Re: [users] Apache mod_security reverse proxy and how traffic is handled

2014-06-11 Thread Bruno Tréguier
Le 11/06/2014 à 20:47, Walzer, Jeffrey R a écrit : Does the Apache reverse proxy server forward traffic, or initiate a new connection on behalf of the external client? We have enabled the reverse proxy via mod_security proxypass, but I’d like to know if traffic is forwarded or a protocol break oc

Re: [users@httpd] Authenticating with subfolders

2013-05-21 Thread Bruno Tréguier
Le 21/05/2013 à 12:51, Vincenzo D'Amore a écrit : > Hi Bruno, Hi again Vincenzo, > just read again the RFC you stated, I'm not sure about the assumption > that a realm can be contained within another. > Or may be the implementation done by Apache httpd cannot support > multiple nested realms. >

Re: [users@httpd] Authenticating with subfolders

2013-05-21 Thread Bruno Tréguier
Le 21/05/2013 à 11:07, Vincenzo D'Amore a écrit : > Hi Miguel, > > yes it is possible, you could add a couple of file in each directory > (.htaccess and .htpasswd). > Those files should override the root authentication configuration with a > new local config. > > I suggest to read here how to im

Re: [users@httpd] RequestHeader, SetEnvIf: Setting a missing RequestHeader

2012-03-30 Thread Bruno Tréguier
Le 30/03/2012 14:16, Rudolf Bargholz a écrit : Goal: to automatically set the SOAPAction if empty or missing. Here what I would expect to work, but does not. SetEnvIf SOAPAction ^h.*$ HAVE_SOAPAction RequestHeader set SOAPAction "http://127.0.0.1:5912"; env=!HAVE_SOAPAction What I am try

Re: [users@httpd] mod_proxy: ProxyPreserveHost omits start of proxied path

2012-03-30 Thread Bruno Tréguier
Le 30/03/2012 12:05, ron.vandenbranden@home a écrit : Hi, On 30/03/2012 11:01, Igor Cicimov wrote: Have you actually read the mod_proxy documentation or you are just working with some example you found somewhere? If you read it you will find that you can use ! in the ProxyPass to exclude a p

Re: [users@httpd] mod_proxy: ProxyPassReverse ignored with ProxyPreserveHost?

2012-03-29 Thread Bruno Tréguier
Le 30/03/2012 à 0:32, ron.vandenbranden@home a écrit : Thanks, Igor. On Mar 30, 2012 8:41 AM, "Igor Cicimov" mailto:icici...@gmail.com>> wrote: tcpdump -vvv -X -s 0 -i eth0 tcp port 8080 Needs to be run as root. Replace port 8080 with what ever port you need. Option "-i eth0" is j

[users@httpd] [SOLVED (well, kinda)] Re: [users@httpd] Problem when mixing RewriteRules and directives

2012-03-28 Thread Bruno Tréguier
Hi everybody, Following my previous posts regarding my RewriteRule/Location/SetEnvIf problem, a friend of mine suggested a neat solution, quite easy to apply. The trick is to create, on the same machine, another vhost meant to serve exclusively as a reverse proxy, and which will add the inten

Re: [users@httpd] Problem when mixing RewriteRules and directives

2012-03-23 Thread Bruno Tréguier
Le 23/03/2012 07:09, Bruno Tréguier a écrit : Le 23/03/2012 à 1:37, Igor Cicimov a écrit : This is very interesting problem and I thought the issue was the typo leaving your var empty. I'll have to do some research about the mod_rewrite myself to confirm it precedes SetEnvIf in the ord

Re: [users@httpd] Problem when mixing RewriteRules and directives

2012-03-22 Thread Bruno Tréguier
Le 23/03/2012 à 1:37, Igor Cicimov a écrit : This is very interesting problem and I thought the issue was the typo leaving your var empty. I'll have to do some research about the mod_rewrite myself to confirm it precedes SetEnvIf in the order of execution. Now I'm really curious about the soluti

Re: [users@httpd] Problem when mixing RewriteRules and directives

2012-03-22 Thread Bruno Tréguier
Le 23/03/2012 à 0:23, Bruno Tréguier a écrit : 1) the X-Debug-Request-URI header is correct in the HTTP response, example: X-Debug-Request-URI: /cartes-en-ligne/checkout/ 2) the X-CheckingOut header, however, is NOT set. :-( Sorry, that was another test. The right output is of course: X

Re: [users@httpd] Problem when mixing RewriteRules and directives

2012-03-22 Thread Bruno Tréguier
Le 22/03/2012 à 22:50, Igor Cicimov a écrit : "The problem I'm facing here seems to rely in the fact that the variables I'm trying to use (like "THE_REQUEST", for example) are only defined within mod_rewrite's scope, and are not available to other directives like SetenvIf." And i dont think this

Re: [users@httpd] Problem when mixing RewriteRules and directives

2012-03-22 Thread Bruno Tréguier
Le 22/03/2012 11:11, Igor Cicimov a écrit : Why don't you just do it this way: RewriteCond %{REQUEST_URI} !^/(media|skin|js)/ [OR] RewriteCond %{REQUEST_URI} !^/onlinestore/checkout RewriteCond %{REQUEST_FILENAME} !-f RewriteCond %{REQUEST_FILENAME} !-d RewriteCond %{REQUEST_FILENAME} !-l Rewrit

Re: [users@httpd] Problem when mixing RewriteRules and directives

2012-03-21 Thread Bruno Tréguier
Le 21/03/2012 à 12:57, Igor Cicimov a écrit : Lets see ... why is mod_rewrite called mod rewrite? Probably because it rewrites something and that something is the url. Well, as strange as it might seem to you, I had figured that out myself, you see. ;-) So you need to catch what ever you n

Re: [users@httpd] Problem when mixing RewriteRules and directives

2012-03-21 Thread Bruno Tréguier
Le 21/03/2012 10:15, Igor Cicimov a écrit : U if you read your post you will find that you have answered your own question. The /onlinestore/checkout matches your rewrite rule thus gets redirected to index.php before the Location statement gets into action. I think you need to read the apache

[users@httpd] Problem when mixing RewriteRules and directives

2012-03-21 Thread Bruno Tréguier
Hello there, I presently have a problem when trying to mix RewriteRules and directives. I searched the list archives but didn't find anything similar to my situation. Let's try to be synthetic. Here are the relevant config directives: At "VirtualHost" level, among other things, here are the