Re: [users@httpd] Multiple authencation prompts

2014-01-03 Thread Jan Vávra

Hello,
  I have observed that browsers cache http basic authentication 
credentials for the first word after the hostname in a url.
  Eg. Caches credentials for http://hostname/word1/.../... and requires 
inputting creadentials again for http://hostname/word2/.../...


  So you can try move your authenticated content under one *word* 
(subtree). Move it from  / to /word. Or all content from subtree of 
/word move as a direct children of /word.


Jan.



Hello,

I am using apache to host iOS related applications. I have integrated
apache with our internal LDAP. When I try to access on a desktop it
prompts for password only once. Where as in apple devices its
prompting multiple times (I use plist). If the app consists of 4
files, it prompts for password for 4 times.Can you please recommend a
better way to handle this?

Thanks
Ramesh

-
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org




-
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



Re: [users@httpd] Multiple authencation prompts

2014-01-03 Thread Rich Bowen


On 01/03/2014 03:51 AM, Jan Vávra wrote:

Hello,
  I have observed that browsers cache http basic authentication 
credentials for the first word after the hostname in a url.
  Eg. Caches credentials for http://hostname/word1/.../... and 
requires inputting creadentials again for http://hostname/word2/.../...


  So you can try move your authenticated content under one *word* 
(subtree). Move it from  / to /word. Or all content from subtree of 
/word move as a direct children of /word.


This certainly shouldn't be true for a correct browser. They should 
cache per authrealm, not per directory or URI subpath.


It would be really helpful to see your authentication configuration, 
along with the URIs of the specific resources in question.


--Rich



Jan.



Hello,

I am using apache to host iOS related applications. I have integrated
apache with our internal LDAP. When I try to access on a desktop it
prompts for password only once. Where as in apple devices its
prompting multiple times (I use plist). If the app consists of 4
files, it prompts for password for 4 times.Can you please recommend a
better way to handle this?

Thanks
Ramesh

-
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org




-
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



--
Rich Bowen
rbo...@rcbowen.com
http://rcbowen.com/


-
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



[users@httpd] AH00020: Configuration Failed, exiting

2014-01-03 Thread Yanni Goudetsidis
Hello everyone and happy new year.

I came in this morning and tried to access my locally installed wiki page
and I was greeted with the "Unable to connect" message.I then noticed that
my httpd.service is not running and I tried to start it but wit no luck. I
am using FC19. My SELINUX is disabled.


This is the output of "systemctl status httpd.service"
-
httpd.service - The Apache HTTP Server
   Loaded: loaded (/usr/lib/systemd/system/httpd.service; enabled)
   Active: failed (Result: exit-code) since Fri 2014-01-03 14:59:04 GMT;
17min ago
  Process: 16305 ExecStop=/usr/sbin/httpd $OPTIONS -k graceful-stop
(code=exited, status=0/SUCCESS)
  Process: 16303 ExecStart=/usr/sbin/httpd $OPTIONS -DFOREGROUND
(code=exited, status=1/FAILURE)

Jan 03 14:59:04 paok.cryt.co.uk systemd[1]: httpd.service: main process
exited, code=exited, status=1/FAILURE
Jan 03 14:59:04 paok.cryt.co.uk httpd[16305]: httpd (no pid file) not
running
Jan 03 14:59:04 paok.cryt.co.uk systemd[1]: Failed to start The Apache HTTP
Server.
Jan 03 14:59:04 paok.cryt.co.uk systemd[1]: Unit httpd.service entered
failed state.
-

This is what my error log shows when I attempt to start httpd:
-
[Fri Jan 03 16:17:49.157241 2014] [suexec:notice] [pid 16948] AH01232:
suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)
[Fri Jan 03 16:17:49.177614 2014] [auth_digest:notice] [pid 16948] AH01757:
generating secret for digest authentication ...
[Fri Jan 03 16:17:49.177660 2014] [auth_digest:error] [pid 16948] (2)No
such file or directory: AH01762: Failed to create shared memory segment on
file /run/httpd/authdigest_shm.16948
[Fri Jan 03 16:17:49.177674 2014] [auth_digest:error] [pid 16948] (2)No
such file or directory: AH01760: failed to initialize shm - all nonce-count
checking, one-time nonces, and MD5-sess algorithm disabled
[Fri Jan 03 16:17:49.177678 2014] [:emerg] [pid 16948] AH00020:
Configuration Failed, exiting
-

I do not understand the errors shown. Could someone please help me?

