STATUS revision 0bcb1fe39dfaacf9745b6633f5cc9ebc8e2596ca
244N/AAPACHE 2.0 STATUS: -*-text-*-
244N/ALast modified at [$Date: 2002/02/01 06:05:51 $]
244N/A
244N/ARelease:
244N/A
244N/A 2.0.32 : in development
244N/A 2.0.31 : tagged January 30, 2002.
244N/A 2.0.30 : tagged January 8, 2002. not rolled.
244N/A 2.0.29 : tagged November 27, 2001. not rolled.
244N/A 2.0.28 : released November 13, 2001
244N/A 2.0.27 : rolled November 6, 2001
244N/A 2.0.26 : tagged October 16, 2001. not rolled.
244N/A 2.0.25 : rolled August 29, 2001
244N/A 2.0.24 : rolled August 18, 2001
244N/A 2.0.23 : rolled August 9, 2001
244N/A 2.0.22 : rolled July 29, 2001
244N/A 2.0.21 : rolled July 20, 2001
244N/A 2.0.20 : rolled July 8, 2001
873N/A 2.0.19 : rolled June 27, 2001
244N/A 2.0.18 : rolled May 18, 2001
244N/A 2.0.17 : rolled April 17, 2001
244N/A 2.0.16 : rolled April 4, 2001
244N/A 2.0.15 : rolled March 21, 2001
244N/A 2.0.14 : rolled March 7, 2001
796N/A 2.0a9 : released December 12, 2000
244N/A 2.0a8 : released November 20, 2000
244N/A 2.0a7 : released October 8, 2000
244N/A 2.0a6 : released August 18, 2000
244N/A 2.0a5 : released August 4, 2000
244N/A 2.0a4 : released June 7, 2000
244N/A 2.0a3 : released April 28, 2000
244N/A 2.0a2 : released March 31, 2000
244N/A 2.0a1 : released March 10, 2000
244N/A
1177N/APlease consult the following STATUS files for information
244N/Aon related projects:
244N/A
244N/A * srclib/apr/STATUS
244N/A * srclib/apr-util/STATUS
244N/A * docs/STATUS
244N/A
244N/ARELEASE SHOWSTOPPERS:
244N/A
244N/A * Runtime startup failures don't reliably set the exit status.
244N/A For instance, try listening to port 80 and starting as non-root;
244N/A server fails with make_sock and 'no listening sockets' errors
244N/A but exits with 0 status. Even with -DONE_PROCESS -DNO_DETACH.
244N/A Justin says: "Is this really a showstopper? Most people won't
244N/A be using -DNO_DETACH and will look at the error
244N/A logs anyway."
244N/A
244N/A * mod_rewrite's locks (win32) were broken by recent changes to the
244N/A apr_lock_t api (which we were deprecating in the first place, so
244N/A I'm far from certain why it changed.) It has to do with creating
244N/A the rewrite logs mutex. The solution is to find the brokenness in
244N/A apr_lock_t, but if it goes away, why waste the time?
244N/A
244N/A * ap_directory_walk skips some per-dir config merge functions
244N/A if there is no "<Directory />" block in the configuration
244N/A Message-ID: <m3itbdiijq.fsf@rdu163-40-092.nc.rr.com>
244N/A * That is very unlikely, merges are additive. Much more likely,
244N/A the default SetOutputFilter default or merge is borked.
244N/A Unless it's the code that permits 'null' merges, per module.
244N/A Still, it's probably in SetOutputFilter's behavior.
244N/A
244N/A * Test suite failures:
244N/A o worker is also failing some of the 'cgi' subtests
244N/A (see <URL:http://Source-Zone.Org/Apache/regression/>):
244N/A Justin says: "Worker should be fine and passes httpd-test here."
244N/A
244N/A * If any request gets to the core handler, without a flag that this
244N/A r->filename was tested by dir/file_walk, we need to 500 at the very
244N/A end of the ap_process_request_internal() processing. This provides
244N/A authors of older modules better compatibility, while still improving
244N/A the security and robustness of 2.0.
244N/A Status: still need to decide where this goes, OtherBill comments...
