Re: [users@httpd] Queries regarding the feasibility of achieving a use-case with HTTPD

2013-08-25 Thread Pete Houston
On Sat, Aug 24, 2013 at 04:44:46PM +0530, Ajay Garg wrote: > Is the above workflow possible by merely using HTTPD, or some form of > external proxy-software (like "squid") is required? Yes, this is possible with just httpd. > If it is indeed possible to achieve the above with just HTTPD, I will b

Re: [users@httpd] Queries regarding the feasibility of achieving a use-case with HTTPD

2013-09-02 Thread Pete Houston
I take that sentence to be referring to the relationship between the client IP address and the session and to have no connection with the session duration. You as the developer can set the cookie in any way you require. All the best, Pete -- Openstrike - improving business through open source ht

Re: [users@httpd] Apache2 hidden files & folders

2013-09-24 Thread Pete Houston
On Tue, Sep 24, 2013 at 06:21:23PM +0200, Sós Dániel wrote: > IndexIgnore .??* *~ *# HEADER* README* RCS CVS *,v *,t The first term there will prohibit display of your dotfiles. Try removing it and use this instead: IndexIgnore *~ *# HEADER* README* RCS CVS *,v *,t Also, be very careful

Re: [users@httpd] Apache2 hidden files & folders

2013-09-24 Thread Pete Houston
On Tue, Sep 24, 2013 at 06:39:09PM +0200, Sós Dániel wrote: > This not work, not listing dot files: IndexIgnore *~ *# HEADER* > README* RCS CVS *,v *,t It works for me in Apache 2.2.24. Which specific version are you running? Are you sure there are no other IndexIgnore directives in your configur

Re: [users@httpd] Apache not recording client addresses correctly

2013-10-01 Thread Pete Houston
On Mon, Sep 30, 2013 at 06:03:37PM -0700, Andrew Daviel wrote: > huh! wtf? - if I enable /server-status, the correct address for the > client asking for /server-status, is not just logged, but resolved, > even though HostnameLookups is off. But other requests still get the > 98.32 address. This r

Re: [users@httpd] Virtual Hosts Possible for SSL ?

2013-10-01 Thread Pete Houston
On Tue, Oct 01, 2013 at 04:25:05PM +0100, John McIntyre wrote: > Am I doomed to failiure, or is what I'm trying to do, actually possible? No, you are almost there. The problem is that for some reason you have an asterisk in your VirtualHost declaration for domain2. Change that the the actual IP ad

Re: [users@httpd] Apache in production without squid

2013-10-14 Thread Pete Houston
If your apache installation is sufficiently well tuned and has enough resources (chiefly RAM) then it should be fine. For a public example, see http://httpd.apache.org/server-status presently indicating over 800 slots. Good luck, Pete -- Openstrike - improving business through open source http:

Re: [users@httpd] Help me understand "Waiting for Connection"

2013-10-20 Thread Pete Houston
On Fri, Oct 11, 2013 at 10:52:13AM -0500, Jonathan Dart wrote: > If I request "http://localhost/server-status"; every 1 second for 5 > seconds, on the last request apache reports that it has 5 active requests > all with a "Request" of /server-status and a "Mode of Operation" of > "Waiting for Conne

Re: [users@httpd] Printing Request Details received at Apache

2013-10-21 Thread Pete Houston
On Mon, Oct 21, 2013 at 01:19:35PM +0530, santosh kumar wrote: > What i need is , i want to print the whole request details which is being > received at Apache end. It sounds like mod_log_forensic might be what you are after. http://httpd.apache.org/docs/2.4/mod/mod_log_forensic.html Pete -- Op

Re: [users@httpd] Virtual Hosts and SSL Puzzler

2013-10-22 Thread Pete Houston
On Tue, Oct 22, 2013 at 08:26:57AM -0400, Dennis Putnam wrote: > I get a gray globe indicating > partial encryption which does not prevent eavesdropping. I have no clue > how to debug this or even where to look. Can someone point me in the > right direction? Thanks. This is usually indicative of a

