[users@httpd] Re: Multiple authencation prompts

2014-01-02 Thread Andrew Schulman
> > Hello, > > > > I am using apache to host iOS related applications. I have integrated > > apache with our internal LDAP. When I try to access on a desktop it > > prompts for password only once. Where as in apple devices its > > prompting multiple times (I use plist). If the app consists of 4 >

[users@httpd] Re: Multiple authencation prompts

2014-01-01 Thread Andrew Schulman
> Hello, > > I am using apache to host iOS related applications. I have integrated > apache with our internal LDAP. When I try to access on a desktop it > prompts for password only once. Where as in apple devices its > prompting multiple times (I use plist). If the app consists of 4 > files, it pr

[users@httpd] Re: virtualhost: both http and https too

2014-01-01 Thread Andrew Schulman
> > So, do I need add new https virtualhost config to default-ssl? or merge > > ssl config to http virtual host? > > So, I've done exactly the same config file for http virtualhost and the > rendering of browser is ok. I've added (debian) new https virtualhost to > /etc/apache/site-available but t

[users@httpd] Re: Graceful Restart fails because of SSL Keys with Passphrase?

2013-03-01 Thread Andrew Schulman
> Maybe I should ask a more distinct question first: > > When we use "apachectl graceful", is the expected functionality that apache > does not ask for pass-phrases again? Presumably because it has the decrypted > keys already in memory? Or, does apache restart they key loading process all >

[users@httpd] Re: Graceful Restart fails because of SSL Keys with Passphrase?

2013-02-13 Thread Andrew Schulman
> I've seen people recommending removing the passphrase or using > SSLPassPhraseDialog. > But I'd prefer to use pass-phrases and graceful restart if possible. Understand that if you keep passphrases on your keys, and you get Apache to restart without prompting you for them, then what you've done

[users@httpd] Re: OpenSSL vs. Mozilla's NSS

2012-10-25 Thread Andrew Schulman
> On Wed, Oct 24, 2012 at 5:24 PM, Tom Browder wrote: > > Is it possible to use Apache with the NSS libraries instead of OpenSSL? > > Oops, I just found mod_nss. > > But I would appreciate any comments about the use of mod_ssl versus mod_nss. I've used both, and I now prefer mod_nss, because I

[users@httpd] Re: mod_proxy_html

2011-12-07 Thread Andrew Schulman
> Hello to all, > > we use mod_proxy_html. > > Now we have a problem with dealing xml-content. Some files in a location > should not be parsed by mod_proxy_html, the shoult be delivered untouched to > the client. > Mod_proxy_html always adds following tags: > > > > > > > > Is it po

[users@httpd] Re: SSL certificates and virtual hosts

2011-10-18 Thread Andrew Schulman
> Our website account with our ISP has one fixed IP address and allows > a number of virtual hosts. The main site has an SSL certificate for > secure access. I wish to add another certificate for one of the named > virtual hosts. According to Tech Support the account only allows one > SSL certifi

[users@httpd] Re: Vanity URL Rewrites Best Practices?

2011-10-03 Thread Andrew Schulman
> For example, > > http://foo.com/mmh/maintenance_plan/tip?contentCategoryType=MaintenanceTip&id=%2Fwww%2Favm_webapps%2Fmmh%2Fmaintenance-tips%2Fcontent%2Fafter_blizzard.xml > > Being sent to > > http://foo.com/mmh/articles/authored/after-blizzard > > We've got a very frequent process where we

[users@httpd] Re: Name-based SSL virtual hosts

2011-01-24 Thread Andrew Schulman
> I do a similar thing, except I now always get wildcard certificates, > eg for *.foobar.com. Then, I can host all foobar.com subdomains from > one IP on SSL, no SNI support required neither in browser nor server. > Wildcard certs can be a little bit more expensive.. Yes, a wildcard cert is the so

[us...@httpd] Re: RewriteCond how to set variable

2010-12-21 Thread Andrew Schulman
> My email client displayed what you wanted me to insert incorrectly. I > put the code in correctly but it still does not work. I added R=301 to > the end so that it would redirect so I could check the apache logs. Good debugging trick. -

[us...@httpd] Re: RewriteCond how to set variable

2010-12-21 Thread Andrew Schulman
> My email client displayed what you wanted me to insert incorrectly. I > put the code in correctly but it still does not work. I added R=301 to > the end so that it would redirect so I could check the apache logs. > > The apache log shows this: > uob017.admin.uiuc.edu - - [21/Dec/2010:11:46:23

[us...@httpd] Re: RewriteCond how to set variable

2010-12-21 Thread Andrew Schulman
ar/list > http://test.webservices.illinois.edu/calendar/list/%{CALID}?skinId=%{SKI > NID} [L] > > > > Thanks, > > Lance Campbell > Software Architect/DBA/Project Manager > Web Services at Public Affairs > 217-333-0382 > > > -Original Message-

[us...@httpd] Re: RewriteCond how to set variable

2010-12-21 Thread Andrew Schulman
> I have the following RewriteCond. I put numbers in front of each line > for reference: > > 1) RewriteCond %{QUERY_STRING} !XSL=NONE [NC] > > 2) RewriteCond %{QUERY_STRING} calId=([0-9]+) [NC] > > 3) RewriteCond %{QUERY_STRING} skinId=([0-9]+) [NC] > > 4) RewriteRule ^/cal

[us...@httpd] Re: Apache2 | One Virtualhost for 80 AND 443

2010-12-17 Thread Andrew Schulman
> I'm using a nasty trick to have similar behavior. I wouldn't call that a nasty trick. More like an intelligent factorization. It's the right way to do what Holger wants to do. - The official User-To-User support forum of the

[us...@httpd] Re: MOD_PROXY and Access Control by IP

2010-11-19 Thread Andrew Schulman
> Thanks Andrew, I did see this as an example on a web post. ...the argument > was made that it's a PIA when you don't match class C subnets and have to use > RegEx :-) Yes, I agree, it is a PIA. You should see the access control file on our production host... we have about 3000 SetEnvIf stat

[us...@httpd] Re: MOD_PROXY and Access Control by IP

2010-11-19 Thread Andrew Schulman
> I've been able to secure each proxy with this model: > http://*/App1/*> > Order Deny,Allow > #Permit IT > Allow from 10.1.0.0/24 > #Permit Team1 > Allow from 10.1.1.0/24 > Deny from all > > > Is there a way we can define access once for the IT Subnet (10.1.0.0/24) once

[us...@httpd] AuthDigestDomain doesn't work

2010-09-11 Thread Andrew Schulman
I have two domains, example1.com and example2.com, both served as virtual hosts from my one Apache server. Digest authentication is required on both hosts, using the same realm and htdigest file. Here's the configuration for example1.com: ServerName www.example1.com:80 AuthType Digest Aut

[us...@httpd] nested Require group?

2010-08-18 Thread Andrew Schulman
I have outer and inner directories that I want to protect with different Require groups directives: Require group outer Require group inner My hope was that the inner Require directive would override the outer one, allowing me to protect the inner directory with the more restrict

[us...@httpd] mod_proxy_html: strange mangled output

2010-07-06 Thread Andrew Schulman
Hi. mod_proxy_html 3.1.2 with Apache 2.2.3. mod_proxy_html seems to be mangling the output in some of my HTML links. My configuration is: ProxyHTMLLinks a href ProxyHTMLLinks areahref ProxyHTMLLinks basehref ProxyHTMLLinks blockquote cite ProxyHTML