You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by prash reddy <re...@gmail.com> on 2007/03/15 21:49:42 UTC

[users@httpd] Apache problem with MSIE

Hi All,

I am working on Apache 2.0.50 on Linux, proxying the requests to weblogic
server by path using the location block.

Here is the problem: In application,When i simply hit the browser back
button, i can see that all the commentents being lost which were entered in
previuos page.

Its only happening with MSIE, where as it is working fine with firefox.

is it a problem with application code or apache webserver settings?

Thnaks
sharath

RE: [users@httpd] Apache problem with MSIE

Posted by Mark Lavi <ml...@sgi.com>.
Any answer to your questions below is entirely out of scope of
discussion on this Apache support list - because you are asking about
how authentication works in your distributed security environment.

 

You must be able to conduct a security audit of each component to answer
those questions, because any answer someone offers you about Apache
could not consider the entire environment you are using.

 

Cheers,

 

--Mark 

Mark Lavi, Enterprise Web Management Team @ SGI
mailto:mlavi@sgi.com || phone:+1-650-933-7707
________________________________


From: prash reddy [mailto:reddy.web@gmail.com] 
Sent: Friday, March 16, 2007 11:05 AM
To: users@httpd.apache.org
Subject: Re: [users@httpd] Apache problem with MSIE

 

Hi Mark,

Thanks for response, but the application is working fine with iPlanet
webservers (with IE and Firefox). Reccently we upgraded webservers from
iPlanet to Apache 2.0.50

We are using a Oblix (WSSO) Authentication mechanisam in this scenario
to access the application, and the intresting thing is, it is working
just fine without this Authentication. 

Do we need to take care of any apache directives regarding
authentication?? or redirection??

Thanks,
Sharath











On 3/15/07, Mark Lavi <ml...@sgi.com> wrote:

The fact that you see different results in web browsers reveals the
answer to your question: the Apache web server does not change in your
experiment.

 

The answer to your question: understanding the stateless protocol of
HTTP (REST) is why your application will respond with preserved fields
when the back button on any browser retrieves the page from a web
server. If your browser fetches from it's own cache, then it can
preserve the field values as a convenience - that is probably why you
see the difference in the browsers.

 

Either way, Apache and your application are not involved when a browser
chooses to go BACK and restores form field values.

 

--Mark 

Mark Lavi, Enterprise Web Management Team @ SGI
 
mailto:mlavi@sgi.com || phone:+1-650-933-7707
________________________________


From: prash reddy [mailto:reddy.web@gmail.com] 
Sent: Thursday, March 15, 2007 1:50 PM
To: users@httpd.apache.org
Subject: [users@httpd] Apache problem with MSIE

 

Hi All,

I am working on Apache 2.0.50 on Linux, proxying the requests to
weblogic server by path using the location block.

Here is the problem: In application,When i simply hit the browser back
button, i can see that all the commentents being lost which were entered
in previuos page. 

Its only happening with MSIE, where as it is working fine with firefox.

is it a problem with application code or apache webserver settings?

Thnaks
sharath 

 


Re: [users@httpd] Apache problem with MSIE

Posted by prash reddy <re...@gmail.com>.
Hi Mark,

Thanks for response, but the application is working fine with iPlanet
webservers (with IE and Firefox). Reccently we upgraded webservers from
iPlanet to Apache 2.0.50

We are using a Oblix (WSSO) Authentication mechanisam in this scenario to
access the application, and the intresting thing is, it is working just fine
without this Authentication.

Do we need to take care of any apache directives regarding authentication??
or redirection??

