mod_wl_ssl and mod_proxy/mod_rewrite not playing nice?

mod_wl_ssl and mod_proxy/mod_rewrite not playing nice?

am 01.05.2002 19:31:30 von Matt Gregory

I am trying to use an apache instance for virtual hosting of several
machines in the following config.

www.myserver.com points at a weblogic virtual host.
www.myserver.com/PortalTwo points at Zope but right now I'm having to vhost
using the name portaltwo.myserver.com and point that at a different class C
IP on another apache server because I can't virtualhost the directory
because of the problem below.
www.myserver2.net points at Weblogic using mod_wl_ssl
www.myserver3.net points at Zope, but I have to host this domain on a
different apache server because of the problems listed below.

I tried to use mod_rewrite as below:
RewriteEngine On
RewriteCond ${HTTP_HOST} ^.*:80$
RewriteRule ^/(.*)
http://zope.mydomain.com:8080/VirtualHostBase/http/${HTTP_HO ST}:80/VHOSTS/my
server/portaltwo/VirtualHostRoot/$1 [L,P]

I also tried to use ProxyPass as below:
ProxyPass /
http://zope.mydomain.com:8080/VirtualHostBase/http/www.mydom ain.com:80/VHOST
S/myserver/portaltwo/VirtualHostRoot/
ProxyPassReverse /
http://zope.mydomain.com:8080/VirtualHostBase/http/www.mydom ain.com:80/VHOST
S/myserver/portaltwo/VirtualHostRoot/

Neither one worked on the same server running the mod_wl_ssl module. I need
that module to pass ssl requests through apache to weblogic. Does anyone
know why they might conflict and/or what I might be able to do in order to
get around it?

I have written a java library for a type of virtual hosting kindof like
mod_rewrite (it basically just pushes all links and images through a java
servlet and forwards http headers and shares a java.net.URL resource). I'm
using it to pull content from Zope inside of Weblogic jsps and servlets.
This has nothing to do with the above issue, it just illustrates why things
are kind of messy with my virtual hosting needs right now.

I'm running 5 real domains with about 5 servers per domain, not including
database servers and virtual hosts.

Re: mod_wl_ssl and mod_proxy/mod_rewrite not playing nice?

am 01.05.2002 20:37:50 von Graham Leggett

This is a cryptographically signed message in MIME format.

--------------msD13AA57177E3D0A9D9BEF64B
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit

Matt Gregory wrote:

> I also tried to use ProxyPass as below:
> ProxyPass /
> http://zope.mydomain.com:8080/VirtualHostBase/http/www.mydom ain.com:80/VHOST
> S/myserver/portaltwo/VirtualHostRoot/
> ProxyPassReverse /
> http://zope.mydomain.com:8080/VirtualHostBase/http/www.mydom ain.com:80/VHOST
> S/myserver/portaltwo/VirtualHostRoot/
>
> Neither one worked on the same server running the mod_wl_ssl module.

Define "didn't work".

Regards,
Graham
--
-----------------------------------------
minfrin@sharp.fm "There's a moon
over Bourbon Street
tonight..."
--------------msD13AA57177E3D0A9D9BEF64B
Content-Type: application/x-pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
Content-Description: S/MIME Cryptographic Signature

