Return-Path: Delivered-To: apmail-httpd-cvs-archive@www.apache.org Received: (qmail 82266 invoked from network); 29 Oct 2005 10:13:05 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (209.237.227.199) by minotaur.apache.org with SMTP; 29 Oct 2005 10:13:05 -0000 Received: (qmail 72558 invoked by uid 500); 29 Oct 2005 10:13:05 -0000 Delivered-To: apmail-httpd-cvs-archive@httpd.apache.org Received: (qmail 72512 invoked by uid 500); 29 Oct 2005 10:13:04 -0000 Mailing-List: contact cvs-help@httpd.apache.org; run by ezmlm Precedence: bulk Reply-To: dev@httpd.apache.org list-help: list-unsubscribe: List-Post: List-Id: Delivered-To: mailing list cvs@httpd.apache.org Received: (qmail 72501 invoked by uid 99); 29 Oct 2005 10:13:04 -0000 X-ASF-Spam-Status: No, hits=-9.4 required=10.0 tests=ALL_TRUSTED,NO_REAL_NAME X-Spam-Check-By: apache.org Received: from [209.237.227.194] (HELO minotaur.apache.org) (209.237.227.194) by apache.org (qpsmtpd/0.29) with SMTP; Sat, 29 Oct 2005 03:13:01 -0700 Received: (qmail 82202 invoked by uid 65534); 29 Oct 2005 10:12:41 -0000 Message-ID: <20051029101241.82201.qmail@minotaur.apache.org> Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Subject: svn commit: r329392 - in /httpd/httpd/branches/2.2.x/docs/manual: ./ mod/ Date: Sat, 29 Oct 2005 10:12:31 -0000 To: cvs@httpd.apache.org From: colm@apache.org X-Mailer: svnmailer-1.0.5 X-Virus-Checked: Checked by ClamAV on apache.org X-Spam-Rating: minotaur.apache.org 1.6.2 0/1000/N Author: colm Date: Sat Oct 29 03:12:06 2005 New Revision: 329392 URL: http://svn.apache.org/viewcvs?rev=329392&view=rev Log: Update the transformations Modified: httpd/httpd/branches/2.2.x/docs/manual/caching.html.en httpd/httpd/branches/2.2.x/docs/manual/mod/allmodules.xml httpd/httpd/branches/2.2.x/docs/manual/mod/allmodules.xml.de httpd/httpd/branches/2.2.x/docs/manual/mod/allmodules.xml.es httpd/httpd/branches/2.2.x/docs/manual/mod/allmodules.xml.ja httpd/httpd/branches/2.2.x/docs/manual/mod/allmodules.xml.ko httpd/httpd/branches/2.2.x/docs/manual/mod/directives.html.de httpd/httpd/branches/2.2.x/docs/manual/mod/directives.html.en httpd/httpd/branches/2.2.x/docs/manual/mod/directives.html.es httpd/httpd/branches/2.2.x/docs/manual/mod/directives.html.ja.euc-jp httpd/httpd/branches/2.2.x/docs/manual/mod/directives.html.ko.euc-kr httpd/httpd/branches/2.2.x/docs/manual/mod/index.html.de httpd/httpd/branches/2.2.x/docs/manual/mod/index.html.en httpd/httpd/branches/2.2.x/docs/manual/mod/index.html.es httpd/httpd/branches/2.2.x/docs/manual/mod/index.html.ja.euc-jp httpd/httpd/branches/2.2.x/docs/manual/mod/index.html.ko.euc-kr httpd/httpd/branches/2.2.x/docs/manual/mod/mod_cache.html.en httpd/httpd/branches/2.2.x/docs/manual/mod/mod_cache.xml.ja httpd/httpd/branches/2.2.x/docs/manual/mod/mod_cache.xml.ko httpd/httpd/branches/2.2.x/docs/manual/mod/mod_dbd.html.en httpd/httpd/branches/2.2.x/docs/manual/mod/mod_dir.html.en httpd/httpd/branches/2.2.x/docs/manual/mod/mod_dir.html.ja.euc-jp httpd/httpd/branches/2.2.x/docs/manual/mod/mod_dir.html.ko.euc-kr httpd/httpd/branches/2.2.x/docs/manual/mod/mod_dir.xml.ja httpd/httpd/branches/2.2.x/docs/manual/mod/mod_dir.xml.ko httpd/httpd/branches/2.2.x/docs/manual/mod/mod_dir.xml.meta httpd/httpd/branches/2.2.x/docs/manual/mod/mod_filter.html.en httpd/httpd/branches/2.2.x/docs/manual/mod/mod_mime.html.en httpd/httpd/branches/2.2.x/docs/manual/mod/mod_mime.xml.ja httpd/httpd/branches/2.2.x/docs/manual/mod/quickreference.html.de httpd/httpd/branches/2.2.x/docs/manual/mod/quickreference.html.en httpd/httpd/branches/2.2.x/docs/manual/mod/quickreference.html.es httpd/httpd/branches/2.2.x/docs/manual/mod/quickreference.html.ja.euc-jp httpd/httpd/branches/2.2.x/docs/manual/mod/quickreference.html.ko.euc-kr httpd/httpd/branches/2.2.x/docs/manual/new_features_2_2.html.en httpd/httpd/branches/2.2.x/docs/manual/new_features_2_2.xml.ko httpd/httpd/branches/2.2.x/docs/manual/new_features_2_2.xml.pt-br httpd/httpd/branches/2.2.x/docs/manual/sitemap.html.de httpd/httpd/branches/2.2.x/docs/manual/sitemap.html.en httpd/httpd/branches/2.2.x/docs/manual/sitemap.html.es httpd/httpd/branches/2.2.x/docs/manual/sitemap.html.ja.euc-jp httpd/httpd/branches/2.2.x/docs/manual/sitemap.html.ko.euc-kr Modified: httpd/httpd/branches/2.2.x/docs/manual/caching.html.en URL: http://svn.apache.org/viewcvs/httpd/httpd/branches/2.2.x/docs/manual/caching.html.en?rev=329392&r1=329391&r2=329392&view=diff ============================================================================== --- httpd/httpd/branches/2.2.x/docs/manual/caching.html.en (original) +++ httpd/httpd/branches/2.2.x/docs/manual/caching.html.en Sat Oct 29 03:12:06 2005 @@ -297,6 +297,31 @@