244N/A Message-ID: <065701c14526$495203b0$96c0b0d0@roweclan.net>
244N/A we need to look at halting this in the 'default handler' case,
244N/A and that implies pushing the 'handler election' into the request
244N/A internal processing phase from the run request phase.
244N/A
244N/A * There is a bug in how we sort some hooks, at least the pre-config
244N/A hook. The first time we call the hooks, they are in the correct
244N/A order, but the second time, we don't sort them correctly. Currently,
244N/A the modules/http/config.m4 file has been renamed to
796N/A modules/http/config2.m4 to work around this problem, it should moved
796N/A back when this is fixed. rbb
796N/A Justin says: "Is this really a showstopper? This has been here
796N/A forever. What's wrong? Does this have to do with
244N/A autoconf or m4?"
244N/A
244N/A * The Add...Filter and Set...Filter directives do not allow the
244N/A administrator to order filters, beyond the order of filename (mime)
244N/A extensions. It isn't clear if Set...Filter(s) should be inserted
244N/A before or after the Add...Filter(s) which are ordered by sequence of
244N/A filename extensions. At minimum, some sort of +-[0-10] syntax seems
244N/A like the quickest fix for a 2.0 gold release.
244N/A Justin says: "Could we delay this for a point release or 2.1?"
244N/A
244N/A * Convert all instances of the old apr_lock_t type to the new
244N/A types (once they are fully supported in APR).
244N/A Status: Aaron is working on converting INTRAPROCESS
244N/A to apr_thread_mutex_t types. Full replacements for
244N/A LOCKALL and CROSS_PROCESS are not yet complete on all
244N/A platforms, and should only be used in MPMs like worker
244N/A with limited OS exposure.
244N/A
244N/A * A binbuild installation picks up the right libraries when
244N/A running apachectl because we set the appropriate environment
244N/A variable, but ab, htpasswd, etc. don't know how to pick up apr,
244N/A apr-util, etc.
244N/A Message-ID: <20020116000226.GA15991@ebuilt.com>
244N/A Justin says: "You could always build all of the binaries
244N/A statically if you don't want to let libtool
244N/A handle it. At most, I don't consider this a
244N/A a release showstopper as it is a packaging issue."
244N/A Status: Aaron volunteers: I'll commit a patch to allow all
244N/A the support binaries to be built statically against
244N/A libapr/libaprutil/etc and then enable it in binbuild.
244N/A
244N/ARELEASE NON-SHOWSTOPPERS BUT WOULD BE REAL NICE TO WRAP THESE UP:
244N/A
244N/A * If the parent process dies, should the remaining child processes
244N/A "gracefully" self-terminate.
244N/A Message-ID: <3C58232C.FE91F19F@Golux.Com>
244N/A
244N/A +1: Jim, Justin
244N/A -1: BrianP
244N/A
244N/A * Make some modifications to the scoreboard creation routines,
244N/A prefer anonymous shared memory, and allow a configuration
244N/A directive to override the defaults.
244N/A Message-ID: <20020130080804.C16977@clove.org>
244N/A Status: Aaron volunteers
244N/A
244N/A * Get perchild to work on platforms other than Linux. This
244N/A will require a portable mechanism to pass data and file/socket
244N/A descriptors between vhost child groups. An API was proposed
244N/A on dev@apr:
244N/A Message-ID: <20020111115006.K1529@clove.org>
244N/A Vote: Is a non-portable perchild going to hold up a GA release?
244N/A Yes:
244N/A No: Aaron
244N/A
244N/A * Modify the worker MPM so that it doesn't need to create and
244N/A destroy a pool for each request--possibly by adopting a
244N/A leader/follower model in which each worker owns a persistent
244N/A ptrans pool (like the prefork MPM) and the workers take
244N/A turns acting as listeners...this approach might also help
244N/A reduce context-switching
244N/A
244N/A * CGI single-byte reads
244N/A BrianP suggests that this is caused by the ap_scan_script_header_err()
244N/A routine, which will do single-byte reads until it finds the end
244N/A of the header, at which point it constructs a pipe-bucket (buffered)
244N/A to read from.
244N/A
244N/A Proposed solution in:
244N/A Message-ID: <3C36ADAF.60601@cnet.com>
244N/A
244N/A * Try to get libtool inter-library dependency code working on AIX.
