Re: [VOTE] httpd-2.2.4 release candidate for review

2007-01-08 Thread William A. Rowe, Jr.
Tom Donovan wrote: > > I see that apr_os_sock_put() set remote_addr_unknown=1 in earlier APR > versions too. It's actually apr_os_sock_make() and although it set unknown=1 where there was no remote addr, it assumed unknown from alloc_socket() was 0. Try the attached patch please? Bill Index: ne

Re: [VOTE] httpd-2.2.4 release candidate for review

2007-01-08 Thread William A. Rowe, Jr.
Tom, speculating here without a 2000 box close - would you try to DisableWin32AcceptEx please? Perhaps the flaw actually resides in how AcceptEx and GetAcceptExSockaddrs, and how they interact with the socket? Bill Tom Donovan wrote: > I have had some difficulties running 2.2.4 RC on Windows 20

Re: [VOTE] [CORRECTIONS] httpd-2.2.4 release candidate for review

2007-01-08 Thread William A. Rowe, Jr.
Before I go any further, httpd-2.2.4-win32-src.zip is updated here at 6am UT and will take an hour to move across to the live site http://httpd.apache.org/dev/dist/ while the .tar files remain unchanged. Feedback to several issues inline... Sander Temme wrote on 01/07/07: > > The RC has bee

Re: [VOTE] httpd-2.2.4 release candidate for review

2007-01-08 Thread William A. Rowe, Jr.
Tom Donovan wrote: > > Perhaps it would be simpler to presume that remote_addr *is* always > known on Windows, and make sure all the Windows APR socket functions > live up to this rule. Simpler? Sure, if apr is only for httpd when AcceptEx() is in use :-/ Of course, that's not true, the impleme

help on gathering data from the response

2007-01-08 Thread Sai Jai Ganesh Gurubaran
Hi All, The requirement for us is to write a apache module that collects printable data from the response. For this, we have used the idea from mod_streamav code. The memory and CPU usage of the Apache has never crossed 40 MB per process and works fine. Recently we are getting Apache Outag

Re: [VOTE] httpd-2.2.4 release candidate for review

2007-01-08 Thread Nick Kew
On 6 Jan 2007, at 07:41, William A. Rowe, Jr. wrote: http://httpd.apache.org/dev/dist/ will soon (within the hour, upon resync) contain the following tarballs for approval httpd-2.2.4.tar.bz2 [.asc|.md5] httpd-2.2.4.tar.gz [.asc|.md5] httpd-2.2.4-win32-src.zip [.asc|.md5] +/-1 [ ] Releas

Re: Server Restarts

2007-01-08 Thread Nick Kew
On Mon, 8 Jan 2007 20:37:52 -0700 "David Wortham" <[EMAIL PROTECTED]> wrote: > Hi guys, > I know Nick or one of the other frequent responders mentioned > something about a double server-startup. Does anyone have (or know > of) documentation on this effect? The book discusses it rather briefly.

Server Restarts

2007-01-08 Thread David Wortham
Hi guys, I know Nick or one of the other frequent responders mentioned something about a double server-startup. Does anyone have (or know of) documentation on this effect? I believe I understand the relationships between the server process, the child processes and the cprocess threads. It seems

Re: [VOTE] httpd-2.2.4 release candidate for review

2007-01-08 Thread Tom Donovan
re: the Windows 2000 0.0.0.0 IP address problem A quick look through win32/sockets.c shows code to fill in remote_addr after accept() and connect(), as well as after acceptEx(). This led me to believe that "Windows has the peer name". Ditto for the win9x_*() functions in Apache server/mpm/win

Re: [VOTE] httpd-2.2.4 release candidate for review

2007-01-08 Thread Roy T. Fielding
+1, all sigs verified on Darwin Kernel Version 8.8.0 (10.4.8) powerpc powerpc-apple-darwin8-gcc-4.0.1 (GCC) 4.0.1 (Apple Computer, Inc. build 5367) All tests successful, 23 tests and 14 subtests skipped. Files=65, Tests=2078, 100 wallclock secs (48.33 cusr + 13.37 csys = 61.70 CPU) Roy

Re: Piped logger nightmares

2007-01-08 Thread Sander Temme
On Jan 8, 2007, at 5:06 PM, Sander Temme wrote: Can you confirm that 1.3 was busted on Windows too? Starting 1.3.37 from the shell (not as a Service): I'm starting to engage myself in quite the conversation. Started 2.2.3 from the command line. It does the same thing as the service: two c

Re: Piped logger nightmares

2007-01-08 Thread Sander Temme
On Jan 6, 2007, at 6:55 AM, Jeff Trawick wrote: Can you confirm that 1.3 was busted on Windows too? Starting 1.3.37 from the shell (not as a Service): Parent opens two cmd.exe + rotatelogs.exe with error.log argument, and one such combination with access.log argument. Child opens one co

Re: Piped logger nightmares

2007-01-08 Thread Sander Temme
On Jan 5, 2007, at 3:38 PM, William A. Rowe, Jr. wrote: is a complete disaster to Win32 as-a-service. It works fine from the command line, but the lack of stdout/stderr channels causes cmd.exe "in a service" appear to cause the CreateProcess of cmd.exe to implode. I am now playing around w

Re: [VOTE] httpd-2.2.4 release candidate for review

2007-01-08 Thread William A. Rowe, Jr.
Tom, thanks for the analysis and bug report - your trace follows mine but the getpeername was news to me. W.R.T. httpd you made the assumption "Windows has the peer name" - which is true with AcceptEx but won't be true in any other context. This is the exception not the rule. So a couple thought

