Secure apache with php

2009-07-09 Thread Nicolas Letellier
Hello. I want to secure my Apache/PHP environment without : - safe_mode - suphp / suexec So, I found this : http://mpm-itk.sesse.net/ In this page, we can see that a FreeBSD port exists, but I can't find it. What do you thinh about it? This tool seems to be good. Which Apache version do you

Re: Secure apache with php

2009-07-09 Thread Nicolas Letellier
Le Thu, 9 Jul 2009 13:18:39 +0300, Reko Turja reko.tu...@liukuma.net a écrit : I want to secure my Apache/PHP environment... Full suhosin, both patch and mod for the PHP. IIRC suhosin patch is optional in PHP port and the mod can be installed via ports.

Re: Secure apache with php

2009-07-09 Thread Nicolas Letellier
AddHandler php-fastcgi .php Action php-fastcgi /cgi-bin/scar-php-wrapper.fcgi /Directory = hope it helps, best regards, Julien On Thu, 2009-07-09 at 12:22 +0200, Nicolas Letellier wrote: Le Thu, 9 Jul 2009 13:18:39 +0300, Reko Turja reko.tu

Re: Secure apache with php

2009-07-09 Thread Nicolas Letellier
Le Thu, 09 Jul 2009 14:36:11 +0200, Julien Cigar jci...@ulb.ac.be a écrit : When I tested php in cgi, performances were bad. That's why, php_mod is better (in my case != It's not CGI, it's FastCGI. There is no performance loss if you use an opcode cacher (like x-cache). And is

Problem when uploading files with Apache

2009-02-08 Thread Nicolas Letellier
Hello. I use apache13 with FreeBSD 6.3. I have some websites, in : /var/www/sites/site1 /var/www/sites/site2 I use PHP 5 (compiled in apache module). The rights are: ls -ls /var/www/sites/site1: www:site1 All files are owned by www user. All files are grouped in site{1,2} group. I have a php

Re: Problem when uploading files with Apache

2009-02-08 Thread Nicolas Letellier
On Sun, 8 Feb 2009 07:50:34 -0500 Glen Barber glen.j.bar...@gmail.com wrote: On Sun, Feb 8, 2009 at 7:31 AM, Nicolas Letellier nico...@nicoelro.net wrote: Hello. I use apache13 with FreeBSD 6.3. I have some websites, in : /var/www/sites/site1 /var/www/sites/site2 I use PHP 5

Re: Problem when uploading files with Apache

2009-02-08 Thread Nicolas Letellier
On Sun, 8 Feb 2009 08:01:13 -0500 Glen Barber glen.j.bar...@gmail.com wrote: On Sun, Feb 8, 2009 at 7:56 AM, Nicolas Letellier nico...@nicoelro.net wrote: I have another FreeBSD (7.0) and Apache 1.3, and it works. On this machine (6.3) it does not work. What do you mean it does

Re: Problem when uploading files with Apache

2009-02-08 Thread Nicolas Letellier
On Sun, 08 Feb 2009 08:53:59 -0500 Lowell Gilbert freebsd-questions-lo...@be-well.ilk.org wrote: Nicolas Letellier nico...@nicoelro.net writes: So, anybody could explain me when I upload a file, rights are www:wheel? I'm going to guess that it's just inheriting the group from

Re: Problem when uploading files with Apache

2009-02-08 Thread Nicolas Letellier
On Sun, 8 Feb 2009 06:11:27 -0800 (PST) Gabe n...@att.net wrote: --- On Sun, 2/8/09, Nicolas Letellier nico...@nicoelro.net wrote: From: Nicolas Letellier nico...@nicoelro.net Subject: Re: Problem when uploading files with Apache To: FreeBSD Questions freebsd-questions@freebsd.org Cc

Re: Problem when uploading files with Apache

2009-02-08 Thread Nicolas Letellier
On Sun, 8 Feb 2009 09:09:45 -0500 Glen Barber glen.j.bar...@gmail.com wrote: On Sun, Feb 8, 2009 at 9:02 AM, Nicolas Letellier nico...@nicoelro.net wrote: That's I always learn. But in this case, it's not true. I upload into testdir/ which has www:www rights. And I launch my upload

