From gibbsjoseph@example.org Tue Jun 01 16:04:10 2010 Return-Path: <gibbsjoseph@example.org> Delivered-To: gibbsjoseph@example.org Received: (qmail 96484 invoked from network); 1 Jun 2010 16:04:10 -0000 Received: from unknown (HELO mail.apache.org) (83.161.120.155) by 83.161.120.155 with SMTP; 1 Jun 2010 16:04:10 -0000 Received: (qmail 33897 invoked by uid 500); 1 Jun 2010 16:04:10 -0000 Delivered-To: gibbsjoseph@example.org Received: (qmail 33763 invoked by uid 500); 1 Jun 2010 16:04:09 -0000 Mailing-List: contact gibbsjoseph@example.org; run by ezmlm Precedence: bulk Reply-To: gibbsjoseph@example.org list-help: <mailto:gibbsjoseph@example.org> list-unsubscribe: <mailto:gibbsjoseph@example.org> List-Post: <mailto:gibbsjoseph@example.org> List-Id: <cvs.httpd.apache.org> Delivered-To: mailing list gibbsjoseph@example.org Received: (qmail 33755 invoked by uid 99); 1 Jun 2010 16:04:09 -0000 Received: from athena.apache.org (HELO athena.apache.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 01 Jun 2010 16:04:09 +0000 X-ASF-Spam-Status: No, hits=-1430.3 required=10.0 tests=ALL_TRUSTED,AWL X-Spam-Check-By: apache.org Received: from [83.161.120.155] (HELO eris.apache.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 01 Jun 2010 16:04:08 +0000 Received: by eris.apache.org (Postfix, from userid 65534) id 946C4238890D; Tue, 1 Jun 2010 16:03:48 +0000 (UTC) Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Subject: svn commit: r950134 - /httpd/httpd/trunk/STATUS Date: Tue, 01 Jun 2010 16:03:48 -0000 To: gibbsjoseph@example.org From: gibbsjoseph@example.org X-Mailer: svnmailer-1.0.8 Message-Id: <gibbsjoseph@example.org> Author: jim Date: Tue Jun 1 16:03:48 2010 New Revision: 950134 URL: http://svn.apache.org/viewvc?rev=950134&view=rev Log: not sure why blocker Modified: httpd/httpd/trunk/STATUS Modified: httpd/httpd/trunk/STATUS URL: http://svn.apache.org/viewvc/httpd/httpd/trunk/STATUS?rev=950134&r1=950133&r2=950134&view=diff ============================================================================== --- httpd/httpd/trunk/STATUS (original) +++ httpd/httpd/trunk/STATUS Tue Jun 1 16:03:48 2010 @@ -67,6 +67,8 @@ RELEASE SHOWSTOPPERS: * Not all MPMs are updated to set conn_r888a:dbb7:2d49:b3f6:8605:bf4e:caed:e5a4current_thread correctly. (Prefork, Worker, Event, Simple are updated). + jim sez: Then we just ship with those... mark any others as + experimental * Running the log_transaction hook from pool cleanup is fubar: From gibbsjoseph@example.org Tue Jun 01 21:19:36 2010 Return-Path: <gibbsjoseph@example.org> Delivered-To: gibbsjoseph@example.org Received: (qmail 70097 invoked from network); 1 Jun 2010 21:19:35 -0000 Received: from unknown (HELO mail.apache.org) (83.161.120.155) by 83.161.120.155 with SMTP; 1 Jun 2010 21:19:35 -0000 Received: (qmail 14980 invoked by uid 500); 1 Jun 2010 21:19:35 -0000 Delivered-To: gibbsjoseph@example.org Received: (qmail 14853 invoked by uid 500); 1 Jun 2010 21:19:35 -0000 Mailing-List: contact gibbsjoseph@example.org; run by ezmlm Precedence: bulk Reply-To: gibbsjoseph@example.org list-help: <mailto:gibbsjoseph@example.org> list-unsubscribe: <mailto:gibbsjoseph@example.org> List-Post: <mailto:gibbsjoseph@example.org> List-Id: <cvs.httpd.apache.org> Delivered-To: mailing list gibbsjoseph@example.org Received: (qmail 14846 invoked by uid 99); 1 Jun 2010 21:19:35 -0000 Received: from nike.apache.org (HELO nike.apache.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 01 Jun 2010 21:19:35 +0000 X-ASF-Spam-Status: No, hits=-2000.0 required=10.0 tests=ALL_TRUSTED X-Spam-Check-By: apache.org Received: from [83.161.120.155] (HELO eris.apache.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 01 Jun 2010 21:19:30 +0000 Received: by eris.apache.org (Postfix, from userid 65534) id 74AEC238890A; Tue, 1 Jun 2010 21:19:08 +0000 (UTC) Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Subject: svn commit: r950248 - in /httpd/httpd/trunk: CHANGES docs/manual/mod/mod_authnz_ldap.html.en docs/manual/mod/mod_authnz_ldap.xml modules/aaa/mod_authnz_ldap.c Date: Tue, 01 Jun 2010 21:19:07 -0000 To: gibbsjoseph@example.org From: gibbsjoseph@example.org X-Mailer: svnmailer-1.0.8 Message-Id: <gibbsjoseph@example.org> X-Virus-Checked: Checked by ClamAV on apache.org Author: covener Date: Tue Jun 1 21:19:06 2010 New Revision: 950248 URL: http://svn.apache.org/viewvc?rev=950248&view=rev Log: mod_authnz_ldap: Search or Comparison during authorization phase can use the credentials from the authentication phase (AuthLDAPSearchAsUSer,AuthLDAPCompareAsUser). PR 48340 Submitted by: Domenico Rotiroti, Eric Covener Reviewed by: Eric Covener Modified: httpd/httpd/trunk/CHANGES httpd/httpd/trunk/docs/manual/mod/mod_authnz_ldap.html.en httpd/httpd/trunk/docs/manual/mod/mod_authnz_ldap.xml httpd/httpd/trunk/modules/aaa/mod_authnz_ldap.c Modified: httpd/httpd/trunk/CHANGES URL: http://svn.apache.org/viewvc/httpd/httpd/trunk/CHANGES?rev=950248&r1=950247&r2=950248&view=diff ============================================================================== --- httpd/httpd/trunk/CHANGES [utf-8] (original) +++ httpd/httpd/trunk/CHANGES [utf-8] Tue Jun 1 21:19:06 2010 @@ -28,6 +28,11 @@ Changes with Apache 2.3.7 processing is completed, avoiding orphaned callback pointers. [Brett Gervasoni <brettg senseofsecurity.com>, Jeff Trawick] + *) mod_authnz_ldap: Search or Comparison during authorization phase + can use the credentials from the authentication phase + (AuthLDAPSearchAsUSer,AuthLDAPCompareAsUser). + PR 48340 [Domenico Rotiroti, Eric Covener] + *) mod_authnz_ldap: Allow the initial DN search during authentication to use the HTTP username/pass instead of an anonymous or hard-coded LDAP id (AuthLDAPInitialBindAsUser, AuthLDAPInitialBindPattern). Modified: httpd/httpd/trunk/docs/manual/mod/mod_authnz_ldap.html.en URL: http://svn.apache.org/viewvc/httpd/httpd/trunk/docs/manual/mod/mod_authnz_ldap.html.en?rev=950248&r1=950247&r2=950248&view=diff ============================================================================== --- httpd/httpd/trunk/docs/manual/mod/mod_authnz_ldap.html.en (original) +++ httpd/httpd/trunk/docs/manual/mod/mod_authnz_ldap.html.en Tue Jun 1 21:19:06 2010 @@ -64,6 +64,7 @@ for HTTP Basic authentication.</td></tr> <li><img alt="" src="../images/down.gif" /> <a href="#authldapbinddn">AuthLDAPBindDN</a></li> <li><img alt="" src="../images/down.gif" /> <a href="#authldapbindpassword">AuthLDAPBindPassword</a></li> <li><img alt="" src="../images/down.gif" /> <a href="#authldapcharsetconfig">AuthLDAPCharsetConfig</a></li> +<li><img alt="" src="../images/down.gif" /> <a href="#authldapcompareasuser">AuthLDAPCompareAsUser</a></li> <li><img alt="" src="../images/down.gif" /> <a href="#authldapcomparednonserver">AuthLDAPCompareDNOnServer</a></li> <li><img alt="" src="../images/down.gif" /> <a href="#authldapdereferencealiases">AuthLDAPDereferenceAliases</a></li> <li><img alt="" src="../images/down.gif" /> <a href="#authldapgroupattribute">AuthLDAPGroupAttribute</a></li> @@ -73,6 +74,7 @@ for HTTP Basic authentication.</td></tr> <li><img alt="" src="../images/down.gif" /> <a href="#authldapmaxsubgroupdepth">AuthLDAPMaxSubGroupDepth</a></li> <li><img alt="" src="../images/down.gif" /> <a href="#authldapremoteuserattribute">AuthLDAPRemoteUserAttribute</a></li> <li><img alt="" src="../images/down.gif" /> <a href="#authldapremoteuserisdn">AuthLDAPRemoteUserIsDN</a></li> +<li><img alt="" src="../images/down.gif" /> <a href="#authldapsearchasuser">AuthLDAPSearchAsUser</a></li> <li><img alt="" src="../images/down.gif" /> <a href="#authldapsubgroupattribute">AuthLDAPSubGroupAttribute</a></li> <li><img alt="" src="../images/down.gif" /> <a href="#authldapsubgroupclass">AuthLDAPSubGroupClass</a></li> <li><img alt="" src="../images/down.gif" /> <a href="#authldapurl">AuthLDAPUrl</a></li> @@ -872,6 +874,40 @@ authorization</td></tr> </div> <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div> +<div class="directive-section"><h2><a name="AuthLDAPCompareAsUser" id="AuthLDAPCompareAsUser">AuthLDAPCompareAsUser</a> <a name="authldapcompareasuser" id="authldapcompareasuser">Directive</a></h2> +<table class="directive"> +<tr><th><a href="directive-dict.html#Description">Description:</a></th><td>Use the authenticated users credentials to perform authorization comparisons</td></tr> +<tr><th><a href="directive-dict.html#Syntax">Syntax:</a></th><td><code>AuthLDAPCompareAsUser on|off</code></td></tr> +<tr><th><a href="directive-dict.html#Default">Default:</a></th><td><code>AuthLDAPCompareAsUser off</code></td></tr> +<tr><th><a href="directive-dict.html#Context">Context:</a></th><td>directory, .htaccess</td></tr> +<tr><th><a href="directive-dict.html#Override">Override:</a></th><td>AuthConfig</td></tr> +<tr><th><a href="directive-dict.html#Status">Status:</a></th><td>Extension</td></tr> +<tr><th><a href="directive-dict.html#Module">Module:</a></th><td>mod_authnz_ldap</td></tr> +<tr><th><a href="directive-dict.html#Compatibility">Compatibility:</a></th><td>Available in version 2.3.7 and later</td></tr> +</table> + <p>When set, and <code class="module"><a href="../mod/mod_authnz_ldap.html">mod_authnz_ldap</a></code> has authenticated the + user, comparisons for authorization use the credentials provided via + HTTP basic authentication instead of the servers own credentials.</p> + + <p> The <em>ldap-attribute</em>, <em>ldap-user</em>, and <em>ldap-group</em> (single-level only) + authorization checks use comparisons.</p> + + <p>This directive only has effect on the comparisons performed during + nested group processing when <code class="directive"><a href="#&#10; authldapsearchasuser"> + AuthLDAPSearchAsUser</a></code> is also enabled.