STATUS revision 33f5961d34a8b5390cebad0543b3ebe67830e5d7
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob AusteinAPACHE 2.0 STATUS: -*-text-*-
990d0e893f5b70e735cdf990af66e9ec6e91fa78Tinderbox UserLast modified at [$Date: 2002/01/06 01:19:49 $]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 2.0.30 : In development
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 2.0.29 : tagged November 27, 2001. not rolled.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 2.0.28 : released November 13, 2001
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 2.0.27 : rolled November 6, 2001
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 2.0.26 : tagged October 16, 2001. not rolled.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 2.0.25 : rolled August 29, 2001
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 2.0.24 : rolled August 18, 2001
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 2.0.23 : rolled August 9, 2001
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 2.0.22 : rolled July 29, 2001
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 2.0.21 : rolled July 20, 2001
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 2.0.20 : rolled July 8, 2001
ea94d370123a5892f6c47a97f21d1b28d44bb168Tinderbox User 2.0.19 : rolled June 27, 2001
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 2.0.18 : rolled May 18, 2001
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 2.0.17 : rolled April 17, 2001
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 2.0.16 : rolled April 4, 2001
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 2.0.15 : rolled March 21, 2001
e21a2904f02a03fa06b6db04d348f65fe9c67b2bMark Andrews 2.0.14 : rolled March 7, 2001
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 2.0a9 : released December 12, 2000
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 2.0a8 : released November 20, 2000
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 2.0a7 : released October 8, 2000
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 2.0a6 : released August 18, 2000
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 2.0a5 : released August 4, 2000
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 2.0a4 : released June 7, 2000
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 2.0a3 : released April 28, 2000
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 2.0a2 : released March 31, 2000
71c66a876ecca77923638d3f94cc0783152b2f03Mark Andrews 2.0a1 : released March 10, 2000
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob AusteinPlease consult the following STATUS files for information
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austeinon related projects:
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob AusteinRELEASE SHOWSTOPPERS:
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * ap_directory_walk skips some per-dir config merge functions
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein if there is no "<Directory />" block in the configuration
71c66a876ecca77923638d3f94cc0783152b2f03Mark Andrews Message-ID: <m3itbdiijq.fsf@rdu163-40-092.nc.rr.com>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * Test suite failures:
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein o perchild doesn't even build
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein o worker is also failing some of the 'cgi' subtests
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein (see <URL:http://Source-Zone.Org/Apache/regression/>):
5fa6a064b8301e4f274bd132fd577def59e4fb4cTinderbox User * If any request gets to the core handler, without a flag that this
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein r->filename was tested by dir/file_walk, we need to 500 at the very
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein end of the ap_process_request_internal() processing. This provides
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein authors of older modules better compatibility, while still improving
5fa6a064b8301e4f274bd132fd577def59e4fb4cTinderbox User the security and robustness of 2.0.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Status: still need to decide where this goes, OtherBill comments...
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Message-ID: <065701c14526$495203b0$96c0b0d0@roweclan.net>
5fa6a064b8301e4f274bd132fd577def59e4fb4cTinderbox User we need to look at halting this in the 'default handler' case,
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein and that implies pushing the 'handler election' into the request
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein internal processing phase from the run request phase.
5fa6a064b8301e4f274bd132fd577def59e4fb4cTinderbox User * There is a bug in how we sort some hooks, at least the pre-config
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein hook. The first time we call the hooks, they are in the correct
5fa6a064b8301e4f274bd132fd577def59e4fb4cTinderbox User order, but the second time, we don't sort them correctly. Currently,
5fa6a064b8301e4f274bd132fd577def59e4fb4cTinderbox User the modules/http/config.m4 file has been renamed to
5fa6a064b8301e4f274bd132fd577def59e4fb4cTinderbox User modules/http/config2.m4 to work around this problem, it should moved
a3ff24aaa545c45b8c581b2127d02d735aff8881Tinderbox User back when this is fixed. rbb
a3ff24aaa545c45b8c581b2127d02d735aff8881Tinderbox User * The Add...Filter and Set...Filter directives do not allow the
a3ff24aaa545c45b8c581b2127d02d735aff8881Tinderbox User administrator to order filters, beyond the order of filename (mime)
a3ff24aaa545c45b8c581b2127d02d735aff8881Tinderbox User extensions. It isn't clear if Set...Filter(s) should be inserted
a3ff24aaa545c45b8c581b2127d02d735aff8881Tinderbox User before or after the Add...Filter(s) which are ordered by sequence of
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein filename extensions. At minimum, some sort of +-[0-10] syntax seems
a3ff24aaa545c45b8c581b2127d02d735aff8881Tinderbox User like the quickest fix for a 2.0 gold release.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * mod_negotiation needs a new option or directive, something like
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein ForceLanguagePriority, to fall back to the LanguagePriority
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein directive instead of returning a "no acceptable variant" error.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Status: Bill has some code in his tree that accomplishes
a1ad6695ed6f988406cf155aa26376f84f73bcb9Automatic Updater this, and will commit it Friday after it's tested.
a1ad6695ed6f988406cf155aa26376f84f73bcb9Automatic Updater * Fold mod_auth_db features back into mod_auth_dbm, and depricate it.
