Re: [EMAIL PROTECTED] mode_rewrite hostnames and wikiwords

[Mike Cardwell]

Dragon wrote:


hit a snag

how would I expand this rule to capture and convert the following?

your.host.name -> YourHostName (works with rule)
YOUR.HOST.NAME -> YourHostName (currently not handled)
Yo-ur.HOST.name -> YourHostName (currently not handled)

effectively the spec would be to take /doc/FQDN (regardless of case 
presented)

and capitaliseing every dot separated word returning
/doc/FullyQualifiedDomainName removing any characters other than 
[A-Z][a-z][0-9]


RewriteEngine On
RewriteMapuppercase int:toupper
RewriteMaplowercase int:tolower
RewriteRule   ^/doc/(.*)$ /doc2/${lowercase:$1}
RewriteRule   ^/doc2/(.*?)[^.a-zA-Z0-9]+(.*)$ /doc2/$1$2[N]
RewriteRule   ^/doc2/((.*)\.)?([a-z])(.*)$/doc2/$2${uppercase:$3}$4 [N]
RewriteRule   ^/doc2/(.*) /wiki/$1  [PT]

If I were to do something like this, I would most likely use the 
RewriteMap directive to pass the incoming URL to a short Perl script to 
do the transformation. The stdin file handle presents the program with 
the request URL and you pass the result back via the stdout file handle.


http://httpd.apache.org/docs/2.2/mod/mod_rewrite.html#rewritemap

See the section on the page linked above entitled "External Rewriting 
Program" for details and a skeleton Perl script you can add your 
processing to.


IMO, you should only use external rewrite programs as a last resort. If 
you can use the inbuilt apache functions you should do so.


Regards,
Mike

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

[EMAIL PROTECTED] Reverse Proxy to SSL web server: configuration example

[Zvi Kave]

Dear friends,
I am trying to find the configuration for a Reverse Proxy server
which has to work with a SSL / non-SSL web server.
Can someone send me full httpd.conf example for such thing?
I need something with probably 2 Virtual hosts for ports 80 / 443.
I hope that I have not to deal with the web server SSL crt/key.

Thanks,

Zvi




-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: [EMAIL PROTECTED] mode_rewrite hostnames and wikiwords

[Mike Cardwell]

Mike Cardwell wrote:


how would I expand this rule to capture and convert the following?

your.host.name -> YourHostName (works with rule)
YOUR.HOST.NAME -> YourHostName (currently not handled)
Yo-ur.HOST.name -> YourHostName (currently not handled)

effectively the spec would be to take /doc/FQDN (regardless of case 
presented)

and capitaliseing every dot separated word returning
/doc/FullyQualifiedDomainName removing any characters other than 
[A-Z][a-z][0-9]


RewriteEngine On
RewriteMapuppercase int:toupper
RewriteMaplowercase int:tolower
RewriteRule   ^/doc/(.*)$ /doc2/${lowercase:$1}
RewriteRule   ^/doc2/(.*?)[^.a-zA-Z0-9]+(.*)$ /doc2/$1$2[N]
RewriteRule   ^/doc2/((.*)\.)?([a-z])(.*)$/doc2/$2${uppercase:$3}$4 [N]
RewriteRule   ^/doc2/(.*) /wiki/$1  
[PT]


Actually, on second thoughts, a neater method (avoiding doc2) would be:

RewriteEngine On
RewriteMapuppercase int:toupper
RewriteMaplowercase int:tolower
RewriteRule   ^/doc/(.*)$ /wiki/${lowercase:$1}
RewriteRule   ^/wiki/(.*?)[^.a-zA-Z0-9]+(.*)$ /wiki/$1$2[N]
RewriteRule   ^/wiki/((.*)\.)?([a-z])(.*)$/wiki/$2${uppercase:$3}$4 [N]
RewriteRule   ^/wiki/(.*) /wiki/$1  [PT]

They both pretty much work the same though.

Regards,
Mike

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: [EMAIL PROTECTED] Will Apache still work with Windows SP1?

[Norman Peelman]

Nir Ofek wrote:

Hi there,
 
Thanks for anyone who might be willing and able to help me (me = a 
total Apache novice) with this question.
 
The Apache documentation states 
 
that for running Apache HTTP for windows XP, I should download SP2. 
However, I have SP1, and want to avoid the risk of installing SP2.
 
*Any idea if Apache will still run well with SP1, or if indeed 
downloading SP2 is critical for Apache?*
 
Many thanks,
 
Nir
 I was running it just fine on a sp1 XP. It was an Apache2 but could 
not tell you which one.  I'm sure it's security related as to why they 
say 'should'.