Re: [users@httpd] undefined reference to tls client method

2013-11-01 Thread Pete Houston
Hello David, On Fri, Nov 01, 2013 at 03:21:35AM -0700, David Benfell wrote: > I built openssl from source. I'm trying to get TLS 1.2 working, > which the old and crufty openssl on Centos 6.4 doesn't do. Do I need > to do something different to get the development libraries in place? Since it is t

Re: [users@httpd] Installed Modules Query

2013-11-08 Thread Pete Houston
Hello Frank, Apache is very flexible and allows the installer (ie. you) to choose which modules to compile statically into the httpd binary, which to compile as loadable, external DSOs and which not to compile at all. The very small list of compiled-in modules which you see are the bare bones for

Re: [users@httpd] Strange apache behaviour when lauching an external binary called by a perl script

2013-11-21 Thread Pete Houston
Possibly a difference in environment would cause this (perhaps LD_LIBRARY_PATH or similar?). Compare the environment in your failing at job with the environment in your successful shell command and determine if there are any differences. HTH, Pete -- Openstrike - improving business through open

Re: [users@httpd] Memory leak on 2.2.16

2013-11-25 Thread Pete Houston
Well, two things jump out from your list of modules. Firstly, there's this: > mpm_itk_module (static) Does the problem occur if you use prefork instead? Secondly, there's this: > cgi_module (shared) > cgid_module (shared) Since I'm unfamiliar with mpm_itk, it may not be a problem there but

Re: [users@httpd] Re: Curious inability to mod_rewrite absolute paths

2014-01-02 Thread Pete Houston
On Wed, Jan 01, 2014 at 09:55:48PM -0500, Borden Rhodes wrote: > I notice in the log that httpd passes the requests for the first two images > through RewriteRule in the .htaccess file. However, the call to fetch > /images/bowler.jpeg *doesn't* go through the RewriteRule, but instead (line > 50

Re: [users@httpd] Re: Curious inability to mod_rewrite absolute paths

2014-01-08 Thread Pete Houston
On Mon, Jan 06, 2014 at 12:45:27AM -0500, Borden Rhodes wrote: > I understand from the docs that Alias directives can't be used in .htaccess > files. Is this correct? This inability is partly why I kept struggling with > RewriteRules - the other was to force myself to practise regexes and advance

Re: [users@httpd] Apache Directory Level access control

2014-01-21 Thread Pete Houston
On Tue, Jan 21, 2014 at 12:39:27PM -0500, James B. Byrne wrote: > > Require group management staff > Do you really have a directory at the very top level of your O/S filesystem called /HLL_Operations? It seems more likely that this will be in some subdirectory where all your other web co

Re: [users@httpd] Apache Directory Level access control

2014-01-21 Thread Pete Houston
On Tue, Jan 21, 2014 at 03:17:35PM -0500, James B. Byrne wrote: > > On Tue, January 21, 2014 14:58, Pete Houston wrote: > > On Tue, Jan 21, 2014 at 12:39:27PM -0500, James B. Byrne wrote: > >> > >> Require group management staff > >> > > &

Re: [users@httpd] Vhosts behind NAT

2014-01-24 Thread Pete Houston
On Fri, Jan 24, 2014 at 11:07:35AM +0400, mn wrote: > Does it possible to configure the apache so it distinguishes name > abc.* and cde.* (used by clients externally) and returns different > pages (provided two s are configured)? > Which Directives are imlpemented in the case? Or, maybe, the exampl

Re: [users@httpd] setting up fresh instance with SSL; httpd exiting 1 with no log

2014-03-05 Thread Pete Houston
On Tue, Mar 04, 2014 at 05:24:59PM -0800, john gale wrote: > However, now httpd simply exits with status 1 and no output, either on > standard out or standard error. In that case your next port of call is the httpd error log. Always consult this for the detail and raise the LogLevel to get ever m