MIIHyAYJKoZIhvcNAQcCoIIHuTCCB7UCAQExCzAJBgUrDgMCGgUAMAsGCSqG SIb3DQEHAaCC
BcYwggKVMIIB/qADAgECAgMEyOwwDQYJKoZIhvcNAQEEBQAwgZIxCzAJBgNV BAYTAlpBMRUw
EwYDVQQIEwxXZXN0ZXJuIENhcGUxEjAQBgNVBAcTCUNhcGUgVG93bjEPMA0G A1UEChMGVGhh
d3RlMR0wGwYDVQQLExRDZXJ0aWZpY2F0ZSBTZXJ2aWNlczEoMCYGA1UEAxMf UGVyc29uYWwg
RnJlZW1haWwgUlNBIDIwMDAuOC4zMDAeFw0wMTA1MTEwMDE3NDZaFw0wMjA1 MTEwMDE3NDZa
MF0xEDAOBgNVBAQTB0xlZ2dldHQxDzANBgNVBCoTBkdyYWhhbTEXMBUGA1UE AxMOR3JhaGFt
IExlZ2dldHQxHzAdBgkqhkiG9w0BCQEWEG1pbmZyaW5Ac2hhcnAuZm0wgZ8w DQYJKoZIhvcN
AQEBBQADgY0AMIGJAoGBALX2zJvQ/9l+sCEpkfMNNwtnMcF8vmPM2sRpibT5 nR87bYWyLVCt
XXWXU+UyDOkiQJt6UahnmYZV7u40a1/osbNnjHjyNybejOuUFjHYy1gDwjsE lnxYbRRA2SZc
CmrZ4V0QFI0ZKuimGryZQj77UroiIV+Qq+v+PaxDEGwiqJqnAgMBAAGjLTAr MBsGA1UdEQQU
MBKBEG1pbmZyaW5Ac2hhcnAuZm0wDAYDVR0TAQH/BAIwADANBgkqhkiG9w0B AQQFAAOBgQCO
l5bH8JXuFM+EZi01jfezzKML5iPBHx4BDj/4gl2lXw1t0v6o+9442F6TpnOV Ak3LL1KTupvc
HfM+Bn71iWuD8ASCoSsmVpeoCbOv3lPGltrDgywcmM8phZyK1hHLvvJgfd4I MZbuH/rm0ZWp
WjRORFfik8yuO9DgahgjgAhkujCCAykwggKSoAMCAQICAQwwDQYJKoZIhvcN AQEEBQAwgdEx
CzAJBgNVBAYTAlpBMRUwEwYDVQQIEwxXZXN0ZXJuIENhcGUxEjAQBgNVBAcT CUNhcGUgVG93
bjEaMBgGA1UEChMRVGhhd3RlIENvbnN1bHRpbmcxKDAmBgNVBAsTH0NlcnRp ZmljYXRpb24g
U2VydmljZXMgRGl2aXNpb24xJDAiBgNVBAMTG1RoYXd0ZSBQZXJzb25hbCBG cmVlbWFpbCBD
QTErMCkGCSqGSIb3DQEJARYccGVyc29uYWwtZnJlZW1haWxAdGhhd3RlLmNv bTAeFw0wMDA4
MzAwMDAwMDBaFw0wMjA4MjkyMzU5NTlaMIGSMQswCQYDVQQGEwJaQTEVMBMG A1UECBMMV2Vz
dGVybiBDYXBlMRIwEAYDVQQHEwlDYXBlIFRvd24xDzANBgNVBAoTBlRoYXd0 ZTEdMBsGA1UE
CxMUQ2VydGlmaWNhdGUgU2VydmljZXMxKDAmBgNVBAMTH1BlcnNvbmFsIEZy ZWVtYWlsIFJT
QSAyMDAwLjguMzAwgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBAN4zMqZj xwklRT7Sbngn
Z4HF2ogZgpcO40QpimM1Km1wPPrcrvfudG8wvDOQf/k0caCjbZjxw0+iZdsN +kvx1t1hpfmF
zVWaNRqdknWoJ67Ycvm6AvbXsJHeHOmr4BgDqHxDQlBRh4M88Dm0m1SKE4f/ s5udSWYALQmJ
7JRr6aFpAgMBAAGjTjBMMCkGA1UdEQQiMCCkHjAcMRowGAYDVQQDExFQcml2 YXRlTGFiZWwx
LTI5NzASBgNVHRMBAf8ECDAGAQH/AgEAMAsGA1UdDwQEAwIBBjANBgkqhkiG 9w0BAQQFAAOB
gQBzG28mZYv/FTRLWWKK7US+ScfoDbuPuQ1qJipihB+4h2N0HG23zxpTkUvh zeY42e1Q9Dps
NJKs5pKcbsEjAcIJp+9LrnLdBmf1UG8uWLi2C8FQV7XsHNfvF7bViJu3ooga 7TlbOX00/LaW
GCVNavSdxcORL6mWuAU8Uvzd6WIDSDGCAcowggHGAgEBMIGaMIGSMQswCQYD VQQGEwJaQTEV
MBMGA1UECBMMV2VzdGVybiBDYXBlMRIwEAYDVQQHEwlDYXBlIFRvd24xDzAN BgNVBAoTBlRo
YXd0ZTEdMBsGA1UECxMUQ2VydGlmaWNhdGUgU2VydmljZXMxKDAmBgNVBAMT H1BlcnNvbmFs
IEZyZWVtYWlsIFJTQSAyMDAwLjguMzACAwTI7DAJBgUrDgMCGgUAoIGGMBgG CSqGSIb3DQEJ
AzELBgkqhkiG9w0BBwEwHAYJKoZIhvcNAQkFMQ8XDTAyMDUwMTE4Mzc1MVow IwYJKoZIhvcN
AQkEMRYEFDWnBGc2+cNgvfZvs6MiK6yWvpweMCcGCSqGSIb3DQEJDzEaMBgw BwYFKw4DAgcw
DQYIKoZIhvcNAwICASgwDQYJKoZIhvcNAQEBBQAEgYAuvNLUpiy4ec4/mGAL ulRoeu1rcumU
laVLivpOnJ6Q4vK9Y9Hdj/ASeQy9WGQ0TiPwH5RxQ76+W4dMxWqOOVltLufj gQr27cR61Rpl
TeKxUL39SLWMZ101X/f+iJ+KSbLl6aB+ii1NfRuuBZWybypCcDxkLFYEj3vs JJQG9naUUQ==
--------------msD13AA57177E3D0A9D9BEF64B--

Re: mod_wl_ssl and mod_proxy/mod_rewrite not playing nice?

am 01.05.2002 23:02:36 von Matt Gregory

Did nothing. No response code from apache at all. As far as what the root
problem was, I really have no idea.

I'm at the limit of my expertise. I know how to configure virtual hosts
with mod_rewrite, mod_proxy and mod_wl_ssl but when I mix either of the
former with the latter on an apache installation the two former just stop
working.

----- Original Message -----
From: "Graham Leggett"
To:
Sent: Wednesday, May 01, 2002 2:37 PM
Subject: Re: mod_wl_ssl and mod_proxy/mod_rewrite not playing nice?


> Matt Gregory wrote:
>
> > I also tried to use ProxyPass as below:
> > ProxyPass /
> >
http://zope.mydomain.com:8080/VirtualHostBase/http/www.mydom ain.com:80/VHOST
> > S/myserver/portaltwo/VirtualHostRoot/
> > ProxyPassReverse /
> >
http://zope.mydomain.com:8080/VirtualHostBase/http/www.mydom ain.com:80/VHOST
> > S/myserver/portaltwo/VirtualHostRoot/
> >
> > Neither one worked on the same server running the mod_wl_ssl module.
>
> Define "didn't work".
>
> Regards,
> Graham
> --
> -----------------------------------------
> minfrin@sharp.fm "There's a moon
> over Bourbon Street
> tonight..."

Re: mod_wl_ssl and mod_proxy/mod_rewrite not playing nice?

am 01.05.2002 23:13:45 von Graham Leggett

This is a cryptographically signed message in MIME format.

--------------msD919481F56E5B81ABEB51859
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit

Matt Gregory wrote:

> Did nothing. No response code from apache at all. As far as what the root
> problem was, I really have no idea.

Still too vague: Define "did nothing". Did the proxy just hang when you
tried to connect to it? Did it eventually time out? (Did you give it an
opportunity to time out?). Did the proxy just close the socket on you
without saying anything? Was anything logged in the error log (have you
jacked up the LogLevel to "debug"?)

Without giving me a description of exactly what is happening, I cannot
help you.

