Re: [EMAIL PROTECTED] Help: how to configure multiple apache servers behind a hardware load balancer

2007-03-08 Thread Krist van Besien
On 3/8/07, anton <[EMAIL PROTECTED]> wrote: Hi there, I'm a decently experienced apache user on ONE webserver. I'm trying to switch to two apache servers behind a Foundry hardware load balancer. I need a tutorial which would explain how to configure multiple apache servers behind a hardware lo

Re: [EMAIL PROTECTED] Re: mod_proxy doesn't proxy with %2F

2007-03-08 Thread Mike Cardwell
* on the Wed, Mar 07, 2007 at 01:50:18PM -0500, Jack Saunders wrote: >>> This was on the dev list. I've brought it onto the users list as I no >>> longer think it's a bug as such. Please see my original email above, and >>> my update below for the issue. >>> >>> Right. I've made a *little* progres

RE: [EMAIL PROTECTED] help needed in config of httpd.conf to fix "405 Method Not Allowed"

2007-03-08 Thread Backup e-mail
Only today I could try your advice. I'm using the following software: ++ Fedora Core 3 2.6.12-1.1381_FC3 httpd-suexec-2.0.53-3.3 httpd-2.0.53-3.3 svn, version 1.4.3 (r23084)compiled Feb 20 2007, 14:58:04 ++ Following your advi

[EMAIL PROTECTED] How to handle nested authorization requirements?

2007-03-08 Thread Zembower, Kevin
I'm having trouble with a 'nested' authorization requirement. Here's part of my httpd.conf file: cn2:/etc/apache# egrep -v '^[[:space:]]*#|^[[:space:]]*$' httpd.conf NameVirtualHost * ServerName centernet.jhuccp.org DocumentRoot /var/www/centernet/htdocs AuthType Basic

[EMAIL PROTECTED] Re: adding multiple SSLCACertificateFile in vhost.conf

2007-03-08 Thread saibaba Duggirala
hi, can anyone please let me know what is the procedure to add multiple SSLCACertificateFile in vhost.conf in apache So far we have been using only one file, shown below in vhost.conf SSLCACertificateFile conf/ssl/nsm_ca1.cr We would like to use another root certificate along with the above one

[EMAIL PROTECTED] logging question

2007-03-08 Thread Dan_Mitton
Is it possible to log both IP address and hostname to the apache logs? Thanks!

Re: [EMAIL PROTECTED] How to handle nested authorization requirements?

2007-03-08 Thread matt farey
Zembower, Kevin wrote: > I'm having trouble with a 'nested' authorization requirement. Here's > part of my httpd.conf file: > cn2:/etc/apache# egrep -v '^[[:space:]]*#|^[[:space:]]*$' httpd.conf > > NameVirtualHost * > > ServerName centernet.jhuccp.org > DocumentRoot /var/www/centerne

Re: [EMAIL PROTECTED] logging question

2007-03-08 Thread matt farey
[EMAIL PROTECTED] wrote: > > Is it possible to log both IP address and hostname to the apache logs? > > Thanks! Its a funny request, the answer is yes, but remember the fact that hostnames appear at all is due to apache having DNS resolution switched on - which is bad obviously. Also remember tha

Re: [EMAIL PROTECTED] Re: adding multiple SSLCACertificateFile in vhost.conf

2007-03-08 Thread matt farey
saibaba Duggirala wrote: > hi, > can anyone please let me know what is the procedure to add multiple > SSLCACertificateFile in vhost.conf in apache > > So far we have been using only one file, shown below in vhost.conf > SSLCACertificateFile conf/ssl/nsm_ca1.cr > > We would like to use another ro

Re: [EMAIL PROTECTED] logging question

2007-03-08 Thread Rob Wilkerson
Take a look at this: http://httpd.apache.org/docs/1.3/mod/mod_log_config.html#customlog Looks like %a and %h might do what you're asking. On 3/8/07, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: Is it possible to log both IP address and hostname to the apache logs? Thanks!