Re: [users@httpd] FancyIndexing IndexOrderDefault

2014-03-20 Thread Pete Houston
According to the documentation[1] IndexOrderDefault is a separate directive, so your configuration should be on two lines like this: IndexOptions FancyIndexing IndexOrderDefault Descending Name There is actually an example of this, but it is in the comments. Search for JAKA. HTH, Pete [1] http

Re: [users@httpd] How to create Custom Http Status code

2014-03-28 Thread Pete Houston
The HTTP status codes are defined in httpd.h, so you could just edit them there and recompile. However, I advise strongly against using custom HTTP status codes for what should hopefully be obvious reasons. Perhaps this is an XY problem? Pete On Fri, Mar 28, 2014 at 04:38:06PM +0530, Sailaja Gadi

Re: [users@httpd] https

2014-04-04 Thread Pete Houston
From the openssl documentation at http://www.openssl.org/docs/apps/req.html is this list of example field values: [ req_distinguished_name ] C = GB ST = Test State or Province L = Test Locality O = Organization

Re: [users@httpd] similar proxy rules causing warning

2014-04-23 Thread Pete Houston
On Wed, Apr 23, 2014 at 03:41:54PM -0600, eric tse wrote: > Have proxy rules > > proxyPass /ABC http://domain.com/abc/ > proxyPass /AbC http://domain.com/abc/ > > And get > The Apache service named reported the following error: > >>> [xxx xxx xx xx:xx:xx 20xx] [info] worker http://domain.com/abc

Re: [users@httpd] AH00169 and AH00163

2014-04-29 Thread Pete Houston
Thowe are not errors; they are notices. Pete -- Openstrike - improving business through open source http://www.openstrike.co.uk/ or call 01722 770036 / 07092 020107 pgpbD5yARvy_l.pgp Description: PGP signature

Re: [users@httpd] Maxservers

2014-06-20 Thread Pete Houston
On Wed, Jun 18, 2014 at 06:03:39PM +, Jesus Tellez wrote: > I have Apache 2.0.59 That's an eight-year-old version of a legacy branch. If you don't have a truly excellent reason for sticking with that, I suggest that you think about upgrading. > and configured start servers=8, but on server-s

Re: [users@httpd] mod_rewrite RewriteCond

2014-06-27 Thread Pete Houston
Hello Michael, The obvious question is why are you using mod_rewrite for access control in the first place? There are other, lighter modules whose purpose actually is access control and which will allow you to use CIDR notation etc. I suggest you take a look at mod_authz_host instead. Pete -- O

Re: [users@httpd] mod_rewrite RewriteCond

2014-06-27 Thread Pete Houston
You can set up a reverse proxy and include access control like this: LoadModule proxy_module modules/mod_proxy.so LoadModule proxy_http_module modules/mod_proxy_http.so ProxyRequests Off ServerName reverse-proxy.example.com allow from 1.2.3.4 2.2.3.4

Re: [users@httpd] MaxClients exceeded error message

2014-06-27 Thread Pete Houston
On Fri, Jun 27, 2014 at 03:39:42PM +, Rose, John B wrote: > What is the impact of not having a "ListenBacklogs" Directive in your > config? This is covered pretty well in the documentation: http://httpd.apache.org/docs/2.4/mod/mpm_common.html#listenbacklog A cursory read of this tells us that

Re: [users@httpd] Confirmation on Vulnerability Status of Apache HTTP V2.0.50 and when bundled with Brocade FOS V7.1.X

2014-07-06 Thread Pete Houston
On Tue, Jun 24, 2014 at 12:45:19AM -0400, Kee, Siokkwan wrote: > We have an issue currently where documentation released from Brocade > indicates Apache HTTP V 2.0.50 is listed as non-vulnerable when bundled > together with Brocade FOS V7.1.1. > As Brocade has listed this as a non-vulnerability,

Re: [users@httpd] Order of application of sites-enabled configs

2014-08-06 Thread Pete Houston
On Wed, Aug 06, 2014 at 02:20:26AM -0700, M Busche wrote: > I notice that the default virtual host configuration file name is > 000-default.conf.  I presume the convention of starting virtual host > configuration file names with a three digit number governs the order in which > the configuration

Re: [users@httpd] Use Allow from IP when there is a proxy exist?

