Cannot upload files from Firefox 2.0 to Apache HTTP proxy server

Cannot upload files from Firefox 2.0 to Apache HTTP proxy server

am 04.03.2010 13:22:47 von Baljeet Nijjhar

--00163600d09715a8ac0480f8a8d6
Content-Type: text/plain; charset=ISO-8859-1

Hi
I have tried to upload a Microsoft Excel file to my application server from
Firefox 2.0. The HTTP request goes over SSL to Oracle Apache 2 HTTP server
which is configured to act as a proxy server before passing the request to
my application server.
Packet sniffing indicates that the file contents are being sent from the
browser, but mysteriously getting 'lost' by the time they reach the
application server. i.e. the form fields relating to the file upload are no
longer present.
Are there any diagnostics I can perform or configuration I can check for the
proxy server as to why this is happening?
File uploads work fine with Internet Explorer 6. There are some minor
differences in the way HTTP requests get encoded for the two browsers, such
as the filename or content-type.
thanks, Baljeet.

--00163600d09715a8ac0480f8a8d6
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

Hi

I have tried to upload a Microsoft Excel file to my application server=
from Firefox 2.0. The HTTP request goes over SSL to Oracle Apache 2 HTTP s=
erver which is configured to act as a proxy server before passing the reque=
st to my application server.


Packet sniffing indicates that the file contents are being sent from t=
he browser, but mysteriously getting 'lost' by the time they reach =
the application server. i.e. the form fields relating to the file upload ar=
e no longer present.


Are there any diagnostics I can perform or configuration I can check f=
or the proxy server as to why this is happening?

File uploads work fine with Internet Explorer 6. There are some minor =
differences in the way HTTP requests get encoded for the two browsers, such=
as the filename or content-type.

thanks, Baljeet.


--00163600d09715a8ac0480f8a8d6--

password protecting a file that has parameters

am 04.03.2010 14:14:50 von Malka Cymbalista

--=__Part446E8D5A.0__=
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: quoted-printable

We are running apache 2.2.6 on a Linux maxchine.=20
=20
We have the following code in our httpd.conf file


AuthUserFile /WWW/httpd/conf/.htpasswd
AuthName "HP2010 Web Site"
AuthType Basic

require user organizer



=20
Every time someone goes to http://www1.weizmann.ac.il/MaKaC/confRegistratio=
nFormDisplay.py the person is indeed asked for a user name and password. =
However, http://www1.weizmann.ac.il/MaKaC/confRegistrationFormDisplay .py =
really takes parameters e.g.
http://www1.weizmann.ac.il/MaKaC/confRegistrationFormDisplay .py?confid=3D2
and what I really want to do is require a password only for certain =
parameter values. So
http://www1.weizmann.ac.il/MaKaC/confRegistrationFormDisplay .py?confid=3D2 =
would require a user and password but
http://www1.weizmann.ac.il/MaKaC/confRegistrationFormDisplay .py?confid=3D3w=
ould not require a user and password.
When I tried adding ?confid=3D3 to the directive, it did not =
work. =20
Is there any way to do this?
=20
thanks for any information.
=20



=20
=20
Malka Cymbalista
Webmaster, Weizmann Institute of Science
malki.cymbalista@weizmann.ac.il=20
08-934-3036

--=__Part446E8D5A.0__=
Content-Type: text/html; charset=US-ASCII
Content-Transfer-Encoding: quoted-printable
Content-Description: HTML





We =
are running apache 2.2.6 on  a Linux maxchine.