Re: Problem when uploading files with Apache

2009-02-08 Thread Nicolas Letellier
On Sun, 8 Feb 2009 06:11:27 -0800 (PST) Gabe n...@att.net wrote: --- On Sun, 2/8/09, Nicolas Letellier nico...@nicoelro.net wrote: From: Nicolas Letellier nico...@nicoelro.net Subject: Re: Problem when uploading files with Apache To: FreeBSD Questions freebsd-questions@freebsd.org Cc

edit users quota in a script

2009-02-07 Thread Nicolas Letellier
Hello. I use a script to create automatically my users (with pw, and mkdir, etc...). I use quota, and I have to excute 'edquota -u user', and enter quota informations. So, the process can not be automaticated. And cannot be part of my script. I don't find informations in edquota(8) manpages

Re: differences of disk usage between du and quota binaries

2009-02-07 Thread Nicolas Letellier
On Fri, 6 Feb 2009 20:12:56 + RW rwmailli...@googlemail.com wrote: On Fri, 6 Feb 2009 20:13:17 +0100 Nicolas Letellier nico...@nicoelro.net wrote: Hello. I use FreeBSD 6.3. I set quota to my fs. But, when I print disk usage with du -sh, I have: .. Why this difference

Re: edit users quota in a script

2009-02-07 Thread Nicolas Letellier
On Sat, 07 Feb 2009 14:09:13 +0200 Manolis Kiagias sonic200...@gmail.com wrote: Nicolas Letellier wrote: Hello. I use a script to create automatically my users (with pw, and mkdir, etc...). I use quota, and I have to excute 'edquota -u user', and enter quota informations. So

differences of disk usage between du and quota binaries

2009-02-06 Thread Nicolas Letellier
Hello. I use FreeBSD 6.3. I set quota to my fs. But, when I print disk usage with du -sh, I have: r...@domain sites $ du -sh folder 633Mfolder But, when I print disk usage with quota -u user, I have: isk quotas for user user (uid 2002): Filesystem usage quota limit grace

Re: Cannot build dovecot with bdb support

2009-01-29 Thread Nicolas Letellier
On Wed, 28 Jan 2009 15:19:44 -0900 Mel fbsd.questi...@rachie.is-a-geek.net wrote: On Wednesday 28 January 2009 13:32:59 Nicolas Letellier wrote: On Wed, 28 Jan 2009 09:27:04 -0900 Mel fbsd.questi...@rachie.is-a-geek.net wrote: On Wednesday 28 January 2009 07:47:53 Nicolas Letellier

Cannot build dovecot with bdb support

2009-01-28 Thread Nicolas Letellier
Hello. I use FreeBSD-6.3. I want to install dovecot port with dbd support. However, that's impossible. See my error: hecking for pam/pam_appl.h... no checking for pam_setcred in -lpam... yes checking for auth_userokay... no checking db_env_create in -ldb... no configure: error: Can't build with

Re: Cannot build dovecot with bdb support

2009-01-28 Thread Nicolas Letellier
On Wed, 28 Jan 2009 09:27:04 -0900 Mel fbsd.questi...@rachie.is-a-geek.net wrote: On Wednesday 28 January 2009 07:47:53 Nicolas Letellier wrote: Hello. I use FreeBSD-6.3. I want to install dovecot port with dbd support. However, that's impossible. See my error: hecking for pam

Setting an environment var at boot

2008-09-03 Thread Nicolas Letellier
Hello, I have an env var to set for mysqld (UMASK_DIR). Today, I set it in /usr/local/etc/rc.d/mysql-server, but it's a bad idea. When I want to upgrade my mysql5-server port, the file will be overwritten. I want to set it in a file loaded a machine boot. This var must be exported and

problem with sendmail and su

2008-07-09 Thread Nicolas Letellier
Hello. I use FreeBSD 7 with sendmail. I have a problem for sending email. More precisely, with the sender of the mail. When I'm logged to my machine in root, the mail is sent with [EMAIL PROTECTED] with sender. OK, no problems. When I'm logged to my machine in nicolas, the mail is sent with

mysql log and newsyslog

2008-07-02 Thread Nicolas Letellier
Hello. I have a problem with mysql logs and newsyslog. I archive mysql log with this in my my.cnf: log=/var/log/mysql My log works fine. However, when newsylog archives the log and create a new log file, mysql doesn't log anymore anything. See my newsyslog.conf: /var/log/mysql mysql:wheel 640

problem when building dovecot-sieve with the new dovecot port

2008-06-29 Thread Nicolas Letellier
Hi. I'm upgrading my dovecot from 1.0.14 to 1.1. I pkg_deinstall my dovecot and my dovecot-sieve. dovecot installs correctly. However, dovecot-sieve does not want to be built: cc -DHAVE_CONFIG_H -I. -I. -I../.. -I/usr/ports/mail/dovecot/work/dovecot-1.1.1