Re: [EMAIL PROTECTED] logging question

2007-03-08 Thread Dan_Mitton
How?? Please respond to users@httpd.apache.org To: users@httpd.apache.org cc: (bcc: Dan Mitton/YD/RWDOE) Subject:Re: [EMAIL PROTECTED] logging question LSN: Not Relevant User Filed as: Not a Record [EMAIL PROTECTED] wrote: > > Is it possible to log both IP address and hostna

Re: [EMAIL PROTECTED] mod_rewrite problem

2007-03-08 Thread Israel Brewster
Just got a response from the developer of the PHP script (serendipity). Turns out the problem lies there, and not with the rewrite rule. Apparently what's going on is that the php script uses the REQUEST_URI to determine what to display. If it doesn't recognize the REQUEST_URI (as is the ca

Re: [EMAIL PROTECTED] mod_rewrite problem

2007-03-08 Thread matt farey
Israel Brewster wrote: > Just got a response from the developer of the PHP script > (serendipity). Turns out the problem lies there, and not with the > rewrite rule. Apparently what's going on is that the php script uses > the REQUEST_URI to determine what to display. If it doesn't recognize > th

Re: [EMAIL PROTECTED] Help: how to configure multiple apache servers behind a hardware load balancer

2007-03-08 Thread anton
Thanks, Krist. I thought that it should work in theory too, but it doesn't in practice :( Basically, about 10% of requests to www.mydomain.com fail (time out) if I set the servernames to www.mydomain.com for both servers and then try to use VirtualHosts. We have to use virtualhosts because we ne

Re: [EMAIL PROTECTED] Help: how to configure multiple apache servers behind a hardware load balancer

2007-03-08 Thread matt farey
anton wrote: > Thanks, Krist. I thought that it should work in > theory too, but it doesn't in practice :( Basically, > about 10% of requests to www.mydomain.com fail (time > out) if I set the servernames to www.mydomain.com for > both servers and then try to use VirtualHosts. We > have to use

Re: [EMAIL PROTECTED] mod_rewrite problem

2007-03-08 Thread Israel Brewster
On Mar 8, 2007, at 8:33 AM, matt farey wrote: yeah, if you compare the number and type of rewrites for this package with the way that wordpress used to operate, there is a lot of correlation, instead now wordpress uses a much simpler form of rewrite which directs the REQUEST_URI to the applicati

Re: [EMAIL PROTECTED] mod_rewrite problem

2007-03-08 Thread matt farey
Israel Brewster wrote: > On Mar 8, 2007, at 8:33 AM, matt farey wrote: > >> yeah, if you compare the number and type of rewrites for this package >> with the way that wordpress used to operate, there is a lot of >> correlation, instead now wordpress uses a much simpler form of rewrite >> which di

Re: [EMAIL PROTECTED] How to handle nested authorization requirements?

2007-03-08 Thread William A. Rowe, Jr.
Zembower, Kevin wrote: > > In the first part of the centernet VirtualHost section, I restrict users > to either be in specific IP address ranges, or enter the password in > /var/www/centernet/users. I want to put an additional restriction on > viewing the files in /var/www/centernet/htdocs/staffon

RE: [EMAIL PROTECTED] How to handle nested authorization requirements?

2007-03-08 Thread Zembower, Kevin
William and matt, thank you for your help. I thought it had something to do with the 'satisfy all' but didn't know exactly what changes I'd have to make. For those reading the archives, to solve my problem, I added a second 'satisfy all' line in the section, before the 'require valid-user'. Than

[EMAIL PROTECTED] high load average httpd

2007-03-08 Thread Bing Du
Hi, Apache 2.0.52. Linux 2.6.9-5.0.5.ELsmp #1 SMP Fri Apr 8 14:29:47 EDT 2005 i686 i686 i386 GNU/Linux When I run 'top', I saw quite a few httpd running. Some were using 50% or above CPU. Now that I know PID of each one, how can I know what each httpd is doing? Where is the httpd connection co

Re: [EMAIL PROTECTED] high load average httpd

2007-03-08 Thread Joshua Slive
On 3/8/07, Bing Du <[EMAIL PROTECTED]> wrote: Hi, Apache 2.0.52. Linux 2.6.9-5.0.5.ELsmp #1 SMP Fri Apr 8 14:29:47 EDT 2005 i686 i686 i386 GNU/Linux When I run 'top', I saw quite a few httpd running. Some were using 50% or above CPU. Now that I know PID of each one, how can I know what each h

