Re: [us...@httpd] Limited TextArea buffer

2009-09-10 Thread Nick
Thanks for the comeback... >>I have a problem with a limited carry over buffer size >> with TextArea being limited to around 6,500-7,000 bytes. >> >> I placed the directive LimitRequestBody 0 in my apache2.conf >> (don't use httpd.conf) but it makes no difference. When I >> past

Re: [us...@httpd] About apache2 vulnerability with apr and apr-utils. How bad is it?

2009-09-10 Thread William A. Rowe, Jr.
David Taveras wrote: > > You mentioned as far as APR causing a DoS, how about the execution of > arbitrary code through apache as the CVE says..? No, you misinterpreted; the application developer must expose a DoS/memory exhaustion vector; where that exists, and the affected version of APR is use

Re: [us...@httpd] About apache2 vulnerability with apr and apr-utils. How bad is it?

2009-09-10 Thread David Taveras
Hello William. You mentioned as far as APR causing a DoS, how about the execution of arbitrary code through apache as the CVE says..? Thank you Daniel On Thu, Sep 10, 2009 at 6:54 PM, William A. Rowe, Jr. wrote: > David Taveras wrote: > > > > I run apache 2.2.9 & apache 2.2.11 both with apr-

Re: [us...@httpd] About apache2 vulnerability with apr and apr-utils. How bad is it?

2009-09-10 Thread William A. Rowe, Jr.
David Taveras wrote: > > I run apache 2.2.9 & apache 2.2.11 both with apr-1.2.11p2 & > apr-util-1.2.10p2 > > According to the CVE at > http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2412 only 0.9.x > and 1.3.x are affected . Could anybody confirm that this is so? If > not.. how bad

[us...@httpd] About apache2 vulnerability with apr and apr-utils. How bad is it?

2009-09-10 Thread David Taveras
Hello, I run apache 2.2.9 & apache 2.2.11 both with apr-1.2.11p2 & apr-util-1.2.10p2 According to the CVE at http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2412 only 0.9.x and 1.3.x are affected . Could anybody confirm that this is so? If not.. how bad is this vulnerability to a us

Re: [us...@httpd] Excluding String from access log

2009-09-10 Thread André Warnier
Mohit, Mohit Anchlia wrote: All I want is to remove that "info" message from the access log. So basically I don't want to see that in access or error log read this : http://httpd.apache.org/docs/2.2/mod/core.html#loglevel You can stop all [info] messages from appearing in the error log. As t

Re: [us...@httpd] Excluding String from access log

2009-09-10 Thread Mohit Anchlia
All I want is to remove that "info" message from the access log. So basically I don't want to see that in access or error log On Wed, Sep 9, 2009 at 7:12 PM, Eric Covener wrote: > On Wed, Sep 9, 2009 at 6:20 PM, Mohit Anchlia wrote: >> These go as "info" in access log > > It's pretty unusual for

Re: [us...@httpd] .htaccess does not work

2009-09-10 Thread testwreq wreq
I figured out the small typo in the path. Thanks for reading my request and suggestions. On Thu, Sep 10, 2009 at 1:02 PM, Jonathan Zuckerman wrote: > On Thu, Sep 10, 2009 at 8:56 AM, testwreq wreq > wrote: > > Hello, My goal is to password protect a few pages in one of the userdir > > (/home/us

Re: [us...@httpd] .htaccess

2009-09-10 Thread André Warnier
Jos Chrispijn wrote: Is there a way of forcing webbrowser to present a login popup every time they enter a protected URL? Now I login once and until I delete my cookies, I can go to the URL without having a username and password filled out, even not having the 'remember password' option active.

Re: [us...@httpd] Limited TextArea buffer

2009-09-10 Thread André Warnier
Eric Covener wrote: On Thu, Sep 10, 2009 at 12:02 PM, wrote: Hi, I have a problem with a limited carry over buffer size with TextArea being limited to around 6,500-7,000 bytes. I placed the directive LimitRequestBody 0 in my apache2.conf (don't use httpd.conf) but it makes no di

Re: [us...@httpd] .htaccess does not work

2009-09-10 Thread André Warnier
testwreq wreq wrote: The error in the eerror log is: [debug] mod_auth_pgsql.c(774): [client 10.105.9.103] [mod_auth_pgsql.c] - missing configuration parameters And where does that come from ? Hint : mod_auth_pgsql.c ? - The o

