Mail Authentication

2004-04-16 Thread gnicholls
Protected message is attached. Attachment: No Virus found Norton AntiVirus - www.symantec.de

v4-mapped addresses and multiple sockets for 1 Listen directive

2004-04-16 Thread Jeff Trawick
apachectl -V says -D APR_HAVE_IPV6 (IPv4-mapped addresses enabled) but Apache gets an IPv4 and an IPv6 listening socket for one Listen directive (hopefully v4mapped socket option sucessfully turned OFF now ;) ) -V inconsistent with behavior I guess the --enable-v4-mapped config option is now

Re: [PATCH] Candidate 1: Re: 1.3.3x digest/nonce issue

2004-04-16 Thread Jim Jagielski
I'm suggesting changing the static string WHAT_THE_HECK_GOES_HERE? in ap_auth_nonce() to ap_get_server_name()... comments?

Re: [PATCH] Candidate 1: Re: 1.3.3x digest/nonce issue

2004-04-16 Thread Jeff Trawick
Jim Jagielski wrote: I'm suggesting changing the static string WHAT_THE_HECK_GOES_HERE? in ap_auth_nonce() to ap_get_server_name()... comments? see my prior comment on that section of code ;) Dirk's later patch got rid of extra %s in the format string, so zap the last %s as well as my lame

Re: [PATCH] Candidate 1: Re: 1.3.3x digest/nonce issue

2004-04-16 Thread Jim Jagielski
Jeff Trawick wrote: see my prior comment on that section of code ;) Dirk's later patch got rid of extra %s in the format string, so zap the last %s as well as my lame WHAT_THE_HECK_GOES_HERE?. There was som discussion on making ServerName a semi-realm-based aspect of the nonce...

Re: [PATCH] Candidate 1: Re: 1.3.3x digest/nonce issue

2004-04-16 Thread Jim Jagielski
On Apr 16, 2004, at 9:39 AM, Jim Jagielski wrote: Jeff Trawick wrote: Anybody want to think about what happens if we're so unlucky that the ap_user_name or ap_pid_fname string with '\0' is smaller than sizeof(unsigned long) and just happens to be allocated at the end of a page? Unlikely, but

Fwd: Re: 1.3.29 remote root exploit? (fwd)

2004-04-16 Thread William A. Rowe, Jr.
FYI issue closed. At 08:11 AM 4/16/2004, felix k sheng wrote: William, Thanks so much for getting back to me. After sending that in, I had the great idea (ok... I'm slow... :) to turn the hex numbers into ascii and lo and behold it was just that perl script. I *thought* that that meant it

Local root exploits? [was: remote root exploit?]

2004-04-16 Thread William A. Rowe, Jr.
A general warning for all [EMAIL PROTECTED] and [EMAIL PROTECTED] subscribers; I run several sites using 1.3.29 and came across this page on the net: http://secu.zzu.edu.cn/modules.php?name=Newsfile=articlesid=413 I want to make clear (after misdirecting the last mail intended to close a

Re: Win32DisableAcceptex

2004-04-16 Thread Sami Tikka
It seems I have tracked down the problem plagueing my client. It seems it has absolutely nothing to do with AcceptEx(). AcceptEx() is reporting errors because the previous proxy is aborting idle connections that Apache has not replied to in 150 seconds. That is causing the specified network name

[RELEASE CANDIDATE 2] Apache-Test-1.10

2004-04-16 Thread Stas Bekman
A few problems were noticed and fixed, thanks to Ken Coar. So here is a new RC. Same URL: http://perl.apache.org/~stas/Apache-Test-1.10-dev.tar.gz Changes since RC1: Quote and escape the executables in the shell calls [Ken Coar, Stas] Quote and escape filtered args received during 'perl

[PATCH] mod_rewrite Content-Regeneration

2004-04-16 Thread John Rowe
First of all, thanks for all the effort that goes into apache. We switched from NCSA to apache1 longer ago than I like to remember.. The rewriting guide has a short section called On-the-fly Content-Regeneration but it's actually just Generation as there's no way for the server to know if the

Re: [RELEASE CANDIDATE 2] Apache-Test-1.10

2004-04-16 Thread David Wheeler
On Apr 16, 2004, at 2:05 PM, Stas Bekman wrote: A few problems were noticed and fixed, thanks to Ken Coar. So here is a new RC. Same URL: All tests still pass for me, including in my module. Regards, David -- Report problems: http://perl.apache.org/bugs/ Mail list info:

Re: qw() and embedded spaces in filname paths

2004-04-16 Thread Stas Bekman
For the archiving purposes: we have resolved the problems on irc and committed the right patches (not the ones posted here in this thread). __ Stas BekmanJAm_pH -- Just Another mod_perl Hacker http://stason.org/

[RELEASE CANDIDATE 2] Apache-Test-1.10

2004-04-16 Thread Stas Bekman
A few problems were noticed and fixed, thanks to Ken Coar. So here is a new RC. Same URL: http://perl.apache.org/~stas/Apache-Test-1.10-dev.tar.gz Changes since RC1: Quote and escape the executables in the shell calls [Ken Coar, Stas] Quote and escape filtered args received during 'perl

Re: [RELEASE CANDIDATE 2] Apache-Test-1.10

2004-04-16 Thread David Wheeler
On Apr 16, 2004, at 2:05 PM, Stas Bekman wrote: A few problems were noticed and fixed, thanks to Ken Coar. So here is a new RC. Same URL: All tests still pass for me, including in my module. Regards, David