244N/A
244N/A Message-ID: <cm3n10lx555.fsf@rdu163-40-092.nc.rr.com>
244N/A
244N/A Justin says: If we get it working on AIX, we can enable this
244N/A on all platforms and clean up our build system
244N/A somewhat.
244N/A
244N/A * Handling of %2f in URIs. Currently both 1.3 and 2.0
244N/A completely disallow %2f in the request URI path (see
244N/A ap_unescape_url() in util.c). It's permitted and passed
244N/A through in the query string, however. Roy says the
244N/A original reason for disallowing it, from five years ago,
244N/A was to protect CGI scripts that applied PATH_INFO to
244N/A a filesystem location and which might be tricked by
244N/A ..%2f..%2f(...). We *should* allow path-info of the
244N/A form 'http://foo.com/index.cgi/path/to/path%2finfo'.
244N/A Since we've revamped a lot of our processing of path
244N/A segments, it would be nice to allow this, or at least
244N/A allow it conditionally with a directive.
244N/A
244N/A * FreeBSD, threads, and worker MPM. All seems to work fine
244N/A if you only have one worker process with many threads. Add
244N/A a second worker process and the accept lock seems to be
244N/A lost. This might be an APR issue with how it deals with
244N/A the child_init hook (i.e. the fcntl lock needs to be resynced).
244N/A More examination and analysis is required.
244N/A Status: This has also been reported on Cygwin.
244N/A
244N/A Message-ID: <3C2CC514.8EF3BED1@wapme-systems.de> (cygnus)
244N/A
244N/A Justin says: So, FreeBSD-CURRENT and Cywin have the same
244N/A problem. Yum. If another platform has this
244N/A with worker, this becomes a showstopper.
244N/A Aaron says: I spent some time disecting this and have come to
244N/A the conclusion that it is not a problem in the worker MPM
244N/A (or at least, it is not isolated to a problem in worker).
244N/A I'll list some of the problems I'm seeing in case someone
244N/A else wants to pick up where I've left off:
244N/A - Delivery of just about any signal to one of the child
244N/A processes will send it into an infinite loop as well.
244N/A - Even though the parent is spinning out of control,
244N/A at first the child or children will appear to work
244N/A properly. At times it is possible to get it into a state,
244N/A however, where a request will hang until another concurrent
244N/A request "kicks" the first, at which point the second will
244N/A hang. My theory is that this has to do with the
244N/A pthread_cond_*() implementation in FreeBSD, but it's still
244N/A possible that it is in APR.
244N/A
244N/A Justin adds: Oh, FreeBSD threads are implemented entirely with
244N/A select()/poll()/longjmp(). Welcome to the nightmare.
244N/A So, that means a ktrace output also has the thread
244N/A scheduling internals in it (since it is all the same to
244N/A the kernel). Which makes it hard to distinguish between
244N/A our select() calls and their select() calls.
244N/A *bangs head on wall repeatedly* But, some of the libc_r
244N/A files have a DBG_MSG #define. This is moderately helpful
244N/A when used with -DNO_DETACH. The kernel scheduler isn't
244N/A waking up the threads on a select(). Yum. And, I bet
244N/A those decrementing select calls have to do with the
244N/A scheduler. Time to brush up on our OS fundamentals.
244N/A
244N/A * There is increasing demand from module writers for an API
244N/A that will allow them to control the server � la apachectl.
244N/A Reasons include sole-function servers that need to die if
244N/A an external dependency (e.g., a database) fails, et cetera.
244N/A Perhaps something in the (ever more abused) scoreboard?
244N/A rbb: I don't believe the scoreboard is the correct mechanism
244N/A for this. We already have a pipe that goes between parent
244N/A and child for graceful shutdown events, along with an API that
244N/A can be used to send a message down that pipe. In threaded MPMs,
244N/A it is easy enough to make that one pipe be used for graceful
244N/A and graceless events, and it is also easy to open that pipe
244N/A to both parent and child for writing. Then we just need to figure
244N/A out how to do graceless on non-threaded MPMs.