Re: Piped logger nightmares

2007-01-08 Thread Sander Temme
On Jan 6, 2007, at 6:55 AM, Jeff Trawick wrote: Can you confirm that 1.3 was busted on Windows too? I just loaded up a 1.3.37 binary from archives.apache.org on a fresh new Win2k3 Server VMWare thingy. I set my error log and access log as follows: ErrorLog "| c:/PROGRA~1/APACHE~1/Apache

Re: [VOTE] httpd-2.2.4 release candidate for review

2007-01-08 Thread Tom Donovan
I have had some difficulties running 2.2.4 RC on Windows 2000. The remote IP is always seen as 0.0.0.0. Here are a few lines from my logs\access.log: 0.0.0.0 - - [07/Jan/2007:11:22:59 -0500] "GET /server-status HTTP/1.1" 403 215 0.0.0.0 - - [07/Jan/2007:11:23:36 -0500] "GET / HTTP/1.1" 200 20417

Re: [VOTE] httpd-2.2.4 release candidate for review

2007-01-08 Thread Brad Nicholes
>>> On 1/6/2007 at 12:41 AM, in message <[EMAIL PROTECTED]>, "William A. Rowe, Jr." <[EMAIL PROTECTED]> wrote: > http://httpd.apache.org/dev/dist/ will soon (within the hour, upon resync) > contain the following tarballs for approval > > httpd-2.2.4.tar.bz2 [.asc|.md5] > httpd-2.2.4.tar.gz [.asc|.

Re: mod_authn_dbd and apr_password_validate

2007-01-08 Thread Nick Kew
On Mon, 8 Jan 2007 16:08:51 + Patrick Welche <[EMAIL PROTECTED]> wrote: > so what sort of password does apr_password_validate accept? Those created with htpasswd is a simple answer. -- Nick Kew Application Development with Apache - the Apache Modules Book http://www.apachetutor.org/

Re: mod_authn_dbd and apr_password_validate

2007-01-08 Thread Ruediger Pluem
On 01/08/2007 05:08 PM, Patrick Welche wrote: > > > First an apology for posting to dev: I thought there was at least a > documentation issue, but no: > > AuthDBDUserPWQuery Directive > ... >SQL varchar) argument (username), and return a single value (encrypted >password).

Re: Customize lib path list (lib64 et al)?

2007-01-08 Thread William A. Rowe, Jr.
Joe Orton wrote: > On Sun, Jan 07, 2007 at 06:09:38PM -0600, William Rowe wrote: >> There is a very slick feature in perl, burried quite deeply, that >> might be useful for our users of ./configure (and apr's as well.) >> >> loclibpth/locincpth define the system search order > > They don't, though

Re: Need help with ErrorDocument

2007-01-08 Thread Nick Kew
On Mon, 8 Jan 2007 20:23:26 +0530 "Vedavyas Raichur" <[EMAIL PROTECTED]> wrote: > Hi All, > I am new to apache & facing the following problem: > > 1. A custom module that does client authentication on top of mod_ssl > returns a FORBIDDEN when user is not authenticated. That's probably n

Re: [VOTE] httpd-2.2.4 release candidate for review

2007-01-08 Thread Jeff Trawick
On 1/6/07, William A. Rowe, Jr. <[EMAIL PROTECTED]> wrote: [+1] Release httpd 2.2.4 tested with worker MPM on RedHat 4/ia32 and Solaris 10/SPARC32

Re: mod_authn_dbd and apr_password_validate

2007-01-08 Thread Patrick Welche
On Sat, Jan 06, 2007 at 02:59:47PM -0500, Brian J. France wrote: > That mod_authn_dbd is assuming your database password is not plain > text, but smashed (crypt, md5, sh1). I ran into the same issue and > created this: > > http://www.brianfrance.com/software/apache/mod_authn_dbd.c.diff > >

Need help with ErrorDocument

2007-01-08 Thread Vedavyas Raichur
Hi All, I am new to apache & facing the following problem: 1. A custom module that does client authentication on top of mod_ssl returns a FORBIDDEN when user is not authenticated. But when the server tries to fetch the custom ErrorDocument for this error it is FORBIDDEN again by same modu

Bug 35083 - SSL error trapping

2007-01-08 Thread Marc Stern - Approach
I patched mod_ssl to trap SSL errors related to certificate validation, allow the SSL connection anyway, then redirect to an error page. Although this works well, this is not implemented the best way, and I got some feedback on how to do it better. Before implementing it, I'd like to check some p

Re: [VOTE] httpd-2.2.4 release candidate for review

2007-01-08 Thread Jim Jagielski
On Jan 6, 2007, at 2:41 AM, William A. Rowe, Jr. wrote: http://httpd.apache.org/dev/dist/ will soon (within the hour, upon resync) contain the following tarballs for approval httpd-2.2.4.tar.bz2 [.asc|.md5] httpd-2.2.4.tar.gz [.asc|.md5] httpd-2.2.4-win32-src.zip [.asc|.md5] +/-1 [ ] Rel

segfault w/ APR_BUCKET_PREV...

2007-01-08 Thread Drew Bertola
Happy Monday, I'm getting a segfault whenever I try to read the next bucket. I'm trying to do this without losing the current bucket. If I do: b = APR_BUCKET_NEXT(b); apr_bucket_read(b, &str, &len, APR_NONBLOCK_READ); b = APR_BUCKET_PREV(b); I get a segfault. I'm not sure what the correct way

Re: Customize lib path list (lib64 et al)?

2007-01-08 Thread Joe Orton
On Sun, Jan 07, 2007 at 06:09:38PM -0600, William Rowe wrote: > There is a very slick feature in perl, burried quite deeply, that > might be useful for our users of ./configure (and apr's as well.) > > loclibpth/locincpth define the system search order They don't, though. The *toolchain* defines