Re: [users@httpd] Re: Is it possible to override ... ?

2021-10-21 Thread ohaya
in a specific context rather than /. If for any reason one is too lazy to care or still want to exclude some content from being proxied to the weblogic the weblogic plugin includes the directive: WLExcludePathOrMimeType You should play with it. Cheers El jue, 21 oct 2021 a las 8:03, ohaya () escribió

[users@httpd] Re: Is it possible to override ... ?

2021-10-21 Thread ohaya
ctory> But I still get the Forbidden error. If anyone knows how I cat avoid the Forbidden error (so I wouldn't need the ErrorDocument), please help? Thanks, Jim On Wednesday, October 20, 2021, 03:40:53 PM EDT, ohaya wrote: Hi, We are using Apache 2.4.48.  This Apache is primari

[users@httpd] Is it possible to override ... ?

2021-10-20 Thread ohaya
Hi, We are using Apache 2.4.48. This Apache is primarily acting as a proxy, and we use the WebLogic Plugin for Apache to connect from the Apache to a WebLogic server/backend. In the Apache ssl.conf, we have a , and in that , they have a : . . . WLSRequest On SetHandler

Re: [users@httpd] Browsers appear to be ignoring 401 responses with WWW-Authenticate

2021-10-04 Thread ohaya
1 response does have: access-control-allow-origin: * So perhaps that (because of the *) may be preventing the browser from popping up the login window? Thoughts? Jim On Sunday, October 3, 2021, 11:43:17 PM EDT, ohaya wrote: Hi,  To be honest basic authentication is not a prefere

Re: [users@httpd] Browsers appear to be ignoring 401 responses with WWW-Authenticate

2021-10-03 Thread ohaya
://developer.mozilla.org/en-US/docs/Web/API/fetch#parameters Standard modern behavior, AIUI, is to not do Basic Auth via JavaScript fetches unless it's the same site, but this can be modified. But I could be wrong :) On 04/10/2021 03.04, ohaya wrote: > Hi, > > We are hosting a page on o

[users@httpd] Browsers appear to be ignoring 401 responses with WWW-Authenticate

2021-10-03 Thread ohaya
Hi, We are hosting a page on one of our Apache (2.4.29). We use Oracle OAM webgate in this Apache to "protect" that page. When the webgate is installed into the Apache, they include a configuration file that has: AuthType Oblix require valid-user We have this page configured for BASIC

[users@httpd] Is it possible to remove request header from the request to a resource that is local to an Apache?

2021-09-18 Thread ohaya
Hi, I am doing some testing with Apache (2.4.29, which I just happen to have), testing some edge CORS-type scenarios. I have 2 machines. On the 1st machine, I have an HTML page that has javascript/XHR to the 2nd Apache (which has an FQDN with a different DNS root domain). I load the page

[users@httpd] Was there a final 2.3.x version of Apache?

2013-04-01 Thread ohaya
Hi, Per the subject, was there a final 2.3.x version of Apache? And, if so, where can I download the source? All I've been able to find on the archives are alpha and beta versions. Thanks, Jim - To unsubscribe, e-mail:

Re: [users@httpd] Was there a final 2.3.x version of Apache?

2013-04-01 Thread ohaya
Hi, Jeff, Ahh! Ok, thanks for the explanation! Jim Jeff Trawick traw...@gmail.com wrote: On Mon, Apr 1, 2013 at 4:21 PM, oh...@cox.net wrote: Hi, Per the subject, was there a final 2.3.x version of Apache? And, if so, where can I download the source? 2.ODDNUMBER.* are

[users@httpd] Question about Apache SSLCACertificatePath behavior

2013-03-02 Thread ohaya
Hi, I have a question about the SSLCACertificatePath directive: When Apache sends the list of CAs that it's willing to accept client certificates from, is that list of CAs dynamic if the SSLCACertificatePath directive is used? What I mean by that is: - if, for example, one of

[users@httpd] Does Apache 'configure' command have a 'clean' option?

