Apache mit OpenLDAP/OpenSSL, cert7.db in ca.cert ( BASE64_FILE) umwandeln, Verbindung zu LDAPS nicht möglich

2006-11-28 Thread Vogel, Thomas (BOT)
Hallo Habe dieses Problem: [Tue Nov 28 16:27:23 2006] [crit] LDAP: Invalid LDAPTrustedCAType directive - BASE64_FILE type required [Tue Nov 28 16:27:23 2006] [warn] LDAP: SSL initialization failed Das mit Openldap gebaute mod_ldap kann nur mit ca.cert (BASE64 codiert) umgehen. Wer weis wie

Re: Apache mit OpenLDAP/ OpenSSL, cert7.db in ca.cert (BASE64_FILE) um wandeln, Verbindung zu LDAPS nicht möglich

2006-11-28 Thread Rainer Sokoll
On Tue, Nov 28, 2006 at 04:48:19PM +0100, Vogel, Thomas (BOT) wrote: Wer weis wie man man das cert7.db (Netscape) und ein BASE64 codiertes Zertifikat umwandeln kann. openssl x509 -inform DER -outform PEM Rainer --

[EMAIL PROTECTED] Virtual Hosts and SSL

2006-11-28 Thread Steve Swift
Where should I go to learn about configuring Virtual Hosts and SSL in the same apache? I have virtual hosts woking using NameVirtualHost *:80 SSL works for the Virtual Hosts *I* have defined But in the (default) ssl.conf file installed with apache I find: VirtualHost _default_:443 SSLEngine on

Re: [EMAIL PROTECTED] Virtual Hosts and SSL

2006-11-28 Thread Frode E. Moe
On Tue, Nov 28, 2006 at 09:09:20 +, Steve Swift wrote: Where should I go to learn about configuring Virtual Hosts and SSL in the same apache? I have virtual hosts woking using NameVirtualHost *:80 SSL works for the Virtual Hosts *I* have defined But in the (default) ssl.conf file

Re: [EMAIL PROTECTED] Virtual Hosts and SSL

2006-11-28 Thread Steve Swift
Thank you for that answer. I'm just beginning to use SSL, and at the moment I'm using the self-signed certificate that was installed for my server during the original apache installation. For my testing I'll need to generate additional certificates/Sever keys for the Virtual Hosts I define in

RE: [EMAIL PROTECTED] Apache accessible only from localhost on Windows XP

2006-11-28 Thread Boyle Owen
-Original Message- From: Lorenzo Marcon [mailto:[EMAIL PROTECTED] Sent: Monday, November 27, 2006 5:16 PM To: users@httpd.apache.org Subject: Re: [EMAIL PROTECTED] Apache accessible only from localhost on Windows XP ... A FW problem wouldn't also explain why rebooting the machine

RE: [EMAIL PROTECTED] Failed downloads: Could not get next bucket brigade

2006-11-28 Thread Boyle Owen
-Original Message- From: Todd Hivnor [mailto:[EMAIL PROTECTED] Sent: Monday, November 27, 2006 11:10 PM To: users@httpd.apache.org Subject: [EMAIL PROTECTED] Failed downloads: Could not get next bucket brigade I've got one user who always seems to have problems downloading

Re: [EMAIL PROTECTED] Apache accessible only from localhost on Windows XP

2006-11-28 Thread Lorenzo Marcon
This is new information (not in original post) - Are you saying that after a reboot, you get a single response with the first hit but after that a timeout? Precisely. I'm experiencing this behaviour not only with Apache. It seems that if I run a generic sever program listening for incoming

[EMAIL PROTECTED] Where are Apache start|stop logs?

2006-11-28 Thread thomas Armstrong
Hi. Using Apache 2.0 on Linux, it doesn't start, and I'd like to find the start|stop logs. I want to browse start logs, not access logs. Apache is installed at '/usr/local/httpd' Thank you very much. - The official

Re: [EMAIL PROTECTED] Apache accessible only from localhost on Windows XP

2006-11-28 Thread Lorenzo Marcon
I made a traffic capture on the machine running Apache. You can find it at: http://losko.altervista.org/capture/capture.html Server ip is: 41.10.215.60. Client ip is: 41.10.215.58 Packets from 3rd to 15th show that the first request is correctly accepted and served. Packets from 16th and on

RE: [EMAIL PROTECTED] Where are Apache start|stop logs?