244N/A
244N/A * revamp the input filter behavior, per discussions since
244N/A February (and especially at the hackathon last
244N/A April). Specifically, ap_get_brigade will return a brigade with
244N/A *up to* a specific number of bytes, or a "line" of data. The
244N/A read may be blocking or nonblocking. ap_getline() will be
244N/A refactored into apr_brigade_getline(), and then DECHUNK can use
244N/A f->next (ap_getline will always read "top of input stack"). Also
244N/A fix the bug where request body content will end up closing the
244N/A connection (buggering up persistent conns).
244N/A Status: Justin is working on this as fast as he can.
244N/A The core input filters, HTTP-related filters, mod_ssl, and
244N/A mod_proxy are switched to the new logic.
244N/A However, ap_getline() still needs to be refactored out. But,
244N/A there's a problem there: ap_getline() peeks ahead for MIME
244N/A continuation (first character on line is space or \t) and
244N/A stores unused data in core_request_config which violates the
244N/A abstraction. That's cheating. So, we may not be able to
244N/A implement this without setting some data aside (yuck!).
244N/A I believe this is OtherBill's main complaint with the current
244N/A filtering.
244N/A AIUI (correct me if I'm wrong!), OtherBill believes we
244N/A should have a pushback option so that we can return unread
244N/A data - this would solve this case. However, my question to
244N/A him is how do we handle stuff like mod_ssl - we can't "unread"
244N/A data. So, do we have two brigades for each filter? An in
244N/A brigade and a returned brigade? That seems messy. To
244N/A everyone else, can we refactor ap_getline() without pushback
244N/A and how?
244N/A
244N/A - socket bucket and core input filter changes. see end of
244N/A message ID (Feb 27): <20010227075326.S2297@lyra.org>
244N/A
244N/A - fix up ap_get_brigade() semantics, fix bug in DECHUNK /
244N/A ap_getline. many messages (plus their threads) (Apr/May):
244N/A Message-ID: <20010402101207.J27539@lyra.org>
244N/A Message-ID: <3AF7F921.D2EEC41A@algroup.co.uk>
244N/A Message-ID: <20010508190029.E18404@lyra.org>
244N/A
244N/A - further work with combining/tweaking the builtin filters:
244N/A Message-ID: <20010509115445.D1374@lyra.org>
244N/A
244N/A - thoughts on filter modes:
244N/A Message-ID: <021b01c14dee$09782af0$93c0b0d0@roweclan.net>
244N/A
244N/A - proposal for getline rewrite:
244N/A Message-ID: <20011231104019.GD3904@ebuilt.com>
244N/A
244N/A - patch for getline rewrite:
244N/A Message-ID: <20020122072605.GF28051@ebuilt.com>
244N/A
244N/A - Change ap_get_brigade prototype:
244N/A Message-ID: <20020120115136.GI17601@ebuilt.com>
244N/A
244N/A * Allow the DocumentRoot directive within <Location > scopes? This
244N/A allows the beloved (crusty) Alias /foo/ /somepath/foo/ followed
244N/A by a <Directory /somepath/foo> to become simply
244N/A <Location /foo/> DocumentRoot /somefile/foo (IMHO a bit more legible
244N/A and in-your-face.) DocumentRoot unset would be accepted [and would
244N/A not permit content to be served, only virtual resources such as
244N/A server-info or server-status.
509N/A This proposed change would _not_ depricate Alias.
244N/A
244N/A * Win32: Rotatelogs sometimes is not terminated when Apache
244N/A goes down hard. FirstBill was looking at possibly tracking the
244N/A child's-child processes in the parent process.
244N/A OtherBill asks, wasn't this fixed?
244N/A OtherBill asks again, what is the status?
244N/A
244N/A * Win32: Add a simple hold console open patch (wait for close or
244N/A the ESC key, with a nice message) if the server died a bad
244N/A death (non-zero exit code) in console mode.
244N/A Resolution: bring forward same ugly hacks from 1.3.13-.20
244N/A
244N/A * Port of mod_ssl to Apache 2.0:
244N/A
244N/A The current porting state is summarized in modules/ssl/README. The
244N/A remaining work includes:
244N/A (1) stablizing/optimizing the SSL filter logic
244N/A (2) Enabling the various SSL caching mechanisms (shmcb, shmht)
244N/A (3) Enabling SSL extentions
244N/A (4) Trying to seperate the https filter logic from mod_ssl -
244N/A This is to facilitate other modules that wish to use the https
244N/A filter or the mod_ssl logic or both as required.