2014-08-07 Thread Pete Houston
On Thu, Aug 07, 2014 at 09:19:10PM +, Mark jensen wrote: > How can I make Apache to deal with the client IP not the proxy IP? Use mod_remoteip. Pete -- Openstrike - improving business through open source http://www.openstrike.co.uk/ or call 01722 770036 / 07092 020107 pgp8PAUHGkopd.pgp Des

Re: [users@httpd] Apache 2.2:How to enable module: mod_expires.c

2014-08-09 Thread Pete Houston
On Sat, Aug 09, 2014 at 02:14:36PM +, Mark jensen wrote: > and I have found this line in conf file: > > LoadModule expires module modules/mod_expires.so > > but "ExpireDefault" didn't work There's no such directive in Apache 2.2 as "ExpireDefault". Perhaps if you tried "ExpiresDefault" you m

Re: [users@httpd] enabling htaccess in vhosts

2014-09-06 Thread Pete Houston
No need for Google, just go straight to the source: http://httpd.apache.org/docs/2.4/howto/htaccess.html Pete On Fri, Sep 05, 2014 at 07:53:07PM -0600, Matthew Smith wrote: > How do I do so? I googled but can't figure it out. -- Openstrike - improving business through open source http://www.op

Re: [users@httpd] Proposed simple shell-shock protection

2014-09-29 Thread Pete Houston
On Mon, Sep 29, 2014 at 01:09:19PM -0500, Sharon Zastre wrote: > Is it safe to assume that a fix/patch/upgrade will become available to > address the shellshock vulnerability? Yes, but not in apache. The vulnerability dubbed "shellshock" is a flaw in bash and patches and upgrades are already wide

Re: [users@httpd] Version check urgent

2014-10-10 Thread Pete Houston
On Fri, Oct 10, 2014 at 07:10:47AM +, pratibha.dhank...@wipro.com wrote: > Currently in our application we have Apache 2.0 version installed on windows > server 2003. > Could you please let us know if same Apache 2.0 version will support for > Windows server2012 or not? > If not which version

Re: [users@httpd] Apache Upgrade

2014-10-17 Thread Pete Houston
On Fri, Oct 17, 2014 at 10:53:03AM +, pratibha.dhank...@wipro.com wrote: > Can someone please suggest steps to upgrade Apache 2.2.21 to 2.2.29? It's a > little urgent requirement. http://httpd.apache.org/docs/2.2/install.html#upgrading Pete -- Openstrike - improving business through open so

Re: [users@httpd] Help needed with event MPM configuration

2014-11-04 Thread Pete Houston
On Tue, Nov 04, 2014 at 03:58:25PM +, Rajalakshmi Iyer wrote: > The server has a KeepAliveTimeout of 120 seconds. That is probably the longest KeepAliveTimeout I have seen. Is there some particular reason that you have it so high? In 2.4 the default value is 5 seconds, which ought to be a rea

Re: [users@httpd] mod_userdir question

2014-12-03 Thread Pete Houston
As Carlos's question suggests that he might be quite new to all this, it's probably worth pointing out that for simple, low-volume applications there is no requirement to load any language-specific module into apache. All one needs is mod_cgi (or mod_cgid) to get started and then it's pretty trivia

Re: [users@httpd] Single web page site settings questions ... i.e. KeepAlive,

2014-12-19 Thread Pete Houston
On Fri, Dec 12, 2014 at 03:18:57PM +, Rose, John B wrote: > For a one page web site > > The page will have a very large number of visitors in a short time. There > will be simple text updates on the page and users will check back frequently > to see the updates. > > Say 100k visitors each

