Re: [users@httpd] MPM event unstable behind AWS ALB

2021-12-19 Thread Igor Cicimov
> it's something to do with how the ALB sends the data to the instance (e.g. >> Jumbo frames vs the standard MTU)...? >> >> On Mon, Dec 20, 2021 at 10:37 AM Igor Cicimov wrote: >> >>> I will still say this is a timeout issue. Set the ALB timeout to 3600 >&g

Re: [users@httpd] MPM event unstable behind AWS ALB

2021-12-19 Thread Igor Cicimov
> > Dan > > > > On Mon, Dec 20, 2021 at 10:01 AM Igor Cicimov wrote: > >> In a proxy chains like this getting the timeouts in sync is the most >> important thing. Make sure that you have done that. >> >> On Mon, 20 Dec 2021, 08:37 Dan Washusen, wrote:

Re: [users@httpd] MPM event unstable behind AWS ALB

2021-12-19 Thread Igor Cicimov
In a proxy chains like this getting the timeouts in sync is the most important thing. Make sure that you have done that. On Mon, 20 Dec 2021, 08:37 Dan Washusen, wrote: > Hi All, > I've been experimenting with the MPM event module with Apache instances > sitting behind an AWS Application Load Ba

Re: [users@httpd] ExecCGI ignored within nfs share

2020-02-03 Thread Igor Cicimov
255,hard,proto=tcp,timeo=600,retrans=2,sec=sys,mountaddr=10.10.10.10,mountvers=3,mountport=635,mountproto=tcp,local_lock=none,addr=10.10.10.10 > 0 0 > The apache process user can execute scripts under nfs share: > su - www-data -s /bin/bash -c "/shared/www_root/cgi2/test.sh" #w

Re: [users@httpd] ExecCGI ignored within nfs share

2020-01-30 Thread Igor Cicimov
On Wed, Jan 29, 2020, 11:35 PM Michele Mase' wrote: > I'm trying to execute some gci scripts under a certain directory stored > under an nfs share without any success; the same configuration is working > outside nfs share (i.e. under local filesystem). > What am I missing? > Regards > Michele Mas

Re: [users@httpd] mod_rewrite question on directory

2019-06-11 Thread Igor Cicimov
> > jim > > > > On Tue, Jun 11, 2019 at 5:18 AM Frank > <mailto:thu...@apache.org>> wrote: > > > > You are also grossly abusing mod_rewrite for this. It isn't needed > > at all. > > > > Use FallbackResou

Re: [users@httpd] mod_rewrite question on directory

2019-06-10 Thread Igor Cicimov
Since you already have two separate domains why not use virtual hosts each with it's own document root? IC On Tue, Jun 11, 2019, 9:18 AM Jim Weill wrote: > We have a test server, with test sites that are in two different branches > of development, but essentially the same base content. They li

[users@httpd] Re: LDAP not working

2018-04-05 Thread Igor Cicimov
On Fri, Apr 6, 2018 at 12:54 PM, Igor Cicimov wrote: > Hi all, > > I have no idea what's going on and why my setup that's been working for > years suddenly stopped working so have to ask here after had done extensive > debugging. > > Maybe something

[users@httpd] LDAP not working

2018-04-05 Thread Igor Cicimov
Hi all, I have no idea what's going on and why my setup that's been working for years suddenly stopped working so have to ask here after had done extensive debugging. Maybe something has changed in the ldap and/or authentication/authorization modules but the effect is same on apache 2.2.22 and 2.

Re: [users@httpd] Premature end of script headers Apache Proxy

2018-03-27 Thread Igor Cicimov
This means the script errored when executing. Since no errors when running on the backend I assume the proxy is not passing the script parameters correctly. Assuming the script is parsing the input correctly check the proxy and backend access logs to confirm if the script is invoked as expected. O

Re: [users@httpd] balancing best practices - mod_proxy_balancer

2018-02-27 Thread Igor Cicimov
I always prefer mod_jk over mod_proxy, I find it superior in terms of features and performance. On 27 Feb 2018 5:10 am, "Herb Burnswell" wrote: Daniel - Thank you for your response. 1/2: Thanks for confirming only one balancer method can be used. I will test to see which option makes the most

Re: [users@httpd] 404 rewrite error using special character \

2016-08-18 Thread Igor Cicimov
On Fri, Aug 19, 2016 at 12:16 PM, elliott sterling < elliottlsterl...@gmail.com> wrote: > Hello, > > My project for this client is such that his directories contain "#" in > the folder names, #test, and other symbols. The '#' is the only one > that gives me problems because I know its a anchor an

Re: [users@httpd] TLS 1.1 and 1.2 and SNI support

2016-05-23 Thread Igor Cicimov
On 24 May 2016 12:28 am, "linux.il" wrote: > > > > On Mon, May 23, 2016 at 5:16 PM, Eric Covener wrote: >> >> > For some reason if I add "-TLSv1" to SSLProtocol directive in my default >> > SSL vhost, SNI isn't working anymore: >> > >> > "SSLProtocol All -SSLv2 -SSLv3 -TLSv1" >> > >>

Re: [users@httpd] Redirect[Match] behind load-balancer switching protocols

2015-11-17 Thread Igor Cicimov
Hi Christopher, On Wed, Nov 18, 2015 at 8:06 AM, Christopher Schultz < ch...@christopherschultz.net> wrote: > All, > > The docs for the Redirect directive state that a slash-prefixed > replacement URL (relative) will use the current request's scheme and > hostname to build the redirect URL. > > R

