Re: [us...@httpd] Apache 2.2.13, OpenSSL 0.9.8k, Linux, [error] Unable to initialize TLS servername

2009-10-02 Thread Tom Evans
On Thu, 2009-10-01 at 13:24 -0500, Rodney Beede wrote: > So I have a 64-bit Linux system (Oracle Unbreakable 5.4) where I am > trying to compile Apache 2.2.13 with Openssl 0.9.8k with mod_ssl as a > shared module. > I setup my Openssl as follows: > ./config --prefix=/software/openssl shared enable-

[us...@httpd] Apache version dubio

2009-10-02 Thread Jos Chrispijn
Out of a technical and practical perspective, what should be the best choice now: Apache 2 or a lower version? Jos Chrispijn - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.o

Re: [us...@httpd] group authorization via LDAP

2009-10-02 Thread Tom Evans
On Thu, 2009-10-01 at 17:18 -0400, Tony Rice (trice) wrote: > I'm trying to convert from DBM file based authentication and > authorization to LDAP based authentication and authorization in Apache > 2.2.11. > > We've already got a large number of .htaccess files with specific > configs for individu

Re: [us...@httpd] group authorization via LDAP

2009-10-02 Thread Marc Patermann
Hi, Tom Evans schrieb: On Thu, 2009-10-01 at 17:18 -0400, Tony Rice (trice) wrote: This is how we do it: [...] AuthzLDAPAuthoritative "On" Require valid-user Require ldap-group cn=Department,ou=Groups,o=Company Does this work? When I read the docs: "Require valid-user If this directive exist

Re: [us...@httpd] Filter by group attribute using mod authnz_ldap

2009-10-02 Thread Marc Patermann
Hi, Mxrgus Pxrt schrieb: Would it be possible to filter users not only by user attributes or groups but also by attributes of group using authnz_ldap? Example: Users: cn: First Last, ou: people, dc: lol cn: Second Last, ou: pople, dc: lol Groups: cn: lord, ou: group, dc: lol member: First

Re: [us...@httpd] HTTP/0.9 and mod_proxy

2009-10-02 Thread Krist van Besien
On Thu, Oct 1, 2009 at 4:25 PM, Danijel wrote: > Hi, > > I have to reverse proxy a beast which speaks HTTP/0.9. The documentation > to mod_proxy says: > >        This module implements a proxy/gateway for Apache. It implements >        proxying capability for FTP, CONNECT (for SSL), HTTP/0.9, >  

Re: [us...@httpd] Apache 2.2.13, OpenSSL 0.9.8k, Linux, [error] Unable to initialize TLS servername

2009-10-02 Thread Rodney Beede
On Fri, Oct 2, 2009 at 3:32 AM, Tom Evans wrote: > On Thu, 2009-10-01 at 13:24 -0500, Rodney Beede wrote: >> So I have a 64-bit Linux system (Oracle Unbreakable 5.4) where I am >> trying to compile Apache 2.2.13 with Openssl 0.9.8k with mod_ssl as a >> shared module. >> I setup my Openssl as follo

RE: [us...@httpd] group authorization via LDAP

2009-10-02 Thread Tony Rice (trice)
Is our only choice changing all the .htaccess files with "require group " to "require ldap-group cn=,ou=some long ldap string" in order to make the switch group authorization via LDAP groups? -Tony > -Original Message- > From: Tom Evans [mailto:tevans...@googlemail.com] > Sent: Friday, O

Re: [us...@httpd] apache redirection does not work

2009-10-02 Thread Sharjeel Tariq
The issue with creating ServerAlias is we get two analytics reports for each of our site. There are many benefits associated with redirecting non 'www' urls to 'www' urls. I tried using following configuration in httpd.conf as per Bob recommendation. Rewritelog logs/rewrite_log Rewriteloglevel 6

Re: [us...@httpd] group authorization via LDAP

2009-10-02 Thread Eric Covener
On Fri, Oct 2, 2009 at 10:36 AM, Tony Rice (trice) wrote: > Is our only choice changing all the .htaccess files with "require group > " to "require ldap-group cn=,ou=some long ldap > string" in order to make the switch group authorization via LDAP groups? Yes. -- Eric Covener cove...@gmail.com

Re: [us...@httpd] group authorization via LDAP

2009-10-02 Thread Eric Covener
On Fri, Oct 2, 2009 at 8:38 AM, Marc Patermann wrote: > Hi, > > Tom Evans schrieb: >> >> On Thu, 2009-10-01 at 17:18 -0400, Tony Rice (trice) wrote: > >> This is how we do it: >> [...] >> AuthzLDAPAuthoritative "On" >> Require valid-user >> Require ldap-group cn=Department,ou=Groups,o=Company > >

[us...@httpd] Configuration Apache for multiple wars on Tomcat with multiple domains

2009-10-02 Thread Cyril Vieville
Hi, I have an apache server used as load balancer for multiple tomcat servers clusters with mod_jk. The configuration is to have different workers on different servers and sometimes port as well : # # START # Nodes JkWorkerProperty worker.server_1_1.host=server40 JkWorkerProperty worker.