T> 

We =
have the following code in our httpd.conf file

<D=
irectory /usr/local/indico/MaKaC>

  size=3D3> <FilesMatch  "confRegistrationFormDisplay.py">
&nbs=
p;   AuthUserFile /WWW/httpd/conf/.htpasswd
   =
AuthName "HP2010 Web Site"
    AuthType Basic
 &=
nbsp;  <Limit GET>
    require user organizer<=
BR>    </Limit>
  </FilesMatch>
style=3D"FONT: 10pt Tahoma; COLOR: #000000"></Directory >
NT>

10pt Tahoma; COLOR: #000000">  IV>
10pt Tahoma; COLOR: #000000">Every time someone goes to =
lay.py">http://www1.weizmann.ac.il/MaKaC/confRegistrationFor=
mDisplay.py
 the person is indeed asked for =
a user name and password.  However,
mann.ac.il/MaKaC/confRegistrationFormDisplay.py">http://www1=
..weizmann.ac.il/MaKaC/confRegistrationFormDisplay.py
size=3D3> really takes parameters e.g.

10pt Tahoma; COLOR: #000000"> #000000"> //www1.weizmann.ac.il/MaKaC/confRegistrationFormDisplay.py?c onfid=3D2"> T size=3D3>http://www1.weizmann.ac.il/MaKaC/confRegistrationFo rmDisplay.py?=
confid=3D2

10pt Tahoma; COLOR: #000000">and what I really want to do =
is require a password only for certain parameter values. So
SPAN>

10pt Tahoma; COLOR: #000000"> #000000"> //www1.weizmann.ac.il/MaKaC/confRegistrationFormDisplay.py?c onfid=3D2"> T size=3D3>http://www1.weizmann.ac.il/MaKaC/confRegistrationFo rmDisplay.py?=
confid=3D2
 would require a user and =
password but

10pt Tahoma; COLOR: #000000"> #000000"> ONT: 10pt Tahoma; COLOR: #000000"> #000000"> splay.py?confid=3D3">http://www1.weizmann.ac.il/MaKaC/confRe=
gistrationFormDisplay.py?confid=3D3
would not =
require a user and password.
N>

10pt Tahoma; COLOR: #000000"> #000000"> ONT: 10pt Tahoma; COLOR: #000000"> #000000">When I tried adding ?confid=3D3 to the <FilesMat=
ch> directive, it did not work. 
>

10pt Tahoma; COLOR: #000000"> #000000"> ONT: 10pt Tahoma; COLOR: #000000"> #000000">Is there any way to do this? SPAN>

10pt Tahoma; COLOR: #000000"> #000000"> ONT: 10pt Tahoma; COLOR: #000000"> #000000">&n=
bsp;

10pt Tahoma; COLOR: #000000"> #000000"> ONT: 10pt Tahoma; COLOR: #000000"> #000000">thanks for any information. PAN>

#000000"> 



 

 


Malka Cymbalista
Webmaster, Weizmann Institute of Science
malki.=
cymbalista@weizmann.ac.il
08-934-3036
HTML>

--=__Part446E8D5A.0__=--

Re: password protecting a file that has parameters

am 04.03.2010 14:29:54 von Nilesh Govindrajan

--0015175774124f23ce0480f99938
Content-Type: text/plain; charset=ISO-8859-1

On Thu, Mar 4, 2010 at 6:44 PM, Malka Cymbalista <
Malki.Cymbalista@weizmann.ac.il> wrote:

> We are running apache 2.2.6 on a Linux maxchine.
>
> We have the following code in our httpd.conf file
>
>
> AuthUserFile /WWW/httpd/conf/.htpasswd
> AuthName "HP2010 Web Site"
> AuthType Basic
>
> require user organizer
>

>

>

>
> Every time someone goes to
> http://www1.weizmann.ac.il/MaKaC/confRegistrationFormDisplay .py the person
> is indeed asked for a user name and password. However,
> http://www1.weizmann.ac.il/MaKaC/confRegistrationFormDisplay .py really
> takes parameters e.g.
> http://www1.weizmann.ac.il/MaKaC/confRegistrationFormDisplay .py?confid=2
> and what I really want to do is require a password only for certain
> parameter values. So
> http://www1.weizmann.ac.il/MaKaC/confRegistrationFormDisplay .py?confid=2 would
> require a user and password but
> http://www1.weizmann.ac.il/MaKaC/confRegistrationFormDisplay .py?confid=3would not require a user and password.
> When I tried adding ?confid=3 to the directive, it did not
> work.
> Is there any way to do this?
>
> thanks for any information.
>
>
>
>
> Malka Cymbalista
> Webmaster, Weizmann Institute of Science
> malki.cymbalista@weizmann.ac.il
> 08-934-3036
>

There's no solution with FilesMatch or LocationMatch. But a possible
solution would be using mod_setenvif. I doubt if query string checking is
there with mod_setenvif. If its there, you could set an env variable and
depending on that configure auth.