--
Norman
Registered Linux user #461062


-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: [EMAIL PROTECTED] mode_rewrite hostnames and wikiwords

[Phil Wild]

Hi Mike,

Thanks I will give it a go.

On the suggestion of external code, I was going to use the below


#!/usr/bin/perl -w
while () {
s/([a-zA-Z0-9]+)/\u\L$1/g;
s/[^a-zA-Z0-9\n]//g;
print;
}

but I like the idea of doing it all in the apache config over using the above.

Many thanks again

Phil

On 07/01/2008, Mike Cardwell <[EMAIL PROTECTED]> wrote:
> Mike Cardwell wrote:
>
> >>> how would I expand this rule to capture and convert the following?
> >>>
> >>> your.host.name -> YourHostName (works with rule)
> >>> YOUR.HOST.NAME -> YourHostName (currently not handled)
> >>> Yo-ur.HOST.name -> YourHostName (currently not handled)
> >>>
> >>> effectively the spec would be to take /doc/FQDN (regardless of case
> >>> presented)
> >>> and capitaliseing every dot separated word returning
> >>> /doc/FullyQualifiedDomainName removing any characters other than
> >>> [A-Z][a-z][0-9]
> >
> > RewriteEngine On
> > RewriteMapuppercase int:toupper
> > RewriteMaplowercase int:tolower
> > RewriteRule   ^/doc/(.*)$ /doc2/${lowercase:$1}
> > RewriteRule   ^/doc2/(.*?)[^.a-zA-Z0-9]+(.*)$ /doc2/$1$2[N]
> > RewriteRule   ^/doc2/((.*)\.)?([a-z])(.*)$/doc2/$2${uppercase:$3}$4 [N]
> > RewriteRule   ^/doc2/(.*) /wiki/$1
> > [PT]
>
> Actually, on second thoughts, a neater method (avoiding doc2) would be:
>
> RewriteEngine On
> RewriteMapuppercase int:toupper
> RewriteMaplowercase int:tolower
> RewriteRule   ^/doc/(.*)$ /wiki/${lowercase:$1}
> RewriteRule   ^/wiki/(.*?)[^.a-zA-Z0-9]+(.*)$ /wiki/$1$2[N]
> RewriteRule   ^/wiki/((.*)\.)?([a-z])(.*)$/wiki/$2${uppercase:$3}$4 [N]
> RewriteRule   ^/wiki/(.*) /wiki/$1  [PT]
>
> They both pretty much work the same though.
>
> Regards,
> Mike
>
> -
> The official User-To-User support forum of the Apache HTTP Server Project.
> See http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: [EMAIL PROTECTED]
>   "   from the digest: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
>
>


-- 
Tel: 0400 466 952
Fax: 0433 123 226
email: [EMAIL PROTECTED]

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

[EMAIL PROTECTED] Re: TCP packets lost?

[Max Deineko]

Moved to  gmane.linux.openvz.user



-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

[EMAIL PROTECTED] Help with Caching Proxy with Ubuntu and Apach 2.2

[theseeder]

Hi I have been using Ubuntu at home and also on a test server at work for
approx 6 months, I have successfully set up a SAMBA server and recently set
myself the task of creating a Caching Proxy.

I 1st tried using apache 1.3 which i didn't have great success with
therefore decided to remove apache 1.3 and try with the more recent 2.2.

I successfully installed apache 2.2 and thought i was well on my way to
getting the server up and running, however i then hit a brick wall within
the main httpd.conf file i could not find any part where i can enable the
proxy and also change configuration settings such as cache size etc.

i then read into my issue a bit and managed to find out that i had to enable
certain modules to enable teh proxy, so i enabled the following:

CacheEnabled
Mod_cache
mod_disk_cache

still after enabling all these i cannot find the section where i can turn on
the proxy and edit the key settings.

i am at the point of think i have to manually input the whole configuration
settings into the conf file my self rather then just uncomenting lines and
editing values as i did in previous versions,i don't want to do this to find
out this info is meant to be added somewhere else.

Any help would be much appreciated as apaches documentation does not help
-- 
View this message in context: 
http://www.nabble.com/Help-with-Caching-Proxy-with-Ubuntu-and-Apach-2.2-tp14665169p14665169.html
Sent from the Apache HTTP Server - Users mailing list archive at Nabble.com.


-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

RE: [EMAIL PROTECTED] Help with Caching Proxy with Ubuntu and Apach 2.2

[Axel-Stephane SMORGRAV]

Every thing goes into either httpd.conf or some file included from httpd.conf.