Re: [users@httpd] OpenSSL version used by Httpd

2015-01-21 Thread Pete Houston
On Wed, Jan 21, 2015 at 03:44:43PM +0530, srihari na wrote: > However from external/client side how can I verify which is the exact > version of openssl libraries being used during communication. Please help. In your httpd.conf specify ServerTokens Full Then from the client side you can

Re: [users@httpd] OpenSSL version used by Httpd

2015-01-21 Thread Pete Houston
The Server response header is always present by default. Therefore there must be something which has been changed in your configuration to remove it. You will need to find that and fix it. Pete -- Openstrike - improving business through open source http://www.openstrike.co.uk/ or call 01722 77003

Re: [users@httpd] Perl Logging

2015-02-16 Thread Pete Houston
Hello Colin, On Fri, Feb 13, 2015 at 10:54:22AM +, Colin Campbell wrote: > I have upgraded to Apache 2.2.22 on a Debian 7 VM. I have just installed it > using apt-get and not made any config changes except to add my VirtualHost > [...] > > The behavior I was used to was that any Perl errors

Re: [users@httpd] Looking for a new maintainer for FableTech Server Status for Apache

2015-03-08 Thread Pete Houston
maintain and support ftss in a similar way. Please let me know if you would be happy for us to do so (off-list is fine). Thanks, Pete Houston On Tue, Feb 17, 2015 at 07:37:17PM +0100, Morten Shearman Kirkegaard wrote: > Going forward we will not be able to maintain the project, so we are > l

Re: [users@httpd] one apache virtual domain won't start

2015-03-27 Thread Pete Houston
On Wed, Mar 18, 2015 at 08:57:27PM -0700, Dave Stevens wrote: > I have a Ubuntu 14.04 box with 8 domains. At first they all worked > but yesterday one stopped serving pages, browser says "-- Server not > found" the config looks ok, domain-specific configs are in > sites-enabled, there are access er

Re: [users@httpd] AuthBasic Questions: Modify the pop-up message? Change auth cache time?

2015-04-14 Thread Pete Houston
On Tue, Apr 14, 2015 at 07:14:55AM -0500, Tom Browder wrote: > I now have basic authorization (under TLS) working okay, but I would > like to influence the user experience a bit via Apache behavior if > possible. > > A few questions if you please: > > 1. Can I modify the pop-up message? Possibl

Re: [users@httpd] Re: mod_proxy and mod_nss - occasional "SSL Proxy: I don't have the name of the host we're supposed to connect to so I can't verify that we are connecting to who we think we should b

2015-04-21 Thread Pete Houston
Hello Jamie, On Tue, Apr 21, 2015 at 11:55:27AM -0400, Jamie Johnson wrote: > Sorry to hit this again, but I've made no headway short of setting > NSSProxyCheckPeerCN off, is this not reproducible? Is there another list I > should be asking this on? As mod_nss is a third-party module it's quite

Re: [users@httpd] Safari - Apache error when connecting using safari with beast mitigation

2015-04-30 Thread Pete Houston
On Thu, Apr 30, 2015 at 09:07:36AM +, Or Lindner wrote: > Hi, > > I am running apache version 2.2.0. [description of problem snipped] > > There is maybe an apache patch for that problem? Since 2.2.0 there have been over 40 releases of stable branches of apache. These subsequent releases will

Re: [users@httpd] exclude website from directory rules

2015-06-02 Thread Pete Houston
Use a virtual host to override the server-level defaults. http://httpd.apache.org/docs/2.4/vhosts/ HTH, Pete On Tue, Jun 02, 2015 at 12:17:44PM -0400, Tim Dunphy wrote: > There is a generic Directory index rule at Apache level like below that is > expecting the serving domain to point to any of

Re: [users@httpd] Apache24 - how to optimize httpd.conf

2015-06-08 Thread Pete Houston
On Mon, Jun 08, 2015 at 02:35:24PM -0700, Motty Cruz wrote: > Should Fix: > Optimize images > Leverage browser caching > Consider Fixing: > Eliminate render-blocking JavaScript and CSS in above-the-fold content > Minify CSS > Minify HTML All of those bar one are content issues and therefore unconn

Re: [users@httpd] Using LogLevel?

