Thanks for the comeback...
>>I have a problem with a limited carry over buffer size
>> with TextArea being limited to around 6,500-7,000 bytes.
>>
>> I placed the directive LimitRequestBody 0 in my apache2.conf
>> (don't use httpd.conf) but it makes no difference. When I
>> past
David Taveras wrote:
>
> You mentioned as far as APR causing a DoS, how about the execution of
> arbitrary code through apache as the CVE says..?
No, you misinterpreted; the application developer must expose a DoS/memory
exhaustion vector; where that exists, and the affected version of APR
is use
Hello William.
You mentioned as far as APR causing a DoS, how about the execution of
arbitrary code through apache as the CVE says..?
Thank you
Daniel
On Thu, Sep 10, 2009 at 6:54 PM, William A. Rowe, Jr.
wrote:
> David Taveras wrote:
> >
> > I run apache 2.2.9 & apache 2.2.11 both with apr-
David Taveras wrote:
>
> I run apache 2.2.9 & apache 2.2.11 both with apr-1.2.11p2 &
> apr-util-1.2.10p2
>
> According to the CVE at
> http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2412 only 0.9.x
> and 1.3.x are affected . Could anybody confirm that this is so? If
> not.. how bad
Hello,
I run apache 2.2.9 & apache 2.2.11 both with apr-1.2.11p2 &
apr-util-1.2.10p2
According to the CVE at
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2412 only 0.9.x and
1.3.x are affected . Could anybody confirm that this is so? If not.. how
bad is this vulnerability to a us
Mohit,
Mohit Anchlia wrote:
All I want is to remove that "info" message from the access log. So
basically I don't want to see that in access or error log
read this : http://httpd.apache.org/docs/2.2/mod/core.html#loglevel
You can stop all [info] messages from appearing in the error log.
As t
All I want is to remove that "info" message from the access log. So
basically I don't want to see that in access or error log
On Wed, Sep 9, 2009 at 7:12 PM, Eric Covener wrote:
> On Wed, Sep 9, 2009 at 6:20 PM, Mohit Anchlia wrote:
>> These go as "info" in access log
>
> It's pretty unusual for
I figured out the small typo in the path. Thanks for reading my request and
suggestions.
On Thu, Sep 10, 2009 at 1:02 PM, Jonathan Zuckerman
wrote:
> On Thu, Sep 10, 2009 at 8:56 AM, testwreq wreq
> wrote:
> > Hello, My goal is to password protect a few pages in one of the userdir
> > (/home/us
Jos Chrispijn wrote:
Is there a way of forcing webbrowser to present a login popup every time
they enter a protected URL? Now I login once and until I delete my
cookies, I can go to the URL without having a username and password
filled out, even not having the 'remember password' option active.
Eric Covener wrote:
On Thu, Sep 10, 2009 at 12:02 PM, wrote:
Hi,
I have a problem with a limited carry over buffer size with
TextArea being limited to around 6,500-7,000 bytes.
I placed the directive LimitRequestBody 0 in my apache2.conf
(don't use httpd.conf) but it makes no di
testwreq wreq wrote:
The error in
the eerror log is:
[debug] mod_auth_pgsql.c(774): [client 10.105.9.103] [mod_auth_pgsql.c] -
missing configuration parameters
And where does that come from ?
Hint : mod_auth_pgsql.c ?
-
The o
On Thu, Sep 10, 2009 at 8:56 AM, testwreq wreq wrote:
> Hello, My goal is to password protect a few pages in one of the userdir
> (/home/users/vinda). And, I cannot get this to work. Any suggestions will be
> welcomed! Below is the configuration in my httpd.conf file:
>
> Options -Indexes FollowS
Hi,
In article <4aa7cecd.9020...@newmediagateway.com>,
Justin Pasher wrote:
> FWIW, in my experience, installing or changing an SSL cert on an Apache
> 1 server requires a stop and start (restart/reload won't work). Now
> this is using apache-ssl (as opposed to mod_ssl), but it sound
2009/9/7 Jos Chrispijn :
> Is there a way of forcing webbrowser to present a login popup every time
> they enter a protected URL? Now I login once and until I delete my
> cookies, I can go to the URL without having a username and password
> filled out, even not having the 'remember password' option
On Thu, Sep 10, 2009 at 12:02 PM, wrote:
> Hi,
> I have a problem with a limited carry over buffer size with
> TextArea being limited to around 6,500-7,000 bytes.
>
> I placed the directive LimitRequestBody 0 in my apache2.conf
> (don't use httpd.conf) but it makes no difference. Wh
I'm using Centos 5.2.
I compile Apache from source with:
1. make clean
2. make dist clean
3. ./configure
4. make
5. make install
After that, I restart the apache and reboot the server
Hoang Vu Le (Mr.)
System Operator
Mobile: 0905 644 777
Email: hoang...@vietunion.com.vn
--
Hi,
I have a problem with a limited carry over buffer size with
TextArea being limited to around 6,500-7,000 bytes.