44d0f0256fbdce130a18655023c3b06bacacbd61Automatic Updater This can't wait until we have a 2.0-gold release, if folks need
369963ad26cef09c3839d76c74c2d856f91be27aTinderbox User to move over to auth_dbm, we can't do that to them after 2.0 gold.
2895f101b5585a19015ac2c2c1e1812ac467fa12Automatic Updater Status: Ian says.. auth_dbm can now handle multiple DBM types,
369963ad26cef09c3839d76c74c2d856f91be27aTinderbox User is this still an issue?
44d0f0256fbdce130a18655023c3b06bacacbd61Automatic Updater Vote: Remove mod_auth_db
369963ad26cef09c3839d76c74c2d856f91be27aTinderbox User * Convert all instances of the old apr_lock_t type to the new
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein types (once they are fully supported in APR).
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Status: Aaron is working on converting INTRAPROCESS
369963ad26cef09c3839d76c74c2d856f91be27aTinderbox User to apr_thread_mutex_t types. Full replacements for
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein LOCKALL and CROSS_PROCESS are not yet complete on all
369963ad26cef09c3839d76c74c2d856f91be27aTinderbox User platforms, and should only be used in MPMs like worker
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein with limited OS exposure.
369963ad26cef09c3839d76c74c2d856f91be27aTinderbox User * ap_create_scoreboard() can exit the process, leaving stuff like
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein mod_cgid's daemon process stranded. Either ap_create_scoreboard()
369963ad26cef09c3839d76c74c2d856f91be27aTinderbox User needs to be called at a different time or the pre-mpm hook needs
369963ad26cef09c3839d76c74c2d856f91be27aTinderbox User to be able to return an error code.
7208386cd37a2092c70eddf80cf29519b16c4c80Mark AndrewsRELEASE NON-SHOWSTOPPERS BUT WOULD BE REAL NICE TO WRAP THESE UP:
507151045be68c671ffd4e2f37e17cdfa0376fc4Automatic Updater * Try to get libtool inter-library dependency code working on AIX.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Message-ID: <cm3n10lx555.fsf@rdu163-40-092.nc.rr.com>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Justin says: If we get it working on AIX, we can enable this
71c66a876ecca77923638d3f94cc0783152b2f03Mark Andrews on all platforms and clean up our build system
71c66a876ecca77923638d3f94cc0783152b2f03Mark Andrews * Handling of %2f in URIs. Currently both 1.3 and 2.0
71c66a876ecca77923638d3f94cc0783152b2f03Mark Andrews completely disallow %2f in the request URI path (see
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein ap_unescape_url() in util.c). It's permitted and passed
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein through in the query string, however. Roy says the
71c66a876ecca77923638d3f94cc0783152b2f03Mark Andrews original reason for disallowing it, from five years ago,
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein was to protect CGI scripts that applied PATH_INFO to
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein a filesystem location and which might be tricked by
71c66a876ecca77923638d3f94cc0783152b2f03Mark Andrews ..%2f..%2f(...). We *should* allow path-info of the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein form 'http://foo.com/index.cgi/path/to/path%2finfo'.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Since we've revamped a lot of our processing of path
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein segments, it would be nice to allow this, or at least
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein allow it conditionally with a directive.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * FreeBSD, threads, and worker MPM. All seems to work fine
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein if you only have one worker process with many threads. Add
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein a second worker process and the accept lock seems to be
71c66a876ecca77923638d3f94cc0783152b2f03Mark Andrews lost. This might be an APR issue with how it deals with
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein the child_init hook (i.e. the fcntl lock needs to be resynced).
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein More examination and analysis is required.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Status: This has also been reported on Cygwin.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Message-ID: <3C2CC514.8EF3BED1@wapme-systems.de> (cygnus)
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Justin says: So, FreeBSD-CURRENT and Cywin have the same
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein problem. Yum. If another platform has this
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein with worker, this becomes a showstopper.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Aaron says: I spent some time disecting this and have come to
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein the conclusion that it is not a problem in the worker MPM
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein (or at least, it is not isolated to a problem in worker).