Thanks,
Sharath










On 3/15/07, Mark Lavi <ml...@sgi.com> wrote:
>
>  The fact that you see different results in web browsers reveals the
> answer to your question: the Apache web server does not change in your
> experiment.
>
>
>
> The answer to your question: understanding the stateless protocol of HTTP
> (REST) is why your application will respond with preserved fields when the
> back button on any browser retrieves the page from a web server. If your
> browser fetches from it's own cache, then it can preserve the field values
> as a convenience – that is probably why you see the difference in the
> browsers.
>
>
>
> Either way, Apache and your application are not involved when a browser
> chooses to go BACK and restores form field values.
>
>
>
> --Mark
>
> Mark Lavi, Enterprise Web Management Team @ SGI
>
> mailto:mlavi@sgi.com || phone:+1-650-933-7707
>
>  ------------------------------
>
> *From:* prash reddy [mailto:reddy.web@gmail.com]
> *Sent:* Thursday, March 15, 2007 1:50 PM
> *To:* users@httpd.apache.org
> *Subject:* [users@httpd] Apache problem with MSIE
>
>
>
> Hi All,
>
> I am working on Apache 2.0.50 on Linux, proxying the requests to weblogic
> server by path using the location block.
>
> Here is the problem: In application,When i simply hit the browser back
> button, i can see that all the commentents being lost which were entered in
> previuos page.
>
> Its only happening with MSIE, where as it is working fine with firefox.
>
> is it a problem with application code or apache webserver settings?
>
> Thnaks
> sharath
>

RE: [users@httpd] Apache problem with MSIE

Posted by Mark Lavi <ml...@sgi.com>.
The fact that you see different results in web browsers reveals the
answer to your question: the Apache web server does not change in your
experiment.

 

The answer to your question: understanding the stateless protocol of
HTTP (REST) is why your application will respond with preserved fields
when the back button on any browser retrieves the page from a web
server. If your browser fetches from it's own cache, then it can
preserve the field values as a convenience - that is probably why you
see the difference in the browsers.

 

Either way, Apache and your application are not involved when a browser
chooses to go BACK and restores form field values.

 

--Mark 

Mark Lavi, Enterprise Web Management Team @ SGI
mailto:mlavi@sgi.com || phone:+1-650-933-7707
________________________________


From: prash reddy [mailto:reddy.web@gmail.com] 
Sent: Thursday, March 15, 2007 1:50 PM
To: users@httpd.apache.org
Subject: [users@httpd] Apache problem with MSIE

 

Hi All,

I am working on Apache 2.0.50 on Linux, proxying the requests to
weblogic server by path using the location block.

Here is the problem: In application,When i simply hit the browser back
button, i can see that all the commentents being lost which were entered
in previuos page. 

Its only happening with MSIE, where as it is working fine with firefox.

is it a problem with application code or apache webserver settings?

Thnaks
sharath 


Re: [users@httpd] Apache problem with MSIE

Posted by matt farey <ma...@gmail.com>.