Re: [users@httpd] cgi scripts not getting executed on apache2.4

2015-08-10 Thread Igor Cicimov
On 10/08/2015 7:36 PM, "Rahul R" wrote: > > Hello All, > > I have apache 2.4 installed. I face a problem with cgi scripts execution. I have the following in my httpd.conf. But for some reason cgi scripts which are in perl are not getting executed. And instead the contents getting displayed on brow

Re: [users@httpd] Apache + HTTP/2 + SPDY

2015-05-26 Thread Igor Cicimov
On 27/05/2015 6:00 AM, "Guitar Man" wrote: > > Hello Eric, how are you? > > Well, I am working with a COMODO certificate and making tests using the WebPageTest.org. There, my website SSL Negotiation is more than 300ms, however, another sites is working with 30-50ms. I think this difference between

Re: [users@httpd] SSL Compression

2015-03-18 Thread Igor Cicimov
On 19/03/2015 2:02 AM, "Daniel" wrote: > > There is an exception, you can only use that directive in server config, that's why I asked about the context. > > If you set that up inside a virtualhost, it will probably will give you issues. > > -- > Daniel Ferradal > IT Specialist > > email d

Re: [users@httpd] ESTABLISHED connections

2015-03-13 Thread Igor Cicimov
On 14/03/2015 2:21 PM, "el kalin" wrote: > > i don't see it in package ports… > > On Fri, Mar 13, 2015 at 7:59 PM, Jim Albert wrote: >> >> On 3/13/2015 7:54 PM, el kalin wrote: >>> >>> >>> >>> On Fri, Mar 13, 2015 at 7:36 PM, Jim Albert >> > wrote: >>> >>> On 3/13/2

Re: [users@httpd] Example Apache reverse proxy configuration for HTTPS frontend and several HTTP backends

2015-03-09 Thread Igor Cicimov
server1.backend/ > ProxyPassReverse / http://appserver1.backend/ > > > > > # Appserver 2 > > > ServerName appserver2.example.com > ErrorLog logs/ssl_error_log > TransferLog logs/ssl_access_log > LogLevel warn > SSLEngine on > SSLProtocol all -SSLv2

Re: [users@httpd] Example Apache reverse proxy configuration for HTTPS frontend and several HTTP backends

2015-03-09 Thread Igor Cicimov
;> _default_:8443 apachefrontend.example.com (/etc/httpd/conf.d/nss.conf:84) >>> _default_:443 apachefrontend.example.com (/etc/httpd/conf.d/ssl.conf:74) >>> *:443 appserver1.backend (/etc/httpd/conf/httpd.conf:1034) >>> *:443

Re: [users@httpd] Example Apache reverse proxy configuration for HTTPS frontend and several HTTP backends

2015-03-07 Thread Igor Cicimov
On 08/03/2015 10:01 AM, "A M" wrote: > > > Hello experts, > > I am trying to set up a classical frontend HTTPS Apache Reverse Proxy > for a couple of plain backend HTTP servers sitting on a backend private > network. The plaform is Centos 6, the Apache rpm is httpd-2.2.15-39.el6.centos. > > I firs

Re: [users@httpd] Reverse Proxy/HTTPS Issues

2015-02-22 Thread Igor Cicimov
On 23/02/2015 1:54 PM, "Chris Arnold" wrote: > > Apache 2.4.10. We have many users who still access a site using http://sub.domain.com/webapp/page. We first want to redirect that above link to https. We would also like to redirect http://sub.domain.com to https://sub.domain.com/webapp. We have thi

Re: [users@httpd] Apache URL RewriteCond / RewriteRule question

2015-01-29 Thread Igor Cicimov
On 30/01/2015 8:22 AM, "Mirko Hufnagel" wrote: > > Hello, > > My name is Mirko and I have a problem with our RewriteRules. > > What I want: > > Visitor type the URL www.linart.de > And we forward him to www.linuxart.de/en > > That works! > > Visitor type the URL www.linart.de/en > And we forward h

Re: [users@httpd] MySQL authentication and SSL Config problem

2014-12-02 Thread Igor Cicimov
On 03/12/2014 1:15 AM, "Dennis Putnam" wrote: > > I have a directory set up to do MySQL authentication. At the same time I > want to encrypt pages in that directory. My config for that virtual host is: > > LoadModule dbd_module modules/mod_dbd.so > LoadModule authn_dbd_module modules/mod_authn_dbd

Re: [users@httpd] mod_proxy / ProxyPass: 400 Bad Request? (UNCLASSIFIED)

2014-11-26 Thread Igor Cicimov
On 27/11/2014 1:25 AM, "Kristian Rink" wrote: > > Am 26.11.2014 um 15:19 schrieb Stefan Magnus Landrø: > >> Check user-agent header too. Mobile phones might just be too slow or get disconnected > > > Did that already, but wasn't able to find a pattern here. Most of the clients using our system use

Re: [users@httpd] Proxy problems when using subdirectory

2014-11-19 Thread Igor Cicimov
On 20/11/2014 1:04 AM, "H Plato" wrote: > > Thanks Eric, > > I've tried so many combinations of this with no success, both in and out of a location block. This should work according to the docs, but it doesn't (i'm writing this from memory so might have syntax wrong): > > > ProxyHTMLURLMap / /a

