secure use of ap_get_server_name/port

2008-03-06 Thread Nebergall, Christopher
I'm looking for secure versions of ap_get_server_name and ap_get_server_port which can be trusted to always evaluate to the correct host and port for re-constructing the original URL the user requested. I've removed all of the code below which seemed to rely on DNS, or info sent from the

RE: secure use of ap_get_server_name/port

2008-03-06 Thread Nebergall, Christopher
Sorry let me clarify. I'm looking at doing external policy evaluation of the URI like is done is most SSO products. I have to create a policy for every URL the user may hit (with support for wildcards). I would like to minimize the number of policies created. So while there may be 5

Re: Adding stickysession cookie on the proxy

2008-03-06 Thread Nick Gearls
Great idea Nick Jani M. wrote: Hi, I've been playing with the idea of adding support for the proxy module to add stickysession cookies on behalf of the backend servers. I have one case on my hands right now where this would be needed, and I can think of this being of use for others too.

Re: Adding stickysession cookie on the proxy

2008-03-06 Thread Jani M.
Ruediger Pluem wrote: You can already do this with mod_headers. Just add Header add Set-Cookie MYCOOKIE=SOMEVALUE.%{BALANCER_WORKER_ROUTE}e; path=/; env=BALANCER_ROUTE_CHANGED Ah. Don't know why, but for some reason I didn't even think of using mod_headers for this. Now that you mentioned

Re: Adding stickysession cookie on the proxy

2008-03-06 Thread Jim Jagielski
On Mar 6, 2008, at 12:45 PM, Jani M. wrote: Ruediger Pluem wrote: You can already do this with mod_headers. Just add Header add Set-Cookie MYCOOKIE=SOMEVALUE.% {BALANCER_WORKER_ROUTE}e; path=/; env=BALANCER_ROUTE_CHANGED Ah. Don't know why, but for some reason I didn't even think of using

Re: Adding stickysession cookie on the proxy

2008-03-06 Thread Joshua Slive
On Thu, Mar 6, 2008 at 3:05 PM, Jim Jagielski [EMAIL PROTECTED] wrote: The advantage of mod_headers is more flexibility that what could be comfortably added to the proxy module itself as well... This comes up maybe once or twice a year... I think I'll add it to my standard Apache 2.2

Re: Adding stickysession cookie on the proxy

2008-03-06 Thread Jim Jagielski
On Mar 6, 2008, at 3:10 PM, Joshua Slive wrote: On Thu, Mar 6, 2008 at 3:05 PM, Jim Jagielski [EMAIL PROTECTED] wrote: The advantage of mod_headers is more flexibility that what could be comfortably added to the proxy module itself as well... This comes up maybe once or twice a year... I

Re: Adding stickysession cookie on the proxy

2008-03-06 Thread Dirk-Willem van Gulik
On Mar 6, 2008, at 9:05 PM, Jim Jagielski wrote: On Mar 6, 2008, at 12:45 PM, Jani M. wrote: Ruediger Pluem wrote: You can already do this with mod_headers. Just add Header add Set-Cookie MYCOOKIE=SOMEVALUE.% {BALANCER_WORKER_ROUTE}e; path=/; env=BALANCER_ROUTE_CHANGED Ah. Don't know

Re: [PATCH] ap_socache.h mod_socache_*

2008-03-06 Thread Chris Darroch
Hi -- This looks great! Some semi-random thoughts, dealing just with the main header file. I was a little puzzled by the name socache because I assumed so meant shared object, like mod_so, until I read the code comments. I wondered if it was true that people would only use this kind of

Re: [PATCH] ap_socache.h mod_socache_*

2008-03-06 Thread Vincent Bray
On 06/03/2008, Chris Darroch [EMAIL PROTECTED] wrote: I was a little puzzled by the name socache because I assumed so meant shared object, like mod_so, until I read the code comments. I wondered if it was true that people would only use this kind of interface to store small objects -- I