2012-12-11 Thread ohaya
Hi, I spent last night pulling my hair out because I was trying to build Apache, but I was trying different 'configure' commands with different MPM configurations, and it seemed like when I changed the parameters for configure, it was using old/previous parameters. I was doing 'make clean'

Re: [users@httpd] Conditionally strip/remove a specific cookie from request

2012-12-10 Thread ohaya
oh...@cox.net wrote: Try RequestHeader edit Cookie MyCookie=.*(\;)? Anyway, more interesting question for me was how are you going to check for the first condition, existance of the arbiteary header MYHEADER? Or you are talking here about standard http header? which

Re: [users@httpd] Conditionally strip/remove a specific cookie from request

2012-12-10 Thread ohaya
Igor Cicimov icici...@gmail.com wrote: On 10/12/2012 6:58 PM, oh...@cox.net wrote: Try RequestHeader edit Cookie MyCookie=.*(\;)? Anyway, more interesting question for me was how are you going to check for the first condition, existance of the arbiteary header

Re: [users@httpd] Conditionally strip/remove a specific cookie from request

2012-12-10 Thread ohaya
oh...@cox.net wrote: Igor Cicimov icici...@gmail.com wrote: On 10/12/2012 6:58 PM, oh...@cox.net wrote: Try RequestHeader edit Cookie MyCookie=.*(\;)? Anyway, more interesting question for me was how are you going to check for the first condition,

[users@httpd] Conditionally strip/remove a specific cookie from request

2012-12-09 Thread ohaya
Hi, We are trying to have an Apache (acting as a proxy) conditionally strip/remove a cookie from the incoming request, before it proxies the request. The condition is that, on the incoming request: - there is a specific HTTP header, MYHEADER, with a value of MYHEADERVALUE, and - the root of

Re: [users@httpd] Conditionally strip/remove a specific cookie from request

2012-12-09 Thread ohaya
Igor Cicimov icici...@gmail.com wrote: On Mon, Dec 10, 2012 at 7:19 AM, oh...@cox.net wrote: Hi, We are trying to have an Apache (acting as a proxy) conditionally strip/remove a cookie from the incoming request, before it proxies the request. The condition is that, on the

Re: [users@httpd] Conditionally strip/remove a specific cookie from request

2012-12-09 Thread ohaya
Igor Cicimov icici...@gmail.com wrote: On Mon, Dec 10, 2012 at 9:02 AM, oh...@cox.net wrote: Igor Cicimov icici...@gmail.com wrote: On Mon, Dec 10, 2012 at 7:19 AM, oh...@cox.net wrote: Hi, We are trying to have an Apache (acting as a proxy) conditionally

Re: [users@httpd] Re: Building Apache for Windows

2012-12-09 Thread ohaya
Hi, I haven't been following this thread, but I just got done building 2.4.3 on Centos, so I know that 2.4.3 is different even on Centos :).. After you unpacked the APR and APR-UTIL, did you: - Copy/move the apr and apr-util directories under the srcfile directory that's under the original

Re: [users@httpd] Conditionally strip/remove a specific cookie from request

2012-12-09 Thread ohaya
Igor Cicimov icici...@gmail.com wrote: On Mon, Dec 10, 2012 at 11:02 AM, oh...@cox.net wrote: Igor Cicimov icici...@gmail.com wrote: On Mon, Dec 10, 2012 at 9:02 AM, oh...@cox.net wrote: Igor Cicimov icici...@gmail.com wrote: On Mon, Dec 10, 2012 at 7:19

Re: [users@httpd] Conditionally strip/remove a specific cookie from request

2012-12-09 Thread ohaya
[I keep getting bounced msgs from the mail server, so am removing the earlier replies.] Igor (et al), I'm ok with 2.4.3 and the If for the conditional part. Also, with that, for editing the Cookie header, I figured out that I may be able to use RequestHeader edit to edit the Cookie header

[users@httpd] Apache taking (exactly) 30 seconds to serve static images

2012-07-16 Thread ohaya
Hi, We are using Apache proxying and also host some static content (images, under htdocs) on the Apache, and we're finding that, intermittently (we'll have a page, and say, 2 images will take 30 seconds), it is taking a long time to serve some images, almost exactly 30 seconds. The Apache is