Re: [users@httpd] Proxy problems when using subdirectory

2014-11-19 Thread Igor Cicimov
On 19/11/2014 12:39 PM, "H Plato" wrote: > > I’m having problems getting a reverse proxy to work as a subdirectory. Using the following configuration, Apache can full proxy an internal site: > > > ServerName www.domain.com > DocumentRoot /data/www/www > ErrorLog /var/log/a

Re: [users@httpd] Basic allow/deny based on cookies

2014-11-05 Thread Igor Cicimov
> Questions > Is my idea considerable ? > I've read documentation of mod_access_compat and mod_usertrack but I don't see how to make them work together. Can anyone point me in the right direction ? > I'm open to other suggestions given they fall into the constraints I mentioned above. Regardong co

Re: [users@httpd] Cannot get certificate chain to work.

2014-10-08 Thread Igor Cicimov
On 09/10/2014 3:46 AM, "dE" wrote: > > On 10/08/14 21:36, Eric Covener wrote: >> >> >> On Wed, Oct 8, 2014 at 12:00 PM, dE wrote: >>> >>> intermediate.pem must get installed automatically in the browsers (at least in FF), but instead these browsers don't see the certificate. >> >> >> ​No, servers

Re: [users@httpd] Cannot get certificate chain to work.

2014-10-08 Thread Igor Cicimov
On 08/10/2014 9:16 PM, "dE" wrote: > > On 10/08/14 14:33, Igor Cicimov wrote: >> >> >> >> On Wed, Oct 8, 2014 at 6:03 PM, dE wrote: >>> >>> On 10/08/14 10:18, Igor Cicimov wrote: >>>> >>>> On Wed, Oc

Re: [users@httpd] Cannot get certificate chain to work.

2014-10-08 Thread Igor Cicimov
On Wed, Oct 8, 2014 at 6:05 PM, dE wrote: > On 10/08/14 10:19, Igor Cicimov wrote: > > > >> You can find more about openssl tool set here: >> https://www.openssl.org/docs/apps/s_client.html, its perfect for ssl >> troubleshooting. >> >> By the w

Re: [users@httpd] Cannot get certificate chain to work.

2014-10-08 Thread Igor Cicimov
On Wed, Oct 8, 2014 at 6:03 PM, dE wrote: > On 10/08/14 10:18, Igor Cicimov wrote: > > On Wed, Oct 8, 2014 at 2:27 PM, dE wrote: > >> On 10/08/14 05:18, Igor Cicimov wrote: >> >> >> On Wed, Oct 8, 2014 at 1:59 AM, dE wrote: >> >>> On 10/

Re: [users@httpd] Cannot get certificate chain to work.

2014-10-07 Thread Igor Cicimov
> > You can find more about openssl tool set here: > https://www.openssl.org/docs/apps/s_client.html, its perfect for ssl > troubleshooting. > > By the way, did you import the CA_chain.pem in the browsers?

Re: [users@httpd] Cannot get certificate chain to work.

2014-10-07 Thread Igor Cicimov
On Wed, Oct 8, 2014 at 2:27 PM, dE wrote: > On 10/08/14 05:18, Igor Cicimov wrote: > > > On Wed, Oct 8, 2014 at 1:59 AM, dE wrote: > >> On 10/07/14 18:12, Igor Cicimov wrote: >> >> >> >> On Tue, Oct 7, 2014 at 2:51 AM, dE wrote: >&g

Re: [users@httpd] Cannot get certificate chain to work.

2014-10-07 Thread Igor Cicimov
On Wed, Oct 8, 2014 at 1:59 AM, dE wrote: > On 10/07/14 18:12, Igor Cicimov wrote: > > > > On Tue, Oct 7, 2014 at 2:51 AM, dE wrote: > >> Hi. >> >> I'm in a situation where I got 3 certificates >> >> server.pem -- the end user ce

Re: [users@httpd] Cannot get certificate chain to work.

2014-10-07 Thread Igor Cicimov
On Tue, Oct 7, 2014 at 2:51 AM, dE wrote: > Hi. > > I'm in a situation where I got 3 certificates > > server.pem -- the end user certificate which's sent by the server to the > client. > intermediate.pem -- server.pem is signed by intermediate.pem's private key. > issuer.pem -- intermediate.pem i

Re: [users@httpd] How to skip setting HSTS header for certain virtual hosts only?

2014-10-06 Thread Igor Cicimov
On Tue, Oct 7, 2014 at 9:22 AM, Eddie B wrote: > I set HSTS for HTTPS only, using this directive at the beginning of > httpd.conf (apache 2.2) > > > > > > Header add Strict-Transport-Security "max-age=15768000;includeSubDomains" > env=HTTPS > > > > > > How can I tell Apache to not set HSTS for

Re: [users@httpd] Use Allow from IP when there is a proxy exist?

2014-08-08 Thread Igor Cicimov
On 08/08/2014 11:21 PM, "Tom Evans" wrote: > > On Fri, Aug 8, 2014 at 9:23 AM, Igor Cicimov wrote: > > > >> Your .htaccess file: > >> # ALLOW USER BY IP > >> order deny,allow > >> deny from all > >> SetEnvIF X-Forwarded-Fo

RE: [users@httpd] Use Allow from IP when there is a proxy exist?

