[users@httpd] Apache httpd reverse proxy windows 2012

I have apache httpd 2.4.6 for windows, installed on windows 2012 . It is configured as a reverse proxy. When I use IE locally on this machine and use localhost to access the httpd, the operation gets stuck. (note that behind the scene there is a redirection to http://machinename/xxx that is retu

[users@httpd] ShibUseEnvironment On - Not working with mod_proxy_http

Our environment details are - Apache 2.2.3, Shibboleth 2.5, J2ee version 2.4 (for backend application running on Tomcat 6.0). I have just switched from mod_jk to mod_proxy_http, as shown in the below Apache Vhost configuration. ServerName https://dev.infosys.com:443

Re: [users@httpd]

On Wed, Aug 7, 2013 at 6:48 PM, wrote: > I am using mod_fcgid with apache 2.4. Is there a FastCgiConfig equivalent > or a way that I can get the same result as if I set the –flush option on > FastCgiConfig in a mod_fastcgi application. I need to send custom headers > from my application. Put anot

Re: [users@httpd] Changing the User Which Runs Apache

On Aug 7, 2013, at 6:36 PM, Yehuda Katz wrote: > Check out how the default configuration of apache works on Debian/Ubuntu. > They run as the user www-data and have the correct permissions set on the > /var/www folder. I'm running Ubuntu Server 12.04 and just checked the default permissions on

Re: [users@httpd] Changing the User Which Runs Apache

Do not run Apache as yourself. If it (or any application it runs as a module - like PHP if you use mod_php) is compromised, it will be able to modify your personal files. Most people run apache as www-data (or similar) in a dedicated directory. Check out how the default configuration of apache wor

Re: [users@httpd] AuthType Digest in 2.4?

On Wed, Aug 7, 2013 at 6:20 AM, LuKreme wrote: > First, when we set this up ages ago-go, the way to go was > > AuthType digest > > And I rather suspect that is *nt* the recommended way to go with 2.4. Unless you're going to use SSL you probably still want to use Digest. -

[users@httpd]

I am using mod_fcgid with apache 2.4. Is there a FastCgiConfig equivalent or a way that I can get the same result as if I set the –flush option on FastCgiConfig in a mod_fastcgi application. I need to send custom headers from my application. Put another way I want to send the equivalent of a cgi

[users@httpd]

I am using mod_fcgid with apache 2.4. Is there a FastCgiConfig equivalent or a way that I can get the same result as if I set the –flush option on FastCgiConfig in a mod_fastcgi application. I need to send custom headers from my application. Put another way I want to send the equivalent of a cgi

[users@httpd]

I am using mod_fcgid with apache 2.4. Is there a FastCgiConfig equivalent or a way that I can get the same result as if I set the –flush option on FastCgiConfig in a mod_fastcgi application. I need to send custom headers from my application. Put another way I want to send the equivalent of a cgi

[users@httpd]

I am using mod_fcgid with apache 2.4. Is there a FastCgiConfig equivalent or a way that I can get the same result as if I set the –flush option on FastCgiConfig in a mod_fastcgi application. I need to send custom headers from my application. Put another way I want to send the equivalent of a cgi

[users@httpd]

I am using mod_fcgid with apache 2.4. Is there a FastCgiConfig equivalent or a way that I can get the same result as if I set the –flush option on FastCgiConfig in a mod_fastcgi application. I need to send custom headers from my application. Put another way I want to send the equivalent of a cgi

Re: [users@httpd] GZIP DEFLATE and HTTPD

On Wed, Aug 7, 2013 at 1:59 PM, Akash Jain wrote: > Per Akamai Guy, Vary shows akamai that content can vary so akamai is not > caching, and this leading akamai to make requests to our webversion ... > We mostly just use JS and CSS to be served from akamai .. I think whoever you're talking about a

Re: [users@httpd] GZIP DEFLATE and HTTPD

Per Akamai Guy, Vary shows akamai that content can vary so akamai is not caching, and this leading akamai to make requests to our webversion ... We mostly just use JS and CSS to be served from akamai .. On Thu, Aug 8, 2013 at 2:09 AM, Nick Kew wrote: > > On 7 Aug 2013, at 21:02, Akash Jain wrote

