Re: [EMAIL PROTECTED] AuthLDAPUrl

2007-11-02 Thread Melanie Pfefer
Hi

I do not have the module mod_authn_alias.so loaded.

Do I need to configure apache with special option?
thanks.
--- Tony Stevenson <[EMAIL PROTECTED]> wrote:

> Melanie,
> 
> Sorry my mistake, I wasn't paying much attention
> yesterday.
> 
> What you need to look at is mod_authn_alias:  
>
http://httpd.apache.org/docs/2.2/mod/mod_authn_alias.html
> With this you can create a list of authentication
> types, look at the 
> examples, these show exactly what you are trying to
> do.
> 
> Sorry for not picking this up yesterday.
> 
> 
> Tony
> 
> 
> Melanie Pfefer wrote:
> > hi Tony, all,
> >
> > Line 177:
> >
> > AuthLDAPUrl
> >
>
ldap://PALADAR/ou=users,dc=uk,dc=siroe,dc=com?sAMAccountName?sub?
> >
>
ldap://PALADAR/ou=users,dc=us,dc=siroe,dc=com?sAMAccountName?sub?
> >
> > I searched on the web...seems apache does not
> allow 2
> > ldap urls in AuthLDAPUrl
> >
> > any hints please?
> >
> >
> > --- Tony Stevenson <[EMAIL PROTECTED]> wrote:
> >
> >   
> >> What do you have on line 177?
> >> Better yet why dont you show me all your relevant
> >> config please?
> >>
> >> Cheers,
> >> Tony
> >>
> >>
> >>
> >> Melanie Pfefer wrote:
> >> 
> >>> thanks. But I got this error:
> >>>
> >>> Syntax error on line 177 of
> >>> /usr/local/apache2/conf/httpd.conf:
> >>> Invalid LDAP connection mode setting: must be
> one
> >>>   
> >> of
> >> 
> >>> NONE, SSL, or TLS/STARTTLS
> >>>
> >>>
> >>> any idea?
> >>>
> >>> thanks.
> >>> --- Tony Stevenson <[EMAIL PROTECTED]> wrote:
> >>>
> >>>   
> >>>   
>  On Thu, November 1, 2007 12:34 pm, Melanie
> Pfefer
>  wrote:
>  
>  
> > hi,
> >
> > AuthLDAPUrl can have multiple values?
> >
> >
> > AuthLDAPUrl ldap://. , ldap://.
> >
> >   
> >   
>  This is correct. If you use your last method,
> the
>  last entry will
>  overwrite the previous values. This is how it
>  
> >> should
> >> 
>  look:
> 
>  AuthLDAPUrl ldap://a.b.c ldap://d.e.f
>  
> >> ldap://g.h.i
> >> 
>  You get the idea.
> 
> 
> 
> 
>  
>  
> >
>
-
> >   
> >>>   
> >>>   
>  The official User-To-User support forum of the
>  Apache HTTP Server Project.
>  See
> http://httpd.apache.org/userslist.html>
>  
> >> for
> >> 
>  more info.
>  To unsubscribe, e-mail:
>  [EMAIL PROTECTED]
> "   from the digest:
>  [EMAIL PROTECTED]
>  For additional commands, e-mail:
>  [EMAIL PROTECTED]
> 
> 
>  
>  
> >>>
> >>>  
> >>>   
> >
>
___
> >   
> >>> Yahoo! Answers - Got a question? Someone out
> there
> >>>   
> >> knows the answer. Try it
> >> 
> >>> now.
> >>> http://uk.answers.yahoo.com/ 
> >>>   
> >>>   
> >
> >
> >
> >  
>
___
> 
> > Want ideas for reducing your carbon footprint?
> Visit Yahoo! For Good 
>
http://uk.promotions.yahoo.com/forgood/environment.html
> >
> >
>
-
> > The official User-To-User support forum of the
> Apache HTTP Server Project.
> > See http://httpd.apache.org/userslist.html>
> for more info.
> > To unsubscribe, e-mail:
> [EMAIL PROTECTED]
> >"   from the digest:
> [EMAIL PROTECTED]
> > For additional commands, e-mail:
> [EMAIL PROTECTED]
> >
> >   
> 
>
-
> The official User-To-User support forum of the
> Apache HTTP Server Project.
> See http://httpd.apache.org/userslist.html> for
> more info.
> To unsubscribe, e-mail:
> [EMAIL PROTECTED]
>"   from the digest:
> [EMAIL PROTECTED]
> For additional commands, e-mail:
> [EMAIL PROTECTED]
> 
> 



  ___
Yahoo! Answers - Got a question? Someone out there knows the answer. Try it
now.
http://uk.answers.yahoo.com/ 

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] ISSUE: Proxy-connection:Keep alive does not work for https on IE with apache 2

2007-11-02 Thread Nash Cherukuri
  Proxy-connection:Keep alive does not work for https on IE with apache 2
   
  CONNECT HTTP/1.0 host:443 issues on IE with apache 2
   
   
  Unfortunately IE uses HTTP/1.0 for CONNECT (i.e for tunneling https:// 
requests through a proxy) even if you specify 'use HTTP/1.1 ' in its 
preferences.
   
  The TCP connection gets closed immediately even though keep alive is set to 
ON in httpd.
  The problem is currently apache does not understand 
Proxy-connection:Keep-alive at all.It supports ordinary keep alive connection 
only .
   
  How do I check whether we use any authentication module et all.It seems that 
this issue exists only if we use some kind of authentication module.
   
  Can anyone help please?
   
  Thanks,
  Nagesh



RE: [EMAIL PROTECTED] compiling apache on windows with minimum foot print

2007-11-02 Thread Dragon

Ashwani Kumar Sharma wrote:

Hi,

Thanks for the reply.

Actually I want to compile the apache source code without including the extra
modules. So, wanted to know what are those modules.

In my application the apache's work is that it will simply send some jar
files to my user through web that's it. So, I want to reduce the foot print
of the apache so that it can fit into my application with minimum size.

 End original message. -

Why not use a light-weight HTTP server like Lighttpd or Mongrel? 
These are very fast and very small and can do exactly what you want 
with no fuss.


Dragon

~~~
 Venimus, Saltavimus, Bibimus (et naribus canium capti sumus)
~~~


-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] Why (and how) does it spawn additiomal processes?

2007-11-02 Thread Vertleyb
Hi all,

While debugging some issue I noticed that Apache sometimes (can't tell why and 
when) spawns additional processes.  The parent id
indicate that they are spawned by workers rather than by the process which is 
accepting connections.

Since this kind of behavior introduces some nasty issues with my code 
(especialy if done with fork), I would like to figure out
whether this behavior is normal, and why is this happenning...

I am using Apache 2.0.

Thanks in advance for any help.

Regards,
Arkadiy



-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] html not rendered in some browsers

2007-11-02 Thread Joshua Slive
On Nov 2, 2007 8:41 AM, Rick Hobson <[EMAIL PROTECTED]> wrote:
> Hi,
>
> I have been running Apache 2.2 on SuSe 10.2 for several months without any
> problems.
>
> Early yesterday evening all contact with the server was lost. This seems
> to have been a problem of some sort with networking rather than a problem
> with Apache2. The server is also running a Samba service and this couldn't
> be contacted either, nor could the machine be pinged.
>
> The machine was rebooted (cleanly using the appropriate command) and there
> were no obvious errors as it started up. The Samba service was restored
> and seems to be working normally. Apache2 restarted without any errors.
> Network connections were restored and seem to be working normally.
>
> However, none of the pages are now rendered in Firefox or Konqueror, they
> simply display the html, whereas IE6 renders the pages normally!!