The general configuration I use is as follows:


   CacheIgnoreHeaders   Set-Cookie
   CacheIgnoreCacheControl  Off
   CacheIgnoreNoLastMod Off
   
   = 2.2 >
CacheStoreNoStore   Off
CacheStorePrivate   Off
   
   

   CacheMaxExpire   864000

   
  MCacheMaxObjectSize 1
  MCacheSize  100
   
   
  CacheRoot   /var/www/cache

  
 CacheSize   15
  
  
  
 CacheSize   15
  
  
   


In the above I assume that if mod_version is not present, then this is a 
pre-2.2 server (i.e. 2.0)

You also need to activate the cache for the relevant URL prefixes:



CacheEnable mem /


CacheEnable disk /



You can put that into th main server configuration if you want cache enables 
for the main server and all virtual hosts, or inside a virtual host block if 
only to be activated for specific VHs.

-ascs
 
-Message d'origine-
De : theseeder [mailto:[EMAIL PROTECTED] 
Envoyé : lundi 7 janvier 2008 14:00
À : users@httpd.apache.org
Objet : [EMAIL PROTECTED] Help with Caching Proxy with Ubuntu and Apach 2.2


Hi I have been using Ubuntu at home and also on a test server at work for 
approx 6 months, I have successfully set up a SAMBA server and recently set 
myself the task of creating a Caching Proxy.

I 1st tried using apache 1.3 which i didn't have great success with therefore 
decided to remove apache 1.3 and try with the more recent 2.2.

I successfully installed apache 2.2 and thought i was well on my way to getting 
the server up and running, however i then hit a brick wall within the main 
httpd.conf file i could not find any part where i can enable the proxy and also 
change configuration settings such as cache size etc.

i then read into my issue a bit and managed to find out that i had to enable 
certain modules to enable teh proxy, so i enabled the following:

CacheEnabled
Mod_cache
mod_disk_cache

still after enabling all these i cannot find the section where i can turn on 
the proxy and edit the key settings.

i am at the point of think i have to manually input the whole configuration 
settings into the conf file my self rather then just uncomenting lines and 
editing values as i did in previous versions,i don't want to do this to find 
out this info is meant to be added somewhere else.

Any help would be much appreciated as apaches documentation does not help
--
View this message in context: 
http://www.nabble.com/Help-with-Caching-Proxy-with-Ubuntu-and-Apach-2.2-tp14665169p14665169.html
Sent from the Apache HTTP Server - Users mailing list archive at Nabble.com.


-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

RE: [EMAIL PROTECTED] Reverse Proxy to SSL web server: configuration example

[Axel-Stephane SMORGRAV]

If you add the config below to a vanilla httpd.conf, you'll be pretty close to 
what you are looking for. Just replace the tokens %%TOKEN%% with whatever value 
you want.


Listen %%svcb_HTTP_ADDR%%:%%HTTP_PORT%%
Listen %%svcb_HTTP_ADDR%%:%%HTTPS_PORT%%



   ServerName %%svcb_PUBLIC_NAME%%:%%HTTPS_PORT%%   

   SSLCertificateFile %%X509_ROOT%%/ssl.crt/%%svcb_PUBLIC_NAME%%.crt
   SSLCertificateKeyFile %%X509_ROOT%%/ssl.key/%%svcb_PUBLIC_NAME%%.key
   SSLEngine on

   DocumentRoot %%SERVER_ROOT%%/htdocs/svcB

   ErrorLog %%SERVER_LOGS%%/svcB/reverse_error_log
   CustomLog %%SERVER_LOGS%%/svcB/reverse_access_log combined env=!dontlog

   ## Enter additional configuration here

  



   ServerName %%svcb_PUBLIC_NAME%%:%%HTTP_PORT%%   

   DocumentRoot %%SERVER_ROOT%%/htdocs/svcB

   ErrorLog %%SERVER_LOGS%%/svcB/reverse_error_log
   CustomLog %%SERVER_LOGS%%/svcB/reverse_access_log combined env=!dontlog

   ## Enter additional configuration here

  



-ascs
 
-Message d'origine-
De : news [mailto:[EMAIL PROTECTED] De la part de Zvi Kave
Envoyé : lundi 7 janvier 2008 12:16
À : users@httpd.apache.org
Objet : [EMAIL PROTECTED] Reverse Proxy to SSL web server: configuration example

Dear friends,
I am trying to find the configuration for a Reverse Proxy server which has to 
work with a SSL / non-SSL web server.
Can someone send me full httpd.conf example for such thing?
I need something with probably 2 Virtual hosts for ports 80 / 443.
I hope that I have not to deal with the web server SSL crt/key.