Regards,
Graham
--
-----------------------------------------
minfrin@sharp.fm "There's a moon
over Bourbon Street
tonight..."
--------------msD919481F56E5B81ABEB51859
Content-Type: application/x-pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
Content-Description: S/MIME Cryptographic Signature

MIIHyAYJKoZIhvcNAQcCoIIHuTCCB7UCAQExCzAJBgUrDgMCGgUAMAsGCSqG SIb3DQEHAaCC
BcYwggKVMIIB/qADAgECAgMEyOwwDQYJKoZIhvcNAQEEBQAwgZIxCzAJBgNV BAYTAlpBMRUw
EwYDVQQIEwxXZXN0ZXJuIENhcGUxEjAQBgNVBAcTCUNhcGUgVG93bjEPMA0G A1UEChMGVGhh
d3RlMR0wGwYDVQQLExRDZXJ0aWZpY2F0ZSBTZXJ2aWNlczEoMCYGA1UEAxMf UGVyc29uYWwg
RnJlZW1haWwgUlNBIDIwMDAuOC4zMDAeFw0wMTA1MTEwMDE3NDZaFw0wMjA1 MTEwMDE3NDZa
MF0xEDAOBgNVBAQTB0xlZ2dldHQxDzANBgNVBCoTBkdyYWhhbTEXMBUGA1UE AxMOR3JhaGFt
IExlZ2dldHQxHzAdBgkqhkiG9w0BCQEWEG1pbmZyaW5Ac2hhcnAuZm0wgZ8w DQYJKoZIhvcN
AQEBBQADgY0AMIGJAoGBALX2zJvQ/9l+sCEpkfMNNwtnMcF8vmPM2sRpibT5 nR87bYWyLVCt
XXWXU+UyDOkiQJt6UahnmYZV7u40a1/osbNnjHjyNybejOuUFjHYy1gDwjsE lnxYbRRA2SZc
CmrZ4V0QFI0ZKuimGryZQj77UroiIV+Qq+v+PaxDEGwiqJqnAgMBAAGjLTAr MBsGA1UdEQQU
MBKBEG1pbmZyaW5Ac2hhcnAuZm0wDAYDVR0TAQH/BAIwADANBgkqhkiG9w0B AQQFAAOBgQCO
l5bH8JXuFM+EZi01jfezzKML5iPBHx4BDj/4gl2lXw1t0v6o+9442F6TpnOV Ak3LL1KTupvc
HfM+Bn71iWuD8ASCoSsmVpeoCbOv3lPGltrDgywcmM8phZyK1hHLvvJgfd4I MZbuH/rm0ZWp
WjRORFfik8yuO9DgahgjgAhkujCCAykwggKSoAMCAQICAQwwDQYJKoZIhvcN AQEEBQAwgdEx
CzAJBgNVBAYTAlpBMRUwEwYDVQQIEwxXZXN0ZXJuIENhcGUxEjAQBgNVBAcT CUNhcGUgVG93
bjEaMBgGA1UEChMRVGhhd3RlIENvbnN1bHRpbmcxKDAmBgNVBAsTH0NlcnRp ZmljYXRpb24g
U2VydmljZXMgRGl2aXNpb24xJDAiBgNVBAMTG1RoYXd0ZSBQZXJzb25hbCBG cmVlbWFpbCBD
QTErMCkGCSqGSIb3DQEJARYccGVyc29uYWwtZnJlZW1haWxAdGhhd3RlLmNv bTAeFw0wMDA4
MzAwMDAwMDBaFw0wMjA4MjkyMzU5NTlaMIGSMQswCQYDVQQGEwJaQTEVMBMG A1UECBMMV2Vz
dGVybiBDYXBlMRIwEAYDVQQHEwlDYXBlIFRvd24xDzANBgNVBAoTBlRoYXd0 ZTEdMBsGA1UE
CxMUQ2VydGlmaWNhdGUgU2VydmljZXMxKDAmBgNVBAMTH1BlcnNvbmFsIEZy ZWVtYWlsIFJT
QSAyMDAwLjguMzAwgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBAN4zMqZj xwklRT7Sbngn
Z4HF2ogZgpcO40QpimM1Km1wPPrcrvfudG8wvDOQf/k0caCjbZjxw0+iZdsN +kvx1t1hpfmF
zVWaNRqdknWoJ67Ycvm6AvbXsJHeHOmr4BgDqHxDQlBRh4M88Dm0m1SKE4f/ s5udSWYALQmJ
7JRr6aFpAgMBAAGjTjBMMCkGA1UdEQQiMCCkHjAcMRowGAYDVQQDExFQcml2 YXRlTGFiZWwx
LTI5NzASBgNVHRMBAf8ECDAGAQH/AgEAMAsGA1UdDwQEAwIBBjANBgkqhkiG 9w0BAQQFAAOB
gQBzG28mZYv/FTRLWWKK7US+ScfoDbuPuQ1qJipihB+4h2N0HG23zxpTkUvh zeY42e1Q9Dps
NJKs5pKcbsEjAcIJp+9LrnLdBmf1UG8uWLi2C8FQV7XsHNfvF7bViJu3ooga 7TlbOX00/LaW
GCVNavSdxcORL6mWuAU8Uvzd6WIDSDGCAcowggHGAgEBMIGaMIGSMQswCQYD VQQGEwJaQTEV
MBMGA1UECBMMV2VzdGVybiBDYXBlMRIwEAYDVQQHEwlDYXBlIFRvd24xDzAN BgNVBAoTBlRo
YXd0ZTEdMBsGA1UECxMUQ2VydGlmaWNhdGUgU2VydmljZXMxKDAmBgNVBAMT H1BlcnNvbmFs
IEZyZWVtYWlsIFJTQSAyMDAwLjguMzACAwTI7DAJBgUrDgMCGgUAoIGGMBgG CSqGSIb3DQEJ
AzELBgkqhkiG9w0BBwEwHAYJKoZIhvcNAQkFMQ8XDTAyMDUwMTIxMTM0N1ow IwYJKoZIhvcN
AQkEMRYEFNlqtFsLe7XCzMhLIQdEyT7/bps3MCcGCSqGSIb3DQEJDzEaMBgw BwYFKw4DAgcw
DQYIKoZIhvcNAwICASgwDQYJKoZIhvcNAQEBBQAEgYAFFrLfODibrR5jsklp SXggA78nTuXw
vEtfVyWrIqRjKSVRws5+6OBbATxP1jWjRAC1fFljsPSYnltLmCSd7grwEfnR yZTj1tmtYJpO
cUdunEo46NAbUM/1OGcIra7vMmHBy2m7wIBWNgRzj5u4yb+rA/Q03tl18N3n uWvzZVAU+g==
--------------msD919481F56E5B81ABEB51859--

Re: mod_wl_ssl and mod_proxy/mod_rewrite not playing nice?

am 01.05.2002 23:35:04 von Matt Gregory

Yes, it did time out.