This is a very strong sign that the Content-Type headers emitted by
the server are incorrect. MSIE has a bad habit of ignoring these
headers and guessing at the content-type.

So check your AddType/DefaultType/TypesConfig directives in httpd.conf
and also look at the raw HTTP headers from the server for more clues:
http://wiki.apache.org/httpd/WatchingHttpHeaders

Joshua.

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] Httpd mpm problem

2007-11-02 Thread Joshua Slive
On Oct 31, 2007 11:07 PM, Lahiru Gunathilake <[EMAIL PROTECTED]> wrote:
> Thanks joshua,
>
> I've changed the httpd.conf and included extras/httpd-mpm.conf and
> extras/httpd-default.conf files.Now i can see that my changes affects
> the out put of Apache Benchmark.
> Our product is not having segmentation faults with worker mpm.

Do you mean "not" or "now"? If you are seeing seg faults, you need to
get out your debugger and see what is causing them. You'll never get
good performance out of a seg faulting server.

> If you
> have any idea please tell.Do we need to change the mpm according to our
> need.We basically sending xml files to out soap engine with concurrency
> level of 50 and number of requests of 5000.I want to know whether this
> load is much heavy for worker or not.
> Personally what is the MPM you suggest to use in heavy loads.

Concurrency of 50 is nothing. I don't know what you mean by "number of
requests of 5000". Is that per minute?

Worker (or perhaps event) are usually the best choice for high
performance applications. But there is no magic formula. Getting the
best performance involves a careful examination of the bottlenecks
(resource limitations) and tuning around them. In other words, what is
causing the slow performance? Are you out of memory? Is the processor
pegged? Is the network saturated?

Joshua.

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] AuthLDAPUrl

2007-11-02 Thread Tony Stevenson
If you want to use multiple LDAP servers to protect one location, then 
you will need something like this yes.

If you dont have the module loaded you will need to load it to use it.

If you dont currently have the modulem then you will need to tell us 
what version of Apache you are usuing, how it was built, what OS you are 
using, and its' version.


Tony

Melanie Pfefer wrote:

Hi

I do not have the module mod_authn_alias.so loaded.

Do I need to configure apache with special option?
thanks.
--- Tony Stevenson <[EMAIL PROTECTED]> wrote:

  

Melanie,

Sorry my mistake, I wasn't paying much attention
yesterday.

What you need to look at is mod_authn_alias:  



http://httpd.apache.org/docs/2.2/mod/mod_authn_alias.html
  

With this you can create a list of authentication
types, look at the 
examples, these show exactly what you are trying to

do.

Sorry for not picking this up yesterday.


Tony


Melanie Pfefer wrote:


hi Tony, all,

Line 177:

AuthLDAPUrl

  

ldap://PALADAR/ou=users,dc=uk,dc=siroe,dc=com?sAMAccountName?sub?
  
ldap://PALADAR/ou=users,dc=us,dc=siroe,dc=com?sAMAccountName?sub?
  

I searched on the web...seems apache does not
  

allow 2


ldap urls in AuthLDAPUrl

any hints please?


--- Tony Stevenson <[EMAIL PROTECTED]> wrote:

  
  

What do you have on line 177?
Better yet why dont you show me all your relevant
config please?

Cheers,
Tony



Melanie Pfefer wrote:



thanks. But I got this error:

Syntax error on line 177 of
/usr/local/apache2/conf/httpd.conf:
Invalid LDAP connection mode setting: must be
  

one

  
  

of



NONE, SSL, or TLS/STARTTLS


any idea?

thanks.
--- Tony Stevenson <[EMAIL PROTECTED]> wrote:

  
  
  

On Thu, November 1, 2007 12:34 pm, Melanie


Pfefer


wrote:




hi,

AuthLDAPUrl can have multiple values?


AuthLDAPUrl ldap://. , ldap://.

  
  
  

This is correct. If you use your last method,


the


last entry will
overwrite the previous values. This is how it



should



look:

AuthLDAPUrl ldap://a.b.c ldap://d.e.f



ldap://g.h.i



You get the idea.








-
  
  
  
  
  
  

The official User-To-User support forum of the
Apache HTTP Server Project.
See


http://httpd.apache.org/userslist.html>




for



more info.
To unsubscribe, e-mail:
[EMAIL PROTECTED]
   "   from the digest:
[EMAIL PROTECTED]
For additional commands, e-mail:
[EMAIL PROTECTED]





 
  
  

___
  
  
  

Yahoo! Answers - Got a question? Someone out
  

there

  
  

knows the answer. Try it



now.
http://uk.answers.yahoo.com/ 
  
  
  


 
  

___
  

Want ideas for reducing your carbon footprint?
  
Visit Yahoo! For Good 



http://uk.promotions.yahoo.com/forgood/environment.html
  
  

-
  

The official User-To-User support forum of the
  

Apache HTTP Server Project.


See http://httpd.apache.org/userslist.html>
  

for more info.


To unsubscribe, e-mail:
  

[EMAIL PROTECTED]


   "   from the digest:
  

[EMAIL PROTECTED]


For additional commands, e-mail:
  

[EMAIL PROTECTED]

  
  


-
  

The official User-To-User support forum of the
Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for
more info.
To unsubscribe, e-mail:
[EMAIL PROTECTED]
   "   from the digest:
[EMAIL PROTECTED]
For additional commands, e-mail:
[EMAIL PROTECTED]







  ___
Yahoo! Answers - Got a question? Someone out there knows the answer. Try it
now.
http://uk.answers.yahoo.com/ 


-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

  


-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] problem with NAT, Public IP's and SSL cert

2007-11-02 Thread Krist van Besien
On Nov 2, 2007 11:33 AM, Matus UHLAR - fantomas <[EMAIL PROTECTED]> wrote:
> > > I think that it is some limitation of Apache that it
> > > cannot listen on virtual public IP, but only on IP's which host directly
> > > uses.
>
> On 01.11.07 13:10, Krist van Besien wrote:
> > This is not a limitation of apache, but a limitation of the IP protocol.
>
> pardon, it's more the limitation of HTTP/SSL protocol. Some browsers and
> servers may even support SSL renegotiation, but I currently don't know about
> any.

Pardon, but reread what the OP wrote and what I answered.


Krist


-- 
[EMAIL PROTECTED]
[EMAIL PROTECTED]
Bremgarten b. Bern, Switzerland
--
A: It reverses the normal flow of conversation.
Q: What's wrong with top-posting?
A: Top-posting.
Q: What's the biggest scourge on plain text email discussions?

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] AuthLDAPUrl

2007-11-02 Thread Tony Stevenson

Melanie,

Sorry my mistake, I wasn't paying much attention yesterday.

What you need to look at is mod_authn_alias:  
http://httpd.apache.org/docs/2.2/mod/mod_authn_alias.html
With this you can create a list of authentication types, look at the 
examples, these show exactly what you are trying to do.


Sorry for not picking this up yesterday.


