[STATUS] Sun May 4 21:48:59 PDT 1997

[Dean Gaudet <dg...@arctic.org>]

1.2b11 status as of Sun May  4 21:48:59 PDT 1997

  * Committed since 1.2b10:

    * ErrorDocument CGI responding to error from another CGI fixed
    * PR#512: signal redefinition problem on QNX

Agenda for 1.2b11-dev
====================

Patches available:

  * Petr's [PATCH] mod_dir HTTP_NOT_ACCEPTABLE fixup
    <19...@boco.fee.vutbr.cz>
    Status: Petr +1, Dean +1
    Roy notes that a general solution is required as this one does not
    handle all cases.

  * Roy's [PATCH] CGIWrap Problems
    <97...@paris.ics.uci.edu>
    Status: Roy +1

  * Dean's [PATCH] (post 1.2?) make_html_safe
    (should be PR#501: escape html in server-status)
    <Pi...@twinlark.arctic.org>
    Status: Dean +1

  * Dean's [PATCH] PR#502: timeout problems
    <Pi...@twinlark.arctic.org>
    Status: Dean +1

  * Dean's [PATCH] PR#506: no DefaultType means no Content-Type
    <Pi...@twinlark.arctic.org>
    Status: Dean +1

  * Dean's [PATCH] error responses have wrong headers
    <Pi...@twinlark.arctic.org>
    Status: Dean +1

No patches yet, showstoppers:

  * PR#503: rewrite worked with 1.2b{6,7,8} but fail with 1.2b10
    Note that it's not related to the Configuration.tmpl rearrangement,
    I asked the user to verify that.

  * HP/UX 10 compilation problems ... it's a popular enough platform that
    these should be fixed before release.

Documentation Changes that should make 1.2:

  * some better suexec docs would be really nice, detailing some of the
    security risks and compromises discussed
	Status: I think Randy said something about doing it at one point.
		Randy says he thinks Jason is perhaps doing them.
                [And Roy says: either somebody needs to document how it
                 works (I don't know), or I'll go through and remove the
                 documentation about how "good" it is to use it.]
	New Status: not really worth holding 1.2 on

  * Document problems with mismatch on FD_SETSIZE=1024?

  * Deal with Martin Kraemer's documentation notes:
	<19...@deejai.mch.sni.de>
	<19...@deejai.mch.sni.de>

Post 1.2:

  * Various minor tweaks to port to different platforms:
    PR#383, PR#388, PR#399, PR#333, PR#327, PR#445, PR#511

  * Fix mod_negotiation to follow latest TCN draft
    Petr Lampa wants to work on this.

  * Doug MacEachern's [PATCH] merge dbm auth configs
        Status: The question is, should we be merging auth configs?
                Ken says not by default and not unless it's configurable.

  * redo lingering_close to check for old sockets to close out before
    accept() in child.
	Status: doesn't look to be overly clean to do in the current
	framework.  Will not have time to do implementation for this
	beta in any case.  If it turns out to be a big issue,
	could go in later.  (1.2.1?)

  * Marc wants to have a check to be sure
    log directory(ies) isn't writable by anyone except the user starting
    the server.  The posting in bugtraq only highlites the problem.
    Needs override.  See NCSA code for sample implem.
	Status: Marc busy writing

  * error compiling on NeXT:
	In file included from http_main.c:108:
	/NextDeveloper/Headers/bsd/netinet/tcp.h:57: duplicate member `th_off'
	/NextDeveloper/Headers/bsd/netinet/tcp.h:58: duplicate member `th_x2'

	Status: got a login in a NeXT OpenStep 4.x machine to test,
	looks like an interaction between gcc and the header
	files.  It is trying to include definitions for both big and
	little endian platforms, and that no work.

  * Type map can't find appropriate document for language on Solaris
    2.x.  (I can't gistify this one; full details in message ID
    <Pi...@localhost.imdb.com>.)
    Reporter has provided tar.gz file of config info.
    (no PR#, 1.2b7, 24/2/1997, <ej...@cise.ufl.edu>)
        Status: Dean might have fixed this one (the table overlay bug)
	[Dean has mailed the submitter to ask them to test 1.2b8 or b9]

  * SONY NEWS port.  See both:
    <Pi...@taz.hyperreal.com>
    <Pi...@taz.hyperreal.com>
    Jim working on a patch, but not until after 1.2b8

Should be added to the bugdb:

  * "Large groups cause authentication errors" on FreeBSD
      [salari@cs.ubc.ca]; problem looks to be MAX_STRING_LEN buffer
      in groups_for_user.

Contrib stuff / future:
  
  * Start digital signing the distributions.

  * Chris Adams <ca...@ro.com> patch to mod_log_config to add %m and %c.

  * mod_log_config patch for conditional logging
	Status: contrib, not in server

  * Jim has patch for time taken to handle a request in status module

  * Ed has an updated patch for limiting connections per IP

  * mod_include could use boyer-moore searching for <!--# and/or it could
    mmap the file.

  * add some setlocale stuff?

  * status module available from .htaccess files; Ken posted patch

  * status report shows PIDs in empty slots, user supplied some sort
     of patch; behavior now is correct, but perhaps some cleanup of
     how the results are displayed could be done after 1.2...
     <Pi...@localhost.imdb.com>

  * Rob's "DONE" status response check for die()
	<Pi...@localhost.imdb.com>
	Roy says it's a feature... Dean agrees, thinks we should slate
	something for 2.0 that can handle this cleanly.

  * tem@global2000.net provided a patch for mod_imap to make it more
    friendly with MS FrontPage map files.  Available in
    <Pi...@twinlark.arctic.org>

  * Dean's gif89 and expires hack
    <Pi...@twinlark.arctic.org>

  * mod_userdir needs a DisallowUserDir directive, a la ftp.deny, to
    restrict user names that can be accessed.  Ken says maybe
    "UserDir disabled [user [...]]".

  * get_local_host and NIS patch fo SunOS 4
    <Pi...@localhost>

  * internationalized documentation

  * pagecounter extension to mod_include
    <Pi...@taz.hyperreal.com>

  * mod_expires improvements from "Miguel A.L. Paraz" <ma...@iphil.net>
    at <http://www.iphil.net/~map/apache/>

  * add is_initial_req() function

  * mod_dir: send HEIGHT/WIDTH tags to improve performance for user see
    PR#393 for a patch that provides this

  * A CIDRized access list patch such as the one supplied in
    <Pi...@taz.hyperreal.com>

  * PR#344: 64-bit cleanups

Re: [STATUS] Sun May 4 21:48:59 PDT 1997

[Dean Gaudet <dg...@arctic.org>]

Note that I would not be adverse to fixing only PR#502, PR#503, and the
HPUX compilation troubles and calling it 1.2.  But we should wait another
week.  I bet Roy wants the CGIWrap thing dealt with... I haven't had a
chance to look at his or Alexei's arguments though. 

Oh shoot there's also PR#522 which the user is not using IdentityCheck
so it's not related to PR#502.

Dean