244N/A Justin: mod_ssl filter logic is redone, so that should be fine.
244N/A Madhu has submitted a patch for SSL caching - however, I
244N/A am -0 on that patch as I *think* we could implement the
244N/A shared memory another way that is much cleaner (i.e.
244N/A treat shmem directly as a dbm via APR routines). Justin
244N/A also thinks that the https filter logic may be sufficiently
244N/A decoupled now, but isn't really sure.
244N/A
244N/A * Performance & Debug: Eliminate most (and perhaps all) of the
244N/A malloc/free calls in the bucket brigade code. Need some
244N/A light weight memory management functions that allow freeing
244N/A memory (putting it back into a memory pool) when it is no
244N/A longer needed. Enabling simple debugging features like guard
244N/A bands, double free detection, etc. would be cool but certainly
244N/A not a hard requirement.
244N/A
244N/A Status: Cliff started to implement this using SMS as has
244N/A been discussed at length for months, but since
244N/A SMS is not being used anywhere else in the server,
244N/A several people expressed the opinion that we should
244N/A get rid of it entirely, meaning that the buckets
244N/A need their own memory management (free list) functions.
244N/A Cliff will implement that this weekend so we at least
244N/A have something to look at/compare with.
244N/A
244N/A * Eliminate unnecessary creation of pipes in mod_cgid
244N/A
244N/A * the autoconf setup should be fixed to default to using the
244N/A "Apache" layout from config.layout, and each variable settable
244N/A in a layout should be overridable on the command line. Plus,
244N/A what we do right now just doesn't seem to fully fit into how autoconf
244N/A works, eg. AC_PREFIX_DEFAULT issues.
244N/A Message-ID: <Pine.BSF.4.20.0104031557420.20876-100000@alive.znep.com>
244N/A
244N/A * Combine log_child and piped_log_spawn. Clean up http_log.c.
244N/A Common logging API.
244N/A
244N/A * Document mod_file_cache.
244N/A
244N/A * Platforms that do not support fork (primarily Win32 and AS/400)
244N/A Architect start-up code that avoids initializing all the modules
244N/A in the parent process on platforms that do not support fork.
244N/A
244N/A * Win32: Migrate the MPM over to use APR thread/process calls. This
244N/A would eliminate some code in the Win32 branch that essentially
244N/A duplicates what is in APR.
244N/A
244N/A * There are still a number of places in the code where we are
244N/A losing error status (i.e. throwing away the error returned by a
244N/A system call and replacing it with a generic error code)
244N/A
244N/A * Mass vhosting version of suEXEC.
244N/A
244N/A * All DBMs suffer from confusion in support/dbmmanage (perl script) since
244N/A the dbmmanage employs the first-matched dbm format. This is not
244N/A necessarily the library that Apache was built with. Aught to
244N/A rewrite dbmmanage upon installation to bin/ with the proper library
244N/A for predictable mod_auth_dbm administration.
244N/A Questions; htdbm exists, time to kill dbmmanage, or does it remain
244N/A useful as a perl dbm management example? If we keep it,
244N/A do we address the issue above?
244N/A
244N/A * use apu_dbm in mod_auth_dbm
244N/A Status: Greg +1 (low-priority volunteer)
244N/A Justin says: "Seems like this is already there, so should we just
244N/A remove the other DBM code in that file? If you want
244N/A to use gdbm, or dbm, etc, you should tell apr-util."
244N/A Will says: "bs - I may choose the fastest - most efficient native
244N/A dbm implementation, for shared proc caches, ssl session
244N/A caching, etc, but that has nothing to do with maintaining
244N/A a userlist via dbm, which has to remain readable between
244N/A builds/machines, etc. The use-multiple database schema
244N/A for apr-util would let us do this with just apr, though."
244N/A Ian says: "multi-dbm is in, but it still has ndbm support hardcoded
244N/A is this still required? isn't ndbm supported via gdbm?"
244N/A
244N/A
244N/A * Integrate mod_dav.
244N/A Some additional items remaining:
244N/A - case_preserved_filename stuff
244N/A (use the new canonical name stuff?)
244N/A - find a new home for ap_text(_header)
244N/A - is it possible to remove the DAV: namespace stuff from util_xml?