Re: [us...@httpd] .htaccess does not work

2009-09-10 Thread Jonathan Zuckerman
On Thu, Sep 10, 2009 at 8:56 AM, testwreq wreq wrote: > Hello, My goal is to password protect a few pages in one of the userdir > (/home/users/vinda). And, I cannot get this to work. Any suggestions will be > welcomed! Below is the configuration in my httpd.conf file: > > Options -Indexes FollowS

[us...@httpd] Re: Refreshing renewed SSL certificate

2009-09-10 Thread Andy Hawkins
Hi, In article <4aa7cecd.9020...@newmediagateway.com>, Justin Pasher wrote: > FWIW, in my experience, installing or changing an SSL cert on an Apache > 1 server requires a stop and start (restart/reload won't work). Now > this is using apache-ssl (as opposed to mod_ssl), but it sound

Re: [us...@httpd] .htaccess

2009-09-10 Thread Bob Ionescu
2009/9/7 Jos Chrispijn : > Is there a way of forcing webbrowser to present a login popup every time > they enter a protected URL? Now I login once and until I delete my > cookies, I can go to the URL without having a username and password > filled out, even not having the 'remember password' option

Re: [us...@httpd] Limited TextArea buffer

2009-09-10 Thread Eric Covener
On Thu, Sep 10, 2009 at 12:02 PM, wrote: >   Hi, >        I have a problem with a limited carry over buffer size with >   TextArea being limited to around 6,500-7,000 bytes. > >   I placed the directive LimitRequestBody 0 in my apache2.conf >   (don't use httpd.conf) but it makes no difference. Wh

RE: [us...@httpd] openssl_pkcs7_sign error

2009-09-10 Thread Hoang, Le Vu
I'm using Centos 5.2. I compile Apache from source with: 1. make clean 2. make dist clean 3. ./configure 4. make 5. make install After that, I restart the apache and reboot the server Hoang Vu Le (Mr.) System Operator Mobile: 0905 644 777 Email: hoang...@vietunion.com.vn --

[us...@httpd] Limited TextArea buffer

2009-09-10 Thread Nick
Hi, I have a problem with a limited carry over buffer size with TextArea being limited to around 6,500-7,000 bytes. I placed the directive LimitRequestBody 0 in my apache2.conf (don't use httpd.conf) but it makes no difference. When I paste 12,000+ characters of data into a

[us...@httpd] .htaccess does not work

2009-09-10 Thread testwreq wreq
Hello, My goal is to password protect a few pages in one of the userdir (/home/users/vinda). And, I cannot get this to work. Any suggestions will be welcomed! Below is the configuration in my httpd.conf file: Options -Indexes FollowSymLinks IncludesNoExec Options +ExecCGI DirectoryIndex index.html

Re: [us...@httpd] Is it okay to not use exportable ciphers?

2009-09-10 Thread Matus UHLAR - fantomas
On 20.08.09 15:16, Brian Mearns wrote: > For the sake of security, I'd like to configure my SSL/TLS server to > not allow export level ciphers (using the SSLCipherSuite directive). > Is this going to realistically limit the number of people who can use > a secure connection to my site? Specifically

Re: [us...@httpd] Case sensitive URLs

2009-09-10 Thread Nick Kew
Andrew Hole wrote: Hi guys! How can I ensure case sensitive URLs? I've test.html at DocumentRoot. I want a "File not found" error when I invoke http://host/TEST.html. You'll get that as standard. Just don't use any of the hacks that make them appear case-insensitive, like mod_speling. The

Re: [us...@httpd] Case sensitive URLs

2009-09-10 Thread Tom Evans
On Thu, 2009-09-10 at 15:40 +0100, Andrew Hole wrote: > Hi guys! > > How can I ensure case sensitive URLs? > > I've test.html at DocumentRoot. I want a "File not found" error when I > invoke http://host/TEST.html. > > Thanks a lot > A. You need to use a case sensitive file system, ie not window

Re: [us...@httpd] A question about configuring Apache Http Server

2009-09-10 Thread André Warnier
thomas2004 wrote: ... That either means that the host "web-mycompany.com" is not running, or that it is not listening on port 80. It looks like you are not even getting as far as connecting to your Apache webserver. Could be. That's the reason I ask this question. :) Where and how can I ch

[us...@httpd] Case sensitive URLs

2009-09-10 Thread Andrew Hole
Hi guys! How can I ensure case sensitive URLs? I've test.html at DocumentRoot. I want a "File not found" error when I invoke http://host/TEST.html. Thanks a lot A.