Some notes:
the virtual host in this example is www.latechcenter.com
the actual server hosting the site is located at prod-zope-knox01:8080
Zope's Virtal Host Monster (rewrites relative links) is located at
/latc/LATCVHOST

Here is the error log from apache
[Sun Apr 28 23:52:26 2002] [error] [client 10.2.2.157] client denied by
server configuration:
proxy:http://prod-zope-knox01.cti-pet.com:8080/VirtualHostBa se/http/www.late
chcenter.com:80/latc/LATCVHOST/VirtualHostRoot/
[Sun Apr 28 23:52:31 2002] [error] [client 10.2.2.157] client denied by
server configuration:
proxy:http://prod-zope-knox01.cti-pet.com:8080/VirtualHostBa se/http/www.late
chcenter.com:80/latc/LATCVHOST/VirtualHostRoot/
[Sun Apr 28 23:54:43 2002] [error] [client 10.2.2.157] client denied by
server configuration:
proxy:http://prod-zope-knox01.cti-pet.com:8080/VirtualHostBa se/http/www.late
chcenter.com:80/latc/LATCVHOST/VirtualHostRoot/manage_page_s tyle.css
[Sun Apr 28 23:54:43 2002] [error] [client 10.2.2.157] client denied by
server configuration:
proxy:http://prod-zope-knox01.cti-pet.com:8080/VirtualHostBa se/http/www.late
chcenter.com:80/latc/LATCVHOST/VirtualHostRoot/p_/ZopeButton
[Sun Apr 28 23:54:51 2002] [error] [client 10.2.2.157] client denied by
server configuration:
proxy:http://prod-zope-knox01.cti-pet.com:8080/VirtualHostBa se/http/www.late
chcenter.com:80/latc/LATCVHOST/VirtualHostRoot/manage_page_s tyle.css
[Sun Apr 28 23:54:51 2002] [error] [client 10.2.2.157] client denied by
server configuration:
proxy:http://prod-zope-knox01.cti-pet.com:8080/VirtualHostBa se/http/www.late
chcenter.com:80/latc/LATCVHOST/VirtualHostRoot/p_/ZopeButton
[Sun Apr 28 23:55:56 2002] [error] [client 10.2.2.157] client denied by
server configuration:
proxy:http://prod-zope-knox01.cti-pet.com:8080/VirtualHostBa se/http/www.late
chcenter.com:80/latc/LATCVHOST/VirtualHostRoot/p_/ZopeButton
[Sun Apr 28 23:55:56 2002] [error] [client 10.2.2.157] client denied by
server configuration:
proxy:http://prod-zope-knox01.cti-pet.com:8080/VirtualHostBa se/http/www.late
chcenter.com:80/latc/LATCVHOST/VirtualHostRoot/manage_page_s tyle.css
[Sun Apr 28 23:57:11 2002] [error] [client 10.2.2.157] client denied by
server configuration:
proxy:http://prod-zope-knox01.cti-pet.com:8080/VirtualHostBa se/http/www.late
chcenter.com:80/latc/LATCVHOST/VirtualHostRoot/images/header _main_01.gif
[Sun Apr 28 23:57:11 2002] [error] [client 10.2.2.157] client denied by
server configuration:
proxy:http://prod-zope-knox01.cti-pet.com:8080/VirtualHostBa se/http/www.late
chcenter.com:80/latc/LATCVHOST/VirtualHostRoot/images/header _main_02.gif
[Sun Apr 28 23:57:11 2002] [error] [client 10.2.2.157] client denied by
server configuration:
proxy:http://prod-zope-knox01.cti-pet.com:8080/VirtualHostBa se/http/www.late
chcenter.com:80/latc/LATCVHOST/VirtualHostRoot/images/logo.g if
[Sun Apr 28 23:57:11 2002] [error] [client 10.2.2.157] client denied by
server configuration:
proxy:http://prod-zope-knox01.cti-pet.com:8080/VirtualHostBa se/http/www.late
chcenter.com:80/latc/LATCVHOST/VirtualHostRoot/images/header _main_04.gif
[Sun Apr 28 23:57:11 2002] [error] [client 10.2.2.157] client denied by
server configuration:
proxy:http://prod-zope-knox01.cti-pet.com:8080/VirtualHostBa se/http/www.late
chcenter.com:80/latc/LATCVHOST/VirtualHostRoot/images/header _main_05.gif
[Sun Apr 28 23:57:11 2002] [error] [client 10.2.2.157] client denied by
server configuration:
proxy:http://prod-zope-knox01.cti-pet.com:8080/VirtualHostBa se/http/www.late
chcenter.com:80/latc/LATCVHOST/VirtualHostRoot/images/home.g if
[Sun Apr 28 23:57:11 2002] [error] [client 10.2.2.157] client denied by
server configuration:
proxy:http://prod-zope-knox01.cti-pet.com:8080/VirtualHostBa se/http/www.late
chcenter.com:80/latc/LATCVHOST/VirtualHostRoot/images/header _main_08.gif
[Sun Apr 28 23:57:11 2002] [error] [client 10.2.2.157] client denied by
server configuration:
proxy:http://prod-zope-knox01.cti-pet.com:8080/VirtualHostBa se/http/www.late
chcenter.com:80/latc/LATCVHOST/VirtualHostRoot/images/header _main_07.gif
[Sun Apr 28 23:57:11 2002] [error] [client 10.2.2.157] client denied by
server configuration:
proxy:http://prod-zope-knox01.cti-pet.com:8080/VirtualHostBa se/http/www.late
chcenter.com:80/latc/LATCVHOST/VirtualHostRoot/images/header _main_09.gif
[Sun Apr 28 23:57:11 2002] [error] [client 10.2.2.157] client denied by
server configuration:
proxy:http://prod-zope-knox01.cti-pet.com:8080/VirtualHostBa se/http/www.late
chcenter.com:80/latc/LATCVHOST/VirtualHostRoot/images/spacer .gif
[Sun Apr 28 23:57:11 2002] [error] [client 10.2.2.157] client denied by
server configuration:
proxy:http://prod-zope-knox01.cti-pet.com:8080/VirtualHostBa se/http/www.late
chcenter.com:80/latc/LATCVHOST/VirtualHostRoot/images/new_fr ontpage_01.gif

----- Original Message -----
From: "Graham Leggett"
To:
Sent: Wednesday, May 01, 2002 5:13 PM
Subject: Re: mod_wl_ssl and mod_proxy/mod_rewrite not playing nice?