Re: [users@httpd] Apache taking (exactly) 30 seconds to serve static images

2012-07-16 Thread ohaya
Nick Kew n...@webthing.com wrote: On Mon, 16 Jul 2012 10:47:54 -0400 oh...@cox.net wrote: Has anyone encountered something like this. What timeouts might be set to 30 seconds in Apache that might be causing this kind of behavior? Check your keepalive. If your browser, or

RE: [users@httpd] Apache taking (exactly) 30 seconds to serve static images

2012-07-16 Thread ohaya
Garrison wrote: -Original Message- Subject: Re: [users@httpd] Apache taking (exactly) 30 seconds to serve static images Just a wild guess, but is it possible Apache is configured to resolve Hostnames and rDNS is not set up correctly? Jim, Thanks for the suggestion,

RE: [users@httpd] Apache taking (exactly) 30 seconds to serve static images

2012-07-16 Thread ohaya
David Hubbard dhubb...@dino.hostasaurus.com wrote: From: Garrison, Jim (ETW) [mailto:jim.garri...@nike.com] -Original Message- Subject: Re: [users@httpd] Apache taking (exactly) 30 seconds to serve static images Just a wild guess, but is it possible Apache is

Re: [users@httpd] Apache taking (exactly) 30 seconds to serve static images

2012-07-16 Thread ohaya
Vivek Nambiar vivek1namb...@gmail.com wrote: May be you can add the hostname and ipaddress in the linux hosts file,restart apache and see if that makes any difference?? Thanks VIVEK Hi Vivek, I made suer that there was an entry in /etc/hosts, with both the FQDN and short hostname

[users@httpd] Solved was Re: [users@httpd] Apache taking (exactly) 30 seconds to serve static images

2012-07-16 Thread ohaya
Macks wrote: Can you run either strace (or dtrace depending on platform) against the running process and see what it is doing during the request? A -- Aaron Macks Sr. Unix Systems Engineer Harvard Business Publishing 300 North Beacon St.| Watertown, MA 02472 (617)

Re: [users@httpd] Possible to add edited version of SSL_CLIENT_CERT variable to request header?

2012-04-07 Thread ohaya
Hi, I noticed from the archives that there was response/question fromBobb, Kirth Andre that i missed: Igor, Just out of curiosity. Are you using other .pem files in other location blocks? I'm assuming that that question was actually for me (the OP)... In answer to that: No, I don't have any

Re: [users@httpd] Possible to add edited version of SSL_CLIENT_CERT variable to request header?

2012-04-05 Thread ohaya
Igor, The backend (Weblogic) won't accept/parse it. I am sure, because in one test I did, I had a RequestHeader with a canned PEM string, without them, and that worked. Jim Igor Cicimov icici...@gmail.com wrote: Those lines are part of the PEM certificate without them the cert is not

[users@httpd] Possible to add edited version of SSL_CLIENT_CERT variable to request header?

2012-04-04 Thread ohaya
Hi, I am using Apache (2.2.x) as a proxy. The Apache is enabled for 2-way/client-authenticated SSL. In one situation (in a specific Location section), I need to be able to pass the PEM of the client certificate to the proxied server, with a specific HTTP header name. I've actually

[users@httpd] 403/

2011-02-09 Thread ohaya
- The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org from the digest:

[us...@httpd] Problem with Apache 2.2.13 and SSLOptions +FakeBasicAuth

2009-09-12 Thread ohaya
Hi, We are using Apache as a reverse-proxy in front of a WebLogic server. In our older configuration, using Apache 2.0.5x, when we enable client-authenticated SSL, and uncomment the following line in ssl.conf: SSLOptions +FakeBasicAuth +ExportCertData +CompatEnvVars +StrictRequire we get the

Re: [EMAIL PROTECTED] httpd segfaults?