Re: restart named in a cron

2008-06-25 Thread Nicolas Letellier
Le Tue, 24 Jun 2008 21:48:42 +0300, Manolis Kiagias [EMAIL PROTECTED] a écrit : Nicolas Letellier wrote: Hi. I want to restart named in a script executed by a cron. My script is: #!/bin/sh # verify named conf and restart it /usr/sbin/named-checkconf if [ ! $? -eq 0

restart named in a cron

2008-06-24 Thread Nicolas Letellier
Hi. I want to restart named in a script executed by a cron. My script is: #!/bin/sh # verify named conf and restart it /usr/sbin/named-checkconf if [ ! $? -eq 0 ]; then echo Errors when verifying named configuration exit 1 else /etc/rc.d/named restart /dev/null fi # Ok,

problem with dovecot and mysql at boot

2008-06-16 Thread Nicolas Letellier
Hello. In my rc.conf, I have: dovecot_enable=YES mysql_enable=YES At boot, I have this error: Jun 16 12:34:16 trinite dovecot: auth-worker(default): mysql: Connect failed to localhost (panel): Can't connect to local MySQL server through socket '/tmp/mysql.sock' (2) - waiting for 1 seconds

Re: problem with dovecot and mysql at boot

2008-06-16 Thread Nicolas Letellier
On Mon, 16 Jun 2008 14:08:40 +0300 Manolis Kiagias [EMAIL PROTECTED] wrote: Nicolas Letellier wrote: Hello. In my rc.conf, I have: dovecot_enable=YES mysql_enable=YES At boot, I have this error: Jun 16 12:34:16 trinite dovecot: auth-worker(default): mysql: Connect failed

Re: problem with dovecot and mysql at boot

2008-06-16 Thread Nicolas Letellier
On Mon, 16 Jun 2008 15:59:21 +0200 Johan Hendriks [EMAIL PROTECTED] wrote: Does you're my.cnf file contains an entry that needs to be resolved by dns and if so can it be resolved! Maybe named is not started before mysql. Try setting that entry in /etc/hosts. No, it does not contains any

use a specific php.ini for php cli

2008-06-04 Thread Nicolas Letellier
Hello. I would like to know if it is possible to have another php.ini for php command line? I have a php.ini with many restrictions (open_basedir, disabled functions, etc...) used by apache (and mod_php). I would like to user another php.ini file for php command line (I don't want to have

Apache and Environment

2008-05-11 Thread Nicolas Letellier
Hello. I use apache13 and php5. When I do a phpinfo(), I can see in Environment sensibles datas when I launch apache in root. I see all my env variables (as MAIL, TERM, USER, PWD, LOGNAME, EDITOR, OSTYPE, LANG, etc, etc...). So, we see informations about user who launched apache. When

problem with RAID Hard (hptrr driver)

2008-03-28 Thread Nicolas Letellier
Hello. I have a machine, with a RAID Controller. In the dmesg, I see: hptrr: HPT RocketRAID controller driver v1.1 (Mar 28 2008 16:05:16) And after, I see: hptrr: no controller detected. Is it normal? Does my RAID 1 work correctly? I read the hptrr manpage, and no informations are given. I

Re: problem with RAID Hard (hptrr driver)

2008-03-28 Thread Nicolas Letellier
Nicolas Letellier a écrit : Hello. I have a machine, with a RAID Controller. In the dmesg, I see: hptrr: HPT RocketRAID controller driver v1.1 (Mar 28 2008 16:05:16) And after, I see: hptrr: no controller detected. Is it normal? Does my RAID 1 work correctly? I read the hptrr manpage

Re: problem with RAID Hard (hptrr driver)