> Matt Gregory wrote:
>
> > Did nothing. No response code from apache at all. As far as what the
root
> > problem was, I really have no idea.
>
> Still too vague: Define "did nothing". Did the proxy just hang when you
> tried to connect to it? Did it eventually time out? (Did you give it an
> opportunity to time out?). Did the proxy just close the socket on you
> without saying anything? Was anything logged in the error log (have you
> jacked up the LogLevel to "debug"?)
>
> Without giving me a description of exactly what is happening, I cannot
> help you.
>
> Regards,
> Graham
> --
> -----------------------------------------
> minfrin@sharp.fm "There's a moon
> over Bourbon Street
> tonight..."

Re: mod_wl_ssl and mod_proxy/mod_rewrite not playing nice?

am 02.05.2002 16:16:55 von Matt Gregory

I don't know if you are working on a response to this, but it looks to me
like mod_proxy must be getting all the destination stuff like it should, but
refusing to send it to the client. I wonder what might be causing this?

----- Original Message -----
From: "Matt Gregory"
To:
Sent: Wednesday, May 01, 2002 5:35 PM
Subject: Re: mod_wl_ssl and mod_proxy/mod_rewrite not playing nice?


> Yes, it did time out.
>
> Some notes:
> the virtual host in this example is www.latechcenter.com
> the actual server hosting the site is located at prod-zope-knox01:8080
> Zope's Virtal Host Monster (rewrites relative links) is located at
> /latc/LATCVHOST
>
> Here is the error log from apache
> [Sun Apr 28 23:52:26 2002] [error] [client 10.2.2.157] client denied by
> server configuration:
>
proxy:http://prod-zope-knox01.cti-pet.com:8080/VirtualHostBa se/http/www.late
> chcenter.com:80/latc/LATCVHOST/VirtualHostRoot/
> [Sun Apr 28 23:52:31 2002] [error] [client 10.2.2.157] client denied by
> server configuration:
>
proxy:http://prod-zope-knox01.cti-pet.com:8080/VirtualHostBa se/http/www.late
> chcenter.com:80/latc/LATCVHOST/VirtualHostRoot/
> [Sun Apr 28 23:54:43 2002] [error] [client 10.2.2.157] client denied by
> server configuration:
>
proxy:http://prod-zope-knox01.cti-pet.com:8080/VirtualHostBa se/http/www.late
> chcenter.com:80/latc/LATCVHOST/VirtualHostRoot/manage_page_s tyle.css
> [Sun Apr 28 23:54:43 2002] [error] [client 10.2.2.157] client denied by
> server configuration:
>
proxy:http://prod-zope-knox01.cti-pet.com:8080/VirtualHostBa se/http/www.late
> chcenter.com:80/latc/LATCVHOST/VirtualHostRoot/p_/ZopeButton
> [Sun Apr 28 23:54:51 2002] [error] [client 10.2.2.157] client denied by
> server configuration:
>
proxy:http://prod-zope-knox01.cti-pet.com:8080/VirtualHostBa se/http/www.late
> chcenter.com:80/latc/LATCVHOST/VirtualHostRoot/manage_page_s tyle.css
> [Sun Apr 28 23:54:51 2002] [error] [client 10.2.2.157] client denied by
> server configuration:
>
proxy:http://prod-zope-knox01.cti-pet.com:8080/VirtualHostBa se/http/www.late
> chcenter.com:80/latc/LATCVHOST/VirtualHostRoot/p_/ZopeButton
> [Sun Apr 28 23:55:56 2002] [error] [client 10.2.2.157] client denied by
> server configuration:
>
proxy:http://prod-zope-knox01.cti-pet.com:8080/VirtualHostBa se/http/www.late
> chcenter.com:80/latc/LATCVHOST/VirtualHostRoot/p_/ZopeButton
> [Sun Apr 28 23:55:56 2002] [error] [client 10.2.2.157] client denied by
> server configuration:
>
proxy:http://prod-zope-knox01.cti-pet.com:8080/VirtualHostBa se/http/www.late
> chcenter.com:80/latc/LATCVHOST/VirtualHostRoot/manage_page_s tyle.css
> [Sun Apr 28 23:57:11 2002] [error] [client 10.2.2.157] client denied by
> server configuration:
>
proxy:http://prod-zope-knox01.cti-pet.com:8080/VirtualHostBa se/http/www.late
> chcenter.com:80/latc/LATCVHOST/VirtualHostRoot/images/header _main_01.gif
> [Sun Apr 28 23:57:11 2002] [error] [client 10.2.2.157] client denied by
> server configuration:
>
proxy:http://prod-zope-knox01.cti-pet.com:8080/VirtualHostBa se/http/www.late
> chcenter.com:80/latc/LATCVHOST/VirtualHostRoot/images/header _main_02.gif
> [Sun Apr 28 23:57:11 2002] [error] [client 10.2.2.157] client denied by
> server configuration:
>
proxy:http://prod-zope-knox01.cti-pet.com:8080/VirtualHostBa se/http/www.late
> chcenter.com:80/latc/LATCVHOST/VirtualHostRoot/images/logo.g if
> [Sun Apr 28 23:57:11 2002] [error] [client 10.2.2.157] client denied by
> server configuration:
>
proxy:http://prod-zope-knox01.cti-pet.com:8080/VirtualHostBa se/http/www.late
> chcenter.com:80/latc/LATCVHOST/VirtualHostRoot/images/header _main_04.gif
> [Sun Apr 28 23:57:11 2002] [error] [client 10.2.2.157] client denied by
> server configuration:
>
proxy:http://prod-zope-knox01.cti-pet.com:8080/VirtualHostBa se/http/www.late
> chcenter.com:80/latc/LATCVHOST/VirtualHostRoot/images/header _main_05.gif
> [Sun Apr 28 23:57:11 2002] [error] [client 10.2.2.157] client denied by
> server configuration:
>
proxy:http://prod-zope-knox01.cti-pet.com:8080/VirtualHostBa se/http/www.late
> chcenter.com:80/latc/LATCVHOST/VirtualHostRoot/images/home.g if
> [Sun Apr 28 23:57:11 2002] [error] [client 10.2.2.157] client denied by
> server configuration:
>
proxy:http://prod-zope-knox01.cti-pet.com:8080/VirtualHostBa se/http/www.late
> chcenter.com:80/latc/LATCVHOST/VirtualHostRoot/images/header _main_08.gif
> [Sun Apr 28 23:57:11 2002] [error] [client 10.2.2.157] client denied by
> server configuration:
>
proxy:http://prod-zope-knox01.cti-pet.com:8080/VirtualHostBa se/http/www.late
> chcenter.com:80/latc/LATCVHOST/VirtualHostRoot/images/header _main_07.gif
> [Sun Apr 28 23:57:11 2002] [error] [client 10.2.2.157] client denied by
> server configuration:
>
proxy:http://prod-zope-knox01.cti-pet.com:8080/VirtualHostBa se/http/www.late
> chcenter.com:80/latc/LATCVHOST/VirtualHostRoot/images/header _main_09.gif
> [Sun Apr 28 23:57:11 2002] [error] [client 10.2.2.157] client denied by
> server configuration:
>
proxy:http://prod-zope-knox01.cti-pet.com:8080/VirtualHostBa se/http/www.late
> chcenter.com:80/latc/LATCVHOST/VirtualHostRoot/images/spacer .gif
> [Sun Apr 28 23:57:11 2002] [error] [client 10.2.2.157] client denied by
> server configuration:
>
proxy:http://prod-zope-knox01.cti-pet.com:8080/VirtualHostBa se/http/www.late
> chcenter.com:80/latc/LATCVHOST/VirtualHostRoot/images/new_fr ontpage_01.gif
>
> ----- Original Message -----
> From: "Graham Leggett"
> To:
> Sent: Wednesday, May 01, 2002 5:13 PM
> Subject: Re: mod_wl_ssl and mod_proxy/mod_rewrite not playing nice?
>
>
> > Matt Gregory wrote:
> >
> > > Did nothing. No response code from apache at all. As far as what the
> root
> > > problem was, I really have no idea.
> >
> > Still too vague: Define "did nothing". Did the proxy just hang when you
> > tried to connect to it? Did it eventually time out? (Did you give it an
> > opportunity to time out?). Did the proxy just close the socket on you
> > without saying anything? Was anything logged in the error log (have you
> > jacked up the LogLevel to "debug"?)
> >
> > Without giving me a description of exactly what is happening, I cannot
> > help you.
> >
> > Regards,
> > Graham
> > --
> > -----------------------------------------
> > minfrin@sharp.fm "There's a moon
> > over Bourbon Street
> > tonight..."
>
>