2008-03-27 Thread ohaya
Hi, Apache may not be able to write to the /tmp unless you do: ulimit -c unlimited before starting Apache. At least that's what worked for me on RHEL4. Jim Devraj Mukherjee [EMAIL PROTECTED] wrote: I already have that in httpd.conf and don't see any CoreDump files in /tmp. On

Re: [EMAIL PROTECTED] [Apache 2.2.4/Internet Explorer] Strange access_log messages when access SSL URL

2008-03-24 Thread ohaya
Hi, Sorry, but I have to clarify my last posting. It turns out that even with the modified BrowserMatch, there appear to be problems with some versions of Internet Explorer and my Apache 2.2.4 build with SSL: IE Version 6.0.3790.1830 - hangs occasionally when using SSL IE Version

[EMAIL PROTECTED] [Apache 2.2.4/Internet Explorer] Strange access_log messages when access SSL URL

2008-03-23 Thread ohaya
Hi, I'm building and trying to get an Apache 2.2.4 system working with SSL. I've gotten the build done, and it's configured for SSL with server certs, etc., and when I access some simple HTML pages, it works ok. However, if I access pages that have images, etc. using Internet Explorer, the

Re: [EMAIL PROTECTED] [Apache 2.2.4/Internet Explorer] Strange access_log messages when access SSL URL

2008-03-23 Thread ohaya
P.S. I forgot to mention: This problem appears to only happen if I use Internet Explorer as the browser. If I use Mozilla Firefox, the SSL pages appear quickly. Jim [EMAIL PROTECTED] wrote: Hi, I'm building and trying to get an Apache 2.2.4 system working with SSL. I've gotten

Re: [EMAIL PROTECTED] [Apache 2.2.4/Internet Explorer] Strange access_log messages when access SSL URL

2008-03-23 Thread ohaya
Hi, For the record, I just found a solution that works for me for the slow response with IE6: I found what turned out to be the solution at:

[EMAIL PROTECTED] Problems building on Redhat (openssl conflict)

2008-03-21 Thread ohaya
Hi, I am trying to build an SSL-enabled Apache 2.2.8 on a Redhat 4 system, but am running into a problem. The problem is that for some reason, there is already an older (0.9.7a-43.16) version of openssl on the machine, but no openssl-devel RPM was installed. So, I figured I'd build the latest

[EMAIL PROTECTED] How to set openssl library path during Apache build (on Redhat)?

2008-03-19 Thread ohaya
Hi, Previously, I've built various versions of Apache with SSL support (using openssl) on some Solaris machines, but we're moving to Redhat. In our case, management wants openssl to go into /apps/openssl and Apache into /apps/httpd. Doing the openssl and Apache (2.2.4) builds (configure, then

Re: [EMAIL PROTECTED] How to set openssl library path during Apache build (on Redhat)?

2008-03-19 Thread ohaya
Graeme, THANKS! It looks like the /etc/ld.conf.d/openssl.conf was already created, so it works after I did just the /sbin/ldconfig. Jim Graeme Fowler [EMAIL PROTECTED] wrote: On Wed, 2008-03-19 at 02:22 -0400, [EMAIL PROTECTED] wrote: I can get around this by setting LD_LIBRARY_PATH

[EMAIL PROTECTED] Quest. re. Apache and client-authenticated SSL

2007-01-21 Thread ohaya
Hi, I was wondering if, when configuring Apache for client-authenticated SSL (i.e., using client certs), there is a way to configure Apache to force a re-authentication of each HTTPS *request*? Note, when I say each HTTPS request here, I mean each individual HTTPS request, not each SSL

[EMAIL PROTECTED] Any problems deleting all _default_ VirtualHosts?

2006-10-29 Thread ohaya
Hi, I was wondering if anyone has tried deleting/commenting out ALL of the _default_ VirtualHost sections in httpd.conf/ssl.conf? Does doing this cause any problems with Apache? One of my colleagues has suggested that doing this helps secure Apache, because then Apache wouldn't process any

Re: [EMAIL PROTECTED] Any problems deleting all _default_ VirtualHosts?