--
Nilesh Govindarajan
Site & Server Administrator
www.itech7.com

--0015175774124f23ce0480f99938
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

On Thu, Mar 4, 2010 at 6:44 PM, Malka Cymbalista=
<M=
alki.Cymbalista@weizmann.ac.il
>
wrote:
=3D"gmail_quote" style=3D"margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid=
rgb(204, 204, 204); padding-left: 1ex;">





3">We are running apache 2.2.6 on=A0 a Linux maxchine.

3">=A0

3">We have the following code in our httpd.conf file

3"><Directory /usr/local/indico/MaKaC>

=A0 =3D"3"> <FilesMatch=A0 "confRegistrationFormDisplay.py"> >  =A0 AuthUserFile /WWW/httpd/conf/.htpasswd
  =A0 AuthName &qu=
ot;HP2010 Web Site"


  =A0 AuthType Basic
  =A0 <Limit GET>
  =A0 requir=
e user organizer
  =A0 </Limit>
=A0 </FilesMatch>
=
</Directory >=



"font: 10pt Tahoma; color: rgb(0, 0, 0);"> span>=A0

"font: 10pt Tahoma; color: rgb(0, 0, 0);">Every time someo=
ne goes to
ionFormDisplay.py" target=3D"_blank">http://www1.weizmann.=
ac.il/MaKaC/confRegistrationFormDisplay.py
=A0th=
e person is indeed asked for a user name and password.=A0 However,
<=
a href=3D"http://www1.weizmann.ac.il/MaKaC/confRegistrationFor mDisplay.py" =
target=3D"_blank">http://www1.weizmann.ac.il/MaKaC/confReg=
istrationFormDisplay.py
=A0really takes paramete=
rs e.g.






"font: 10pt Tahoma; color: rgb(0, 0, 0);">and what I reall=
y want to do is require a password only for certain parameter values. So ont>



"font: 10pt Tahoma; color: rgb(0, 0, 0);"> color: rgb(0, 0, 0);"> );"> ..py?confid=3D2" target=3D"_blank">http://www1.weizmann.ac.=
il/MaKaC/confRegistrationFormDisplay.py?confid=3D2
3">=A0would require a user and password but
an>



"font: 10pt Tahoma; color: rgb(0, 0, 0);"> color: rgb(0, 0, 0);"> );"> font: 10pt Tahoma; color: rgb(0, 0, 0);"> ..il/MaKaC/confRegistrationFormDisplay.py?confid=3D3" target=3D"_blank"> t size=3D"3">http://www1.weizmann.ac.il/MaKaC/confRegistration FormDisplay.p=
y?confid=3D3
would not require a user and passw=
ord.



"font: 10pt Tahoma; color: rgb(0, 0, 0);"> color: rgb(0, 0, 0);"> );"> font: 10pt Tahoma; color: rgb(0, 0, 0);">When I tried addi=
ng ?confid=3D3 to the <FilesMatch> directive, it did not work.=A0 ont>



"font: 10pt Tahoma; color: rgb(0, 0, 0);"> color: rgb(0, 0, 0);"> );"> font: 10pt Tahoma; color: rgb(0, 0, 0);">Is there any way =
to do this?