sharath reddy wrote:
> Hi All,
>
> Thanks for responses, Still i could not able to solve the problem,
> even though i enabled mod_expires.
>
> Here the problem: As i found that IE fetching the entire webpage from
> weblogic server intsead of from local cache when i hit the back
> button.So, is there any directive or apache setting that might prevent
> the client(browser) to fetch the web page from weblogic server when i hit
> the back button. Instead, it can fetch it from local cache.
>
> I introduced mod_expires( to cache the content), but still IE could
> not cache the content.
>
> I am not an expert in apache server, so please let me know for any
> modifications..
> The above mentioned problem arises, when i access the DirectoyApp
> (below) application.Here i am giving my httpd.conf file:
>
>
> ServerRoot "/opt/web/apache2"
> <IfModule !mpm_netware.c>
> PidFile log/httpd_port80.pid
> </IfModule>
>
> Timeout 300
> KeepAlive Off
> #MaxKeepAliveRequests 100
> #KeepAliveTimeout 300
>
> Listen 80
>
> LoadModule weblogic_module /opt/web/apache2/modules/mod_wl_20.so
> LoadModule  headers_module       /opt/web/apache2/modules/mod_headers.so
> LoadModule  deflate_module       /opt/apache2/modules/mod_deflate.so
> LoadFile    /usr/lib/libxml2.so
> LoadModule  proxy_html_module   
> /opt/web/apache2/modules/mod_proxy_html.so
> LoadModule expires_module /opt/web/apache2/modules/mod_expires.so
>
> ProxyRequests Off
>
> <IfModule !mpm_winnt.c>
> <IfModule !mpm_netware.c>
> User www
> Group www
> </IfModule>
> </IfModule>
>
> ServerName dev1.sds.com <http://dev1.sds.com>
> UseCanonicalName Off
> DocumentRoot "/opt/web/apache2/docroot"
>
> <Directory />
>     Options FollowSymLinks
>     AllowOverride None
> </Directory>
>
> <Directory "/opt/web/apache2/docroot">
>     Options Indexes FollowSymLinks Includes ExecCGI MultiViews
>     AllowOverride All
>     Order allow,deny
>     Allow from all
> </Directory>
>
> <Directory */WEB-INF/*>
>     Order Deny,Allow
>     Deny from all
> </Directory>
>
> <Directory "/opt/web/checkme">
>         Options Indexes FollowSymLinks
>         AllowOverride All
>         Order allow,deny
>         Allow from all
> </Directory>
>
> <Directory "/opt/www">
>         Options Indexes FollowSymLinks Includes ExecCGI
>         AllowOverride All
>         Order deny,allow
>         Allow from all
> </Directory>
>
> DirectoryIndex index.html home.html
>
> AccessFileName .htaccess
> <FilesMatch "^\.ht">
>     Order allow,deny
>     Deny from all
> </FilesMatch>
>
> TypesConfig /opt/web/apache2/conf/mime.types
> DefaultType text/plain
>
> <IfModule mod_mime_magic.c>
>     MIMEMagicFile /opt/apache2/conf/magic
> </IfModule>
>
> <IfModule mod_expires.c>
>        ExpiresActive On
>        ExpiresByType image/gif A86400
>        ExpiresByType image/png A86400
>        ExpiresByType text/html A3600
> </IfModule>
>
> IndexOptions FancyIndexing VersionSort
>
> AddType application/x-compress .Z
> AddType application/x-gzip .gz .tgz
> AddType image/x-icon .ico
>
> AddHandler type-map var
>
> AddOutputFilter INCLUDES .htm
> AddType text/css .css
>
> <IfModule mod_ssl.c>
>     Include conf/ssl.conf
> </IfModule>
>
> #########################################################################
> #*** BEGIN Oblix NetPoint WebGate Specific ****
>
> LoadFile "/opt/netpoint/dev/7.0.1/access/oblix/lib/libgcc_s.so.1"
> LoadFile "/opt/netpoint/dev/7.0.1/access/oblix/lib/libstdc++.so.5"
>
> <IfModule mod_ssl.c>
>         LoadModule obWebgateModule
> "/opt/netpoint/dev/7.0.1/access/oblix/apps/webgate/bin/webgatessl.so"
> </IfModule>
>
> <IfModule !mod_ssl.c>
>         LoadModule obWebgateModule
> "/opt/netpoint/dev/7.0.1/access/oblix/apps/webgate/bin/webgate.so"
> </IfModule>
>
> WebGateInstalldir "/opt/netpoint/dev/7.0.1/access"
>
> WebGateMode PEER
>
> <Location /access/oblix/apps/webgate/bin/webgate.cgi>
> SetHandler obwebgateerr
> </Location>
>
> <Location "/oberr.cgi">
> SetHandler obwebgateerr
> </Location>
>
> <LocationMatch "/*">
> AuthType Oblix
> require valid-user
> </LocationMatch>
>
> #*** END Oblix NetPoint WebGate Specific ****
> #########################################################################
>
> Alias /content "/opt/www/content"
> Alias /contentApp "/opt/www/contentApp"
>
> <Location ~ "/DirectoryApp">
>     SetHandler weblogic-handler
>     WebLogicCluster appdev1.sds.com:8330 <http://appdev1.sds.com:8330>
>     ConnectTimeoutSecs 60
> </Location>
> <Location ~ "/DirectoryListing">
>     SetHandler weblogic-handler
>     WebLogicCluster appdev1.sds.com:8330 <http://appdev1.sds.com:8330>
>     ConnectTimeoutSecs 60
> </Location>
>
> Thanks,
> Sharath