2006-10-29 Thread ohaya
Also, when we tried that (deleting the _default_ sections), I *think* (but am not sure) that we may have been seeing some behavior where Apache would slow down, i.e., serve content very slowly. No. It should make no difference in speed. Joshua, Thanks for the response(s). Re. the

Re: [EMAIL PROTECTED] Any problems deleting all _default_ VirtualHosts?

2006-10-29 Thread ohaya
I think, but am not sure, that from some diagnostics we did at that time, it also looked like Apache was processing requests for IP address 0.0.0.0, which kind of puzzled me. By default apache listens on all available addresses. I don't know what is puzzling you about that. Joshua,

Re: [EMAIL PROTECTED] Any problems deleting all _default_ VirtualHosts?

2006-10-29 Thread ohaya
[EMAIL PROTECTED] wrote: I think, but am not sure, that from some diagnostics we did at that time, it also looked like Apache was processing requests for IP address 0.0.0.0, which kind of puzzled me. By default apache listens on all available addresses. I don't know what

Re: [EMAIL PROTECTED] Deadlock msgs in error_log

2006-10-19 Thread ohaya
Alexander Lazic [EMAIL PROTECTED] wrote: Hi, On Mit 18.10.2006 19:32, [EMAIL PROTECTED] wrote: We're running Apache 2.0.55 on Solaris 9, and we are seeing a number of [error] and [warn] messages in the error_log file. The error msgs occur occasionally, but the warn msgs are output

Re: [EMAIL PROTECTED] NameVirtualHost + SSL certificate problem

2006-10-19 Thread ohaya
Laszlo Nagy [EMAIL PROTECTED] wrote: Hello All, I have a little problem with my Apache. Here is the software version: #apachectl -v Server version: Apache/2.0.59 Server built: Oct 4 2006 08:32:33 #uname -a FreeBSD designaproduct.biz 6.1-RELEASE-p6 FreeBSD 6.1-RELEASE-p6

[EMAIL PROTECTED] Deadlock msgs in error_log

2006-10-18 Thread ohaya
Hi, We're running Apache 2.0.55 on Solaris 9, and we are seeing a number of [error] and [warn] messages in the error_log file. The error msgs occur occasionally, but the warn msgs are output quite frequently. The error msgs say: [error] [client AAA.BBB.CCC.DDD] (45) Deadlock situation

RE: [EMAIL PROTECTED] apxs vs. configure to add modules

2006-05-19 Thread ohaya
Hi, This was with an older version of Apache (2.0.52), but I just did this this week to compile the mod_proxy modules on Solaris: cd source/modules/proxy apxs -i -a -c *.c Jim JP [EMAIL PROTECTED] wrote: Ok, how about cd $source_dir/modules/proxy $apache-home/bin/apxs -i

[EMAIL PROTECTED] Change order of mod_dir in httpd.conf?

2005-08-12 Thread ohaya
Hi, We're having a problem on an Apache 1.3.x server running on Solaris 9. From what I can tell thus far, I think that the problem is related to a 3rd party module that we are trying to integrate to provide single sign-on (SSO) among our servers. This server also has a J2EE container (OC4J)

[EMAIL PROTECTED] access_log vs. access.log problem

2005-08-12 Thread ohaya
Hi, I am running Apache 2.0.50 on Windows 2000. In my httpd.conf, I have: CustomLog logs/access.log combined But, I noticed that Apache is writing access entries into the logs\access_log file, and nothing is being written to the logs\access.log file. The reason that I noticed this is I've

Re: [EMAIL PROTECTED] Apache config file

2005-08-12 Thread ohaya
Hi, Does the httpd.default.conf that comes with Apache not work for you? If not, here's link for building a minimal httpd.conf for Linux: http://www-uxsup.csx.cam.ac.uk/~jw35/courses/apache/html/c486.html Hope that helps... Jim Dana Marshall wrote: I'm looking for a BLANK config file

[EMAIL PROTECTED] Possible Problem with priority/ordering in httpd.conf?

2005-08-02 Thread ohaya
Hi, We have been trying to configure an Apache server/instance that gets installed as part of Oracle's 10g Application Server to work with our own authentication module, and as part of doing this, we need to configure a directory alias for a directory that contains some of our JSPs that run under