Re: [EMAIL PROTECTED] Re: adding multiple SSLCACertificateFile in vhost.conf

2007-03-08 Thread saibaba Duggirala
yes, more than one SSL enabled servername on a single IP address, single NIC The cureent certificate is expiring in couple of months so we want to seamleesly support the current one until it expires along with the new one matt farey <[EMAIL PROTECTED]> wrote: saibaba Duggirala wr

Re: [EMAIL PROTECTED] Help: how to configure multiple apache servers behind a hardware load balancer

2007-03-08 Thread anton
Thanks, Matt. I'll try the packet sniffer next. Meanwhile, I narrowed the problem down to virtual hosts. Here's the http.conf on each server: ... ServerName mydomain.com:80 ... NameVirtualHost *:80 # redirect mydomain.com to www.mydomain.com # has to match ServerName above Redirect permanen

[EMAIL PROTECTED] mod_rewrite

2007-03-08 Thread Kaplan, Andrew H.
Hi there -- Can I install mod_rewrite onto an existing Apache 1.3.31 server by itself, or does it need additional modules in order for it to be successfully installed? Thanks. The information transmitted in this electronic communication is intended only for the person or entity to whom it

Re: [EMAIL PROTECTED] Re: adding multiple SSLCACertificateFile in vhost.conf

2007-03-08 Thread matt farey
saibaba Duggirala wrote: > yes, more than one SSL enabled > servername on a single IP address, single NIC > > The cureent certificate is expiring in couple of months so we want to > seamleesly support the current one until it expires along with the new > one > > as far as I am aware SSL certs

Re: [EMAIL PROTECTED] Re: adding multiple SSLCACertificateFile in vhost.conf

2007-03-08 Thread Dan_Mitton
Why would you need to support both SSL certificates? From what I've seen (at least with Verisign) when you renew a certificate, it adds the renewal period to the end of your current expiration period, but is valid from the date you renew! As soon as you get the new certificate, you should be

Re: [EMAIL PROTECTED] Help: how to configure multiple apache servers behind a hardware load balancer

2007-03-08 Thread matt farey
anton wrote: > Thanks, Matt. I'll try the packet sniffer next. > Meanwhile, I narrowed the problem down to virtual > hosts. Here's the http.conf on each server: > > ... > ServerName mydomain.com:80 > ... > NameVirtualHost *:80 > # redirect mydomain.com to www.mydomain.com > # has to match Server

Re: [EMAIL PROTECTED] Re: adding multiple SSLCACertificateFile in vhost.conf

2007-03-08 Thread matt farey
[EMAIL PROTECTED] wrote: > > Why would you need to support both SSL certificates? From what I've > seen (at least with Verisign) when you renew a certificate, it adds > the renewal period to the end of your current expiration period, but > is valid from the date you renew! As soon as you get th

Re: [EMAIL PROTECTED] Re: adding multiple SSLCACertificateFile in vhost.conf

2007-03-08 Thread saibaba Duggirala
What if the second cert we took from a diff company In general the server should be able to support multiple CA certificate files right?Our web browsers does that now -isn't it -correct me please if I am wrong so in vhost.conf for scurehttps the following should be able to work -right

[EMAIL PROTECTED] rewrite safety? is it possible to DoS apache with mod_rewrite?

2007-03-08 Thread Matus UHLAR - fantomas
Hello, I'm a bit concerned about mod_rewrite safety on servers with many users. I see there is a MaxRedirects option which defaults to 10, but afaik users may override this. Also, there is the [N] flag to RewriteRule which documentation says: Use this flag to restart the rewriting process, i.e.,

Re: [EMAIL PROTECTED] Re: adding multiple SSLCACertificateFile in vhost.conf

2007-03-08 Thread matt farey
saibaba Duggirala wrote: > What if the second cert we took from a diff company > In general the server should be able to support multiple CA > certificate files right?Our web browsers does that now -isn't it > -correct me please if I am wrong > Limitation of Apache, 1 SSL vhost per IP. BUT t

Re: [EMAIL PROTECTED] Re: adding multiple SSLCACertificateFile in vhost.conf

2007-03-08 Thread Krist van Besien
On 3/8/07, saibaba Duggirala <[EMAIL PROTECTED]> wrote: What if the second cert we took from a diff company That on should allready be valid also, so just swap certs and restart your server. In general the server should be able to support multiple CA certificate files right?Our web browsers d