RE: [EMAIL PROTECTED] Allowed path in VHosts

2007-11-06 Thread Axel-Stephane SMORGRAV
DocumentRoot ?? -ascs -Message d'origine- De : Alberto García Gómez [mailto:[EMAIL PROTECTED] Envoyé : mardi 6 novembre 2007 19:18 À : users@httpd.apache.org; [EMAIL PROTECTED] Objet : [EMAIL PROTECTED] Allowed path in VHosts Is there some directive that configure a vistual host to o

[EMAIL PROTECTED] Apache Oracle Reports

2007-11-06 Thread GregD
Having an issue with Apache and Oracle Reports. The problem only occurs on Windows 2000 clients. The server is Windows 2003 with Apache Tomcat for the web application (JSP); Apache HTTP (for CGI) and Oracle Reports. The Apache HTTP config file has been modified to use a script alias, and directory

[EMAIL PROTECTED] dbd and mysql in apache 2.2.6

2007-11-06 Thread Daniel Campbell
Has anyone had any luck building mysql into apache version 2.2.6? I am able to get it to compile fine but if I "ldd httpd" there is no mysql library linked in and if I try and use the "DBDriver mysql" in the httpd.conf file I get "DBD: No driver for mysql" when starting it. I have followed th

Re: [EMAIL PROTECTED] Center for Internet Security's Apache Benchmark Project Update

2007-11-06 Thread Tom Hart
Tom Hart wrote: Or we could just get a pdf ;-) On another note, here's a pdf file lol. http://www.filefactory.com/mupc/aba613/ (Sorry about the file hosting service, but you don't have to register even to post and there's no pop-ups or really horrible ads that I saw)

Re: [EMAIL PROTECTED] Center for Internet Security's Apache Benchmark Project Update

2007-11-06 Thread Tom Hart
Dragon wrote: Gregor Schneider wrote: On 11/6/07, Ryan Barnett <[EMAIL PROTECTED]> wrote: > Why not a URL where we can view it? [Ryan Barnett] Here you go - http://apachebenchmark.sourceforge.net/CI

[EMAIL PROTECTED] Use NTLM only when needed

2007-11-06 Thread Fabrizio Reale
Hi, I have a web application (Plone) which has its own authentication, but in an intranet I set up the NTLM authentication using the mod_ntlm module. It works very well when I am using a windows PC, but when I use my Linux desktop I must login using the ugly NTLM popup window. I would rather prefer

Re: [EMAIL PROTECTED] Center for Internet Security's Apache Benchmark Project Update

2007-11-06 Thread Joshua Slive
On Nov 6, 2007 4:06 PM, Ryan Barnett <[EMAIL PROTECTED]> wrote: > > -Original Message- > > From: Dragon [mailto:[EMAIL PROTECTED] > > Sent: Tuesday, November 06, 2007 3:52 PM > > To: users@httpd.apache.org > > Subject: Re: [EMAIL PROTECTED] Center for Internet Security's Apache > Benchmark

Re: [EMAIL PROTECTED] Apache + DEFLATE : Does not work

2007-11-06 Thread Eric Covener
On Nov 6, 2007 10:33 AM, Preetam Palwe <[EMAIL PROTECTED]> wrote: > > > Hello > We have Apache serving our static contents and Jboss to serve the > dynamic data / transactions. > We have changed configuration in Apache so that I can use html/xml/java > script compression using mod_deflate. > Bu

RE: [EMAIL PROTECTED] Center for Internet Security's Apache Benchmark Project Update

2007-11-06 Thread Ryan Barnett
> -Original Message- > From: Dragon [mailto:[EMAIL PROTECTED] > Sent: Tuesday, November 06, 2007 3:52 PM > To: users@httpd.apache.org > Subject: Re: [EMAIL PROTECTED] Center for Internet Security's Apache Benchmark > Project Update > [Ryan Barnett] There are now PDF and html versions - htt

Re: [EMAIL PROTECTED] Center for Internet Security's Apache Benchmark Project Update

2007-11-06 Thread Dragon
Gregor Schneider wrote: On 11/6/07, Ryan Barnett <[EMAIL PROTECTED]> wrote: > Why not a URL where we can view it? [Ryan Barnett] Here you go - http://apachebenchmark.sourceforge.net/CIS_Apache_Benchm

Re: [EMAIL PROTECTED] Center for Internet Security's Apache Benchmark Project Update

2007-11-06 Thread Gregor Schneider
On 11/6/07, Ryan Barnett <[EMAIL PROTECTED]> wrote: > > > Why not a URL where we can view it? > [Ryan Barnett] Here you go - > http://apachebenchmark.sourceforge.net/CIS_Apache_Benchmark_v2.1.doc > ehem - great, however, there's no such thing like ms word on my machine - hope it's not too much ask

Re: [EMAIL PROTECTED] Code Pages Downloadable!