2014-08-08 Thread Igor Cicimov
> Your .htaccess file: > # ALLOW USER BY IP > order deny,allow > deny from all > SetEnvIF X-Forwarded-For "1.2.3.4" AllowIP > SetEnvIF X-Forwarded-For "5.6.7.8" AllowIP > Allow from env=AllowIP > allow from 1.2.3.4 > allow from 5.6.7.8source: http://frustratedtech.com/post/42641261089/htaccess-file

Re: [users@httpd] Use Allow from IP when there is a proxy exist?

2014-08-07 Thread Igor Cicimov
> But what if we use proxy (squid) in front, then the source IP will be the proxy IP, How can I make Apache to deal with the client IP not the proxy IP? > You mean tell squid to send the source ip to apache? Check squid documentation how to do that or set proxy-for header. What can apache do about

Re: [users@httpd] RewriteEngine conditions?

2014-08-07 Thread Igor Cicimov
On 07/08/2014 2:47 PM, "Mark jensen" wrote: > > I want to redirect all the inside network IPs to an error page except some IPs, A condition like this: > > if ( IP_from_Network = 192.168.1.0 and ((IP != 192.168.1.4) or (IP != 192.168.1.5) or (IP != 192.168.1.6)) ) > { > redirect to an error page >

Re: [users@httpd] Redirect to other server if file/directory does not exists.

2014-08-05 Thread Igor Cicimov
> > RewriteCond %{DOCUMENT_ROOT}%{REQUEST_FILENAME} !-f > RewriteCond %{DOCUMENT_ROOT}%{REQUEST_FILENAME} !-d > RewriteCond %{REQUEST_URI} ^/(.*)$ > RewriteRule ^/(.*)$ http://other-server/%1 [P,L] > > Does not work. Local resources if esists are shown, but remote resources > are 404 not found "/".

Re: [users@httpd] Redirect to other server if file/directory does not exists.

2014-08-05 Thread Igor Cicimov
On 05/08/2014 5:30 PM, "Ivan Bondarev" wrote: > > Hi. > > I have a similar issue. > > I need to make a rewrite rule for this URL: > > /geturl?url=http://example.com/somepicture.jpg > > to proxy it to the "url" parameter value. > > So, i used rules like this: > > RewriteEngine on > RewriteOptions I

Re: [users@httpd] rewrite rule problem

2014-07-24 Thread Igor Cicimov
On Fri, Jul 25, 2014 at 2:33 PM, Nick Edwards wrote: > Howdy, > I've sent this to the roundcube list few days ago, no-one replied so , > since its also apache related, I'll ask here. > > > > Trying to understand the new "security" rules in .htaccess > > - deny access to files not containing a d

Re: [users@httpd] Rewrite rule

2014-04-30 Thread Igor Cicimov
> > > RewriteCond %{QUERY_STRING} ^action=cs_query$ > RewriteRule ^/cgi-bin/blt?action=cs_query$ - [G] > > Very close with this one ... Try: RewriteCond %{QUERY_STRING} ^action=cs_query$ RewriteRule ^/cgi-bin/blt$ - [G] As I said before, you can't include the query string in RewriteRule sta

Re: [users@httpd] Rewrite rule

2014-04-30 Thread Igor Cicimov
> > > I tried the following thing without success. > > RewriteEngine on > RewriteRule ^/cgi-bin/blt?action=cs_query$ - [G] > > mod_rewrite matches the URi not the the query string. Read about RewriteCond here: http://httpd.apache.org/docs/2.2/mod/mod_rewrite.html#rewritecond

Re: [users@httpd] Rewrite Help

2014-04-30 Thread Igor Cicimov
> > > I've never written a rewrite rule and need help on getting started with > addressing an issue: > Basically, I'm trying to find out if it's possible to create a variable > for a cookie, store it's value to the variable, then unset the cookie and > finally reset the cookie using said variable.

Re: [users@httpd] Enabling ECDHE ciphers

2014-04-17 Thread Igor Cicimov
On Fri, Apr 18, 2014 at 2:27 AM, Christopher Schultz < ch...@christopherschultz.net> wrote: > > I'm running httpd 2.2.23 on Amazon Linux. I read in the comments for > mos_ssl that httpd 2.2.24 is required for "TLSv1.2" to be specified > directly. Is that accurate? I can see in my Qualys test that

Re: [users@httpd] Enabling ECDHE ciphers

2014-04-17 Thread Igor Cicimov
On 18/04/2014 2:30 AM, "Hanno Böck" wrote: > > On Thu, 17 Apr 2014 12:27:37 -0400 > Christopher Schultz wrote: > > > I'm trying to enable (and prefer!) ECDHE ciphers for clients that can > > support them. I've done the obvious: > [...] > > I'm running httpd 2.2.23 > > That's your problem. Get rid

Re: [users@httpd] Re: ProxyPassMatch with Unix sockets

2014-04-17 Thread Igor Cicimov
On 18/04/2014 10:43 AM, "Igor Cicimov" wrote: > > > On 18/04/2014 8:25 AM, "Marc Aymerich" wrote: > > > > On Thu, Apr 17, 2014 at 11:18 PM, Marc Aymerich wrote: > > > On Wed, Apr 16, 2014 at 11:17 PM, Marc Aymerich wrote: > > >> Hi

