2887N/ALast modified at [$Date: 2000/11/28 20:07:17 $]
1681N/A 2.0a7 : released October 8, 2000
1681N/A 2.0a6 : released August 18, 2000
1681N/A 2.0a5 : released August 4, 2000
1681N/A 2.0a4 : released June 7, 2000
6982N/A 2.0a3 : released April 28, 2000
6982N/A 2.0a2 : released March 31, 2000
1681N/A 2.0a1 : released March 10, 2000
6982N/A Status: patch brought forward from 1.3.14
6982N/A WIN32 and OS2 need review [William Rowe, Brian Harvard]
1681N/A * Remove Buff from the code.
1681N/A Status: Buff has been removed from the core completely, but the
1681N/A proxy module is still using it. As soon as the new proxy
1681N/A patches are committed, Buff should be removed from the proxy
1681N/A * Error messages are filtered according to the needs of the original
1681N/A URI. Nothing ensures that they are translated on EBCDIC machines
1681N/A and *not* translated on ASCII machines.
1681N/A * Win32: Enable the Windows MPM to honor max_requests_per_child
1681N/A Status: Bill will fix this.
1681N/A * Win32: Get Apache working on Windows 95/98. The following work
1681N/A (at least) needs to be done:
1681N/A - winnt MPM: Fix 95/98 code paths in the winnt MPM. There is some NT
2175N/A specific code that is still not in NT only code paths
2175N/A - IOL binds to APR sendfile, implemented with TransmitFile, which
2175N/A - Document warning that OSR2 is required (for Crypt functions, in
2624N/A * Win32: Test access logging with multiple threads. Will the
2175N/A native file I/O calls serialize automagically like the
2175N/A CRT calls or do we need to add region locking each time
2085N/A * Win32: Complete the revamp the service environment and relocation
1681N/A into the WinNT MPM. Changes ServerRoot service registry
1681N/A parameter into ConfigArgs for multiple service startup parameters.
1681N/A signals are not being acknowledged. Close window and shutdown
1681N/A OtherBill is working on this
2870N/A * We need a thread-safe resolver, at least on Unix.
2870N/A Status: The best known candidate would be something from
2870N/A Status: Greg asks, "why? doesn't gethostbyname_r() handle this?"
2870N/A * Modify mod_cgi and mod_cgid to deal with directories. This allows
2870N/A a lot of directives to be removed from the core.
2870N/A * The AddInputFilter and AddOutputFilter directives do not allow the
2870N/A administrator to remove or reorder filters. Once a filter is added
2870N/A in a container, it is present in any subcontainers. It can only be
2870N/A added to the filter chain after any filters specified in enclosing
1681N/ARELEASE NON-SHOWSTOPPERS BUT WOULD BE REAL NICE TO WRAP THESE UP:
1694N/A * Create unified scoreboard API and implementation shared across
1694N/A * OS/2: Get loadable modules working again. Requires shared core support
1681N/A which doesn't appear to be catered for in the current build system.
1694N/A * OS/2: Make mod_status work for spmt_os2 MPM.
1681N/A * Win32: Enable the winnt MPM to use the new scoreboard API
1681N/A * Win32: Win9x console window still won't play nice with the
1681N/A close window, logoff and shutdown scenarios.
2085N/A * Win32: Add a simple hold console open patch (wait for close or
1681N/A the ESC key, with a nice message) if the server died a bad
1694N/A death (non-zero exit code) in console mode.
1694N/A * Platforms that do not support fork (primarily Win32 and AS/400)
1681N/A Architect start-up code that avoids initializing all the modules
2175N/A in the parent process on platforms that do not support fork.
2175N/A would eliminate some code in the Win32 branch that essentially
1694N/A * There are still a number of places in the code where we are
1694N/A losing error status (
i.e. throwing away the error returned by a
2060N/A system call and replacing it with a generic error code)
1694N/A * Win32: Implement reliable piped logs on Windows
1694N/A * The connection status table is not very efficient. Also, very few stats
1694N/A are exported to the connection status table (easy to fix), and mod_status
2175N/A * Mass vhosting version of suEXEC.
1694N/A * Replace tables with a proper opaque ADT that has pluggable
1694N/A implementations (including something like the existing data type,
5011N/A plus hash tables for speed, with options for more later).
3665N/A Status: fanf is working on this.
6034N/A the dbmmanage employs the first-matched dbm format. This is not
6034N/A necessarily the library that Apache was built with. Aught to
6034N/A rewrite dbmmanage upon installation to bin/ with the proper library
6034N/A * configuration option to use *DBM
1694N/A Status: Greg +1 (volunteers)
1694N/A employ same dbm for mod_auth_dbm? [Win32 is using our own sdbm]
1694N/A Message-id: <20000625173247.M29590@lyra.org>
1694N/A Status: works. passes initial regression testing. Joe Orton
2175N/A reports success with his "cadaver" tool.