Re: mod_wl_ssl and mod_proxy/mod_rewrite not playing nice?

am 02.05.2002 16:46:58 von Graham Leggett

This is a cryptographically signed message in MIME format.

--------------ms7E5BD3F383A0058F8B155BFF
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit

Matt Gregory wrote:

> Yes, it did time out.
>
> Some notes:
> the virtual host in this example is www.latechcenter.com
> the actual server hosting the site is located at prod-zope-knox01:8080
> Zope's Virtal Host Monster (rewrites relative links) is located at
> /latc/LATCVHOST
>
> Here is the error log from apache
> [Sun Apr 28 23:52:26 2002] [error] [client 10.2.2.157] client denied by
> server configuration:
> proxy:http://prod-zope-knox01.cti-pet.com:8080/VirtualHostBa se/http/www.late
> chcenter.com:80/latc/LATCVHOST/VirtualHostRoot/

First thing to check - is apache not specifically configured to deny
access to the proxy (key words are "denied due to server
configuration"). A location block with a "proxy:" in it is likely to
cause hassles. Make sure it's commented out, and that ProxyRequests is
either commented out, or set to "Off" (you want a reverse proxy, not a
forward proxy).

The second thing to check is whether the ":" character in the path is
not causing a problem. Try reverse proxying a directory just for testing
that does not contain a ":", and see if that works - if it does, then
there is a bug.

Regards,
Graham
--
-----------------------------------------
minfrin@sharp.fm "There's a moon
over Bourbon Street
tonight..."
--------------ms7E5BD3F383A0058F8B155BFF
Content-Type: application/x-pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
Content-Description: S/MIME Cryptographic Signature