I placed the directive LimitRequestBody 0 in my apache2.conf
(don't use httpd.conf) but it makes no difference. When I paste
12,000+ characters of data into a
Hello, My goal is to password protect a few pages in one of the userdir
(/home/users/vinda). And, I cannot get this to work. Any suggestions will be
welcomed! Below is the configuration in my httpd.conf file:
Options -Indexes FollowSymLinks IncludesNoExec
Options +ExecCGI
DirectoryIndex index.html
On 20.08.09 15:16, Brian Mearns wrote:
> For the sake of security, I'd like to configure my SSL/TLS server to
> not allow export level ciphers (using the SSLCipherSuite directive).
> Is this going to realistically limit the number of people who can use
> a secure connection to my site? Specifically
Andrew Hole wrote:
Hi guys!
How can I ensure case sensitive URLs?
I've test.html at DocumentRoot. I want a "File not found" error when I
invoke http://host/TEST.html.
You'll get that as standard. Just don't use any of the hacks that
make them appear case-insensitive, like mod_speling.
The
On Thu, 2009-09-10 at 15:40 +0100, Andrew Hole wrote:
> Hi guys!
>
> How can I ensure case sensitive URLs?
>
> I've test.html at DocumentRoot. I want a "File not found" error when I
> invoke http://host/TEST.html.
>
> Thanks a lot
> A.
You need to use a case sensitive file system, ie not window
thomas2004 wrote:
...
That either means that the host "web-mycompany.com" is not running, or
that it is not listening on port 80.
It looks like you are not even getting as far as connecting to your Apache
webserver.
Could be. That's the reason I ask this question. :)
Where and how can I ch
Hi guys!
How can I ensure case sensitive URLs?
I've test.html at DocumentRoot. I want a "File not found" error when I
invoke http://host/TEST.html.
Thanks a lot
A.
Eric Jacobs wrote:
We were trying to add an extra layer of security in front of some financial
apps with a reverse proxy (which required a login). It worked until we tried
restricting access to financial apps only to proxy server. Turns out, after
the initial connection, browsers downloaded app
Hello,
I have a question about MaxClients and maxservers, when i tuning
i found in apache that to calculate maxclients i need to calculate the
SO used memory-total memory divided by the memory witch each apache
process use, but how can i know how to do it correctly, because apache
proce
>what version of Apache ?
It is httpd-2.0.46-46.2.ent
>Where is that Jboss server running ?
On RH-Linux on other machine.
>that has nothing to do with either Apache or Jboss.
You are right. This is configuration of the machine. I have to do this since
the machine will listen to this ip.
>That i
We were trying to add an extra layer of security in front of some financial
apps with a reverse proxy (which required a login). It worked until we tried
restricting access to financial apps only to proxy server. Turns out, after
the initial connection, browsers downloaded applets which then trie
On Thu, Sep 10, 2009 at 3:44 PM, idan72 wrote:
>
> Thanks for your quick reply.
> Can you explain how do I do the mirroring part ? Is it with proxy server ?
> Can you give example for one or more ?
Mirrororing basically means copying all the content that exists on one
server on another one. There
Thanks for your quick reply.
Can you explain how do I do the mirroring part ? Is it with proxy server ?
Can you give example for one or more ?
Can't I configure in client side to use the local server and not the main
server (where I put my app)?
Thanks
Krist van Besien wrote:
>
> On Thu, Sep
On Thu, Sep 10, 2009 at 3:26 PM, idan72 wrote:
> I have web application writing in Flex.
> The clients are from different location(countries).
> I want that when client try to reach the URL of application he will get it
> from local server and not from the main server.
> Also if possible that if
On Thu, Sep 10, 2009 at 12:11 PM, Hoang, Le Vu
wrote:
>
> Hello,
>
> My server is running Apache 2.2.9, PHP 5.2.9, OpenSSL 0.9.8j, Zend Optimizer
> 3.3.0. Everything is fine. I don’t get any error.
>
> After I upgraded Apache to 2.2.13 (and reboot server), I can’t use this PHP
> function: openss
Hi,
I have web application writing in Flex.
The clients are from different location(countries).
I want that when client try to reach the URL of application he will get it
from local server and not from the main server.
Also if possible that if there is update in main server the update will be
sen
thomas2004 wrote:
I installed the Apache Http Web Server
what version of Apache ?
on RH-Linux and want to configure it
so that the incoming browsing will be forward to the application deployted
on Jboss.
Where is that Jboss server running ?
I do followings:
1. Set the ip-address in "/
ok !!
Ricardo
On Thu, Sep 10, 2009 at 2:00 AM, Krist van Besien wrote:
> On Wed, Sep 9, 2009 at 7:51 PM, ricardo13
> wrote:
>
> >
> > Ok !!
> > Do I need any special parameter for compile ??
> > For example: ./configure --with-64bit
>
> In your case, since you are planning to use Ubuntu (a goo
Hi all,
I installed the Apache Http Web Server on RH-Linux and want to configure it
so that the incoming browsing will be forward to the application deployted
on Jboss. I do followings:
1. Set the ip-address in "/etc/sysconfig/network-scripts/ifcfg-eth0:xx"
2. Create a .conf file which looks as
Hello,
My server is running Apache 2.2.9, PHP 5.2.9, OpenSSL 0.9.8j, Zend Optimizer
3.3.0. Everything is fine. I don’t get any error.
After I upgraded Apache to 2.2.13 (and reboot server), I can’t use this PHP
function: openssl_pkcs7_sign
The PHP error is:
Warning: openssl_pkcs7_sign() [funct
36 matches
Mail list logo