Re: [users@httpd] Fwd: Patches for CVE-2016-8743 (apache 2.4.18)

[Rashmi Srinivasan]

Hi Yann,
   Any update on this will be very helpful.

regards,
Rashmi


On Thu, Jun 1, 2017 at 2:49 PM, Rashmi Srinivasan <
rashmisrinivasan2...@gmail.com> wrote:

> Hi Yann,
>  To port the fix for CVE-2016-8743 to 2.2.29, is it ok to port
> the changes from http://svn.apache.org/viewvc?view=revision=
> 1777405
>  Would that suffice?
>   Please advise.
>
> regards,
> Rashmi
>
>
> On Fri, Feb 10, 2017 at 1:30 PM, Rashmi Srinivasan <
> rashmisrinivasan2...@gmail.com> wrote:
>
>> Thank a lot for the patch Yann,
>> I will check if this fits in.
>>
>> regards,
>> Rashmi
>>
>> On Wed, Jan 25, 2017 at 6:04 PM, Yann Ylavic 
>> wrote:
>>
>>> Hi,
>>>
>>> On Wed, Jan 25, 2017 at 9:17 AM, Rashmi Srinivasan
>>>  wrote:
>>>
>>> >   We are trying to port the fix for CVE (CVE-2016-8743) to 2.4.18.
>>> Tried
>>> > checking the revision on git for the list of files fixed for this CVE.
>>> > There are lots of changes related to RFC7320 and was difficult to
>>> figure out
>>> > the files changed for this CVE as We couldnt find the CVE-2016-8743 in
>>> the
>>> > log either.
>>>
>>> The branch [1] collects all the related changes between versions
>>> 2.4.25 (latest) and 2.4.23 (previous).
>>>
>>> Attached is the output of:
>>> $ svn diff -x-p
>>> https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@r1767912
>>> https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x-
>>> merge-http-strict
>>> >httpd-2.4.23-CVE-2016-8743.patch
>>>
>>> It should apply cleanly to 2.4.23, though it may not to 2.4.18
>>> (possibly more work needed...).
>>>
>>> Hope this helps.
>>>
>>> Regards,
>>> Yann.
>>>
>>> [1] https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x-
>>> merge-http-strict
>>>
>>>
>>> -
>>> To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
>>> For additional commands, e-mail: users-h...@httpd.apache.org
>>>
>>
>>
>

Re: [users@httpd] What is configuration

[Luiz Guilherme Nunes Fernandes]

I make another tests, but my solution, i change port:



DocumentRoot "/var/www/html/jasmine/"
ServerName jasmine






ServerName cups
ProxyPreserveHost Off
ProxyPass / http://localhost:631/
ProxyPassReverse / http://localhost:631/




2017-06-01 15:41 GMT-03:00 Daniel :

> there is no problem if they have the same ip in common.
>
> This procedure is called Named Virtual Hosts. That is, Apache httpd
> looks at the hostname in the request to know where to deliver the
> requests, if no match is found it chooses the first virtualhost, hence
> the importance of defining servername correctly and make sure clients
> can resolve and use those names.
>
> You can also define ServerName 10.1.1.76 for one virtualhost and
> ServerName jasmine in the other. Note what you type in the url address
> bar goes in "Host" header and that's what apache checks when requests
> come in.
>
> 2017-06-01 20:33 GMT+02:00 Luiz Guilherme Nunes Fernandes
> :
> > Ok tnx my last doubt, if i add this names in dns, cups and jasmine have
> the
> > same IPadrress.
> >
> > For example
> >
> > cups.mydomain 10.1.1.76
> > jasmine.mydomain 10.1.1.76
> >
> > 2017-06-01 15:20 GMT-03:00 Daniel :
> >>
> >> Servername is to specify the host header, defining different names but
> >> calling http://10.1.1.76 won't help apache determine to which
> >> virtualhost the request has to go, following the names you used, you
> >> need to request http://cups/ or http://jasmine/ to make Apache httpd
> >> recognize where requests will go, otherwise all requests will land in
> >> the first virtualhost.
> >>
> >> 2017-06-01 20:14 GMT+02:00 Luiz Guilherme Nunes Fernandes
> >> :
> >> > Well, i chek in log.
> >> >
> >> > When I try to access the first virtualhost it works normally.
> >> >
> >> > 10.251.14.140 - - [01/Jun/2017:15:01:35 -0300] "GET / HTTP/1.1" 304 -
> >> > "http://10.1.1.76/admin; "Mozilla/5.0 (X11; Linux x86_64; rv:45.0)
> >> > Gecko/20100101 Firefox/45.0"
> >> > 10.251.14.140 - - [01/Jun/2017:15:01:35 -0300] "GET /cups.css
> HTTP/1.1"
> >> > 304
> >> > - "http://10.1.1.76/; "Mozilla/5.0 (X11; Linux x86_64; rv:45.0)
> >> > Gecko/20100101 Firefox/45.0"
> >> >
> >> > Second virtualhost:
> >> >
> >> > 10.251.14.140 - - [01/Jun/2017:15:01:58 -0300] "GET /jasmine/
> HTTP/1.1"
> >> > 404
> >> > 342 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101
> >> > Firefox/45.0"
> >> > 10.251.14.140 - - [01/Jun/2017:15:01:58 -0300] "GET /cups.css
> HTTP/1.1"
> >> > 304
> >> > - "http://10.1.1.76/jasmine/; "Mozilla/5.0 (X11; Linux x86_64;
> rv:45.0)
> >> > Gecko/20100101 Firefox/45.0"
> >> >
> >> > My new configuration:
> >> >
> >> > 
> >> >
> >> > ServerName cups
> >> > ProxyRequests off
> >> > ProxyPreserveHost Off
> >> > ProxyPass / http://localhost:631/
> >> > ProxyPassReverse / http://localhost:631/
> >> > 
> >> >
> >> > 
> >> >
> >> > ServerName jasmine
> >> > DocumentRoot /var/www/html/jasmine
> >> > 
> >> > Require all granted
> >> > 
> >> >
> >> > 
> >> >
> >> > Sorry, but I'm still confused, with 2 virtual hosts without reverse
> >> > proxy
> >> > work, but I need one with reverse proxy and another with documentroot
> >> > source
> >> > of apache. Why when I try to access jasmine, does it access my cups
> >> > virtualhost?
> >> >
> >> > # I use with parameter and without.
> >> > Log details:
> >> > AH00548: NameVirtualHost has no effect and will be removed in the next
> >> > release /etc/httpd/conf.d/teste.conf:1
> >> >
> >> >
> >> >
> >> > 2017-06-01 13:38 GMT-03:00 Daniel :
> >> >>
> >> >> Hello, if you define more than one virtualhost you need to
> distinguish
> >> >> them somehow, so Apache knows where requests will "land".
> >> >>
> >> >> This "somehow" you must use is called ServerName, each virtualhost
> >> >> must have a unique severname.
> >> >>
> >> >> Also if this is Apache httpd 2.2 you will need a directive called
> >> >> "NamedVirtualhost *:80" defined once in server/global config.
> >> >>
> >> >> 2017-06-01 18:31 GMT+02:00 Luiz Guilherme Nunes Fernandes
> >> >> :
> >> >> > Dears,
> >> >> >  i need redirect my apache for use cups and i need use
> >> >> > Directory
> >> >> > /var/www/html/jasmine with another application. What is a
> >> >> > configuration
> >> >> > correct? in apache show "Not Found" for directory of Jasmine, if i
> >> >> > remove
> >> >> > proxy pass directory jasmine work.
> >> >> >
> >> >> > 
> >> >> >
> >> >> > ProxyPreserveHost Off
> >> >> > ProxyPass / http://localhost:631/
> >> >> > ProxyPassReverse / http://localhost:631/
> >> >> >
> >> >> > 
> >> >> >
> >> >> > 
> >> >> >
> >> >> > 
> >> >> > Require all granted
> >> >> > 
> >> >> >
> >> >> > 
> >> >> >
> >> >> >
> >> >> > --
> >> >> >
> >> >> >
> >> >> > <<<-
> -->>>
> >> >> >
> >> >> > < Disse-lhe Jesus: 

