Re: [users@httpd]

2015-03-23 Thread Rainer M. Canavan
On Mar 20, 2015, at 21:45 , el kalin wrote: > 60-0 - 0/0/2 . 0.01102281 0 0.0 0.000.00 > 127.0.0.1 my.domain.com:80OPTIONS * HTTP/1.0 > 61-0 - 0/0/1 . 0.00102274 0 0.0 0.000.00 > 127.0.0.1 my.domain.c

Re: [users@httpd]

2015-03-19 Thread Rainer M. Canavan
On Mar 19, 2015, at 01:11 , el kalin wrote: […] > my guess is that the "dummy" connections (since they don't have their own > process attached to them) are there because some of the other processes that > do show in ps ask for those at various stages. is it true? how would i know > which one

Re: [users@httpd] Apache crashes on Qualys Scan

2014-12-05 Thread Rainer M. Canavan
On Dec 5, 2014, at 12:07 , "Kannan Narayanasamy -X (kannanar - HCL TECHNOLOGIES LIMITED at Cisco)" wrote: > Hi Team, > > While scanning the ports using Qualys scanner, Apache process is crashing. > We can add the corresponding port in the exclude list but in customer > scenario is not poss

Re: [users@httpd] Access control with source IP addresses

2014-11-21 Thread Rainer M. Canavan
On Nov 21, 2014, at 08:48 , Bu Xiaobing wrote: > Hi All, > > I want to do the httpd URL access control through visitors' IP addresses as > the following : > > all source IP address can visit ^/action.php?login > and only specified IP addresses can visit ^/action.php?manage > > Anyone can gi

Re: [users@httpd] How to define string list for comparison?

2014-11-03 Thread Rainer M. Canavan
On Nov 2, 2014, at 16:22 , Marco Pizzoli wrote: > I mean; > that looks somewhat dangerous. I haven't checked the Documentation for =~ but I assume that you have to anchor that expression, since you would allow IPs like 231.1.1.145 otherwise. Something like would be better. rainer --

Re: [users@httpd] Denying access for a complicated bugger address

2014-09-30 Thread Rainer M. Canavan
On Sep 30, 2014, at 19:16 , Hans-Georg Scherneck wrote: > My site is bombarded by POST requests from a site identifying itself like > 123.123.123.123.word.word.word.word > A "deny from" instruction with a string trying to match this in .htaccess > does not appear to work (though other abusers w

Re: [users@httpd] OpenSSL Multiple Remote Security Vulnerabilities

2014-09-26 Thread Rainer M. Canavan
On Sep 26, 2014, at 15:33 , "Kannan Narayanasamy -X (kannanar - HCL TECHNOLOGIES LIMITED at Cisco)" wrote: > Anyone share your thoughts on this??? apparently, apache.org hasn't provided any windows binaries for a while. If you need binaries, the usual recommendation here is to head over to apa

Re: [users@httpd] Cookie in HTTP Request Header

2014-09-09 Thread Rainer M. Canavan
On Sep 9, 2014, at 04:01 , vipin kumar wrote: > Thanks Eric. > > can you please share any real network wireshark traces which can show that > cookie can come in between as well. That should not be necessary - the standard does not require any specific order, therefore any well-behaved server

Re: [users@httpd] Business Setup

2014-09-08 Thread Rainer M. Canavan
On Sep 7, 2014, at 04:39 , John Iliffe wrote: > Someone should also bring to his attention that the web site will have to > comply with the PCIA requirements (all several hundred of them!) if he is > planning on taking credit and debit cards. > > This is NOT a trivial undertaking for those sma

Re: [users@httpd] Rewrite and automount question

2014-08-11 Thread Rainer M. Canavan
On Aug 8, 2014, at 17:59 , "Rose, John B" wrote: > mod_userdir does not seem to cause superfluous automounter attempts when an > http request to a non-existent web address, http://website.com/~someuser, is > received > > Is there some way to implement that mechanism with > http://website.com

Re: [users@httpd] Re: [users] Re: [users@httpd] LDAP Login Access by Organization Unit