Thanks,

Zvi




-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

[EMAIL PROTECTED] Re: Reverse Proxy to SSL web server: configuration example

[Zvi Kave]

Do you mean, that I must copy the SSL crt/key files from the web
 server to the proxy server ?

Zvi


"Axel-Stephane SMORGRAV" <[EMAIL PROTECTED]> wrote in 
message news:[EMAIL PROTECTED]
If you add the config below to a vanilla httpd.conf, you'll be pretty close 
to what you are looking for. Just replace the tokens %%TOKEN%% with whatever 
value you want.


Listen %%svcb_HTTP_ADDR%%:%%HTTP_PORT%%
Listen %%svcb_HTTP_ADDR%%:%%HTTPS_PORT%%



   ServerName %%svcb_PUBLIC_NAME%%:%%HTTPS_PORT%%

   SSLCertificateFile %%X509_ROOT%%/ssl.crt/%%svcb_PUBLIC_NAME%%.crt
   SSLCertificateKeyFile %%X509_ROOT%%/ssl.key/%%svcb_PUBLIC_NAME%%.key
   SSLEngine on

   DocumentRoot %%SERVER_ROOT%%/htdocs/svcB

   ErrorLog %%SERVER_LOGS%%/svcB/reverse_error_log
   CustomLog %%SERVER_LOGS%%/svcB/reverse_access_log combined env=!dontlog

   ## Enter additional configuration here





   ServerName %%svcb_PUBLIC_NAME%%:%%HTTP_PORT%%

   DocumentRoot %%SERVER_ROOT%%/htdocs/svcB

   ErrorLog %%SERVER_LOGS%%/svcB/reverse_error_log
   CustomLog %%SERVER_LOGS%%/svcB/reverse_access_log combined env=!dontlog

   ## Enter additional configuration here





-ascs

-Message d'origine-
De : news [mailto:[EMAIL PROTECTED] De la part de Zvi Kave
Envoyé : lundi 7 janvier 2008 12:16
À : users@httpd.apache.org
Objet : [EMAIL PROTECTED] Reverse Proxy to SSL web server: configuration example

Dear friends,
I am trying to find the configuration for a Reverse Proxy server which has 
to work with a SSL / non-SSL web server.
Can someone send me full httpd.conf example for such thing?
I need something with probably 2 Virtual hosts for ports 80 / 443.
I hope that I have not to deal with the web server SSL crt/key.

Thanks,

Zvi




-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]





-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

RE: [EMAIL PROTECTED] Re: Reverse Proxy to SSL web server: configuration example

[Axel-Stephane SMORGRAV]

Definitely yes. 


-ascs
 
-Message d'origine-
De : news [mailto:[EMAIL PROTECTED] De la part de Zvi Kave
Envoyé : lundi 7 janvier 2008 15:02
À : users@httpd.apache.org
Objet : [EMAIL PROTECTED] Re: Reverse Proxy to SSL web server: configuration 
example

Do you mean, that I must copy the SSL crt/key files from the web  server to the 
proxy server ?

Zvi


-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

[EMAIL PROTECTED] Re: Re: Reverse Proxy to SSL web server: configuration example

[Zvi Kave]

Axel,
You are right.
The only one thing I have to add to your configuration was
 (in both virtual servers):

ProxyPass  /  https://my_web_server.com/
ProxyPassReverse  /  https://my_web_server.com/

Thanks,

Zvi

"Axel-Stephane SMORGRAV" <[EMAIL PROTECTED]> wrote in 
message news:[EMAIL PROTECTED]
Definitely yes.


-ascs

-Message d'origine-
De : news [mailto:[EMAIL PROTECTED] De la part de Zvi Kave
Envoyé : lundi 7 janvier 2008 15:02
À : users@httpd.apache.org
Objet : [EMAIL PROTECTED] Re: Reverse Proxy to SSL web server: configuration 
example

Do you mean, that I must copy the SSL crt/key files from the web  server to 
the proxy server ?

Zvi


-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]





-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

[EMAIL PROTECTED] Re: Re: Reverse Proxy to SSL web server: configuration example

[Zvi Kave]

Axel,

To complete all the parameters, I saw that directive
SSLProxyEngine On
is needed as well.(It was hiding there from previous test)
So to make it clear, here are the successfull directives:
(The SSL key/crt files are copied from the web server)


ServerAdmin [EMAIL PROTECTED]
ServerName proxy80.com
ProxyPass / http://mywebserver.com/
ProxyPassReverse / http://mywebserver.com/
ErrorLog logs/error80.log
TransferLog logs/access80.log

# This creates a virtual host for SSL conections. They'll be proxy'ed w/o 
SSL.

ServerAdmin [EMAIL PROTECTED]
ServerName proxy443.com
SSLProxyEngine On
ProxyPass / https://mywebserver.com/
ProxyPassReverse / https://mywebserver.com/
SSLEngine on
SSLCertificateFile /etc/httpd/conf/server.crt
SSLCertificateKeyFile /etc/httpd/conf/server.key
ErrorLog logs/ssl-error.log
TransferLog logs/ssl-access.log


Best regards,

Zvi

"Axel-Stephane SMORGRAV" <[EMAIL PROTECTED]> wrote in 
message news:[EMAIL PROTECTED]
Definitely yes.


