It appears there's no way to do what you want to do; you'll have to
copy the relevant .class and/or .jar files into the app. (or ignore
advice and copy them into Tomcat's common /lib directory). Yes,
that's crude and ugly. See:
http://tomcat.apache.org/tomcat-6.0-doc/clas
t want to talk to your lawyer about your duty of care in
protecting your customers' transactions, too. He may have specific
advice on what you need to look for to get a reasonable balance
between cost and protection.
--
Mark H. Wood, Lead System Programmer mw...@iupui.edu
Friends don't
n certificate should be
done very carefully, since it is the key to the whole security
infrastructure that you want to build.
--
Mark H. Wood, Lead System Programmer mw...@iupui.edu
Friends don't let friends publish revisable-form documents.
pgpCWe7rBybl8.pgp
Description: PGP signature
d with Entrust is that their order flow
assumes that someone has both the technical data and purchase
authority, which doesn't quite fit our organization, but that's just a
minor annoyance.
--
Mark H. Wood, Lead System Programmer mw...@iupui.edu
Friends don't let friends publish
I was recently recommended to look at mod_cband. I've just started
tinkering with it and can't say much one way or the other just yet.
--
Mark H. Wood, Lead System Programmer mw...@iupui.edu
Friends don't let friends publish revisable-form documents.
pgpKmiQ5SR9Qi.pgp
D
Local DNS cache of some sort on the Fedora box? Some of my hosts run
'nscd' (which comes with glibc) and some run BIND in cache-only mode.
--
Mark H. Wood, Lead System Programmer mw...@iupui.edu
Friends don't let friends publish revisable-form documents.
pgpgF667txjjX.pgp
D
DB/2, and the
like who would be interested as well.)
--
Mark H. Wood, Lead System Programmer mw...@iupui.edu
Friends don't let friends publish revisable-form documents.
pgp34m9TiSFF7.pgp
Description: PGP signature
I wouldn't be surprised if there are teams of sharp developers at
those *advertising-supported* organizations tasked with making it
difficult for you to compete with them.
--
Mark H. Wood, Lead System Programmer mw...@iupui.edu
Friends don't let friends publish revisable-form
e LAA would change if you ever changed the network-layer
address. What fun.
--
Mark H. Wood, Lead System Programmer mw...@iupui.edu
Friends don't let friends publish revisable-form documents.
pgpxLxIhRjoVl.pgp
Description: PGP signature
't want to mess with
it.
Others will have similar reasons for *not* running an HTTPD frontend.
One other reason I can think of: if you need HTTPD anyway for other
uses, you might want to keep all the network-related configuration
together.
--
Mark H. Wood, Lead System Programmer
over a packet switching network.
Then your pages can link to the right protocol and port to hit your
streamer, and pass this highly specialized buck thereto.
--
Mark H. Wood, Lead System Programmer mw...@iupui.edu
Friends don't let friends publish revisable-form documents.
pgpy5cG0awnc
was rendered as some other format, not AV
o Video and/or audio was incomprehensible
o Video and/or audio quality was poor
o Presentation stalled repeatedly
o Presentation quit early
o something else?
--
Mark H. Wood, Lead System Programmer mw...@iupui.edu
Friends don't let friends pu
defined "myhost_com" or "server" in etc/hosts *on the server*.
Does the server have a firewall configuration that lets remote desktop
through but not HTTP?
Does 'netstat -a -p tcp' show a listener on 192.168.1.2:80?
--
Mark H. Wood, Lead System Programmer mw...
mod_serial or something, I would go with that. Time
is far more complex.
--
Mark H. Wood, Lead System Programmer mw...@iupui.edu
Friends don't let friends publish revisable-form documents.
smime.p7s
Description: S/MIME cryptographic signature
complexity. So
the best choice depends on what you need to accomplish.
--
Mark H. Wood, Lead System Programmer mw...@iupui.edu
Friends don't let friends publish revisable-form documents.
pgptC9DSZbxwE.pgp
Description: PGP signature
t; Is it really possible? It is not something I can find in man page so I'd
> appreciate your comment. Many thanks!
It is not possible using 'rotatelogs', which comes with HTTPD. The
solution provided in an earlier posting uses 'logrotate', another
program altogether.
ge: start as root, acquire all privileged
resources, switch to unprivileged UID. See for example jsvc that
comes with Apache Tomcat, or UDel ntpd, or
--
Mark H. Wood, Lead System Programmer [EMAIL PROTECTED]
Typically when a software vendor says that a product is "intuitive" he
means the exact opposite.
pgpWYNxN8cjji.pgp
Description: PGP signature
The cause of such behavior should be corrected.