Tony


Melanie Pfefer wrote:

hi Tony, all,

Line 177:

AuthLDAPUrl
ldap://PALADAR/ou=users,dc=uk,dc=siroe,dc=com?sAMAccountName?sub?
ldap://PALADAR/ou=users,dc=us,dc=siroe,dc=com?sAMAccountName?sub?

I searched on the web...seems apache does not allow 2
ldap urls in AuthLDAPUrl

any hints please?


--- Tony Stevenson <[EMAIL PROTECTED]> wrote:

  

What do you have on line 177?
Better yet why dont you show me all your relevant
config please?

Cheers,
Tony



Melanie Pfefer wrote:


thanks. But I got this error:

Syntax error on line 177 of
/usr/local/apache2/conf/httpd.conf:
Invalid LDAP connection mode setting: must be one
  

of


NONE, SSL, or TLS/STARTTLS


any idea?

thanks.
--- Tony Stevenson <[EMAIL PROTECTED]> wrote:

  
  

On Thu, November 1, 2007 12:34 pm, Melanie Pfefer
wrote:



hi,

AuthLDAPUrl can have multiple values?


AuthLDAPUrl ldap://. , ldap://.

  
  

This is correct. If you use your last method, the
last entry will
overwrite the previous values. This is how it


should


look:

AuthLDAPUrl ldap://a.b.c ldap://d.e.f


ldap://g.h.i


You get the idea.







-
  
  
  

The official User-To-User support forum of the
Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html>


for


more info.
To unsubscribe, e-mail:
[EMAIL PROTECTED]
   "   from the digest:
[EMAIL PROTECTED]
For additional commands, e-mail:
[EMAIL PROTECTED]






 
  

___
  

Yahoo! Answers - Got a question? Someone out there
  

knows the answer. Try it


now.
http://uk.answers.yahoo.com/ 
  
  




  ___ 
Want ideas for reducing your carbon footprint? Visit Yahoo! For Good  http://uk.promotions.yahoo.com/forgood/environment.html


-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

  


-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] mod_auth_dbmcookie.so (help!)

2007-11-02 Thread Nick Kew
On Fri, 2 Nov 2007 10:35:07 -0700 (PDT)
"Jeff Kilbride" <[EMAIL PROTECTED]> wrote:

> After looking around yesterday, I still can't find any info on this
> module.

If anyone on this list had heard of it, they'd probably have said
by now.  So if google is no help either, you can infer it's homebrew.

> > LoadModule
> > dbmcookie_auth_module /usr/lib/apache/1.3/mod_auth_dbmcookie.so

In the days of 1.3, everyone was writing authentication modules.
That includes lots of folks who would use scripting languages
for any other kind of extra functionality.

-- 
Nick Kew

Application Development with Apache - the Apache Modules Book
http://www.apachetutor.org/

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] html not rendered in some browsers

2007-11-02 Thread Rick Hobson

Hi,

I have been running Apache 2.2 on SuSe 10.2 for several months without any 
problems.


Early yesterday evening all contact with the server was lost. This seems 
to have been a problem of some sort with networking rather than a problem 
with Apache2. The server is also running a Samba service and this couldn't 
be contacted either, nor could the machine be pinged.


The machine was rebooted (cleanly using the appropriate command) and there 
were no obvious errors as it started up. The Samba service was restored 
and seems to be working normally. Apache2 restarted without any errors. 
Network connections were restored and seem to be working normally.


However, none of the pages are now rendered in Firefox or Konqueror, they 
simply display the html, whereas IE6 renders the pages normally!!


The server is set up to parse both .html and .shtml so that I can use 
server side includes on all pages. These seem to be working in all 
browsers, the html code displayed by Firefox and Konqueror shows all the 
SSI's as part of the file and IE displays the pages as expected.


No alterations have been made to the server configuration so I can only 
assume something has become corrupted.


Does anyone have any idea where I should start looking? I'm baffled.

Rick Hobson

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] Re: html not rendered in some browsers - problem solved

2007-11-02 Thread Rick Hobson

Hi,

Problem solved

/etc/mime.types had become corrupted and was of zero length. I have 
replaced it with a copy from another machine running the same O/S, 
restarted the browser and all seems well.


Apologies for creating unnecessary noise on the list.

Rick


On Fri, 2 Nov 2007, Rick Hobson wrote:


Hi,

I have been running Apache 2.2 on SuSe 10.2 for several months without any 
problems.


Early yesterday evening all contact with the server was lost. This seems to 
have been a problem of some sort with networking rather than a problem with 
Apache2. The server is also running a Samba service and this couldn't be 
contacted either, nor could the machine be pinged.


The machine was rebooted (cleanly using the appropriate command) and there 
were no obvious errors as it started up. The Samba service was restored and 
seems to be working normally. Apache2 restarted without any errors. Network 
connections were restored and seem to be working normally.


However, none of the pages are now rendered in Firefox or Konqueror, they 
simply display the html, whereas IE6 renders the pages normally!!


The server is set up to parse both .html and .shtml so that I can use server 
side includes on all pages. These seem to be working in all browsers, the 
html code displayed by Firefox and Konqueror shows all the SSI's as part of 
the file and IE displays the pages as expected.


No alterations have been made to the server configuration so I can only 
assume something has become corrupted.


Does anyone have any idea where I should start looking? I'm baffled.

Rick Hobson

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
 "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




--
__

Dr. R.J.Hobson
IT Manager/Learning Technology Co-ordinator
School of Chemistry, Food Biosciences and Pharmacy
University of Reading
RG6 6AD
0118 378 6375
__

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] problem with NAT, Public IP's and SSL cert

2007-11-02 Thread Matus UHLAR - fantomas
> On Nov 1, 2007 11:14 AM, Hans <[EMAIL PROTECTED]> wrote:
> > I have one main VIP 65.65.65.65 for vhosts which share that IP, and if
> > customer needs(like in the case of ssl) he will get another IP e.g.
> > 65.65.65.66. I always thought that for ssl is important public IP not
> > private on host. I think that it is some limitation of Apache that it
> > cannot listen on virtual public IP, but only on IP's which host directly
> > uses.

On 01.11.07 13:10, Krist van Besien wrote:
> This is not a limitation of apache, but a limitation of the IP protocol.

pardon, it's more the limitation of HTTP/SSL protocol. Some browsers and
servers may even support SSL renegotiation, but I currently don't know about
any.

> > I wonder how other hosting companies with load balance solved that
> > problem. I cannot believe that somebody with 200 domains and lets say
> > 150IP plays with port numbers.

> They either do that, work with ports, or what is more common,
> terminate SSL on the loadbalancer. In this scenario the cert gets
> installed on the loadbalancer, which does the SSL handshake and
> decoding, and then forward it to port 80 on one or several backend
> http server. There name based virtualhosts will work just fine.

and if this is not possile, the ISP has to configure more IPS or ports on
balancer AND webservers both. It's one of reasons my employer doesn't
support that yet (it's much work to do it manually and hard work to do that
automatically)

-- 
Matus UHLAR - fantomas, [EMAIL PROTECTED] ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Remember half the people you know are below average. 

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] Re: compiling apache on windows with minimum foot print

2007-11-02 Thread Mark A. Craig
What Bill was trying to tell you is that as of Apache 2.x the modules you're 
worried about are no longer compiled into the httpd.exe core.  They are compiled 
separately, and loaded dynamically according to whatever you specify in 
httpd.conf.  Simply comment out the lines in httpd.conf which would load the 
modules you don't need!  Have you not even installed Apache 2.2x and looked at 
httpd.conf or viewed the very adequate documentation?  I think doing either 
would have answered your question.