Re: [users@httpd] Trouble updating PHP version on MAMP on Mac

[Dr James Smith]

Looks like you are using php5_module with a PHP7 so file - you should be 
using:


LoadModule php7_module /libphp7.0.so


On 01/06/2017 20:26, Roparzh Hemon wrote:

I am not on Apple here, and you don't say whether you are using php-fpm or
not, but assuming that you are, check the start up (sysctl or init.d) file
and be sure that the correct version of PHP is being started.

Thank you for your feedback.
I have no idea what php-fpm is, and my guess is that I'm not using it.
The way I see it, the php I'm using should be the php module inside
Apache, which I specified with the following line in httpd.conf :

LoadModule php5_module /usr/local/php5-7.1.4-20170506-100436/libphp7.so

Roparzh

On Thu, Jun 1, 2017 at 3:58 PM, John Iliffe  wrote:

I am not on Apple here, and you don't say whether you are using php-fpm or
not, but assuming that you are, check the start up (sysctl or init.d) file
and be sure that the correct version of PHP is being started.

John
=
On Wednesday 31 May 2017 03:56:45 Roparzh Hemon wrote:

I'm trying to update the PHP version used in the built-in MAMP on my
Mac, as indicated at
http://aerendir.me/2015/08/01/how-to-upgrade-php-built-in-your-mac-osx/.

After obediently completing all the steps, the "CLI" version is
updated allright :
the output of php- v in my terminal is

PHP 7.1.4 (cli) (built: May  6 2017 10:02:00) ( NTS )
Copyright (c) 1997-2017 The PHP Group
Zend Engine v3.1.0, Copyright (c) 1998-2017 Zend Technologies
 with Zend OPcache v7.1.4, Copyright (c) 1999-2017, by Zend
Technologies with Xdebug v2.5.3, Copyright (c) 2002-2017, by Derick
Rethans

But I look at the phpInfo in my built-in MAMP, I still get the old PHP
version, with the old PHP location.
I tried restarting both Firefox and MAMP.

I'm using Apache2 and Firefox 53.0.2 on Mac OS 10.11.3.

-
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org

-
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org


-
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org





--
The Wellcome Trust Sanger Institute is operated by Genome Research 
Limited, a charity registered in England with number 1021457 and a 
company registered in England with number 2742969, whose registered 
office is 215 Euston Road, London, NW1 2BE. 


-
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org

Re: [users@httpd] Trouble updating PHP version on MAMP on Mac

[Roparzh Hemon]

>I am not on Apple here, and you don't say whether you are using php-fpm or
>not, but assuming that you are, check the start up (sysctl or init.d) file
>and be sure that the correct version of PHP is being started.

Thank you for your feedback.
I have no idea what php-fpm is, and my guess is that I'm not using it.
The way I see it, the php I'm using should be the php module inside
Apache, which I specified with the following line in httpd.conf :

LoadModule php5_module /usr/local/php5-7.1.4-20170506-100436/libphp7.so

Roparzh

On Thu, Jun 1, 2017 at 3:58 PM, John Iliffe  wrote:
> I am not on Apple here, and you don't say whether you are using php-fpm or
> not, but assuming that you are, check the start up (sysctl or init.d) file
> and be sure that the correct version of PHP is being started.
>
> John
> =
> On Wednesday 31 May 2017 03:56:45 Roparzh Hemon wrote:
>> I'm trying to update the PHP version used in the built-in MAMP on my
>> Mac, as indicated at
>> http://aerendir.me/2015/08/01/how-to-upgrade-php-built-in-your-mac-osx/.
>>
>> After obediently completing all the steps, the "CLI" version is
>> updated allright :
>> the output of php- v in my terminal is
>>
>> PHP 7.1.4 (cli) (built: May  6 2017 10:02:00) ( NTS )
>> Copyright (c) 1997-2017 The PHP Group
>> Zend Engine v3.1.0, Copyright (c) 1998-2017 Zend Technologies
>> with Zend OPcache v7.1.4, Copyright (c) 1999-2017, by Zend
>> Technologies with Xdebug v2.5.3, Copyright (c) 2002-2017, by Derick
>> Rethans
>>
>> But I look at the phpInfo in my built-in MAMP, I still get the old PHP
>> version, with the old PHP location.
>> I tried restarting both Firefox and MAMP.
>>
>> I'm using Apache2 and Firefox 53.0.2 on Mac OS 10.11.3.
>>
>> -
>> To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
>> For additional commands, e-mail: users-h...@httpd.apache.org
>
> -
> To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
> For additional commands, e-mail: users-h...@httpd.apache.org
>