I hate to say it, but IE suffers from a number of bugs, I am assuming
here you are talking about MSIE 6.0 and so I for one think your best
option is simply to
a) tell users to upgrade if they are suffering problems as it likely a
bug with THEIR browser, not MSIE in general.
b) recode you app to ensure the functionality works when the code is
refreshed - after all this refresh can occur for a number of reasons not
just when someone hits back on the browser.

IMHO what you are describing is a browser that is not following your
suggestions, a fix of the client will stop this, however your app should
be rebust enough to cope with all kinds of non standard client behaviour
including malicious behaviour. It is after all the client that has
ultimate responsibility for following the headers or not, so you will
not be able to force a change on a particular user-agent.

My advice therefore is to forget the problem, unless it is a show
stopper for your clients, in which case they are responsible to some
extent for ensuring their software is up to date and compliant. If this
approach is not practical, then you will have to change the terms and
conditions to allow for this eventuality - which will crop up again.

-- 
Matthew Farey



---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Re: [users@httpd] Apache problem with MSIE

Posted by sharath reddy <re...@gmail.com>.
Hi All,

Thanks for responses, Still i could not able to solve the problem, even
though i enabled mod_expires.

Here the problem: As i found that IE fetching the entire webpage from
weblogic server intsead of from local cache when i hit the back button.So,
is there any directive or apache setting that might prevent the
client(browser) to fetch the web page from weblogic server when i hit
the back button. Instead, it can fetch it from local cache.

I introduced mod_expires( to cache the content), but still IE could not
cache the content.

I am not an expert in apache server, so please let me know for any
modifications..
The above mentioned problem arises, when i access the DirectoyApp (below)
application.Here i am giving my httpd.conf file:


ServerRoot "/opt/web/apache2"
<IfModule !mpm_netware.c>
PidFile log/httpd_port80.pid
</IfModule>

Timeout 300
KeepAlive Off
#MaxKeepAliveRequests 100
#KeepAliveTimeout 300

Listen 80

LoadModule weblogic_module /opt/web/apache2/modules/mod_wl_20.so
LoadModule  headers_module       /opt/web/apache2/modules/mod_headers.so
LoadModule  deflate_module       /opt/apache2/modules/mod_deflate.so
LoadFile    /usr/lib/libxml2.so
LoadModule  proxy_html_module    /opt/web/apache2/modules/mod_proxy_html.so
LoadModule expires_module /opt/web/apache2/modules/mod_expires.so

ProxyRequests Off

<IfModule !mpm_winnt.c>
<IfModule !mpm_netware.c>
User www
Group www
</IfModule>
</IfModule>

ServerName dev1.sds.com
UseCanonicalName Off
DocumentRoot "/opt/web/apache2/docroot"

<Directory />
    Options FollowSymLinks
    AllowOverride None
</Directory>

<Directory "/opt/web/apache2/docroot">
    Options Indexes FollowSymLinks Includes ExecCGI MultiViews
    AllowOverride All
    Order allow,deny
    Allow from all
</Directory>

<Directory */WEB-INF/*>
    Order Deny,Allow
    Deny from all
</Directory>

<Directory "/opt/web/checkme">
        Options Indexes FollowSymLinks
        AllowOverride All
        Order allow,deny
        Allow from all
</Directory>

<Directory "/opt/www">
        Options Indexes FollowSymLinks Includes ExecCGI
        AllowOverride All
        Order deny,allow
        Allow from all
</Directory>