Does that hopefully end the misunderstanding?

Mark

 Original Message  
Subject: Re: [EMAIL PROTECTED] compiling apache on windows with minimum foot 
print
From: Ashwani Kumar Sharma <[EMAIL PROTECTED]>
To: users@httpd.apache.org
Date: Thursday, November 01, 2007 11:30:40 PM


Hi,

Thanks for the reply.

Actually I want to compile the apache source code without including the extra
modules. So, wanted to know what are those modules.

In my application the apache's work is that it will simply send some jar
files to my user through web that's it. So, I want to reduce the foot print
of the apache so that it can fit into my application with minimum size.




 


Thanks and Regards,

Ashwani Sharma

Mob: 09916454843

Off: +91-80-26265053


-Original Message-
From: William A. Rowe, Jr. [mailto:[EMAIL PROTECTED] 
Sent: Friday, November 02, 2007 11:11 AM

To: users@httpd.apache.org
Subject: Re: [EMAIL PROTECTED] compiling apache on windows with minimum foot
print

Ashwani Kumar Sharma wrote:

Hi team,

 


I want to compile apache with minimum footprint possible on *windows.*

For doing this I want to build it with only those modules without which 
apache cannot be built.


I want to exclude rest of the modules while building.


Generally you'll build with entirely loadable modules as of httpd 2.0, so
it's just a matter of changing the default httpd.conf and commenting out
all those you don't require.  MPM will be compiled in, of course.

Yes, httpd runs (plain file server) with nothing but the core, using what
ever files are in your docroot.

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



DISCLAIMER:
This message (including attachment if any) is confidential and may be 
privileged. If you have received this message by mistake please notify the 
sender by return e-mail and delete this message from your system. Any 
unauthorized use or dissemination of this message in whole or in part is 
strictly prohibited.
E-mail may contain viruses. Before opening attachments please check them for 
viruses and defects. While MindTree Consulting Limited (MindTree) has put in 
place checks to minimize the risks, MindTree will not be responsible for any 
viruses or defects or any forwarded attachments emanating either from within 
MindTree or outside.
Please note that e-mails are susceptible to change and MindTree shall not be 
liable for any improper, untimely or incomplete transmission.
MindTree reserves the right to monitor and review the content of all messages 
sent to or from MindTree e-mail address. Messages sent to or from this e-mail 
address may be stored on the MindTree e-mail system or else where.

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] AuthLDAPUrl

2007-11-02 Thread Melanie Pfefer
hi Tony, all,

Line 177:

AuthLDAPUrl
ldap://PALADAR/ou=users,dc=uk,dc=siroe,dc=com?sAMAccountName?sub?
ldap://PALADAR/ou=users,dc=us,dc=siroe,dc=com?sAMAccountName?sub?

I searched on the web...seems apache does not allow 2
ldap urls in AuthLDAPUrl

any hints please?


--- Tony Stevenson <[EMAIL PROTECTED]> wrote:

> What do you have on line 177?
> Better yet why dont you show me all your relevant
> config please?
> 
> Cheers,
> Tony
> 
> 
> 
> Melanie Pfefer wrote:
> > thanks. But I got this error:
> >
> > Syntax error on line 177 of
> > /usr/local/apache2/conf/httpd.conf:
> > Invalid LDAP connection mode setting: must be one
> of
> > NONE, SSL, or TLS/STARTTLS
> >
> >
> > any idea?
> >
> > thanks.
> > --- Tony Stevenson <[EMAIL PROTECTED]> wrote:
> >
> >   
> >> On Thu, November 1, 2007 12:34 pm, Melanie Pfefer
> >> wrote:
> >> 
> >>> hi,
> >>>
> >>> AuthLDAPUrl can have multiple values?
> >>>
> >>>
> >>> AuthLDAPUrl ldap://. , ldap://.
> >>>
> >>>   
> >> This is correct. If you use your last method, the
> >> last entry will
> >> overwrite the previous values. This is how it
> should
> >> look:
> >>
> >> AuthLDAPUrl ldap://a.b.c ldap://d.e.f
> ldap://g.h.i
> >>
> >> You get the idea.
> >>
> >>
> >>
> >>
> >> 
> >
>
-
> >   
> >> The official User-To-User support forum of the
> >> Apache HTTP Server Project.
> >> See http://httpd.apache.org/userslist.html>
> for
> >> more info.
> >> To unsubscribe, e-mail:
> >> [EMAIL PROTECTED]
> >>"   from the digest:
> >> [EMAIL PROTECTED]
> >> For additional commands, e-mail:
> >> [EMAIL PROTECTED]
> >>
> >>
> >> 
> >
> >
> >
> >  
>
___
> > Yahoo! Answers - Got a question? Someone out there
> knows the answer. Try it
> > now.
> > http://uk.answers.yahoo.com/ 
> >   
> 



  ___ 
Want ideas for reducing your carbon footprint? Visit Yahoo! For Good  
http://uk.promotions.yahoo.com/forgood/environment.html

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] Configuring one static host and one Rails host-but can't get both to work

2007-11-02 Thread john asmodeus

I just got an email saying this message didn't make it through the spam
filters, but when I came back to the site, it was there! So, I don't know...
I guess I will check back tomorrow and if it's gone, I will try to post it
again in a way that doesn't piss off your spambot.

Cheers
-- 
View this message in context: 
http://www.nabble.com/Configuring-one-static-host-and-one-Rails-host-but-can%27t-get-both-to-work-tf4736146.html#a13544093
Sent from the Apache HTTP Server - Users mailing list archive at Nabble.com.


-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] Very Puzzling Question About mod_rewrite

2007-11-02 Thread Krist van Besien
On Nov 2, 2007 2:59 AM, Jon Forrest <[EMAIL PROTECTED]> wrote:
> Joshua Slive wrote:
> > On Nov 1, 2007 8:45 PM, Jon Forrest <[EMAIL PROTECTED]> wrote:
> >> Joshua Slive wrote:
> >>
>
> >> Thanks. After doing what you suggest I can see a directory
> >> listing of http://www-demo.cchem.berkeley.edu/username/ which
> >> shows the index.html file. However, if I click on index.html
> >> I get a "404 Not Found" error, and the error log says
> >>
> >> File does not exist:
> >> /users/chemweb/apache2/http-cchem/htdocs/username/index.html
> >
> > So, where is the file actually located?
>
> /users/chemweb/apache2/htdocs/cchem/username/public_html/index.html
>
> I was hoping to put "public_html" after "username" in every
> access. I think my rewrite rules need to be more complicated.

That will indeed be needed.

However since it is /username/ that you need to replace with
/username/public_html/ it shouldn't be that hard.

RewriteRule   ^`/(\w+)/(.+)$   /$1/public_html/$2[L]

This will only work however if your user name only contains normal
characters and no slashes, but I assumed that this was the case.


Krist
(Disclaimer: I didn't get around to actually testing the above)

-- 
[EMAIL PROTECTED]
[EMAIL PROTECTED]
Bremgarten b. Bern, Switzerland
--
A: It reverses the normal flow of conversation.
Q: What's wrong with top-posting?
A: Top-posting.
Q: What's the biggest scourge on plain text email discussions?