2015-06-27 Thread Pete Houston
If you look carefully at the documentation at http://httpd.apache.org/docs/2.4/mod/core.html#loglevel you will see that it says: Context:server config, virtual host, directory The absense of ".htaccess" from that list indicates that it cannot be set in the .htaccess file. Set it i

Re: [users@httpd] Error executing script through Apache

2015-10-16 Thread Pete Houston
On Fri, Oct 16, 2015 at 02:21:45PM +, David Johnson wrote: > What would be different about being logged in as www at the command line and > calling a script vs. running Apache as www and calling it through the > intranet? The SELinux context will be different. Check the audit log to see if i

Re: [users@httpd] Error executing script through Apache

2015-10-16 Thread Pete Houston
On Fri, Oct 16, 2015 at 02:37:24PM +, David Johnson wrote: > Please forgive my ignorance, but what can I do now to resolve this? Depending on your current SELinux policy and what precisely it is that you want to allow you could either adjust an appropriate boolean, correct any files/dirs with

Re: [users@httpd] How to force browsers doesn't use cache

2015-11-16 Thread Pete Houston
On Mon, Nov 16, 2015 at 06:19:37PM -0200, Ronaldo Luiz de Carvalho wrote: > There are a way to setting apache in a way to force the users site browsers > doesn't use their cache? You can use the Header directive to set the appropriate value of the Cache-Control header. http://httpd.apache.org/doc

Re: [users@httpd] Circumstances when mod_php would run faster than PHP-FPM?

2016-01-12 Thread Pete Houston
On Tue, Jan 12, 2016 at 06:56:40PM +, Rose, John B wrote: > For event ... > > > StartServers3 > MinSpareThreads 20 > MaxSpareThreads 25 > ServerLimit 16 > ThreadsPerChild 16 > MaxRequestWorkers 256 > MaxConnecti

Re: [users@httpd] Command line method to get virtual hosts and DocumentRoot?

2016-01-28 Thread Pete Houston
On Thu, Jan 28, 2016 at 05:03:41PM +, Rose, John B wrote: > Is there a command line method to list all the virtual hosts and each > DocumentRoot? Should be pretty simple to construct with Apache::ConfigParser. https://metacpan.org/pod/Apache::ConfigParser Pete -- Openstrike - improving busi

Re: [users@httpd] DH parameters

2011-08-10 Thread Pete Houston
On Wed, Aug 10, 2011 at 12:53:29PM +0300, yyy wrote: > How to specify custom DH parameters for mod_ssl? [snip] > The FAQ of this list (http://httpd.apache.org/docs/misc/FAQ.html) is a 404. > Search function for mailing list archives did not take 2 character keywords > (DH), they were ignored. T

Re: [users@httpd] Modular .htaccess files

2011-08-15 Thread Pete Houston
On Mon, Aug 15, 2011 at 10:16:29AM -0400, Ben Timby wrote: > In the above way, the administrator could delegate control of portions > of the configuration to a user without the overhead of an .htaccess > file. Also, you could include a file which in turn includes other > files. Thus, the administra

Re: [users@httpd] printing/checking config values

2011-08-24 Thread Pete Houston
On Wed, Aug 24, 2011 at 10:35:18AM +0530, Amlan Mandal wrote: > Is there any way to check/print what is the value of ServerTokens on > runtime? Yes, you can use the facilities of mod_info to determine the values set by various directives at runtime. See http://httpd.apache.org/docs/2.2/mod/mod_inf