Re: [us...@httpd] apache redirection does not work

2009-10-02 Thread Eric Covener
On Fri, Oct 2, 2009 at 10:46 AM, Sharjeel Tariq wrote: > The issue with creating ServerAlias is we get two analytics reports for each > of our site. There are many benefits associated with redirecting non 'www' > urls to 'www' urls. > > I tried using following configuration in httpd.conf as per Bo

[us...@httpd] [virtual host - jkmount]Infra structure refactoring

2009-10-02 Thread Andre Rodrigues
Hi, I need to modify apache config to accomplish the following characteristcis: 1- Have one domain with digital certificate. 2- Transform the production domains into applications below the domain. I´ve set up a virtualhost to accomplish the task 1, it works ok. But I´m stuck in refactoring th

RE: [us...@httpd] group authorization via LDAP

2009-10-02 Thread Tony Rice (trice)
I'm able to do LDAP based group authorization when specify the group info as a filter in the LDAP URL but I'd like to configure a more generic LDAP string in the apache config and allow users to control access by group membership using .htaccess files. I'm able to authenticate based on userid/pass

Re: [us...@httpd] Configuration Apache for multiple wars on Tomcat with multiple domains

2009-10-02 Thread Martin Spinassi
On Fri, 2009-10-02 at 17:15 +0200, Cyril Vieville wrote: > Hi, > > > > I have an apache server used as load balancer for multiple tomcat > servers clusters with mod_jk. > > We use ServerAlias and our DNS registration (in direction of the > apache server of course) to have an URL by applicatio

RE: [us...@httpd] group authorization via LDAP

2009-10-02 Thread Tony Rice (trice)
One other wrinkle to add to this. I can get "require ldap-group" to work, but only if all the Auth config lines are in the .htaccess file. If it's in the httpd.conf file and only require lines are in the .htaccess file require ldap-group produces the errors below (though "require valid-user" and "

Re: [us...@httpd] group authorization via LDAP

2009-10-02 Thread Eric Covener
> AuthLDAPGroupAttribute memberOf > > require ldap-group CN=mygroup,OU=GroupStuff,OU=Company > Groups,DC=dev,DC=company,DC=com > > My LDAP entry (using the URL above) looks like this: > dn:CN=trice,OU=Employees,OU=Company Users,DC=dev,DC=company,DC=com > >               objectClass: top >          

Re: [us...@httpd] apache redirection does not work

2009-10-02 Thread Sharjeel Tariq
rewriteEngine is on. Here is the rule in Virtual Host. Servername www.example.com DocumentRoot /www/www_example_com/ CustomLog /var/log/apache/www_example_com_access.log combined env=!disable_logging ErrorLog /var/log/apache/www_example_com_error.log

Re: [us...@httpd] apache redirection does not work

2009-10-02 Thread Eric Covener
On Fri, Oct 2, 2009 at 3:48 PM, Sharjeel Tariq wrote: > rewriteEngine is on. Here is the rule in Virtual Host. > > > Servername www.example.com > DocumentRoot /www/www_example_com/ > CustomLog /var/log/apache/www_example_com_access.log > combined env=!disable_logging >

Re: [us...@httpd] apache redirection does not work

2009-10-02 Thread Sharjeel Tariq
the redirection rule is written in a separate file under . RewriteCond %{HTTP_HOST} ^example.com$ RewriteRule ^/(.*)$ http://www.example.com/$1 [L,R] The issue was that above rule works for all urls except for urls like http://example.com/news/headlines/more.jsp?content=20090624_075115_6540

Re: [us...@httpd] apache redirection does not work

2009-10-02 Thread Eric Covener
On Fri, Oct 2, 2009 at 4:07 PM, Sharjeel Tariq wrote: >  the redirection rule is written in a separate file under . > > > RewriteCond %{HTTP_HOST} ^example.com$ > RewriteRule ^/(.*)$ http://www.example.com/$1 [L,R] > > > The issue was that above rule works for all urls except for urls like > http:

RE: [us...@httpd] group authorization via LDAP

2009-10-02 Thread Tony Rice (trice)
Thanks makes sense and works well using require ldap-filter -Tony > -Original Message- > From: Eric Covener [mailto:cove...@gmail.com] > Sent: Friday, October 02, 2009 3:38 PM > To: users@httpd.apache.org > Subject: Re: [us...@httpd] group authorization via LDAP > > > AuthLDAPGroupAttri

[us...@httpd] Extra folders "build" and "include" after make install normal?

2009-10-02 Thread Rodney Beede
I'm building Apache 2.2.13 on Oracle Unbreakable 5.4 64-bit Linux with the following commands: ./configure --prefix=/rmg/software/apache2.2.13-openssl0.9.8k --with-included-apr --disable-autoindex --disable-imagemap --disable-include --disable-negotiation --disable-userdir --with-port=8080 --enabl

Re: [us...@httpd] Extra folders "build" and "include" after make install normal?

2009-10-02 Thread Eric Covener
On Fri, Oct 2, 2009 at 5:52 PM, Rodney Beede wrote: > I'm building Apache 2.2.13 on Oracle Unbreakable 5.4 64-bit Linux with > the following commands: > > ./configure --prefix=/rmg/software/apache2.2.13-openssl0.9.8k > --with-included-apr --disable-autoindex --disable-imagemap > --disable-include