Security Considerations

+

Authorisation, Access & and Control

+ + +

Using mod_cache is very much like having a built + in reverse-proxy. Requests will be served by the caching module unless + it determines that the backend should be queried. When caching local + resources, this drastically changes the security model of Apache.

+ +

As traversing a filesystem hierarchy to examine potential + .htaccess files would be a very expensive operation, + partially defeating the point of caching (to speed up requests), + mod_cache makes no decision about whether a cached + entity is authorised for serving. In other words; if + mod_cache has cached some content, it will be served + from the cache as long as that content has not expired.

+ +

If, for example, your configuration permits access to a resource by IP + address you should ensure that this content is not cached. You can do this by + using the CacheDisable + directive, or mod_expires. Left unchecked, + mod_cache - very much like a reverse proxy - would cache + the content when served and then serve it to any client, on any IP + address.

+ +

Local exploits

Modified: httpd/httpd/branches/2.2.x/docs/manual/mod/allmodules.xml URL: http://svn.apache.org/viewcvs/httpd/httpd/branches/2.2.x/docs/manual/mod/allmodules.xml?rev=329392&r1=329391&r2=329392&view=diff ============================================================================== --- httpd/httpd/branches/2.2.x/docs/manual/mod/allmodules.xml (original) +++ httpd/httpd/branches/2.2.x/docs/manual/mod/allmodules.xml Sat Oct 29 03:12:06 2005 @@ -9,6 +9,7 @@ mod_auth_digest.xml mod_authn_alias.xml mod_authn_anon.xml + mod_authn_dbd.xml mod_authn_dbm.xml mod_authn_default.xml mod_authn_file.xml Modified: httpd/httpd/branches/2.2.x/docs/manual/mod/allmodules.xml.de URL: http://svn.apache.org/viewcvs/httpd/httpd/branches/2.2.x/docs/manual/mod/allmodules.xml.de?rev=329392&r1=329391&r2=329392&view=diff ============================================================================== --- httpd/httpd/branches/2.2.x/docs/manual/mod/allmodules.xml.de (original) +++ httpd/httpd/branches/2.2.x/docs/manual/mod/allmodules.xml.de Sat Oct 29 03:12:06 2005 @@ -9,6 +9,7 @@ mod_auth_digest.xml mod_authn_alias.xml mod_authn_anon.xml + mod_authn_dbd.xml mod_authn_dbm.xml mod_authn_default.xml mod_authn_file.xml Modified: httpd/httpd/branches/2.2.x/docs/manual/mod/allmodules.xml.es URL: http://svn.apache.org/viewcvs/httpd/httpd/branches/2.2.x/docs/manual/mod/allmodules.xml.es?rev=329392&r1=329391&r2=329392&view=diff ============================================================================== --- httpd/httpd/branches/2.2.x/docs/manual/mod/allmodules.xml.es (original) +++ httpd/httpd/branches/2.2.x/docs/manual/mod/allmodules.xml.es Sat Oct 29 03:12:06 2005 @@ -9,6 +9,7 @@ mod_auth_digest.xml mod_authn_alias.xml mod_authn_anon.xml + mod_authn_dbd.xml mod_authn_dbm.xml mod_authn_default.xml mod_authn_file.xml Modified: httpd/httpd/branches/2.2.x/docs/manual/mod/allmodules.xml.ja URL: http://svn.apache.org/viewcvs/httpd/httpd/branches/2.2.x/docs/manual/mod/allmodules.xml.ja?rev=329392&r1=329391&r2=329392&view=diff ============================================================================== --- httpd/httpd/branches/2.2.x/docs/manual/mod/allmodules.xml.ja [iso-2022-jp] (original) +++ httpd/httpd/branches/2.2.x/docs/manual/mod/allmodules.xml.ja [iso-2022-jp] Sat Oct 29 03:12:06 2005 @@ -9,6 +9,7 @@ mod_auth_digest.xml mod_authn_alias.xml mod_authn_anon.xml.ja + mod_authn_dbd.xml mod_authn_dbm.xml.ja mod_authn_default.xml.ja mod_authn_file.xml.ja Modified: httpd/httpd/branches/2.2.x/docs/manual/mod/allmodules.xml.ko URL: http://svn.apache.org/viewcvs/httpd/httpd/branches/2.2.x/docs/manual/mod/allmodules.xml.ko?rev=329392&r1=329391&r2=329392&view=diff ============================================================================== --- httpd/httpd/branches/2.2.x/docs/manual/mod/allmodules.xml.ko [euc-kr] (original) +++ httpd/httpd/branches/2.2.x/docs/manual/mod/allmodules.xml.ko [euc-kr] Sat Oct 29 03:12:06 2005 @@ -9,6 +9,7 @@ mod_auth_digest.xml.ko mod_authn_alias.xml mod_authn_anon.xml.ko + mod_authn_dbd.xml mod_authn_dbm.xml.ko mod_authn_default.xml.ko mod_authn_file.xml.ko Modified: httpd/httpd/branches/2.2.x/docs/manual/mod/directives.html.de URL: http://svn.apache.org/viewcvs/httpd/httpd/branches/2.2.x/docs/manual/mod/directives.html.de?rev=329392&r1=329391&r2=329392&view=diff ============================================================================== --- httpd/httpd/branches/2.2.x/docs/manual/mod/directives.html.de (original) +++ httpd/httpd/branches/2.2.x/docs/manual/mod/directives.html.de Sat Oct 29 03:12:06 2005 @@ -75,6 +75,8 @@
  • AssignUserID
  • AuthBasicAuthoritative
  • AuthBasicProvider
    • +
  • AuthDBDUserPWQuery
    • +
  • AuthDBDUserRealmQuery
  • AuthDBMGroupFile
  • AuthDBMType
  • AuthDBMUserFile
    • Modified: httpd/httpd/branches/2.2.x/docs/manual/mod/directives.html.en URL: http://svn.apache.org/viewcvs/httpd/httpd/branches/2.2.x/docs/manual/mod/directives.html.en?rev=329392&r1=329391&r2=329392&view=diff ============================================================================== --- httpd/httpd/branches/2.2.x/docs/manual/mod/directives.html.en (original) +++ httpd/httpd/branches/2.2.x/docs/manual/mod/directives.html.en Sat Oct 29 03:12:06 2005 @@ -77,6 +77,8 @@
  • AssignUserID
  • AuthBasicAuthoritative
  • AuthBasicProvider
    • +
  • AuthDBDUserPWQuery
    • +
  • AuthDBDUserRealmQuery
  • AuthDBMGroupFile
  • AuthDBMType
  • AuthDBMUserFile
    • Modified: httpd/httpd/branches/2.2.x/docs/manual/mod/directives.html.es URL: http://svn.apache.org/viewcvs/httpd/httpd/branches/2.2.x/docs/manual/mod/directives.html.es?rev=329392&r1=329391&r2=329392&view=diff ============================================================================== --- httpd/httpd/branches/2.2.x/docs/manual/mod/directives.html.es (original) +++ httpd/httpd/branches/2.2.x/docs/manual/mod/directives.html.es Sat Oct 29 03:12:06 2005 @@ -79,6 +79,8 @@
  • AssignUserID
  • AuthBasicAuthoritative
  • AuthBasicProvider
    • +
  • AuthDBDUserPWQuery
    • +
  • AuthDBDUserRealmQuery
  • AuthDBMGroupFile
  • AuthDBMType
  • AuthDBMUserFile
    • Modified: httpd/httpd/branches/2.2.x/docs/manual/mod/directives.html.ja.euc-jp URL: http://svn.apache.org/viewcvs/httpd/httpd/branches/2.2.x/docs/manual/mod/directives.html.ja.euc-jp?rev=329392&r1=329391&r2=329392&view=diff ============================================================================== --- httpd/httpd/branches/2.2.x/docs/manual/mod/directives.html.ja.euc-jp [euc-jp] (original) +++ httpd/httpd/branches/2.2.x/docs/manual/mod/directives.html.ja.euc-jp [euc-jp] Sat Oct 29 03:12:06 2005 @@ -74,6 +74,8 @@