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] Configuring one static host and one Rails host-but can't get both to work

2007-11-02 Thread Krist van Besien
On Nov 2, 2007 10:00 AM, john asmodeus <[EMAIL PROTECTED]> wrote:
>
> I just got an email saying this message didn't make it through the spam
> filters, but when I came back to the site, it was there! So, I don't know...
> I guess I will check back tomorrow and if it's gone, I will try to post it
> again in a way that doesn't piss off your spambot.

I had a look at the link you gave us. What is wrong with your config
is that for namevirtual hosts to work as expected all the blocks must
be configured the same.

You have:

NameVirtualHost 192.168.0.119

ServerName Rails_app
ServerAlias Rails_app
# rest of config snipped


NameVirtualHost *:80

ServerName HTML_site
ServerAlias HTML_site
# rest of config snipped.


But you probably should have:

NameVirtualHost *:80

ServerName Rails_app
ServerAlias Rails_app
# rest of config snipped


ServerName HTML_site
ServerAlias HTML_site
# rest of config snipped.


The "NameVirtualHost" statement tells your apache on which IP
address/port combination you want to have name based virtual hosts.
You then define these hosts with a succession of  blocks
that have the exact same IP address/port combination. The apache
server picks one of the virtual hosts by matchin the "host" header in
the http request with  ServerName or ServerAlias.

Krist

-- 
[EMAIL PROTECTED]
[EMAIL PROTECTED]
Bremgarten b. Bern, Switzerland
--
A: It reverses the normal flow of conversation.
Q: What's wrong with top-posting?
A: Top-posting.
Q: What's the biggest scourge on plain text email discussions?

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] Weird NameVirtualHost problem

2007-11-02 Thread tech1




I'm running apache 1.3 on a FreeBSD box. I've just started using 
NameVirtualHosts for about 100 web sites. There are other web sites on the 
server using individual IP addresses. The  
containers are all identical except for the info pertinent to each domain 
name and directory, they were ALL generated by a script, including the 
"old" ones. I've tested them and they are accurate. I rearranged the list 
in the conf file to make sure there wasn't an issue with one VirtualHost 
container. The problem: the first 10 or so that I set up 2 months ago work 
just fine, anything added after that doesn't work at all. I've checked DNS 
on the names that aren't working, and I've also run an 'httpd -S' and can 
see all of the NameVirtualHost domains with no errors. I've restarted the 
server and apache multiple times. I can't get anything other than the first 
batch to work.


I don't know what else to do I thought maybe it was a DNS cache related 
thing so I waited a couple days to see if they'd kick in. I tried removing 
the whole NameVirtualHost block and restarting the server, then putting it 
all back and restarting again. I tried rearranging them all so that others 
would be listed before the ones that work. Nothing I've done makes any 
difference.


I don't want to "waste" 100 IP addresses, anyone have any ideas or 
suggestions? Any other places I might look?





-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] mod_auth_dbmcookie.so (help!)

2007-11-02 Thread Jeff Kilbride
After looking around yesterday, I still can't find any info on this module.
Does anyone have any ideas on what other lists I can post this question to?
I'm not sure if it's appropriate for the dev lists.

Thanks,
--jeff



> I've recently taken over as sysadmin at a new company. The apache servers
> are using an auth module I've never seen before and can't find any
> information for on the web. The module is listed in the config as:
>
> LoadModule dbmcookie_auth_module /usr/lib/apache/1.3/mod_auth_dbmcookie.so
>
> The config for the module looks something like this:
>
> AuthPassiveEnable On
> AuthPassiveCookieUserName USER
> AuthPassiveCookiePassName PASS
> AuthPassiveCookieBackURL BackURL
> AuthPassiveLoginURL /auth/login.php
> AuthPassiveDBMSessFile /var/log/apache/session/session.db
> AuthPassiveGroups group1
>
> I'm just wondering if anyone has seen this before. I'm trying to find
> documentation on all the config options. I can't tell if this was something
> a previous admin wrote themselves or not. Any help would be greatly
> appreciated!
>
> Thanks,
> --jeff
>
> -
> The official User-To-User support forum of the Apache HTTP Server Project.
> See http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: [EMAIL PROTECTED]
>"   from the digest: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
>


-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] Very Puzzling Question About mod_rewrite (**Solved**)

2007-11-02 Thread Jon Forrest

Krist van Besien wrote:



However since it is /username/ that you need to replace with
/username/public_html/ it shouldn't be that hard.

RewriteRule   ^`/(\w+)/(.+)$   /$1/public_html/$2[L]


This was very close. With the expert help of a local Apache
guru, we came up with the following, which appears to work:

RewriteRule ^/(.+?)/(.*)$/$1/public_html/$2  [L]

It's critical that the first part of the regular expression
use minimal matching.

Thanks for everyone's help.

Cordially,
--
Jon Forrest
Unix Computing Support
College of Chemistry
173 Tan Hall
University of California Berkeley
Berkeley, CA
94720-1460
510-643-1032
[EMAIL PROTECTED]

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] Weird NameVirtualHost problem

2007-11-02 Thread solprovider
1. Which VirtualHosts work should change when you change the order of
the entries.  Are you certain you are editing the correct
configuration file?  Rename the configuration file and restart the
server to verify.  Apache httpd will error without the configuration
file.  If the server starts properly, check your init scripts for the
-f option.

2. Do approximately the same number of entries work?  What OS are you
using?  VirtualHosts can require file handles, especially with log
files specific to each virtual host; did the server exceed its limit?

3. Maybe a typo in httpd.conf.  Please post the NameVirtualHost and a
few  sections, especially the last working one and the
first broken one.  You can change the severs to example.com and the IP
Addresses.

For easier configuration and less chance of accidentally destroying
the main configuration file, you can replace the 
sections with
  Include conf/virtualhosts.conf
and put all the  entries in the new file.

solprovider


On 11/2/07, tech1 <[EMAIL PROTECTED]> wrote:
> I'm running apache 1.3 on a FreeBSD box. I've just started using
> NameVirtualHosts for about 100 web sites. There are other web sites on the
> server using individual IP addresses. The 
> containers are all identical except for the info pertinent to each domain
> name and directory, they were ALL generated by a script, including the
> "old" ones. I've tested them and they are accurate. I rearranged the list
> in the conf file to make sure there wasn't an issue with one VirtualHost
> container. The problem: the first 10 or so that I set up 2 months ago work
> just fine, anything added after that doesn't work at all. I've checked DNS
> on the names that aren't working, and I've also run an 'httpd -S' and can
> see all of the NameVirtualHost domains with no errors. I've restarted the
> server and apache multiple times. I can't get anything other than the first
> batch to work.
>
> I don't know what else to do I thought maybe it was a DNS cache related
> thing so I waited a couple days to see if they'd kick in. I tried removing
> the whole NameVirtualHost block and restarting the server, then putting it
> all back and restarting again. I tried rearranging them all so that others
> would be listed before the ones that work. Nothing I've done makes any
> difference.
>
> I don't want to "waste" 100 IP addresses, anyone have any ideas or
> suggestions? Any other places I might look?