-ascs

-Message d'origine-
De : news [mailto:[EMAIL PROTECTED] De la part de Zvi Kave
Envoyé : lundi 7 janvier 2008 15:02
À : users@httpd.apache.org
Objet : [EMAIL PROTECTED] Re: Reverse Proxy to SSL web server: configuration 
example

Do you mean, that I must copy the SSL crt/key files from the web  server to 
the proxy server ?

Zvi


-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]





-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

RE: [EMAIL PROTECTED] Re: Re: Reverse Proxy to SSL web server: configuration example

[Axel-Stephane SMORGRAV]

You need SSLProxyEngine On ONLY if you intend to proxy to a SSL-enabled server 
as seems to be your case. 

However if your reverse proxy takes care of SSL termination, encrypting the 
backend connection may not be very useful. 


-ascs
 
-Message d'origine-
De : news [mailto:[EMAIL PROTECTED] De la part de Zvi Kave
Envoyé : lundi 7 janvier 2008 15:49
À : users@httpd.apache.org
Objet : [EMAIL PROTECTED] Re: Re: Reverse Proxy to SSL web server: 
configuration example

Axel,

To complete all the parameters, I saw that directive SSLProxyEngine On is 
needed as well.(It was hiding there from previous test) So to make it clear, 
here are the successfull directives:
(The SSL key/crt files are copied from the web server)


ServerAdmin [EMAIL PROTECTED]
ServerName proxy80.com
ProxyPass / http://mywebserver.com/
ProxyPassReverse / http://mywebserver.com/
ErrorLog logs/error80.log
TransferLog logs/access80.log

# This creates a virtual host for SSL conections. They'll be proxy'ed w/o SSL.

ServerAdmin [EMAIL PROTECTED]
ServerName proxy443.com
SSLProxyEngine On
ProxyPass / https://mywebserver.com/
ProxyPassReverse / https://mywebserver.com/
SSLEngine on
SSLCertificateFile /etc/httpd/conf/server.crt
SSLCertificateKeyFile /etc/httpd/conf/server.key
ErrorLog logs/ssl-error.log
TransferLog logs/ssl-access.log


Best regards,

Zvi

"Axel-Stephane SMORGRAV" <[EMAIL PROTECTED]> wrote in message news:[EMAIL 
PROTECTED]
Definitely yes.


-ascs

-Message d'origine-
De : news [mailto:[EMAIL PROTECTED] De la part de Zvi Kave
Envoyé : lundi 7 janvier 2008 15:02
À : users@httpd.apache.org
Objet : [EMAIL PROTECTED] Re: Reverse Proxy to SSL web server: configuration 
example

Do you mean, that I must copy the SSL crt/key files from the web  server to 
the proxy server ?

Zvi


-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]





-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

[EMAIL PROTECTED] Where can I find a tutorial for writing apache 2.0.x modules

[Campbell, Lance]

I am looking for a web tutorial for writing apache 2.0.x modules.  Does
anyone have a reference they could give me?

 

Thanks,

 

Lance Campbell

Project Manager/Software Architect

Web Services at Public Affairs

University of Illinois

217.333.0382

http://webservices.uiuc.edu

 

Re: [EMAIL PROTECTED] Where can I find a tutorial for writing apache 2.0.x modules

[Dragon]

Campbell, Lance wrote:
I am looking for a web tutorial for writing apache 2.0.x 
modules.  Does anyone have a reference they could give me?



 End original message. -

Perhaps this is a good place to start:

http://modules.apache.org/reference

It didn't take more than about 3 clicks from the main Apache.org page 
to find it.