</p> + + <p> This directive should only be used when your LDAP server doesn't + accept anonymous comparisons and you cannot use a dedicated + <code class="directive"><a href="#authldapbinddn">AuthLDAPBindDN</a></code>. + </p> + +<h3>See also</h3> +<ul> +<li><code class="directive"><a href="#authldapinitialbindasuser">AuthLDAPInitialBindAsUser</a></code></li> +<li><code class="directive"><a href="#authldapsearchasuser">AuthLDAPSearchAsUser</a></code></li> +</ul> +</div> +<div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div> <div class="directive-section"><h2><a name="AuthLDAPCompareDNOnServer" id="AuthLDAPCompareDNOnServer">AuthLDAPCompareDNOnServer</a> <a name="authldapcomparednonserver" id="authldapcomparednonserver">Directive</a></h2> <table class="directive"> <tr><th><a href="directive-dict.html#Description">Description:</a></th><td>Use the LDAP server to compare the DNs</td></tr> @@ -990,6 +1026,8 @@ own username, instead of anonymously or <ul> <li><code class="directive"><a href="../mod/mod_authnnz_ldap.html#authldapinitialbindpattern">AuthLDAPInitialBindPattern</a></code></li> <li><code class="directive"><a href="../mod/mod_authnnz_ldap.html#authldapbinddn">AuthLDAPBindDN</a></code></li> +<li><code class="directive"><a href="#authldapcompareasuser">AuthLDAPCompareAsUser</a></code></li> +<li><code class="directive"><a href="#authldapsearchasuser">AuthLDAPSearchAsUser</a></code></li> </ul> </div> <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div> @@ -1101,6 +1139,40 @@ environment variable</td></tr> </div> <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div> +<div class="directive-section"><h2><a name="AuthLDAPSearchAsUser" id="AuthLDAPSearchAsUser">AuthLDAPSearchAsUser</a> <a name="authldapsearchasuser" id="authldapsearchasuser">Directive</a></h2> +<table class="directive"> +<tr><th><a href="directive-dict.html#Description">Description:</a></th><td>Use the authenticated users credentials to perform authorization searches</td></tr> +<tr><th><a href="directive-dict.html#Syntax">Syntax:</a></th><td><code>AuthLDAPSearchAsUser on|off</code></td></tr> +<tr><th><a href="directive-dict.html#Default">Default:</a></th><td><code>AuthLDAPSearchAsUser off</code></td></tr> +<tr><th><a href="directive-dict.html#Context">Context:</a></th><td>directory, .htaccess</td></tr> +<tr><th><a href="directive-dict.html#Override">Override:</a></th><td>AuthConfig</td></tr> +<tr><th><a href="directive-dict.html#Status">Status:</a></th><td>Extension</td></tr> +<tr><th><a href="directive-dict.html#Module">Module:</a></th><td>mod_authnz_ldap</td></tr> +<tr><th><a href="directive-dict.html#Compatibility">Compatibility:</a></th><td>Available in version 2.3.7 and later</td></tr> +</table> + <p>When set, and <code class="module"><a href="../mod/mod_authnz_ldap.html">mod_authnz_ldap</a></code> has authenticated the + user, searches for authorization use the credentials provided via + HTTP basic authentication instead of the servers own credentials.</p> + + <p> The <em>ldap-filter</em> and <em>ldap-dn</em> authorization + checks use searches.</p> + + <p>This directive only has effect on the comparisons performed during + nested group processing when <code class="directive"><a href="#&#10; authldapcompareasuser"> + AuthLDAPCompareAsUser</a></code> is also enabled.</p> + + <p> This directive should only be used when your LDAP server doesn't + accept anonymous searches and you cannot use a dedicated + <code class="directive"><a href="#authldapbinddn">AuthLDAPBindDN</a></code>. + </p> + +<h3>See also</h3> +<ul> +<li><code class="directive"><a href="#authldapinitialbindasuser">AuthLDAPInitialBindAsUser</a></code></li> +<li><code class="directive"><a href="#authldapcompareasuser">AuthLDAPCompareAsUser</a></code></li> +</ul> +</div> +<div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div> <div class="directive-section"><h2><a name="AuthLDAPSubGroupAttribute" id="AuthLDAPSubGroupAttribute">AuthLDAPSubGroupAttribute</a> <a name="authldapsubgroupattribute" id="authldapsubgroupattribute">Directive</a></h2> <table class="directive"> <tr><th><a href="directive-dict.html#Description">Description:</a></th><td>Specifies the attribute labels, one value per Modified: httpd/httpd/trunk/docs/manual/mod/mod_authnz_ldap.xml URL: http://svn.apache.org/viewvc/httpd/httpd/trunk/docs/manual/mod/mod_authnz_ldap.xml?rev=950248&r1=950247&r2=950248&view=diff ============================================================================== --- httpd/httpd/trunk/docs/manual/mod/mod_authnz_ldap.xml (original) +++ httpd/httpd/trunk/docs/manual/mod/mod_authnz_ldap.xml Tue Jun 1 21:19:06 2010 @@ -837,6 +837,8 @@ own username, instead of anonymously or </usage> <seealso><directive module="mod_authnnz_ldap">AuthLDAPInitialBindPattern</directive></seealso> <seealso><directive module="mod_authnnz_ldap">AuthLDAPBindDN</directive></seealso> +<seealso><directive module="mod_authnz_ldap">AuthLDAPCompareAsUser</directive></seealso> +<seealso><directive module="mod_authnz_ldap">AuthLDAPSearchAsUser</directive></seealso> </directivesynopsis> <directivesynopsis> @@ -939,6 +941,38 @@ to perform a DN lookup</description> </directivesynopsis> <directivesynopsis> +<name>AuthLDAPCompareAsUser</name> +<description>Use the authenticated users credentials to perform authorization comparisons</description> +<syntax>AuthLDAPCompareAsUser on|off</syntax> +<default>AuthLDAPCompareAsUser off</default> +<contextlist><context>directory</context><context>.htaccess</context> +</contextlist> +<compatibility>Available in version 2.3.7 and later</compatibility> +<override>AuthConfig</override> + +<usage> + <p>When set, and <module>mod_authnz_ldap</module> has authenticated the + user, LDAP comparisons for authorization use the queried distinguished name (DN) + and HTTP basic authentication password of the authenticated user instead of + the servers configured credentials.</p> + + <p> The <em>ldap-attribute</em>, <em>ldap-user</em>, and <em>ldap-group</em> (single-level only) + authorization checks use comparisons.</p> + + <p>This directive only has effect on the comparisons performed during + nested group processing when <directive module="mod_authnz_ldap"> + AuthLDAPSearchAsUser</directive> is also enabled.</p> + + <p> This directive should only be used when your LDAP server doesn't + accept anonymous comparisons and you cannot use a dedicated + <directive module="mod_authnz_ldap">AuthLDAPBindDN</directive>. + </p> +</usage> +<seealso><directive module="mod_authnz_ldap">AuthLDAPInitialBindAsUser</directive></seealso> +<seealso><directive module="mod_authnz_ldap">AuthLDAPSearchAsUser</directive></seealso> +</directivesynopsis> + +<directivesynopsis> <name>AuthLDAPCompareDNOnServer</name> <description>Use the LDAP server to compare the DNs</description> <syntax>AuthLDAPCompareDNOnServer on|off</syntax> @@ -1086,6 +1120,38 @@ environment variable</description> </directivesynopsis> <directivesynopsis> +<name>AuthLDAPSearchAsUser</name> +<description>Use the authenticated users credentials to perform authorization searches</description> +<syntax>AuthLDAPSearchAsUser on|off</syntax> +<default>AuthLDAPSearchAsUser off</default> +<contextlist><context>directory</context><context>.htaccess</context> +</contextlist> +<compatibility>Available in version 2.3.7 and later</compatibility> +<override>AuthConfig</override> + +<usage> + <p>When set, and <module>mod_authnz_ldap</module> has authenticated the + user, LDAP searches for authorization use the queried distinguished name (DN) + and HTTP basic authentication password of the authenticated user instead of + the servers configured credentials.</p> + + <p> The <em>ldap-filter</em> and <em>ldap-dn</em> authorization + checks use searches.</p> + + <p>This directive only has effect on the comparisons performed during + nested group processing when <directive module="mod_authnz_ldap"> + AuthLDAPCompareAsUser</directive> is also enabled.</p> + + <p> This directive should only be used when your LDAP server doesn't + accept anonymous searches and you cannot use a dedicated + <directive module="mod_authnz_ldap">AuthLDAPBindDN</directive>. + </p> +</usage> +<seealso><directive module="mod_authnz_ldap">AuthLDAPInitialBindAsUser</directive></seealso> +<seealso><directive module="mod_authnz_ldap">AuthLDAPCompareAsUser</directive></seealso> +</directivesynopsis> + +<directivesynopsis> <name>AuthLDAPSubGroupAttribute</name> <description>Specifies the attribute labels, one value per directive line, used to distinguish the members of the current group that Modified: httpd/httpd/trunk/modules/aaa/mod_authnz_ldap.c URL: http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/aaa/mod_authnz_ldap.c?rev=950248&r1=950247&r2=950248&view=diff ============================================================================== --- httpd/httpd/trunk/modules/aaa/mod_authnz_ldap.c (original) +++ httpd/httpd/trunk/modules/aaa/mod_authnz_ldap.c Tue Jun 1 21:19:06 2010 @@ -83,18 +83,25 @@ typedef struct { int initial_bind_as_user; /* true if we should try to bind (to lookup DN) directly with the basic auth username */ ap_regex_t *bind_regex; /* basic auth -> bind'able username regex */ const char *bind_subst; /* basic auth -> bind'able username substitution */ + int search_as_user; /* true if authz searches should be done with the users credentials (when we did authn) */ + int compare_as_user; /* true if authz compares should be done with the users credentials (when we did authn) */ } authn_ldap_config_t; typedef struct { char *dn; /* The saved dn from a successful search */ char *user; /* The username provided by the client */ const char **vals; /* The additional values pulled during the DN search*/ + char *password; /* if this module successfully authenticates, the basic auth password, else null */ } authn_ldap_request_t; -enum auth_ldap_phase{ +enum auth_ldap_phase { LDAP_AUTHN, LDAP_AUTHZ }; - + +enum auth_ldap_optype { + LDAP_SEARCH, LDAP_COMPARE, LDAP_COMPARE_AND_SEARCH /* nested groups */ +}; + /* maximum group elements supported */ #define GROUPATTR_MAX_ELTS 10 @@ -412,6 +419,32 @@ static const char *ldap_determine_binddn return result; } + +/* Some LDAP servers restrict who can search or compare, and the hard-coded ID + * might be good for the DN lookup but not for later operations. + */ +static util_ldap_connection_t *get_connection_for_authz(request_rec *r, enum auth_ldap_optype type) { + authn_ldap_request_t *req = + (authn_ldap_request_t *)ap_get_module_config(r->request_config, &authnz_ldap_module); + authn_ldap_config_t *sec = + (authn_ldap_config_t *)ap_get_module_config(r->per_dir_config, &authnz_ldap_module); + + char *binddn = sec->binddn; + char *bindpw = sec->bindpw; + + /* If the per-request config isn't set, we didn't authenticate this user, and leave the default credentials */ + if (req && req->password && + ((type == LDAP_SEARCH && sec->search_as_user) || + (type == LDAP_COMPARE && sec->compare_as_user) || + (type == LDAP_COMPARE_AND_SEARCH && sec->compare_as_user && sec->search_as_user))){ + binddn = req->dn; + bindpw = req->password; + } + + return util_ldap_connection_find(r, sec->host, sec->port, + binddn, bindpw, + sec->deref, sec->secure); +} /* * Authentication Phase * -------------------- @@ -545,6 +578,7 @@ start_over: /* mark the user and DN */ req->dn = apr_pstrdup(r->pool, dn); req->user = apr_pstrdup(r->pool, user); + req->password = apr_pstrdup(r->pool, password); if (sec->user_is_dn) { r->user = req->dn; } @@ -591,9 +625,7 @@ static authz_status ldapuser_check_autho } if (sec->host) { - ldc = util_ldap_connection_find(r, sec->host, sec->port, - sec->binddn, sec->bindpw, sec->deref, - sec->secure); + ldc = get_connection_for_authz(r, LDAP_COMPARE); apr_pool_cleanup_register(r->pool, ldc, authnz_ldap_cleanup_connection_close, apr_pool_cleanup_null); @@ -732,9 +764,7 @@ static authz_status ldapgroup_check_auth } if (sec->host) { - ldc = util_ldap_connection_find(r, sec->host, sec->port, - sec->binddn, sec->bindpw, sec->deref, - sec->secure); + ldc = get_connection_for_authz(r, LDAP_COMPARE); /* for the top-level group only */ apr_pool_cleanup_register(r->pool, ldc, authnz_ldap_cleanup_connection_close, apr_pool_cleanup_null); @@ -869,6 +899,15 @@ static authz_status ldapgroup_check_auth return AUTHZ_GRANTED; } case LDAP_COMPARE_FALSE: { + /* nested groups need searches and compares, so grab a new handle */ + authnz_ldap_cleanup_connection_close(ldc); + apr_pool_cleanup_kill(r->pool, ldc,authnz_ldap_cleanup_connection_close); + + ldc = get_connection_for_authz(r, LDAP_COMPARE_AND_SEARCH); + apr_pool_cleanup_register(r->pool, ldc, + authnz_ldap_cleanup_connection_close, + apr_pool_cleanup_null); + ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, "[%" APR_PID_T_FMT "] auth_ldap authorise: require group \"%s\": " "failed [%s][%d - %s], checking sub-groups", @@ -932,9 +971,7 @@ static authz_status ldapdn_check_authori } if (sec->host) { - ldc = util_ldap_connection_find(r, sec->host, sec->port, - sec->binddn, sec->bindpw, sec->deref, - sec->secure); + ldc = get_connection_for_authz(r, LDAP_SEARCH); /* _comparedn is a searche */ apr_pool_cleanup_register(r->pool, ldc, authnz_ldap_cleanup_connection_close, apr_pool_cleanup_null); @@ -1046,9 +1083,7 @@ static authz_status ldapattribute_check_ } if (sec->host) { - ldc = util_ldap_connection_find(r, sec->host, sec->port, - sec->binddn, sec->bindpw, sec->deref, - sec->secure); + ldc = get_connection_for_authz(r, LDAP_COMPARE); apr_pool_cleanup_register(r->pool, ldc, authnz_ldap_cleanup_connection_close, apr_pool_cleanup_null); @@ -1165,9 +1200,7 @@ static authz_status ldapfilter_check_aut } if (sec->host) { - ldc = util_ldap_connection_find(r, sec->host, sec->port, - sec->binddn, sec->bindpw, sec->deref, - sec->secure); + ldc = get_connection_for_authz(r, LDAP_SEARCH); apr_pool_cleanup_register(r->pool, ldc, authnz_ldap_cleanup_connection_close, apr_pool_cleanup_null); @@ -1249,8 +1282,14 @@ static authz_status ldapfilter_check_aut ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, "[%" APR_PID_T_FMT "] auth_ldap authorize: checking dn match %s", getpid(), dn); + if (sec->compare_as_user) { + /* ldap-filter is the only authz that requires a search and a compare */ + apr_pool_cleanup_kill(r->pool, ldc, authnz_ldap_cleanup_connection_close); + authnz_ldap_cleanup_connection_close(ldc); + ldc = get_connection_for_authz(r, LDAP_COMPARE); + } result = util_ldap_cache_comparedn(r, ldc, sec->url, req->dn, dn, - sec->compare_dn_on_server); + sec->compare_dn_on_server); } switch(result) { @@ -1607,6 +1646,14 @@ static const command_rec authnz_ldap_cmd AP_INIT_TAKE2("AuthLDAPInitialBindPattern", set_bind_pattern, NULL, OR_AUTHCFG, "The regex and substitution to determine a username that can bind based on an HTTP basic auth username"), + AP_INIT_FLAG("AuthLDAPSearchAsUser", ap_set_flag_slot, + (void *)APR_OFFSETOF(authn_ldap_config_t, search_as_user), OR_AUTHCFG, + "Set to 'on' to perform authorization-based searches with the users credentials, when this module" + " has also performed authentication. Does not affect nested groups lookup."), + AP_INIT_FLAG("AuthLDAPCompareAsUser", ap_set_flag_slot, + (void *)APR_OFFSETOF(authn_ldap_config_t, compare_as_user), OR_AUTHCFG, + "Set to 'on' to perform authorization-based compares with the users credentials, when this module" + " has also performed authentication. Does not affect nested groups lookups."), {NULL} }; From gibbsjoseph@example.org Tue Jun 01 21:26:52 2010 Return-Path: <gibbsjoseph@example.org> Delivered-To: gibbsjoseph@example.org Received: (qmail 71226 invoked from network); 1 Jun 2010 21:26:52 -0000 Received: from unknown (HELO mail.apache.org) (83.161.120.155) by 83.161.120.155 with SMTP; 1 Jun 2010 21:26:52 -0000 Received: (qmail 20831 invoked by uid 500); 1 Jun 2010 21:26:52 -0000 Delivered-To: gibbsjoseph@example.org Received: (qmail 20779 invoked by uid 500); 1 Jun 2010 21:26:52 -0000 Mailing-List: contact gibbsjoseph@example.org; run by ezmlm Precedence: bulk Reply-To: gibbsjoseph@example.org list-help: <mailto:gibbsjoseph@example.org> list-unsubscribe: <mailto:gibbsjoseph@example.org> List-Post: <mailto:gibbsjoseph@example.org> List-Id: <cvs.httpd.apache.org> Delivered-To: mailing list gibbsjoseph@example.org Received: (qmail 20772 invoked by uid 99); 1 Jun 2010 21:26:52 -0000 Received: from nike.apache.org (HELO nike.apache.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 01 Jun 2010 21:26:52 +0000 X-ASF-Spam-Status: No, hits=-2000.0 required=10.0 tests=ALL_TRUSTED X-Spam-Check-By: apache.org Received: from [83.161.120.155] (HELO eris.apache.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 01 Jun 2010 21:26:49 +0000 Received: by eris.apache.org (Postfix, from userid 65534) id BB65F238898B; Tue, 1 Jun 2010 21:26:28 +0000 (UTC) Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Subject: svn commit: r950249 - /httpd/httpd/trunk/modules/aaa/mod_authnz_ldap.c Date: Tue, 01 Jun 2010 21:26:28 -0000 To: gibbsjoseph@example.org From: gibbsjoseph@example.org X-Mailer: svnmailer-1.0.8 Message-Id: <gibbsjoseph@example.org> X-Virus-Checked: Checked by ClamAV on apache.org Author: covener Date: Tue Jun 1 21:26:28 2010 New Revision: 950249 URL: http://svn.apache.org/viewvc?rev=950249&view=rev Log: When checking direct group membership, interpret LDAP_NO_SUCH_ATTRIBUTE the same as LDAP_COMPARE_FALSE and continue on to subgroup (nested group) processing. This triggers when the group has no "direct" members but may have entries that represent nested groups to check. Modified: httpd/httpd/trunk/modules/aaa/mod_authnz_ldap.c Modified: httpd/httpd/trunk/modules/aaa/mod_authnz_ldap.c URL: http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/aaa/mod_authnz_ldap.c?rev=950249&r1=950248&r2=950249&view=diff ============================================================================== --- httpd/httpd/trunk/modules/aaa/mod_authnz_ldap.c (original) +++ httpd/httpd/trunk/modules/aaa/mod_authnz_ldap.c Tue Jun 1 21:26:28 2010 @@ -898,6 +898,7 @@ static authz_status ldapgroup_check_auth set_request_vars(r, LDAP_AUTHZ); return AUTHZ_GRANTED; } + case LDAP_NO_SUCH_ATTRIBUTE: case LDAP_COMPARE_FALSE: { /* nested groups need searches and compares, so grab a new handle */ authnz_ldap_cleanup_connection_close(ldc); From gibbsjoseph@example.org Tue Jun 01 21:36:10 2010 Return-Path: <gibbsjoseph@example.org> Delivered-To: gibbsjoseph@example.org Received: (qmail 73860 invoked from network); 1 Jun 2010 21:36:10 -0000 Received: from unknown (HELO mail.apache.org) (83.161.120.155) by 83.161.120.155 with SMTP; 1 Jun 2010 21:36:10 -0000 Received: (qmail 30962 invoked by uid 500); 1 Jun 2010 21:36:09 -0000 Delivered-To: gibbsjoseph@example.org Received: (qmail 30908 invoked by uid 500); 1 Jun 2010 21:36:09 -0000 Mailing-List: contact gibbsjoseph@example.org; run by ezmlm Precedence: bulk Reply-To: gibbsjoseph@example.org list-help: <mailto:gibbsjoseph@example.org> list-unsubscribe: <mailto:gibbsjoseph@example.org> List-Post: <mailto:gibbsjoseph@example.org> List-Id: <cvs.httpd.apache.org> Delivered-To: mailing list gibbsjoseph@example.org Received: (qmail 30901 invoked by uid 99); 1 Jun 2010 21:36:09 -0000 Received: from nike.apache.org (HELO nike.apache.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 01 Jun 2010 21:36:09 +0000 X-ASF-Spam-Status: No, hits=-2000.0 required=10.0 tests=ALL_TRUSTED X-Spam-Check-By: apache.org Received: from [83.161.120.155] (HELO eris.apache.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 01 Jun 2010 21:36:07 +0000 Received: by eris.apache.org (Postfix, from userid 65534) id 503A2238898B; Tue, 1 Jun 2010 21:35:46 +0000 (UTC) Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Subject: svn commit: r950250 - /httpd/httpd/trunk/CHANGES Date: Tue, 01 Jun 2010 21:35:46 -0000 To: gibbsjoseph@example.org From: gibbsjoseph@example.org X-Mailer: svnmailer-1.0.8 Message-Id: <gibbsjoseph@example.org> X-Virus-Checked: Checked by ClamAV on apache.org Author: covener Date: Tue Jun 1 21:35:46 2010 New Revision: 950250 URL: http://svn.apache.org/viewvc?rev=950250&view=rev Log: add CHANGES for r950249 Modified: httpd/httpd/trunk/CHANGES Modified: httpd/httpd/trunk/CHANGES URL: http://svn.apache.org/viewvc/httpd/httpd/trunk/CHANGES?rev=950250&r1=950249&r2=950250&view=diff ============================================================================== --- httpd/httpd/trunk/CHANGES [utf-8] (original) +++ httpd/httpd/trunk/CHANGES [utf-8] Tue Jun 1 21:35:46 2010 @@ -28,6 +28,10 @@ Changes with Apache 2.3.7 processing is completed, avoiding orphaned callback pointers. [Brett Gervasoni <brettg senseofsecurity.com>, Jeff Trawick] + *) mod_authnz_ldap: Ensure nested groups are checked when the + top-level group doesn't have any direct non-group members + of attributes in AuthLDAPGroupAttribute. [Eric Covener] + *) mod_authnz_ldap: Search or Comparison during authorization phase can use the credentials from the authentication phase (AuthLDAPSearchAsUSer,AuthLDAPCompareAsUser). From gibbsjoseph@example.org Tue Jun 01 23:19:46 2010 Return-Path: <gibbsjoseph@example.org> Delivered-To: gibbsjoseph@example.org Received: (qmail 1286 invoked from network); 1 Jun 2010 23:19:45 -0000 Received: from unknown (HELO mail.apache.org) (83.161.120.155) by 83.161.120.155 with SMTP; 1 Jun 2010 23:19:45 -0000 Received: (qmail 64128 invoked by uid 500); 1 Jun 2010 23:19:45 -0000 Delivered-To: gibbsjoseph@example.org Received: (qmail 64058 invoked by uid 500); 1 Jun 2010 23:19:45 -0000 Mailing-List: contact gibbsjoseph@example.org; run by ezmlm Precedence: bulk Reply-To: gibbsjoseph@example.org list-help: <mailto:gibbsjoseph@example.org> list-unsubscribe: <mailto:gibbsjoseph@example.org> List-Post: <mailto:gibbsjoseph@example.org> List-Id: <cvs.httpd.apache.org> Delivered-To: mailing list gibbsjoseph@example.org Received: (qmail 64051 invoked by uid 99); 1 Jun 2010 23:19:45 -0000 Received: from nike.apache.org (HELO nike.apache.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 01 Jun 2010 23:19:45 +0000 X-ASF-Spam-Status: No, hits=-2000.0 required=10.0 tests=ALL_TRUSTED X-Spam-Check-By: apache.org Received: from [83.161.120.155] (HELO eris.apache.