2006-11-28 Thread Boyle Owen
-Original Message- From: thomas Armstrong [mailto:[EMAIL PROTECTED] Sent: Tuesday, November 28, 2006 1:51 PM To: users@httpd.apache.org Subject: [EMAIL PROTECTED] Where are Apache start|stop logs? Hi. Using Apache 2.0 on Linux, it doesn't start, and I'd like to find the

Re: [EMAIL PROTECTED] Where are Apache start|stop logs?

2006-11-28 Thread thomas Armstrong
Thanks. 2 min and 2 seconds! O_O On 11/28/06, Boyle Owen [EMAIL PROTECTED] wrote: -Original Message- From: thomas Armstrong [mailto:[EMAIL PROTECTED] Sent: Tuesday, November 28, 2006 1:51 PM To: users@httpd.apache.org Subject: [EMAIL PROTECTED] Where are Apache start|stop logs?

Re: [EMAIL PROTECTED] Virtual Hosts and SSL

2006-11-28 Thread Joshua Slive
On 11/28/06, Steve Swift [EMAIL PROTECTED] wrote: What puzzles me is this: The VirtualHost definition above seems to be working as SSL is finding the Certificate File (otherwise how would SSL work at all?) How is this VirtualHost definition working in conjunction with NameVirtualHost *:80 ?

Re: [EMAIL PROTECTED] Virtual Hosts and SSL

2006-11-28 Thread Robert Fox
You only need a separate IP for every virtual host if you are not using a wildcard certificate. Wildcard certs cost a little more, but they are good for all hosts within a particular domain. Then, you can run all of your vhosts on port 443 with the same IP, and the cert will work for all of the

[EMAIL PROTECTED] Figuring Out Previously-Used Compile Options?

2006-11-28 Thread David P. Donahue
I have a system running Apache 2.2.0 that wasn't set up by me, and there seems to be no documentation regarding how Apache was installed on the system from the previous admin. Can anyone think of any possible way, based on the running installation on the machine (or based on the makefile

[EMAIL PROTECTED] apache 2.2.3 and weblogic

2006-11-28 Thread arun kumar
i heard weblogic does now support apache 2.2.3..is there is any to integrate apache 2.2.3 with weblogic other than weblogic plugin and if possible then how to do load balancing Regards, Arun __ Yahoo! India Answers: Share

Re: [EMAIL PROTECTED] Figuring Out Previously-Used Compile Options?

2006-11-28 Thread Craig Dunigan
'head config.log' in the source directory On Tue, 28 Nov 2006, David P. Donahue wrote: I have a system running Apache 2.2.0 that wasn't set up by me, and there seems to be no documentation regarding how Apache was installed on the system from the previous admin. Can anyone think of any

[EMAIL PROTECTED] Using HttpClient with Web Start - Security Error or Source not found Error ?

2006-11-28 Thread alan aherne
Hi All, I am trying to run a client application over webstart, where the application uses HttpClient to get data from the server where it was downloaded. But the access attempt results in the following errors below. Note: HttpClient2 is my main class. The jar file run's locally. Only fails when

Re: [EMAIL PROTECTED] Figuring Out Previously-Used Compile Options?

2006-11-28 Thread David P. Donahue
'head config.log' in the source directory Interesting. If that line I'm seeing is what I think it is, then it was just ./configure with no parameters. The same seems true of the MySQL compilation as well. I would have thought there'd be something passed, but maybe it was just default

Re: [EMAIL PROTECTED] Virtual Hosts and SSL

2006-11-28 Thread Robert Fox
You only need a separate IP for every virtual host if you are not using a wildcard certificate. Wildcard certs cost a little more, but they are good for all hosts within a particular domain. Then, you can run all of your vhosts on port 443 with the same IP, and the cert will work for all of the

[EMAIL PROTECTED] Apache, mod_jk, client certificates, and Jetty

2006-11-28 Thread Lucuk, Pete
I am trying to perform the following... Browser_client_with_client_certificate--https--apache_with_mod_jk--ht tps--Jetty Also, the browser client is passing a client certificate that I want Jetty to have access to perform AA. Browser version = IE 6 Apache version = 2.2.3 Mod_jk version =

Re: [EMAIL PROTECTED] Apache, mod_jk, client certificates, and Jetty

2006-11-28 Thread Serge Dubrouski
On 11/28/06, Lucuk, Pete [EMAIL PROTECTED] wrote: I am trying to perform the following... Browser_client_with_client_certificate--https--apache_with_mod_jk--ht tps--Jetty Also, the browser client is passing a client certificate that I want Jetty to have access to perform AA. Browser version

