Re: [us...@httpd] authentication question

2009-05-11 Thread Ross Boylan
On Mon, 2009-05-11 at 19:23 +0200, André Warnier wrote: > Ross Boylan wrote: > > On Mon, 2009-05-11 at 11:21 -0400, Nick Owen wrote: > >> On Sat, May 9, 2009 at 12:34 PM, Ross Boylan wrote: > >>> Suppose I have apache running in front of a web application and > >>> subversion. > >>> > >>> I am thi

Re: [us...@httpd] some kind of untypical problem

2009-05-11 Thread William A. Rowe, Jr.
naranja naranja wrote: > > My question is could it be done with the custom apache module? or its > impossible or very hard to achieve and only solution is to embed in > the code of the aplication, which controls the FPGA card, my custom > http server. Writing an Apache module is non-trivial, and

Re: [us...@httpd] Mixing rewrite with authn_dbd: Rewriting based on path value stored in mysql table

2009-05-11 Thread Bob Ionescu
2009/5/11 Roman Medina-Heigl Hernandez : > Bob Ionescu escribió: >> 2009/3/2 Roman Medina-Heigl Hernandez : >>> The problem is that you cannot have %{REMOTE_USER} as 2nd parameters in >>> RewriteCond, so I have no way for comparing it with $1 >> >> -didn't read all-; but you can compare it with a r

Re: [us...@httpd] Re: conf file: changing domains

2009-05-11 Thread Igor Cicimov
Did you try my first suggestion? If it didn't work try this one RewriteEngine On RewriteCond %{HTTP_HOST} ^www\.merill-lynch\.com$ RewriteRule ^/(.*) http://www.b-of-a.com/$1 [R=301,L] Igor On Tue, May 12, 2009 at 8:47 AM, kp_stv wrote: > I tried Matus suggestion: > Redirect permanent / http:/

[us...@httpd] Re: conf file: changing domains

2009-05-11 Thread kp_stv
I tried Matus suggestion: Redirect permanent / http://www.b-of-a.com/ but it does not work, unless it matches exactly. In other words, http://www.olddomain.com/ is replaced by http://www.newdomain.com/ as desired, but http://www.olddomain.com/about.html (or anything else after the domain name)

Re: [us...@httpd] authentication question

2009-05-11 Thread Nick Owen
On Mon, May 11, 2009 at 1:01 PM, Ross Boylan wrote: > On Mon, 2009-05-11 at 11:21 -0400, Nick Owen wrote: >> On Sat, May 9, 2009 at 12:34 PM, Ross Boylan wrote: >> > Suppose I have apache running in front of a web application and >> > subversion. >> > >> > I am thinking of a scenario in which the

Re: [us...@httpd] Mixing rewrite with authn_dbd: Rewriting based on path value stored in mysql table

2009-05-11 Thread Roman Medina-Heigl Hernandez
Bob Ionescu escribió: > 2009/3/2 Roman Medina-Heigl Hernandez : >> More comments: >> - at the beginning I tried something like: >> RewriteBase /stats >> RewriteCond $1 !^%{REMOTE_USER}/ >> RewriteRule ^/clientes/(.*) >> /stats/%{REMOTE_USER}/stats/http/$1 [

Re: [us...@httpd] authentication question

2009-05-11 Thread André Warnier
Peter Schober wrote: * André Warnier [2009-05-11 19:24]: in all kinds of applications that can run under Apache, to obtain a user-id ? The answer is basically no, because Apache (and HTTP) do not define such a standard mechanism. Support for REMOTE_USER is not so bad, I'd say. Well, REMOTE

Re: [us...@httpd] authentication question

2009-05-11 Thread Peter Schober
* André Warnier [2009-05-11 19:24]: > in all kinds of applications that can run under Apache, to obtain a > user-id ? The answer is basically no, because Apache (and HTTP) do not > define such a standard mechanism. Support for REMOTE_USER is not so bad, I'd say. -peter

Re: [us...@httpd] authentication question

2009-05-11 Thread André Warnier
Ross Boylan wrote: On Mon, 2009-05-11 at 11:21 -0400, Nick Owen wrote: On Sat, May 9, 2009 at 12:34 PM, Ross Boylan wrote: Suppose I have apache running in front of a web application and subversion. I am thinking of a scenario in which the web application provides a login page. However, the

Re: [us...@httpd] Mixing rewrite with authn_dbd: Rewriting based on path value stored in mysql table

2009-05-11 Thread Bob Ionescu
2009/3/2 Roman Medina-Heigl Hernandez : > More comments: > - at the beginning I tried something like: > RewriteBase /stats > RewriteCond $1 !^%{REMOTE_USER}/ > RewriteRule ^/clientes/(.*) > /stats/%{REMOTE_USER}/stats/http/$1 [PT] > > The problem is that yo

Re: [us...@httpd] authentication question

2009-05-11 Thread Ross Boylan
On Mon, 2009-05-11 at 11:21 -0400, Nick Owen wrote: > On Sat, May 9, 2009 at 12:34 PM, Ross Boylan wrote: > > Suppose I have apache running in front of a web application and > > subversion. > > > > I am thinking of a scenario in which the web application provides a > > login page. However, the us

Re: [us...@httpd] authentication question

2009-05-11 Thread Nick Owen
On Sat, May 9, 2009 at 12:34 PM, Ross Boylan wrote: > Suppose I have apache running in front of a web application and > subversion. > > I am thinking of a scenario in which the web application provides a > login page.  However, the user may also browse to web pages served by > subversion. > > Is t