  • AssignUserID
  • AuthBasicAuthoritative
  • AuthBasicProvider
    • +
  • AuthDBDUserPWQuery
    • +
  • AuthDBDUserRealmQuery
  • AuthDBMGroupFile
  • AuthDBMType
  • AuthDBMUserFile
    • Modified: httpd/httpd/branches/2.2.x/docs/manual/mod/directives.html.ko.euc-kr URL: http://svn.apache.org/viewcvs/httpd/httpd/branches/2.2.x/docs/manual/mod/directives.html.ko.euc-kr?rev=329392&r1=329391&r2=329392&view=diff ============================================================================== --- httpd/httpd/branches/2.2.x/docs/manual/mod/directives.html.ko.euc-kr [euc-kr] (original) +++ httpd/httpd/branches/2.2.x/docs/manual/mod/directives.html.ko.euc-kr [euc-kr] Sat Oct 29 03:12:06 2005 @@ -74,6 +74,8 @@
  • AssignUserID
  • AuthBasicAuthoritative
  • AuthBasicProvider
    • +
  • AuthDBDUserPWQuery
    • +
  • AuthDBDUserRealmQuery
  • AuthDBMGroupFile
  • AuthDBMType
  • AuthDBMUserFile
    • Modified: httpd/httpd/branches/2.2.x/docs/manual/mod/index.html.de URL: http://svn.apache.org/viewcvs/httpd/httpd/branches/2.2.x/docs/manual/mod/index.html.de?rev=329392&r1=329391&r2=329392&view=diff ============================================================================== --- httpd/httpd/branches/2.2.x/docs/manual/mod/index.html.de (original) +++ httpd/httpd/branches/2.2.x/docs/manual/mod/index.html.de Sat Oct 29 03:12:06 2005 @@ -85,6 +85,7 @@ providers based on actual providers
    mod_authn_anon
    Allows "anonymous" user access to authenticated areas
    +
    mod_authn_dbd
    User authentication using an SQL database
    mod_authn_dbm
    User authentication using DBM files
    mod_authn_default
    Authentication fallback module
    mod_authn_file
    User authentication using text files
    Modified: httpd/httpd/branches/2.2.x/docs/manual/mod/index.html.en URL: http://svn.apache.org/viewcvs/httpd/httpd/branches/2.2.x/docs/manual/mod/index.html.en?rev=329392&r1=329391&r2=329392&view=diff ============================================================================== --- httpd/httpd/branches/2.2.x/docs/manual/mod/index.html.en (original) +++ httpd/httpd/branches/2.2.x/docs/manual/mod/index.html.en Sat Oct 29 03:12:06 2005 @@ -83,6 +83,7 @@ providers based on actual providers
    mod_authn_anon
    Allows "anonymous" user access to authenticated areas
    +
    mod_authn_dbd
    User authentication using an SQL database
    mod_authn_dbm
    User authentication using DBM files
    mod_authn_default
    Authentication fallback module
    mod_authn_file
    User authentication using text files
    Modified: httpd/httpd/branches/2.2.x/docs/manual/mod/index.html.es URL: http://svn.apache.org/viewcvs/httpd/httpd/branches/2.2.x/docs/manual/mod/index.html.es?rev=329392&r1=329391&r2=329392&view=diff ============================================================================== --- httpd/httpd/branches/2.2.x/docs/manual/mod/index.html.es (original) +++ httpd/httpd/branches/2.2.x/docs/manual/mod/index.html.es Sat Oct 29 03:12:06 2005 @@ -86,6 +86,7 @@ providers based on actual providers
    mod_authn_anon
    Allows "anonymous" user access to authenticated areas
