[users@httpd] Error during the Compile step while upgrading the Apache from 1.3.34 to 2.0.59

2012-01-16 Thread Sandeep Bhatia
Hi All , We are upgrading the Apache Web Server from 1.3.34 to 2.0.59 on AIX 5.3 Tl12 During the compile step we are getting the follwoing error. ld: 0711-738 ERROR: Input file strings/.libs/apr_cpystrn.o: XCOFF32 object files are not allowed in 64-bit mode. collect2: ld returned 8 exit

[users@httpd] 2.4.0 fails

2012-01-16 Thread Nick Edwards
Hello, I was not sure if I should subscribe to dev list to send this, but, I guess here is better? Trying out 2.4.0 from 2.2.21 Well, the config file from 2.2.21 is not going to work, fine, I'll deal with that in time, obviously things that were defaulted to under some IFs are no longer so a full

Re: [users@httpd] AllowOverride

2012-01-16 Thread Igor Cicimov
This should absolutely work. From the documentation: For security and performance reasons, do not set AllowOverride to anything other than None in your block. Instead, find (or create) the block that refers to the directory where you're actually planning to place a .htaccess file. What is exact

Re: [users@httpd] Basic Auth Authentication Wonkiness with scripts or Static HTML not protected by Basic Auth accessing resources protected by Basic Auth In when using Apache & Internet Explorer

2012-01-16 Thread Kevin A. McGrail
On 1/16/2012 4:29 PM, Igor Cicimov wrote: I have a feeling that IE and FF exibit the same behavor its just that FF automatically supplies the credentials without prompting you all the time. I had similar thoughts. However, with IE, I typically will get some password error log entries with

[users@httpd] AllowOverride

2012-01-16 Thread congo thomas
Hello world, I am being bullied by the security considerations of a standard apache installation on centos-5.6 and rhel-6 aswell - these apache are recent flavors from the respective repos of these platforms. The problem is this snippet from httpd.conf ## Options FollowSymLinks AllowOverride N

Re: [users@httpd] Basic Auth Authentication Wonkiness with scripts or Static HTML not protected by Basic Auth accessing resources protected by Basic Auth In when using Apache & Internet Explorer

2012-01-16 Thread Kevin A. McGrail
How exactly do you protect the resources? Via Directory or FileMatch? the /photos/ dir has a .htaccess file in it that uses this .htaccess file: AuthName "POAC-NoVA Members Only" AuthType Basic AuthUserFile /var/opt/htdocs/poac/.htpasswd require valid-user That would be via Directory, yes?

Re: [users@httpd] Basic Auth Authentication Wonkiness with scripts or Static HTML not protected by Basic Auth accessing resources protected by Basic Auth In when using Apache & Internet Explorer

2012-01-16 Thread Igor Cicimov
How exactly do you protect the resources? Via Directory or FileMatch? On Jan 17, 2012 7:40 AM, "Kevin A. McGrail" wrote: > I have a set of pictures that I protect with .htaccess. This is currently > configured using Basic Auth. The .htaccess file protects ONLY the > images/thumbnails but not t

[users@httpd] Basic Auth Authentication Wonkiness with scripts or Static HTML not protected by Basic Auth accessing resources protected by Basic Auth In when using Apache & Internet Explorer

2012-01-16 Thread Kevin A. McGrail
I have a set of pictures that I protect with .htaccess. This is currently configured using Basic Auth. The .htaccess file protects ONLY the images/thumbnails but not the html that loads the images and thumbnails. AuthName "POAC-NoVA Members Only" AuthType Basic AuthUserFile /var/opt/htdocs/po

Re: [users@httpd] AccessConfig and ResourceConfig in apache 2.2

2012-01-16 Thread Eric Covener
On Mon, Jan 16, 2012 at 9:41 AM, Petr Hracek wrote: > My httpd.conf file does not contain any AccessConfig or ResourceConfig > directives. > Form the security reason I wanted to add following > AccessConfig /dev/null > ResourceConfig /dev/null > > Are they needed in apache2.2? Neither the files n

Re: [users@httpd] AccessConfig and ResourceConfig in apache 2.2

2012-01-16 Thread Petr Hracek
My httpd.conf file does not contain any AccessConfig or ResourceConfig directives. Form the security reason I wanted to add following AccessConfig /dev/null ResourceConfig /dev/null Are they needed in apache2.2? best regards Petr Dne 16. ledna 2012 13:12 Tom Evans napsal(a): > On Mon, Jan 16,