Many thanks


Re: [users@httpd] AH00020: Configuration Failed, exiting

2014-01-03 Thread Eric Covener
On Fri, Jan 3, 2014 at 11:20 AM, Yanni Goudetsidis  wrote:
> [Fri Jan 03 16:17:49.177660 2014] [auth_digest:error] [pid 16948] (2)No such
> file or directory: AH01762: Failed to create shared memory segment on file
> /run/httpd/authdigest_shm.16948

no /run/httpd/ directory?

-
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



Re: [users@httpd] AH00020: Configuration Failed, exiting

2014-01-03 Thread Yanni Goudetsidis
Yes.

Many thanks Eric.

All the best for the new year.



On 3 January 2014 16:25, Eric Covener  wrote:

> On Fri, Jan 3, 2014 at 11:20 AM, Yanni Goudetsidis 
> wrote:
> > [Fri Jan 03 16:17:49.177660 2014] [auth_digest:error] [pid 16948] (2)No
> such
> > file or directory: AH01762: Failed to create shared memory segment on
> file
> > /run/httpd/authdigest_shm.16948
>
> no /run/httpd/ directory?
>
> -
> To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
> For additional commands, e-mail: users-h...@httpd.apache.org
>
>


[users@httpd] WebDAV oddness

2014-01-03 Thread LuKreme
On my Apache 2.4.6 (under FreeBSD 8.0-RELEASE) I have two nearly identical 
directives setup for webdav. The first is in users/example.com.conf and the 
second is in extras/vhosts.conf:


   ServerName virtual.example.net
   DocumentRoot /www/example.net/
   DavLockDB /tmp/DavLock.randy
   
  DAV On
  AuthType digest
  AuthName Randy
  AuthUserFile /usr/local/www/example.net/.htdigest
  Options All
  ForceType text/plain
  
 require user randy
  
   


The second:


   ServerName webdav.example.com
   DocumentRoot /usr/local/www/
   DavLockDB /tmp/DavLock.mike
   
 DAV On
 AuthType digest
 AuthName ServerRoot
 AuthUserFile /usr/local/www/msmith/.digestpass
 Options All
 ForceType text/plain
 
require user ben
 
   


Neither one works, but they fail to work in different ways. The first fails to 
connect (not fails to auth, that behaves differently). the only thing I see in 
the logs is:

[03/Jan/2014:14:30:32 -0700] "OPTIONS / HTTP/1.1" 200 - "-" "WebDAVFS/3.0.0 
(03008000) Darwin/13.0.0 (x86_64)"

The second connects just fine to the top-level of the webserver, but has no 
permission to access any thing but the top-level view of the server. I can edit 
files on that top level without an error on my local machine, but those edits 
do not propagate to the server. I can open folders, but not see the contents of 
those folders.

This second dav will generate errors:

[Fri Jan 03 14:11:38.922133 2014] [dav:error] [pid 43284] (13)Permission 
denied: [client 12.34.56.789:63913] An error occurred while opening a resource. 
 [500, #0]
[Fri Jan 03 14:11:42.600576 2014] [dav:error] [pid 43284] (13)Permission 
denied: [client 12.34.56.789:63916] Unable to create collection.  [403, #0]
[Fri Jan 03 14:15:23.169161 2014] [auth_digest:info] [pid 43306] [client 
12.34.56.789:63950] AH01778: user ben: nonce expired (316.00 seconds old - max 
lifetime 300.00) - sending new nonce
[Fri Jan 03 14:15:23.541680 2014] [dav:error] [pid 43306] [client 
12.34.56.789:63950] Unable to PUT new contents for /contact.html.  [403, #0]
[Fri Jan 03 14:15:23.541690 2014] [dav:error] [pid 43306] (13)Permission 
denied: [client 12.34.56.789:63950] An error occurred while opening a resource. 
 [500, #0]

The files and folders are owned by the www user.

-- 
Gehm's Corollary to Clarke's law: Any technology distinguishable from
magic is insufficiently advanced.


-
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org