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] Very Puzzling Question About mod_rewrite

2007-11-02 Thread solprovider
On 11/1/07, Jon Forrest <[EMAIL PROTECTED]> wrote:
> (This is on Solaris 10-x86 with Apache 2.2.4)
> When I give the URL
> 1)  http://www-demo.cchem.berkeley.edu/username/public_html
>
> everything works fine. However, for historical reasons,
> I can't require that people give the "/public_html" at
> the end of the URL. In other words, I want users to
> be able to enter
> 2) http://www-demo.cchem.berkeley.edu/username/
>
> to see the same results as produced by URL #1 .
> So, I decided to try mod_rewrite. I use the following
> in the proper VirtualHost section of my httpd.conf file:
>
> RewriteEngine on
> RewriteRule  ^(.+)$  $1/public_html/  [L]
>
> This doesn't work. The client sees a "403 Forbidden" message.
> The apache log says:
> "Directory index forbidden by Options directive:
> /users/chemweb/apache2/http-cchem/htdocs/username/public_html/"
>
> I don't understand why I'm getting this message when
> URL #1 above works.
>
> The rewrite log shows the following (I added the #numbers):
>
> #1 (2) init rewrite engine with requested uri /username/
> #2 (3) applying pattern '^(.+)$' to uri '/username/'
> #3 (2) rewrite '/username/' -> '/username//public_html/'
> #4 (2) local path result: /username//public_html/
> #5 (2) prefixed with document_root to
> /users/chemweb/apache2/http-cchem/htdocs/username/public_html/
> #6 (1) go-ahead with
> /users/chemweb/apache2/http-cchem/htdocs/username/public_html/ [OK]
> #7 (2) init rewrite engine with requested uri /username/index.html
> #8 (3) applying pattern '^(.+)$' to uri '/username/index.html'
> #9 (2) rewrite '/username/index.html' -> '/username/index.html/public_html/'
> #10 (2) local path result: /username/index.html/public_html/
> #11 (2) prefixed with document_root to
> /users/chemweb/apache2/http-cchem/htdocs/username/index.html/public_html/
> #12 (1) go-ahead with
> /users/chemweb/apache2/http-cchem/htdocs/username/index.html/public_html/
> [OK]
>
> Line #6 above looks correct to me so I don't understand why mod_rewrite
> tried the other possibilities.
>
> I'm guessing all these problem have something to do with directory
> protection but if this is true then I don't understand why URL #1
> works.
>
> Any ideas?
>
> Cordially,
> Jon Forrest

Try some basic settings before mod_rewrite.
- DirectoryIndex sets the file that Apache will serve if a directory
is requested.
- UserDir is the name of the directory appended onto a user's home
directory if a ~user request is received.
   UserDir public_html
   DirectoryIndex index.html
   http://www-demo.cchem.berkeley.edu/~username
will serve:
   /home/username/public_html/index.html

If you do not want the tilde (~) in the URLs, use mod_rewrite to add it.
   RewriteEngine On
   RewriteRule ^/(.*)$ /~$1 [P]

If you want to continue with the ideas in the long thread, think about
why httpd is attempting to find username directories under
/users/chemweb/apache2/htdocs/cchem.  Is that what you want?

solprovider

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] Re: html not rendered in some browsers - problem solved

2007-11-02 Thread Mark A. Craig
Now just to reinforce the moral of this story in my own mind, the reason for 
this was because of IE's legendary habit of ignoring the MIME types of content 
and looking at the file extensions to decide what to do with it?


Mark

 Original Message  
Subject: [EMAIL PROTECTED] Re: html not rendered in some browsers - problem 
solved
From: Rick Hobson <[EMAIL PROTECTED]>
To: users@httpd.apache.org
Date: Friday, November 02, 2007 06:00:29 AM


Hi,

Problem solved

/etc/mime.types had become corrupted and was of zero length. I have 
replaced it with a copy from another machine running the same O/S, 
restarted the browser and all seems well.


Apologies for creating unnecessary noise on the list.

Rick


On Fri, 2 Nov 2007, Rick Hobson wrote:


Hi,

I have been running Apache 2.2 on SuSe 10.2 for several months without 
any problems.


Early yesterday evening all contact with the server was lost. This 
seems to have been a problem of some sort with networking rather than 
a problem with Apache2. The server is also running a Samba service and 
this couldn't be contacted either, nor could the machine be pinged.


The machine was rebooted (cleanly using the appropriate command) and 
there were no obvious errors as it started up. The Samba service was 
restored and seems to be working normally. Apache2 restarted without 
any errors. Network connections were restored and seem to be working 
normally.


However, none of the pages are now rendered in Firefox or Konqueror, 
they simply display the html, whereas IE6 renders the pages normally!!


-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] Weird NameVirtualHost problem

2007-11-02 Thread tech1




Thanks.

1) I'm sure it's the correct conf file, I removed the entire 
NameVirtualHost section and checked with httpd -S to see that they were 
gone after a -HUP. Then I put them back and checked it again.


2) I mentioned I'm using FreeBSD. It is always the same hosts that work, I 
added them a couple months ago. I had some trouble then also, but it just 
started working after a reboot, one of many. I checked file handles and 
they are around 8k.


3) I see no errors, and the problem persists even with the hosts 
rearranged. And they were all generated by a script and "look" ok. Here's a 
sample from the conf file:



NameVirtualHost 123.456.789.10


ServerName a.com
ServerAlias www.a.com a.com
DocumentRoot /var/www/htdocs/sites/a.com
ErrorLog /var/www/logs/a.com-error_log
TransferLog /var/www/logs/a.com-access_log

.
.
.
.

ServerName m.com
ServerAlias www.m.com m.com
DocumentRoot /var/www/htdocs/sites/m.com
ErrorLog /var/www/logs/m.com-error_log
TransferLog /var/www/logs/m.com-access_log

.
.
.
.








At 12:41 PM 11/2/2007, you wrote:

1. Which VirtualHosts work should change when you change the order of
the entries.  Are you certain you are editing the correct
configuration file?  Rename the configuration file and restart the
server to verify.  Apache httpd will error without the configuration
file.  If the server starts properly, check your init scripts for the
-f option.

2. Do approximately the same number of entries work?  What OS are you
using?  VirtualHosts can require file handles, especially with log
files specific to each virtual host; did the server exceed its limit?

3. Maybe a typo in httpd.conf.  Please post the NameVirtualHost and a
few  sections, especially the last working one and the
first broken one.  You can change the severs to example.com and the IP
Addresses.

For easier configuration and less chance of accidentally destroying
the main configuration file, you can replace the 
sections with
  Include conf/virtualhosts.conf
and put all the  entries in the new file.

solprovider


On 11/2/07, tech1 <[EMAIL PROTECTED]> wrote:
> I'm running apache 1.3 on a FreeBSD box. I've just started using
> NameVirtualHosts for about 100 web sites. There are other web sites on the
> server using individual IP addresses. The 
> containers are all identical except for the info pertinent to each domain
> name and directory, they were ALL generated by a script, including the
> "old" ones. I've tested them and they are accurate. I rearranged the list
> in the conf file to make sure there wasn't an issue with one VirtualHost
> container. The problem: the first 10 or so that I set up 2 months ago work
> just fine, anything added after that doesn't work at all. I've checked DNS
> on the names that aren't working, and I've also run an 'httpd -S' and can
> see all of the NameVirtualHost domains with no errors. I've restarted the
> server and apache multiple times. I can't get anything other than the first
> batch to work.
>
> I don't know what else to do I thought maybe it was a DNS cache related
> thing so I waited a couple days to see if they'd kick in. I tried removing
> the whole NameVirtualHost block and restarting the server, then putting it
> all back and restarting again. I tried rearranging them all so that others
> would be listed before the ones that work. Nothing I've done makes any
> difference.
>
> I don't want to "waste" 100 IP addresses, anyone have any ideas or
> suggestions? Any other places I might look?