    +
    mod_authn_dbd
    User authentication using an SQL database
    mod_authn_dbm
    User authentication using DBM files
    mod_authn_default
    Authentication fallback module
    mod_authn_file
    User authentication using text files
    Modified: httpd/httpd/branches/2.2.x/docs/manual/mod/index.html.ja.euc-jp URL: http://svn.apache.org/viewcvs/httpd/httpd/branches/2.2.x/docs/manual/mod/index.html.ja.euc-jp?rev=329392&r1=329391&r2=329392&view=diff ============================================================================== --- httpd/httpd/branches/2.2.x/docs/manual/mod/index.html.ja.euc-jp [euc-jp] (original) +++ httpd/httpd/branches/2.2.x/docs/manual/mod/index.html.ja.euc-jp [euc-jp] Sat Oct 29 03:12:06 2005 @@ -80,6 +80,7 @@ providers based on actual providers
    mod_authn_anon
    認証が必要な領域への "anonymous" ユーザのアクセスを許可する
    +
    mod_authn_dbd
    User authentication using an SQL database
    mod_authn_dbm
    DBM ファイルを用いたユーザ認証
    mod_authn_default
    認証フォールバックモジュール
    mod_authn_file
    テキストファイルを用いたユーザ認証
    Modified: httpd/httpd/branches/2.2.x/docs/manual/mod/index.html.ko.euc-kr URL: http://svn.apache.org/viewcvs/httpd/httpd/branches/2.2.x/docs/manual/mod/index.html.ko.euc-kr?rev=329392&r1=329391&r2=329392&view=diff ============================================================================== --- httpd/httpd/branches/2.2.x/docs/manual/mod/index.html.ko.euc-kr [euc-kr] (original) +++ httpd/httpd/branches/2.2.x/docs/manual/mod/index.html.ko.euc-kr [euc-kr] Sat Oct 29 03:12:06 2005 @@ -76,6 +76,7 @@ providers based on actual providers
    mod_authn_anon
    인증영역에 "익명(anonymous)" 사용자의 접근을 허용한다
    +
    mod_authn_dbd
    User authentication using an SQL database
    mod_authn_dbm
    DBM 파일을 사용한 사용자 인증
    mod_authn_default
    최후 인증모듈
    mod_authn_file
    문자파일을 이용한 사용자 인증
    Modified: httpd/httpd/branches/2.2.x/docs/manual/mod/mod_cache.html.en URL: http://svn.apache.org/viewcvs/httpd/httpd/branches/2.2.x/docs/manual/mod/mod_cache.html.en?rev=329392&r1=329391&r2=329392&view=diff ============================================================================== --- httpd/httpd/branches/2.2.x/docs/manual/mod/mod_cache.html.en (original) +++ httpd/httpd/branches/2.2.x/docs/manual/mod/mod_cache.html.en Sat Oct 29 03:12:06 2005 @@ -31,6 +31,12 @@ Source File:mod_cache.c

    Summary

    +
    This module should be used with care and + can be used to circumvent Allow and Deny directives. You + should not enable caching for any content to which you wish + to limit access by client host name, address or environment + variable.
    +

    mod_cache implements an RFC 2616 compliant HTTP content cache that can be used to cache either local or proxied content. mod_cache requires the services of one or more storage Modified: httpd/httpd/branches/2.2.x/docs/manual/mod/mod_cache.xml.ja URL: http://svn.apache.org/viewcvs/httpd/httpd/branches/2.2.x/docs/manual/mod/mod_cache.xml.ja?rev=329392&r1=329391&r2=329392&view=diff ============================================================================== --- httpd/httpd/branches/2.2.x/docs/manual/mod/mod_cache.xml.ja [iso-2022-jp] (original) +++ httpd/httpd/branches/2.2.x/docs/manual/mod/mod_cache.xml.ja [iso-2022-jp] Sat Oct 29 03:12:06 2005 @@ -1,7 +1,7 @@ - + + + + + + +