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 01 Jun 2010 23:19:42 +0000 Received: by eris.apache.org (Postfix, from userid 65534) id B648B23889C5; Tue, 1 Jun 2010 23:19:21 +0000 (UTC) Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Subject: svn commit: r950302 - in /httpd/httpd/trunk: CHANGES modules/filters/mod_deflate.c Date: Tue, 01 Jun 2010 23:19:21 -0000 To: gibbsjoseph@example.org From: gibbsjoseph@example.org X-Mailer: svnmailer-1.0.8 Message-Id: <gibbsjoseph@example.org> X-Virus-Checked: Checked by ClamAV on apache.org Author: niq Date: Tue Jun 1 23:19:21 2010 New Revision: 950302 URL: http://svn.apache.org/viewvc?rev=950302&view=rev Log: Kill off edge case in mod_deflate where data may be sent before headers are determined. PR 49369 - Matthew Steele Modified: httpd/httpd/trunk/CHANGES httpd/httpd/trunk/modules/filters/mod_deflate.c Modified: httpd/httpd/trunk/CHANGES URL: http://svn.apache.org/viewvc/httpd/httpd/trunk/CHANGES?rev=950302&r1=950301&r2=950302&view=diff ============================================================================== --- httpd/httpd/trunk/CHANGES [utf-8] (original) +++ httpd/httpd/trunk/CHANGES [utf-8] Tue Jun 1 23:19:21 2010 @@ -28,6 +28,9 @@ Changes with Apache 2.3.7 processing is completed, avoiding orphaned callback pointers. [Brett Gervasoni <brettg senseofsecurity.com>, Jeff Trawick] + *) mod_deflate: avoid the risk of forwarding data before headers are set. + PR 49369 [Matthew Steele <mdsteele google.com>] + *) mod_authnz_ldap: Ensure nested groups are checked when the top-level group doesn't have any direct non-group members of attributes in AuthLDAPGroupAttribute. [Eric Covener] Modified: httpd/httpd/trunk/modules/filters/mod_deflate.c URL: http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/filters/mod_deflate.c?rev=950302&r1=950301&r2=950302&view=diff ============================================================================== --- httpd/httpd/trunk/modules/filters/mod_deflate.c (original) +++ httpd/httpd/trunk/modules/filters/mod_deflate.c Tue Jun 1 23:19:21 2010 @@ -429,7 +429,7 @@ static apr_status_t deflate_out_filter(a /* Do nothing if asked to filter nothing. */ if (APR_BRIGADE_EMPTY(bb)) { - return ap_pass_brigade(f->next, bb); + return APR_SUCCESS; } c = ap_get_module_config(r->server->module_config, @@ -1047,7 +1047,7 @@ static apr_status_t inflate_out_filter(a /* Do nothing if asked to filter nothing. */ if (APR_BRIGADE_EMPTY(bb)) { - return ap_pass_brigade(f->next, bb); + return APR_SUCCESS; } c = ap_get_module_config(r->server->module_config, &deflate_module); From gibbsjoseph@example.org Wed Jun 02 11:56:50 2010 Return-Path: <gibbsjoseph@example.org> Delivered-To: gibbsjoseph@example.org Received: (qmail 13008 invoked from network); 2 Jun 2010 11:56:49 -0000 Received: from unknown (HELO mail.apache.org) (83.161.120.155) by 83.161.120.155 with SMTP; 2 Jun 2010 11:56:49 -0000 Received: (qmail 85014 invoked by uid 500); 2 Jun 2010 11:56:49 -0000 Delivered-To: gibbsjoseph@example.org Received: (qmail 84803 invoked by uid 500); 2 Jun 2010 11:56:47 -0000 Mailing-List: contact gibbsjoseph@example.org; run by ezmlm Precedence: bulk Reply-To: gibbsjoseph@example.org list-help: <mailto:gibbsjoseph@example.org> list-unsubscribe: <mailto:gibbsjoseph@example.org> List-Post: <mailto:gibbsjoseph@example.org> List-Id: <cvs.httpd.apache.org> Delivered-To: mailing list gibbsjoseph@example.org Received: (qmail 84789 invoked by uid 99); 2 Jun 2010 11:56:46 -0000 Received: from nike.apache.org (HELO nike.apache.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 02 Jun 2010 11:56:46 +0000 X-ASF-Spam-Status: No, hits=-2000.0 required=10.0 tests=ALL_TRUSTED X-Spam-Check-By: apache.org Received: from [83.161.120.155] (HELO eris.apache.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 02 Jun 2010 11:56:44 +0000 Received: by eris.apache.org (Postfix, from userid 65534) id 0F5E42388978; Wed, 2 Jun 2010 11:56:23 +0000 (UTC) Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Subject: svn commit: r950511 - /httpd/httpd/trunk/docs/manual/mod/mod_authnz_ldap.xml Date: Wed, 02 Jun 2010 11:56:22 -0000 To: gibbsjoseph@example.org From: gibbsjoseph@example.org X-Mailer: svnmailer-1.0.8 Message-Id: <gibbsjoseph@example.org> X-Virus-Checked: Checked by ClamAV on apache.org Author: covener Date: Wed Jun 2 11:56:22 2010 New Revision: 950511 URL: http://svn.apache.org/viewvc?rev=950511&view=rev Log: add defaults for two nested groups directives Modified: httpd/httpd/trunk/docs/manual/mod/mod_authnz_ldap.xml Modified: httpd/httpd/trunk/docs/manual/mod/mod_authnz_ldap.xml URL: http://svn.apache.org/viewvc/httpd/httpd/trunk/docs/manual/mod/mod_authnz_ldap.xml?rev=950511&r1=950510&r2=950511&view=diff ============================================================================== --- httpd/httpd/trunk/docs/manual/mod/mod_authnz_ldap.xml (original) +++ httpd/httpd/trunk/docs/manual/mod/mod_authnz_ldap.xml Wed Jun 2 11:56:22 2010 @@ -1157,6 +1157,7 @@ environment variable</description> directive line, used to distinguish the members of the current group that are groups.</description> <syntax>AuthLDAPSubGroupAttribute <em>attribute</em></syntax> +<default>AuthLDAPSubgroupAttribute member uniquemember</default> <contextlist><context>directory</context><context>.htaccess</context> </contextlist> <override>AuthConfig</override> @@ -1178,6 +1179,7 @@ are groups.</description> <description>Specifies which LDAP objectClass values identify directory objects that are groups during sub-group processing.</description> <syntax>AuthLDAPSubGroupClass <em>LdapObjectClass</em></syntax> +<default>AuthLDAPSubGroupClass groupOfNames groupOfUniqueNames</default> <contextlist><context>directory</context><context>.htaccess</context> </contextlist> <override>AuthConfig</override> From gibbsjoseph@example.org Wed Jun 02 11:57:06 2010 Return-Path: <gibbsjoseph@example.org> Delivered-To: gibbsjoseph@example.org Received: (qmail 13109 invoked from network); 2 Jun 2010 11:57:05 -0000 Received: from unknown (HELO mail.apache.org) (83.161.120.155) by 83.161.120.155 with SMTP; 2 Jun 2010 11:57:05 -0000 Received: (qmail 85151 invoked by uid 500); 2 Jun 2010 11:57:05 -0000 Delivered-To: gibbsjoseph@example.org Received: (qmail 85066 invoked by uid 500); 2 Jun 2010 11:57:04 -0000 Mailing-List: contact gibbsjoseph@example.org; run by ezmlm Precedence: bulk Reply-To: gibbsjoseph@example.org list-help: <mailto:gibbsjoseph@example.org> list-unsubscribe: <mailto:gibbsjoseph@example.org> List-Post: <mailto:gibbsjoseph@example.org> List-Id: <cvs.httpd.apache.org> Delivered-To: mailing list gibbsjoseph@example.org Received: (qmail 85059 invoked by uid 99); 2 Jun 2010 11:57:03 -0000 Received: from athena.apache.org (HELO athena.apache.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 02 Jun 2010 11:57:03 +0000 X-ASF-Spam-Status: No, hits=-1434.3 required=10.0 tests=ALL_TRUSTED,AWL X-Spam-Check-By: apache.org Received: from [83.161.120.155] (HELO eris.apache.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 02 Jun 2010 11:57:03 +0000 Received: by eris.apache.org (Postfix, from userid 65534) id 40AC423889DD; Wed, 2 Jun 2010 11:56:43 +0000 (UTC) Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Subject: svn commit: r950512 - /httpd/httpd/trunk/docs/manual/mod/mod_authnz_ldap.html.en Date: Wed, 02 Jun 2010 11:56:43 -0000 To: gibbsjoseph@example.org From: gibbsjoseph@example.org X-Mailer: svnmailer-1.0.8 Message-Id: <gibbsjoseph@example.org> Author: covener Date: Wed Jun 2 11:56:42 2010 New Revision: 950512 URL: http://svn.apache.org/viewvc?rev=950512&view=rev Log: catch up with xforms Modified: httpd/httpd/trunk/docs/manual/mod/mod_authnz_ldap.html.en Modified: httpd/httpd/trunk/docs/manual/mod/mod_authnz_ldap.html.en URL: http://svn.apache.org/viewvc/httpd/httpd/trunk/docs/manual/mod/mod_authnz_ldap.html.en?rev=950512&r1=950511&r2=950512&view=diff ============================================================================== --- httpd/httpd/trunk/docs/manual/mod/mod_authnz_ldap.html.en (original) +++ httpd/httpd/trunk/docs/manual/mod/mod_authnz_ldap.html.en Wed Jun 2 11:56:42 2010 @@ -886,8 +886,9 @@ authorization</td></tr> <tr><th><a href="directive-dict.html#Compatibility">Compatibility:</a></th><td>Available in version 2.3.7 and later</td></tr> </table> <p>When set, and <code class="module"><a href="../mod/mod_authnz_ldap.html">mod_authnz_ldap</a></code> has authenticated the - user, comparisons for authorization use the credentials provided via - HTTP basic authentication instead of the servers own credentials.</p> + user, LDAP comparisons for authorization use the queried distinguished name (DN) + and HTTP basic authentication password of the authenticated user instead of + the servers configured credentials.</p> <p> The <em>ldap-attribute</em>, <em>ldap-user</em>, and <em>ldap-group</em> (single-level only) authorization checks use comparisons.</p> @@ -1151,8 +1152,9 @@ environment variable</td></tr> <tr><th><a href="directive-dict.html#Compatibility">Compatibility:</a></th><td>Available in version 2.3.7 and later</td></tr> </table> <p>When set, and <code class="module"><a href="../mod/mod_authnz_ldap.html">mod_authnz_ldap</a></code> has authenticated the - user, searches for authorization use the credentials provided via - HTTP basic authentication instead of the servers own credentials.</p> + user, LDAP searches for authorization use the queried distinguished name (DN) + and HTTP basic authentication password of the authenticated user instead of + the servers configured credentials.</p> <p> The <em>ldap-filter</em> and <em>ldap-dn</em> authorization checks use searches.</p> @@ -1179,6 +1181,7 @@ environment variable</td></tr> directive line, used to distinguish the members of the current group that are groups.</td></tr> <tr><th><a href="directive-dict.html#Syntax">Syntax:</a></th><td><code>AuthLDAPSubGroupAttribute <em>attribute</em></code></td></tr> +<tr><th><a href="directive-dict.html#Default">Default:</a></th><td><code>AuthLDAPSubgroupAttribute member uniquemember</code></td></tr> <tr><th><a href="directive-dict.html#Context">Context:</a></th><td>directory, .htaccess</td></tr> <tr><th><a href="directive-dict.html#Override">Override:</a></th><td>AuthConfig</td></tr> <tr><th><a href="directive-dict.html#Status">Status:</a></th><td>Extension</td></tr> @@ -1200,6 +1203,7 @@ are groups.</td></tr> <tr><th><a href="directive-dict.html#Description">Description:</a></th><td>Specifies which LDAP objectClass values identify directory objects that are groups during sub-group processing.