Re: [users@httpd] Re: ProxyPassMatch with Unix sockets

2014-04-17 Thread Igor Cicimov
On 18/04/2014 8:25 AM, "Marc Aymerich" wrote: > > On Thu, Apr 17, 2014 at 11:18 PM, Marc Aymerich wrote: > > On Wed, Apr 16, 2014 at 11:17 PM, Marc Aymerich wrote: > >> Hi, > >> I have a PHP-FPM web application that I want it to be accessed under > >> "/alias/" path. I'm trying to configure Prox

Re: [users@httpd] High CPU Usage in Amazon EC2

2014-04-05 Thread Igor Cicimov
On 06/04/2014 5:51 AM, "Christopher Schultz" wrote: > > Igor, > > On 4/4/14, 5:39 AM, Igor Cicimov wrote: > > > > On 04/04/2014 1:05 AM, "Christopher Schultz" > > mailto:ch...@christopherschultz.net>> wrote: > >> > >> Al

Re: [users@httpd] High CPU Usage in Amazon EC2

2014-04-04 Thread Igor Cicimov
On 04/04/2014 1:05 AM, "Christopher Schultz" wrote: > > All, > > I'm having a problem in production I've never seem before. We are > running a pair of AWS EC2 m1.micro web servers where only one of them in > really in service at any given time. The httpd instance serves some > static content and f

Re: [users@httpd] High CPU Usage in Amazon EC2

2014-04-04 Thread Igor Cicimov
On 04/04/2014 1:05 AM, "Christopher Schultz" wrote: > > All, > > I'm having a problem in production I've never seem before. We are > running a pair of AWS EC2 m1.micro web servers where only one of them in > really in service at any given time. The httpd instance serves some > static content and f

Re: [users@httpd] Hot stand by not responding.

2014-03-31 Thread Igor Cicimov
On 31/03/2014 5:20 PM, "Sinha, Vikas" wrote: > > Hi All, > > > > I am trying to setup a hot cluster with following configuration. > > > > > > ServerName http://in-g-vsinha4 > > ServerAlias in-g-vsinha4.com > >ProxyPass / balancer://hotcluster/ > >

Re: [users@httpd] Mixing ReWrite and AliasMatch

2014-02-27 Thread Igor Cicimov
On 27/02/2014 12:23 PM, "Darren Ward (darrward)" wrote: > > Hi Guys > > I'm trying to combin a couple of things and I don't think it is going to work so I'm looking for some advice please... > > Essentially I want to have a ReWrite rule that detects when an Apple captive portal detect is perfromen

Re: [users@httpd] Preventing an open proxy with both a single SSL virtual host and a non-SSL virtual host

2014-02-18 Thread Igor Cicimov
I use this to block relay proxy attempts: RewriteCond %{THE_REQUEST} ^[A-Z]+\ /?https?:// [NC] RewriteCond %{THE_REQUEST} !^[A-Z]+\ /?https?://([^.]+\.)?mydomain\.com RewriteRule .* - [F] On Wed, Feb 19, 2014 at 2:00 AM, Richard Mixon wrote: > Jonas/Yehuda, > > The example I chose was a bad on

Re: [users@httpd] How to log access to a specific web application ?

2014-01-26 Thread Igor Cicimov
On 27/01/2014 5:09 AM, "Bruno Costacurta" wrote: > > > Hello, > > my Apache server host few applications. > Meaning something like : > > /var/www/A > /var/www/B > /var/www/C > > I would like to trace access for a specific application, eg. A > > Is it possible ? Yes if they have separate vhosts. T

Re: [users@httpd] mod_fcgid: can't apply process slot for

2013-12-05 Thread Igor Cicimov
you see that recently exited PHP processes are hanging around for a >> while, not getting reaped quickly. (Decrease FcgidZombieScanInterval in >> that case.) >> >> You should probably set FcgidZombieScanInterval to 1 anyway so that >> exited processes don't hang

Re: [users@httpd] Automatic OWA Form Based Authentication thru reverse proxy

2013-12-05 Thread Igor Cicimov
On 28/11/2013 9:48 PM, "iridium1191" wrote: > > Hi Apache users, > > I'm running Apache 2.2.22 on Ubuntu server 12.04 as a reverse proxy to some internal services, including Exchange/OWA 2003. I have setup a site login page where users authenticate before they can access these services. This works

Re: [users@httpd] mod_fcgid: can't apply process slot for

2013-12-04 Thread Igor Cicimov
t; it be effected for domain.com only and not the rest of domain? > > Thanks. > > > > On Thu, Dec 5, 2013 at 10:46 AM, Igor Cicimov wrote: > >> FcgidMaxRequestsPerProcess must be <= to PHP_FCGI_MAX_REQUESTS >> >> >> On Thu, Dec 5, 2013 at 12:05 PM, James

Re: [users@httpd] mod_fcgid: can't apply process slot for

2013-12-04 Thread Igor Cicimov
FcgidMaxRequestsPerProcess must be <= to PHP_FCGI_MAX_REQUESTS On Thu, Dec 5, 2013 at 12:05 PM, James wrote: > Hi there, > > I have the following: > > *Server specs:* > Memory = 7G > CPU = 2 > > *Packages:* > httpd-2.2.25 > mod_fcgid-2.3.7 > php-5.3.27 > > $ grep -v "#" /etc/httpd/conf.d/fcgid.