MIIHyAYJKoZIhvcNAQcCoIIHuTCCB7UCAQExCzAJBgUrDgMCGgUAMAsGCSqG SIb3DQEHAaCC
BcYwggKVMIIB/qADAgECAgMEyOwwDQYJKoZIhvcNAQEEBQAwgZIxCzAJBgNV BAYTAlpBMRUw
EwYDVQQIEwxXZXN0ZXJuIENhcGUxEjAQBgNVBAcTCUNhcGUgVG93bjEPMA0G A1UEChMGVGhh
d3RlMR0wGwYDVQQLExRDZXJ0aWZpY2F0ZSBTZXJ2aWNlczEoMCYGA1UEAxMf UGVyc29uYWwg
RnJlZW1haWwgUlNBIDIwMDAuOC4zMDAeFw0wMTA1MTEwMDE3NDZaFw0wMjA1 MTEwMDE3NDZa
MF0xEDAOBgNVBAQTB0xlZ2dldHQxDzANBgNVBCoTBkdyYWhhbTEXMBUGA1UE AxMOR3JhaGFt
IExlZ2dldHQxHzAdBgkqhkiG9w0BCQEWEG1pbmZyaW5Ac2hhcnAuZm0wgZ8w DQYJKoZIhvcN
AQEBBQADgY0AMIGJAoGBALX2zJvQ/9l+sCEpkfMNNwtnMcF8vmPM2sRpibT5 nR87bYWyLVCt
XXWXU+UyDOkiQJt6UahnmYZV7u40a1/osbNnjHjyNybejOuUFjHYy1gDwjsE lnxYbRRA2SZc
CmrZ4V0QFI0ZKuimGryZQj77UroiIV+Qq+v+PaxDEGwiqJqnAgMBAAGjLTAr MBsGA1UdEQQU
MBKBEG1pbmZyaW5Ac2hhcnAuZm0wDAYDVR0TAQH/BAIwADANBgkqhkiG9w0B AQQFAAOBgQCO
l5bH8JXuFM+EZi01jfezzKML5iPBHx4BDj/4gl2lXw1t0v6o+9442F6TpnOV Ak3LL1KTupvc
HfM+Bn71iWuD8ASCoSsmVpeoCbOv3lPGltrDgywcmM8phZyK1hHLvvJgfd4I MZbuH/rm0ZWp
WjRORFfik8yuO9DgahgjgAhkujCCAykwggKSoAMCAQICAQwwDQYJKoZIhvcN AQEEBQAwgdEx
CzAJBgNVBAYTAlpBMRUwEwYDVQQIEwxXZXN0ZXJuIENhcGUxEjAQBgNVBAcT CUNhcGUgVG93
bjEaMBgGA1UEChMRVGhhd3RlIENvbnN1bHRpbmcxKDAmBgNVBAsTH0NlcnRp ZmljYXRpb24g
U2VydmljZXMgRGl2aXNpb24xJDAiBgNVBAMTG1RoYXd0ZSBQZXJzb25hbCBG cmVlbWFpbCBD
QTErMCkGCSqGSIb3DQEJARYccGVyc29uYWwtZnJlZW1haWxAdGhhd3RlLmNv bTAeFw0wMDA4
MzAwMDAwMDBaFw0wMjA4MjkyMzU5NTlaMIGSMQswCQYDVQQGEwJaQTEVMBMG A1UECBMMV2Vz
dGVybiBDYXBlMRIwEAYDVQQHEwlDYXBlIFRvd24xDzANBgNVBAoTBlRoYXd0 ZTEdMBsGA1UE
CxMUQ2VydGlmaWNhdGUgU2VydmljZXMxKDAmBgNVBAMTH1BlcnNvbmFsIEZy ZWVtYWlsIFJT
QSAyMDAwLjguMzAwgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBAN4zMqZj xwklRT7Sbngn
Z4HF2ogZgpcO40QpimM1Km1wPPrcrvfudG8wvDOQf/k0caCjbZjxw0+iZdsN +kvx1t1hpfmF
zVWaNRqdknWoJ67Ycvm6AvbXsJHeHOmr4BgDqHxDQlBRh4M88Dm0m1SKE4f/ s5udSWYALQmJ
7JRr6aFpAgMBAAGjTjBMMCkGA1UdEQQiMCCkHjAcMRowGAYDVQQDExFQcml2 YXRlTGFiZWwx
LTI5NzASBgNVHRMBAf8ECDAGAQH/AgEAMAsGA1UdDwQEAwIBBjANBgkqhkiG 9w0BAQQFAAOB
gQBzG28mZYv/FTRLWWKK7US+ScfoDbuPuQ1qJipihB+4h2N0HG23zxpTkUvh zeY42e1Q9Dps
NJKs5pKcbsEjAcIJp+9LrnLdBmf1UG8uWLi2C8FQV7XsHNfvF7bViJu3ooga 7TlbOX00/LaW
GCVNavSdxcORL6mWuAU8Uvzd6WIDSDGCAcowggHGAgEBMIGaMIGSMQswCQYD VQQGEwJaQTEV
MBMGA1UECBMMV2VzdGVybiBDYXBlMRIwEAYDVQQHEwlDYXBlIFRvd24xDzAN BgNVBAoTBlRo
YXd0ZTEdMBsGA1UECxMUQ2VydGlmaWNhdGUgU2VydmljZXMxKDAmBgNVBAMT H1BlcnNvbmFs
IEZyZWVtYWlsIFJTQSAyMDAwLjguMzACAwTI7DAJBgUrDgMCGgUAoIGGMBgG CSqGSIb3DQEJ
AzELBgkqhkiG9w0BBwEwHAYJKoZIhvcNAQkFMQ8XDTAyMDUwMjE0NDY1OVow IwYJKoZIhvcN
AQkEMRYEFNb6Cmooh5+dgyJ4F1RUGBcKn5eMMCcGCSqGSIb3DQEJDzEaMBgw BwYFKw4DAgcw
DQYIKoZIhvcNAwICASgwDQYJKoZIhvcNAQEBBQAEgYBt1SFgHnXAwJaug5HE OUVKySVMX8km
PNM88TbYTS10LZ+NT0SS2Ihk9HtH4P3KGzojRYNr+FDu8oyVxkBba22HM9Wg 8uirYqI3kGan
E2RVv0Jl39mHGGnlmiICsGwb9EAsi/sA3kBH2dwAUzVIX9Q2tdYLsd3Jv2Sq N/co+R0Yrw==
--------------ms7E5BD3F383A0058F8B155BFF--

Re: mod_wl_ssl and mod_proxy/mod_rewrite not playing nice?

am 02.05.2002 18:07:47 von Matt Gregory

I kindof doubt it. I copied the exact virtual host block from one server to
another which wasn't running mod_wl_ssl and the other server proxied just
like I expected it to.

Re: mod_wl_ssl and mod_proxy/mod_rewrite not playing nice?

am 02.05.2002 21:04:14 von Graham Leggett

This is a cryptographically signed message in MIME format.

--------------ms39CD8A5FC67E7FD3B0CB3FC1
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit

Matt Gregory wrote:

> I kindof doubt it. I copied the exact virtual host block from one server to
> another which wasn't running mod_wl_ssl and the other server proxied just
> like I expected it to.

Well, can you check?

If I cannot narrow the problem down, I cannot determine what is wrong.
If I cannot determine what is wrong, there is no way I can fix it.
Please help me to help you.