-
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org

RE: [users@httpd] Building httpd2.4.25 on powerpc-ibm-aix7.1.0.0

[Joseph, Anselm]

Thanks for the reply.
I decided to run configure with the built APRs as follows:
  $ CC='gcc' CPP='gcc -E' ./configure --enable-so –enable-dav 
--prefix=/opt/eai/ci/httpd-2.4.25/apache 
--with-iconv=/opt/eai/ci/libiconv-1.15/libiconv/lib --with-included-apr 
--with-included-apr-util 
--with-pcre=/opt/eai/ci/httpd-2.4.25/srclib/pcre/pcre-config
Configure is successful
Make is successful
For make install, I get the following error:
Making install in worker
Target "local-install" is up to date.
Target "install" is up to date.
Target "local-install" is up to date.
Target "install" is up to date.
Target "local-install" is up to date.
Target "install" is up to date.
Making install in modules
Making install in aaa
rm -f /opt/eai/ci/httpd-2.4.25/apache/modules/mod_authn_file.so
/opt/eai/ci/httpd-2.4.25/srclib/apr/libtool --silent --mode=install install 
mod_authn_file.la /opt/eai/ci/httpd-2.4.25/apache/modules/
find: bad status-- /opt/eai/ci/httpd-2.4.25/apache/modules/mod_authn_file.so
find: cannot chdir to  : Permission denied
find: cannot chdir to  : Permission denied
find: cannot open < /etc/corrals >
find: cannot chdir to  : Permission denied
find: cannot chdir to  : Permission denied
find: cannot chdir to  : Permission denied
find: cannot chdir to  : Permission denied
find: cannot chdir to  : Permission denied
find: cannot open < /etc/tivoli >
find: cannot chdir to  : Permission denied
find: cannot chdir to  : Permission denied
find: cannot open < /usr/lib/corrals >
find: cannot chdir to  : Permission denied
find: cannot open < /usr/lib/methods/wio >
find: cannot chdir to  : Permission denied
find: cannot chdir to  : Permission denied
install: File mod_authn_file.so was not found.
make: 1254-004 The error code from the last command is 2.


Stop.
make: 1254-004 The error code from the last command is 1.
I noted in the config.log that mod_authn_file is shared
configure:7781: result: no
configure:8909: checking whether to enable mod_authn_file
configure:8970: result: shared
Any guidance?
From: William A Rowe Jr [mailto:wr...@rowe-clan.net]
Sent: Wednesday, May 31, 2017 3:35 PM
To: users@httpd.apache.org
Subject: RE: [users@httpd] Building httpd2.4.25 on powerpc-ibm-aix7.1.0.0

You'll need to provision libuuid and rebuild apr[-util] - a required 
prerequisite for httpd.

On May 31, 2017 2:25 PM, "Joseph, Anselm" 
> wrote:

Thank you all for your replies.

So I got back on the horse and installed latest APRs and PCRE, then ran 
configure again as follows:

CC='gcc' CPP='gcc -E' ./configure --enable-so --enable-dav 
--prefix=/opt/eai/ci/httpd-2.4.25/apache 
--with-iconv=/opt/eai/ci/libiconv-1.15/libiconv/lib --with

-apr=/opt/eai/ci/httpd-2.4.25/srclib/apr 
--with-apr-util=/opt/eai/ci/httpd-2.4.25/srclib/apr-util 
--with-pcre=/opt/eai/ci/httpd-2.4.25/srclib/pcre/pcre-config



Config was clean, with a warning about OpenSSL being too old

configure:37818: summary of build options:



Server Version: 2.4.25

Install prefix: /opt/eai/ci/httpd-2.4.25/apache

C compiler: gcc -std=gnu99

CFLAGS:   -O2 -pg -pthread

LDFLAGS: -Wl,-brtl

LIBS:

CPPFLAGS:-U__STR__ -D_THREAD_SAFE -D_LARGEFILE64_SOURCE

C preprocessor: gcc -E



I tried 'make' and got the following Undefined symbol: apr_os_uuid_get Error:

Target "local-all" is up to date.

Target "all" is up to date.

/opt/eai/ci/httpd-2.4.25/srclib/apr/build-1/libtool --silent 
--mode=compile gcc -std=gnu99  -O2 -pg -pthread  -U__STR__ -D_THREAD_SAFE 
-D_LARGEFILE64_SOURCE -I. -I/opt/eai/ci/httpd-2.4.25/os/unix 
-I/opt/eai/ci/httpd-2.4.25/include 
-I/opt/eai/ci/httpd-2.4.25/srclib/apr/include/apr-1 
-I/opt/eai/ci/httpd-2.4.25/srclib/apr-util/include/apr-1 
-I/opt/eai/ci/httpd-2.4.25/srclib/pcre/include 
-I/opt/eai/ci/httpd-2.4.25/modules/aaa -I/opt/eai/ci/httpd-2.4.25/modules/cache 
-I/opt/eai/ci/httpd-2.4.25/modules/core 
-I/opt/eai/ci/httpd-2.4.25/modules/database 
-I/opt/eai/ci/httpd-2.4.25/modules/filters 
-I/opt/eai/ci/httpd-2.4.25/modules/ldap 
-I/opt/eai/ci/httpd-2.4.25/modules/loggers 
-I/opt/eai/ci/httpd-2.4.25/modules/lua -I/opt/eai/ci/httpd-2.4.25/modules/proxy 
-I/opt/eai/ci/httpd-2.4.25/modules/session 
-I/opt/eai/ci/httpd-2.4.25/modules/ssl -I/opt/eai/ci/httpd-2.4.25/modules/test 
-I/opt/eai/ci/httpd-2.4.25/server -I/opt/eai/ci/httpd-2.4.25/modules/arch/unix 
-I/opt/eai/ci/httpd-2.4.25/modules/dav/main 
-I/opt/eai/ci/httpd-2.4.25/modules/generators 
-I/opt/eai/ci/httpd-2.4.25/modules/mappers  -prefer-non-pic -static -c 
modules.c && touch modules.lo