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein I'll list some of the problems I'm seeing in case someone
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein else wants to pick up where I've left off:
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein - The parent process goes into a loop consuming lots of CPU.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein It has to do with how waitpid() and apr_sleep() are called
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein from within server_main_loop(). ktrace/kdump output shows
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein some weird stuff happening with poll() and suspiciously
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein small timeout values (apr_sleep() is implemented with
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein select() which is implemented with poll()).
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein - Delivery of just about any signal to one of the child
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein processes will send it into an infinite loop as well.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein - Even though the parent is spinning out of control,
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein at first the child or children will appear to work
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein properly. At times it is possible to get it into a state,
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein however, where a request will hang until another concurrent
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein request "kicks" the first, at which point the second will
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein hang. My theory is that this has to do with the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein pthread_cond_*() implementation in FreeBSD, but it's still
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein possible that it is in APR.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Justin adds: Oh, FreeBSD threads are implemented entirely with
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein select()/poll()/longjmp(). Welcome to the nightmare.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein So, that means a ktrace output also has the thread
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein scheduling internals in it (since it is all the same to
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein the kernel). Which makes it hard to distinguish between
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein our select() calls and their select() calls.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *bangs head on wall repeatedly* But, some of the libc_r
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein files have a DBG_MSG #define. This is moderately helpful
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews when used with -DNO_DETACH. The kernel scheduler isn't
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews waking up the threads on a select(). Yum. And, I bet
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews those decrementing select calls have to do with the
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews scheduler. Time to brush up on our OS fundamentals.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews * There is increasing demand from module writers for an API
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews that will allow them to control the server � la apachectl.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews Reasons include sole-function servers that need to die if
b05bdb520d83f7ecaad708fe305268c3420be01dMark Andrews an external dependency (e.g., a database) fails, et cetera.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews Perhaps something in the (ever more abused) scoreboard?
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews rbb: I don't believe the scoreboard is the correct mechanism
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews for this. We already have a pipe that goes between parent
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews and child for graceful shutdown events, along with an API that
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews can be used to send a message down that pipe. In threaded MPMs,
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews it is easy enough to make that one pipe be used for graceful
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews and graceless events, and it is also easy to open that pipe
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein to both parent and child for writing. Then we just need to figure
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein out how to do graceless on non-threaded MPMs.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * revamp the input filter behavior, per discussions since
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein February (and especially at the hackathon last
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein April). Specifically, ap_get_brigade will return a brigade with
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *up to* a specific number of bytes, or a "line" of data. The
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein read may be blocking or nonblocking. ap_getline() will be
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein refactored into apr_brigade_getline(), and then DECHUNK can use
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein f->next (ap_getline will always read "top of input stack"). Also
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein fix the bug where request body content will end up closing the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein connection (buggering up persistent conns).
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Status: Justin is working on this as fast as he can.
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater The core input filters, HTTP-related filters, mod_ssl, and
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater mod_proxy are switched to the new logic.
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater However, ap_getline() still needs to be refactored out. But,
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater there's a problem there: ap_getline() peeks ahead for MIME
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater continuation (first character on line is space or \t) and
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater stores unused data in core_request_config which violates the
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater abstraction. That's cheating. So, we may not be able to
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater implement this without setting some data aside (yuck!).
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater I believe this is OtherBill's main complaint with the current
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater AIUI (correct me if I'm wrong!), OtherBill believes we
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater should have a pushback option so that we can return unread
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater data - this would solve this case. However, my question to
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein him is how do we handle stuff like mod_ssl - we can't "unread"
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein data. So, do we have two brigades for each filter? An in
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein brigade and a returned brigade? That seems messy. To
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein everyone else, can we refactor ap_getline() without pushback
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein - socket bucket and core input filter changes. see end of
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein message ID (Feb 27): <20010227075326.S2297@lyra.org>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein - fix up ap_get_brigade() semantics, fix bug in DECHUNK /
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein ap_getline. many messages (plus their threads) (Apr/May):
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Message-ID: <20010402101207.J27539@lyra.org>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Message-ID: <3AF7F921.D2EEC41A@algroup.co.uk>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Message-ID: <20010508190029.E18404@lyra.org>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein - further work with combining/tweaking the builtin filters:
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Message-ID: <20010509115445.D1374@lyra.org>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein - thoughts on filter modes:
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Message-ID: <021b01c14dee$09782af0$93c0b0d0@roweclan.net>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein - proposal for getline rewrite:
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Message-ID: <20011231104019.GD3904@ebuilt.com>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * Allow the DocumentRoot directive within <Location > scopes? This
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein allows the beloved (crusty) Alias /foo/ /somepath/foo/ followed
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein by a <Directory /somepath/foo> to become simply
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein <Location /foo/> DocumentRoot /somefile/foo (IMHO a bit more legible
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein and in-your-face.) DocumentRoot unset would be accepted [and would
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein not permit content to be served, only virtual resources such as
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein server-info or server-status.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein This proposed change would _not_ depricate Alias.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * Win32: Rotatelogs sometimes is not terminated when Apache
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein goes down hard. FirstBill was looking at possibly tracking the
ceeb18e6907a10547859faa340ecad83bedae90cMark Andrews child's-child processes in the parent process.