Regards,
Graham
--
-----------------------------------------
minfrin@sharp.fm "There's a moon
over Bourbon Street
tonight..."
--------------ms39CD8A5FC67E7FD3B0CB3FC1
Content-Type: application/x-pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
Content-Description: S/MIME Cryptographic Signature

MIIHyAYJKoZIhvcNAQcCoIIHuTCCB7UCAQExCzAJBgUrDgMCGgUAMAsGCSqG SIb3DQEHAaCC
BcYwggKVMIIB/qADAgECAgMEyOwwDQYJKoZIhvcNAQEEBQAwgZIxCzAJBgNV BAYTAlpBMRUw
EwYDVQQIEwxXZXN0ZXJuIENhcGUxEjAQBgNVBAcTCUNhcGUgVG93bjEPMA0G A1UEChMGVGhh
d3RlMR0wGwYDVQQLExRDZXJ0aWZpY2F0ZSBTZXJ2aWNlczEoMCYGA1UEAxMf UGVyc29uYWwg
RnJlZW1haWwgUlNBIDIwMDAuOC4zMDAeFw0wMTA1MTEwMDE3NDZaFw0wMjA1 MTEwMDE3NDZa
MF0xEDAOBgNVBAQTB0xlZ2dldHQxDzANBgNVBCoTBkdyYWhhbTEXMBUGA1UE AxMOR3JhaGFt
IExlZ2dldHQxHzAdBgkqhkiG9w0BCQEWEG1pbmZyaW5Ac2hhcnAuZm0wgZ8w DQYJKoZIhvcN
AQEBBQADgY0AMIGJAoGBALX2zJvQ/9l+sCEpkfMNNwtnMcF8vmPM2sRpibT5 nR87bYWyLVCt
XXWXU+UyDOkiQJt6UahnmYZV7u40a1/osbNnjHjyNybejOuUFjHYy1gDwjsE lnxYbRRA2SZc
CmrZ4V0QFI0ZKuimGryZQj77UroiIV+Qq+v+PaxDEGwiqJqnAgMBAAGjLTAr MBsGA1UdEQQU
MBKBEG1pbmZyaW5Ac2hhcnAuZm0wDAYDVR0TAQH/BAIwADANBgkqhkiG9w0B AQQFAAOBgQCO
l5bH8JXuFM+EZi01jfezzKML5iPBHx4BDj/4gl2lXw1t0v6o+9442F6TpnOV Ak3LL1KTupvc
HfM+Bn71iWuD8ASCoSsmVpeoCbOv3lPGltrDgywcmM8phZyK1hHLvvJgfd4I MZbuH/rm0ZWp
WjRORFfik8yuO9DgahgjgAhkujCCAykwggKSoAMCAQICAQwwDQYJKoZIhvcN AQEEBQAwgdEx
CzAJBgNVBAYTAlpBMRUwEwYDVQQIEwxXZXN0ZXJuIENhcGUxEjAQBgNVBAcT CUNhcGUgVG93
bjEaMBgGA1UEChMRVGhhd3RlIENvbnN1bHRpbmcxKDAmBgNVBAsTH0NlcnRp ZmljYXRpb24g
U2VydmljZXMgRGl2aXNpb24xJDAiBgNVBAMTG1RoYXd0ZSBQZXJzb25hbCBG cmVlbWFpbCBD
QTErMCkGCSqGSIb3DQEJARYccGVyc29uYWwtZnJlZW1haWxAdGhhd3RlLmNv bTAeFw0wMDA4
MzAwMDAwMDBaFw0wMjA4MjkyMzU5NTlaMIGSMQswCQYDVQQGEwJaQTEVMBMG A1UECBMMV2Vz
dGVybiBDYXBlMRIwEAYDVQQHEwlDYXBlIFRvd24xDzANBgNVBAoTBlRoYXd0 ZTEdMBsGA1UE
CxMUQ2VydGlmaWNhdGUgU2VydmljZXMxKDAmBgNVBAMTH1BlcnNvbmFsIEZy ZWVtYWlsIFJT
QSAyMDAwLjguMzAwgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBAN4zMqZj xwklRT7Sbngn
Z4HF2ogZgpcO40QpimM1Km1wPPrcrvfudG8wvDOQf/k0caCjbZjxw0+iZdsN +kvx1t1hpfmF
zVWaNRqdknWoJ67Ycvm6AvbXsJHeHOmr4BgDqHxDQlBRh4M88Dm0m1SKE4f/ s5udSWYALQmJ
7JRr6aFpAgMBAAGjTjBMMCkGA1UdEQQiMCCkHjAcMRowGAYDVQQDExFQcml2 YXRlTGFiZWwx
LTI5NzASBgNVHRMBAf8ECDAGAQH/AgEAMAsGA1UdDwQEAwIBBjANBgkqhkiG 9w0BAQQFAAOB
gQBzG28mZYv/FTRLWWKK7US+ScfoDbuPuQ1qJipihB+4h2N0HG23zxpTkUvh zeY42e1Q9Dps
NJKs5pKcbsEjAcIJp+9LrnLdBmf1UG8uWLi2C8FQV7XsHNfvF7bViJu3ooga 7TlbOX00/LaW
GCVNavSdxcORL6mWuAU8Uvzd6WIDSDGCAcowggHGAgEBMIGaMIGSMQswCQYD VQQGEwJaQTEV
MBMGA1UECBMMV2VzdGVybiBDYXBlMRIwEAYDVQQHEwlDYXBlIFRvd24xDzAN BgNVBAoTBlRo
YXd0ZTEdMBsGA1UECxMUQ2VydGlmaWNhdGUgU2VydmljZXMxKDAmBgNVBAMT H1BlcnNvbmFs
IEZyZWVtYWlsIFJTQSAyMDAwLjguMzACAwTI7DAJBgUrDgMCGgUAoIGGMBgG CSqGSIb3DQEJ
AzELBgkqhkiG9w0BBwEwHAYJKoZIhvcNAQkFMQ8XDTAyMDUwMjE5MDQxNVow IwYJKoZIhvcN
AQkEMRYEFFpRg0GFZd/YqAlfHNKjjopk/JQnMCcGCSqGSIb3DQEJDzEaMBgw BwYFKw4DAgcw
DQYIKoZIhvcNAwICASgwDQYJKoZIhvcNAQEBBQAEgYBDFgxQnDXEKdYmjb3P Yyzo7t7v5rdZ
Zle23JvrjI30JnHY8SR+C4hJQxo09B2MR9PWTK9R00R8VXEvnqgWUZEz80gb Vmfxw/mLI1pq
32pm4/yERUJwjrLabQ7NGeE+Nob/JxxaX1T21ejiltKHY7ZLAUMUpg5TWcKQ Nz3V9j7Bng==
--------------ms39CD8A5FC67E7FD3B0CB3FC1--