gcc -std=gnu99  -O2 -pg -pthread  -U__STR__ -D_THREAD_SAFE 
-D_LARGEFILE64_SOURCE -I. -I/opt/eai/ci/httpd-2.4.25/os/unix 
-I/opt/eai/ci/httpd-2.4.25/include 
-I/opt/eai/ci/httpd-2.4.25/srclib/apr/include/apr-1 
-I/opt/eai/ci/httpd-2.4.25/srclib/apr-util/include/apr-1 
-I/opt/eai/ci/httpd-2.4.25/srclib/pcre/include 
-I/opt/eai/ci/httpd-2.4.25/modules/aaa 

Re: [users@httpd] What is configuration

[Daniel]

there is no problem if they have the same ip in common.

This procedure is called Named Virtual Hosts. That is, Apache httpd
looks at the hostname in the request to know where to deliver the
requests, if no match is found it chooses the first virtualhost, hence
the importance of defining servername correctly and make sure clients
can resolve and use those names.

You can also define ServerName 10.1.1.76 for one virtualhost and
ServerName jasmine in the other. Note what you type in the url address
bar goes in "Host" header and that's what apache checks when requests
come in.

2017-06-01 20:33 GMT+02:00 Luiz Guilherme Nunes Fernandes
:
> Ok tnx my last doubt, if i add this names in dns, cups and jasmine have the
> same IPadrress.
>
> For example
>
> cups.mydomain 10.1.1.76
> jasmine.mydomain 10.1.1.76
>
> 2017-06-01 15:20 GMT-03:00 Daniel :
>>
>> Servername is to specify the host header, defining different names but
>> calling http://10.1.1.76 won't help apache determine to which
>> virtualhost the request has to go, following the names you used, you
>> need to request http://cups/ or http://jasmine/ to make Apache httpd
>> recognize where requests will go, otherwise all requests will land in
>> the first virtualhost.
>>
>> 2017-06-01 20:14 GMT+02:00 Luiz Guilherme Nunes Fernandes
>> :
>> > Well, i chek in log.
>> >
>> > When I try to access the first virtualhost it works normally.
>> >
>> > 10.251.14.140 - - [01/Jun/2017:15:01:35 -0300] "GET / HTTP/1.1" 304 -
>> > "http://10.1.1.76/admin; "Mozilla/5.0 (X11; Linux x86_64; rv:45.0)
>> > Gecko/20100101 Firefox/45.0"
>> > 10.251.14.140 - - [01/Jun/2017:15:01:35 -0300] "GET /cups.css HTTP/1.1"
>> > 304
>> > - "http://10.1.1.76/; "Mozilla/5.0 (X11; Linux x86_64; rv:45.0)
>> > Gecko/20100101 Firefox/45.0"
>> >
>> > Second virtualhost:
>> >
>> > 10.251.14.140 - - [01/Jun/2017:15:01:58 -0300] "GET /jasmine/ HTTP/1.1"
>> > 404
>> > 342 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101
>> > Firefox/45.0"
>> > 10.251.14.140 - - [01/Jun/2017:15:01:58 -0300] "GET /cups.css HTTP/1.1"
>> > 304
>> > - "http://10.1.1.76/jasmine/; "Mozilla/5.0 (X11; Linux x86_64; rv:45.0)
>> > Gecko/20100101 Firefox/45.0"
>> >
>> > My new configuration:
>> >
>> > 
>> >
>> > ServerName cups
>> > ProxyRequests off
>> > ProxyPreserveHost Off
>> > ProxyPass / http://localhost:631/
>> > ProxyPassReverse / http://localhost:631/
>> > 
>> >
>> > 
>> >
>> > ServerName jasmine
>> > DocumentRoot /var/www/html/jasmine
>> > 
>> > Require all granted
>> > 
>> >
>> > 
>> >
>> > Sorry, but I'm still confused, with 2 virtual hosts without reverse
>> > proxy
>> > work, but I need one with reverse proxy and another with documentroot
>> > source
>> > of apache. Why when I try to access jasmine, does it access my cups
>> > virtualhost?
>> >
>> > # I use with parameter and without.
>> > Log details:
>> > AH00548: NameVirtualHost has no effect and will be removed in the next
>> > release /etc/httpd/conf.d/teste.conf:1
>> >
>> >
>> >
>> > 2017-06-01 13:38 GMT-03:00 Daniel :
>> >>
>> >> Hello, if you define more than one virtualhost you need to distinguish
>> >> them somehow, so Apache knows where requests will "land".
>> >>
>> >> This "somehow" you must use is called ServerName, each virtualhost
>> >> must have a unique severname.
>> >>
>> >> Also if this is Apache httpd 2.2 you will need a directive called
>> >> "NamedVirtualhost *:80" defined once in server/global config.
>> >>
>> >> 2017-06-01 18:31 GMT+02:00 Luiz Guilherme Nunes Fernandes
>> >> :
>> >> > Dears,
>> >> >  i need redirect my apache for use cups and i need use
>> >> > Directory
>> >> > /var/www/html/jasmine with another application. What is a
>> >> > configuration
>> >> > correct? in apache show "Not Found" for directory of Jasmine, if i
>> >> > remove
>> >> > proxy pass directory jasmine work.
>> >> >
>> >> > 
>> >> >
>> >> > ProxyPreserveHost Off
>> >> > ProxyPass / http://localhost:631/
>> >> > ProxyPassReverse / http://localhost:631/
>> >> >
>> >> > 
>> >> >
>> >> > 
>> >> >
>> >> > 
>> >> > Require all granted
>> >> > 
>> >> >
>> >> > 
>> >> >
>> >> >
>> >> > --
>> >> >
>> >> >
>> >> > <<<--->>>
>> >> >
>> >> > < Disse-lhe Jesus: Eu sou o caminho, e a verdade e a vida; ninguém
>> >> > vem
>> >> > ao
>> >> > Pai, senão por mim >
>> >> >  (João
>> >> > 14:6)
>> >> >
>> >> >
>> >> > Att.
>> >> > ♪ ♫  Luiz Guilherme Nunes
>> >> > Fernandes
>> >> > ♫ ♪
>> >> >
>> >> >
>> >> >
>> >> > <<<--->>>
>> >>
>> >>
>> >>
>> >> --
>> >> Daniel Ferradal
>> >> IT Specialist
>> >>
>> >> email dferradal at gmail.com
>> 