Dragon

~~~
 Venimus, Saltavimus, Bibimus (et naribus canium capti sumus)
~~~


-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: [EMAIL PROTECTED] Would like to understand this weird url request

[Joshua Slive]

On Jan 7, 2008 12:23 AM, Sander Temme <[EMAIL PROTECTED]> wrote:
>
> On Jan 6, 2008, at 9:07 PM, Robinson Craig wrote:
>
> > http://www.nrw.qld.gov.au/vegetation/index.html/templates/headline_temp
> > .
> > php
> >
> > I get the weirdest thingI actually get a response as if what I was
> > really requesting was:
> >
> > http://www.nrw.qld.gov.au/vegetation/index.html
> >
> > In the htdocs directory structure, /vegetation/index.html is a file
> > not
> > a dir, and there definitely isn't a
> > /vegetation/index.html/templates/headline_temp.php file.
>
> What you'll find is that the remaining part of the URL ('/templates/
> headline_temp.php') is passed to the request as pathinfo.  A static
> file (like index.html) can typically not do a whole lot with that
> information, but a program like a CGI or PHP script can... try making
> test-cgi in your cgi-bin directory executable and calling 
> http://yourserver/cgi-bin/test-cgi/foo/bar
> .  You'll see the CGI get executed, and an environment variable
> PATH_INFO is passed in with the /foo/bar bit.
>
> I guess the canonical question is: what is your intention when you
> request the original URL?

Two further points of interest: This only happens if the target file
is capable of doing something with the PATH_INFO, so you likely have
index.html getting processed by php or ssi. Turning that off would
result in a 404 to the browser.

Also, if you were using a more modern version of Apache, you would
have the AcceptPathInfo directive available to modify this behavior.

Joshua.

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: [EMAIL PROTECTED] mod_disk_cache

[Joshua Slive]

On Jan 7, 2008 12:59 AM, Campbell, Lance <[EMAIL PROTECTED]> wrote:
>
>
>
>
> httpd-2.0.59
>
>
>
> Does mod_disk_cache support a mechanism that one can request a particular
> URL to have its content refreshed?

Sure, if you send the appropriate Cache-Control headers on your
request, you should force mod_cache to get the data from the back-end.
(But I haven't tested this myself.)

Joshua.

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

RE: [EMAIL PROTECTED] mod_disk_cache

[Campbell, Lance]

Joshua,
I don't understand what you are saying.  Is there some command parameter
you can send to htcacheclean or is there a special way of formatting the
requested cached URL that will cause it to be refreshed? 

Since I am caching Tomcat dynamic content I use the following parameters
when setting up the mod_disk_cache:

CacheRoot /a/b/c/d/e
CacheSize 256
CacheEnable disk /servletName/
CacheDefaultExpire 3600
CacheDirLevels 2
CacheDirLength 10
CacheIgnoreCacheControl off
CacheIgnoreHeaders None
CacheIgnoreNoLastMod On
CacheDefaultExpire 600 
CacheMaxExpire 3600

Thanks,

Lance Campbell
Project Manager/Software Architect
Web Services at Public Affairs
University of Illinois
217.333.0382
http://webservices.uiuc.edu
 

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Joshua
Slive
Sent: Monday, January 07, 2008 10:46 AM
To: users@httpd.apache.org
Subject: Re: [EMAIL PROTECTED] mod_disk_cache

On Jan 7, 2008 12:59 AM, Campbell, Lance <[EMAIL PROTECTED]> wrote:
>
>
>
>
> httpd-2.0.59
>
>
>
> Does mod_disk_cache support a mechanism that one can request a
particular
> URL to have its content refreshed?

Sure, if you send the appropriate Cache-Control headers on your
request, you should force mod_cache to get the data from the back-end.
(But I haven't tested this myself.)

Joshua.

-
The official User-To-User support forum of the Apache HTTP Server
Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: [EMAIL PROTECTED] mod_disk_cache

[Joshua Slive]

On Jan 7, 2008 12:12 PM, Campbell, Lance <[EMAIL PROTECTED]> wrote:
> Joshua,
> I don't understand what you are saying.  Is there some command parameter
> you can send to htcacheclean or is there a special way of formatting the
> requested cached URL that will cause it to be refreshed?

Just make an HTTP request to the server for the targeted URL with a
"Cache-Control: max-age=0" header.

Joshua.

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: [EMAIL PROTECTED] Will Apache still work with Windows SP1?

[William A. Rowe, Jr.]

Norman Peelman wrote:
 
Thanks for anyone who might be willing and able to help me (me = a 
total Apache novice) with this question.
 
The Apache documentation states 
 
that for running Apache HTTP for windows XP, I should download SP2. 
However, I have SP1, and want to avoid the risk of installing SP2.
 
*Any idea if Apache will still run well with SP1, or if indeed 
downloading SP2 is critical for Apache?*
 
 I was running it just fine on a sp1 XP. It was an Apache2 but could not 
tell you which one.  I'm sure it's security related as to why they say 
'should'.