"font: 10pt Tahoma; color: rgb(0, 0, 0);"> color: rgb(0, 0, 0);"> );"> font: 10pt Tahoma; color: rgb(0, 0, 0);"> pan>=A0



"font: 10pt Tahoma; color: rgb(0, 0, 0);"> color: rgb(0, 0, 0);"> );"> font: 10pt Tahoma; color: rgb(0, 0, 0);">thanks for any in=
formation.



, 0, 0);">=A0



=A0

=A0


Malka Cymbalista
Webmaster, Weizmann Institute of Science
f=3D"mailto:malki.cymbalista@weizmann.ac.il" target=3D"_blank">malki.cymbal=
ista@weizmann.ac.il

08-934-3036


There's no solution with FilesMatch or LocationM=
atch. But a possible solution would be using mod_setenvif. I doubt if query=
string checking is there with mod_setenvif. If its there, you could set an=
env variable and depending on that configure auth.



--
Nilesh Govindarajan
Site & Server Administrator
f=3D"http://www.itech7.com">www.itech7.com



--0015175774124f23ce0480f99938--

Re: Cannot upload files from Firefox 2.0 to Apache HTTP

am 05.03.2010 06:34:56 von Krist van Besien

On Thu, Mar 4, 2010 at 1:22 PM, Baljeet Nijjhar
wrote:
> Hi
> I have tried to upload a Microsoft Excel file to my application server from
> Firefox 2.0. The HTTP request goes over SSL to Oracle Apache 2 HTTP server
> which is configured to act as a proxy server before passing the request to
> my application server.
> Packet sniffing indicates that the file contents are being sent from the
> browser, but mysteriously getting 'lost' by the time they reach the
> application server. i.e. the form fields relating to the file upload are no
> longer present.

You have sniffed the network both before and after the proxy right?
Have you looked for anything in your error files?

> Are there any diagnostics I can perform or configuration I can check for the
> proxy server as to why this is happening?

This should not be happening however...

> File uploads work fine with Internet Explorer 6. There are some minor
> differences in the way HTTP requests get encoded for the two browsers, such
> as the filename or content-type.

This could ofcourse be a case of your application server not being
http/html complient. As Internet Explorer is less picky that could
explain things.

What happens if you do the test directly to the application server,
bypassing the proxy?

Krist


--
krist.vanbesien@gmail.com
krist@vanbesien.org
Bremgarten b. Bern, Switzerland
--
A: It reverses the normal flow of conversation.
Q: What's wrong with top-posting?
A: Top-posting.
Q: What's the biggest scourge on plain text email discussions?

------------------------------------------------------------ ---------
The official User-To-User support forum of the Apache HTTP Server Project.
See for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

Re: Cannot upload files from Firefox 2.0 to Apache HTTP

am 05.03.2010 11:11:26 von Baljeet Nijjhar

--00504502d3ce39c7a804810af0d6
Content-Type: text/plain; charset=ISO-8859-1

Hi, thanks, I'll try to answer the questions.
Yes we have sniffed before and after the proxy. We can't exactly determine
if it reaches the proxy as it is over SSL and thus encrypted but using e.g.
HTTP Debugger shows me it is leaving the browser.
We can upload the file directly to the application server (not over SSL).
I haven't seen anything in the error logs. One thing I need to check is
whether it is a particular file type (e.g. Excel) or whether all files get
dumped if sent from Firefox.
thanks, Baljeet.

On Fri, Mar 5, 2010 at 5:34 AM, Krist van Besien
wrote:

