Re: [us...@httpd] How to upgrade mod_proxy_ajp

2010-09-30 Thread William A. Rowe Jr.
On 10/1/2010 12:04 AM, 菊池 裕 wrote: > Or should I simply upgrade "Apache" to current version? Good idea. At the very least, upgrade *ALL* of the modules/proxy/ components, you can find out what is linked into each module by inspecting config.m4 from the modules/proxy directory in the 2.2.16 tarba

[us...@httpd] How to upgrade mod_proxy_ajp

2010-09-30 Thread 菊池 裕
Hello. I'm using Apache 2.2.11 and mod_proxy_ajp to connect it with JBoss AS. I heard that mod_proxy_ajp of this version is too buggy and has some security holes, so I want to upgrade it to latest one. Can I upgrade mod_proxy_ajp by downloading the latest source of Apache(2.2.16) and compiling o

Re: [us...@httpd] Untainting module for Apache

2010-09-30 Thread J. Greenlees
J. Greenlees wrote: Nick Kew wrote: ~snip~ Either of those might find a use for it. Running it on a proxy has the advantage of being the first port of call, so long as nothing bad can come from behind the proxy. I guess that's a similar question to authentication at the proxy. The "what are

Re: [us...@httpd] Untainting module for Apache

2010-09-30 Thread J. Greenlees
Nick Kew wrote: ~snip~ Either of those might find a use for it. Running it on a proxy has the advantage of being the first port of call, so long as nothing bad can come from behind the proxy. I guess that's a similar question to authentication at the proxy. The "what are you protecting again

Re: [us...@httpd] Untainting module for Apache

2010-09-30 Thread Nick Kew
On 30 Sep 2010, at 18:23, Igor Galić wrote: > Why not put it in svn in httpd's sandbox? Hadn't 100% decided ... >> http://people.apache.org/~niq/mod_taint.html >> http://people.apache.org/~niq/mod_taint.c > > does it make more sense to use it on a reverse proxy or > on the backend in question?

Re: [us...@httpd] Scoreboard and configuration question

2010-09-30 Thread Eric Covener
On Thu, Sep 30, 2010 at 4:32 PM, David Dabbs wrote: > > >> -Original Message- >> From: Eric Covener >> Sent: Thursday, September 30, 2010 3:00 PM >> >> > Based on the Lines x DotsPerLine, I have 8192 slots. >> > Is that a correct interpretation? How do I reconcile this against >> > my MPM

RE: [us...@httpd] Scoreboard and configuration question

2010-09-30 Thread David Dabbs
> -Original Message- > From: Eric Covener > Sent: Thursday, September 30, 2010 3:00 PM > > > Based on the Lines x DotsPerLine, I have 8192 slots. > > Is that a correct interpretation? How do I reconcile this against > > my MPM config of MaxClients = 2048? > > > > > >    ServerLimit    

[us...@httpd] Win2003, Apache2.2 & Tomcat6 Apache proxy to Tomcat

2010-09-30 Thread Mike Rea
I am running a Win2003 server using Apache2.2 to basically just proxy to Tomcat6 with SSL. I had tried running just tomcat6 but from everything that I read it was better for SSL traffic to proxy using Apache, so that is what i did. Right now I am just pointing it to the Tomcat default page, that

Re: [us...@httpd] Scoreboard and configuration question

2010-09-30 Thread Eric Covener
> Based on the Lines x DotsPerLine, I have 8192 slots. > Is that a correct interpretation? How do I reconcile this against > my MPM config of MaxClients = 2048? > > >    ServerLimit          64 >    StartServers         32 >    MaxClients         2048 >    MinSpareThreads      25 >    MaxSpareThre

[us...@httpd] Scoreboard and configuration question

2010-09-30 Thread David Dabbs
So, here I have partial output from my scoreboard (via /server-status). Server Version: Apache/2.2.11 (Unix) DAV/2 Server Built: Sep 4 2009 16:44:00 Current Time: Thursday, 30-Sep-2010 16:46:03 UTC Restart Time: Friday, 17-Sep-2010 07:37:57 UTC Parent Server Generation: 13 Server uptime: 13 days

Re: [us...@httpd] Does Apache 2.2.14 run on WIN2008 OS's

2010-09-30 Thread Jorge Schrauwen
Do note that the binaries available on the ASF website are 32-bit, so they will always run as 32-bit even on a 64-bit OS. ~Jorge On Thu, Sep 30, 2010 at 2:28 PM, Mark Watts wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > On 09/30/2010 01:03 PM, Patrick McCambridge wrote: >> Hello,