2007-11-06 Thread Can Le
Hi, I think you need to update AddHandler ìn your httpd.conf to use file extension .aspx as people changed AđHandler to use file .exe ? Such as: AddHandler cgi-script .aspx (example for .exe) If you can show me how to change icon in file favicon.ico, I copied and changed icon in htdocs but

Re: [EMAIL PROTECTED] Apache 2.2.6 weird security issue

2007-11-06 Thread Ruslan Sivak
William A. Rowe, Jr. wrote: Ruslan Sivak wrote: I just upgraded from Apache 2.2.0 to 2.2.6 using the binaries from apachelounge.com. After I put in the new binaries (keeping my config), it refused to start up due to a security failure (no futher information was in the logs). After running Pr

RE: [EMAIL PROTECTED] Center for Internet Security's Apache Benchmark Project Update

2007-11-06 Thread Ryan Barnett
> -Original Message- > From: Nick Kew [mailto:[EMAIL PROTECTED] > Sent: Tuesday, November 06, 2007 11:10 AM > To: users@httpd.apache.org > Subject: Re: [EMAIL PROTECTED] Center for Internet Security's Apache Benchmark > Project Update > > On Tue, 6 Nov 2007 10:32:11 -0500 > "Ryan Barnett"

[EMAIL PROTECTED] Allowed path in VHosts

2007-11-06 Thread Alberto García Gómez
Is there some directive that configure a vistual host to only see inside a path eg.: /var/www/users/user1 Este correo ha sido enviado desde el Polit�cnico de Inform�tica "Carlos Marx" de Matanzas. "La gran batalla se librar� en el campo de las ideas" ---

[EMAIL PROTECTED] Disabling Functions And Clasess

2007-11-06 Thread Alberto García Gómez
Can I use -dissable_classes- and -dissable_functions- directives inside Apache virtual host configuration using php_value directive. Este correo ha sido enviado desde el Politécnico de Informática "Carlos Marx" de Matanzas. "La gran batalla se librará en el campo de las ideas"

Re: [EMAIL PROTECTED] Apache 2.2.6 weird security issue

2007-11-06 Thread William A. Rowe, Jr.
Ruslan Sivak wrote: I just upgraded from Apache 2.2.0 to 2.2.6 using the binaries from apachelounge.com. After I put in the new binaries (keeping my config), it refused to start up due to a security failure (no futher information was in the logs). After running Process Monitor, it looks like

Re: [EMAIL PROTECTED] Re: Serving UTF-8 filenames under Linux

2007-11-06 Thread William A. Rowe, Jr.
anatoly techtonik wrote: Still no answers. =( mod_autoindex has a feature to pick a charset, but it should correspond to the reality of how the files are named on-disk. The URL is an opaque bytestring. It's only one string. If you want the files named in Latin, do that. If you want them nam

Re: [EMAIL PROTECTED] Document on keeping cgi-bin out of documentroot

2007-11-06 Thread Michael McGlothlin
I seem to remember there having been a document that explained the reasoning behind keeping /cgi-bin/ out of the documentroot of a website, but I can't seem to find it these days. Anyone know of a good article o You just want to avoid the possibility of someone getting your raw source code o

[EMAIL PROTECTED] Document on keeping cgi-bin out of documentroot

2007-11-06 Thread Issac Goldstand
I seem to remember there having been a document that explained the reasoning behind keeping /cgi-bin/ out of the documentroot of a website, but I can't seem to find it these days. Anyone know of a good article on it? Issac ---

[EMAIL PROTECTED] Apache 2.2.6 weird security issue

2007-11-06 Thread Ruslan Sivak
I just upgraded from Apache 2.2.0 to 2.2.6 using the binaries from apachelounge.com. After I put in the new binaries (keeping my config), it refused to start up due to a security failure (no futher information was in the logs). After running Process Monitor, it looks like it was failing at th

Re: [EMAIL PROTECTED] Center for Internet Security's Apache Benchmark Project Update

