong.  For instance

curl -I http://yourbox:9090/ should give you a header back
curl -kI https://yourbox:9091/ should give you a header back, or a  
connection error, or an openssl error, or...

So, the two million dollar questions:

1) What error does your client give you, and at which level?
2) What Does The Apache Error Log Say?

S.

-- 
Sander Temme
[EMAIL PROTECTED]
PGP FP: 51B4 8727 466A 0BC3 69F4  B7B8 B2BE BC40 1529 24AF




-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] No pidfile

2007-09-24 Thread Robinson Craig
Dear experts,

I have inherited administration for a particular APACHE setup. In the
conf file, it actually sets a location for the pidfile as follows:

PidFile /var/run/httpd.pid

However, upon listing the contents of /var/run/ there is no httpd.pid.
In fact, there is no httpd.pid on any server. The server is running.
Does anyone know how this could be?

Environment: Apache 1.3 on Solaris 8

Cheers, Craig


The information in this email together with any attachments is
intended only for the person or entity to which it is addressed
and may contain confidential and/or privileged material.
Any form of review, disclosure, modification, distribution
and/or publication of this email message is prohibited, unless
as a necessary part of Departmental business.
If you have received this message in error, you are asked to
inform the sender as quickly as possible and delete this message
and any copies of this message from your computer and/or your
computer system network.



-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] Only require satisfaction of one AuthType in 2.2

2007-09-24 Thread Joel Johnson
I'm setting up a site using Apache httpd 2.2 and an existing Kerberos
infrastructure and would like to optionally allow users to have single
sign-on with an existing Kerberos ticket. I'm using the Debian packaged [1]
mod_auth_kerb [2] to accomplish the authentication which is all working
smoothly.

The problem I'm running into is in designating the authentication as
*optional*. For example, I'd like to setup a wiki at wiki.and have the
contents publicly accessible, but require authentication for edits. I'd like
to first offer Kerberos authentication, but if that fails than still allow
access. The application would then check REMOTE_USER and honor its value if
set, or fallback to internal authentication if desired. This will also allow
me to configure the server such that if a user is local and has Kerberos
credentials they are seamlessly authenticated, but if not than I can have a
login screen authenticating internally against the same source. There are
several different ways that I will use this, but they all rely on optional
authentication support.

The working exclusively-Kerberos relevant config is simply:
AuthType Kerberos
require valid-user

I've tried using a "Satisfy any" directive as follows, but the "Allow from
all" seems to take precedence over any other method:
AuthType Kerberos
require valid-user
Allow from all
Satisfy any

I've also considered using a "KrbAuthoritative Off" directive to allow
checking to fallthrough to the next module, but I can't find an
authentication module with "accept all" semantics.

One option does look promising, but it only available in trunk/2.3 which I
can't switch to for this project, but the following should work (corrections
on assumption are welcome) by using two authorization providers with a
single authentication method:
AuthType Kerberos

Require valid-user
Require all allowed


My goals are that I'd like the location to be available to all, and if
authorized that is an extra bonus and allows seamlessness, customized
content and others, but it should *not* be a requirement. Additionally, I
want the content to be available under a single canonical URI which will be
well-known, so symlinking directories with different s is not an
option.

If I've missed something simple, I'd love to have it pointed out, or if
there is a best practice for this sort of setup please share!


Many thanks for any guidance or pointers!


The script that I'm using to do basic testing on the authentication is
(basically, I also have some logic to remove the Kerberos realm that isn't
included):

";
  }
?>

[1] http://packages.debian.org/etch/libapache2-mod-auth-kerb
[2] http://modauthkerb.sourceforge.net/

--
Joel Johnson


-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: [EMAIL PROTECTED] No pidfile

2007-09-24 Thread Axel-Stéphane SMORGRAV
Is it possible that the directory is not writable to the Apache process owner?? 
If the server listens to ports below 1024 that's unlikely since it must start 
as root and will have root privileges when creating the pid and log files, but 
you never know...

-ascs

-Message d'origine-
De : Robinson Craig [mailto:[EMAIL PROTECTED] 
Envoyé : mardi 25 septembre 2007 03:34
À : users@httpd.apache.org
Objet : [EMAIL PROTECTED] No pidfile

Dear experts,

I have inherited administration for a particular APACHE setup. In the conf 
file, it actually sets a location for the pidfile as follows:

PidFile /var/run/httpd.pid

However, upon listing the contents of /var/run/ there is no httpd.pid.
In fact, there is no httpd.pid on any server. The server is running.
Does anyone know how this could be?