Re: [users@httpd] Compile apache 2.2.26 with openssl1.0.1e failing

2013-12-01 Thread Igor Cicimov
On Mon, Dec 2, 2013 at 1:45 PM, Igor Cicimov wrote: > > On Mon, Dec 2, 2013 at 1:05 PM, Igor Cicimov wrote: > >> >> On Mon, Dec 2, 2013 at 8:49 AM, Srinivasa Rao Katta > > wrote: >> >>> Igor, >>> >>> Please try to install gcc for 4.7.

Re: [users@httpd] Compile apache 2.2.26 with openssl1.0.1e failing

2013-12-01 Thread Igor Cicimov
On Mon, Dec 2, 2013 at 1:05 PM, Igor Cicimov wrote: > > On Mon, Dec 2, 2013 at 8:49 AM, Srinivasa Rao Katta > wrote: > >> Igor, >> >> Please try to install gcc for 4.7.2 version and put gcc in the path >> before old gcc,old gcc is under /usr/local/bin an

Re: [users@httpd] Compile apache 2.2.26 with openssl1.0.1e failing

2013-12-01 Thread Igor Cicimov
rg > Subject: Re: [users@httpd] Compile apache 2.2.26 with openssl1.0.1e > failing > > > On Sat, Nov 30, 2013 at 9:38 PM, Igor Cicimov wrote: > > > > > On Sun, Dec 1, 2013 at 2:29 AM, Jeff Trawick wrote: > > On Sat, Nov 30, 2013 at 4:20 AM, Igor Cicimov wrote:

Re: [users@httpd] undefined reference to tls client method

2013-11-30 Thread Igor Cicimov
On Sun, Dec 1, 2013 at 7:22 AM, David Benfell < benf...@mail.parts-unknown.org> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA512 > > > On 11/30/2013 04:51 AM, Igor Cicimov wrote: > >> Hi David, >> >> I have exactly the same problem on CentOS-5.

Re: [users@httpd] Compile apache 2.2.26 with openssl1.0.1e failing

2013-11-30 Thread Igor Cicimov
On Sun, Dec 1, 2013 at 2:29 AM, Jeff Trawick wrote: > On Sat, Nov 30, 2013 at 4:20 AM, Igor Cicimov wrote: > >> Hi all, >> >> Im trying to build apache2.2.26 on CentOS5.10 final x86_64, linked to >> openssl1.0.1e which is also compiled and installed from s

Re: [users@httpd] undefined reference to tls client method

2013-11-30 Thread Igor Cicimov
Hi David, I have exactly the same problem on CentOS-5.10 with openssl1.0.1e. It seams you are indicating your openssl installation from source went wrong somewhere. This is how I compiled and installed openssl from source: $ ./Configure --prefix=/usr/local --openssldir=/usr/local/openssl enable-t

[users@httpd] Compile apache 2.2.26 with openssl1.0.1e failing

2013-11-30 Thread Igor Cicimov
Hi all, Im trying to build apache2.2.26 on CentOS5.10 final x86_64, linked to openssl1.0.1e which is also compiled and installed from source under /usr/loca/lib64: $ ls -l /usr/local/lib64/ total 7060 drwxr-xr-x 2 root root4096 Nov 30 18:50 engines -rw-r--r-- 1 root root 3858348 Nov 30 18:50

Re: [users@httpd] Reverse Proxy, mod_proxy_html. How to rewrite JS-generated relative links?

2013-11-17 Thread Igor Cicimov
> > I'd like to know how do people usually handle this situation. > > By using the absolute path in the dynamically created client side links.

Re: [users@httpd] unable to achieve sticky session

2013-11-03 Thread Igor Cicimov
http://tomcat.apache.org/connectors-doc/reference/workers.html Did you read this? Did you do the tomcat part of config setting the jvmRoute? On 04/11/2013 3:13 PM, "Nagaraju Kurma" wrote: > > Hi all, > > I am new to httpd and using the tomcat hosts behind of httpd. --> > (Apache2.2 and Tomca

Re: [users@httpd] Proxy balancer and Apache Virtual Host rewrite single HTTP header

2013-10-03 Thread Igor Cicimov
On Fri, Oct 4, 2013 at 11:00 AM, Frank X wrote: > We have the following configuration, one apache HTTP server which proxies > AJP requests to an application on another host, as in the Proxy balancer > configuration below. > > The problem we have is the application only understands one HOST http >

Re: [users@httpd] and Satisfy in for mod_dav

2013-09-18 Thread Igor Cicimov
Hi Chris, On Tue, Sep 17, 2013 at 4:40 AM, Christopher Schultz < ch...@christopherschultz.net> wrote: > All, > > I'm having trouble getting and Satisfy to work within a . > > I'm using Apache httpd 2.2.22 on Debian Wheezy. > > Now, "Satisfy" is not documented to work under elements, but > also

Re: [users@httpd] session synchronization (replication) between two httpd servers configured as load balancers

2013-09-10 Thread Igor Cicimov
On Wed, Sep 11, 2013 at 2:45 PM, Igor Cicimov wrote: > > I would like to know, if there exists any solution in order to synchronize >> (replicate) sessions between two httpd servers which are configured as load >> balancers using mod_proxy_balancer? >> > > Stor