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] host ip addr missing from access log

2007-11-02 Thread Canonical Forms
I am searching for an explanation as to how the access log could have
not recorded the host ip address if it is configured to record it. I
don't think that escape character sequences are playing a part here,
since viewing the log with the vi editor displays what is shown below.

Please see log snippet below. Notice that the ip address of the
previous host is recorded (as usual), but beginning with the 4th
record there is only :: where the ip should be. These log entries
recorded the beginning of a DOS attack on the server.


192.168.20.33 - - [04/Oct/2007:11:09:41 -0700] "GET / HTTP/1.1" 200
9066 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR
1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30; InfoPath.2)"
192.168.20.33 - - [04/Oct/2007:11:09:41 -0700] "GET / HTTP/1.1" 200
9071 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR
1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30; InfoPath.2)"
192.168.20.33 - - [04/Oct/2007:11:09:41 -0700] "GET / HTTP/1.1" 200
9070 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR
1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30; InfoPath.2)"
:: - - [04/Oct/2007:11:09:42 -0700] "GET / HTTP/1.1" 200 9077 "-"
"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.1.4322;
.NET CLR 2.0.50727; .NET CLR 3.0.04506.30; InfoPath.2)"
:: - - [04/Oct/2007:11:09:42 -0700] "GET / HTTP/1.1" 200 9065 "-"
"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.1.4322;
.NET CLR 2.0.50727; .NET CLR 3.0.04506.30; InfoPath.2)"
:: - - [04/Oct/2007:11:09:43 -0700] "GET / HTTP/1.1" 200 9070 "-"
"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.1.4322;
.NET CLR 2.0.50727; .NET CLR 3.0.04506.30; InfoPath.2)"
:: - - [04/Oct/2007:11:09:43 -0700] "GET / HTTP/1.1" 200 9107 "-"
"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.1.4322;
.NET CLR 2.0.50727; .NET CLR 3.0.04506.30; InfoPath.2)"
:: - - [04/Oct/2007:11:09:43 -0700] "GET / HTTP/1.1" 200 9108 "-"
"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.1.4322;
.NET CLR 2.0.50727; .NET CLR 3.0.04506.30; InfoPath.2)"
:: - - [04/Oct/2007:11:09:43 -0700] "GET / HTTP/1.1" 200 9108 "-"
"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.1.4322;
.NET CLR 2.0.50727; .NET CLR 3.0.04506.30; InfoPath.2)"
:: - - [04/Oct/2007:11:09:44 -0700] "GET / HTTP/1.1" 200 9064 "-"
"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.1.4322;
.NET CLR 2.0.50727; .NET CLR 3.0.04506.30; InfoPath.2)"
:: - - [04/Oct/2007:11:09:44 -0700] "GET / HTTP/1.1" 200 9064 "-"
"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.1.4322;
.NET CLR 2.0.50727; .NET CLR 3.0.04506.30; InfoPath.2)"
:: - - [04/Oct/2007:11:09:44 -0700] "GET / HTTP/1.1" 200 9081 "-"
"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.1.4322;
.NET CLR 2.0.50727; .NET CLR 3.0.04506.30; InfoPath.2)"
:: - - [04/Oct/2007:11:09:44 -0700] "GET / HTTP/1.1" 200 9068 "-"
"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.1.4322;
.NET CLR 2.0.50727; .NET CLR 3.0.04506.30; InfoPath.2)"

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] mod_auth_dbmcookie.so (help!)

2007-11-02 Thread Jeff Kilbride
Thanks, Nick.

Unfortunately, it actually works quite well. I was hoping to continue using
it after upgrading. It has a nice feature that allows you to specify a login
URL, rather than using the basic popup box. I haven't looked around
recently, but are there any other mod_auth modules that have a login URL
configuration directive like this?

--jeff



> On Fri, 2 Nov 2007 10:35:07 -0700 (PDT)
> "Jeff Kilbride" <[EMAIL PROTECTED]> wrote:
>
>> After looking around yesterday, I still can't find any info on this
>> module.
>
> If anyone on this list had heard of it, they'd probably have said
> by now.  So if google is no help either, you can infer it's homebrew.
>
>> > LoadModule
>> > dbmcookie_auth_module /usr/lib/apache/1.3/mod_auth_dbmcookie.so
>
> In the days of 1.3, everyone was writing authentication modules.
> That includes lots of folks who would use scripting languages
> for any other kind of extra functionality.
>
> --
> Nick Kew
>
> Application Development with Apache - the Apache Modules Book
> http://www.apachetutor.org/
>
> -
> The official User-To-User support forum of the Apache HTTP Server Project.
> See http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: [EMAIL PROTECTED]
>"   from the digest: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
>


-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] mod_auth_dbmcookie.so (help!)

2007-11-02 Thread tech1



I'm not sure I understand what it does, could you elaborate?

If it's that useful maybe you should contact the Apache people and share it?




At 03:05 PM 11/2/2007, you wrote:

Thanks, Nick.

Unfortunately, it actually works quite well. I was hoping to continue using
it after upgrading. It has a nice feature that allows you to specify a login
URL, rather than using the basic popup box. I haven't looked around
recently, but are there any other mod_auth modules that have a login URL
configuration directive like this?

--jeff



> On Fri, 2 Nov 2007 10:35:07 -0700 (PDT)
> "Jeff Kilbride" <[EMAIL PROTECTED]> wrote:
>
>> After looking around yesterday, I still can't find any info on this
>> module.
>
> If anyone on this list had heard of it, they'd probably have said
> by now.  So if google is no help either, you can infer it's homebrew.
>
>> > LoadModule
>> > dbmcookie_auth_module /usr/lib/apache/1.3/mod_auth_dbmcookie.so
>
> In the days of 1.3, everyone was writing authentication modules.
> That includes lots of folks who would use scripting languages
> for any other kind of extra functionality.
>
> --
> Nick Kew
>
> Application Development with Apache - the Apache Modules Book
> http://www.apachetutor.org/
>
> -
> The official User-To-User support forum of the Apache HTTP Server Project.
> See http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: [EMAIL PROTECTED]
>"   from the digest: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
>


-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] Weird NameVirtualHost problem

2007-11-02 Thread solprovider
You did not test #1.  If you run "httpd -S" without the correct -f
option, you are testing httpd.conf. (FreeBSD's Apache httpd defaults
to "/usr/local/etc/apache/httpd.conf".) httpd.conf will not affect
your production server if your init scripts use the -f option.

The best scenario matching the symptoms you described is that the
production server is not using the configuration file you have been
editing.