Primarily, issues with socket layered providers.  In vanilla XP, the
loopback adapter didn't even work.  In SP1 they rolled in fixes to
their drivers.  And with wldap32 there have been fixes to both SP1 & 2.
If you don't use ldap I wouldn't be as concerned, although if you are
running an outward facing server, and you aren't applying service packs
to let you receive new security fixes, that's your foolishness.

We've essentially also dropped Win9x so all of the comments related to 
that are now meaningless.


The text previously read;

First upgrade to at least Internet Explorer 6, Service Pack 1.
You don't have to use it, but it just happens to include updates and
bug fixes you must install, including the wldap32.dll that Apache 2.2
requires to start.  Alternately, you can refer to
http://support.microsoft.com/default.aspx?scid=kb;en-us;288358";
>KB article 288358, along with the troublesome-to-obtain update from
http://support.microsoft.com/default.aspx?scid=kb;en-us;323455";
>KB article 323455.  If you already have wldap32.dll in your
Windows\System32 directory with version 5.0.2168.1, you are fine.
If you are installing on Windows 98, obtain the MSI
installer if you have not done so before (Windows ME users are
in the clear, it was installed with the operating system).

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

RE: [EMAIL PROTECTED] mod_disk_cache

[Campbell, Lance]

It works!  Thanks!

They really need to add that to the apache documentation.

Lance Campbell
Project Manager/Software Architect
Web Services at Public Affairs
University of Illinois
217.333.0382
http://webservices.uiuc.edu
 

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Joshua
Slive
Sent: Monday, January 07, 2008 11:27 AM
To: users@httpd.apache.org
Subject: Re: [EMAIL PROTECTED] mod_disk_cache

On Jan 7, 2008 12:12 PM, Campbell, Lance <[EMAIL PROTECTED]> wrote:
> Joshua,
> I don't understand what you are saying.  Is there some command
parameter
> you can send to htcacheclean or is there a special way of formatting
the
> requested cached URL that will cause it to be refreshed?

Just make an HTTP request to the server for the targeted URL with a
"Cache-Control: max-age=0" header.

Joshua.

-
The official User-To-User support forum of the Apache HTTP Server
Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: [EMAIL PROTECTED] mod_disk_cache

[Joshua Slive]

On Jan 7, 2008 1:31 PM, Campbell, Lance <[EMAIL PROTECTED]> wrote:
> It works!  Thanks!
>
> They really need to add that to the apache documentation.

There's a lot of stuff about mod_cache that is not explicitly
documented. This is because mod_cache is supposed to be a fairly
strict implementation of RFC 2616 caching rules, so it is assumed that
you know the standard. But there is lots of room on the httpd wiki for
useful tips like this one, if you want to go add it.

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: [EMAIL PROTECTED] DBDmysql connecting but not authenticating

[paredes]

Hi Tom!

Thanks for the pointers. After much systematic experimenting I 
discovered that when I entered users & passwords with the mysql command 
line using password(), encrypt(), sha1() or old_password, only encrypt() 
was readable by apache authentication. Then I entered users and 
passwords using apache's htpasswd to generate md5 sha1 crypt and apache 
was able to authenticate those.


So much to my surprise, mysql's sha1 and md5 produces an encryption not 
readable by apache. I was under the assumption that all sha1 and md5 
encryptions were the same across all applications!


This is an example of a mysql produced sha1:
*A34CD1232ACBCBCDD4D4D3D2D12341ACACE3
This is an example of an htpasswd produced sha1:
{SHA1}6u5F+11u1xNIBuFBh+X+sydW+4=

Regards,
-Bill

Tom Donovan wrote:

paredes wrote:

Greetings!
I've been running OS-X 10.3.9, with apache2.2.3 [ldap w/failover to
mod_authn_dbd], mysql5.0.3x & php5.1 all built from source. I've just
upgraded our test server to OSX 10.5, apache2.2.6 & mysql5.0.51. The
problem is that while the DBDDriver connects it refuses to authenticate
valid users. The apache logs which are set to debug return:
"user jones: authentication failure for "/ProtectedArea": Password 
Mismatch"

When I deliberately provide an unknown user the logs return: "user mary
not found: /ProtectedArea"

It sounds like you are getting *something* returned by your 
authentication query, just not the exact password hash.


Possibly the problem is trailing spaces.  The behavior of MySQL CHAR 
and VARCHAR fields for trailing spaces has changed over time per 
http://dev.mysql.com/doc/refman/5.0/en/char.html


Try a SQL statement like:  "SELECT TRIM(password_field) FROM 
user_table WHERE user_field = %s"
instead of:  "SELECT password_field FROM user_table WHERE user_field = 
%s"


Additional clues might be found by enabling MySQL logging per:
  http://dev.mysql.com/doc/refman/5.0/en/query-log.html
and checking what your SQL statement actually looks like to MySQL.