244N/A
244N/A * ap_core_translate() and its use by mod_mmap_static and mod_file_cache
244N/A are a bit wonky. The function should probably be exposed as a utility
244N/A function (such as ap_translate_url2fs() or ap_validate_fs_url() or
244N/A something). Another approach would be a new hook phase after
244N/A "translate" which would allow the module to munge what the
244N/A translation has decided to do.
244N/A Status: Greg +1 (volunteers), Ryan +1
244N/A
244N/A * Explore use of a post-config hook for the code in http_main.c which
244N/A calls ap_fixup_virutal_hosts(), ap_fini_vhost_config(), and
244N/A ap_sort_hooks() [to reduce the logic in main()]
244N/A
244N/A * read the config tree just once, and process N times (as necessary)
244N/A
244N/A * (possibly) use UUIDs in mod_unique_id and/or mod_usertrack
244N/A
244N/A * (possibly) port the bug fix for PR 6942 (segv when LoadModule is put
244N/A into a VirtualHost container) to 2.0.
244N/A
244N/A * shift stuff to mod_core.h
* callers of ap_run_create_request() should check the return value
for failure (Doug volunteers)
* Win32: Get Apache working on Windows 95/98. The following work
(at least) needs to be done:
- winnt MPM: Fix 95/98 code paths in the winnt MPM. There is some NT
specific code that is still not in NT only code paths
- IOL binds to APR sendfile, implemented with TransmitFile, which
is not available on 95/98.
- Document warning that OSR2 is required (for Crypt functions, in
rand.c, at least.) This could be resolved with an SSL library, or
randomization in APR itself.
- Bring the Win9xConHook.dll from 1.3 into 2.0 (no sense till it
actually works) and add in a splash of Win9x service code.
* In order to use a DSO version of mod_ssl we have to link with
-lssl and -lcrypto. A workaround is in place right now where the
entire EXTRA_LIBS macro is being appended to the objects list, but
this is a hack. We should either revamp the APACHE_CHECK_SSL_TOOLKIT
autoconf function or come up with some other autoconf checks to
search for libssl and libcrypto and properly add them to mod_ssl's
link flags.
* Make the worker MPM the default MPM for threaded Unix boxes.
+1: Justin, Jeff, Ian
-0: Aaron (premature decision, needs more discussion), Lars
-0: Cliff (I think the default config should be the safest possible)
* Fix the worker MPM to use POD to kill child processes instead
of ap_os_killpg, regardless of how they should die. (Ryan Bloom)
PRs that have been suspended forever waiting for someone to
put them into 'the next release':
* PR#76: general
missing call to "setlocale();"
Status:
* PR#78: mod_include
Additional status for XBitHack directive
Status:
* PR#362: mod_proxy
Mod_proxy doesn't allow change of error pages
Status:
* PR#370: mod_env
Modified PATH environemnt variable is not passed, instead
system's is used
Status:
* PR#440: mod_proxy
Proxy doesn't deliver documents if not connected
Status:
* PR#534: mod_proxy
proxy converts ~name to %7Ename when name starts with a dot (.)
Status:
* PR#537: mod_access
mod_access syntax allows hosts that should be restricted
Status:
* PR#557: mod_auth-any
~UserHome directories are not honored in absolute pathname
requests (.htaccess)
Status:
* PR#612: mod_proxy
Proxy FTP Authentication Fails
Status:
* PR#623: mod_include
A smarter "Last Modified" value for SSI documents (see PR number 600)
Status:
* PR#628: config
Request of "Options SymLinksIfGroupMatch"
Status:
* PR#700: mod_proxy
Proxy doesn't do links right for OpenVMS files through ftp:
Status:
* PR#759: mod_imap
imap should read <MAP><AREA>*</MAP> too!
Status:
* PR#793: general
RLimitCPU and RLimitMEM don't apply to all children like they should
Status:
* PR#921: suexec
Uses cwd before filling it in, doesn't use syslog
Status:
* PR#922: config
it is useful to allow specifiction that root-owned symlinks
should always be followed
Status:
* PR#980: mod_proxy
Controlling Access to Remote Proxies would be nice...
