Re: [users@httpd] Cannot authenticate (after six years)

Using Chrome? Open a new tab and enter chrome://policy If the policy BasicAuthOverHttpEnabled is set to false that would be an explanation. Am 20. Juli 2023 15:28:12 MESZ schrieb Eric Covener : >On Thu, Jul 20, 2023 at 9:08 AM Andrew Hoff > wrote: >> >> Hello, >> >> Strange problem.

Re: [users@httpd] Re: Apache2 certificate authentication

I'm not sure if this command for signing the client certificate is correct as I don't see your corresponding openssl config and if it sets the correct keyUsage and extensions: sign client CSR openssl x509 -req -days 365 -in client.csr -CA ca.crt -CAkey ca.key -CAcreateserial -out client.crt

Re: [users@httpd] Could use some advice on what I'm doing wrong with securing Apache server

That "Require all granted" effectively provides access regardless of authentication. Try removing this line, so only Require ldap-group applies. Am 1. Mai 2023 21:57:43 MESZ schrieb Kent Wick : >Environment: SLES 15 SP4, fully patched, uses SSSD to successfully logon to >the host as an

Re: [users@httpd] Best way to Install

You can just install from the default package repositories on Rocky Linux. The distro follows the same update policy that CentOS had, meaning that software versions will never change unless you upgrade the OS version itself. The maintainers only integrate security fixes and they do so by

Re: [users@httpd] Product Bug h5bp/tls/certificate_files.conf

What is the output of running journalctl -xeu apache2.service? If you included the file from the repository unchanged the files mentioned there probably do not exist on your machine and they shouldn't. The configurations from the h5bp/server-configs-apache repository are not all plug and play,

Re: [users@httpd] Re: style.css not updating

The way you describe this your style.css is cached by the browser. You can verify this by opening the developer tools in the browser, then load the page and check the details in the Network tab. If that is indeed the case, "the world" will be able to see your changes exactly once and then stick

Re: [users@httpd] Proxy both HTTP, and WebSocket traffic to UNIX socket

Nice, thank you for sharing the final result :) Am 5. Januar 2023 00:08:07 MEZ schrieb Jan Kohnert : >Am Mittwoch, 28. Dezember 2022, 11:53:58 CET schrieb Jan Kohnert: >> The config reads as: >> >> --- >> RequestHeader add

Re: [users@httpd] Proxy both HTTP, and WebSocket traffic to UNIX socket

the same page before investigating further ideas. Am 27. Dezember 2022 21:39:30 MEZ schrieb Jan Kohnert : >Am Dienstag, 27. Dezember 2022, 20:32:28 CET schrieb Florian Schwalm: >> As far as I understand Gitlab sends a HTTP GET request first to ask the >> backend to upgrade to

Re: [users@httpd] Proxy both HTTP, and WebSocket traffic to UNIX socket

domain sockets and websockets you may also want to consider this workaround, it's unclear to me if that bug has already been fixed: https://bz.apache.org/bugzilla/show_bug.cgi?id=65958 Am 27. Dezember 2022 19:38:11 MEZ schrieb Jan Kohnert : >Hi, > >Am Sonntag, 25. Dezember 2022, 10:5

Re: [users@httpd] Proxy both HTTP, and WebSocket traffic to UNIX socket

Specifying ws instead of http in the RewriteRule should be good. > If you are using a DSO version of mod_proxy, make sure the proxy submodules are included in the configuration using LoadModule. Did you explicitly load the mod_proxy_wstunnel module as is mentioned in the error message? The

[users@httpd] Aw: Re: [users@httpd] Apache Reverse Proxy for more than one website.

No, you can only have one virtual host per port.Either you make the second server accessible on a different port or you separate them by server name (namebased virtual hosts) or path... Either way you'd need to decide how you want to distinguish from the user's point of view which server the

[users@httpd] Aw: Re: [users@httpd] Apache in under attack. [EXT]

It can be done with iptables or take a look at fail2ban:https://security.stackexchange.com/q/35773/213194Am 12.01.21, 10:26 schrieb Jason Long : Thank you, but "Firewalld" or "iptables" can't do it automatically? When an IP sending many request then it automatically blocked.