2014-06-17 Thread Rainer M. Canavan
On Jun 17, 2014, at 19:47 , Darly Senecal Baptiste wrote: > Eric: > > To be honest, I got apache from CentOS server, was looking the source code > with not avail. Can you help me you how to pull those source code. Keep in > mind I'm using Apache 2.2.3 > > Regards You want the SRPM for apac

Re: [users@httpd] Segmentation fault in logs

2014-05-23 Thread Rainer M. Canavan
On May 23, 2014, at 11:42 , Hugo Gomes wrote: > Hi Guys, > > I have httpd-2.2.3-85.el5.centos in CentOS release 5.10, i and see all > days, more than 10 times, the error in httpd logs: > > [Thu May 22 01:20:15 2014] [notice] child pid 561 exit signal > Segmentation fault (11) > > >

Re: [users@httpd] mod ssl

2014-04-14 Thread Rainer M. Canavan
On Apr 14, 2014, at 01:34 , John Iliffe wrote: > The library (found in the OpenSSL installation > directory in the /bin/ subdirectory) must be copied to the SYSTEM's library > directory. Don't do that. Re-Build apache with LDFLAGS=-Wl,-rpath,/path/to/new/openssl You can check if the RPATH

Re: [users@httpd] Re: !!! Urgently need apache 2.4.3 source code Urgent due to heartbleed bug]

2014-04-10 Thread Rainer M. Canavan
On Apr 10, 2014, at 18:30 , katherine.man...@sita.aero wrote: > I've you've built mod_ssl as a DSO, you don't need to recompile apache, you > can just upgrade your openssl (assuming you're already in the 1.0.1 branch) > and restart apache. Even if you have built mod_ssl statically into the

Re: [users@httpd] Apache/2.2.22 - child pid exit signal Bus error (7)

2014-03-17 Thread Rainer M. Canavan
On Mar 15, 2014, at 17:38 , Mark Thom wrote: > Hello, > I'm fighting from few days with "signal Bus error(7)" on my Apache instance, > and i can't figure out what is wrong and what thing is causing this error.. > Thanks in advance for any suggestions what can be wrong! If you don't know what

Re: [users@httpd] cache_disk :

2014-01-24 Thread Rainer M. Canavan
On Jan 24, 2014, at 11:30 , Paul Beckett wrote: > I am seeing the following logged in the apache error log (client IP removed): > > [cache_disk:warn] [pid 26540:tid 139906663675648] (28)No space left on > device: [client xxx.xxx.xxx.xxx:56003] AH00725: could not create header file > /usr/loca

Re: [users@httpd] cookie read/write in module handler

2013-12-11 Thread Rainer M. Canavan
On Dec 11, 2013, at 19:53 , Allasso Travesser wrote: >>> I am attempting to write a cookie, then retrieve it later. I am doing this >>> in a handler, using simple code found from (sparse) information I have >>> gathered from google searches: >>> >>> apr_table_set(r->headers_out, "Set-Cookie"

Re: [users@httpd] Trouble installing renewed SSL certificate

2013-10-25 Thread Rainer M. Canavan
On Oct 25, 2013, at 13:25 , Øyvind Lode wrote: > Hi Harald. > > No. > > I just received the new certificate from Comodo. > > I assume they used the original csr file which I have stored somewhere :) > > I thought I documented what I did to set up the cert but can't for the life > of me find

Re: [users@httpd] Issues building apache httpd-2.4.6-1.x86_64 on SUSE Linux Enterprise Server 11 (x86_64) - Kindly help

2013-09-18 Thread Rainer M. Canavan
On Sep 18, 2013, at 07:53 , Balaji Katika wrote: > > blr-3rd-2-dhcp330:~/apache # rpmbuild -ts httpd-2.4.6.tar.bz2 > error: Failed build dependencies: > apr-devel >= 1.4.0 is needed by httpd-2.4.6-1.x86_64 > apr-util-devel >= 1.4.0 is needed by httpd-2.4.6-1.x86_64 > op