Apache Week issue 330

                                APACHE WEEK

The essential weekly guide for users of the world's most popular Web server.
                         Issue 330: 20th June 2003

                                 In this issue

     * Under development
     * In the news
     * Featured articles

                               Under development

     A  patch was submitted last week which may be of interest to server
     administrators  looking  to  deploy Digest-based authentication. As
     [1]covered  last  year, there is a bug in the Digest authentication
     code  in  Microsoft Internet Explorer, causing requests which use a
     query  string  to  fail  if  under  Digest protection. Paul Querna,
     developer   of   the   [2]mod_authn_dbi  module,  has  developed  a
     BrowserMatch-based workaround for this issue; relaxing the check to
     allow  MSIE to authenticate correctly without compromising security
     for other browsers.

     Some  patches  have  been  committed  recently to improve mod_dav's
     performance  and memory use when generating PROPFIND responses. The
     code  has  been  changed  to  stream  the responses straight to the
     client rather than batching them up in memory.

     Also  this  week,  [3]Jim  Jagielski  proposed  to begin the 1.3.28
     release  process,  and there was a hint that 2.0.47 might not be so
     far off.

                                  In the news

Annual members meeting

     The  Apache Software Foundation held an annual members meeting this
     week. The meeting was the first to take place virtually, being held
     via IRC, and prompted a healthy turn out with well over half of the
     89 ASF members attending. A secret ballot was held to elect the new
     board  of  directors of the ASF as well as to elect a number of new
     ASF members. There were twelve nominations for directors, with nine
     positions   available,   and  for  the  first  time  the  [4]single
     transferable vote mechanism was used to give a much fairer vote.

     All the previous directors were re-elected apart from Bill Stoddard
     who  was  replaced  by  Mark  Cox. The new board comprises of Brian
     Behlendorf,  Ken  Coar,  Mark Cox, Roy T. Fielding, Dirk-Willem van
     Gulik, Jim Jagielski, Ben Laurie, Sam Ruby, and Greg Stein.

                               Featured articles

     In  this  section we highlight some of the articles on the web that
     are of interest to Apache users.

     Linux vendor Red Hat posted a short article about [5]backporting of
     security  patches.  It  explains  why  vendors don't always upgrade
     their distributions to the latest software releases using Apache as
     an example

     In   this   tutorial   entitled  [6]"Staying  Out  of  Deep  Water:
     Performance  Testing  Using HTTPD-Test's Flood", Martin Brown shows
     us  how  to  install,  configure, and test Flood - a profile-driven
     HTTP  load tester. He provides three sets of different settings for
     Flood  to simulate the effect of requests for news-style, shopping,
     and "Slashdotted" Web sites.

     Two  opposing book reviews on [7]"Web Hacking: Attacks and Defense"
     can  be  found  at  [8]Help  Net  Security  and [9]Linux Gazette. A
     [10]sample  of  chapter  10  is  available  to be downloaded in pdf
     format.   You   may   also  be  interested  to  read  a  review  on
     [11]"Intrusion  Detection with SNORT: Advanced IDS Techniques Using
     SNORT, Apache, MySQL, PHP, and ACID".

     If  you  do  not  know  James, [12]"Working with James, Part 1" and
     [13]"Part  2"  will  get you on intimate terms with the Java Apache
     Mail Enterprise Server in no time at all. The former introduces you
     to  James  while  the  latter  talks  about  building  e-mail based
     applications with matchers and mailets.
       ______________________________________________________________

     This issue brought to you by: Mark J Cox, Joe Orton, Min Min Tsan
     Comments or criticisms? Please email us at
     [14][email protected].

     [15]Apache Week is Copyright 2003 [16]Red Hat, Inc.

References

   1. http://www.apacheweek.com/issues/02-12-20#dev
   2. http://open.cyanworlds.com/mod_authn_dbi/
   3. http://httpd.apache.org/contributors/#jim
   4. http://www.electoral-reform.org.uk/votingsystems/stvi.htm
   5. http://www.redhat.com/advice/speaks_backport.html
   6. http://www.serverwatch.com/tutorials/article.php/10825_2216741_1
   7. http://www.amazon.com/exec/obidos/ASIN/0201761769/apacheweek
   8. http://www.net-security.org/review.php?id=11
   9. http://www.linuxgazette.com/issue91/cole.html
  10. http://www.net-security.org/dl/reviews/McClure10.pdf
  11. http://www.net-security.org/review.php?id=79
  12. http://www-106.ibm.com/developerworks/java/library/j-james1.html
  13. http://www-106.ibm.com/developerworks/java/library/j-james2.html
  14. mailto:[email protected]
  15. http://www.apacheweek.com/
  16. http://www.redhat.com/

----------------------------------------------------------------------
To unsubscribe visit https://www.redhat.com/mailman/listinfo/apacheweek
or send the message   "unsubscribe"  to   [email protected]
----------------------------------------------------------------------