Re: [users@httpd] multiple domains, multiple servers, one public ip

2011-09-14 Thread Pete Houston
On Tue, Sep 13, 2011 at 11:41:24PM -0700, Joshua Stoutenburg wrote: > I have multiple registered domain names. > I have multiple *nix servers (primarily Ubuntu 10.04 LTS). > I want to host several services for each domain -- ftp, mysql, http, > https, email, subversion, git, etc. > I want to be abl

Re: [users@httpd] Mod Rewrite for Server Status 503, depending upon URL

2011-09-17 Thread Pete Houston
Untested, but: ServerName www.mysite.com ErrorDocument 503 http://www.mypartnersite.com/books ErrorDocument 503 http://www.mypartnersite.com/music ... should do what you describe. Pete On Sat, Sep 17, 2011 at

Re: [users@httpd] Quick Allow/Deny Question

2011-09-30 Thread Pete Houston
You can always Alias or ScriptAlias outside the DocumentRoot. Igor's advice is correct. Pete On Fri, Sep 30, 2011 at 09:14:00AM -0400, Brandon Phelps wrote: > I guess I am just a little confused as to why there is a at > all? If my DocumentRoot is set to /var/www then wouldn't that prevent any

Re: [users@httpd] Redirection

2011-10-18 Thread Pete Houston
On Tue, Oct 18, 2011 at 10:30:20AM -0700, apt...@spam-message.com wrote: > > I want "http://mydomain.com/j15/me.html"; to be redirected to > "http://mydomain.com/them.html";. Sounds simple enough. Indeed it is. Here's a solution: Redirect/j15/me.html http://mydomain.com/them.html

Re: [users@httpd] Map URL to directory

2011-10-21 Thread Pete Houston
Most likely what you are after is the "Alias" directive. Pete On Fri, Oct 21, 2011 at 12:32:05AM -0700, milan tomic wrote: > > This is very simple question: what should I do in httpd.conf to map some URL > to the file system directory? I need something like this: > > > ProxyPass D:\myDir\my

Re: [users@httpd] Redirection

2011-10-21 Thread Pete Houston
On Thu, Oct 20, 2011 at 05:02:19AM -0700, apt...@spam-message.com wrote: > Pete, > > Thanks for your reply. What would you use? I would use Redirect as in the previous reply. > The problem is, I have numerous articles created under an old CMS that > I've moved to a new CMS. Google et al have ind

Re: [users@httpd] Rejecting requests for unknown virtual hosts

2011-10-22 Thread Pete Houston
On Sat, Oct 22, 2011 at 12:52:05PM +0200, MegaBrutal wrote: > What I tried: > > # Include the virtual host configurations: > Include sites-enabled/ > > # Deny all unknown virtual host names > > ServerName * > DocumentRoot /var/www > > Order allow,deny > #Allow from g

Re: [users@httpd] SCGI and Order

2011-12-08 Thread Pete Houston
Hello Matthew, It looks as though you are applying restrictions based on the filesystem and then are including a directive which dissociates the URL from that filesystem, thus bypassing your restrictions. Have you read this part of the documentation? http://httpd.apache.org/docs/2.2/sections.html

Re: [users@httpd] Update on mod_setenvif exploit CVE-2011-3607 and CVE-2011-4415

2011-12-21 Thread Pete Houston
On Wed, Dec 21, 2011 at 12:42:02PM -0500, Kevin A. McGrail wrote: > Our server is being flagged for PCI non-compliance because of these > CVE's but there doesn't appear to be a fix, a workaround or any > information I can find. There seem to be 2 obvious workarounds: 1. Don't load mod_setenvif. T

Re: [users@httpd] Re: Apache httpd does not respect the HTTP RFCs !