Re: [us...@httpd] Apache & mod_jk & 404

2009-05-11 Thread André Warnier
b.ram...@eventim.de wrote: h...@all, We use in the apache jk config: JkUnMount /admin/* ajp13 JkMount /* ajp13 Now we have the effect, that apache send all page requests with have an 404er error code (page not found) to tomcat. Example: http://locahost/admin/index.html --> Apache a

Re: [us...@httpd] Configuration of Tomcat 5.5 and Apache 2.2

2009-05-11 Thread André Warnier
Hracek, Petr wrote: Hello all, In my system I would like to enable servlets on my system but unfortunatelly I found two ways of these functionality. First case:: mod_proxy_ajp Second case: mod_jk connector. For first case I have question if the servlets are stored in /opt/pm/servlet dire

Re: [us...@httpd] Mixing rewrite with authn_dbd: Rewriting based on path value stored in mysql table

2009-05-11 Thread Roman Medina-Heigl Hernandez
Sorry for re-taking this thread... but I don't get to reach the right solution... What I'd like to solve is the security problem stated below, which could be exploited with something like: https://XXX/stats/USER2/stats/http/ Since I'm comparing against: !^/clientes/[^/]+/stats/http/ This would

RE: [us...@httpd] mod_proxy working on initial request, but not for subsequent resource requests

2009-05-11 Thread Mark Keenan
Hi Nick, I'm not completely sure I understand you, but based on what I thought I understood (!!) I now notice that if I navigate to /cameras/ (as opposed to /cameras), I now get the home page rendering correctly. Interesting! Should I therefore have a trailing slash in my proxy rule? ProxyPa

Re: [us...@httpd] mod_proxy working on initial request, but not for subsequent resource requests

2009-05-11 Thread Nick Kew
On 11 May 2009, at 12:29, Mark Keenan wrote: Here's whats appearing in my SSL log file: 192.168.101.1 - u01 [11/May/2009:12:22:06 +0100] "GET /cameras HTTP/ 1.1" 200 4238 The base path of that is /. However, when I look at the html for the index.html page, they way it is requesting res

RE: [us...@httpd] mod_proxy working on initial request, but not for subsequent resource requests

2009-05-11 Thread Mark Keenan
Hi Igor, You are correct, I have a rewrite rule pushing all http to https. However, I have tried my mod_proxy without this rule and the result is the same unfortunately. I have also tried the proxy directives in the virtual server context, but they result in the same behaviour! Thanks, MArk

RE: [us...@httpd] mod_proxy working on initial request, but not for subsequent resource requests

2009-05-11 Thread Mark Keenan
Here's whats appearing in my SSL log file: 192.168.101.1 - u01 [11/May/2009:12:22:06 +0100] "GET /cameras HTTP/1.1" 200 4238 192.168.101.1 - - [11/May/2009:12:22:06 +0100] "GET /css.css HTTP/1.1" 404 272 192.168.101.1 - - [11/May/2009:12:22:06 +0100] "GET /jpg/login_3.jpg HTTP/1.1" 404 280 192.168

[us...@httpd] Apache & mod_jk & 404

2009-05-11 Thread B.Ramann
h...@all, We use in the apache jk config: JkUnMount /admin/* ajp13 JkMount /* ajp13 Now we have the effect, that apache send all page requests with have an 404er error code (page not found) to tomcat. Example: http://locahost/admin/index.html --> Apache answerer itself http://locah

Re: [us...@httpd] A couple of questions about mod_authz_ldap

2009-05-11 Thread Tom Evans
On Fri, 2009-05-08 at 11:25 -0400, Edward Ned Harvey wrote: > Perhaps I'm not properly distinguishing authentication and authorization. > > In order to get anywhere, the user has already authenticated. However, > there are some pages where a user should not be authorized, and rather than > prompt

[us...@httpd] Configuration of Tomcat 5.5 and Apache 2.2

2009-05-11 Thread Hracek, Petr
Hello all, In my system I would like to enable servlets on my system but unfortunatelly I found two ways of these functionality. First case:: mod_proxy_ajp Second case: mod_jk connector. For first case I have question if the servlets are stored in /opt/pm/servlet directory what is correct syn

Re: [us...@httpd] conf file: changing domains

2009-05-11 Thread Matus UHLAR - fantomas
On 09.05.09 09:33, Igor Cicimov wrote: > Ups, this directive (and just that one): > > Redirect permanent .* http://www.b-of-a.com shouldn't it better be: Redirect permanent / http://www.b-of-a.com/ ? The former causes "forgetting" the path. > should be used in the VirtualHost section for the o

Re: [us...@httpd] restrict virtualhost to certain type of files

2009-05-11 Thread Matus UHLAR - fantomas
>> jeremy co wrote: >>> restrict virtual host to serve only files with the extensions html, jpg, >>> and png. and also generate custom error msg if client request other type >>> of files On 08.05.09 19:52, Nick Kew wrote: > Use to scope a restriction, and ErrorDocument. > Davide Bianchi wrote: >

Re: [us...@httpd] authentication question

2009-05-11 Thread André Warnier
Jonathan Zuckerman wrote: On Sat, May 9, 2009 at 9:34 AM, Ross Boylan wrote: Suppose I have apache running in front of a web application and subversion. I am thinking of a scenario in which the web application provides a login page. However, the user may also browse to web pages served by sub

Re: [us...@httpd] apache cannot display images

2009-05-11 Thread Matus UHLAR - fantomas
On 09.05.09 09:35, Igor Cicimov wrote: > The folder where you put the image and the image itself should be world > readable. No. It just has to be accessible by apache process, on un*x it means that only 'execute' bit is required for either user or group apache is running at. e.g. User httpd Gr