Environment: Apache 1.3 on Solaris 8

Cheers, Craig


The information in this email together with any attachments is intended only 
for the person or entity to which it is addressed and may contain confidential 
and/or privileged material.
Any form of review, disclosure, modification, distribution and/or publication 
of this email message is prohibited, unless as a necessary part of Departmental 
business.
If you have received this message in error, you are asked to inform the sender 
as quickly as possible and delete this message and any copies of this message 
from your computer and/or your computer system network.



-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] help about a rewrite rule

2007-09-24 Thread tech user

--- Joshua Slive <[EMAIL PROTECTED]> wrote:

> 
> See:
> http://wiki.apache.org/httpd/RewriteQueryString
> 

Thank you so much Joshua.
I want to rewrite the url from,
http://www.example.com/movie_play.php?mid=45298

to,
http://www.example.com/movie45298.html

I added the commands in httpd.conf:

RewriteEngine on
RewriteCond %{QUERY_STRING} ^mid=(\d+)$
RewriteRule ^/movie_play.php /movie%1.html  [R,L]

but this can't work.I got the rewritten url as,
http://www.example.com/movie45298.html?mid=45298

the `?mid=45298` is not needed.
Please give more suggestions,thanks.





  Sick of deleting your inbox? Yahoo!7 Mail has free unlimited storage.
http://au.docs.yahoo.com/mail/unlimitedstorage.html


-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: [EMAIL PROTECTED] help about a rewrite rule

2007-09-24 Thread Axel-Stéphane SMORGRAV
RewriteEngine on
RewriteCond %{QUERY_STRING} ^mid=(\d+)$
RewriteRule ^/movie_play.php /movie%1.html?  [R]
  
-Message d'origine-
De : tech user [mailto:[EMAIL PROTECTED] 
Envoyé : mardi 25 septembre 2007 08:18
À : users@httpd.apache.org
Objet : Re: [EMAIL PROTECTED] help about a rewrite rule


--- Joshua Slive <[EMAIL PROTECTED]> wrote:

> 
> See:
> http://wiki.apache.org/httpd/RewriteQueryString
> 

Thank you so much Joshua.
I want to rewrite the url from,
http://www.example.com/movie_play.php?mid=45298

to,
http://www.example.com/movie45298.html

I added the commands in httpd.conf:

RewriteEngine on
RewriteCond %{QUERY_STRING} ^mid=(\d+)$
RewriteRule ^/movie_play.php /movie%1.html  [R,L]

but this can't work.I got the rewritten url as,
http://www.example.com/movie45298.html?mid=45298

the `?mid=45298` is not needed.
Please give more suggestions,thanks.





  Sick of deleting your inbox? Yahoo!7 Mail has free unlimited storage.
http://au.docs.yahoo.com/mail/unlimitedstorage.html


-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: [EMAIL PROTECTED] help about a rewrite rule

2007-09-24 Thread tech user
Thanks a lot.It works fine.

--- Axel-Stéphane  SMORGRAV <[EMAIL PROTECTED]> wrote:

> RewriteEngine on
> RewriteCond %{QUERY_STRING} ^mid=(\d+)$
> RewriteRule ^/movie_play.php /movie%1.html?  [R]
>   



  Sick of deleting your inbox? Yahoo!7 Mail has free unlimited storage.
http://au.docs.yahoo.com/mail/unlimitedstorage.html


-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: [EMAIL PROTECTED] No pidfile

2007-09-24 Thread Robinson Craig
Thanks Axel-Stéphane,

Not sure what's going on, but restarted Apache and now have pidfile in correct 
location. Maybe it's possible for pidfile to be deleted whilst it is still 
running but after it starts??

Cheers, Craig

-Original Message-
From: Axel-Stéphane SMORGRAV [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, 25 September 2007 4:17 PM
To: users@httpd.apache.org
Subject: RE: [EMAIL PROTECTED] No pidfile

Is it possible that the directory is not writable to the Apache process owner?? 
If the server listens to ports below 1024 that's unlikely since it must start 
as root and will have root privileges when creating the pid and log files, but 
you never know...

-ascs

-Message d'origine-
De : Robinson Craig [mailto:[EMAIL PROTECTED]
Envoyé : mardi 25 septembre 2007 03:34
À : users@httpd.apache.org
Objet : [EMAIL PROTECTED] No pidfile

Dear experts,

I have inherited administration for a particular APACHE setup. In the conf 
file, it actually sets a location for the pidfile as follows:

PidFile /var/run/httpd.pid

However, upon listing the contents of /var/run/ there is no httpd.pid.
In fact, there is no httpd.pid on any server. The server is running.
Does anyone know how this could be?