RE: [EMAIL PROTECTED] Apache, mod_jk, client certificates, and Jetty

2006-11-28 Thread Lucuk, Pete
I did uncomment that earlier this morning... SSLOptions +StdEnvVars +ExportCertData And it blew up Jetty, nice huh? Could the way I have my ordering things in httpd.conf and httpd-ssl.conf be throwing something off? Where the httpd-ssl.conf comes first in the httpd.conf, before the

Re: [EMAIL PROTECTED] Apache, mod_jk, client certificates, and Jetty

2006-11-28 Thread Serge Dubrouski
On 11/28/06, Lucuk, Pete [EMAIL PROTECTED] wrote: I did uncomment that earlier this morning... SSLOptions +StdEnvVars +ExportCertData And it blew up Jetty, nice huh? Not nice at all :-) But without that Apache wont put cert data to env and mod_jk won't see it. What is Jetty? And what

RE: [EMAIL PROTECTED] Apache, mod_jk, client certificates, and Jetty

2006-11-28 Thread Lucuk, Pete
-Original Message- From: Serge Dubrouski [mailto:[EMAIL PROTECTED] Sent: Tuesday, November 28, 2006 11:18 AM To: users@httpd.apache.org Subject: Re: [EMAIL PROTECTED] Apache, mod_jk, client certificates, and Jetty On 11/28/06, Lucuk, Pete [EMAIL PROTECTED] wrote: I did uncomment

[EMAIL PROTECTED] spawned processes using new config files.

2006-11-28 Thread Foster, Stephen \(ASPIRE\)
Hi all, I have situation where i have Apache 2.0.55 configured using the worker process model and this is running using a particular configuration file. Prior to an outage i want to deliver a new config file to the server in readiness for a server restart during my outage window. my question

Re: [EMAIL PROTECTED] Figuring Out Previously-Used Compile Options?

2006-11-28 Thread Joshua Slive
On 11/28/06, David P. Donahue [EMAIL PROTECTED] wrote: I have a system running Apache 2.2.0 that wasn't set up by me, and there seems to be no documentation regarding how Apache was installed on the system from the previous admin. Can anyone think of any possible way, based on the running

[EMAIL PROTECTED] Re: Help with mod_proxy

2006-11-28 Thread paul
Todd Nine schrieb: I have another question on the efficiency side. I'd like to use domain name for ease of configuration, however I know it is less efficient than using IP. Is it less efficient for the first proxy request (IE does apache cache the IP after the first lookup?), or does it

Re: [EMAIL PROTECTED] spawned processes using new config files.

2006-11-28 Thread Joshua Slive
On 11/28/06, Foster, Stephen (ASPIRE) [EMAIL PROTECTED] wrote: Hi all, I have situation where i have Apache 2.0.55 configured using the worker process model and this is running using a particular configuration file. Prior to an outage i want to deliver a new config file to the server in

Re: [EMAIL PROTECTED] Apache, mod_jk, client certificates, and Jetty

2006-11-28 Thread Serge Dubrouski
On 11/28/06, Lucuk, Pete [EMAIL PROTECTED] wrote: -Original Message- From: Serge Dubrouski [mailto:[EMAIL PROTECTED] Sent: Tuesday, November 28, 2006 11:18 AM To: users@httpd.apache.org Subject: Re: [EMAIL PROTECTED] Apache, mod_jk, client certificates, and Jetty On 11/28/06, Lucuk,

[EMAIL PROTECTED] mod_isapi 500 errors

2006-11-28 Thread Nathan Kellogg
Does anyone have a compiled mod_isapi.so that will work with the Devside 1.91 build? I do not have the development tools or skills to compile the fixed module and we're really stuck without a fix for the 500 error problem. -

RE: [EMAIL PROTECTED] Apache, mod_jk, client certificates, and Jetty

2006-11-28 Thread Lucuk, Pete
Jetty = http://www.mortbay.org/ Just for my curiosity: why do you need 3 Web servers: Apache - JBoss - Jetty ? What Jetty does that JBoss can't do? Jetty is the HTTP servlet engine for Jboss. Just like Tomcat is the HTTP servelet engine for Jboss 4.x Without Jetty, or Tomcat for that matter,

Re: [EMAIL PROTECTED] Figuring Out Previously-Used Compile Options?