DirectoryIndex index.html home.html

AccessFileName .htaccess
<FilesMatch "^\.ht">
    Order allow,deny
    Deny from all
</FilesMatch>

TypesConfig /opt/web/apache2/conf/mime.types
DefaultType text/plain

<IfModule mod_mime_magic.c>
    MIMEMagicFile /opt/apache2/conf/magic
</IfModule>

<IfModule mod_expires.c>
       ExpiresActive On
       ExpiresByType image/gif A86400
       ExpiresByType image/png A86400
       ExpiresByType text/html A3600
</IfModule>

IndexOptions FancyIndexing VersionSort

AddType application/x-compress .Z
AddType application/x-gzip .gz .tgz
AddType image/x-icon .ico

AddHandler type-map var

AddOutputFilter INCLUDES .htm
AddType text/css .css

<IfModule mod_ssl.c>
    Include conf/ssl.conf
</IfModule>

#########################################################################
#*** BEGIN Oblix NetPoint WebGate Specific ****

LoadFile "/opt/netpoint/dev/7.0.1/access/oblix/lib/libgcc_s.so.1"
LoadFile "/opt/netpoint/dev/7.0.1/access/oblix/lib/libstdc++.so.5"

<IfModule mod_ssl.c>
        LoadModule obWebgateModule
"/opt/netpoint/dev/7.0.1/access/oblix/apps/webgate/bin/webgatessl.so"
</IfModule>

<IfModule !mod_ssl.c>
        LoadModule obWebgateModule
"/opt/netpoint/dev/7.0.1/access/oblix/apps/webgate/bin/webgate.so"
</IfModule>

WebGateInstalldir "/opt/netpoint/dev/7.0.1/access"

WebGateMode PEER

<Location /access/oblix/apps/webgate/bin/webgate.cgi>
SetHandler obwebgateerr
</Location>

<Location "/oberr.cgi">
SetHandler obwebgateerr
</Location>

<LocationMatch "/*">
AuthType Oblix
require valid-user
</LocationMatch>

#*** END Oblix NetPoint WebGate Specific ****
#########################################################################

Alias /content "/opt/www/content"
Alias /contentApp "/opt/www/contentApp"

<Location ~ "/DirectoryApp">
    SetHandler weblogic-handler
    WebLogicCluster appdev1.sds.com:8330
    ConnectTimeoutSecs 60
</Location>
<Location ~ "/DirectoryListing">
    SetHandler weblogic-handler
    WebLogicCluster appdev1.sds.com:8330
    ConnectTimeoutSecs 60
</Location>

Thanks,
Sharath

Re: [users@httpd] Apache problem with MSIE

Posted by matt farey <ma...@gmail.com>.

prash reddy wrote:
> Hi,
>
> Thanks for responses, sorry to ask the same question again, bcoz i
> could not slove the problem.
> As i found that IE fetching the entire webpage from weblogic server
> intsead of from local cache when i hit the back button.
>
> So, is there any directive or apache setting that might prevent the
> client(browser) to fetch the web page from weblogic server when i hit
> the back button. Instead, it can fetch it from local cache.

Well IE suffers from many caching bugs, but if you say it used work then
try using mod_cache, or just set last modified headers (if you can  - if
the file isnt dynamic) and if the file is dynamic then your application
logic should send the correct headers for the browser functionality it
needs.
For instance using

<IfModule mod_expires.c>
        ExpiresActive On
        ExpiresByType image/gif A86400
        ExpiresByType image/png A86400
        ExpiresByType text/html A3600
#html expires after 1 hour from when accessed
</IfModule>

would instruct Apache to send the headers
Expires: Fri, 16 Mar 2007 23:50:25 GMT
Cache-Control: max-age=3600

which might suffice for you.