Re: [users@httpd] What is configuration

[Luiz Guilherme Nunes Fernandes]

Ok tnx my last doubt, if i add this names in dns, cups and jasmine have the
same IPadrress.

For example

cups.mydomain 10.1.1.76
jasmine.mydomain 10.1.1.76

2017-06-01 15:20 GMT-03:00 Daniel :

> Servername is to specify the host header, defining different names but
> calling http://10.1.1.76 won't help apache determine to which
> virtualhost the request has to go, following the names you used, you
> need to request http://cups/ or http://jasmine/ to make Apache httpd
> recognize where requests will go, otherwise all requests will land in
> the first virtualhost.
>
> 2017-06-01 20:14 GMT+02:00 Luiz Guilherme Nunes Fernandes
> :
> > Well, i chek in log.
> >
> > When I try to access the first virtualhost it works normally.
> >
> > 10.251.14.140 - - [01/Jun/2017:15:01:35 -0300] "GET / HTTP/1.1" 304 -
> > "http://10.1.1.76/admin; "Mozilla/5.0 (X11; Linux x86_64; rv:45.0)
> > Gecko/20100101 Firefox/45.0"
> > 10.251.14.140 - - [01/Jun/2017:15:01:35 -0300] "GET /cups.css HTTP/1.1"
> 304
> > - "http://10.1.1.76/; "Mozilla/5.0 (X11; Linux x86_64; rv:45.0)
> > Gecko/20100101 Firefox/45.0"
> >
> > Second virtualhost:
> >
> > 10.251.14.140 - - [01/Jun/2017:15:01:58 -0300] "GET /jasmine/ HTTP/1.1"
> 404
> > 342 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101
> > Firefox/45.0"
> > 10.251.14.140 - - [01/Jun/2017:15:01:58 -0300] "GET /cups.css HTTP/1.1"
> 304
> > - "http://10.1.1.76/jasmine/; "Mozilla/5.0 (X11; Linux x86_64; rv:45.0)
> > Gecko/20100101 Firefox/45.0"
> >
> > My new configuration:
> >
> > 
> >
> > ServerName cups
> > ProxyRequests off
> > ProxyPreserveHost Off
> > ProxyPass / http://localhost:631/
> > ProxyPassReverse / http://localhost:631/
> > 
> >
> > 
> >
> > ServerName jasmine
> > DocumentRoot /var/www/html/jasmine
> > 
> > Require all granted
> > 
> >
> > 
> >
> > Sorry, but I'm still confused, with 2 virtual hosts without reverse proxy
> > work, but I need one with reverse proxy and another with documentroot
> source
> > of apache. Why when I try to access jasmine, does it access my cups
> > virtualhost?
> >
> > # I use with parameter and without.
> > Log details:
> > AH00548: NameVirtualHost has no effect and will be removed in the next
> > release /etc/httpd/conf.d/teste.conf:1
> >
> >
> >
> > 2017-06-01 13:38 GMT-03:00 Daniel :
> >>
> >> Hello, if you define more than one virtualhost you need to distinguish
> >> them somehow, so Apache knows where requests will "land".
> >>
> >> This "somehow" you must use is called ServerName, each virtualhost
> >> must have a unique severname.
> >>
> >> Also if this is Apache httpd 2.2 you will need a directive called
> >> "NamedVirtualhost *:80" defined once in server/global config.
> >>
> >> 2017-06-01 18:31 GMT+02:00 Luiz Guilherme Nunes Fernandes
> >> :
> >> > Dears,
> >> >  i need redirect my apache for use cups and i need use
> Directory
> >> > /var/www/html/jasmine with another application. What is a
> configuration
> >> > correct? in apache show "Not Found" for directory of Jasmine, if i
> >> > remove
> >> > proxy pass directory jasmine work.
> >> >
> >> > 
> >> >
> >> > ProxyPreserveHost Off
> >> > ProxyPass / http://localhost:631/
> >> > ProxyPassReverse / http://localhost:631/
> >> >
> >> > 
> >> >
> >> > 
> >> >
> >> > 
> >> > Require all granted
> >> > 
> >> >
> >> > 
> >> >
> >> >
> >> > --
> >> >
> >> > <<<-
> -->>>
> >> >
> >> > < Disse-lhe Jesus: Eu sou o caminho, e a verdade e a vida; ninguém vem
> >> > ao
> >> > Pai, senão por mim >
> >> >  (João
> 14:6)
> >> >
> >> >
>  Att.
> >> > ♪ ♫  Luiz Guilherme Nunes
> >> > Fernandes
> >> > ♫ ♪
> >> >
> >> >
> >> > <<<-
> -->>>
> >>
> >>
> >>
> >> --
> >> Daniel Ferradal
> >> IT Specialist
> >>
> >> email dferradal at gmail.com
> >> linkedin es.linkedin.com/in/danielferradal
> >>
> >> -
> >> To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
> >> For additional commands, e-mail: users-h...@httpd.apache.org
> >>
> >
> >
> >
> > --
> > <<<-
> -->>>
> >
> > < Disse-lhe Jesus: Eu sou o caminho, e a verdade e a vida; ninguém vem ao
> > Pai, senão por mim >
> >  (João 14:6)
> >
> > Att.
> > ♪ ♫  Luiz Guilherme Nunes
> Fernandes
> > ♫ ♪
> >
> > <<<-
> 