If all unsatisfiable requests return the home page -- well, I can't
really say it's *wrong*, but I certainly think that's tasteless and
confusing.
--
Mark H. Wood, Lead System Programmer [EMAIL PROTECTED]
Typically when a software vendor
s not
expected to write. The owner of a file owns its permission mask and
can change its own access at will.
--
Mark H. Wood, Lead System Programmer [EMAIL PROTECTED]
Typically when a software vendor says that a product is "intuitive" he
means the exact opposite.
pgpFPknYnqvoY.pgp
Description: PGP signature
be so.
--
Mark H. Wood, Lead System Programmer [EMAIL PROTECTED]
Friends don't let friends publish revisable-form documents.
pgpFgZqlHQLWt.pgp
Description: PGP signature
On Thu, Dec 11, 2008 at 11:13:03AM -0500, Dan Mahoney, System Admin wrote:
> http://gushi.livejournal.com/451615.html?mode=reply
Now if I could only find a maildrop recipe to rip these annoying
prefixes *off* of all incoming mail
--
Mark H. Wood, Lead System Programmer mw...@iupui.
an
mis-spell it 'Woehler', but we can't spell it properly."
-- #6, "How to Have Your Budget Cut"
--
Mark H. Wood, Lead System Programmer mw...@iupui.edu
Friends don't let friends publish revisable-form documents.
pgpSW91f8XXc4.pgp
Description: PGP signature
is the CN = common name,
>
> Surely that's not what I want? The username is in the sAMAccountName
> attribute.
'sAMAccountName' should always work in ADS and is probably what you
want to use with it. 'cn' works here, but I think I've seen ADS sites
whe
ADS you have
to identify yourself.
--
Mark H. Wood, Lead System Programmer mw...@iupui.edu
Friends don't let friends publish revisable-form documents.
pgpz7tqflKaG0.pgp
Description: PGP signature
dap-group cn=IN-ULib-Admins,ou=IN-ADMINS,ou=IN,dc=ADS,dc=IU,dc=Edu
I'm sure that some of that is debris from trying various things to
make it work, which I'm now scared to touch. :-/ Adjust the Require
directive, "domain controller list", "initial bind user"
On Fri, Feb 27, 2009 at 05:19:18PM +, Ed Avis wrote:
> AuthLDAPBindDN "WCL\\tradingsystems"
That's not a DN. A DN would look something like:
sAMAccountName=tradingsystems,dc=WCL,dc=example,dc=com
--
Mark H. Wood, Lead System Programmer mw...@iupui.edu
. But then there's a
bit about name- and IP-based vhosts being unable to "interfere", which
makes me uncertain.
--
Mark H. Wood, Lead System Programmer mw...@iupui.edu
Friends don't let friends publish revisable-form documents.
pgpzxHf9opCTv.pgp
Description: PGP signature
a
> text, easily read by humans but not by machines. There is a name for that
> kind of thing, but I don't recall it right now.
"CAPTCHA"
--
Mark H. Wood, Lead System Programmer mw...@iupui.edu
Friends don't let friends publish revisable-form documents.
pgpIAnFVwYeYq.pgp
Description: PGP signature
lot simpler
than what is being proposed here.
--
Mark H. Wood, Lead System Programmer mw...@iupui.edu
Friends don't let friends publish revisable-form documents.
pgpC1ammM4P44.pgp
Description: PGP signature
g a network monitor like tcpdump
or wireshark? what packets did you see? Do you know that your IPv6
stack is working as you expect? Is there a host-based firewall, and
is it configured to let the IPv6 traffic through? (On Linux, for
example, IPv4 and IPv6 use separate sets of rule tables.)
--
Mar
o}.
Would you (or anyone) please point me to the relevant section of the
2.2 documentation for the ${foo} method. I've never seen this mentioned.
Clearly I'm not looking in the right place. mod_macro looks nice, but
it's more than I need for simple manifest constants.
Thanks!
age?
Edit | Preferences | Main | Startup:
When Firefox starts: [Show my home page]
Home page: [ url goes here ]
--
Mark H. Wood, Lead System Programmer mw...@iupui.edu
Friends don't let friends publish revisable-form documents.
pgpBwzlShusvM.pgp
Description: PGP signature
uot; Because the address parsing objected to the scope-id, not
to the interface address.
I've been pondering this a bit, and I can't think of a reason why
HTTPD would need to deal with scope-id.