</td></tr> <tr><th><a href="directive-dict.html#Syntax">Syntax:</a></th><td><code>AuthLDAPSubGroupClass <em>LdapObjectClass</em></code></td></tr> +<tr><th><a href="directive-dict.html#Default">Default:</a></th><td><code>AuthLDAPSubGroupClass groupOfNames groupOfUniqueNames</code></td></tr> <tr><th><a href="directive-dict.html#Context">Context:</a></th><td>directory, .htaccess</td></tr> <tr><th><a href="directive-dict.html#Override">Override:</a></th><td>AuthConfig</td></tr> <tr><th><a href="directive-dict.html#Status">Status:</a></th><td>Extension</td></tr> From gibbsjoseph@example.org Wed Jun 02 14:53:33 2010 Return-Path: <gibbsjoseph@example.org> Delivered-To: gibbsjoseph@example.org Received: (qmail 82196 invoked from network); 2 Jun 2010 14:53:32 -0000 Received: from unknown (HELO mail.apache.org) (83.161.120.155) by 83.161.120.155 with SMTP; 2 Jun 2010 14:53:32 -0000 Received: (qmail 46904 invoked by uid 500); 2 Jun 2010 14:53:32 -0000 Delivered-To: gibbsjoseph@example.org Received: (qmail 46717 invoked by uid 500); 2 Jun 2010 14:53:31 -0000 Mailing-List: contact gibbsjoseph@example.org; run by ezmlm Precedence: bulk Reply-To: gibbsjoseph@example.org list-help: <mailto:gibbsjoseph@example.org> list-unsubscribe: <mailto:gibbsjoseph@example.org> List-Post: <mailto:gibbsjoseph@example.org> List-Id: <cvs.httpd.apache.org> Delivered-To: mailing list gibbsjoseph@example.org Received: (qmail 46710 invoked by uid 99); 2 Jun 2010 14:53:31 -0000 Received: from nike.apache.org (HELO nike.apache.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 02 Jun 2010 14:53:31 +0000 X-ASF-Spam-Status: No, hits=-2000.0 required=10.0 tests=ALL_TRUSTED X-Spam-Check-By: apache.org Received: from [83.161.120.155] (HELO eris.apache.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 02 Jun 2010 14:53:28 +0000 Received: by eris.apache.org (Postfix, from userid 65534) id 00B4B2388980; Wed, 2 Jun 2010 14:53:07 +0000 (UTC) Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Subject: svn commit: r950583 - in /httpd/httpd/trunk/docs/manual/developer: output-filters.html.en output-filters.xml Date: Wed, 02 Jun 2010 14:53:07 -0000 To: gibbsjoseph@example.org From: gibbsjoseph@example.org X-Mailer: svnmailer-1.0.8 Message-Id: <gibbsjoseph@example.org> X-Virus-Checked: Checked by ClamAV on apache.org Author: jorton Date: Wed Jun 2 14:53:07 2010 New Revision: 950583 URL: http://svn.apache.org/viewvc?rev=950583&view=rev Log: - clarify wording on handling of empty brigades, see dev@ thread from msgid <gibbsjoseph@example.org> Modified: httpd/httpd/trunk/docs/manual/developer/output-filters.html.en httpd/httpd/trunk/docs/manual/developer/output-filters.xml Modified: httpd/httpd/trunk/docs/manual/developer/output-filters.html.en URL: http://svn.apache.org/viewvc/httpd/httpd/trunk/docs/manual/developer/output-filters.html.en?rev=950583&r1=950582&r2=950583&view=diff ============================================================================== --- httpd/httpd/trunk/docs/manual/developer/output-filters.html.en (original) +++ httpd/httpd/trunk/docs/manual/developer/output-filters.html.en Wed Jun 2 14:53:07 2010 @@ -120,8 +120,11 @@ ignored.</p> <p>An output filter should never pass an empty brigade down the - filter chain. But, for good defensive programming, filters should - be prepared to accept an empty brigade, and do nothing.</p> + filter chain. To be defensive, filters should be prepared to + accept an empty brigade, and should return success without passing + this brigade on down the filter chain. The handling of an empty + brigade should have no side effects (such as changing any state + private to the filter).</p> <div class="example"><h3>How to handle an empty brigade</h3><p><code> apr_status_t dummy_filter(ap_filter_t *f, apr_bucket_brigade *bb)<br /> Modified: httpd/httpd/trunk/docs/manual/developer/output-filters.xml URL: http://svn.apache.org/viewvc/httpd/httpd/trunk/docs/manual/developer/output-filters.xml?rev=950583&r1=950582&r2=950583&view=diff ============================================================================== --- httpd/httpd/trunk/docs/manual/developer/output-filters.xml (original) +++ httpd/httpd/trunk/docs/manual/developer/output-filters.xml Wed Jun 2 14:53:07 2010 @@ -114,8 +114,11 @@ ignored.</p> <p>An output filter should never pass an empty brigade down the - filter chain. But, for good defensive programming, filters should - be prepared to accept an empty brigade, and do nothing.</p> + filter chain. To be defensive, filters should be prepared to + accept an empty brigade, and should return success without passing + this brigade on down the filter chain. The handling of an empty + brigade should have no side effects (such as changing any state + private to the filter).</p> <example><title>How to handle an empty brigade</title> apr_status_t dummy_filter(ap_filter_t *f, apr_bucket_brigade *bb)<br /> From gibbsjoseph@example.org Wed Jun 02 15:53:52 2010 Return-Path: <gibbsjoseph@example.org> Delivered-To: gibbsjoseph@example.org Received: (qmail 3932 invoked from network); 2 Jun 2010 15:53:52 -0000 Received: from unknown (HELO mail.apache.org) (83.161.120.155) by 83.161.120.155 with SMTP; 2 Jun 2010 15:53:52 -0000 Received: (qmail 76340 invoked by uid 500); 2 Jun 2010 15:53:51 -0000 Delivered-To: gibbsjoseph@example.org Received: (qmail 76270 invoked by uid 500); 2 Jun 2010 15:53:51 -0000 Mailing-List: contact gibbsjoseph@example.org; run by ezmlm Precedence: bulk Reply-To: gibbsjoseph@example.org list-help: <mailto:gibbsjoseph@example.org> list-unsubscribe: <mailto:gibbsjoseph@example.org> List-Post: <mailto:gibbsjoseph@example.org> List-Id: <cvs.httpd.apache.org> Delivered-To: mailing list gibbsjoseph@example.org Received: (qmail 76263 invoked by uid 99); 2 Jun 2010 15:53:51 -0000 Received: from athena.apache.org (HELO athena.apache.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 02 Jun 2010 15:53:51 +0000 X-ASF-Spam-Status: No, hits=-1433.3 required=10.0 tests=ALL_TRUSTED,AWL X-Spam-Check-By: apache.org Received: from [83.161.120.155] (HELO eris.apache.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 02 Jun 2010 15:53:50 +0000 Received: by eris.apache.org (Postfix, from userid 65534) id AE2FF238890D; Wed, 2 Jun 2010 15:53:30 +0000 (UTC) Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Subject: svn commit: r950609 - /httpd/httpd/trunk/STATUS Date: Wed, 02 Jun 2010 15:53:30 -0000 To: gibbsjoseph@example.org From: gibbsjoseph@example.org X-Mailer: svnmailer-1.0.8 Message-Id: <gibbsjoseph@example.org> Author: jim Date: Wed Jun 2 15:53:30 2010 New Revision: 950609 URL: http://svn.apache.org/viewvc?rev=950609&view=rev Log: Note intent to TR June9 Modified: httpd/httpd/trunk/STATUS Modified: httpd/httpd/trunk/STATUS URL: http://svn.apache.org/viewvc/httpd/httpd/trunk/STATUS?rev=950609&r1=950608&r2=950609&view=diff ============================================================================== --- httpd/httpd/trunk/STATUS (original) +++ httpd/httpd/trunk/STATUS Wed Jun 2 15:53:30 2010 @@ -26,7 +26,8 @@ Release history: [NOTE that x.{odd}.z versions are strictly Alpha/Beta releases, while x.{even}.z versions are Stable/GA releases.] - 2.3.6 : In development + 2.3.6 : In development: Jim proposes next Alpha ~June 9 and + will RM. 2.3.5 : Released on January 26, 2010. 2.3.4 : Released on December 8, 2009. 2.3.3 : Tagged on November 11, 2009, not released. From gibbsjoseph@example.org Wed Jun 02 17:56:14 2010 Return-Path: <gibbsjoseph@example.org> Delivered-To: gibbsjoseph@example.org Received: (qmail 47141 invoked from network); 2 Jun 2010 17:56:13 -0000 Received: from unknown (HELO mail.apache.org) (83.161.120.155) by 83.161.120.155 with SMTP; 2 Jun 2010 17:56:13 -0000 Received: (qmail 90184 invoked by uid 500); 2 Jun 2010 17:56:12 -0000 Delivered-To: gibbsjoseph@example.org Received: (qmail 90128 invoked by uid 500); 2 Jun 2010 17:56:12 -0000 Mailing-List: contact gibbsjoseph@example.org; run by ezmlm Precedence: bulk Reply-To: gibbsjoseph@example.org list-help: <mailto:gibbsjoseph@example.org> list-unsubscribe: <mailto:gibbsjoseph@example.org> List-Post: <mailto:gibbsjoseph@example.org> List-Id: <cvs.httpd.apache.org> Delivered-To: mailing list gibbsjoseph@example.org Received: (qmail 90121 invoked by uid 99); 2 Jun 2010 17:56:12 -0000 Received: from athena.apache.org (HELO athena.apache.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 02 Jun 2010 17:56:12 +0000 X-ASF-Spam-Status: No, hits=-1452.6 required=10.0 tests=ALL_TRUSTED,AWL X-Spam-Check-By: apache.org Received: from [83.161.120.155] (HELO eris.apache.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 02 Jun 2010 17:56:11 +0000 Received: by eris.apache.org (Postfix, from userid 65534) id C0A4E238890D; Wed, 2 Jun 2010 17:55:51 +0000 (UTC) Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Subject: svn commit: r950693 - /httpd/mod_fcgid/trunk/configure.apxs Date: Wed, 02 Jun 2010 17:55:51 -0000 To: gibbsjoseph@example.org From: gibbsjoseph@example.org X-Mailer: svnmailer-1.0.8 Message-Id: <gibbsjoseph@example.org> Author: covener Date: Wed Jun 2 17:55:51 2010 New Revision: 950693 URL: http://svn.apache.org/viewvc?rev=950693&view=rev Log: instead of adding another escape, protect the backrefs as they're passed to sed. /bin/dash on debian/ubuntu was getting 0x01 instead of the backref passed to sed: > fcgid_config.h:4:9: error: macro names must be identifiers Tested on /bin/dash, /bin/bash on Linux and /bin/sh, /usr/xpg4/bin/sh on Solaris. Submitted by: Eric Covener, Igor Galić Reviewed by: Eric Covener Modified: httpd/mod_fcgid/trunk/configure.apxs Modified: httpd/mod_fcgid/trunk/configure.apxs URL: http://svn.apache.org/viewvc/httpd/mod_fcgid/trunk/configure.apxs?rev=950693&r1=950692&r2=950693&view=diff ============================================================================== --- httpd/mod_fcgid/trunk/configure.apxs (original) +++ httpd/mod_fcgid/trunk/configure.apxs Wed Jun 2 17:55:51 2010 @@ -104,8 +104,7 @@ cd .. if test "x$found_features" = "x"; then cp modules/fcgid/fcgid_config.h.in modules/fcgid/fcgid_config.h else - found_features="`echo \"$found_features\" | sed -e '#s*/#*\\$/#g;'`" - eval sed $found_features < modules/fcgid/fcgid_config.h.in \ + eval sed "$found_features" < modules/fcgid/fcgid_config.h.in \ > modules/fcgid/fcgid_config.h fi From gibbsjoseph@example.org Wed Jun 02 20:44:49 2010 Return-Path: <gibbsjoseph@example.org> Delivered-To: gibbsjoseph@example.org Received: (qmail 57249 invoked from network); 2 Jun 2010 20:44:48 -0000 Received: from unknown (HELO mail.apache.org) (83.161.120.155) by 83.161.120.155 with SMTP; 2 Jun 2010 20:44:48 -0000 Received: (qmail 39753 invoked by uid 500); 2 Jun 2010 20:44:48 -0000 Delivered-To: gibbsjoseph@example.org Received: (qmail 39702 invoked by uid 500); 2 Jun 2010 20:44:47 -0000 Mailing-List: contact gibbsjoseph@example.org; run by ezmlm Precedence: bulk Reply-To: gibbsjoseph@example.org list-help: <mailto:gibbsjoseph@example.org> list-unsubscribe: <mailto:gibbsjoseph@example.org> List-Post: <mailto:gibbsjoseph@example.org> List-Id: <cvs.httpd.apache.org> Delivered-To: mailing list gibbsjoseph@example.org Received: (qmail 39695 invoked by uid 99); 2 Jun 2010 20:44:47 -0000 Received: from nike.apache.org (HELO nike.apache.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 02 Jun 2010 20:44:47 +0000 X-ASF-Spam-Status: No, hits=-2000.0 required=10.0 tests=ALL_TRUSTED X-Spam-Check-By: apache.org Received: from [83.161.120.155] (HELO eris.apache.