Re: [users@httpd] session synchronization (replication) between two httpd servers configured as load balancers

2013-09-10 Thread Igor Cicimov
> I would like to know, if there exists any solution in order to synchronize > (replicate) sessions between two httpd servers which are configured as load > balancers using mod_proxy_balancer? > Store the session information in a cookie as explained in the mod_proxy_balancer documentation. In that

Re: [users@httpd] ProxyPassReverse not changing the protocol part (https to http) of the redirect url

2013-08-27 Thread Igor Cicimov
On 25/08/2013 5:23 AM, "Amit Singla" wrote: > > I need to proxy http requests to https server in the backend. Everything is working except a minor issues in redirects URLs. ProxyPassReverse translates the the URL except the protocol i.e. does not translate https from backend server to http protoco

Re: [users@httpd] Apache 2.4 fails to call LDAP auth modules

2013-08-17 Thread Igor Cicimov
On 16/08/2013 3:10 AM, "William Paredes" wrote: > > Greetings! > It's been a few days that I'm struggling with this one: > > I don't get the authentication dialog window prompting for a user name & password when I enter an LDAP protected realm: > > > AuthType Basic > AuthBasicProvider ldap >

Re: [users@httpd] WebDAV sort of works

2013-08-10 Thread Igor Cicimov
On 10/08/2013 8:19 AM, "LuKreme" wrote: > > I have the following structure in /etc/httpd/extras/httpd-vhost.conf (apache 2.4) > > > ServerName webdav.example.com > DocumentRoot /usr/local/www/ > DavLockDB /tmp/DavLock.rotdav > > DAV On > AuthType digest > AuthName Root >

Re: [users@httpd] 408 timeout with mod_rewrite redirect to another server

2013-08-06 Thread Igor Cicimov
On 07/08/2013 5:23 AM, "Travis Jensen" wrote: > > On 8/5/13 3:57 PM, Igor Cicimov wrote: >> >> >> On 06/08/2013 4:21 AM, "Travis Jensen" wrote: >> > >> > I've got a fairly simple rewrite rule that bounces our Python pycurl clien

Re: [users@httpd] 408 timeout with mod_rewrite redirect to another server

2013-08-05 Thread Igor Cicimov
On 06/08/2013 4:21 AM, "Travis Jensen" wrote: > > I've got a fairly simple rewrite rule that bounces our Python pycurl client from the main server to a new server that actually dishes out the file: > > RewriteRule ^/update-repository/windsington(/.*)?$ http://newsvr.example.com/update-repository/w

Re: [users@httpd] Logging Base64 decoded info in access_log

2013-07-27 Thread Igor Cicimov
On 28/07/2013 3:36 AM, "Rainer Jung" wrote: > > On 27.07.2013 10:29, Pete Houston wrote: > > On Fri, Jul 26, 2013 at 12:39:37PM -0700, Jignesh Badani wrote: > >> Thanks Pete, yes, post processing the log file nightly is the option I was > >> considering. I am doing it currently on a per request ba

Re: [users@httpd] ssi not working on virtual host

2013-07-02 Thread Igor Cicimov
On Wed, Jul 3, 2013 at 4:36 AM, c cc wrote: > Hello all, > > I am using CentOS 6.0 with Apache 2.2.15, and set up Apache with virtual > host. The SSI works fine on the first VH, but ssi on the other virtual > hosts does not work. I got the following message in the error log: > > > mod_include: Op

Re: [users@httpd] Issue with LDAPVerifyServerCert flag.

2013-06-27 Thread Igor Cicimov
What certificate are you using? I guess if self sign it will never get verified. On 27/06/2013 7:56 PM, "Mangesh Sawant" wrote: > If LDAPVerifyServerCert is enabled in SSL , authentication fails with > Message simple bind failed. > If LDAPVerifyServerCert is disabled in SSL there is no issue. > >

Re: [users@httpd] Apache virtualhost order deny, allow works only on localhost; ignores public IP for allow

2013-06-21 Thread Igor Cicimov
> > ServerName test > ServerAlias test > DocumentRoot /home/user3/public_html/test > > SuexecUserGroup test test > > Order Deny,Allow > Deny from all > Allow from xxx.xxx.xxx.xxx 127 > Assuming its not the file permission have y

RE: [users@httpd] Disk Cache with multiple virtual hosts

2013-06-19 Thread Igor Cicimov
On 20/06/2013 1:07 AM, "Paul Beckett" wrote: > > Can mem_cache be configured to cache way more than you have memory, and swap out to disk for whatever is least popular? > No but how much cache do you need? On the heavy load prod servers we were using 1GB mem cache. Most of the caching is done on t

Re: [users@httpd] Disk Cache with multiple virtual hosts

2013-06-18 Thread Igor Cicimov
On 18/06/2013 5:21 PM, "Paul Beckett" wrote: > > I've read the Apache 2.4 caching guide, mod_cache and mod_cache_disk pages, but am unsure whether I need a unique CacheRoot for each virtual host, or whether multiple virtual hosts can/should share the same CacheRoot? > > Also I'm thinking of settin

Re: [users@httpd] How can I ensure Apache HTTPD server works with OpenLDap installed on my computer?