--
Mark H. Wood, Lead System Programmer mw...@iupui.edu
Friends don't let
pound on this point with others who build app.s for us,
until it goes in. I've lost count of the number of products which
would have met our needs *except* that they had only a toy
authentication mechanism wired in with no possibility of bypassing it.
[end rant]
--
Mark H. Wood, Lead Syst
On Wed, May 13, 2009 at 08:10:01AM -0700, Justin Zhang wrote:
> How to open a port to allow the local web site out?
Consult the instructions that came with your router. Every one of
them is different.
--
Mark H. Wood, Lead System Programmer mw...@iupui.edu
Friends don't let friends
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
I use Blat to script mail submission from Windows boxes.
http://www.blat.net/
- --
Mark H. Wood, Lead System Programmer [EMAIL PROTECTED]
Open-source executable: $0.00. Source: $0.00 Control: priceless!
-BEGIN PGP SIGNATURE-
Version
N?one"
That is: the space-separated list of hostnames goes inbetween the // and
the /, but otherwise the URL looks normal.
- --
Mark H. Wood, Lead System Programmer [EMAIL PROTECTED]
Open-source executable: $0.00. Source: $0.00 Control: priceless!
-BEGIN PGP SIGNATURE-
Vers
ngs to see where the
bottlenecks are. (After you overcome the first one, you'll find a second
one right behind it. Performance management is the art of rearranging
bottlenecks until you don't reach them.)
- --
Mark H. Wood, Lead System Programmer [EMAIL PROTECTED]
Open-source executable: $
Short of some LDAP filter voodoo that does subqueries (whose
existence sounds unlikely) it looks like I'm going to have to build a
recursive membership test and then fit it onto Apache somehow (probably
using mod_auth_external).
- --
Mark H. Wood, Lead System Programmer [EMAIL PROTECTE
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
SSL. Once the conversation is encrypted to your satisfaction, you can use
plaintext passwords and avoid whatever it is you don't like about the
hashing methods.
- --
Mark H. Wood, Lead System Programmer [EMAIL PROTECTED]
Typically when a sof
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
mod_apache_snmp?
http://sourceforge.net/projects/mod-apache-snmp/
- --
Mark H. Wood, Lead System Programmer [EMAIL PROTECTED]
Typically when a software vendor says that a product is "intuitive" he
means the exact opposite.
Your chance to tell me where to go :-)
I'm looking for a good place to discuss non-server-specific issues
relating to spidering. Such as: "I have this great new proposal that
would help us to segregate spider and real-user access in our
statistics...."
--
Mark H. Wood, Lead Sy
On Sat, Jun 09, 2007 at 12:46:23AM -0700, lists wrote:
> Mark H. Wood wrote:
> > Your chance to tell me where to go :-)
> >
> > I'm looking for a good place to discuss non-server-specific issues
> > relating to spidering. Such as: "I have this great n
sername=apache
(which is *not* the owner of the script).
Where do I go from here?
- --
Mark H. Wood, Lead System Programmer [EMAIL PROTECTED]
Open-source executable: $0.00. Source: $0.00 Control: priceless!
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.0 (GNU/Linux)
have matched the
UserDir. It appears totally unnecessary given that the default
configuration also includes:
Options +ExecCGI -Includes -Indexes
SetHandler cgi-script
and commenting the ScriptAliasMatch was all I needed for suEXEC to
trigger.
- --
Mark H. Wood, Lead System Progr
ipher then the output key won't have a passphrase.
Instruct Apache to use the output key instead of the input key and the SSL
library should no longer prompt for a passphrase, since it won't need one
to decrypt the private key.
- --
Mark H. Wood, Lead System Programmer [EMAIL
es --connrate or --limit or even --dstlimit
if you just want to slow him down.
- --
Mark H. Wood, Lead System Programmer [EMAIL PROTECTED]
Open-source executable: $0.00. Source: $0.00 Control: priceless!
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.2 (GNU/Linux)
Comment: pgpen
hen another
thing to look at is firewalls. I've lost more time than I care to recall
in troubleshooting things that weren't working because I hadn't run
'iptables' to update the network access rules for the box. :-/
- --
Mark H. Wood, Lead System Programmer [EMAIL PROTE
eanings and permitted values of those parameters
are indeed an httpd question, or at least a question for the person who
makes the MSI package. Listizens on a list for MSI questions wouldn't be
able to answer such a question, since they didn't design the package and
don't know what it
hat is what I would go looking for.
