httpd-2.0.61

2007-08-30 Thread William A. Rowe, Jr.
You'll note there is a -very- short list of remaining patches to consider for the 2.0 branch, and the logging stderr pool in particular would be good to backport. Because there is no shell, we forcefully kill the stderr pipe logger on pool cleanup before we start launching the new logs. In

[PATCH] mod_ssl: Stricter directive context checking

2007-08-30 Thread Martin Kraemer
In mod_ssl's directive parser, many directives do not check the allowed contexts, thus misleading the user that, e.g., in the configuration... LimitExcept GET OPTIONS Require valid-user IfModule ssl_module SSLRequireSSL /IfModule /LimitExcept the SSLRequireSSL directive

Guess what? Time for 1.3.39, 2.0.61 and 2.2.6 :)

2007-08-30 Thread Jim Jagielski
Since a few regressions and other issues popped up the last go around, I cancelled release of 1.3.38, 2.0.60 and 2.2.5... I think we are close, *very* close to being at the point to try this all again. 1.3.39 looks stable enough that a TR has no open issues at all. So it's a no-brainer. 2.0.61

Re: Guess what? Time for 1.3.39, 2.0.61 and 2.2.6 :)

2007-08-30 Thread Joe Orton
On Thu, Aug 30, 2007 at 08:31:21AM -0400, Jim Jagielski wrote: Since a few regressions and other issues popped up the last go around, I cancelled release of 1.3.38, 2.0.60 and 2.2.5... I think we are close, *very* close to being at the point to try this all again. Can we move the SECURITY

Re: Guess what? Time for 1.3.39, 2.0.61 and 2.2.6 :)

2007-08-30 Thread Jim Jagielski
Yes, the CHANGES file will be updated to reflect any and all security issues for that release... On Aug 30, 2007, at 8:38 AM, Joe Orton wrote: On Thu, Aug 30, 2007 at 08:31:21AM -0400, Jim Jagielski wrote: Since a few regressions and other issues popped up the last go around, I cancelled

RE: Guess what? Time for 1.3.39, 2.0.61 and 2.2.6 :)

2007-08-30 Thread Cameron J. Young \(Personal\)
Jim, Is that EST or PST ?? Cheers, Cameron -Original Message- From: Jim Jagielski [mailto:[EMAIL PROTECTED] Sent: Thursday, 30 August 2007 23:02 To: dev@httpd.apache.org Subject: Re: Guess what? Time for 1.3.39, 2.0.61 and 2.2.6 :) Yes, the CHANGES file will be updated to reflect any

Re: Blackdot.be (ApacheMon ApacheMobile) - Questions sparked by the ApacheLounge fuss

2007-08-30 Thread Jorge Schrauwen
Mail prc-at-apache.org but not reply yet but I'm in the process of renaming all the stuff, If they don't agree with the new name I'll do it again. But I have a few question. --- readme.txt extract --- What is it? - HTTP Server On USB is a self contained webserver. Based on

Re: Guess what? Time for 1.3.39, 2.0.61 and 2.2.6 :)

2007-08-30 Thread Jim Jagielski
Well... I'm east coast :) On Aug 30, 2007, at 9:48 AM, Cameron J. Young ((Personal)) wrote: Jim, Is that EST or PST ?? Cheers, Cameron -Original Message- From: Jim Jagielski [mailto:[EMAIL PROTECTED] Sent: Thursday, 30 August 2007 23:02 To: dev@httpd.apache.org Subject: Re: Guess

Re: Blackdot.be (ApacheMon ApacheMobile) - Questions sparked by the ApacheLounge fuss

2007-08-30 Thread Jim Jagielski
Sorry for the delay (with my PRC hat on). You should see a reply as we speak :) On Aug 30, 2007, at 10:00 AM, Jorge Schrauwen wrote: Mail prc-at-apache.org but not reply yet but I'm in the process of renaming all the stuff, If they don't agree with the new name I'll do it again.

RE: Guess what? Time for 1.3.39, 2.0.61 and 2.2.6 :)

2007-08-30 Thread Cameron Young
Thanks Jim. Allows me to do the correct maths. I'm in Australia (East Coast). Cheers, Cameron -Original Message- From: Jim Jagielski [mailto:[EMAIL PROTECTED] Sent: Friday, 31 August 2007 00:13 To: dev@httpd.apache.org Subject: Re: Guess what? Time for 1.3.39, 2.0.61 and 2.2.6 :)

Re: [PATCH] proxy/ajp_header.c: Fix header detection

2007-08-30 Thread Jim Jagielski
Yeah, all this is being fixed in the mod_jk code as well... On Aug 30, 2007, at 6:55 AM, Martin Kraemer wrote: Hi. While looking at ajp_header.c, I realized that its method of parsing the header line tokens is flakey: it uses memcmp() to check, e.g., whether the header token is

Re: Blackdot.be (ApacheMon ApacheMobile) - Questions sparked by the ApacheLounge fuss