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 02 Jun 2010 20:44:45 +0000 Received: by eris.apache.org (Postfix, from userid 65534) id 84629238898B; Wed, 2 Jun 2010 20:44:24 +0000 (UTC) Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Subject: svn commit: r950755 - /httpd/mod_ftp/trunk/configure.apxs Date: Wed, 02 Jun 2010 20:44:24 -0000 To: gibbsjoseph@example.org From: gibbsjoseph@example.org X-Mailer: svnmailer-1.0.8 Message-Id: <gibbsjoseph@example.org> X-Virus-Checked: Checked by ClamAV on apache.org Author: covener Date: Wed Jun 2 20:44:24 2010 New Revision: 950755 URL: http://svn.apache.org/viewvc?rev=950755&view=rev Log: instead of adding another escape, protect the backrefs as they're passed to sed. /bin/dash on debian/ubuntu was getting 0x01 instead of the backref passed to sed: Tested on /bin/dash, /bin/bash on Linux (fcgid/ftp) and /bin/sh, /usr/xpg4/bin/sh on Solaris (fcgid only). Submitted by: Eric Covener, Igor Galić Reviewed by: Eric Covener Modified: httpd/mod_ftp/trunk/configure.apxs Modified: httpd/mod_ftp/trunk/configure.apxs URL: http://svn.apache.org/viewvc/httpd/mod_ftp/trunk/configure.apxs?rev=950755&r1=950754&r2=950755&view=diff ============================================================================== --- httpd/mod_ftp/trunk/configure.apxs (original) +++ httpd/mod_ftp/trunk/configure.apxs Wed Jun 2 20:44:24 2010 @@ -117,8 +117,7 @@ cd .. if test "x$found_features" = "x"; then cp modules/ftp/ftp_config.h.in modules/ftp/ftp_config.h else - found_features="`echo \"$found_features\" | sed -e '#s*/#*\\$/#g;'`" - eval sed $found_features < modules/ftp/ftp_config.h.in \ + eval sed "$found_features" < modules/ftp/ftp_config.h.in \ > modules/ftp/ftp_config.h fi From gibbsjoseph@example.org Wed Jun 02 21:13:53 2010 Return-Path: <gibbsjoseph@example.org> Delivered-To: gibbsjoseph@example.org Received: (qmail 67829 invoked from network); 2 Jun 2010 21:13:52 -0000 Received: from unknown (HELO mail.apache.org) (83.161.120.155) by 83.161.120.155 with SMTP; 2 Jun 2010 21:13:52 -0000 Received: (qmail 64823 invoked by uid 500); 2 Jun 2010 21:13:52 -0000 Delivered-To: gibbsjoseph@example.org Received: (qmail 64753 invoked by uid 500); 2 Jun 2010 21:13:52 -0000 Mailing-List: contact gibbsjoseph@example.org; run by ezmlm Precedence: bulk Reply-To: gibbsjoseph@example.org list-help: <mailto:gibbsjoseph@example.org> list-unsubscribe: <mailto:gibbsjoseph@example.org> List-Post: <mailto:gibbsjoseph@example.org> List-Id: <cvs.httpd.apache.org> Delivered-To: mailing list gibbsjoseph@example.org Received: (qmail 64746 invoked by uid 99); 2 Jun 2010 21:13:52 -0000 Received: from athena.apache.org (HELO athena.apache.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 02 Jun 2010 21:13:52 +0000 X-ASF-Spam-Status: No, hits=-1344.6 required=10.0 tests=ALL_TRUSTED,AWL X-Spam-Check-By: apache.org Received: from [83.161.120.155] (HELO eris.apache.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 02 Jun 2010 21:13:51 +0000 Received: by eris.apache.org (Postfix, from userid 65534) id 1667423888CD; Wed, 2 Jun 2010 21:13:31 +0000 (UTC) Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Subject: svn commit: r950760 - /httpd/httpd/trunk/STATUS Date: Wed, 02 Jun 2010 21:13:30 -0000 To: gibbsjoseph@example.org From: gibbsjoseph@example.org X-Mailer: svnmailer-1.0.8 Message-Id: <gibbsjoseph@example.org> Author: sf Date: Wed Jun 2 21:13:28 2010 New Revision: 950760 URL: http://svn.apache.org/viewvc?rev=950760&view=rev Log: another blocker for beta Modified: httpd/httpd/trunk/STATUS Modified: httpd/httpd/trunk/STATUS URL: http://svn.apache.org/viewvc/httpd/httpd/trunk/STATUS?rev=950760&r1=950759&r2=950760&view=diff ============================================================================== --- httpd/httpd/trunk/STATUS (original) +++ httpd/httpd/trunk/STATUS Wed Jun 2 21:13:28 2010 @@ -75,6 +75,10 @@ RELEASE SHOWSTOPPERS: http://marc.info/?l=apache-httpd-dev&m=123910381908293&w=1 + * MPM event (maybe others, too) closes open files only after the + connection has been closed. This could be fixed in apr-util or httpd: + http://mail-archives.apache.org/mod_mbox/httpd-dev/201005.mbox/<gibbsjoseph@example.org> + FOR NEXT ALPHA: From gibbsjoseph@example.org Wed Jun 02 21:17:46 2010 Return-Path: <gibbsjoseph@example.org> Delivered-To: gibbsjoseph@example.org Received: (qmail 68847 invoked from network); 2 Jun 2010 21:17:46 -0000 Received: from unknown (HELO mail.apache.org) (83.161.120.155) by 83.161.120.155 with SMTP; 2 Jun 2010 21:17:46 -0000 Received: (qmail 69907 invoked by uid 500); 2 Jun 2010 21:17:45 -0000 Delivered-To: gibbsjoseph@example.org Received: (qmail 69862 invoked by uid 500); 2 Jun 2010 21:17:45 -0000 Mailing-List: contact gibbsjoseph@example.org; run by ezmlm Precedence: bulk Reply-To: gibbsjoseph@example.org list-help: <mailto:gibbsjoseph@example.org> list-unsubscribe: <mailto:gibbsjoseph@example.org> List-Post: <mailto:gibbsjoseph@example.org> List-Id: <cvs.httpd.apache.org> Delivered-To: mailing list gibbsjoseph@example.org Received: (qmail 69855 invoked by uid 99); 2 Jun 2010 21:17:45 -0000 Received: from nike.apache.org (HELO nike.apache.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 02 Jun 2010 21:17:45 +0000 X-ASF-Spam-Status: No, hits=-2000.0 required=10.0 tests=ALL_TRUSTED X-Spam-Check-By: apache.org Received: from [83.161.120.155] (HELO eris.apache.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 02 Jun 2010 21:17:43 +0000 Received: by eris.apache.org (Postfix, from userid 65534) id 56FFA23888CD; Wed, 2 Jun 2010 21:17:22 +0000 (UTC) Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Subject: svn commit: r950761 - /httpd/httpd/trunk/CHANGES Date: Wed, 02 Jun 2010 21:17:21 -0000 To: gibbsjoseph@example.org From: gibbsjoseph@example.org X-Mailer: svnmailer-1.0.8 Message-Id: <gibbsjoseph@example.org> X-Virus-Checked: Checked by ClamAV on apache.org Author: covener Date: Wed Jun 2 21:17:19 2010 New Revision: 950761 URL: http://svn.apache.org/viewvc?rev=950761&view=rev Log: 2.3.6 is under development, not 2.3.7. banner mistakenly added in r909323 Modified: httpd/httpd/trunk/CHANGES Modified: httpd/httpd/trunk/CHANGES URL: http://svn.apache.org/viewvc/httpd/httpd/trunk/CHANGES?rev=950761&r1=950760&r2=950761&view=diff ============================================================================== --- httpd/httpd/trunk/CHANGES [utf-8] (original) +++ httpd/httpd/trunk/CHANGES [utf-8] Wed Jun 2 21:17:19 2010 @@ -1,6 +1,6 @@ -*- coding: utf-8 -*- -Changes with Apache 2.3.7 +Changes with Apache 2.3.6 *) SECURITY: CVE-2009-3555 (cve.mitre.org) mod_ssl: Comprehensive fix of the TLS renegotiation prefix injection @@ -167,8 +167,6 @@ Changes with Apache 2.3.7 *) apxs: Fix -A and -a options to ignore whitespace in httpd.conf [Philip M. Gollucci] -Changes with Apache 2.3.6 - *) worker: Don't report server has reached MaxClients until it has. Add message when server gets within MinSpareThreads of MaxClients. PR 46996. [Dan Poirier] From gibbsjoseph@example.org Wed Jun 02 21:55:19 2010 Return-Path: <gibbsjoseph@example.org> Delivered-To: gibbsjoseph@example.org Received: (qmail 79158 invoked from network); 2 Jun 2010 21:55:18 -0000 Received: from unknown (HELO mail.apache.org) (83.161.120.155) by 83.161.120.155 with SMTP; 2 Jun 2010 21:55:18 -0000 Received: (qmail 27123 invoked by uid 500); 2 Jun 2010 21:55:18 -0000 Delivered-To: gibbsjoseph@example.org Received: (qmail 27052 invoked by uid 500); 2 Jun 2010 21:55:18 -0000 Mailing-List: contact gibbsjoseph@example.org; run by ezmlm Precedence: bulk Reply-To: gibbsjoseph@example.org list-help: <mailto:gibbsjoseph@example.org> list-unsubscribe: <mailto:gibbsjoseph@example.org> List-Post: <mailto:gibbsjoseph@example.org> List-Id: <cvs.httpd.apache.org> Delivered-To: mailing list gibbsjoseph@example.org Received: (qmail 27045 invoked by uid 99); 2 Jun 2010 21:55:18 -0000 Received: from athena.apache.org (HELO athena.apache.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 02 Jun 2010 21:55:18 +0000 X-ASF-Spam-Status: No, hits=-1364.5 required=10.0 tests=ALL_TRUSTED,AWL X-Spam-Check-By: apache.org Received: from [83.161.120.155] (HELO eris.apache.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 02 Jun 2010 21:55:18 +0000 Received: by eris.apache.org (Postfix, from userid 65534) id 018E823888FE; Wed, 2 Jun 2010 21:54:58 +0000 (UTC) Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Subject: svn commit: r950789 - /httpd/httpd/trunk/include/ap_mmn.h Date: Wed, 02 Jun 2010 21:54:57 -0000 To: gibbsjoseph@example.org From: gibbsjoseph@example.org X-Mailer: svnmailer-1.0.8 Message-Id: <gibbsjoseph@example.org> Author: sf Date: Wed Jun 2 21:54:57 2010 New Revision: 950789 URL: http://svn.apache.org/viewvc?rev=950789&view=rev Log: we are gibbsjoseph@example.org Modified: httpd/httpd/trunk/include/ap_mmn.h Modified: httpd/httpd/trunk/include/ap_mmn.h URL: http://svn.apache.org/viewvc/httpd/httpd/trunk/include/ap_mmn.h?rev=950789&r1=950788&r2=950789&view=diff ============================================================================== --- httpd/httpd/trunk/include/ap_mmn.h (original) +++ httpd/httpd/trunk/include/ap_mmn.h Wed Jun 2 21:54:57 2010 @@ -216,10 +216,10 @@ * 20091230.4 (2.3.6-dev) export ap_process_request_after_handler() for mod_serf * 20100208.0 (2.3.6-dev) ap_socache_provider_t API changes to store and iterate * 20100208.1 (2.3.6-dev) Added forward member to proxy_conn_rec - * 20100208.2 (2.3.7-dev) Added ap_log_command_line(). - * 20100223.0 (2.3.7-dev) LDAP client_certs per-server moved to per-dir - * 20100223.1 (2.3.7-dev) Added ap_process_fnmatch_configs(). - * 20100504.0 (2.3.7-dev) Added name arg to ap_{proc,global}_mutex_create(). + * 20100208.2 (2.3.6-dev) Added ap_log_command_line(). + * 20100223.0 (2.3.6-dev) LDAP client_certs per-server moved to per-dir + * 20100223.1 (2.3.6-dev) Added ap_process_fnmatch_configs(). + * 20100504.0 (2.3.6-dev) Added name arg to ap_{proc,global}_mutex_create(). */ #define MODULE_MAGIC_COOKIE 0x41503234UL /* "AP24" */ From gibbsjoseph@example.org Thu Jun 03 14:59:23 2010 Return-Path: <gibbsjoseph@example.org> Delivered-To: gibbsjoseph@example.org Received: (qmail 78640 invoked from network); 3 Jun 2010 14:59:22 -0000 Received: from unknown (HELO mail.apache.org) (83.161.120.155) by 83.161.120.155 with SMTP; 3 Jun 2010 14:59:22 -0000 Received: (qmail 10465 invoked by uid 500); 3 Jun 2010 14:59:22 -0000 Delivered-To: gibbsjoseph@example.org Received: (qmail 10378 invoked by uid 500); 3 Jun 2010 14:59:21 -0000 Mailing-List: contact gibbsjoseph@example.org; run by ezmlm Precedence: bulk Reply-To: gibbsjoseph@example.org list-help: <mailto:gibbsjoseph@example.org> list-unsubscribe: <mailto:gibbsjoseph@example.org> List-Post: <mailto:gibbsjoseph@example.org> List-Id: <cvs.httpd.apache.org> Delivered-To: mailing list gibbsjoseph@example.org Received: (qmail 10371 invoked by uid 99); 3 Jun 2010 14:59:21 -0000 Received: from nike.apache.org (HELO nike.apache.