1694N/A Some additional items remaining:
1694N/A - case_preserved_filename stuff
2060N/A - find a new home for ap_text(_header)
1694N/A - is it possible to remove the DAV: namespace stuff from util_xml?
1694N/A * ap_core_translate() and its use by mod_mmap_static and mod_file_cache
1694N/A are a bit wonky. The function should probably be exposed as a utility
1694N/A function (such as ap_translate_url2fs() or ap_validate_fs_url() or
1694N/A something). Another approach would be a new hook phase after "translate"
2175N/A which would allow the module to munge what the translation has decided
1694N/A Status: Greg +1 (volunteers), Ryan +1
3665N/A calls ap_fixup_virutal_hosts(), ap_fini_vhost_config(), and
1694N/A ap_sort_hooks() [to reduce the logic in main()]
6034N/A * read the config tree just once, and process N times (as necessary)
6034N/A * add a version number to ap_initialize() as an extra failsafe against
6034N/A (APR) library version skew.
3665N/A MsgID: <Pine.LNX.4.10.10005231712380.31927-100000@nebula.lyra.org>
6034N/A Status: Greg +1 (volunteers), Jeff +1, Ryan +1, Tony -0(?)
1694N/A * mod_info to use the configuration tree
2175N/A * (possibly) use UUIDs in mod_unique_id
and/or mod_usertrack
2870N/APRs that have been suspended forever waiting for someone to
2870N/Aput them into 'the next release':
2870N/A missing call to "setlocale();"
2870N/A Additional status for XBitHack directive
2870N/A Questionable performace of mod_dir() with negotiation
1681N/A Mod_proxy doesn't allow change of error pages
2175N/A Modified PATH environemnt variable is not passed, instead
2175N/A Proxy doesn't deliver documents if not connected
1694N/A proxy converts ~name to %7Ename when name starts with a dot (.)
1694N/A mod_access syntax allows hosts that should be restricted
2175N/A ~UserHome directories are not honored in absolute pathname
1750N/A Proxy FTP Authentication Fails
1681N/A A smarter "Last Modified" value for SSI documents (see PR number 600)
2175N/A Request of "Options SymLinksIfGroupMatch"
2175N/A A security tweak I've been using for a few years for SSI
1681N/A Proxy doesn't do links right for OpenVMS files through ftp:
1681N/A imap should read <MAP><AREA>*</MAP> too!
1681N/A RLimitCPU and RLimitMEM don't apply to all children like they should
1681N/A Uses cwd before filling it in, doesn't use syslog
1681N/A it is useful to allow specifiction that root-owned symlinks
1681N/A Controlling Access to Remote Proxies would be nice...
2175N/A Adding authentication "on the fly" through the proxy module
1681N/A request_config field in request_rec is moderately bogus
1681N/A DoS attacks involving memory consumption
1681N/A Logging of virtual server to error_log as well
2175N/A ProxyRemote make a dead cycle.
2175N/A suexec does not parse arguments to #exec cmd
1681N/A Allow for Last-Modified: without resorting to XBitHack
1750N/A insufficent AllowOverrides granularity for autoindexing
1681N/A improvements to child spawning API
1681N/A ``nph-'' not honored (no buffering) for ProxyRemote mapping
1681N/A Apache cannot handle continuation line in headers
1681N/A setlogin() is not called, causing problems with
e.g. identd
1681N/A there is no way to keep per-connection per-module state
1681N/A Add frame-safe anchor attribute to mod_autoindex links
2175N/A CGI scripts running as Apache user: security (suexec etc.)
2870N/A Need to know "hit-rate" on proxy cache
2175N/A Selective url-encode of log fields (or maybe a pseudo
1694N/A I make mod_headers to modify request headers as well as
1694N/A No HTTP_X_FORWARDED_FOR set...
2175N/A ProxyRemote proxy requests fail authentication by firewall
1694N/A ReadmeName and HeaderName don't allow for server-parsed html.
1694N/A mod_rewrite forms REQUEST_URI different than mod_cgi does
2175N/A mod_headers should allow mod_log_config-style formats in
2175N/A mod_proxy to support persistent conns?
1681N/A patches to mod_include to allow for file tests
1681N/A Suggestion for improving authentication modules and core source
1681N/A code, problem with 401 and ErrorDocument
2175N/A More Control over autoindex layout
2175N/A listing of proxy cache content
2175N/A Allow modules to set user:group for execution.