ceeb18e6907a10547859faa340ecad83bedae90cMark Andrews OtherBill asks, wasn't this fixed?
ceeb18e6907a10547859faa340ecad83bedae90cMark Andrews * Win32: Add a simple hold console open patch (wait for close or
ceeb18e6907a10547859faa340ecad83bedae90cMark Andrews the ESC key, with a nice message) if the server died a bad
ceeb18e6907a10547859faa340ecad83bedae90cMark Andrews death (non-zero exit code) in console mode.
ceeb18e6907a10547859faa340ecad83bedae90cMark Andrews Resolution: bring forward same ugly hacks from 1.3.13-.20
ceeb18e6907a10547859faa340ecad83bedae90cMark Andrews * Port of mod_ssl to Apache 2.0:
ceeb18e6907a10547859faa340ecad83bedae90cMark Andrews The current porting state is summarized in modules/ssl/README. The
ceeb18e6907a10547859faa340ecad83bedae90cMark Andrews remaining work includes:
ceeb18e6907a10547859faa340ecad83bedae90cMark Andrews (1) stablizing/optimizing the SSL filter logic
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein (2) Enabling the various SSL caching mechanisms (shmcb, shmht)
ceeb18e6907a10547859faa340ecad83bedae90cMark Andrews (3) Enabling SSL extentions
ceeb18e6907a10547859faa340ecad83bedae90cMark Andrews (4) Trying to seperate the https filter logic from mod_ssl -
ceeb18e6907a10547859faa340ecad83bedae90cMark Andrews This is to facilitate other modules that wish to use the https
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein filter or the mod_ssl logic or both as required.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Justin: mod_ssl filter logic is redone, so that should be fine.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Madhu has submitted a patch for SSL caching - however, I
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein am -0 on that patch as I *think* we could implement the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein shared memory another way that is much cleaner (i.e.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein treat shmem directly as a dbm via APR routines). Justin
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein also thinks that the https filter logic may be sufficiently
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein decoupled now, but isn't really sure.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * Performance: Get the SINGLE_LISTEN_UNSERIALIZED_ACCEPT
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein optimization working in worker. prefork's new design for how
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein to notice data on the pod should be sufficient.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * Performance & Debug: Eliminate most (and perhaps all) of the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein malloc/free calls in the bucket brigade code. Need some
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein light weight memory management functions that allow freeing
3a32ac2a720653083c7a22cb654b86c398f6d4c8Tinderbox User memory (putting it back into a memory pool) when it is no
3a32ac2a720653083c7a22cb654b86c398f6d4c8Tinderbox User longer needed. Enabling simple debugging features like guard
3a32ac2a720653083c7a22cb654b86c398f6d4c8Tinderbox User bands, double free detection, etc. would be cool but certainly
3a32ac2a720653083c7a22cb654b86c398f6d4c8Tinderbox User not a hard requirement.
3a32ac2a720653083c7a22cb654b86c398f6d4c8Tinderbox User Status: Cliff started to implement this using SMS as has
3a32ac2a720653083c7a22cb654b86c398f6d4c8Tinderbox User been discussed at length for months, but since
3a32ac2a720653083c7a22cb654b86c398f6d4c8Tinderbox User SMS is not being used anywhere else in the server,
3a32ac2a720653083c7a22cb654b86c398f6d4c8Tinderbox User several people expressed the opinion that we should
3a32ac2a720653083c7a22cb654b86c398f6d4c8Tinderbox User get rid of it entirely, meaning that the buckets
3a32ac2a720653083c7a22cb654b86c398f6d4c8Tinderbox User need their own memory management (free list) functions.
3a32ac2a720653083c7a22cb654b86c398f6d4c8Tinderbox User Cliff will implement that this weekend so we at least
3a32ac2a720653083c7a22cb654b86c398f6d4c8Tinderbox User have something to look at/compare with.