Re: [users@httpd] What is configuration

[Daniel]

Servername is to specify the host header, defining different names but
calling http://10.1.1.76 won't help apache determine to which
virtualhost the request has to go, following the names you used, you
need to request http://cups/ or http://jasmine/ to make Apache httpd
recognize where requests will go, otherwise all requests will land in
the first virtualhost.

2017-06-01 20:14 GMT+02:00 Luiz Guilherme Nunes Fernandes
:
> Well, i chek in log.
>
> When I try to access the first virtualhost it works normally.
>
> 10.251.14.140 - - [01/Jun/2017:15:01:35 -0300] "GET / HTTP/1.1" 304 -
> "http://10.1.1.76/admin; "Mozilla/5.0 (X11; Linux x86_64; rv:45.0)
> Gecko/20100101 Firefox/45.0"
> 10.251.14.140 - - [01/Jun/2017:15:01:35 -0300] "GET /cups.css HTTP/1.1" 304
> - "http://10.1.1.76/; "Mozilla/5.0 (X11; Linux x86_64; rv:45.0)
> Gecko/20100101 Firefox/45.0"
>
> Second virtualhost:
>
> 10.251.14.140 - - [01/Jun/2017:15:01:58 -0300] "GET /jasmine/ HTTP/1.1" 404
> 342 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101
> Firefox/45.0"
> 10.251.14.140 - - [01/Jun/2017:15:01:58 -0300] "GET /cups.css HTTP/1.1" 304
> - "http://10.1.1.76/jasmine/; "Mozilla/5.0 (X11; Linux x86_64; rv:45.0)
> Gecko/20100101 Firefox/45.0"
>
> My new configuration:
>
> 
>
> ServerName cups
> ProxyRequests off
> ProxyPreserveHost Off
> ProxyPass / http://localhost:631/
> ProxyPassReverse / http://localhost:631/
> 
>
> 
>
> ServerName jasmine
> DocumentRoot /var/www/html/jasmine
> 
> Require all granted
> 
>
> 
>
> Sorry, but I'm still confused, with 2 virtual hosts without reverse proxy
> work, but I need one with reverse proxy and another with documentroot source
> of apache. Why when I try to access jasmine, does it access my cups
> virtualhost?
>
> # I use with parameter and without.
> Log details:
> AH00548: NameVirtualHost has no effect and will be removed in the next
> release /etc/httpd/conf.d/teste.conf:1
>
>
>
> 2017-06-01 13:38 GMT-03:00 Daniel :
>>
>> Hello, if you define more than one virtualhost you need to distinguish
>> them somehow, so Apache knows where requests will "land".
>>
>> This "somehow" you must use is called ServerName, each virtualhost
>> must have a unique severname.
>>
>> Also if this is Apache httpd 2.2 you will need a directive called
>> "NamedVirtualhost *:80" defined once in server/global config.
>>
>> 2017-06-01 18:31 GMT+02:00 Luiz Guilherme Nunes Fernandes
>> :
>> > Dears,
>> >  i need redirect my apache for use cups and i need use Directory
>> > /var/www/html/jasmine with another application. What is a configuration
>> > correct? in apache show "Not Found" for directory of Jasmine, if i
>> > remove
>> > proxy pass directory jasmine work.
>> >
>> > 
>> >
>> > ProxyPreserveHost Off
>> > ProxyPass / http://localhost:631/
>> > ProxyPassReverse / http://localhost:631/
>> >
>> > 
>> >
>> > 
>> >
>> > 
>> > Require all granted
>> > 
>> >
>> > 
>> >
>> >
>> > --
>> >
>> > <<<--->>>
>> >
>> > < Disse-lhe Jesus: Eu sou o caminho, e a verdade e a vida; ninguém vem
>> > ao
>> > Pai, senão por mim >
>> >  (João 14:6)
>> >
>> > Att.
>> > ♪ ♫  Luiz Guilherme Nunes
>> > Fernandes
>> > ♫ ♪
>> >
>> >
>> > <<<--->>>
>>
>>
>>
>> --
>> Daniel Ferradal
>> IT Specialist
>>
>> email dferradal at gmail.com
>> linkedin es.linkedin.com/in/danielferradal
>>
>> -
>> To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
>> For additional commands, e-mail: users-h...@httpd.apache.org
>>
>
>
>
> --
> <<<--->>>
>
> < Disse-lhe Jesus: Eu sou o caminho, e a verdade e a vida; ninguém vem ao
> Pai, senão por mim >
>  (João 14:6)
>
> Att.
> ♪ ♫  Luiz Guilherme Nunes Fernandes
> ♫ ♪
>
> <<<--->>>



-- 
Daniel Ferradal
IT Specialist

email dferradal at gmail.com
linkedin es.linkedin.com/in/danielferradal

-
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org

Re: [users@httpd] What is configuration

[Luiz Guilherme Nunes Fernandes]

Well, i chek in log.

When I try to access the first virtualhost it works normally.