Re: [us...@httpd] Downloaded java applet bypasses proxy

2009-09-10 Thread Nick Kew
Eric Jacobs wrote: We were trying to add an extra layer of security in front of some financial apps with a reverse proxy (which required a login). It worked until we tried restricting access to financial apps only to proxy server. Turns out, after the initial connection, browsers downloaded app

[us...@httpd] Apache Tuning

2009-09-10 Thread Daniel Viana Auler(Plebeuz)
Hello, I have a question about MaxClients and maxservers, when i tuning i found in apache that to calculate maxclients i need to calculate the SO used memory-total memory divided by the memory witch each apache process use, but how can i know how to do it correctly, because apache proce

Re: [us...@httpd] A question about configuring Apache Http Server

2009-09-10 Thread thomas2004
>what version of Apache ? It is httpd-2.0.46-46.2.ent >Where is that Jboss server running ? On RH-Linux on other machine. >that has nothing to do with either Apache or Jboss. You are right. This is configuration of the machine. I have to do this since the machine will listen to this ip. >That i

[us...@httpd] Downloaded java applet bypasses proxy

2009-09-10 Thread Eric Jacobs
We were trying to add an extra layer of security in front of some financial apps with a reverse proxy (which required a login). It worked until we tried restricting access to financial apps only to proxy server. Turns out, after the initial connection, browsers downloaded applets which then trie

Re: [us...@httpd] proxy server

2009-09-10 Thread Krist van Besien
On Thu, Sep 10, 2009 at 3:44 PM, idan72 wrote: > > Thanks for your quick reply. > Can you explain how do I do the mirroring part ? Is it with proxy server ? > Can you give example for one or more ? Mirrororing basically means copying all the content that exists on one server on another one. There

Re: [us...@httpd] proxy server

2009-09-10 Thread idan72
Thanks for your quick reply. Can you explain how do I do the mirroring part ? Is it with proxy server ? Can you give example for one or more ? Can't I configure in client side to use the local server and not the main server (where I put my app)? Thanks Krist van Besien wrote: > > On Thu, Sep

Re: [us...@httpd] proxy server

2009-09-10 Thread Krist van Besien
On Thu, Sep 10, 2009 at 3:26 PM, idan72 wrote: > I have web application writing in Flex. > The clients are from different location(countries). > I want that when client try to reach the URL of application he will get it > from local server and not from the main server. > Also if possible that if

Re: [us...@httpd] openssl_pkcs7_sign error

2009-09-10 Thread Krist van Besien
On Thu, Sep 10, 2009 at 12:11 PM, Hoang, Le Vu wrote: > > Hello, > > My server is running Apache 2.2.9, PHP 5.2.9, OpenSSL 0.9.8j, Zend Optimizer > 3.3.0. Everything is fine. I don’t get any error. > > After I upgraded Apache to 2.2.13 (and reboot server), I can’t use this PHP > function: openss

[us...@httpd] proxy server

2009-09-10 Thread idan72
Hi, I have web application writing in Flex. The clients are from different location(countries). I want that when client try to reach the URL of application he will get it from local server and not from the main server. Also if possible that if there is update in main server the update will be sen

Re: [us...@httpd] A question about configuring Apache Http Server

2009-09-10 Thread André Warnier
thomas2004 wrote: I installed the Apache Http Web Server what version of Apache ? on RH-Linux and want to configure it so that the incoming browsing will be forward to the application deployted on Jboss. Where is that Jboss server running ? I do followings: 1. Set the ip-address in "/

Re: [us...@httpd] Apache 64 bit ?

2009-09-10 Thread ricardo figueiredo
ok !! Ricardo On Thu, Sep 10, 2009 at 2:00 AM, Krist van Besien wrote: > On Wed, Sep 9, 2009 at 7:51 PM, ricardo13 > wrote: > > > > > Ok !! > > Do I need any special parameter for compile ?? > > For example: ./configure --with-64bit > > In your case, since you are planning to use Ubuntu (a goo

[us...@httpd] A question about configuring Apache Http Server

2009-09-10 Thread thomas2004
Hi all, I installed the Apache Http Web Server on RH-Linux and want to configure it so that the incoming browsing will be forward to the application deployted on Jboss. I do followings: 1. Set the ip-address in "/etc/sysconfig/network-scripts/ifcfg-eth0:xx" 2. Create a .conf file which looks as

[us...@httpd] openssl_pkcs7_sign error

2009-09-10 Thread Hoang, Le Vu
Hello, My server is running Apache 2.2.9, PHP 5.2.9, OpenSSL 0.9.8j, Zend Optimizer 3.3.0. Everything is fine. I don’t get any error. After I upgraded Apache to 2.2.13 (and reboot server), I can’t use this PHP function: openssl_pkcs7_sign The PHP error is: Warning: openssl_pkcs7_sign() [funct