3a32ac2a720653083c7a22cb654b86c398f6d4c8Tinderbox User * Eliminate unnecessary creation of pipes in mod_cgid
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * the autoconf setup should be fixed to default to using the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein "Apache" layout from config.layout, and each variable settable
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein in a layout should be overridable on the command line. Plus,
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein what we do right now just doesn't seem to fully fit into how autoconf
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein works, eg. AC_PREFIX_DEFAULT issues.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Message-ID: <Pine.BSF.4.20.0104031557420.20876-100000@alive.znep.com>
bea931e17b7567f09107f93ab7e25c7f00abeb9cMark Andrews * Combine log_child and piped_log_spawn. Clean up http_log.c.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Common logging API.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * Document mod_file_cache.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * OS/2: Make mod_status work for spmt_os2 MPM.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * Platforms that do not support fork (primarily Win32 and AS/400)
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Architect start-up code that avoids initializing all the modules
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein in the parent process on platforms that do not support fork.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * Win32: Migrate the MPM over to use APR thread/process calls. This
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein would eliminate some code in the Win32 branch that essentially
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein duplicates what is in APR.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * There are still a number of places in the code where we are
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein losing error status (i.e. throwing away the error returned by a
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein system call and replacing it with a generic error code)
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * Mass vhosting version of suEXEC.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * All DBMs suffer from confusion in support/dbmmanage (perl script) since
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein the dbmmanage employs the first-matched dbm format. This is not
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein necessarily the library that Apache was built with. Aught to
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein rewrite dbmmanage upon installation to bin/ with the proper library
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein for predictable mod_auth_db/dbm administration.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Status: Mladen Turk has posted several patches and ideas.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Key question, part of htpasswd, or a seperate utility?
ceeb18e6907a10547859faa340ecad83bedae90cMark Andrews prefer htpasswd:
ceeb18e6907a10547859faa340ecad83bedae90cMark Andrews prefer seperate: OtherBill
ceeb18e6907a10547859faa340ecad83bedae90cMark Andrews * use apu_dbm in mod_auth_dbm
ceeb18e6907a10547859faa340ecad83bedae90cMark Andrews Status: Greg +1 (low-priority volunteer)
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Justin says: "Seems like this is already there, so should we just
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein remove the other DBM code in that file? If you want
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein to use gdbm, or dbm, etc, you should tell apr-util."
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Will says: "bs - I may choose the fastest - most efficient native
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein dbm implementation, for shared proc caches, ssl session
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein caching, etc, but that has nothing to do with maintaining
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein a userlist via dbm, which has to remain readable between
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein builds/machines, etc. The use-multiple database schema
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein for apr-util would let us do this with just apr, though."
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Ian says: "multi-dbm is in, but it still has ndbm support hardcoded
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein is this still required? isn't ndbm supported via gdbm?"
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * Integrate mod_dav.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Some additional items remaining:
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein - case_preserved_filename stuff
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein (use the new canonical name stuff?)
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein - find a new home for ap_text(_header)
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein - is it possible to remove the DAV: namespace stuff from util_xml?
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * ap_core_translate() and its use by mod_mmap_static and mod_file_cache
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein are a bit wonky. The function should probably be exposed as a utility
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein function (such as ap_translate_url2fs() or ap_validate_fs_url() or
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein something). Another approach would be a new hook phase after
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein "translate" which would allow the module to munge what the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein translation has decided to do.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Status: Greg +1 (volunteers), Ryan +1
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * Explore use of a post-config hook for the code in http_main.c which
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein calls ap_fixup_virutal_hosts(), ap_fini_vhost_config(), and
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein ap_sort_hooks() [to reduce the logic in main()]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * read the config tree just once, and process N times (as necessary)
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * (possibly) use UUIDs in mod_unique_id and/or mod_usertrack
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * (possibly) port the bug fix for PR 6942 (segv when LoadModule is put
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein into a VirtualHost container) to 2.0.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * shift stuff to mod_core.h
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * callers of ap_run_create_request() should check the return value
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein for failure (Doug volunteers)
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * Win32: Get Apache working on Windows 95/98. The following work
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein (at least) needs to be done:
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein - winnt MPM: Fix 95/98 code paths in the winnt MPM. There is some NT
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein specific code that is still not in NT only code paths
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein - IOL binds to APR sendfile, implemented with TransmitFile, which
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein is not available on 95/98.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein - Document warning that OSR2 is required (for Crypt functions, in
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein rand.c, at least.) This could be resolved with an SSL library, or
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein randomization in APR itself.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein - Bring the Win9xConHook.dll from 1.3 into 2.0 (no sense till it
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein actually works) and add in a splash of Win9x service code.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * In order to use a DSO version of mod_ssl we have to link with
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein -lssl and -lcrypto. A workaround is in place right now where the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein entire EXTRA_LIBS macro is being appended to the objects list, but
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater this is a hack. We should either revamp the APACHE_CHECK_SSL_TOOLKIT
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater autoconf function or come up with some other autoconf checks to
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater search for libssl and libcrypto and properly add them to mod_ssl's
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater * Make the worker MPM the default MPM for threaded Unix boxes.