2013-06-13 Thread Igor Cicimov
Also nss-ldap is used for pam authentication i dont think apache can or would use that one. On 14/06/2013 7:44 AM, "Igor Cicimov" wrote: > You set that during compile time. If installed from distro package you > need to check the package it self or consult the distro docs about

Re: [users@httpd] How can I ensure Apache HTTPD server works with OpenLDap installed on my computer?

2013-06-13 Thread Igor Cicimov
You set that during compile time. If installed from distro package you need to check the package it self or consult the distro docs about what has been compiled inside. On 13/06/2013 11:55 PM, "Michael Furman" wrote: > Hi! > > I have the following modules installed on my linux computer: > > ope

Re: [users@httpd] Re: Cannot compile apr-util with ldap support

2013-06-12 Thread Igor Cicimov
On 12/06/2013 7:07 PM, "ysrini" wrote: > > Thanks Ismael, > The Linux admins at work do not install anything as 'root' unless it's > available from RHN repository > > Is there anyway I can install openldap as non-root user into a local > directory (on linux) without impacting the global openldap i

Re: [users@httpd] users@httpd.apache.org - mod_rewrite question

2013-05-17 Thread Igor Cicimov
On 18/05/2013 10:39 AM, "Don Edmondson" wrote: > > {hope I am doing this right!} > I rewrote many of my pages for SSI (to use 'standard' headers and footers) > but left the original .html files in situ. This was fine for a while - but I > find I am still getting a lot of hits on the .html files so

Re: [users@httpd] URL redirect in tomcat

2013-05-11 Thread Igor Cicimov
> Can anyone tell me how to redirect URL in tomcat. I want to redirect / to /arsys. Please help me. > Search for UrlRewriteFilter

Re: [users@httpd] Help needed

2013-05-10 Thread Igor Cicimov
On 11/05/2013 2:26 AM, "jerome.m" wrote: > > Has anyone ever experience an HTTPD (mpm worker) just suddenly stop accepting connection? > > I did a telnet on the port it was listening from the local machine and its not responding.. > > the fix was stop it and then start it... > > i looked at the er

Re: [users@httpd] File download transfer fails mod_proxy

2013-04-24 Thread Igor Cicimov
Look at the apache log. On 25/04/2013 10:23 AM, "Smith, Mitchell" wrote: > Hi > > I have an issue where my application (tomcat hosted) servers generate a > pdf report. When I access the application direct on the tomcat server the > pdf transmits to the client browser and displays without issue. H

Re: [users@httpd] Redirect HTTP to HTTPS does not work (mod_rewrite)

2013-04-16 Thread Igor Cicimov
er ideas ? > Yes, check the log files for errors thats what they are for. > Thanks > > > On Mon, Apr 15, 2013 at 7:19 PM, Igor Cicimov wrote: >> >> RewriteRule ^/dashboard$ https://%{HTTP_HOST}/dashboard [R=301,L] >> >> On 16/04/2013 7:58 AM, "Felipe

Re: [users@httpd] Redirect HTTP to HTTPS does not work (mod_rewrite)

2013-04-15 Thread Igor Cicimov
RewriteRule ^/dashboard$ https://%{HTTP_HOST}/dashboard [R=301,L] On 16/04/2013 7:58 AM, "Felipe Roman" wrote: > Hi, > > I'm trying to configure a specific application (developed in > Python/Django) to run only through HTTPS, what I need is redirect a > specific directory to HTTPS: > > FROM > > h

Re: [users@httpd] Re: mod_proxy integrate mod_cband apache http server

2013-04-10 Thread Igor Cicimov
> CBandExceededSpeed 128 5 15 > CBandExceededURL http://24h.com.vn > As far as I know the CBandExceededSpeed and the CBandExceededURL directives are mutually exclusive. They do not make sense in the same vhost.

Re: [users@httpd] filesmatch suspends AccessFileName?

2013-04-05 Thread Igor Cicimov
> > The regex in filesmatch Directive is quite useless but this leads to the > problem that .htaccess file can called by http in browser and shows all of > its contents. > > http://example.com/.htaccess > > Seems to me quite simple for a user to disclose his .htaccess contents by > simple filesmatc

Re: [users@httpd] Set response header based on another response header?

2013-04-04 Thread Igor Cicimov
Set environment variable based on the first header and use it to set the second one. On 04/04/2013 4:26 PM, "Esmond Pitt" wrote: > Is there a way to set a response header based on the content of another > response header? > > In my specific situation I am back-ended by Tomcat and I would like to

Re: [users@httpd] mod proxy balancer problem/question...

2013-04-02 Thread Igor Cicimov
in a highly available way. > > Does that make more sense? > Not really, the proxy's have no dependencies of each other. Change the load factor in the second one from 1 to 2, thats the only reason i can think of that one not being used. Or try different lbmethod. > > On Tue, Apr 2

Re: [users@httpd] mod proxy balancer problem/question...

2013-04-02 Thread Igor Cicimov
On 03/04/2013 2:02 AM, "Sean Alderman" wrote: > > Greetings, > I am running httpd 2.2.23.0-64 with mod_proxy to load balance Tomcat 6.0.36.B containers. I have encountered a somewhat strange situation, and I was wondering if anyone could comment and or propose an alternative. > > I have a case

  1   2   3   4   5   6   7   >