10.251.14.140 - - [01/Jun/2017:15:01:35 -0300] "GET / HTTP/1.1" 304 - "
http://10.1.1.76/admin; "Mozilla/5.0 (X11; Linux x86_64; rv:45.0)
Gecko/20100101 Firefox/45.0"
10.251.14.140 - - [01/Jun/2017:15:01:35 -0300] "GET /cups.css HTTP/1.1" 304
- "http://10.1.1.76/; "Mozilla/5.0 (X11; Linux x86_64; rv:45.0)
Gecko/20100101 Firefox/45.0"

Second virtualhost:

10.251.14.140 - - [01/Jun/2017:15:01:58 -0300] "GET /jasmine/ HTTP/1.1" 404
342 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101
Firefox/45.0"
10.251.14.140 - - [01/Jun/2017:15:01:58 -0300] "GET /cups.css HTTP/1.1" 304
- "http://10.1.1.76/jasmine/; "Mozilla/5.0 (X11; Linux x86_64; rv:45.0)
Gecko/20100101 Firefox/45.0"

My new configuration:



ServerName cups
ProxyRequests off
ProxyPreserveHost Off
ProxyPass / http://localhost:631/
ProxyPassReverse / http://localhost:631/




ServerName jasmine
DocumentRoot /var/www/html/jasmine

Require all granted




Sorry, but I'm still confused, with 2 virtual hosts without reverse proxy
work, but I need one with reverse proxy and another with documentroot
source of apache. Why when I try to access jasmine, does it access my cups
virtualhost?

# I use with parameter and without.
Log details:
AH00548: NameVirtualHost has no effect and will be removed in the next
release /etc/httpd/conf.d/teste.conf:1



2017-06-01 13:38 GMT-03:00 Daniel :

> Hello, if you define more than one virtualhost you need to distinguish
> them somehow, so Apache knows where requests will "land".
>
> This "somehow" you must use is called ServerName, each virtualhost
> must have a unique severname.
>
> Also if this is Apache httpd 2.2 you will need a directive called
> "NamedVirtualhost *:80" defined once in server/global config.
>
> 2017-06-01 18:31 GMT+02:00 Luiz Guilherme Nunes Fernandes
> :
> > Dears,
> >  i need redirect my apache for use cups and i need use Directory
> > /var/www/html/jasmine with another application. What is a configuration
> > correct? in apache show "Not Found" for directory of Jasmine, if i remove
> > proxy pass directory jasmine work.
> >
> > 
> >
> > ProxyPreserveHost Off
> > ProxyPass / http://localhost:631/
> > ProxyPassReverse / http://localhost:631/
> >
> > 
> >
> > 
> >
> > 
> > Require all granted
> > 
> >
> > 
> >
> >
> > --
> > <<<-
> -->>>
> >
> > < Disse-lhe Jesus: Eu sou o caminho, e a verdade e a vida; ninguém vem ao
> > Pai, senão por mim >
> >  (João 14:6)
> >
> > Att.
> > ♪ ♫  Luiz Guilherme Nunes
> Fernandes
> > ♫ ♪
> >
> > <<<-
> -->>>
>
>
>
> --
> Daniel Ferradal
> IT Specialist
>
> email dferradal at gmail.com
> linkedin es.linkedin.com/in/danielferradal
>
> -
> To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
> For additional commands, e-mail: users-h...@httpd.apache.org
>
>


-- 
<<<--->>>

< Disse-lhe Jesus: Eu sou o caminho, e a verdade e a vida; ninguém vem ao
Pai, senão por mim >
 (João 14:6)

Att.
♪ ♫  Luiz Guilherme Nunes
Fernandes  ♫ ♪

<<<--->>>

Re: [users@httpd] What is configuration

[Daniel]

Hello, if you define more than one virtualhost you need to distinguish
them somehow, so Apache knows where requests will "land".

This "somehow" you must use is called ServerName, each virtualhost
must have a unique severname.

Also if this is Apache httpd 2.2 you will need a directive called
"NamedVirtualhost *:80" defined once in server/global config.

2017-06-01 18:31 GMT+02:00 Luiz Guilherme Nunes Fernandes
:
> Dears,
>  i need redirect my apache for use cups and i need use Directory
> /var/www/html/jasmine with another application. What is a configuration
> correct? in apache show "Not Found" for directory of Jasmine, if i remove
> proxy pass directory jasmine work.
>
> 
>
> ProxyPreserveHost Off
> ProxyPass / http://localhost:631/
> ProxyPassReverse / http://localhost:631/
>
> 
>
> 
>
> 
> Require all granted
> 
>
> 
>
>
> --
> <<<--->>>
>
> < Disse-lhe Jesus: Eu sou o caminho, e a verdade e a vida; ninguém vem ao
> Pai, senão por mim >
>  (João 14:6)
>
> Att.
> ♪ ♫  Luiz Guilherme Nunes Fernandes
> ♫ ♪
>
> <<<--->>>



-- 
Daniel Ferradal
IT Specialist

email dferradal at gmail.com
linkedin es.linkedin.com/in/danielferradal

-
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org

[users@httpd] What is configuration

[Luiz Guilherme Nunes Fernandes]

Dears,
 i need redirect my apache for use cups and i need use Directory
/var/www/html/jasmine with another application. What is a configuration
correct? in apache show "Not Found" for directory of Jasmine, if i remove
proxy pass directory jasmine work.



ProxyPreserveHost Off
ProxyPass / http://localhost:631/
ProxyPassReverse / http://localhost:631/






Require all granted





-- 
<<<--->>>

< Disse-lhe Jesus: Eu sou o caminho, e a verdade e a vida; ninguém vem ao
Pai, senão por mim >
 (João 14:6)

Att.
♪ ♫  Luiz Guilherme Nunes
Fernandes  ♫ ♪

<<<--->>>

[users@httpd] Analog log file analyzer for Apache logs

[Rose, John B]

Has anyone used these more recent versions (C:Amie) for Apache logs?

http://www.c-amie.co.uk/analog/

Comments?

Re: [users@httpd] Trouble updating PHP version on MAMP on Mac

[John Iliffe]

I am not on Apple here, and you don't say whether you are using php-fpm or 
not, but assuming that you are, check the start up (sysctl or init.d) file 
and be sure that the correct version of PHP is being started.  