1681N/A adding auth_why to conn_rec
1681N/A pipelined connections are not logged correctly
2175N/A mod_rewrite doesn't pass Proxy Throughput on internal subrequests
1681N/A HTTP Server Rebuild Line Needs Changing for the better
1694N/A mod_status always displays 256 possible connection slots
1694N/A Make online documentation search link back to my installation
2175N/A Can not POST to ErrorDocument - Apache/1.3b6
1681N/A Status module averages are for entire uptime
2175N/A suexec for general access of user content?
1694N/A Proposal for TimeZone directive
1694N/A /server-info doesn't check for the virtual host to list the info
1750N/A problem specifying ndbm library for build ?with autoconfigure
1694N/A AllowOverride FileInfo is too coarse
1750N/A TimeOut applies to output of CGI scripts
2175N/A <IfDenied> directive wanted
1694N/A CGI's for general use still have to be run as another user
1694N/A Cache file names in Proxy module
1694N/A mailto tags and bundling bug report script
1694N/A Support for System Resource Controller
2175N/A When will Apache support P3P? Any Plans?
1694N/A Propose that Apache recommend $UNIQUE_ID for all "session id"
1694N/A suggestion: power up your Include directive :)
3665N/A cannot limit some HTTP methods
6034N/A No module specific data hook for per-connection data
2175N/A Configuration file in Japanese
1694N/A no way to set global quality-of-source (qs) coneg values
2060N/A Enhancement: MultiViews, Multi-Language Documents
1694N/A Accessing URL through proxy server corrupts data.
1694N/A Please add an Apache icon to the systray instead of a DOS window
3665N/A Some anonymous FTP URLs ask for authentication
6034N/A BORDER=0 makes Icons look nicer (FancyIndexing)
6034N/A New ErrorDocumentMatch directive
2175N/A Alternative for win95 users
2175N/A Need to be able to override shebang line to make CGI scripts
1694N/A "Files" and "FilesMatch" regexp does not recognize bang as
2175N/A Please allow CGI env variables (QUERY_STRING, ...) to be logged
1694N/A Suggestion for better handling of Last-modified headers
2175N/A mod_cgi prevents handling of OPTIONS requests
1694N/A mod_autoindex does not generate Last-Modified response headers
1694N/A The output of CGI scripts appears in the window that apache
2175N/A [PATCH] install as service with domain account
2175N/A AllowOverride should have a 'CheckNone' and 'AllowNone' argument
1694N/A Status: Waiting for IANA types to be defined
1694N/AOther bugs that need fixing:
1694N/A * MaxRequestsPerChild measures connections, not requests.
2175N/A Until someone has a better way, we'll probably just rename it
1750N/A * Regex containers don't work in an intutive way
2175N/A Status: No one has come up with an efficient way to fix this
1694N/A behavior. Dean has suggested getting rid of regex containers
1694N/A * SIGSEGV on Linux (glibc 2.1.2) isn't caught properly by a
2175N/A sigwaiting thread. We need to work around this, perhaps unless
2175N/A there is hope soon for a fixed glibc.
2175N/A * The MM library is built as static and shared library. This should
1694N/A be set up to build only the required version.
2175N/AOther features that need writing:
2175N/A * Finish infrastructure in core for async MPMs
1694N/A * TODO in source -- just do an egrep on "TODO" and see what's there
1694N/ADocumentation that needs writing:
1694N/A * Mod_status docs are needed.
1750N/A * The concept of MPMs, especially if we ship more than one MPM for a
2175N/A * New directives in the various MPMs and appropriate links from
1694N/A Status: Ben Laurie has written some hooks documentation
2175N/A * Changes since 1.3.9 can be more easily seen in the commitlog file
1694N/A which includes some of Roy's comments when the changes were
2175N/A committed in rough change-sets by purpose. Note that the commitlog
1694N/A does not show the contents of new files until later.
2175N/A * Martin Sojka <msojka@gmx.de>'s patch to add error reporting for failed
1694N/A htpasswd actions due to a full /tmp volume (other programs may have
1694N/A * Mike Abbott's <mja@trudge.engr.sgi.com> patches to improve
1694N/A Status: These were written for 1.3, and are awaiting a port to
2175N/A * Jim Winstead's <jimw@trainedmonkey.com> patch to add CookieDomain and
2175N/A other small mod_usertrack features
2175N/A * Dan Rench's <drench@xnet.com> patch to add allow the errmsg and timefmt
2175N/A of SSI's to be modified in the config file. Patch is available in
2175N/A * What do we do about mod_proxy?
2175N/A * Which MPMs will be included with Apache 2.0?