[users@httpd] Children Disappear

2012-01-16 Thread maillists0
I have several ec2 instances running identical versions of drupal on apache 2.2.6. They also have identical apache configs, which includes these settings -- StartServers8 MinSpareServers 8 MaxSpareServers20 ServerLimit 256 MaxClients256 MaxRequestsPerChild 4000 Ever

Re: [users@httpd] attack on apache - solved -

2012-01-16 Thread Simone Caruso
> > xx.xxx.xx.xx "GET /admin/phpmyadmin/scripts/setup.php HTTP/1.1" 200 14049 "-" > "Mozilla/4.0 (compatible; MSIE 6.0; MSIE 5.5; Windows NT 5.1) Opera 7.01 [en]" > xx.xxx.xxx.xx "POST /admin/phpmyadmin/scripts/setup.php HTTP/1.1" 200 - > "http://xxx.xx.xx.xx/admin/phpmyadmin/scripts/setup.php\r"

Re: [users@httpd] AccessConfig and ResourceConfig in apache 2.2

2012-01-16 Thread Tom Evans
On Mon, Jan 16, 2012 at 11:57 AM, Petr Hracek wrote: > This I have already read. > Thank you but what should be in that two configuration files? > The files will be empty? > > best regards > Petr > > The directives that 1.3 contained in those files don't need to specified separately to httpd.conf

Re: [users@httpd] AccessConfig and ResourceConfig in apache 2.2

2012-01-16 Thread Petr Hracek
This I have already read. Thank you but what should be in that two configuration files? The files will be empty? best regards Petr Dne 16. ledna 2012 12:36 Tom Evans napsal(a): > On Mon, Jan 16, 2012 at 11:24 AM, Petr Hracek wrote: >> Dear users, >> >> in the apache 1.3 I have used AccessConfi

Re: [users@httpd] AccessConfig and ResourceConfig in apache 2.2

2012-01-16 Thread Tom Evans
On Mon, Jan 16, 2012 at 11:24 AM, Petr Hracek wrote: > Dear users, > > in the apache 1.3 I have used AccessConfig and ResourceConfig > however in apache2.2 those directives does not exists. > > Is there any possibility how do disable configuration console? > > -- > Best Regards / S pozdravem > Pet

[users@httpd] AccessConfig and ResourceConfig in apache 2.2

2012-01-16 Thread Petr Hracek
Dear users, in the apache 1.3 I have used AccessConfig and ResourceConfig however in apache2.2 those directives does not exists. Is there any possibility how do disable configuration console? -- Best Regards / S pozdravem Petr Hracek

Re: [users@httpd] mod_proxy -> random routing change

2012-01-16 Thread Igor Cicimov
http://httpd.apache.org/docs/2.2/mod/mod_proxy_balancer.html#stickyness_implementation On Mon, Jan 16, 2012 at 8:31 PM, Vladimir Dvorak wrote: > Hi guys, > > after weeks of investigation I have to ask you for help. > > Problem Description: > The problem is that application is randomly (really n

Re: [users@httpd] mod_rewrite access control configuration

2012-01-16 Thread Tom Evans
On Sat, Jan 14, 2012 at 8:35 AM, Asplund Marko wrote: > Hi, > > I'm using Apache httpd to act as a reverse proxy and I'd like to block > access to all but explicitly listed resources. > I've come up with two possible solutions that i'd like to check with more > experienced mod_rewrite users. > > I

[users@httpd] mod_proxy -> random routing change

2012-01-16 Thread Vladimir Dvorak
Hi guys, after weeks of investigation I have to ask you for help. Problem Description: The problem is that application is randomly (really non deterministically) logging users out - they are working with application, but suddenly (not all at one time) the user is logged out (because mod_proxy

Re: [users@httpd] What is the "correct way" for starting apache2 as a service in UNIX (Ubuntu)

2012-01-16 Thread Igor Cicimov
It runs under the user and group that you have set in the User and Group directives in your apache config file. It always starts as root and then drops the privileges to that user no matter how you start it. Obviously your User and Group are set to "daemon" in your config. Igor On Jan 16, 2012 6:5