[users@httpd] Overiding RequestHeader

2011-11-29 Thread Assarsson, Emil
Hi, I need to override a RequestHeader in a later like it was never done. In this case I need to forward the users own basic credentials. Is that possible? This is a simplified version of my problem... --- http://localhost:8080/*> RequestHeader set Authentication "Digest username=test"

[us...@httpd] RE: Google Apps authentication

2010-11-10 Thread Assarsson, Emil
Hi, I guess that OpenID would be one of the first things to look at. It can however only SSO http(s) based solutions. I'm not sure if Google supports it but PKI might be a solid way so solve it to. -- Emil From: Oliver Marshall [mailto:oliver.marsh...@g2support.com] Sent: onsdag den 10 november

RE: [us...@httpd] Hardening Apache against attacks

2010-10-25 Thread Assarsson, Emil
Got an slowloris attack a while ago on my own server. I added a rule in iptables to limit numbers a single source IP could use. -- Emil -Original Message- From: Jason Nunnelley [mailto:ja...@jasonn.com] Sent: söndag den 24 oktober 2010 22:47 To: users@httpd.apache.org Subject: [us...@ht

RE: [us...@httpd] mod_authnz_ldap with kerberos?

2010-10-20 Thread Assarsson, Emil
>> I use mod_authnz_ldap today with simple ldap bind. >> Our security team wants me to use to use Kerberos instead to make it more >> secure. >> This will allow them to specify from where the service account can login and >> will also protect the credentials from eavesdropping. >> Is it possible

[us...@httpd] mod_authnz_ldap with kerberos?

2010-10-20 Thread Assarsson, Emil
Hi all, I use mod_authnz_ldap today with simple ldap bind. Our security team wants me to use to use Kerberos instead to make it more secure. This will allow them to specify from where the service account can login and will also protect the credentials from eavesdropping. Is it possible to make