2008-03-28 Thread Nicolas Letellier
Josh Paetzel a écrit : hptrr is the driver for a highpoint rocketraid, your controller is evidentally a 3ware, and is being picked up by twe. You can monitor the array by installing sysutils/3dm from ports. I monitor my array with tw_cli. I have this: /c0 show Unit UnitType Status

Use CGI with suExec without vhost

2008-03-25 Thread Nicolas Letellier
Hello. I use FreeBSD 7 with apache13-modssl. I compiled apache with SuExec support. However, my CGI programs wirtual host are not wrapped by SuExec. I don't want to use a vhost (i have only one application on my apache: Nagios). If I install a CGI program in a vhost with User/Group directive,

Process in lockf with apache/php

2008-03-21 Thread Nicolas Letellier
Hi. I use Apache 1.3 and PHP5 in module. I have a timeout of 30 seconds for my PHP scripts. When a process is out of this timeout, I have this message in my error.log: Maximum execution time of 30 seconds exceeded in /var/www/data/test.php on line 10 Ok, this is normal. In a top, I see the

How use and manage a Berkeley DB 1.85?

2008-03-12 Thread Nicolas Letellier
Hello, I have a db Berkeley DB 1.85. I have softwares which use it. I would like to know how manage it? How show all datas contained? How delete a data? How insert a data? Is there a port to do this? Thanks. - Nicolas. ___

How specify an other mail directory for users?

2008-03-11 Thread Nicolas Letellier
Hello, In my FreeBSD 7.0 (with postfix), when a user receive an email, it is stocked in /var/mail$/USER. How change this? I would like mails be stocked in /var/mail/users/$USER. I don't find a file to change this. Is it a system conf, or a SMTP conf? Thanks. - Nicolas.

Re: How specify an other mail directory for users?

2008-03-11 Thread Nicolas Letellier
Nicolas Letellier a écrit : Hello, In my FreeBSD 7.0 (with postfix), when a user receive an email, it is stocked in /var/mail$/USER. How change this? I would like mails be stocked in /var/mail/users/$USER. I don't find a file to change this. Is it a system conf, or a SMTP conf? Thanks

Import bayes_* for SpamAssassin from Debian to FreeBSD

2008-03-10 Thread Nicolas Letellier
Hello, I must export a SpamAssassin configuration in a GNU/Linux Debian 4.0. See these files: [EMAIL PROTECTED] .spamassassin # file * auto-whitelist: Berkeley DB (Hash, version 7, native byte-order) auto-whitelist.mutex: ASCII text bayes_journal:ASCII text bayes.mutex:

Re: Import bayes_* for SpamAssassin from Debian to FreeBSD

2008-03-10 Thread Nicolas Letellier
Matthew Seaman a écrit : You'll need to install the same version of Berkeley DB on FreeBSD as you were using on Debian -- and you'll have to compile the perl modules SpamAssassin uses for BerkeleyDB access to use that version too. I use the same BerkeleyDB. I use db41 on FreeBSD (and db41*

Re: PHP cli segfaults

2008-03-03 Thread Nicolas Letellier
Drew Sanford a écrit : Peter wrote: Drew Sanford wrote: | Command line programs for php seem to segfault on a 7.0RC1 box (yes, I | know, I should update to RC2) - for example: | | [EMAIL PROTECTED](~/bin)$ php -v | PHP 5.2.5 with Suhosin-Patch 0.9.6.2 (cli) (built: Feb 9 2008 13:03:20) |

problem with linuxthreads when installing mysql5

2008-02-27 Thread Nicolas Letellier
Hello, When I want to install mysql5-server (with portinstall and these options: WITH_CHARSET=latin1 WITH_COLLATION=latin1_swedish_ci WITH_OPENSSL=yes BUILD_OPTIMIZED=yes WITH_LINUXTHREADS=yes), I've got this error: === Installing for linuxthreads-2.2.3_23 === Generating temporary

problem with acpi and freebsd7

2008-02-26 Thread Nicolas Letellier
Hello, I upgraded my system to 7.0-RELEASE, and in the dmesg, I see this message: ioapic0 Version 2.0 irqs 0-23 on motherboard kbd1 at kbdmux0 acpi0: A M I OEMRSDT on motherboard acpi0: [ITHREAD] acpi0: Power Button (fixed) acpi0: reservation of 0, a (3) failed acpi0: reservation of 10,