2007-11-06 Thread Nick Kew
On Tue, 6 Nov 2007 10:32:11 -0500 "Ryan Barnett" <[EMAIL PROTECTED]> wrote: > Greetings everyone, > > I am leading the CIS Apache Benchmark Project > (http://www.cisecurity.org/bench_apache.html) and we are in the final > stages of an updated revision. We are seeking feedback from Apache > users

RE: [EMAIL PROTECTED] RE: Apache + DEFLATE : Does not work

2007-11-06 Thread Axel-Stephane SMORGRAV
I have not had much luck using AddOutputFilterByType either. You would be better off using mod_filter. Although mod_filter is not in the 2.0 branch, it is possible to compile it for 2.0. 1. Replace ~/src/httpd-2.0.59/include/util_filter.h with util_filter.h from Apache 2.2.x (I used 2.2.4) 2

Re: [EMAIL PROTECTED] apache as non-root

2007-11-06 Thread Christian Folini
On Tue, Nov 06, 2007 at 02:29:03PM +, Melanie Pfefer wrote: > hi > > I modified user in httpd.conf but as long as the port > number is 80, only root can start apache. subsequent > process will be run as non-root. > > any idea how to allow this user to start apache? Sounds like a task for "su

[EMAIL PROTECTED] ispell blocking apache

2007-11-06 Thread Daniel Watts
Not sure if this is the right list to post to but just had a very mysterious problem of the ispell spelling checker program blocking apache from connecting to port 80. lsof shows: tg6 apache2 # lsof -i :80 COMMAND PID USER FD TYPE DEVICE SIZE NODE NAME ispell 3581 apache4u I

[EMAIL PROTECTED] RE: Apache + DEFLATE : Does not work

2007-11-06 Thread Preetam Palwe
To add one more thing I tested this with mozilla and firebug from outside my organization (from my home) and to my surprise it working. I am able to see the reduced size java script (7K instead of 29K) But it still not working from inside my organization. Am I behind any proxy? Thanks Again. ~Pr

RE: [EMAIL PROTECTED] Apache 2.2.6 Windows 2003

2007-11-06 Thread Blasdel, Jerry
We finally got our issue resolved. The ultimate problem was with how C++ Express reads internal and external manifests differently on Windows 2003 server and Windows XP. The solution: * clean build of openssl and Apache * ran the mt.exe tool to correct the internal manifest for all .so .dll and

RE: [EMAIL PROTECTED] apache as non-root

2007-11-06 Thread Boyle Owen
> -Original Message- > From: chris [mailto:[EMAIL PROTECTED] > Sent: Tuesday, November 06, 2007 4:20 PM > To: users@httpd.apache.org > Subject: Re: [EMAIL PROTECTED] apache as non-root > > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > A work around, sort of: > > If you are using a

[EMAIL PROTECTED] Apache + DEFLATE : Does not work

2007-11-06 Thread Preetam Palwe
Hello We have Apache serving our static contents and Jboss to serve the dynamic data / transactions. We have changed configuration in Apache so that I can use html/xml/java script compression using mod_deflate. But the problem is I am not able to receive compressed contents in browser. I hav

[EMAIL PROTECTED] Center for Internet Security's Apache Benchmark Project Update

2007-11-06 Thread Ryan Barnett
Greetings everyone, I am leading the CIS Apache Benchmark Project (http://www.cisecurity.org/bench_apache.html) and we are in the final stages of an updated revision. We are seeking feedback from Apache users to get a consensus on the new recommended settings. If you would be willing to particip

Re: [EMAIL PROTECTED] apache as non-root

2007-11-06 Thread chris
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 A work around, sort of: If you are using an OS with the ability to port forward (iptables on linux for example) you can create rules to forward the port 80 connection to a high port (say 8080) that the non-root-user apache instance is listening on. Y

Re: [EMAIL PROTECTED] apache as non-root

2007-11-06 Thread Tony Stevenson
Melanie Pfefer wrote: thanks. But any workaround? No, not that I know of. smime.p7s Description: S/MIME Cryptographic Signature

Re: [EMAIL PROTECTED] apache as non-root

2007-11-06 Thread Melanie Pfefer
thanks. But any workaround? thanks. --- Tony Stevenson <[EMAIL PROTECTED]> wrote: > > Melanie Pfefer wrote: > > hi > > > > I modified user in httpd.conf but as long as the > port > > number is 80, only root can start apache. > subsequent > > process will be run as non-root. > > This is expected