MSIE will then need to start sending this typoe of request header:
If-Modified-Since: Sat, 23 Dec 2006 06:55:25 GMT
If-None-Match: "5edc1-5ae-c934e2c"

If MSIE sends this kind of thing you know that it is saying "do you have
a newer version for me" to Apache, if the answer is no then it wont
request the file and will retrieve it from its cache.
>
> Any ideas apprciated.
>
> Thanks..,
> Sharath
>
> On 3/16/07, *matt farey* <matt.farey@gmail.com
> <ma...@gmail.com>> wrote:
>
>
>
>     prash reddy wrote:
>     > Hi All,
>     >
>     > I am working on Apache 2.0.50 on Linux, proxying the requests to
>     > weblogic server by path using the location block.
>     >
>     > Here is the problem: In application,When i simply hit the
>     browser back
>     > button, i can see that all the commentents being lost which were
>     > entered in previuos page.
>     this is just the way the browser handles caching, simple, set up
>     apache
>     to send the same headers that your iPlanet server did, and things
>     will
>     work the same. You must use a proxy to see what headers your old
>     server
>     sent, or review its config, then set up Apache accordingly, it
>     really is
>     this simple.
>     >
>     > Its only happening with MSIE, where as it is working fine with
>     firefox.
>     >
>     > is it a problem with application code or apache webserver settings?
>     >
>     > Thnaks
>     > sharath
>     >
>
>     --
>     Matthew Farey
>
>
>
>     ---------------------------------------------------------------------
>     The official User-To-User support forum of the Apache HTTP Server
>     Project.
>     See <URL:http://httpd.apache.org/userslist.html> for more info.
>     To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>     <ma...@httpd.apache.org>
>        "   from the digest: users-digest-unsubscribe@httpd.apache.org
>     <ma...@httpd.apache.org>
>     For additional commands, e-mail: users-help@httpd.apache.org
>     <ma...@httpd.apache.org>
>
>



---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Re: [users@httpd] Apache problem with MSIE

Posted by prash reddy <re...@gmail.com>.
Hi,

Thanks for responses, sorry to ask the same question again, bcoz i could not
slove the problem.
As i found that IE fetching the entire webpage from weblogic server intsead
of from local cache when i hit the back button.

So, is there any directive or apache setting that might prevent the
client(browser) to fetch the web page from weblogic server when i hit the
back button. Instead, it can fetch it from local cache.

Any ideas apprciated.

Thanks..,
Sharath

On 3/16/07, matt farey <ma...@gmail.com> wrote:
>
>
>
> prash reddy wrote:
> > Hi All,
> >
> > I am working on Apache 2.0.50 on Linux, proxying the requests to
> > weblogic server by path using the location block.
> >
> > Here is the problem: In application,When i simply hit the browser back
> > button, i can see that all the commentents being lost which were
> > entered in previuos page.
> this is just the way the browser handles caching, simple, set up apache
> to send the same headers that your iPlanet server did, and things will
> work the same. You must use a proxy to see what headers your old server
> sent, or review its config, then set up Apache accordingly, it really is
> this simple.
> >
> > Its only happening with MSIE, where as it is working fine with firefox.
> >
> > is it a problem with application code or apache webserver settings?
> >
> > Thnaks
> > sharath
> >
>
> --
> Matthew Farey
>
>
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>    "   from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>
>

Re: [users@httpd] Apache problem with MSIE

Posted by matt farey <ma...@gmail.com>.

prash reddy wrote:
> Hi All,
>
> I am working on Apache 2.0.50 on Linux, proxying the requests to
> weblogic server by path using the location block.
>
> Here is the problem: In application,When i simply hit the browser back
> button, i can see that all the commentents being lost which were
> entered in previuos page.
this is just the way the browser handles caching, simple, set up apache
to send the same headers that your iPlanet server did, and things will
work the same. You must use a proxy to see what headers your old server
sent, or review its config, then set up Apache accordingly, it really is
this simple.
>
> Its only happening with MSIE, where as it is working fine with firefox.
>
> is it a problem with application code or apache webserver settings?
>
> Thnaks
> sharath
>

-- 
Matthew Farey



---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org