2007-08-30 Thread Jorge Schrauwen
On 8/30/07, Jim Jagielski [EMAIL PROTECTED] wrote: Sorry for the delay (with my PRC hat on). You should see a reply as we speak :) No worries, but while I have attention let me hold on to it for a bit longer ;) Regarding the disclaimer I asked about in my previous message. Since you didn't

Re: Blackdot.be (ApacheMon ApacheMobile) - Questions sparked by the ApacheLounge fuss

2007-08-30 Thread Jim Jagielski
On Aug 30, 2007, at 10:39 AM, Jorge Schrauwen wrote: On 8/30/07, Jim Jagielski [EMAIL PROTECTED] wrote: Sorry for the delay (with my PRC hat on). You should see a reply as we speak :) No worries, but while I have attention let me hold on to it for a bit longer ;) Regarding the disclaimer

Re: [PATCH] proxy/ajp_header.c: Fix header detection

2007-08-30 Thread Rainer Jung
I committed Martins patch to mod_jk a couple of minutes ago. Thanks Martin! The Content-Type part of the patch didn't apply to mod_jk though. Regards, Rainer Jim Jagielski wrote: Yeah, all this is being fixed in the mod_jk code as well... On Aug 30, 2007, at 6:55 AM, Martin Kraemer wrote:

Re: Blackdot.be (ApacheMon ApacheMobile) - Questions sparked by the ApacheLounge fuss

2007-08-30 Thread Jorge Schrauwen
On 8/30/07, Jim Jagielski [EMAIL PROTECTED] wrote: On Aug 30, 2007, at 10:39 AM, Jorge Schrauwen wrote: On 8/30/07, Jim Jagielski [EMAIL PROTECTED] wrote: Sorry for the delay (with my PRC hat on). You should see a reply as we speak :) No worries, but while I have attention let me

Any interest in the ApacheMon source code?

2007-08-30 Thread Jorge Schrauwen
Hi dev's, I used to maintain ApacheMon (now removed from blackdot.be) I no longer have the time to keep updating and fixing it. I started working on this a few years ago because I wasn't (still not actually) satisfied with the bundled ApacheMonitor.exe So I started working a replacement. First

Re: authnz_ldap in 2.2.x

2007-08-30 Thread Brad Nicholes
On 8/29/2007 at 7:51 PM, in message [EMAIL PROTECTED], Eric Covener [EMAIL PROTECTED] wrote: In 2.2.x If authz_XXX are one of dbm, owner, or groupfile they track the list of requires and decline if they don't see any they're responsible for -- this isn't a crap shoot of module ordering in

Re: svn commit: r571209 - /httpd/httpd/branches/2.2.x/modules/proxy/ajp_header.c

2007-08-30 Thread Jim Jagielski
Are these really candidates for bypassing the normal backport process from trunk?? [EMAIL PROTECTED] wrote: Author: martin Date: Thu Aug 30 08:29:27 2007 New Revision: 571209 URL: http://svn.apache.org/viewvc?rev=571209view=rev Log: Convert just the message text to EBCDIC, and not the

Re: svn commit: r571203 - /httpd/httpd/branches/2.2.x/modules/proxy/ajp_header.c

2007-08-30 Thread Jim Jagielski
Ummm 2 things: First of all, this is not even patched in trunk yet. Secondly, this completely bypasses the normal backporting process that everyone is required to use. Please revert these patches, patch trunk and submit these patches for backport. [EMAIL PROTECTED] wrote: Author: martin

Re: svn commit: r571203 - /httpd/httpd/branches/2.2.x/modules/proxy/ajp_header.c

2007-08-30 Thread Jeff Trawick
On 8/30/07, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: Author: martin Date: Thu Aug 30 08:22:58 2007 New Revision: 571203 URL: http://svn.apache.org/viewvc?rev=571203view=rev Log: Add missing end-of-string checks by using strcmp in place of memcmp memcmp() is not needed when you know the

Re: svn commit: r571203 - /httpd/httpd/branches/2.2.x/modules/proxy/ajp_header.c

2007-08-30 Thread Jim Jagielski
On Aug 30, 2007, at 11:39 AM, Jim Jagielski wrote: Ummm 2 things: First of all, this is not even patched in trunk yet. Secondly, this completely bypasses the normal backporting process that everyone is required to use. Please revert these patches, patch trunk and submit these patches for

Re: svn commit: r571203 - /httpd/httpd/branches/2.2.x/modules/proxy/ajp_header.c

2007-08-30 Thread Jeff Trawick
On 8/30/07, Jeff Trawick [EMAIL PROTECTED] wrote: On 8/30/07, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: Author: martin Date: Thu Aug 30 08:22:58 2007 New Revision: 571203 URL: http://svn.apache.org/viewvc?rev=571203view=rev Log: Add missing end-of-string checks by using strcmp in

Re: svn commit: r571209 - /httpd/httpd/branches/2.2.x/modules/proxy/ajp_header.c

2007-08-30 Thread Martin Kraemer
On Thu, Aug 30, 2007 at 11:36:18AM -0400, Jim Jagielski wrote: Are these really candidates for bypassing the normal backport process from trunk?? --- httpd/httpd/branches/2.2.x/modules/proxy/ajp_header.c (original) +++ httpd/httpd/branches/2.2.x/modules/proxy/ajp_header.c Thu Aug 30

