Igor - are you ignoring my emails? :)

Server NGINX
1

I keep asking about mixing auth and fastcgi.

I want /admin/ and everything below it protected.

However, if user goes to /admin/foo.php directly, it skips that
location block and matches the fastcgi location block for *.php.

Do you have a recommendation about how to be able to protect an entire
/path/* and also at the same time still process the PHP/etc underneath
it?

I really wanted your opinion on this…

Thank you!

2

On Fri, Jun 13, 2008 at 08:44:41AM -0700, mike wrote:

I keep asking about mixing auth and fastcgi.

I want /admin/ and everything below it protected.

However, if user goes to /admin/foo.php directly, it skips that
location block and matches the fastcgi location block for *.php.

Do you have a recommendation about how to be able to protect an entire
/path/* and also at the same time still process the PHP/etc underneath
it?

With FastCGI you may use nested location:

location /admin/ {
root …
auth …

   location ~ \.php$ {
       fastcgi ...
   }

}

With proxy nested location work only if proxy_pass has no URI part.

I really wanted your opinion on this…

Re: Igor - are you ignoring my emails? :slight_smile:

I have recieved about 600 emails in these 2 weeks vacantion
and reading and understanding (especially in English) every mail takes
about half minute. The answer takes much more.

3

On Fri, 13 Jun 2008 08:44:41 -0700, mike [email protected] wrote:

I really wanted your opinion on this…

he already stated it :-), there is no clean way to do what you ask.

basically, nginx allows you to apply only one location block per
request,
it’s a feature, and igor calls it configuration scalability.

4

On 6/13/08, Igor S. [email protected] wrote:

/path/* and also at the same time still process the PHP/etc underneath
}
about half minute. The answer takes much more.
I understand.I really appreciate it. This has just become a high
priority - I am starting to get nginx adopted at work (Fortune 60
company) and if I can’t provide full realms of password protection
it’s a bit embarrasing. I want to switch from Lighttpd as soon as
possible.

I will try the nested location block for now. I didn’t think that
worked reliably enough yet but perhaps that is a more complex type of
nested location need.

5

Please remember the price you (and your fortune 60 company) paid for
nginx and it’s ongoing support when considering the correct amount of
indignation in your correspondence with this list.

Nobody is forcing you to use nginx.

Dave

6

Hey, I’ve kept this lighthearted. I was just wanting to ask Igor his
opinion on how to do something and now that he’s back I was hoping to
expedite the answer. (It worked like a charm)

Nobody is forcing anyone to do anything here. In fact, I am trying to
push nginx adoption to everything I can - if anything, learning these
little gotchas will help create more support and exposure for nginx.

I’d say if money is an issue, my corporation (and my own business)
might be able to donate/pledge some support if needed to help continue
the development, but I believe that’s being taken care of by Igor’s
company already. However, we might be able to help motivate and
expedite other nginx related efforts if needed.

Igor is typically more responsive and quicker with patches than any
commercial product out there. I was just really needing this answered
before some people started complaining to me when they noticed their
realms were not fully secured :slight_smile:

7

On Sam 14.06.2008 22:46, Floren M. wrote:

Maybe you should also consider donating a substantial amount of money
to Igor, for all his hard work?

When I had a similar urgent issue, I donated to Igor and thanked him
for his help. If this is a priority for you send him some money and he
will be able to reply to you faster than usual.

‘Faster as usual’ means then he will never sleeps :wink:

To be honst the responsetime from Igor is much faster then the most
commercial companies or opensource projects, as long as he have not a
mailbacklog of 600 E-Mails ;-).

To catch some comming answers:

of course there are exceptions

Aleks

8

Hi Mike,

it’s a bit embarrasing. I want to switch from Lighttpd as soon as
possible.

I will try the nested location block for now. I didn’t think that
worked reliably enough yet but perhaps that is a more complex type of
nested location need.

Maybe you should also consider donating a substantial amount of money to
Igor, for all his hard work?
When I had a similar urgent issue, I donated to Igor and thanked him for
his help. If this is a priority for you send him some money and he will
be able to reply to you faster than usual.

9

On Sat, 2008-06-14 at 12:15 +1000, Dave C. wrote:

Please remember the price you (and your fortune 60 company) paid for
nginx and it’s ongoing support when considering the correct amount of
indignation in your correspondence with this list.

I’m pretty sure I see a smiley at the end of the subject line. I
personally didn’t read much indignation into anything.

Still, it’s good to remember that this is a multilingual list and jokes
and sly comments don’t always come across as you intended.

Nobody is forcing you to use nginx.

And nobody forces you to reply if you don’t like the tone of a request.

Regards,
Cliff

10

On 6/14/08, Floren M. [email protected] wrote:

Hi Mike,

Maybe you should also consider donating a substantial amount of money to Igor, for all his hard work?
When I had a similar urgent issue, I donated to Igor and thanked him for his help. If this is a priority for you send him some money and he will be able to reply to you faster than usual.

I have already stated in an email after this original one that I may
be able to pledge some funds. However, I was not aware that nginx
accepted donations really, since it was funded/created by a specific
website. But Igor would be one of the top people I would like to give
support (monetary or otherwise) to.