> On Thu, Mar 4, 2010 at 1:22 PM, Baljeet Nijjhar
> wrote:
> > Hi
> > I have tried to upload a Microsoft Excel file to my application server
> from
> > Firefox 2.0. The HTTP request goes over SSL to Oracle Apache 2 HTTP
> server
> > which is configured to act as a proxy server before passing the request
> to
> > my application server.
> > Packet sniffing indicates that the file contents are being sent from the
> > browser, but mysteriously getting 'lost' by the time they reach the
> > application server. i.e. the form fields relating to the file upload are
> no
> > longer present.
>
> You have sniffed the network both before and after the proxy right?
> Have you looked for anything in your error files?
>
> > Are there any diagnostics I can perform or configuration I can check for
> the
> > proxy server as to why this is happening?
>
> This should not be happening however...
>
> > File uploads work fine with Internet Explorer 6. There are some minor
> > differences in the way HTTP requests get encoded for the two browsers,
> such
> > as the filename or content-type.
>
> This could ofcourse be a case of your application server not being
> http/html complient. As Internet Explorer is less picky that could
> explain things.
>
> What happens if you do the test directly to the application server,
> bypassing the proxy?
>
> Krist
>
>
> --
> krist.vanbesien@gmail.com
> krist@vanbesien.org
> Bremgarten b. Bern, Switzerland
> --
> A: It reverses the normal flow of conversation.
> Q: What's wrong with top-posting?
> A: Top-posting.
> Q: What's the biggest scourge on plain text email discussions?
>
> ------------------------------------------------------------ ---------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> " from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>
>

--00504502d3ce39c7a804810af0d6
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

Hi, thanks, I'll try to answer the questions.

Yes we have sniffed before and after the proxy. We can't exactly d=
etermine if it reaches the proxy as it is over SSL and thus encrypted but u=
sing e.g. HTTP Debugger shows me it is leaving the browser.

We can upload the file directly to the application server (not over SS=
L).

I haven't seen anything in the error logs. One thing I need to che=
ck is whether it is a particular file type (e.g. Excel) or whether all file=
s get dumped if sent from Firefox.

thanks, Baljeet.


On Fri, Mar 5, 2010 at 5:34 AM, Krist van Besien=
<krist.v=
anbesien@gmail.com
>
wrote:

px 0px 0.8ex; BORDER-LEFT: #ccc 1px solid">
On Thu, Mar 4, 2010 at 1:22 PM, Baljeet Nijjhar
< href=3D"mailto:baljeet.nijjhar@googlemail.com">baljeet.nijjh ar@googlemail.=
com> wrote:
> Hi
> I have tried to upload a Microsoft Ex=
cel file to my application server from

> Firefox 2.0. The HTTP request goes over SSL to Oracle Apache 2 HTTP se=
rver
> which is configured to act as a proxy server before passing th=
e request to
> my application server.
> Packet sniffing indicat=
es that the file contents are being sent from the

> browser, but mysteriously getting 'lost' by the time they reac=
h the
> application server. i.e. the form fields relating to the file=
upload are no
> longer present.

You have sniffed the ne=
twork both before and after the proxy right?

Have you looked for anything in your error files?


> Are there any diagnostics I can perform or confi=
guration I can check for the
> proxy server as to why this is happeni=
ng?

This should not be happening however...


> File uploads work fine with Internet Explorer 6.=
There are some minor
> differences in the way HTTP requests get enco=
ded for the two browsers, such
> as the filename or content-type.


This could ofcourse be a case of your application server not bein=
g
http/html complient. As Internet Explorer is less picky that could
=
explain things.

What happens if you do the test directly to the appl=
ication server,

bypassing the proxy?

Krist


--
vanbesien@gmail.com">krist.vanbesien@gmail.com
st@vanbesien.org">krist@vanbesien.org
Bremgarten b. Bern, Switzerlan=
d

--
A: It reverses the normal flow of conversation.
Q: What's wron=
g with top-posting?
A: Top-posting.
Q: What's the biggest scourge=
on plain text email discussions?

----------------------------------=
-----------------------------------

The official User-To-User support forum of the Apache HTTP Server Project.<=
br>See <URL: "_blank">http://httpd.apache.org/userslist.html> for more info.
T=
o unsubscribe, e-mail: ">users-unsubscribe@httpd.apache.org

=A0 " =A0 from the digest: httpd.apache.org">users-digest-unsubscribe@httpd.apache.org
For addi=
tional commands, e-mail: use=
rs-help@httpd.apache.org






--00504502d3ce39c7a804810af0d6--