Re: [EMAIL PROTECTED] apache as non-root

2007-11-06 Thread Tony Stevenson
Melanie Pfefer wrote: hi I modified user in httpd.conf but as long as the port number is 80, only root can start apache. subsequent process will be run as non-root. This is expected behaviour. any idea how to allow this user to start apache? To start Apache on port 80, you need root leve

[EMAIL PROTECTED] apache as non-root

2007-11-06 Thread Melanie Pfefer
hi I modified user in httpd.conf but as long as the port number is 80, only root can start apache. subsequent process will be run as non-root. any idea how to allow this user to start apache? thanks ___ Want ideas for reducing your

Re: [EMAIL PROTECTED] Wacko Incoming URLs in Log File

2007-11-06 Thread Joshua Slive
On Nov 6, 2007 3:53 AM, Mark A. Craig <[EMAIL PROTECTED]> wrote: > Joshua, it seems you've also covered this ground :-) before: Yep. That's why I wrote that wiki page: so I wouldn't have to repeat myself. Joshua. - The official

Re: Re: [EMAIL PROTECTED] Newbie Alert! Apache 2.2.6 crash on start

2007-11-06 Thread Carly Stone
Thank you Tom. I found these: Event Type:Error Event Source:Apache Service Event Category:None Event ID:3299 Date:31/10/2007 Time:16:34:02 User:N/A Computer:CARLY-5KMNWWF1A Description: The Apache service named reported the following error: [Wed Oct 31

Re: [EMAIL PROTECTED] server help

2007-11-06 Thread lists
Michael Christie wrote: > Hi all > > I have Apache 2xx installed on to freebsd 6 with a number of virtual > host. what I am finding when the default server name ( elmo.xxx.com.au) > is put in to my browser i am not seeing the default web site in the > document root /usr/local/www/data . I do see

Re: [EMAIL PROTECTED] Serving UTF-8 filenames under Linux

2007-11-06 Thread Nick Kew
On Wed, 31 Oct 2007 09:23:41 + (UTC) anatoly techtonik <[EMAIL PROTECTED]> wrote: > Where are setting for filename encoding used by Apache httpd to find > files with international symbols in their names? What does the ErrorLog say when you get an unexpected 404? Turn up the LogLevel if necess

Re: [EMAIL PROTECTED] Apache Losing Post Data

2007-11-06 Thread Nick Kew
On Mon, 5 Nov 2007 22:42:32 -0500 "Stephen Johnston" <[EMAIL PROTECTED]> wrote: > Greetings, > > I have a fairly busy application, 11 million pageviews a month or so, > that uses Windows 2003, Apache 2.0.5x and php 5.2.3 using mod_rewrite > on about 90% of the requests. > > The application perio

Re: [EMAIL PROTECTED] apache22 complains of Module mod_ldap missing

2007-11-06 Thread Nick Kew
On Mon, 05 Nov 2007 21:45:04 -0600 Noah <[EMAIL PROTECTED]> wrote: > [Sun Nov 04 18:26:41 2007] [error] Module mod_ldap missing. Mod_ldap > (aka. util_ldap) must be loaded in order for mod_auth_ldap to function > properly Configuration Failed What's not clear about that? You need to load mod_lda

Re: [EMAIL PROTECTED] Wacko Incoming URLs in Log File

2007-11-06 Thread Mark A. Craig
Joshua, it seems you've also covered this ground :-) before: From"Joshua Slive" <[EMAIL PROTECTED]> Subject Re: [EMAIL PROTECTED] Deny CONNECT & GET http requests DateTue, 19 Jun 2007 23:40:36 GMT On 6/19/07, Bob <[EMAIL PROTECTED]> wrote: You are wrong Really? Interesting.

Re: [EMAIL PROTECTED] Apache version

2007-11-06 Thread Tony Stevenson
Subrata, I suggest you try the modules-dev list ([EMAIL PROTECTED]) I would imagine your module may need somework to get it ready to work in 2.2.x Regards, Tony Subrata Chakrabarty wrote: Hi I have written an application that works as a module with the apache . It works well with older

[EMAIL PROTECTED] Re: Serving UTF-8 filenames under Linux

2007-11-06 Thread anatoly techtonik
Still no answers. =( Any references? FAQ?Hints? Anything. Pleeease. - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail

[EMAIL PROTECTED] Apache version

2007-11-06 Thread Subrata Chakrabarty
Hi I have written an application that works as a module with the apache . It works well with older version of the apache. However with the latest version it gives segmentation fault. The following error lines also come which I circumvented using the AuthBasicAuthoritative Off. Apache/2.2.6 (Un