--
Mark H. Wood, Lead System Programmer [EMAIL PROTECTED]
Typically when a software vendor says that a product is "intuitive" he
means the exact opposite.
pgphralpXAMnj.pgp
Description: PGP signature
Allow from 134.68.171.0/27
Allow from 134.68.172.0/24
LoadModule authz_svn_module
modules/mod_authz_svn.so
How to proceed?
--
Mark H. Wood, Lead System Programmer [EMAIL PROTECTED]
Typically when a software vendor says that
On Mon, Nov 12, 2007 at 06:26:53PM -0500, Eric Covener wrote:
> On Nov 12, 2007 4:23 PM, Mark H. Wood <[EMAIL PROTECTED]> wrote:
> > httpd is returning 500 to the client. Log shows:
> >
> > [Mon Nov 12 15:59:35 2007] [warn] [client 127.0.0.1] [9159] auth_ldap
&
On Tue, Nov 13, 2007 at 09:38:49AM -0500, Eric Covener wrote:
> On Nov 13, 2007 9:24 AM, Mark H. Wood <[EMAIL PROTECTED]> wrote:
>
> > > Are you able to try the same LDAP server w/o SSL?
> >
> > I just did, and it works. I'd welcome suggestions as to how I
en=0 TSV=96846396 TSER=484044
It's as though the LDAP auth code gets all set to bind, then discovers
some error which goes totally unreported, and drops the connection as failed.
--
Mark H. Wood, Lead System Programmer [EMAIL PROTECTED]
Typically when a software vendor says tha
, and things are working again.
Now I need to track down just which layer of software (OpenLDAP?
OpenSSL? HTTPD?) is failing to report why it gave up.
--
Mark H. Wood, Lead System Programmer [EMAIL PROTECTED]
Typically when a software vendor says that a product is "intuitive" he
means
if I could just read something
and determine which things will happen to a model request in which
order.
--
Mark H. Wood, Lead System Programmer [EMAIL PROTECTED]
Typically when a software vendor says that a product is "intuitive" he
means the exact opposite.
pgpwE15j7wkXm.
Thank you for your very helpful response.
On Mon, Jan 28, 2008 at 10:54:47PM +, Nick Kew wrote:
> On Mon, 28 Jan 2008 16:54:32 -0500
> "Mark H. Wood" <[EMAIL PROTECTED]> wrote:
> > Is there some document I can read to help me understand the order in
> > w
ssword off the private key
and make sure that its filesystem protection is adequate. If you're
handling money or state secrets, you really should just ask your
auditors what to do, because if you come up with any method they
haven't already approved then your system will fail its next audit.
DS this way is that ADS can be
configured to accept a null bind but return no results for any query
until a non-null bind is done (as it's been configured here )-: The
resulting error message is remarkably unenlightening.
--
Mark H. Wood, Lead System Programmer [EMAIL PROTECTED]
Typically
might just do without today.
--
Mark H. Wood, Lead System Programmer [EMAIL PROTECTED]
Typically when a software vendor says that a product is "intuitive" he
means the exact opposite.
pgpxx8rsNLYFT.pgp
Description: PGP signature
A quick search turns up this page:
http://www.threatexpert.com/report.aspx?uid=681ac5d0-36d8-4217-8e0f-38f5b928fb14
--
Mark H. Wood, Lead System Programmer [EMAIL PROTECTED]
Typically when a software vendor says that a product is "intuitive" he
means the exac
d your office?
You *had* a month, back in March 2006, but that opportunity has now passed
by. :-)
- --
Mark H. Wood, Lead System Programmer [EMAIL PROTECTED]
Typically when a software vendor says that a product is "intuitive" he
means the exact opposite.
-BEGIN PGP SIGNAT
t TLS overhead would be worth worrying about on any of
them, given our traffic levels.
Have you measured your systems' performance under typical load? Are
you really using that much CPU?
--
Mark H. Wood, Lead System Programmer mw...@iupui.edu
Balance your desire for bells and whistles with t
arious specific drivers, which use various protocols to talk to
their proper backends. According to http://www.freetds.org/ FreeTDS
includes an ODBC library, so you'd probably just need to install it,
describe it to your driver manager, and tell HTTPD to use it.
--
Mark H. Wood, Lead Sy
gt; >
> It doesn't support unixODBC?
> [sorry for hijacking]
UnixODBC is a driver manager. The package includes *some* drivers.
For SQL Server they direct you to either FreeTDS or a "free trial"
from EasySoft. The "drivers" page at http://www.unixodbc.org/ has a
is in it? What is in your error log?
If he's using ProxyPass for this, then mod_jk is irrelevant; this is
using mod_proxy and mod_proxy_ajp.
