Re: [EMAIL PROTECTED] Issue with SSL configuration.

2008-10-29 Thread Vasanth Kumar ravi
All, Can someone throw light on this issue. Thanks. On Wed, Oct 29, 2008 at 4:28 PM, Vasanth Kumar ravi <[EMAIL PROTECTED]>wrote: > Thanks folks.. > After posting this in the forum , I did an extensive research on the > internet and it was resolved. > Major problem was due to the Virtual host co

[EMAIL PROTECTED] mod_ssl + basic auth

2008-10-29 Thread Ricardo Ramos
Hi! I want to do this: check if the client sends me a certificate which my self-signed CA has signed or if the client is inside the same network or if the client enters a username+password. However, with this, I can't have my browser(s) prompting me for a certificate.. it just seems that that par

RE: [EMAIL PROTECTED] Authenticating via ldap and standard http

2008-10-29 Thread Emmanuel Bailleul
Hi, As per http://httpd.apache.org/docs/2.2/en/mod/mod_auth_basic.html#page-header, more than one authbasicprovider may be specified in your conf file, but the second one will only be used if the user is not found in the firt one. Regards. Emmanuel -Message d'origine- De : Malka Cymba

[EMAIL PROTECTED] Authenticating via ldap and standard http

2008-10-29 Thread Malka Cymbalista
Is it possible to specify ldap authentication as well as basic http authentication for the same directory? Thanks for any help. -- Malka Cymbalista Webmaster, Weizmann Institute of Science [EMAIL PROTECTED] 08-934-3036 - The

[EMAIL PROTECTED] Enabling module mod_expires

2008-10-29 Thread Arsen Hayrapetyan
Hello, I need to use the directives ExpiresActive and ExpiresDefault in my httpd.conf, but my server is compiled without mod_expires support (checked with 'apachectl -l'). How can I enable this module? Does it require re-compilation of the server or is there a method for compiling a module on

AW: AW: [EMAIL PROTECTED] Stripping or setting certain http response headerrs

2008-10-29 Thread christian.folini
In such cases, you work with environment variables. The doc lists the following example: SetEnvIf MyRequestHeader myvalue HAVE_MyRequestHeader Header set MyHeader "%D %t mytext" env=HAVE_MyRequestHeader Alternatively you can set the environment variable via mod_rewrite to allow for more complic

AW: [us...@httpd] Stripping or setting certain http response headerrs

2008-10-29 Thread christian.folini
How about mod_headers? http://httpd.apache.org/docs/2.2/mod/mod_headers.html -> This module provides directives to control and modify HTTP request and response headers. Headers can be merged, replaced or removed. -- Christian Folini, IT 222 Webserver Security Engineer -Ursprüngliche Nach

Re: AW: [EMAIL PROTECTED] Stripping or setting certain http response headerrs

2008-10-29 Thread Harald Falkenberg
Hi, yes, I saw it already. But how to change http response headers only in certain cases? For certain user agents? If you can give me an example, that would be nice. regards Harald - The official User-To-User support

[EMAIL PROTECTED] caching webdav traffic through a reverseproxy

2008-10-29 Thread Seymen Ertas
Hi all, I am trying to utilize apache mod_cache and mod_disk_cache modules to cache webdav traffic on an apache server doing reverse proxy. Below is a description of my current approach which does not seem to be working (it doesn't seem like i can even get regular caching to work), if anyone out t

[EMAIL PROTECTED] Stripping or setting certain http response headerrs

2008-10-29 Thread Harald Falkenberg
Hi, I use some search engines, which work so far fine, but step into unwanted crawling behaviour when they encounter certain http response header information from the responding web servers. For instance: the http response header expires is fine for browser, but aks the search enginge to

AW: [EMAIL PROTECTED] Does the "time taken to serve the request (%D)" include the time taken to read the request?

2008-10-29 Thread christian.folini
Hi Christophe, AFAIK, the timestamp of the request is the timestamp when the first request line (i.e. GET /index.html HTTP/1.1) is being read by the server. The duration is calculated as a delta to this base. Regs, Christian P.S. In case the timestamp is not enough exact, then try out m

[EMAIL PROTECTED] Does the "time taken to serve the request (%D)" include the time taken to read the request?

2008-10-29 Thread Furmaniak Christophe
Hi, We use a java lib (HttpClient) to measure a web page response time, the page is served by httpd. We trace the time taken to serve the request using a %D in the LogFormat directive, but sometimes the duration logged in the access file does not match the duration measured using HttpClient (l

Re: [EMAIL PROTECTED] Issue with SSL configuration.

2008-10-29 Thread Vasanth Kumar ravi
Thanks folks.. After posting this in the forum , I did an extensive research on the internet and it was resolved. Major problem was due to the Virtual host configuration..Now i am able to use the SSL at the apache level. wildcard NameVirtualHosts and _default_ servers: *:443 is a