Conflit with apache13 when I use apache13-modssl

2008-02-25 Thread Nicolas Letellier
Hello, I use apache13-modssl. However, when I want to install a port like php5, I have this error : === Installing for apache-1.3.41 === apache-1.3.41 conflicts with installed package(s): apache+mod_ssl-1.3.41+2.8.31 They install files into the same place. Please remove

Re: Conflit with apache13 when I use apache13-modssl

2008-02-25 Thread Nicolas Letellier
Mel a écrit : On Monday 25 February 2008 11:32:50 Nicolas Letellier wrote: I use apache13-modssl. However, when I want to install a port like php5, I have this error : === Installing for apache-1.3.41 === apache-1.3.41 conflicts with installed package(s): apache+mod_ssl-1.3.41

How use helvetica font?

2008-01-20 Thread Nicolas Letellier
Hello, How use Helvetica font with FreeBSD 6.3-Release ? I follow this page (http://www.freebsd.org/doc/fr_FR.ISO8859-1/books/handbook/x-fonts.html) and installed urwfont but I can't see Helvetica font on OpenOffice or Abiword. see my `pkg_info | grep font` : bdftopcf-1.0.1

Eclipse and FreeBSD7

2008-01-18 Thread Nicolas Letellier
Hello, I have a problem with FreeBSD7 and the last Eclipse. It doesn't work. I have this error when I launch : JVM terminated. Exit code=1 /usr/local/bin/java -Xms40m -Xmx256m -jar /usr/local/eclipse/startup.jar -os freebsd -ws gtk -arch x86 -launcher /usr/local/eclipse/eclipse -name Eclipse

Very bad performances with wpi driver and 7.0-RC1

2008-01-15 Thread Nicolas Letellier
Hello, I use FreeBSD 7.0-RC1 with my laptop (Asustek A6000 Series). Performances with wpi are very very bad: in my LAN, I download a file at 4 k/s. In Internet, I would believe I use a 56 k connection :-) In this laptop, I have a NIC (chipset re), and I don't have any problem with. The

Re: FreeBSD 6.2-release and azalia sound chipset

2007-11-06 Thread Nicolas Letellier
Hello, Two questions : it's a binary module ? I don't find the module for azalia. Where is it ? Thanks Nicolas Oliver Herold a écrit : Hi, http://people.freebsd.org/~ariff/BINARY_MODULES/ just follow the README. Cheers, Oliver On Mon, Nov 05, 2007 at 10:51:37PM +0100, Nicolas Letellier

FreeBSD 6.2-release and azalia sound chipset

2007-11-05 Thread Nicolas Letellier
Hello, I installed 6.2 -release. I have the sound chipset azalia (Intel 82801H HD Audio). However, I don't find a module for this chipset. Where I can found it ? How install it ? Thanks you, Nicolas ___ freebsd-questions@freebsd.org mailing list

Re: sudo doesn't log anything

2007-10-10 Thread Nicolas Letellier
Pieter de Goeje a écrit : Sudo by default logs with facility 'local2' and priority 'notice'. Neither one is specified in your syslog.conf. Yes, it fix my problem ! Thanks very much ! Nicolas -- Nicolas Letellier, administrateur systèmes Site personnel : http://nicoelro.net Curriculum

sudo doesn't log anything

2007-10-09 Thread Nicolas Letellier
-- Nicolas Letellier, administrateur systèmes Site personnel : http://nicoelro.net Curriculum-vitae : http://nletellier.info ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send

Re: sudo doesn't log anything

2007-10-09 Thread Nicolas Letellier
? Thanks ! Nicolas Pieter de Goeje a écrit : On Tuesday 09 October 2007, Nicolas Letellier wrote: Hello, In my FreeBSD 6.2, I use sudo for a user. However, I want know who has used sudo in my machine. But, sudo doesn't log anything. I have nothing about sudo in /var/log... Syslog log auth

Question about syslog.conf

2007-09-14 Thread Nicolas Letellier
! For example, startslip includes ALL (.*.) except !startslip ? I don't think... Because I read that. Could you explain me ? Thanks :-) -- Nicolas Letellier, administrateur systèmes Site personnel : http://nicoelro.net Curriculum-vitae : http://nletellier.info