--
Mark H. Wood, Lead System Programmer mw...@iupui.edu
Asking whether markets are efficient is like asking whether people are smart.
pgpQjUKU
th others that 'DBDriver pgsql' asks for
the PostgreSQL driver.
--
Mark H. Wood, Lead System Programmer mw...@iupui.edu
Asking whether markets are efficient is like asking whether people are smart.
pgpoD2BbaTSu3.pgp
Description: PGP signature
l this
out, so I'm not writing from fresh experience of actually making it
work.
--
Mark H. Wood, Lead System Programmer mw...@iupui.edu
Asking whether markets are efficient is like asking whether people are smart.
pgpTROI8kRlyl.pgp
Description: PGP signature
that but it still would not recognize the folder and I
> > get the same
Woops, I read this again. favicon.ico is not a folder; it's an image
file. Find more than you ever wanted to know here:
http://en.wikipedia.org/wiki/Favicon
--
Mark H. Wood, Lead System Programmer mw...@iupu
you are talking to the website you think
you are. The conversation would still be encrypted, but having an
encrypted conversation with an unknown party doesn't sound secure to
me.
--
Mark H. Wood, Lead System Programmer mw...@iupui.edu
Asking whether markets are efficient is like asking whe
if the storage *is*
mounted at /server but there is no subdirectory "dir" in the root of
that remote volume.)
If HTTPD must start even though the storage server is not mounted, you
could make an empty directory "dir" under the local "/server" and I
think that would satisfy
in server_info. I'd
guess there would be an AddHandler directive to have it called
under the right conditions. You'd probably have to get Oracle to
tell you how to turn on debug logging.
Come to think of it, if Oracle set it all up then making it work ought
to be one of the reasons
A long time ago I played around with mod-cband. My memory of that is
dim, but I thought it worth mentioning in case it would help.
--
Mark H. Wood
Lead Technology Analyst
University Library
Indiana University - Purdue University Indianapolis
755 W. Michigan Street
Indianapolis, IN 46202
317
enough of the design to go beyond that. The "right way"
will depend on details of the data collection process. There may be
several ways that are equally "right", or that all work but trade off
among space, time, and complexity. All three of those can be
particularly expensiv
ng the production box.
Then run your regression tests and security scans against the
production box(es).
--
Mark H. Wood, Lead System Programmer mw...@iupui.edu
There's an app for that: your browser
pgpYPf0sYXvrO.pgp
Description: PGP signature
here is a
> part which changes regularly)
Does the content have to be absolutely identical 100% of the time, or
can occasional changes ripple through the system on a scale of seconds
to minutes? rsync is free. How volatile are your volatile pages?
--
Mark H. Wood, Lead System Programmer mw
nothing that couldn't be done almost as well in
another way. So far keeping it (after I made it run) has been less
work than falling back to 2.2 would be.
That's on my development environment, though. We still run 2.2 in
production, and will until Gentoo stabilizes another 2.4.x.
--
the same ProxyPass directive). The directive was previously working
before I added the 'secret' parameter.
What am I missing?
--
Mark H. Wood
Lead Technology Analyst
University Library
Indiana University - Purdue University Indianapolis
755 W. Michigan Street
Indianapolis, I
che mod_authnz_ldap for authorization. These
are two different 'Authtype's. Am I out of luck?
--
Mark H. Wood
Lead Technology Analyst
University Library
Indiana University - Purdue University Indianapolis
755 W. Michigan Street
Indianapolis, IN 46202
317-274-0749
www.ulib.iupui.edu
signature.asc
Description: PGP signature
I found some help on writing modules in general, but nothing on
requirements specific to authentication modules. Would someone please
point me in the right direction.
--
Mark H. Wood
Lead Technology Analyst
University Library
Indiana University - Purdue University Indianapolis
755 W. Michigan
uthType Basic". Is there a way to do that in HTTPD 2.4?
--
Mark H. Wood
Lead Technology Analyst
University Library
Indiana University - Purdue University Indianapolis
755 W. Michigan Street
Indianapolis, IN 46202
317-274-0749
www.ulib.iupui.edu
signature.asc
Description: PGP signature
my modest needs.
Monit is useful for detecting hung or crashed services and restarting
them.
--
Mark H. Wood
Lead Technology Analyst
University Library
Indiana University - Purdue University Indianapolis
755 W. Michigan Street
Indianapolis, IN 46202
317-274-0749
www.ulib.iupui.edu
signature.asc
Description: PGP signature
82 matches
Mail list logo
