Hacking in an SLA for proxied requests in mod_proxy_http

2009-07-14 Thread Neal Richter
Hey all, I wanted to enforce an SLA on certain http requests to apache. Essentially provide a the external client users an guarantee that a valid response will be given within XXms and all errors are suppressed. This is for an ReST API that returns JSON or XML data. Ronald Park attempted to do s

Re: Module that forward requests

2009-07-14 Thread ricardo13
Hi Eric. NOOWWW I understood !!! But happen a error !! I posted this error. Help me Thank you Ricardo Eric Covener wrote: > > On Mon, Jul 13, 2009 at 10:06 AM, ricardo13 > wrote: It's difficult. I'd suggest finding a way to use existing modules. >>> >>> Use or modify, that is. >>> Ca

[warn] worker http://ip_maquina/ already used by another worker

2009-07-14 Thread ricardo13
Hi, I have a webcluster and I'm prioritize the requests. I modify request_rec adding a field called prior and conditional test ( IF() ) in mod_rewrite for classify. All time that start APACHE show the follow: # sudo apachectl -k start [warn] worker http://ip_maquina/ already used by another wor

Re: mod_deflate DoS using HEAD

2009-07-14 Thread William A. Rowe, Jr.
Roy T. Fielding wrote: > On Jul 14, 2009, at 10:02 AM, Nick Kew wrote: >> That, on the other hand, stands. In the case of an HTTP/1.0 >> request, we'd be closing the connection to signal end-of-response. > > Not on a HEAD request. But on the GET request with the deflate filter installed, we woul

Re: mod_deflate DoS using HEAD

2009-07-14 Thread Roy T. Fielding
On Jul 14, 2009, at 10:02 AM, Nick Kew wrote: That, on the other hand, stands. In the case of an HTTP/1.0 request, we'd be closing the connection to signal end-of-response. Not on a HEAD request. Roy

Re: mod_deflate DoS using HEAD

2009-07-14 Thread Nick Kew
Nick Kew wrote: The content-length could've been set anyway - the simplest case being a static file that's been "stat"ed. Have we definitely unset it? D'oh. Of course we have. Is this really an optimization? Sounds like correctness :) And do we want to also validate that Accept-Encoding

Re: mod_deflate DoS using HEAD

2009-07-14 Thread Nick Kew
William A. Rowe, Jr. wrote: Plüm, Rüdiger, VF-Group wrote: +/* + * Optimization: If we are a HEAD request and bytes_sent is not zero + * it means that we have passed the content-length filter once and + * have more data to sent. This means that the content-lengt

Re: FTP open questions

2009-07-14 Thread Jim Jagielski
On Jul 13, 2009, at 8:28 PM, William A. Rowe, Jr. wrote: Just finished the last showstopper. I would be happy to advance this to release / general availability vote with the next release, if we can determine just a few oddball issue resolutions. Jim and I have already gone ahead and moved

Re: Apache delivers PHP source code for vim backup files

2009-07-14 Thread Eric Covener
On Tue, Jul 14, 2009 at 11:54 AM, Jens Winter wrote: > Hi, > > I wonder which rules are used to decide if a file is processed by PHP. For > example x.php, x.php.bak and x.php.x~ are all processed, but x.php~ is not > (at least by default). This could be an issue if you use vim or similar > editors

Re: mod_deflate DoS using HEAD

2009-07-14 Thread William A. Rowe, Jr.
Plüm, Rüdiger, VF-Group wrote: > > +/* > + * Optimization: If we are a HEAD request and bytes_sent is not zero > + * it means that we have passed the content-length filter once and > + * have more data to sent. This means that the content-length filter > +

RE: mod_deflate DoS using HEAD

2009-07-14 Thread Plüm, Rüdiger, VF-Group
> -Original Message- > From: William A. Rowe, Jr. > Sent: Montag, 13. Juli 2009 23:58 > To: dev@httpd.apache.org > Subject: Re: mod_deflate DoS using HEAD > > Nick Kew wrote: > > Eric Covener wrote: > > > >> /* For a 304 response, only change the headers */ > >> -if (

Apache delivers PHP source code for vim backup files

2009-07-14 Thread Jens Winter
Hi, I wonder which rules are used to decide if a file is processed by PHP. For example x.php, x.php.bak and x.php.x~ are all processed, but x.php~ is not (at least by default). This could be an issue if you use vim or similar editors to edit the config files of e.g. WordPress or MediaWiki (co

Re: FTP open questions

2009-07-14 Thread Sander Temme
On Jul 14, 2009, at 8:02 AM, Jorge Schrauwen wrote: On Tue, Jul 14, 2009 at 2:28 AM, William A. Rowe, Should we advertise the commands we have not implemented, or remove them? Yes, It's always useful to know for a more advance user. +1 on keeping them. Should we alert the user to the Se

Re: FTP open questions

2009-07-14 Thread Jorge Schrauwen
On Tue, Jul 14, 2009 at 2:28 AM, William A. Rowe, Jr. wrote: > Just finished the last showstopper.  I would be happy to advance this > to release / general availability vote with the next release, if we can > determine just a few oddball issue resolutions.  Jim and I have already > gone ahead and m

Re: AuthBasicProvider failover and mod_authnz_ldap

2009-07-14 Thread Graham Leggett
Plüm, Rüdiger, VF-Group wrote: > Haven't thought this through but from a first glance it makes sense that > the next provider can continue if the first one had a fatal error. +1. Regards, Graham -- smime.p7s Description: S/MIME Cryptographic Signature

RE: AuthBasicProvider failover and mod_authnz_ldap

2009-07-14 Thread Plüm, Rüdiger, VF-Group
> -Original Message- > From: Eric Covener > Sent: Montag, 13. Juli 2009 23:31 > To: dev@httpd.apache.org > Subject: AuthBasicProvider failover and mod_authnz_ldap > > PR#47521 points out that when mod_authnz_ldap has some fatal LDAP > connectivity error, it doesn't allow other AuthBas