Status:
* PR#994: mod_proxy
Adding authentication "on the fly" through the proxy module
Status:
* PR#1004: apache-api
request_config field in request_rec is moderately bogus
Status:
* PR#1028: other
DoS attacks involving memory consumption
Status:
* PR#1050: mod_log-any
Logging of virtual server to error_log as well
Status:
* PR#1085: mod_proxy
ProxyRemote make a dead cycle.
Status:
* PR#1117: mod_auth-any
Using NIS passwd.byname dbm files with AuthDBMUserFile
Status:
* PR#1120: suexec
suexec does not parse arguments to #exec cmd
Status:
* PR#1145: mod_include
Allow for Last-Modified: without resorting to XBitHack
Status:
* PR#1158: apache-api
improvements to child spawning API
Status:
* PR#1166: mod_proxy
``nph-'' not honored (no buffering) for ProxyRemote mapping
Status:
* PR#1176: mod_cgi
Apache cannot handle continuation line in headers
Status:
* PR#1191: general
setlogin() is not called, causing problems with e.g. identd
Status:
* PR#1204: general
regerror() exists, use it
Status:
* PR#1233: apache-api
there is no way to keep per-connection per-module state
Status:
* PR#1263: mod_autoexec
Add frame-safe anchor attribute to mod_autoindex links
Status:
* PR#1268: suexec
CGI scripts running as Apache user: security (suexec etc.)
Status:
* PR#1285: suexec
Error messages could be easier to spot in cgi.log file for suexec.c
Status:
* PR#1287: mod_access
add allow,deny/deny,allow warning to mod_access
Status:
* PR#1290: mod_proxy
Need to know "hit-rate" on proxy cache
Status:
* PR#1358: mod_log-any
Selective url-encode of log fields (or maybe a pseudo
log_rewrite module?)
Status:
* PR#1383: mod_headers
I make mod_headers to modify request headers as well as
response ones.
Status:
* PR#1532: mod_proxy
Proxy transfer logging
Status:
* PR#1547: mod_proxy
No HTTP_X_FORWARDED_FOR set...
Status:
* PR#1567: mod_proxy
ProxyRemote proxy requests fail authentication by firewall
Status:
* PR#1582: mod_rewrite
mod_rewrite forms REQUEST_URI different than mod_cgi does
Status:
* PR#1677: mod_headers
mod_headers should allow mod_log_config-style formats in
header values
Status:
* PR#1702: mod_proxy
mod_proxy to support persistent conns?
Status:
* PR#1803: mod_include
patches to mod_include to allow for file tests
Status:
* PR#1809: mod_auth-any
Suggestion for improving authentication modules and core source
code, problem with 401 and ErrorDocument
Status:
* PR#1878: mod_proxy
listing of proxy cache content
Status:
* PR#1905: suexec
Allow modules to set user:group for execution.
Status:
* PR#2024: apache-api
adding auth_why to conn_rec
Status:
* PR#2073: mod_log-any
pipelined connections are not logged correctly
Status:
* PR#2074: mod_rewrite
mod_rewrite doesn't pass Proxy Throughput on internal subrequests
Status:
* PR#2113: config
HTTP Server Rebuild Line Needs Changing for the better
Status:
* PR#2138: mod_status
mod_status always displays 256 possible connection slots
Status:
* PR#2221: documentation
Make online documentation search link back to my installation
Status:
* PR#2284: general
Can not POST to ErrorDocument - Apache/1.3b6
Status:
* PR#2314: mod_proxy
patterns in ProxyRemote
Status:
* PR#2343: mod_status
Status module averages are for entire uptime
Status:
* PR#2360: suexec
suexec for general access of user content?
Status:
* PR#2396: general
Proposal for TimeZone directive
Status:
* PR#2415: mod_info
/server-info doesn't check for the virtual host to list the info
Status:
* PR#2421: config
problem specifying ndbm library for build ?with autoconfigure
Status:
* PR#2431: general
A small addition to rotatelogs.c to improve program functionality.
Status:
* PR#2446: config
AllowOverride FileInfo is too coarse
Status:
* PR#2460: mod_cgi
TimeOut applies to output of CGI scripts
Status:
* PR#2512: mod_access
&lt;IfDenied&gt; directive wanted
Status:
* PR#2573: suexec
CGI's for general use still have to be run as another user
with suExec
Status:
* PR#2648: general
Cache file names in Proxy module
Status:
* PR#2760: config
[PATCH] User/Group for <Directory> and <Location> i.e. not only
in global and <Virtual>.