John
=
On Wednesday 31 May 2017 03:56:45 Roparzh Hemon wrote:
> I'm trying to update the PHP version used in the built-in MAMP on my
> Mac, as indicated at
> http://aerendir.me/2015/08/01/how-to-upgrade-php-built-in-your-mac-osx/.
> 
> After obediently completing all the steps, the "CLI" version is
> updated allright :
> the output of php- v in my terminal is
> 
> PHP 7.1.4 (cli) (built: May  6 2017 10:02:00) ( NTS )
> Copyright (c) 1997-2017 The PHP Group
> Zend Engine v3.1.0, Copyright (c) 1998-2017 Zend Technologies
> with Zend OPcache v7.1.4, Copyright (c) 1999-2017, by Zend
> Technologies with Xdebug v2.5.3, Copyright (c) 2002-2017, by Derick
> Rethans
> 
> But I look at the phpInfo in my built-in MAMP, I still get the old PHP
> version, with the old PHP location.
> I tried restarting both Firefox and MAMP.
> 
> I'm using Apache2 and Firefox 53.0.2 on Mac OS 10.11.3.
> 
> -
> To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
> For additional commands, e-mail: users-h...@httpd.apache.org

-
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org

Re: [users@httpd] Apache 2.2.32 request header parsing and RFC7230 compliance

[Eric Covener]

On Mon, May 22, 2017 at 4:34 AM, Joao Costa  wrote:
> Is this a bug, and is there a chance of fixing it in 2.2.32 ?


Not failing for me:

$ printf "GET / HTTP/1.1\r\nHost: foo\r\n0:x\r\n\r\n" | nc 0 80
HTTP/1.1 200 OK
Date: Thu, 01 Jun 2017 13:08:46 GMT
Server: Apache/2.2.33-dev (Unix) DAV/2 mod_ssl/2.2.33-dev OpenSSL/1.0.2g
Last-Modified: Wed, 21 Dec 2016 02:42:39 GMT
ETag: "82aac2-62-544221b37fba1"
Accept-Ranges: bytes
Content-Length: 98
Content-Type: text/html

It works!
http://localhost/what.html;>


What gets logged for you?

-- 
Eric Covener
cove...@gmail.com

-
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org

Re: [users@httpd] Fwd: Patches for CVE-2016-8743 (apache 2.4.18)

[Rashmi Srinivasan]

Hi Yann,
 To port the fix for CVE-2016-8743 to 2.2.29, is it ok to port the
changes from http://svn.apache.org/viewvc?view=revision=1777405
 Would that suffice?
  Please advise.

regards,
Rashmi


On Fri, Feb 10, 2017 at 1:30 PM, Rashmi Srinivasan <
rashmisrinivasan2...@gmail.com> wrote:

> Thank a lot for the patch Yann,
> I will check if this fits in.
>
> regards,
> Rashmi
>
> On Wed, Jan 25, 2017 at 6:04 PM, Yann Ylavic  wrote:
>
>> Hi,
>>
>> On Wed, Jan 25, 2017 at 9:17 AM, Rashmi Srinivasan
>>  wrote:
>>
>> >   We are trying to port the fix for CVE (CVE-2016-8743) to 2.4.18. Tried
>> > checking the revision on git for the list of files fixed for this CVE.
>> > There are lots of changes related to RFC7320 and was difficult to
>> figure out
>> > the files changed for this CVE as We couldnt find the CVE-2016-8743 in
>> the
>> > log either.
>>
>> The branch [1] collects all the related changes between versions
>> 2.4.25 (latest) and 2.4.23 (previous).
>>
>> Attached is the output of:
>> $ svn diff -x-p
>> https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@r1767912
>> https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x-
>> merge-http-strict
>> >httpd-2.4.23-CVE-2016-8743.patch
>>
>> It should apply cleanly to 2.4.23, though it may not to 2.4.18
>> (possibly more work needed...).
>>
>> Hope this helps.
>>
>> Regards,
>> Yann.
>>
>> [1] https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x-
>> merge-http-strict
>>
>>
>> -
>> To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
>> For additional commands, e-mail: users-h...@httpd.apache.org
>>
>
>

Re: Re[2]: [users@httpd] apache in proxy mode introduces extra delay for sockjs in xhr poll mode

[Luca Toscano]

Hi Stepan,

Have you tried to explicitly set ProxyTimeout? If your environment is a
testing one, would it be possible for you to raise the LogLevel to trace8
and send us the logs (
https://httpd.apache.org/docs/2.4/mod/core.html#loglevel) ? I am assuming
that you have httpd 2.4, but which version? Have you tried the same with
the most recent release?

Thanks!

Luca

2017-05-29 13:49 GMT+02:00 Stepan Yakovenko 
:

> Tried disablereuse=On, nothing changes.
>
>
> Пятница, 26 мая 2017, 14:12 +03:00 от Daniel :
>
> Have you tried with disabling reuse to see if the problem persists?
>
> 2017-05-26 12:54 GMT+02:00 Stepan Yakovenko  invalid>:
> > I need to handle users disconnecting from my sockjs application running
> in
> > xhr-polling mode. When I connect to localhost, everything works as
> expected.
> > When I put apache between nodejs and browser, I get ~20 sec delay between
> > closed browser and disconnect event inside nodejs. My apache proxy
> config is
> > following:
> >
> > 
> > ProxyPass http://127.0.0.1:8080/
> > ProxyPassReverse http://127.0.0.1:8080/
> > 
> >
> > The rest of the file is default, you can see it here. I tried playing
> with
> > ttl=2 and timeout=2 options, but either nothing changes, or I get
> > reconnected each 2 seconds without closing browser. How can I reduce
> > additional disconnect timeout, introduced, but apache, somewhere in its
> > defaults?
> >
> >
> >
> >
> > --
> > Stepan Yakovenko
>
>
>
> --
> Daniel Ferradal
> IT Specialist
>
> email dferradal at gmail.com
> linkedin es.linkedin.com/in/danielferradal
>
> -
> To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
> For additional commands, e-mail: users-h...@httpd.apache.org
>
>
>
> --
> Stepan Yakovenko
>