2006-11-28 Thread Frode E. Moe
On Tue, Nov 28, 2006 at 10:19:32 -0500, David P. Donahue wrote: 'head config.log' in the source directory Interesting. If that line I'm seeing is what I think it is, then it was just ./configure with no parameters. The same seems true of the MySQL compilation as well. I would have

Re: [EMAIL PROTECTED] Apache, mod_jk, client certificates, and Jetty

2006-11-28 Thread Serge Dubrouski
On 11/28/06, Lucuk, Pete [EMAIL PROTECTED] wrote: Jetty = http://www.mortbay.org/ Just for my curiosity: why do you need 3 Web servers: Apache - JBoss - Jetty ? What Jetty does that JBoss can't do? Jetty is the HTTP servlet engine for Jboss. Just like Tomcat is the HTTP servelet engine for

RE: [EMAIL PROTECTED] Apache, mod_jk, client certificates, and Jetty

2006-11-28 Thread Lucuk, Pete
-Original Message- From: Serge Dubrouski [mailto:[EMAIL PROTECTED] Sent: Tuesday, November 28, 2006 12:08 PM To: users@httpd.apache.org Subject: Re: [EMAIL PROTECTED] Apache, mod_jk, client certificates, and Jetty On 11/28/06, Lucuk, Pete [EMAIL PROTECTED] wrote: Jetty =

RE: [EMAIL PROTECTED] Failed downloads: Could not get next bucket brigade

2006-11-28 Thread Todd Hivnor
I've got one user who always seems to have problems downloading files from my Apache server. She reports that the download process hangs, often with 1% of the file remaining to download. The server logs have this error: (104)Connection reset by peer: Could not get next bucket

RE: [EMAIL PROTECTED] Limiting COPY method for WebDAV to one direction

2006-11-28 Thread Todd Hivnor
Updating the permissions on the file system will work for folders which are strictly read-only. But in a lot of cases, I want the folder to be readable by group X and writable by group Y. Mark Lavi [EMAIL PROTECTED] wrote:v\:* {behavior:url(#default#VML);} o\:*

[EMAIL PROTECTED] apache client authentication problem (somewhat long)

2006-11-28 Thread Bill Tangren
I posted this on the Redhat Enterprise Linux 4 (Nahant) list, but I didn't get sufficient help to solve my problem, so I'm trying here. I apologize in advance if any of you have seen this before. I am having a problem with client authentication with apache and openssl. I have been ordered

Re: [EMAIL PROTECTED] apache client authentication problem (somewhat long)

2006-11-28 Thread Serge Dubrouski
Your client submits certificate signed by CA which certificate you don't have in your SSLCACertificatePath. Actually it looks like you incorrectly configured it. You have: SSLCACertificateFile /etc/httpd/conf/ssl.crt/root.crt SSLCACertificatePath /etc/httpd/conf/ssl.crt You should use just one

RE: [EMAIL PROTECTED] Apache, mod_jk, client certificates, and Jetty

2006-11-28 Thread Lucuk, Pete
GOT IT TO WORK!!! The old Jetty 4.2.9 server was blowing up when I sent the... ForwardKeySize In httpd.conf... JkOptions +ForwardKeySize +ForwardURICompat ForwardKeySize was not getting parsed in Jetty and was crapping out Jetty when sent to it. SO, I did this in the

Re: [EMAIL PROTECTED] Apache, mod_jk, client certificates, and Jetty

2006-11-28 Thread Serge Dubrouski
Congratulations! See down there... On 11/28/06, Lucuk, Pete [EMAIL PROTECTED] wrote: GOT IT TO WORK!!! The old Jetty 4.2.9 server was blowing up when I sent the... ForwardKeySize In httpd.conf... JkOptions +ForwardKeySize +ForwardURICompat ForwardKeySize was not getting

[EMAIL PROTECTED] apche ajp error

2006-11-28 Thread Ramesh Patel
hello all, I have apache 2.2.2 and tomcat 5.5.17 installed on my FC5 box. This past week our jsp application has been freezing many times giving the following error message in the apache log file [Tue Nov 28 12:36:56 2006] [error] ajp_read_header: ajp_ilink_receive failed [Tue Nov 28

Re: [EMAIL PROTECTED] Figuring Out Previously-Used Compile Options?

2006-11-28 Thread Scott Wilcox
With PHP, you can do a ? phpinfo(); ? and it'll give you the configure line used. Scott. David P. Donahue wrote: 'head config.log' in the source directory Interesting. If that line I'm seeing is what I think it is, then it was just ./configure with no parameters. The same seems true of

RE: [EMAIL PROTECTED] Limiting COPY method for WebDAV to one direction

2006-11-28 Thread Mark Lavi
Ah, you've changed the scope of your question. :-) So long as you leverage an Apache authorization module with user and group permissions, I would think you could control permissions on who can do what per directory easily, but for this solution, you would not give both groups WebDAV access.