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 03 Jun 2010 14:59:21 +0000 X-ASF-Spam-Status: No, hits=-2000.0 required=10.0 tests=ALL_TRUSTED X-Spam-Check-By: apache.org Received: from [83.161.120.155] (HELO eris.apache.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 03 Jun 2010 14:59:18 +0000 Received: by eris.apache.org (Postfix, from userid 65534) id B171E238897D; Thu, 3 Jun 2010 14:58:57 +0000 (UTC) Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Subject: svn commit: r951017 - /httpd/httpd/trunk/STATUS Date: Thu, 03 Jun 2010 14:58:57 -0000 To: gibbsjoseph@example.org From: gibbsjoseph@example.org X-Mailer: svnmailer-1.0.8 Message-Id: <gibbsjoseph@example.org> X-Virus-Checked: Checked by ClamAV on apache.org Author: sctemme Date: Thu Jun 3 14:58:57 2010 New Revision: 951017 URL: http://svn.apache.org/viewvc?rev=951017&view=rev Log: Vote. Even if there is no Vote. Modified: httpd/httpd/trunk/STATUS Modified: httpd/httpd/trunk/STATUS URL: http://svn.apache.org/viewvc/httpd/httpd/trunk/STATUS?rev=951017&r1=951016&r2=951017&view=diff ============================================================================== --- httpd/httpd/trunk/STATUS (original) +++ httpd/httpd/trunk/STATUS Thu Jun 3 14:58:57 2010 @@ -110,7 +110,7 @@ CURRENT VOTES: "hot spare"). See: Message-ID: <gibbsjoseph@example.org> - Self-destruct: Ken, Martin, Lars + Self-destruct: Ken, Martin, Lars, sctemme (parent shouldn't die, ever) Not self-destruct: BrianP, Ian, Cliff, BillS Make it runtime configurable: Aaron, jim, Justin, wrowe, rederpj, nd, pgollucci @@ -121,7 +121,7 @@ CURRENT VOTES: something useful?) * Make the worker MPM the default MPM for threaded Unix boxes. - +1: Justin, Ian, Cliff, BillS, striker, wrowe, nd, pgollucci + +1: Justin, Ian, Cliff, BillS, striker, wrowe, nd, pgollucci, sctemme +0: BrianP, Aaron (mutex contention is looking better with the latest code, let's continue tuning and testing), rederpj, jim -0: Lars @@ -133,6 +133,7 @@ CURRENT VOTES: Recent discussion indicates we should designate a (short name). This is not yet a [Vote] - Your nominations please: * Apache HTTP Server (httpd) + +1: sctemme (why mess with it?) RELEASE NON-SHOWSTOPPERS BUT WOULD BE REAL NICE TO WRAP THESE UP: @@ -258,7 +259,7 @@ RELEASE NON-SHOWSTOPPERS BUT WOULD BE RE the ja-jis encoding. * There is increasing demand from module writers for an API - that will allow them to control the server à la apachectl. + that will allow them to control the server à la apachectl. Reasons include sole-function servers that need to die if an external dependency (e.g., a database) fails, et cetera. Perhaps something in the (ever more abused) scoreboard? From gibbsjoseph@example.org Thu Jun 03 15:11:20 2010 Return-Path: <gibbsjoseph@example.org> Delivered-To: gibbsjoseph@example.org Received: (qmail 86318 invoked from network); 3 Jun 2010 15:11:20 -0000 Received: from unknown (HELO mail.apache.org) (83.161.120.155) by 83.161.120.155 with SMTP; 3 Jun 2010 15:11:20 -0000 Received: (qmail 24017 invoked by uid 500); 3 Jun 2010 15:11:19 -0000 Delivered-To: gibbsjoseph@example.org Received: (qmail 23954 invoked by uid 500); 3 Jun 2010 15:11:19 -0000 Mailing-List: contact gibbsjoseph@example.org; run by ezmlm Precedence: bulk Reply-To: gibbsjoseph@example.org list-help: <mailto:gibbsjoseph@example.org> list-unsubscribe: <mailto:gibbsjoseph@example.org> List-Post: <mailto:gibbsjoseph@example.org> List-Id: <cvs.httpd.apache.org> Delivered-To: mailing list gibbsjoseph@example.org Received: (qmail 23947 invoked by uid 99); 3 Jun 2010 15:11:19 -0000 Received: from nike.apache.org (HELO nike.apache.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 03 Jun 2010 15:11:19 +0000 X-ASF-Spam-Status: No, hits=-2000.0 required=10.0 tests=ALL_TRUSTED X-Spam-Check-By: apache.org Received: from [83.161.120.155] (HELO eris.apache.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 03 Jun 2010 15:11:16 +0000 Received: by eris.apache.org (Postfix, from userid 65534) id 860B023888CD; Thu, 3 Jun 2010 15:10:54 +0000 (UTC) Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Subject: svn commit: r951025 - in /httpd/site/trunk/xdocs: apreq/docs/libapreq2/apreq_install.html apreq/index.html apreq/index.xml dev/devnotes.xml mod_fcgid/index.en.xml mod_ftp/index.en.xml mod_mbox/index.xml mod_smtpd/index.xml test/index.xml Date: Thu, 03 Jun 2010 15:10:54 -0000 To: gibbsjoseph@example.org From: gibbsjoseph@example.org X-Mailer: svnmailer-1.0.8 Message-Id: <gibbsjoseph@example.org> X-Virus-Checked: Checked by ClamAV on apache.org Author: poirier Date: Thu Jun 3 15:10:53 2010 New Revision: 951025 URL: http://svn.apache.org/viewvc?rev=951025&view=rev Log: Update subversion links. Modified: httpd/site/trunk/xdocs/apreq/docs/libapreq2/apreq_install.html httpd/site/trunk/xdocs/apreq/index.html httpd/site/trunk/xdocs/apreq/index.xml httpd/site/trunk/xdocs/dev/devnotes.xml httpd/site/trunk/xdocs/mod_fcgid/index.en.xml httpd/site/trunk/xdocs/mod_ftp/index.en.xml httpd/site/trunk/xdocs/mod_mbox/index.xml httpd/site/trunk/xdocs/mod_smtpd/index.xml httpd/site/trunk/xdocs/test/index.xml Modified: httpd/site/trunk/xdocs/apreq/docs/libapreq2/apreq_install.html URL: http://svn.apache.org/viewvc/httpd/site/trunk/xdocs/apreq/docs/libapreq2/apreq_install.html?rev=951025&r1=951024&r2=951025&view=diff ============================================================================== --- httpd/site/trunk/xdocs/apreq/docs/libapreq2/apreq_install.html (original) +++ httpd/site/trunk/xdocs/apreq/docs/libapreq2/apreq_install.html Thu Jun 3 15:10:53 2010 @@ -75,7 +75,7 @@ enable ssl. Subversion sources, and binaries for some platforms, may be obtained through the home page: - http://subversion.tigris.org/ + http://subversion.apache.org/ Documentation on using svn is available at @@ -83,7 +83,7 @@ Documentation on using svn is available In particular, - http://svnbook.red-bean.com/en/1.0/apa.html + http://svnbook.red-bean.com/en/1.5/svn.forcvs.html contains a guide for users familiar with cvs. Modified: httpd/site/trunk/xdocs/apreq/index.html URL: http://svn.apache.org/viewvc/httpd/site/trunk/xdocs/apreq/index.html?rev=951025&r1=951024&r2=951025&view=diff ============================================================================== --- httpd/site/trunk/xdocs/apreq/index.html (original) +++ httpd/site/trunk/xdocs/apreq/index.html Thu Jun 3 15:10:53 2010 @@ -91,7 +91,7 @@ and <a href="Apache-Cookie.html">here (A <h2>SVN</h2> <p>Development of libapreq can be followed through the -<a href="http://subversion.tigris.org/">Subversion</a> repositories. +<a href="http://subversion.apache.org/">Subversion</a> repositories. For public access you can use</p> <pre><code> % svn checkout http://svn.apache.org/repos/asf/httpd/apreq/trunk/ httpd-apreq-2 Modified: httpd/site/trunk/xdocs/apreq/index.xml URL: http://svn.apache.org/viewvc/httpd/site/trunk/xdocs/apreq/index.xml?rev=951025&r1=951024&r2=951025&view=diff ============================================================================== --- httpd/site/trunk/xdocs/apreq/index.xml [utf-8] (original) +++ httpd/site/trunk/xdocs/apreq/index.xml [utf-8] Thu Jun 3 15:10:53 2010 @@ -70,7 +70,7 @@ at <a href="docs/libapreq2">http://httpd </section> <section><title>SVN</title> <p>Development of libapreq can be followed through the -<a href="http://subversion.tigris.org/">Subversion</a> repositories. +<a href="http://subversion.apache.org/">Subversion</a> repositories. For public access you can use</p> <pre><code> % svn checkout http://svn.apache.org/repos/asf/httpd/apreq/trunk/ httpd-apreq-2 Modified: httpd/site/trunk/xdocs/dev/devnotes.xml URL: http://svn.apache.org/viewvc/httpd/site/trunk/xdocs/dev/devnotes.xml?rev=951025&r1=951024&r2=951025&view=diff ============================================================================== --- httpd/site/trunk/xdocs/dev/devnotes.xml [utf-8] (original) +++ httpd/site/trunk/xdocs/dev/devnotes.xml [utf-8] Thu Jun 3 15:10:53 2010 @@ -16,7 +16,7 @@ development nits and the maintenance of <title>Overview</title> <p>The Apache HTTP Server Project has switched to -<a href="http://subversion.tigris.org/">Subversion</a> for hosting its source +<a href="http://subversion.apache.org/">Subversion</a> for hosting its source code.</p> <p>To check out the 2.2.x branch:</p> @@ -59,7 +59,7 @@ scalable.</p> <p>Almost all files relating to Apache, both the actual sources and the files that aren't part of the distribution, are now maintained in an -<a href="http://subversion.tigris.org/">SVN</a> repository. Here is the way +<a href="http://subversion.apache.org/">SVN</a> repository. Here is the way in which changes are applied:</p> <ol> Modified: httpd/site/trunk/xdocs/mod_fcgid/index.en.xml URL: http://svn.apache.org/viewvc/httpd/site/trunk/xdocs/mod_fcgid/index.en.xml?rev=951025&r1=951024&r2=951025&view=diff ============================================================================== --- httpd/site/trunk/xdocs/mod_fcgid/index.en.xml [utf-8] (original) +++ httpd/site/trunk/xdocs/mod_fcgid/index.en.xml [utf-8] Thu Jun 3 15:10:53 2010 @@ -29,7 +29,7 @@ </p> <p>Development of mod_fcgid can be followed through the - <a href="http://subversion.tigris.org/">Subversion</a> + <a href="http://subversion.apache.org/">Subversion</a> repositories. For public access you can use: </p> Modified: httpd/site/trunk/xdocs/mod_ftp/index.en.xml URL: http://svn.apache.org/viewvc/httpd/site/trunk/xdocs/mod_ftp/index.en.xml?rev=951025&r1=951024&r2=951025&view=diff ============================================================================== --- httpd/site/trunk/xdocs/mod_ftp/index.en.xml [utf-8] (original) +++ httpd/site/trunk/xdocs/mod_ftp/index.en.xml [utf-8] Thu Jun 3 15:10:53 2010 @@ -28,7 +28,7 @@ </p> <p>Development of mod_ftp can be followed through the - <a href="http://subversion.tigris.org/">Subversion</a> + <a href="http://subversion.apache.org/">Subversion</a> repositories. For public access you can use : </p> Modified: httpd/site/trunk/xdocs/mod_mbox/index.xml URL: http://svn.apache.org/viewvc/httpd/site/trunk/xdocs/mod_mbox/index.xml?rev=951025&r1=951024&r2=951025&view=diff ============================================================================== --- httpd/site/trunk/xdocs/mod_mbox/index.xml [utf-8] (original) +++ httpd/site/trunk/xdocs/mod_mbox/index.xml [utf-8] Thu Jun 3 15:10:53 2010 @@ -63,7 +63,7 @@ <p> Development of mod_mbox can be followed through the <a - href="http://subversion.tigris.org/">Subversion</a> + href="http://subversion.apache.org/">Subversion</a> repositories. For public access you can use : </p> Modified: httpd/site/trunk/xdocs/mod_smtpd/index.xml URL: http://svn.apache.org/viewvc/httpd/site/trunk/xdocs/mod_smtpd/index.xml?rev=951025&r1=951024&r2=951025&view=diff ============================================================================== --- httpd/site/trunk/xdocs/mod_smtpd/index.xml [utf-8] (original) +++ httpd/site/trunk/xdocs/mod_smtpd/index.xml [utf-8] Thu Jun 3 15:10:53 2010 @@ -37,7 +37,7 @@ <tt>mod_smtpd</tt> hasn't been released yet. It is still alpha quality and isn't ready for production use. If you'd like to try it out development of mod_smtpd can be followed through the - <a href="http://subversion.tigris.org/">Subversion</a> + <a href="http://subversion.apache.org/">Subversion</a> repositories. For public access you can use : </p> Modified: httpd/site/trunk/xdocs/test/index.xml URL: http://svn.apache.org/viewvc/httpd/site/trunk/xdocs/test/index.xml?rev=951025&r1=951024&r2=951025&view=diff ============================================================================== --- httpd/site/trunk/xdocs/test/index.xml [utf-8] (original) +++ httpd/site/trunk/xdocs/test/index.xml [utf-8] Thu Jun 3 15:10:53 2010 @@ -57,7 +57,7 @@ gibbsjoseph@example.org. Our old archives <p>You may browse the httpd-test repositories <a href="http://svn.apache.org/viewcvs.cgi/httpd/test/">online</a>.