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater +1: Justin, Jeff, Ian
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater -0: Aaron (premature decision, needs more discussion)
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater -0: Cliff (I think the default config should be the safest possible)
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater * Fix the worker MPM to use POD to kill child processes instead
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater of ap_os_killpg, regardless of how they should die. (Ryan Bloom)
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic UpdaterPRs that have been suspended forever waiting for someone to
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updaterput them into 'the next release':
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater * PR#76: general
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater missing call to "setlocale();"
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater * PR#78: mod_include
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater Additional status for XBitHack directive
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater * PR#362: mod_proxy
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater Mod_proxy doesn't allow change of error pages
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * PR#370: mod_env
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Modified PATH environemnt variable is not passed, instead
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein system's is used
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * PR#440: mod_proxy
dad65f7c93330a10705384739dff3a6d4dfe1e70Tinderbox User Proxy doesn't deliver documents if not connected
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * PR#534: mod_proxy
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews proxy converts ~name to %7Ename when name starts with a dot (.)
bae169ea64bf736d6ea6074c2af3d7c117079972Tinderbox User * PR#537: mod_access
bae169ea64bf736d6ea6074c2af3d7c117079972Tinderbox User mod_access syntax allows hosts that should be restricted
bae169ea64bf736d6ea6074c2af3d7c117079972Tinderbox User * PR#557: mod_auth-any
bae169ea64bf736d6ea6074c2af3d7c117079972Tinderbox User ~UserHome directories are not honored in absolute pathname
a24330c4805a224191ab687d0291963062fe3355Tinderbox User requests (.htaccess)
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * PR#612: mod_proxy
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Proxy FTP Authentication Fails
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews * PR#623: mod_include
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews A smarter "Last Modified" value for SSI documents (see PR number 600)
dad65f7c93330a10705384739dff3a6d4dfe1e70Tinderbox User * PR#628: config
dad65f7c93330a10705384739dff3a6d4dfe1e70Tinderbox User Request of "Options SymLinksIfGroupMatch"
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * PR#700: mod_proxy
dad65f7c93330a10705384739dff3a6d4dfe1e70Tinderbox User Proxy doesn't do links right for OpenVMS files through ftp:
dad65f7c93330a10705384739dff3a6d4dfe1e70Tinderbox User * PR#759: mod_imap
dad65f7c93330a10705384739dff3a6d4dfe1e70Tinderbox User imap should read <MAP><AREA>*</MAP> too!
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * PR#793: general
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein RLimitCPU and RLimitMEM don't apply to all children like they should
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * PR#921: suexec
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Uses cwd before filling it in, doesn't use syslog
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * PR#922: config
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein it is useful to allow specifiction that root-owned symlinks
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein should always be followed
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * PR#980: mod_proxy
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Controlling Access to Remote Proxies would be nice...
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * PR#994: mod_proxy
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Adding authentication "on the fly" through the proxy module
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * PR#1004: apache-api
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein request_config field in request_rec is moderately bogus
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * PR#1028: other
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein DoS attacks involving memory consumption
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * PR#1050: mod_log-any
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Logging of virtual server to error_log as well
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * PR#1085: mod_proxy
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein ProxyRemote make a dead cycle.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * PR#1117: mod_auth-any
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Using NIS passwd.byname dbm files with AuthDBMUserFile
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * PR#1120: suexec
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein suexec does not parse arguments to #exec cmd
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * PR#1145: mod_include
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Allow for Last-Modified: without resorting to XBitHack
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * PR#1158: apache-api
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein improvements to child spawning API
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * PR#1166: mod_proxy
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein ``nph-'' not honored (no buffering) for ProxyRemote mapping
4556ad3a270bf049b3225433a402666aaffe3c36Mark Andrews * PR#1176: mod_cgi
4556ad3a270bf049b3225433a402666aaffe3c36Mark Andrews Apache cannot handle continuation line in headers
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * PR#1191: general
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein setlogin() is not called, causing problems with e.g. identd
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * PR#1204: general
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein regerror() exists, use it
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * PR#1233: apache-api
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein there is no way to keep per-connection per-module state
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * PR#1263: mod_autoexec
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Add frame-safe anchor attribute to mod_autoindex links
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * PR#1268: suexec
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein CGI scripts running as Apache user: security (suexec etc.)