-tom-

-
The official User-To-User support forum of the Apache HTTP Server 
Project.

See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]





-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: [EMAIL PROTECTED] Configuring ssl on apache 2 and Leopard 10.5.1

[Ben assis]

Ok William, I know that I can use a firewall but I didn't activate it.Thanks

2008/1/6, William A. Rowe, Jr. <[EMAIL PROTECTED]>:
>
> Ben assis wrote:
> >
> > As my ISP is blocking ports 80 and 443, I was using ports 8080 and 8083
> > under Tiger.
> > Under Leopard, as I could not set my server to work with ssl,
>
> When you upgraded, you probably also introduced Leopard's own firewall.
>
> -
> The official User-To-User support forum of the Apache HTTP Server Project.
> See http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: [EMAIL PROTECTED]
>"   from the digest: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
>
>

Re: [EMAIL PROTECTED] DBDmysql connecting but not authenticating

[Tom Donovan]

paredes wrote:

Hi Tom!

I discovered that when I entered users & passwords with the mysql command 
line using password(), encrypt(), sha1() or old_password, only encrypt() 
was readable by apache authentication. Then I entered users and 
passwords using apache's htpasswd to generate md5 sha1 crypt and apache 
was able to authenticate those.


So much to my surprise, mysql's sha1 and md5 produces an encryption not 
readable by apache. I was under the assumption that all sha1 and md5 
encryptions were the same across all applications!




re: "... encryptions were all the same..."

Unfortunately, no.  The binary calculation is the same, but the encoding of the result differs 
considerably.


There are some notes about password encryption in the Apache docs here:
http://httpd.apache.org/docs/2.2/misc/password_encryptions.html

-tom-

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

[EMAIL PROTECTED] How to configure httpd process time

[Lahiru Gunathilake]

I'm using httpd with Apache axis2c.there's a problem with some of httpd
processes when i'm keep on sending requests to the server for two or
three days.I have figure out that there are some  httpd processes which
takes lot of memory and keep on that memory when we are not sending
requests to the server.Then i want to know is there any configuration in
httpd to kill all process time to time and create new once.Is there any
configurations for httpd process time.

Regs
lahiru


-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

RE: [EMAIL PROTECTED] How to configure httpd process time

[Boyle Owen]

> -Original Message-
> From: Lahiru Gunathilake [mailto:[EMAIL PROTECTED] 
> Sent: Tuesday, January 08, 2008 7:08 AM
> To: users@httpd.apache.org
> Subject: [EMAIL PROTECTED] How to configure httpd process time
> 
> I'm using httpd with Apache axis2c.there's a problem with 
> some of httpd
> processes when i'm keep on sending requests to the server for two or
> three days.I have figure out that there are some  httpd 
> processes which
> takes lot of memory and keep on that memory when we are not sending
> requests to the server.Then i want to know is there any 
> configuration in
> httpd to kill all process time to time and create new once.Is 
> there any
> configurations for httpd process time.

Yes and no. It is quite normal for apache to spawn many httpd processes
that then sit and wait for requests. If more requests come in, more
servers will start up (up to a limit). If requests stop coming in,
processes will die off until they are reduced to a certain limit. This
is how apache adjusts the resources it uses according to the server
load.

Processes are recycled (stopped and restarted), not based on time but
according to how many requests they have served (see
MaxRequestsPerChild).

If you want to tune your server, read
http://httpd.apache.org/docs/2.2/mod/prefork.html for details on how
this all works.

More generally, you shouldn't worry about the memory that apache is
using when idle. For a start, a lot of the memory is shared so you don't
simply add up all the footprints from "top". Even if you do, the total
should still be a small fraction of your computer's memory. If it isn't
then, your computer is under-resourced and you shouldn't be using it as
a webserver.

Rgds,
Owen Boyle
Disclaimer: Any disclaimer attached to this message may be ignored. 

PS: If this isn't what you are asking, post back with a more precise
question...

> 
> Regs
> lahiru
> 
> 
> -
> The official User-To-User support forum of the Apache HTTP 
> Server Project.
> See http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: [EMAIL PROTECTED]
>"   from the digest: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
>
 
 
This message is for the named person's use only. It may contain confidential, 
proprietary or legally privileged information. If you receive this message in 
error, please notify the sender urgently and then immediately delete the 
message and any copies of it from your system. Please also immediately destroy 
any hardcopies of the message. The sender's company reserves the right to 
monitor all e-mail communications through their networks.

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]