As suggested in my previous post, rename the file and restart httpd to
prove the file is the one being used.  If Apache httpd runs properly
without that file, search for the configuration file being used.

solprovider

On 11/2/07, tech1 <[EMAIL PROTECTED]> wrote:
> Thanks.
>
> 1) I'm sure it's the correct conf file, I removed the entire
> NameVirtualHost section and checked with httpd -S to see that they were
> gone after a -HUP. Then I put them back and checked it again.
>
> 2) I mentioned I'm using FreeBSD. It is always the same hosts that work, I
> added them a couple months ago. I had some trouble then also, but it just
> started working after a reboot, one of many. I checked file handles and
> they are around 8k.
>
> 3) I see no errors, and the problem persists even with the hosts
> rearranged. And they were all generated by a script and "look" ok. Here's a
> sample from the conf file:
>
>
> NameVirtualHost 123.456.789.10
> 
> ServerName a.com
> ServerAlias www.a.com a.com
> DocumentRoot /var/www/htdocs/sites/a.com
> ErrorLog /var/www/logs/a.com-error_log
> TransferLog /var/www/logs/a.com-access_log
> 
> 
> ServerName m.com
> ServerAlias www.m.com m.com
> DocumentRoot /var/www/htdocs/sites/m.com
> ErrorLog /var/www/logs/m.com-error_log
> TransferLog /var/www/logs/m.com-access_log
> 
> .
> At 12:41 PM 11/2/2007, you wrote:
> >1. Which VirtualHosts work should change when you change the order of
> >the entries.  Are you certain you are editing the correct
> >configuration file?  Rename the configuration file and restart the
> >server to verify.  Apache httpd will error without the configuration
> >file.  If the server starts properly, check your init scripts for the
> >-f option.
> >
> >2. Do approximately the same number of entries work?  What OS are you
> >using?  VirtualHosts can require file handles, especially with log
> >files specific to each virtual host; did the server exceed its limit?
> >
> >3. Maybe a typo in httpd.conf.  Please post the NameVirtualHost and a
> >few  sections, especially the last working one and the
> >first broken one.  You can change the severs to example.com and the IP
> >Addresses.
> >
> >For easier configuration and less chance of accidentally destroying
> >the main configuration file, you can replace the 
> >sections with
> >   Include conf/virtualhosts.conf
> >and put all the  entries in the new file.
> >
> >solprovider
> >
> >
> >On 11/2/07, tech1 <[EMAIL PROTECTED]> wrote:
> > > I'm running apache 1.3 on a FreeBSD box. I've just started using
> > > NameVirtualHosts for about 100 web sites. There are other web sites on the
> > > server using individual IP addresses. The 
> > > containers are all identical except for the info pertinent to each domain
> > > name and directory, they were ALL generated by a script, including the
> > > "old" ones. I've tested them and they are accurate. I rearranged the list
> > > in the conf file to make sure there wasn't an issue with one VirtualHost
> > > container. The problem: the first 10 or so that I set up 2 months ago work
> > > just fine, anything added after that doesn't work at all. I've checked DNS
> > > on the names that aren't working, and I've also run an 'httpd -S' and can
> > > see all of the NameVirtualHost domains with no errors. I've restarted the
> > > server and apache multiple times. I can't get anything other than the 
> > > first
> > > batch to work.
> > >
> > > I don't know what else to do I thought maybe it was a DNS cache 
> > > related
> > > thing so I waited a couple days to see if they'd kick in. I tried removing
> > > the whole NameVirtualHost block and restarting the server, then putting it
> > > all back and restarting again. I tried rearranging them all so that others
> > > would be listed before the ones that work. Nothing I've done makes any
> > > difference.
> > >
> > > I don't want to "waste" 100 IP addresses, anyone have any ideas or
> > > suggestions? Any other places I might look?

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] mod_auth_dbmcookie.so (help!)

2007-11-02 Thread Jeff Kilbride
I haven't been using it very long, so I'm still kind of figuring out what
the config directives do. Here's an example config and I'll try to explain
my understanding of each one. Unfortunately, I don't have the source (that I
can find, yet...) or any docs for this module, so I don't know if this is a
comprehensive list:

AuthPassiveEnable On
AuthPassiveCookieUserName USER
AuthPassiveCookiePassName PASS
AuthPassiveCookieBackURL BackURL
AuthPassiveLoginURL /auth/login.php
AuthPassiveDBMSessFile /var/log/apache/session/session.db
AuthPassiveGroups group1

Notice the "Passive" in all the directives. The point of this module is to
allow passive access by bypassing the login page using cookies, once the
surfer has been initially authenticated. This makes it very easy to
implement a "remember me" check box on your login form. Depending on how
long you store the cookies, the user could potentially come back several
days later and still bypass having to enter login information. Obviously,
there are security concerns, but you can control how long the cookies remain
valid and also provide a "log out" link for the user to manually delete the
cookies and force a login the next time around. Here is my understanding of
the directives:

AuthPassiveEnable
Obviously used to enable/disable the module.

AuthPassiveCookieUserName
The name of the cookie used to store username information.

AuthPassiveCookiePassName
The name of the cookie used to store md5 hashed password information.

AuthPassiveCookieBackURL
The name of the cookie containing the protected URL the surfer was trying to
access. The module sets this before redirecting to the login URL, so you can
easily send the surfer back to the same protected URL after authenticating.

AuthPassiveLoginURL
The URL the surfer is redirected to for authentication. This is my favorite
aspect of this module. It allows you to specify a custom login page, rather
than the popup dialog box used by basic authentication. It gives you full
.htaccess style directory protection with a custom login page that's very
easy to implement.

AuthPassiveDBMSessFile
The path to the dbm file holding user/pass/group data used by the "passive"
login mechanism.

AuthPassiveGroups
A list of required groups for authentication.

Right now, I store user/pass/group info in a database and load that info
into the dbm file when the user logs in via the custom login form. The
arbitrary dbm key is stored in a cookie called SESSION. I use a 32 char
random string for my dbm key/SESSION cookie value. The dbm value consists
of:

username,md5password,groupname,timestamp

So, with the sample config above, the module uses the SESSION, USER, and
PASS cookies to implement the passive authentication. However, it would be
nice to just skip the dbm file altogether and have the module authenticate
directly against the database. I wish mod_auth_mysql implemented some of
these config options.

Anyway, the more I play with it, the more I like it. It makes setting up a
custom login page with "remember me" capability really easy. I just wish I
could find the source or, at least, some documentation. I dabble in C, but
I'm not a great C programmer. I've played with apache modules using
mod_perl, but have never tried writing one in C. I don't know if decompiling
the .so file would produce anything useful. If anyone is interested, I'm
more than willing to share the .so file and help reverse engineer it. I'm
currently running apache 1.3.33 on Debian sarge. Here's the top of my apache
version info:

Server version: Apache/1.3.33 (Debian GNU/Linux)
Server built:   Aug 27 2006 16:34:48
Server's Module Magic Number: 19990320:16

I'm just afraid that when I eventually upgrade apache, I'm going to lose the
capabilities of this module. I think it has the potential to be pretty
popular, once people learn what it can do -- especially if it's paired with
database capabilities like mod_auth_mysql offers.

Thanks,
--jeff


>
>
> I'm not sure I understand what it does, could you elaborate?
>
> If it's that useful maybe you should contact the Apache people and share it?
>
>
>
>
> At 03:05 PM 11/2/2007, you wrote:
>>Thanks, Nick.
>>
>>Unfortunately, it actually works quite well. I was hoping to continue using
>>it after upgrading. It has a nice feature that allows you to specify a
>> login
>>URL, rather than using the basic popup box. I haven't looked around
>>recently, but are there any other mod_auth modules that have a login URL
>>configuration directive like this?
>>
>>--jeff


-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]