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * PR#1285: suexec
4556ad3a270bf049b3225433a402666aaffe3c36Mark Andrews Error messages could be easier to spot in cgi.log file for suexec.c
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * PR#1287: mod_access
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein add allow,deny/deny,allow warning to mod_access
4556ad3a270bf049b3225433a402666aaffe3c36Mark Andrews * PR#1290: mod_proxy
4556ad3a270bf049b3225433a402666aaffe3c36Mark Andrews Need to know "hit-rate" on proxy cache
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * PR#1358: mod_log-any
9c6a5d1f22f972232d7a9fd5c5fa64f10bacbdffAutomatic Updater Selective url-encode of log fields (or maybe a pseudo
9c6a5d1f22f972232d7a9fd5c5fa64f10bacbdffAutomatic Updater log_rewrite module?)
035992291cb70ec3be4046fcea921b4a6acb1c77Mark Andrews * PR#1383: mod_headers
035992291cb70ec3be4046fcea921b4a6acb1c77Mark Andrews I make mod_headers to modify request headers as well as
035992291cb70ec3be4046fcea921b4a6acb1c77Mark Andrews response ones.
68b30890ebd441a6a1ae3fdf71744d07d02cd030Mark Andrews * PR#1532: mod_proxy
035992291cb70ec3be4046fcea921b4a6acb1c77Mark Andrews Proxy transfer logging
68b30890ebd441a6a1ae3fdf71744d07d02cd030Mark Andrews * PR#1547: mod_proxy
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein No HTTP_X_FORWARDED_FOR set...
035992291cb70ec3be4046fcea921b4a6acb1c77Mark Andrews * PR#1567: mod_proxy
9c6a5d1f22f972232d7a9fd5c5fa64f10bacbdffAutomatic Updater ProxyRemote proxy requests fail authentication by firewall
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * PR#1582: mod_rewrite
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein mod_rewrite forms REQUEST_URI different than mod_cgi does
4556ad3a270bf049b3225433a402666aaffe3c36Mark Andrews * PR#1677: mod_headers
4556ad3a270bf049b3225433a402666aaffe3c36Mark Andrews mod_headers should allow mod_log_config-style formats in
4556ad3a270bf049b3225433a402666aaffe3c36Mark Andrews header values
4556ad3a270bf049b3225433a402666aaffe3c36Mark Andrews * PR#1702: mod_proxy
4556ad3a270bf049b3225433a402666aaffe3c36Mark Andrews mod_proxy to support persistent conns?
4556ad3a270bf049b3225433a402666aaffe3c36Mark Andrews * PR#1803: mod_include
4556ad3a270bf049b3225433a402666aaffe3c36Mark Andrews patches to mod_include to allow for file tests
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * PR#1809: mod_auth-any
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Suggestion for improving authentication modules and core source
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein code, problem with 401 and ErrorDocument
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * PR#1878: mod_proxy
71c66a876ecca77923638d3f94cc0783152b2f03Mark Andrews listing of proxy cache content
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * PR#1905: suexec
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Allow modules to set user:group for execution.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * PR#2024: apache-api
5fa6a064b8301e4f274bd132fd577def59e4fb4cTinderbox User adding auth_why to conn_rec
71c66a876ecca77923638d3f94cc0783152b2f03Mark Andrews * PR#2073: mod_log-any
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein pipelined connections are not logged correctly
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * PR#2074: mod_rewrite
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein mod_rewrite doesn't pass Proxy Throughput on internal subrequests
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * PR#2113: config
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein HTTP Server Rebuild Line Needs Changing for the better
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * PR#2138: mod_status
5fa6a064b8301e4f274bd132fd577def59e4fb4cTinderbox User mod_status always displays 256 possible connection slots
71c66a876ecca77923638d3f94cc0783152b2f03Mark Andrews * PR#2221: documentation
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Make online documentation search link back to my installation
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * PR#2284: general
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Can not POST to ErrorDocument - Apache/1.3b6
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * PR#2314: mod_proxy
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein patterns in ProxyRemote
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * PR#2343: mod_status
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Status module averages are for entire uptime
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce * PR#2360: suexec
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce suexec for general access of user content?
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * PR#2396: general
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Proposal for TimeZone directive
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * PR#2415: mod_info
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein /server-info doesn't check for the virtual host to list the info
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * PR#2421: config
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein problem specifying ndbm library for build ?with autoconfigure
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * PR#2431: general
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein A small addition to rotatelogs.c to improve program functionality.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * PR#2446: config
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein AllowOverride FileInfo is too coarse
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * PR#2460: mod_cgi
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein TimeOut applies to output of CGI scripts
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * PR#2512: mod_access
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein <IfDenied> directive wanted
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * PR#2573: suexec
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein CGI's for general use still have to be run as another user
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * PR#2648: general
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Cache file names in Proxy module
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * PR#2760: config
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein [PATCH] User/Group for <Directory> and <Location> i.e. not only
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein in global and <Virtual>.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * PR#2763: general
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein mailto tags and bundling bug report script
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * PR#2785: os-aix
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Support for System Resource Controller
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * PR#2793: protocol
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein When will Apache support P3P? Any Plans?