Re: [users@httpd] GZIP DEFLATE and HTTPD

On Wed, Aug 7, 2013 at 1:39 PM, Nick Kew wrote: > If you omit a Vary header, you're telling the cache you can't supply > other variants. That leaves the cache the choice of returning the > wrong contents to some clients, or returning an error. Or perhaps > ignoring the HTTP spec and asking the b

Re: [users@httpd] GZIP DEFLATE and HTTPD

On 7 Aug 2013, at 21:02, Akash Jain wrote: > But all modern browsers support it, right ? > Are there any downsides for not using Vary:Accept Encoding with mod_deflate? If you omit a Vary header, you're telling the cache you can't supply other variants. That leaves the cache the choice of retur

Re: [users@httpd] GZIP DEFLATE and HTTPD

But all modern browsers support it, right ? Are there any downsides for not using Vary:Accept Encoding with mod_deflate? On Thu, Aug 8, 2013 at 1:23 AM, Eric Covener wrote: > On Wed, Aug 7, 2013 at 3:48 PM, Akash Jain > wrote: > > We had a weird issue of Akamai not caching static content like

Re: [users@httpd] GZIP DEFLATE and HTTPD

On Wed, Aug 7, 2013 at 3:48 PM, Akash Jain wrote: > We had a weird issue of Akamai not caching static content like JS, CSS etc. > On debugging, they reported that we are sending "Vary:Accept Encoding" is > causing issue. > But I think that mod_deflate automatically sends that (for proxies) > > How

[users@httpd] GZIP DEFLATE and HTTPD

We had a weird issue of Akamai not caching static content like JS, CSS etc. On debugging, they reported that we are sending "Vary:Accept Encoding" is causing issue. But I think that mod_deflate automatically sends that (for proxies) However, I have explicitly unset that header so that Akamai can c

[users@httpd] Changing the User Which Runs Apache

I've tinkered with running a website using Apache on Linux for a few years now, but in my earlier days, I was a little naive and didn't pay too much attention to permissions. Now that I'd like to host a very small site on a home server, I'm trying to take security seriously. I know I could easily

Re: [users@httpd] mod_proxy does not load images

On Wed, Aug 7, 2013 at 2:13 PM, eric tse wrote: > Hello, > > I am configuring mod_proxy > > proxyPass /wur http://serverA.com:80/ > > It does load the page > when I access proxyserver.com/wur > get 200 for /wur > and get 404 for images > > The rule only matches /wur > not the content within /wur

[users@httpd] mod_proxy does not load images

Hello, I am configuring mod_proxy proxyPass /wur http://serverA.com:80/ It does load the page when I access proxyserver.com/wur get 200 for /wur and get 404 for images The rule only matches /wur not the content within /wur attached the access logs 142.229.90.133 - - [07/Aug/2013:11:03:34 -0600

[users@httpd] AuthType Digest in 2.4?

I had webDAV setup previously, but disabled it when transitioning to 2.4. Before I dive in and try to get it working again, I have a couple of questions. First, when we set this up ages ago-go, the way to go was AuthType digest And I rather suspect that is *nt* the recommended way to go with

Re: [users@httpd] How limit directives at htaccess file

On 7 Aug 2013, at 13:28, LuKreme wrote: > .htaccess is required, for example, for a working wordpress install. Rubbish. htaccess is not required for anything. Its purpose is to enable limited aspects of server admin to be devolved to unprivileged and untrusted users. > I do not know that Allo

[users@httpd] Re: How limit directives at htaccess file

On 06 Aug 2013, at 12:54 , Pol Hallen wrote: > Hi all, I'm study apache and I don't understand some things about htaccess. > > Reading, the advice is: never permit htaccess to users. That's terrible advice, or very outdated advice. .htaccess is required, for example, for a working wordpress i

[users@httpd] Responses of two different requests concatinated

Hi! We recently got an error report from a user of one of the systems we have developed, showing that the response from a different request had been appended to the original response. The original response was the front page of a site, generated with jsp, and the appended response was a excel f

[users@httpd] How to Scale Out Apache 2

I'm hoping to hear from users who have experience scaling out (adding apache servers) websites to cope with extra demand to learn from them. My query isn't specific to any version of Apache2 and falls under the category "if I have added as much RAM, CPU, Network capacity as the server can hold