Environment: Apache 1.3 on Solaris 8

Cheers, Craig


The information in this email together with any attachments is intended only 
for the person or entity to which it is addressed and may contain confidential 
and/or privileged material.
Any form of review, disclosure, modification, distribution and/or publication 
of this email message is prohibited, unless as a necessary part of Departmental 
business.
If you have received this message in error, you are asked to inform the sender 
as quickly as possible and delete this message and any copies of this message 
from your computer and/or your computer system network.



-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: [EMAIL PROTECTED] No pidfile

2007-09-24 Thread Boyle Owen
> -Original Message-
> From: Robinson Craig [mailto:[EMAIL PROTECTED] 
> Sent: Tuesday, September 25, 2007 8:54 AM
> To: users@httpd.apache.org
> Subject: RE: [EMAIL PROTECTED] No pidfile
> 
> Thanks Axel-Stéphane,
> 
> Not sure what's going on, but restarted Apache and now have 
> pidfile in correct location. Maybe it's possible for pidfile 
> to be deleted whilst it is still running but after it starts??

Sure it is... The pidfile is filled after apache starts (and is assigned a 
process id). It is simply a bookkeeping record so apachectl knows which process 
to "kill" when you do "apachectl stop". It hasn't anything to do with a running 
apache.

Rgds,
Owen Boyle
Disclaimer: Any disclaimer attached to this message may be ignored. 

> 
> Cheers, Craig
> 
> -Original Message-
> From: Axel-Stéphane SMORGRAV 
> [mailto:[EMAIL PROTECTED] 
> Sent: Tuesday, 25 September 2007 4:17 PM
> To: users@httpd.apache.org
> Subject: RE: [EMAIL PROTECTED] No pidfile
> 
> Is it possible that the directory is not writable to the 
> Apache process owner?? If the server listens to ports below 
> 1024 that's unlikely since it must start as root and will 
> have root privileges when creating the pid and log files, but 
> you never know...
> 
> -ascs
> 
> -Message d'origine-
> De : Robinson Craig [mailto:[EMAIL PROTECTED]
> Envoyé : mardi 25 septembre 2007 03:34
> À : users@httpd.apache.org
> Objet : [EMAIL PROTECTED] No pidfile
> 
> Dear experts,
> 
> I have inherited administration for a particular APACHE 
> setup. In the conf file, it actually sets a location for the 
> pidfile as follows:
> 
> PidFile /var/run/httpd.pid
> 
> However, upon listing the contents of /var/run/ there is no httpd.pid.
> In fact, there is no httpd.pid on any server. The server is running.
> Does anyone know how this could be?
> 
> Environment: Apache 1.3 on Solaris 8
> 
> Cheers, Craig
> 
> **
> **
> The information in this email together with any attachments 
> is intended only for the person or entity to which it is 
> addressed and may contain confidential and/or privileged material.
> Any form of review, disclosure, modification, distribution 
> and/or publication of this email message is prohibited, 
> unless as a necessary part of Departmental business.
> If you have received this message in error, you are asked to 
> inform the sender as quickly as possible and delete this 
> message and any copies of this message from your computer 
> and/or your computer system network.
> **
> **
> 
> 
> -
> The official User-To-User support forum of the Apache HTTP 
> Server Project.
> See http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: [EMAIL PROTECTED]
>"   from the digest: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
> 
> 
> 
> -
> The official User-To-User support forum of the Apache HTTP 
> Server Project.
> See http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: [EMAIL PROTECTED]
>"   from the digest: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
> 
> 
> -
> The official User-To-User support forum of the Apache HTTP 
> Server Project.
> See http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: [EMAIL PROTECTED]
>"   from the digest: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
>
 
 
This message is for the named person's use only. It may contain confidential, 
proprietary or legally privileged information. No confidentiality or privilege 
is waived or lost by any mistransmission. If you receive this message in error, 
please notify the sender urgently and then immediately delete the message and 
any copies of it from your system. Please also immediately destroy any 
hardcopies of the message. You must not, directly or indirectly, use, disclose, 
distribute, print, or copy any part of this message if you are not the intended 
recipient. The sender's company reserves the right to monitor all e-mail 
communications through their networks. Any views expressed in this message are 
those of the individual sender, except where the message states otherwise and 
the sender is authorised to state them to be the views of the sender's company.

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]