</p> -<p>Anonymous <a href="http://subversion.tigris.org/">Subversion</a> +<p>Anonymous <a href="http://subversion.apache.org/">Subversion</a> is available.</p> <pre> % svn checkout http://svn.apache.org/repos/asf/httpd/test/framework/trunk/ httpd-framework From gibbsjoseph@example.org Thu Jun 03 15:13:34 2010 Return-Path: <gibbsjoseph@example.org> Delivered-To: gibbsjoseph@example.org Received: (qmail 86995 invoked from network); 3 Jun 2010 15:13:34 -0000 Received: from unknown (HELO mail.apache.org) (83.161.120.155) by 83.161.120.155 with SMTP; 3 Jun 2010 15:13:34 -0000 Received: (qmail 27884 invoked by uid 500); 3 Jun 2010 15:13:33 -0000 Delivered-To: gibbsjoseph@example.org Received: (qmail 27833 invoked by uid 500); 3 Jun 2010 15:13:33 -0000 Mailing-List: contact gibbsjoseph@example.org; run by ezmlm Precedence: bulk Reply-To: gibbsjoseph@example.org list-help: <mailto:gibbsjoseph@example.org> list-unsubscribe: <mailto:gibbsjoseph@example.org> List-Post: <mailto:gibbsjoseph@example.org> List-Id: <cvs.httpd.apache.org> Delivered-To: mailing list gibbsjoseph@example.org Received: (qmail 27826 invoked by uid 99); 3 Jun 2010 15:13:33 -0000 Received: from nike.apache.org (HELO nike.apache.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 03 Jun 2010 15:13:33 +0000 X-ASF-Spam-Status: No, hits=-2000.0 required=10.0 tests=ALL_TRUSTED X-Spam-Check-By: apache.org Received: from [83.161.120.155] (HELO eris.apache.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 03 Jun 2010 15:13:30 +0000 Received: by eris.apache.org (Postfix, from userid 65534) id 981BE23888CD; Thu, 3 Jun 2010 15:13:07 +0000 (UTC) Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Subject: svn commit: r951027 - in /httpd/site/trunk/docs: apreq/docs/libapreq2/apreq_install.html dev/devnotes.html mod_fcgid/index.en.html mod_ftp/index.en.html mod_mbox/index.html mod_smtpd/index.html test/index.html Date: Thu, 03 Jun 2010 15:13:07 -0000 To: gibbsjoseph@example.org From: gibbsjoseph@example.org X-Mailer: svnmailer-1.0.8 Message-Id: <gibbsjoseph@example.org> X-Virus-Checked: Checked by ClamAV on apache.org Author: poirier Date: Thu Jun 3 15:13:07 2010 New Revision: 951027 URL: http://svn.apache.org/viewvc?rev=951027&view=rev Log: Rebuild site after updating subversion links Modified: httpd/site/trunk/docs/apreq/docs/libapreq2/apreq_install.html httpd/site/trunk/docs/dev/devnotes.html httpd/site/trunk/docs/mod_fcgid/index.en.html httpd/site/trunk/docs/mod_ftp/index.en.html httpd/site/trunk/docs/mod_mbox/index.html httpd/site/trunk/docs/mod_smtpd/index.html httpd/site/trunk/docs/test/index.html Modified: httpd/site/trunk/docs/apreq/docs/libapreq2/apreq_install.html URL: http://svn.apache.org/viewvc/httpd/site/trunk/docs/apreq/docs/libapreq2/apreq_install.html?rev=951027&r1=951026&r2=951027&view=diff ============================================================================== --- httpd/site/trunk/docs/apreq/docs/libapreq2/apreq_install.html [utf-8] (original) +++ httpd/site/trunk/docs/apreq/docs/libapreq2/apreq_install.html [utf-8] Thu Jun 3 15:13:07 2010 @@ -75,7 +75,7 @@ enable ssl. Subversion sources, and binaries for some platforms, may be obtained through the home page: - http://subversion.tigris.org/ + http://subversion.apache.org/ Documentation on using svn is available at @@ -83,7 +83,7 @@ Documentation on using svn is available In particular, - http://svnbook.red-bean.com/en/1.0/apa.html + http://svnbook.red-bean.com/en/1.5/svn.forcvs.html contains a guide for users familiar with cvs. Modified: httpd/site/trunk/docs/dev/devnotes.html URL: http://svn.apache.org/viewvc/httpd/site/trunk/docs/dev/devnotes.html?rev=951027&r1=951026&r2=951027&view=diff ============================================================================== --- httpd/site/trunk/docs/dev/devnotes.html [utf-8] (original) +++ httpd/site/trunk/docs/dev/devnotes.html [utf-8] Thu Jun 3 15:13:07 2010 @@ -86,7 +86,7 @@ development nits and the maintenance of <tr><td> <blockquote> <p>The Apache HTTP Server Project has switched to -<a href="http://subversion.tigris.org/">Subversion</a> for hosting its source +<a href="http://subversion.apache.org/">Subversion</a> for hosting its source code.</p> <p>To check out the 2.2.x branch:</p> <blockquote> @@ -128,7 +128,7 @@ scalable.</p> <blockquote> <p>Almost all files relating to Apache, both the actual sources and the files that aren't part of the distribution, are now maintained in an -<a href="http://subversion.tigris.org/">SVN</a> repository. Here is the way +<a href="http://subversion.apache.org/">SVN</a> repository. Here is the way in which changes are applied:</p> <ol> <li>Developer checks out a copy of the files on which he wants to Modified: httpd/site/trunk/docs/mod_fcgid/index.en.html URL: http://svn.apache.org/viewvc/httpd/site/trunk/docs/mod_fcgid/index.en.html?rev=951027&r1=951026&r2=951027&view=diff ============================================================================== --- httpd/site/trunk/docs/mod_fcgid/index.en.html [utf-8] (original) +++ httpd/site/trunk/docs/mod_fcgid/index.en.html [utf-8] Thu Jun 3 15:13:07 2010 @@ -97,7 +97,7 @@ href="/info/">Miscellaneous</a></b></p> <a href="http://httpd.apache.org/download.cgi#mod_fcgid">your local mirror</a> </p> <p>Development of mod_fcgid can be followed through the - <a href="http://subversion.tigris.org/">Subversion</a> + <a href="http://subversion.apache.org/">Subversion</a> repositories. For public access you can use: </p> <code> Modified: httpd/site/trunk/docs/mod_ftp/index.en.html URL: http://svn.apache.org/viewvc/httpd/site/trunk/docs/mod_ftp/index.en.html?rev=951027&r1=951026&r2=951027&view=diff ============================================================================== --- httpd/site/trunk/docs/mod_ftp/index.en.html [utf-8] (original) +++ httpd/site/trunk/docs/mod_ftp/index.en.html [utf-8] Thu Jun 3 15:13:07 2010 @@ -97,7 +97,7 @@ href="/info/">Miscellaneous</a></b></p> mirror</a>. </p> <p>Development of mod_ftp can be followed through the - <a href="http://subversion.tigris.org/">Subversion</a> + <a href="http://subversion.apache.org/">Subversion</a> repositories. For public access you can use : </p> <code> Modified: httpd/site/trunk/docs/mod_mbox/index.html URL: http://svn.apache.org/viewvc/httpd/site/trunk/docs/mod_mbox/index.html?rev=951027&r1=951026&r2=951027&view=diff ============================================================================== --- httpd/site/trunk/docs/mod_mbox/index.html [utf-8] (original) +++ httpd/site/trunk/docs/mod_mbox/index.html [utf-8] Thu Jun 3 15:13:07 2010 @@ -158,7 +158,7 @@ href="/info/">Miscellaneous</a></b></p> <tr><td> <blockquote> <p> - Development of mod_mbox can be followed through the <a href="http://subversion.tigris.org/">Subversion</a> + Development of mod_mbox can be followed through the <a href="http://subversion.apache.org/">Subversion</a> repositories. For public access you can use : </p> <pre><code> Modified: httpd/site/trunk/docs/mod_smtpd/index.html URL: http://svn.apache.org/viewvc/httpd/site/trunk/docs/mod_smtpd/index.html?rev=951027&r1=951026&r2=951027&view=diff ============================================================================== --- httpd/site/trunk/docs/mod_smtpd/index.html [utf-8] (original) +++ httpd/site/trunk/docs/mod_smtpd/index.html [utf-8] Thu Jun 3 15:13:07 2010 @@ -107,7 +107,7 @@ href="/info/">Miscellaneous</a></b></p> <tt>mod_smtpd</tt> hasn't been released yet. It is still alpha quality and isn't ready for production use. If you'd like to try it out development of mod_smtpd can be followed through the - <a href="http://subversion.tigris.org/">Subversion</a> + <a href="http://subversion.apache.org/">Subversion</a> repositories. For public access you can use : </p> <code> Modified: httpd/site/trunk/docs/test/index.html URL: http://svn.apache.org/viewvc/httpd/site/trunk/docs/test/index.html?rev=951027&r1=951026&r2=951027&view=diff ============================================================================== --- httpd/site/trunk/docs/test/index.html [utf-8] (original) +++ httpd/site/trunk/docs/test/index.html [utf-8] Thu Jun 3 15:13:07 2010 @@ -128,7 +128,7 @@ gibbsjoseph@example.org. Our old archives <tr><td> <blockquote> <p>You may browse the httpd-test repositories <a href="http://svn.apache.org/viewcvs.cgi/httpd/test/">online</a>.</p> -<p>Anonymous <a href="http://subversion.tigris.org/">Subversion</a> +<p>Anonymous <a href="http://subversion.apache.org/">Subversion</a> is available.</p> <pre> % svn checkout http://svn.apache.org/repos/asf/httpd/test/framework/trunk/ httpd-framework From gibbsjoseph@example.org Thu Jun 03 18:51:50 2010 Return-Path: <gibbsjoseph@example.org> Delivered-To: gibbsjoseph@example.org Received: (qmail 71390 invoked from network); 3 Jun 2010 18:51:50 -0000 Received: from unknown (HELO mail.apache.org) (83.161.120.155) by 83.161.120.155 with SMTP; 3 Jun 2010 18:51:50 -0000 Received: (qmail 96224 invoked by uid 500); 3 Jun 2010 18:51:50 -0000 Delivered-To: gibbsjoseph@example.org Received: (qmail 96170 invoked by uid 500); 3 Jun 2010 18:51:50 -0000 Mailing-List: contact gibbsjoseph@example.org; run by ezmlm Precedence: bulk Reply-To: gibbsjoseph@example.org list-help: <mailto:gibbsjoseph@example.org> list-unsubscribe: <mailto:gibbsjoseph@example.org> List-Post: <mailto:gibbsjoseph@example.org> List-Id: <cvs.httpd.apache.org> Delivered-To: mailing list gibbsjoseph@example.org Received: (qmail 96163 invoked by uid 99); 3 Jun 2010 18:51:50 -0000 Received: from nike.apache.org (HELO nike.apache.org) (83.161.120.155) by
{'source': 'Apache Software Foundation Public Mail Archives'}