[users@httpd] How to debug the certificate chain processing within Apache for an LDAPS connection?

2014-01-21 Thread Peter Donaghy
Dear Apache users, I am trying to debug an error in an Apache LDAPS connection, against Windows Active Directory: [authnz_ldap:info] [pid 14680270:tid 515] [client 172.24.12.217:52072] AH01695: auth_ldap authenticate: user pdonaghy authentication failed; URI /favicon.ico [LDAP:

Re: [users@httpd] How to debug the certificate chain processing within Apache for an LDAPS connection?

2014-01-21 Thread Yehuda Katz
Have you confirmed you can contact the LDAP server over LDAPS from any other system? I use Apache Directory Studio ( http://directory.apache.org/studio/ ) for this. You could also use Wireshark or a similar program to make sure the connection is actually going through. Sent from a gizmo with a

Re: [users@httpd] How to debug the certificate chain processing within Apache for an LDAPS connection?

2014-01-21 Thread Peter Donaghy
Thanks for your reply. Yes, we can contact the LDAP server from other systems, over LDAPS, so it does not look like a connectivity problem. Also, our network people took a look at the traffic over the LDAPS port and could see the data going back forth. Hence my thinking that the problem may be

[users@httpd] Apache Directory Level access control

2014-01-21 Thread James B. Byrne
CentOS-6.5-i86_64 httpd-2.2.15 (CentOS) I have a problem with configuring directory access using groups. We have a site with multiple sub-directories. We have several groups defined. We have the entire site protected at the root by digest authentication and some of the sub-directories protected

Re: [users@httpd] possible FAQ: are Windows binaries for httpd no longer released?

2014-01-21 Thread Jeff Trawick
On Tue, Jan 21, 2014 at 1:07 PM, Rich Bowen rbo...@rcbowen.com wrote: On 01/15/2014 08:29 PM, Claude Morin wrote: Please note that this is not a complaint. It's more a check of my sanity and a hope to be pointed in the right direction :-). I'm unable to find Windows binaries for 2.2.26;

[users@httpd] Security challenge, rejecting specific requests without blocking IP

2014-01-21 Thread Rudi Feijó
Hello I have been trying to solve a big problem for the last 2 weeks with one of our servers (apache 2.2 , windows, php). The client using our system is a contact center firm. They have about 120 operators, all connect to our websever with the same IP, their outgoing IP. We have been suffering

Re: [users@httpd] possible FAQ: are Windows binaries for httpd no longer released?

2014-01-21 Thread Rich Bowen
On 01/15/2014 08:29 PM, Claude Morin wrote: Please note that this is not a complaint. It's more a check of my sanity and a hope to be pointed in the right direction :-). I'm unable to find Windows binaries for 2.2.26; only 2.2.25 is available at apache.org http://apache.org and on all

Re: [users@httpd] mod_rewrite help, # in input url

2014-01-21 Thread Rich Bowen
On 01/17/2014 12:49 PM, Ayub Khan wrote: Could some one assist me with creating a rewrite rule in httpd 2.2.4? http://localhost:8080/share/page/repository#filter=path%7C%2FUser%25Homes%2F2ALFANUMERIC%2FALFANUMERIC%2FDYNAMICTEXT%7Cpage=1

RE: [users@httpd] Security challenge, rejecting specific requests without blocking IP

2014-01-21 Thread Jason Pyeron
-Original Message- From: Rudi Feijó [mailto:rudi.fe...@multidadosti.com.br] Sent: Tuesday, January 21, 2014 13:25 To: users@httpd.apache.org Subject: [users@httpd] Security challenge, rejecting specific requests without blocking IP Hello I have been trying to solve a big

Re: [users@httpd] Apache Directory Level access control

2014-01-21 Thread James B. Byrne
On Tue, January 21, 2014 12:39, James B. Byrne wrote: CentOS-6.5-i86_64 httpd-2.2.15 (CentOS) I have a problem with configuring directory access using groups. We have a site with multiple sub-directories. We have several groups defined. We have the entire site protected at the root by

Re: [users@httpd] Apache Directory Level access control

2014-01-21 Thread Pete Houston
On Tue, Jan 21, 2014 at 12:39:27PM -0500, James B. Byrne wrote: Directory /HLL_Operations Require group management staff /Directory Do you really have a directory at the very top level of your O/S filesystem called /HLL_Operations? It seems more likely that this will be in some

Re: [users@httpd] Apache Directory Level access control

2014-01-21 Thread James B. Byrne
On Tue, January 21, 2014 14:58, Pete Houston wrote: On Tue, Jan 21, 2014 at 12:39:27PM -0500, James B. Byrne wrote: Directory /HLL_Operations Require group management staff /Directory Do you really have a directory at the very top level of your O/S filesystem called

Re: [users@httpd] Apache Directory Level access control

2014-01-21 Thread Pete Houston
On Tue, Jan 21, 2014 at 03:17:35PM -0500, James B. Byrne wrote: On Tue, January 21, 2014 14:58, Pete Houston wrote: On Tue, Jan 21, 2014 at 12:39:27PM -0500, James B. Byrne wrote: Directory /HLL_Operations Require group management staff /Directory Do you really have a

Re: [users@httpd] mod_rewrite help, # in input url

2014-01-21 Thread Ayub Khan
Thank you for the reply. I want to match the text which is follows # and grab a substring from it. Not sure if its possible with mod_rewrite ? /share/page/repositry/path#filter=xyz%2C%2Fn3%2FUSER%20HOMES%2Fn3%2Fn3555page=1 From the above url, I nee to redirect to /share/page/MyFilespage=1

Re: [users@httpd] Apache Directory Level access control

2014-01-21 Thread James B. Byrne
On Tue, January 21, 2014 15:33, Pete Houston wrote: On Tue, Jan 21, 2014 at 03:17:35PM -0500, James B. Byrne wrote: . . . DocumentRoot /var/data/hll_dav/upload In that case your Directory section should be: Directory /var/data/hll_dav/upload/HLL_Operations Require group

Re: [users@httpd] mod_rewrite help, # in input url

2014-01-21 Thread Yehuda Katz
It is not possible. The string after the `#` is NEVER sent to the server (that is because of the way the browser works and there is nothing the server can do about it). The ONLY way to send it to the server would be to have some client-side scripting that captures and sends it as a real query

Re: [users@httpd] mod_rewrite help, # in input url

2014-01-21 Thread Eric Covener
On Tue, Jan 21, 2014 at 4:02 PM, Ayub Khan ayub...@gmail.com wrote: Thank you for the reply. I want to match the text which is follows # and grab a substring from it. Not sure if its possible with mod_rewrite ? Have a look at the access log. You'll notice that anything after the # isn't