which protects against bad stuff when mod_auth_ldap's check_user_id
hook doesn't complete or isn't called, but auth_checker is.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@231033 13f79535-47bb-0310-9956-ffa450edef68

* modules/ldap/util_ldap.c (util_ldap_child_init): Don't segfault if
the cache has been disabled (when _cache_lock == NULL).
(util_ldap_post_config): Set mutex permissions if necessary.

Reviewed by: jorton, minfrin, wrowe


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@231006 13f79535-47bb-0310-9956-ffa450edef68

  Another patch, reviewed.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@230773 13f79535-47bb-0310-9956-ffa450edef68

  A few other small patches; which serve only to make the httpd-2.0.x
  code entirely comparable to httpd-trunk.  This comparison calls out
  exactly what's changed "on purpose" with our proxy API, and what 
  patches have been applied to trunk which aren't backported.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@230746 13f79535-47bb-0310-9956-ffa450edef68

  promote a patch to accepted, vote another

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@230731 13f79535-47bb-0310-9956-ffa450edef68

  Remove the earlier discussion.  If folks want to play hand-me-a-rock, then
  here's a rockslide of 20 small rocks.  Votes please, let's fix these bugs
  already after 3 months of public disclosure..


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@230730 13f79535-47bb-0310-9956-ffa450edef68

  Revert my commits 230595/230592, restoring Jeff's commit 171205.

  Taking this all to branches/proxy-reqbody-2.0.x/ for discussion.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@230701 13f79535-47bb-0310-9956-ffa450edef68

  Prevent commits to httpd/ from recursing into repos/asf/apr, and 
  clean up ?zlib ?openssl svn output for win32 users who bury such 
  things into srclib/.



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@230699 13f79535-47bb-0310-9956-ffa450edef68

  Clarify after the revert of the original backport; a number of
  concerns addressed to hopefully sync mod_proxy_http.c to trunk
  for request handling.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@230595 13f79535-47bb-0310-9956-ffa450edef68

  As much as it pains me, seriously, it seems that reviewing the re-backport
  of this code was too illegible for review, so it seems we will need to
  re-review a fresh backport from httpd trunk.  

  Vetoed this patch as it does not follow RFC 2616.  Specifically;

   * it does not respect the T-E over the C-L header

   * it introduces edge cases that allow the administrator to override the
     C-L T-E elections, without enough information to prevent splitting the
     request body due to misaligned C-L's

   * it does not attempt to determine if there is a 'small request body'
     to prefer a legitimate C-L when that option might be available to us

  A revised patch combining Jeff's efforts and mine is available at:

    http://people.apache.org/~wrowe/httpd-2.0.54-proxy-request.patch

  for review, which can be applied to httpd-2.0.54 and now, branches/2.0.x,
  which addresses all of the issues cited above.

  Note that I do not consider the correction of protocol.c to strip the C-L
  where T-E is present to fulfill the need for a correct implementation
  in proxy_http.c; modules have too much flexibility to modify the headers
  before they hit this logic in the proxy request body handling.



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@230592 13f79535-47bb-0310-9956-ffa450edef68

* modules/ldap/util_ldap_cache.c (util_ldap_cache_init): Use the
actual available size of the shm segment not the requested size.
Ensure the requested size is aligned.  Check errors from apr_rmm_init.

Reviewed by: jorton, minfrin, bnicholes


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@230474 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@230472 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@230455 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@227521 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@227435 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@227423 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@227422 13f79535-47bb-0310-9956-ffa450edef68

Translation into Spanish of the Authentication, Authorization and Access Control tutorial.
Translation made by Gustavo Nerea (informatica.gustavo @ gmail.com)
Translation reviewed by Jesus Blanco (blanco @ bitrock.com)



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@227421 13f79535-47bb-0310-9956-ffa450edef68

* modules/ldap/util_ldap_cache_mgr.c (util_ald_cache_insert): Fix a
cache corruption case: ensure that there is room in the cache for a
copy of the payload before inserting the node.

PR: 34209
Reviewed by: jorton, bnicholes, minfrin


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@227332 13f79535-47bb-0310-9956-ffa450edef68

* server/log.c (piped_log_spawn): Return the APR error code,
as expected by piped_log_maintenance (and fixing "Unknown
error" messages in error path there).
(ap_open_piped_log): Expect an APR error code.

* server/log.c (ap_open_piped_log): Remove errno handling.

* server/log.c (piped_log_spawn): Don't leak an fd for each
invocation.

Reviewed by: jorton, trawick, wrowe


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@227329 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@227269 13f79535-47bb-0310-9956-ffa450edef68

connection timeout on the connection, not globally, avoiding segfaults
in older version of OpenLDAP (ITS #3487).

Submitted by: Brad Nicholes
Reviewed by: jorton, wrowe


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@227253 13f79535-47bb-0310-9956-ffa450edef68

- propose two more mod_ldap fixes


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@227213 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@227040 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@225786 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@225488 13f79535-47bb-0310-9956-ffa450edef68

  Vetoed the first attempt at a 2.1-dev mod_proxy_http request body
  backport - so note this as a showstopper rather than reverting the code.

  Also note the RFC bug that the -trace.patch corrects.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@219782 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@219752 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@219670 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@219501 13f79535-47bb-0310-9956-ffa450edef68

  New fixes yesterday; slightly revised patch to match.

  The -3.patch now covers every one of my test cases flawlessly,
  please ruthlessly test/abuse/review this final(?) patch.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@219496 13f79535-47bb-0310-9956-ffa450edef68

Translated by: Nikola Smolenski <smolensk eunet.yu>
Reviewed by: Danilo Šegan <danilo gnome.org>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@219385 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@219249 13f79535-47bb-0310-9956-ffa450edef68

  Ok, next patch.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@219233 13f79535-47bb-0310-9956-ffa450edef68

  I misread the report; Watchfire applies to the fix I've committed
  to httpd-2.1 trunk, but has nothing to do with responses.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@219132 13f79535-47bb-0310-9956-ffa450edef68

  Note two patches available for 2.0.55

  There is low hanging fruit here, if anyone's up to committing a few
  backports in the next day before a release candidate is tagged ;-)


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@219103 13f79535-47bb-0310-9956-ffa450edef68

  core: strip C-L from any request with a T-E header
  resolves external origin CAN-2005-2088 issues, does not
  address internal origin C-L/T-E discrepancies within proxy_http

Security: CVE CAN-2005-2088
Submitted by: Joe Orton
Reviewed by:  Jeff Trawick, Will Rowe


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@219061 13f79535-47bb-0310-9956-ffa450edef68

  proxy HTTP - ignore C-L and disable keepalive to origin server
  
Submitted by: trawick
Reviewed by:  jorton, wrowe



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@219059 13f79535-47bb-0310-9956-ffa450edef68

  Propupdate to ignore win32 gen_test_char.exe

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@210154 13f79535-47bb-0310-9956-ffa450edef68

  Resolve 0.9.6/0.9.7/0.9.8 OpenSSL const discrepancies

Reviewed by: jorton, bnichols, wrowe

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@209825 13f79535-47bb-0310-9956-ffa450edef68