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * PR#2873: config
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * PR#2889: general
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Inclusion of RPM spec file in CVS/distributions
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * PR#2906: general
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Propose that Apache recommend $UNIQUE_ID for all "session id"
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * PR#2907: config
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein suggestion: power up your Include directive :)
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * PR#3018: general
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein cannot limit some HTTP methods
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * PR#3143: apache-api
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein No module specific data hook for per-connection data
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * PR#3191: mod_negotiation
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein no way to set global quality-of-source (qs) coneg values
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein with multiviews
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * PR#3568: mod_proxy
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Accessing URL through proxy server corrupts data.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * PR#3605: mod_proxy
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Some anonymous FTP URLs ask for authentication
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * PR#3677: general
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein New ErrorDocumentMatch directive
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * PR#4241: config
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Need to be able to override shebang line to make CGI scripts
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein more portable.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * PR#4244: config
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein "Files" and "FilesMatch" regexp does not recognize bang as
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein negation operator
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * PR#4448: mod_log-any
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Please allow CGI env variables (QUERY_STRING, ...) to be logged
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * PR#4459: mod_include
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Suggestion for better handling of Last-modified headers
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * PR#4490: mod_cgi
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein mod_cgi prevents handling of OPTIONS requests
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * PR#5713: os-windows
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein [PATCH] install as win32 service with domain account
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * PR#5993: general
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein AllowOverride should have a 'CheckNone' and 'AllowNone' argument
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein instead of only 'None'
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob AusteinOther bugs that need fixing:
47012ae6dbf18a2503d7b33c1c9583dc38625cb7Mark Andrews * MaxRequestsPerChild measures connections, not requests.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Until someone has a better way, we'll probably just rename it
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein "MaxConnectionsPerChild".
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * Regex containers don't work in an intutive way
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Status: No one has come up with an efficient way to fix this
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein behavior. Dean has suggested getting rid of regex containers
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * SIGSEGV on Linux (glibc 2.1.2) isn't caught properly by a
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein sigwaiting thread. We need to work around this, perhaps unless
d9c707589ade5d69fb59b6837555adc4cd24d34fAutomatic Updater there is hope soon for a fixed glibc.
d9c707589ade5d69fb59b6837555adc4cd24d34fAutomatic Updater * orig_ct in the byterange/multipart handling may not be
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein needed. Apache 1.3 just never stashed "multipart" into
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein r->content_type. We should probably follow suit since the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein byterange stuff doesn't want the rest of the code to see the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein multipart content-type; the other code should still think it is
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein dealing with the <orig_ct> stuff.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Status: Greg volunteers to investigate (esp. since he was most
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein likely the one to break it :-)
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob AusteinOther features that need writing:
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * Finish infrastructure in core for async MPMs
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Status: post 2.0
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * TODO in source -- just do an egrep on "TODO" and see what's there
c6d486af36165da7eb970354981d145249e342e4Mark AndrewsAvailable Patches:
c6d486af36165da7eb970354981d145249e342e4Mark Andrews * Jon Travis's <jtravis@covalent.net> patch to deal with thread-safe
c6d486af36165da7eb970354981d145249e342e4Mark Andrews issues with inet_ntoa. See message <20001201163220.A12827@covalent.net>
c6d486af36165da7eb970354981d145249e342e4Mark Andrews Status: This is being set aside until the IPv6 work is finished
a1ad6695ed6f988406cf155aa26376f84f73bcb9Automatic Updater so that we know exactly what is required.
c6d486af36165da7eb970354981d145249e342e4Mark Andrews * Martin Sojka <msojka@gmx.de>'s patch to add error reporting for failed
c6d486af36165da7eb970354981d145249e342e4Mark Andrews htpasswd actions due to a full /tmp volume (other programs may have
c6d486af36165da7eb970354981d145249e342e4Mark Andrews similar problems?)
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * Mike Abbott's <mja@trudge.engr.sgi.com> patches to improve
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Status: These were written for 1.3, and are awaiting a port to
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * Jim Winstead's <jimw@trainedmonkey.com> patch to add CookieDomain and
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein other small mod_usertrack features
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * Dan Rench's <drench@xnet.com> patch to add allow the errmsg and timefmt
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein of SSI's to be modified in the config file. Patch is available in
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * Which MPMs will be included with Apache 2.0?