Re: [us...@httpd] Untainting module for Apache

2010-09-30 Thread Igor Galić
- Nick Kew wrote: > mod_taint is a new module to apply Perl-style taint checking > to untrusted data. It's a lot smaller and simpler than > mod_security, but offers a useful tool to protect a range > of applications. > > It's now up-and-running and working well for me, and ready > for wider t

[us...@httpd] Untainting module for Apache

2010-09-30 Thread Nick Kew
mod_taint is a new module to apply Perl-style taint checking to untrusted data. It's a lot smaller and simpler than mod_security, but offers a useful tool to protect a range of applications. It's now up-and-running and working well for me, and ready for wider testing and feedback. I've put the m

Re: [us...@httpd] Re: Rewrite altering path

2010-09-30 Thread Rainer Jung
On 30.09.2010 15:41, Ben Short wrote: Fixed. I needed to add the PT flag to the redirect. For further reference: this topic is somehow explained at http://tomcat.apache.org/connectors-doc/generic_howto/proxy.html Regards, Rainer On 30 September 2010 14:06, Ben Short wrote: Hi, So far I

[us...@httpd] Re: Rewrite altering path

2010-09-30 Thread Ben Short
Fixed. I needed to add the PT flag to the redirect. On 30 September 2010 14:06, Ben Short wrote: > Hi, > > So far I have the following configuration in a vhost > > > > ServerAdmin ben.sh...@nexusalpha.com > DocumentRoot "/usr/local/apache2/docs/www.mydomain.co.uk/" > ServerName www.mydomain.co.u

[us...@httpd] Re: Rewrite altering path

2010-09-30 Thread Ben Short
Hi, So far I have the following configuration in a vhost ServerAdmin ben.sh...@nexusalpha.com DocumentRoot "/usr/local/apache2/docs/www.mydomain.co.uk/" ServerName www.mydomain.co.uk RewriteEngine On RewriteLog "logs/rewrite.log" RewriteLogLevel 3 RewriteRule ^(.*)$ /path$1 [L,NC] Option

Re: [us...@httpd] Does Apache 2.2.14 run on WIN2008 OS's

2010-09-30 Thread Mark Watts
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 09/30/2010 01:03 PM, Patrick McCambridge wrote: > Hello, just double checking, will Apache 2.2.14 run on the following OS's: > > WIN 2008 R2 64 bit > WIN 2008 64 bit > WIN 2008 32 bit 32bit builds for Windows are available: http://httpd.apache.or

[us...@httpd] Does Apache 2.2.14 run on WIN2008 OS's

2010-09-30 Thread Patrick McCambridge
Hello, just double checking, will Apache 2.2.14 run on the following OS's: WIN 2008 R2 64 bit WIN 2008 64 bit WIN 2008 32 bit Is one recommended over the other? Thank you. Patrick mcca...@fdny.nyc.gov Confidentiality Notice: This message may contain information that is confidential or privile

[us...@httpd] Rewrite altering path

2010-09-30 Thread Ben Short
Hi, I need to alter the path of my incoming requests for example www.mydomain.co.uk should become to www.mydomain.co.uk/path/ but I need to keep any path that was present in the original request eg: www.mydomain.co.uk/page1 should become www.mydomain.co.uk/path/page1 The browser should n

Re: [us...@httpd] "proxy_balancer" | stickysession

2010-09-30 Thread Rainer Jung
On 29.09.2010 16:53, King Holger (CI/AFP2) wrote: Dear mailing list, currently, we use the Apache2 version: - Apache2 2.2.16 64bit - standard "mod_proxy_balancer" module with the following V-HOST configuration including a proxy balancer directive (with two Apache Tomcat instances behind):

Re: [us...@httpd] "proxy_balancer" | stickysession

2010-09-30 Thread Rainer Frey
On Thursday 30 September 2010 09:54:11 King Holger (CI/AFP2) wrote: Not only top posting, but also no quoting characters. Please fix that! > Hi Thomas, > > I had to disappoint you, because the relevant excerpt of the Tomcat > configuration below shows "jvmRoute" setup properly on EACH Tomcat > i

RE: [us...@httpd] "proxy_balancer" | stickysession

2010-09-30 Thread King Holger (CI/AFP2)
Hi Thomas, I had to disappoint you, because the relevant excerpt of the Tomcat configuration below shows "jvmRoute" setup properly on EACH Tomcat instance: "rb-wcmstc1" "rb-wcmstc2" So, might it be a BUG in Apache2 2.2.16? Is it possible to identify the reason, why that happens on Apache2-s