Status:
* PR#2763: general
mailto tags and bundling bug report script
Status:
* PR#2785: os-aix
Support for System Resource Controller
Status:
* PR#2793: protocol
When will Apache support P3P? Any Plans?
Status:
* PR#2873: config
Feedback/Comment on APACI
Status:
* PR#2889: general
Inclusion of RPM spec file in CVS/distributions
Status:
* PR#2906: general
Propose that Apache recommend $UNIQUE_ID for all "session id"
algorithms
Status:
* PR#2907: config
suggestion: power up your Include directive :)
Status:
* PR#3018: general
cannot limit some HTTP methods
Status:
* PR#3143: apache-api
No module specific data hook for per-connection data
Status:
* PR#3191: mod_negotiation
no way to set global quality-of-source (qs) coneg values
with multiviews
Status:
* PR#3568: mod_proxy
Accessing URL through proxy server corrupts data.
Status:
* PR#3605: mod_proxy
Some anonymous FTP URLs ask for authentication
Status:
* PR#3677: general
New ErrorDocumentMatch directive
Status:
* PR#4241: config
Need to be able to override shebang line to make CGI scripts
more portable.
Status:
* PR#4244: config
"Files" and "FilesMatch" regexp does not recognize bang as
negation operator
Status:
* PR#4448: mod_log-any
Please allow CGI env variables (QUERY_STRING, ...) to be logged
with %{}e
Status:
* PR#4459: mod_include
Suggestion for better handling of Last-modified headers
Status:
* PR#4490: mod_cgi
mod_cgi prevents handling of OPTIONS requests
Status:
* PR#5713: os-windows
[PATCH] install as win32 service with domain account
Status: Cannot accept password-as-arg, we should prompt the
user when -k install/-k config with a user argument.
* PR#5993: general
AllowOverride should have a 'CheckNone' and 'AllowNone' argument
instead of only 'None'
Status:
Other bugs that need fixing:
* MaxRequestsPerChild measures connections, not requests.
Until someone has a better way, we'll probably just rename it
"MaxConnectionsPerChild".
* Regex containers don't work in an intutive way
Status: No one has come up with an efficient way to fix this
behavior. Dean has suggested getting rid of regex containers
completely.
OtherBill suggests: We at least seem to agree on eliminating
the <Container ~ foo> forms, and using only
<ContainerMatch foo> semantics.
* SIGSEGV on Linux (glibc 2.1.2) isn't caught properly by a
sigwaiting thread. We need to work around this, perhaps unless
there is hope soon for a fixed glibc.
* orig_ct in the byterange/multipart handling may not be
needed. Apache 1.3 just never stashed "multipart" into
r->content_type. We should probably follow suit since the
byterange stuff doesn't want the rest of the code to see the
multipart content-type; the other code should still think it is
dealing with the <orig_ct> stuff.
Status: Greg volunteers to investigate (esp. since he was most
likely the one to break it :-)
Other features that need writing:
* Finish infrastructure in core for async MPMs
Status: post 2.0
* TODO in source -- just do an egrep on "TODO" and see what's there
Available Patches:
* Jon Travis's <jtravis@covalent.net> patch to deal with thread-safe
issues with inet_ntoa. See message <20001201163220.A12827@covalent.net>
Status: This is being set aside until the IPv6 work is finished
so that we know exactly what is required.
* Martin Sojka <msojka@gmx.de>'s patch to add error reporting for failed
htpasswd actions due to a full /tmp volume (other programs may have
similar problems?)
PR: 6475
Status:
* Mike Abbott's <mja@trudge.engr.sgi.com> patches to improve
performance
Status: These were written for 1.3, and are awaiting a port to
2.0
* Jim Winstead's <jimw@trainedmonkey.com> patch to add CookieDomain and
other small mod_usertrack features
* Dan Rench's <drench@xnet.com> patch to add allow the errmsg and timefmt
of SSI's to be modified in the config file. Patch is available in
PR6193
Open issues:
* Which MPMs will be included with Apache 2.0?