Re: [EMAIL PROTECTED] apache client authentication problem (somewhat long)

2006-11-28 Thread Bill Tangren
Serge Dubrouski wrote: Your client submits certificate signed by CA which certificate you don't have in your SSLCACertificatePath. Actually it looks like you incorrectly configured it. You have: SSLCACertificateFile /etc/httpd/conf/ssl.crt/root.crt SSLCACertificatePath /etc/httpd/conf/ssl.crt

[EMAIL PROTECTED] Apache 2.2.3 and SUDO

2006-11-28 Thread Dave Templeton
Is there any way to complie httpd statically. The rteason is I need to use SUDO and that wipes the LD_LIBRARY_PATH variable so apache cannot find its shared object libraries.

Re: [EMAIL PROTECTED] apache client authentication problem (somewhat long)

2006-11-28 Thread Serge Dubrouski
So you have a bunch of .cer files. Then you have to use SSLCACertificatePath and links with hashes as names. It can't be just one file with once certificate unless all your client have certificates signed by one CA. On 11/28/06, Bill Tangren [EMAIL PROTECTED] wrote: Serge Dubrouski wrote: Your

Re: [EMAIL PROTECTED] apache client authentication problem (somewhat long)

2006-11-28 Thread Serge Dubrouski
On 11/28/06, Bill Tangren [EMAIL PROTECTED] wrote: Serge Dubrouski wrote: Your client submits certificate signed by CA which certificate you don't have in your SSLCACertificatePath. Actually it looks like you incorrectly configured it. You have: SSLCACertificateFile

Re: [EMAIL PROTECTED] Apache 2.2.3 and SUDO

2006-11-28 Thread Yvo van Doorn
You can just edit the apachectl script and add this: LD_LIBRARY_PATH=/path/to/libraries export LD_LIBRARY_PATH or You can edit /etc/profile and add those two lines. Not sure how compiling apache statically would help (maybe someone else can enlighten me). On 11/28/06, Dave Templeton [EMAIL

Re: [EMAIL PROTECTED] Failed downloads: Could not get next bucket brigade

2006-11-28 Thread Yvo van Doorn
Do you have mod_dav enabled? Does upgrading to 2.0.59 fix the issue? I had issues with DAV and Sendfile. If its a sendfile() capable OS, have you tried putting EnabledSendfile Off in your configuration? On 11/28/06, Morgan Gangwere [EMAIL PROTECTED] wrote: try getting the file from a

[EMAIL PROTECTED] Virtual Hosting / FTP Access / Perl - cgi scripting

2006-11-28 Thread Mark Feather
I am currently running a single website on my own Linux Box for my ownsmall business and wish to Host a website for a Canoe Club that I am a member of. Virtual Hosting is very new to me and I don't want too much downtime for my current website whilst setting this up. I would be grateful if

Re: [EMAIL PROTECTED] Virtual Hosting / FTP Access / Perl - cgi scripting

2006-11-28 Thread Bill Angus
Its pretty well all in the docs Mark. You can run each site in its own virtual host (your own site, plus the others). If you have a single dedicated IP address (the most common situation), you use name-based virtual hosting. Apache gives you a lot of configuration options. Each virtual host

[EMAIL PROTECTED] Apache Error with mrtg-rrd

2006-11-28 Thread Patrick Topping
All, I am setting up mrgt-rrd under Apache for the first time. Actually, it is my first time with Apache..:-) I am getting the following error in the http logs: [Tue Nov 28 17:28:12 2006] [error] [client 68.5.102.101] client denied by server configuration: /var/www/mrtg/icons/mrtg-m.png,

Re: [EMAIL PROTECTED] Virtual Hosts and SSL

2006-11-28 Thread Steve Swift
Thanks for that, perhaps I'll get a change to use it some time. However, the server in question in this case is inside IBM, and the only common part of its servername across the virtualhosts is .ibm.com so I won't rush off to get a certificate for that! On 28/11/06, Robert Fox [EMAIL PROTECTED]

[EMAIL PROTECTED] memory comsumption in Apache

2006-11-28 Thread Xuekun Hu
hi, I'm trying to predict how many memory should be used with Apache2.2.3 (worker) + Linux2.6.x. This setup is only serving static content, and trying to serve 1 simultaneous users (about 1 connections,500 simultaneous requests at the same time). I have several questions below. 1. How