[users@httpd] Re: heartbleed and httpd configuration

2014-04-15 Thread LuKreme
On 15 Apr 2014, at 15:27 , Christopher Schultz wrote: > Steven, > > On 4/12/14, 2:15 PM, Steven Siebert wrote: >> I think it would be unlikely because the httpd configuration data >> would be read into memory early on the heap (and in a very low >> volatile area where that memory wouldn't ofte

Re: [users@httpd] auth_ldap fails after upgrading to 2.4.9

2014-04-15 Thread Eric Covener
On Tue, Apr 15, 2014 at 5:36 PM, Marshall Httpd wrote: > Logging differences, sure thing... I meant between 2.4.6 and 2.4.9 for the user that fails under 2.4.9. -- Eric Covener cove...@gmail.com - To unsubscribe, e-mail: user

Re: [users@httpd] auth_ldap fails after upgrading to 2.4.9

2014-04-15 Thread Marshall Httpd
Hey Eric, Yeah, I _just_ ran across the "mod_ldap: When looking up sub-groups, use an implicit objectClass=* instead of an explicit cn=* filter." for 2.4.7. I just haven't wrapped my head around it just yet. Nor have I found the bug fix entry for this in https://issues.apache.org > Can you summa

Re: [users@httpd] heartbleed and httpd configuration

2014-04-15 Thread Christopher Schultz
Steven, On 4/12/14, 2:15 PM, Steven Siebert wrote: > I think it would be unlikely because the httpd configuration data > would be read into memory early on the heap (and in a very low > volatile area where that memory wouldn't often be freed up), whereas > the heartbeat would be much later in the

Re: [users@httpd] auth_ldap fails after upgrading to 2.4.9

2014-04-15 Thread Eric Covener
Can you summarize how the logging differs in the two releases? Here are two candidates: *) mod_ldap: When looking up sub-groups, use an implicit objectClass=* instead of an explicit cn=* filter. [David Hawes ] *) mod_ldap: Change "LDAPReferrals off" to actually set the underlying LDAP

[users@httpd] auth_ldap fails after upgrading to 2.4.9

2014-04-15 Thread Marshall Httpd
Hi, Our httpd.exe was recently upgraded from 2.4.6 to 2.4.9. But, when that happened, some of our users can no longer authenticate via LDAP. By "some", I mean that we have 2 domains. Users from one domain are fine, but users in the 2nd domain can no longer authenticate. E.g. AD\steve can authe

Re: [users@httpd] reverse proxy help

2014-04-15 Thread Frederik Nosi
Hi Paul, On 04/15/2014 06:19 PM, paul.warren.p.p...@accenture.com wrote: Hi Fred, Thanks for quick response. Unfortunately your suggestion doesn’t worked. That’s the first one I tried and it only worked on www.portal.com/bobj (running on tomcat). The other webs

RE: [users@httpd] reverse proxy help

2014-04-15 Thread paul.warren.p.pili
Hi Fred, Thanks for quick response. Unfortunately your suggestion doesn’t worked. That’s the first one I tried and it only worked on www.portal.com/bobj (running on tomcat). The other webservers didn’t work. From: Frederik Nosi [mailto:frederik.n...@postecom.it] Sent:

[users@httpd] Apache sending a client certificate for mutual authentication

2014-04-15 Thread alessandro macuz
Hi folks, the most recent question on the topic I found is this one http://httpd.markmail.org/message/n5uuusgzsi2bc72b?q=apache+to+send+ssl+client+certificate but there who asked the question was invited to use this list and I didn't see this topic discussed. To give you an idea just imagine th

[users@httpd] reverse proxy help

2014-04-15 Thread paul.warren.p.pili
Hi Gurus, We have multiple webservers in our DMZ and we want to access those web servers through 1 reverse proxy. Here is the scenario: Here are our webservers www.sapserver.com - webserver1 www.bobj.com - webserver2 www.qc.com -

Re: [users@httpd] reverse proxy help

2014-04-15 Thread Frederik Nosi
Hi Paul, you can add for each webserver, eg for the first one: ProxyPass /sapserver http://www.sapserver.com/ ProxyPassReverse /sapserver http://sapserver.com/ Same for the others. Frederik On 04/15/2014 05:33 PM, paul.warren.p.p...@accenture.com wrote: Hi Gurus, We have multiple webserve