Re: svn commit: r571209 - /httpd/httpd/branches/2.2.x/modules/proxy/ajp_header.c

2007-08-30 Thread Martin Kraemer
On Thu, Aug 30, 2007 at 11:36:18AM -0400, Jim Jagielski wrote: Are these really candidates for bypassing the normal backport process from trunk?? I committed the other change (memcmp-strcmp) righty now on trunk. And yes, I am aware that I should have done that first, sorry. Martin -- [EMAIL

Re: svn commit: r571209 - /httpd/httpd/branches/2.2.x/modules/proxy/ajp_header.c

2007-08-30 Thread Jim Jagielski
On Aug 30, 2007, at 11:54 AM, Martin Kraemer wrote: On Thu, Aug 30, 2007 at 11:36:18AM -0400, Jim Jagielski wrote: Are these really candidates for bypassing the normal backport process from trunk?? --- httpd/httpd/branches/2.2.x/modules/proxy/ajp_header.c (original) +++

Re: svn commit: r571209 - /httpd/httpd/branches/2.2.x/modules/proxy/ajp_header.c

2007-08-30 Thread Jim Jagielski
On Aug 30, 2007, at 11:56 AM, Martin Kraemer wrote: On Thu, Aug 30, 2007 at 11:36:18AM -0400, Jim Jagielski wrote: Are these really candidates for bypassing the normal backport process from trunk?? I committed the other change (memcmp-strcmp) righty now on trunk. And yes, I am aware that I

Re: [PATCH] proxy/ajp_header.c: Fix header detection

2007-08-30 Thread Rainer Jung
Hi Martin, Martin Kraemer wrote: Hi. While looking at ajp_header.c, I realized that its method of parsing the header line tokens is flakey: it uses memcmp() to check, e.g., whether the header token is Accept-Charset:, by uppercasing the token name (- ACCEPT-CHARSET), then compares the initial

Re: [PATCH] proxy/ajp_header.c: Fix header detection

2007-08-30 Thread Martin Kraemer
On Thu, Aug 30, 2007 at 04:45:38PM +0200, Rainer Jung wrote: I committed Martins patch to mod_jk a couple of minutes ago. Thanks Martin! The Content-Type part of the patch didn't apply to mod_jk though. ... -if (memcmp(stringname, Content-Type, 12) == 0) { +if

Re: [PATCH] proxy/ajp_header.c: Fix header detection

2007-08-30 Thread Jess Holle
Martin Kraemer wrote: On Thu, Aug 30, 2007 at 04:45:38PM +0200, Rainer Jung wrote: I committed Martins patch to mod_jk a couple of minutes ago. Thanks Martin! The Content-Type part of the patch didn't apply to mod_jk though. ... -if (memcmp(stringname, Content-Type, 12) ==

Re: [PATCH] proxy/ajp_header.c: Fix header detection

2007-08-30 Thread jean-frederic clere
Martin Kraemer wrote: Hi. While looking at ajp_header.c, I realized that its method of parsing the header line tokens is flakey: it uses memcmp() to check, e.g., whether the header token is Accept-Charset:, by uppercasing the token name (- ACCEPT-CHARSET), then compares the initial ACCEPT-

Re: Blackdot.be (ApacheMon ApacheMobile) - Questions sparked by the ApacheLounge fuss

2007-08-30 Thread William A. Rowe, Jr.
Jorge Schrauwen wrote: I'd like to add an additional note to this but I'm unsure in how to phrase it. What I want to say is: That I take the source tarball's that are posted e.g. httpd-2.2.4-win32-src.zip (only official release no TR, svn etc). I'd also like to knew if I need to add an

Re: Blackdot.be (ApacheMon ApacheMobile) - Questions sparked by the ApacheLounge fuss

2007-08-30 Thread William A. Rowe, Jr.
William A. Rowe, Jr. wrote: Jorge Schrauwen wrote: I'd like to add an additional note to this but I'm unsure in how to phrase it. What I want to say is: That I take the source tarball's that are posted e.g. httpd-2.2.4-win32-src.zip (only official release no TR, svn etc). I'd also like to

Re: authnz_ldap in 2.2.x

2007-08-30 Thread Eric Covener
On 8/30/07, Brad Nicholes [EMAIL PROTECTED] wrote: On 8/29/2007 at 7:51 PM, in message [EMAIL PROTECTED], Eric Covener [EMAIL PROTECTED] wrote: In 2.2.x If authz_XXX are one of dbm, owner, or groupfile they track the list of requires and decline if they don't see any they're

updated mime.types

2007-08-30 Thread Roy T. Fielding
Please check out the updated mime.types file and, if possible, see if it breaks anything on a real site. http://svn.apache.org/repos/asf/httpd/httpd/trunk/docs/conf/mime.types Technically, it is docs, but I am blurry-eyed at the moment and need to do *something* for my wedding anniversary