2012-01-09 Thread Pete Houston
On Mon, Jan 09, 2012 at 12:37:53PM +, jimmyhendrix wrote: > I would like to change that status code on my httpd.conf and set to the value > 404 on the same page http://cmsboprd/page-indisponible/index.html?fmt=default Have a read of this: http://httpd.apache.org/docs/2.2/mod/core.html#errord

Re: [users@httpd] Re: Running script CGI with IncludesNOEXEC

2012-01-18 Thread Pete Houston
On Wed, Jan 18, 2012 at 01:06:19PM +0100, Petr Hracek wrote: > -- in the apache2 configuration file is mentioned > > Options IncludesNOEXEC -MultiViews -FollowSymLinks > Order deny,allow > Allow from all > In your Options line you are mixing absolute and relative directives. D

Re: [users@httpd] redirect based on HTTP_HOST using mod_rewrite

2012-01-25 Thread Pete Houston
On Wed, Jan 25, 2012 at 10:58:02PM +0100, Thomas Carrié wrote: > It is the first time I use module mod_rewrite is totally new to me, 2 things > are unclear to me: Why are you using mod_rewrite at all? Just use a NameVirtualHost and set up 2 virtual hosts for your 2 domains to which you could then

Re: [users@httpd] Easy way to dump running server config for Apache2.0/2.2?

2012-02-02 Thread Pete Houston
On Thu, Feb 02, 2012 at 04:15:13PM +, Tim Watts wrote: > Kind of like what mod_info gives. Specifically I want a dump of all > the active ServerName and ServerAlias directives. Haven't you answered your own question there? lynx --dump http://name.of.server/server-info | grep -E 'Server(Name|A

Re: [users@httpd] Easy way to dump running server config for Apache2.0/2.2?

2012-02-02 Thread Pete Houston
On Thu, Feb 02, 2012 at 04:48:42PM +, Tim Watts wrote: > I don't have mod_info installed on 90% of the servers in question, > sadly. It is standard on my new build servers but I have a load of > legacy stuff. In that case, perhaps something as simple as the attached script would do? > BTW the

Re: [users@httpd] Problem when building Apache 2.2.22 with --with-included-apr - libtool: link: only absolute run-paths are allowed

2012-02-09 Thread Pete Houston
On Wed, Feb 08, 2012 at 11:33:01PM -0200, Manuel Lemos wrote: > It compiles OK, but when it tries to link apr it gives me an libtool > error. Full output below. > > libtool: link: only absolute run-paths are allowed > > Anybody has a clue what is the matter and how can I avoid this? ... > 4:5:4

Re: [users@httpd] viurtual management

2012-03-02 Thread Pete Houston
On Fri, Mar 02, 2012 at 08:06:55PM +1000, Nick Edwards wrote: > With a lot of virtual hosts, is it possible to have a sort of global > ( /admin ) directory, which uses a specific dir elsewhere, that > everyone is referenced to when they type their.domain/admin Sounds like an Alias to me. Any re

Re: [users@httpd] suddendly high cpu load because of googlebot

2012-03-09 Thread Pete Houston
On Fri, Mar 09, 2012 at 09:07:34AM +0100, Simone Frattegiani wrote: > > Server-status shows this: > > Total Accesses: 292068 > Total kBytes: 5540956 > CPULoad: .0884054 > Uptime: 45823 > ReqPerSec: 6.37383 > BytesPerSec: 123823 > BytesPerReq: 19426.8 > BusyWorkers: 99 > IdleWorkers: 10 > Scoreboa

Re: [users@httpd] .htaccess file outside of web space

2012-04-05 Thread Pete Houston
On Wed, Apr 04, 2012 at 11:26:29PM -0400, Phil Smith wrote: > Am I interpreting what I'm seeing correctly or could I possibly have a > configuration problem? You are interpreting it correctly, there's no configuration problem. This is the way that access files are applied as in the documentation.

Re: [users@httpd] "Deny" directives silently ignored in config files

2012-04-18 Thread Pete Houston
On Wed, Apr 18, 2012 at 10:07:56AM +0200, Matthieu Moy wrote: > I tried the following: > > > Order deny,allow > Deny from all > #RewriteEngine On > #RewriteRule . - [F] > If you use Order allow,deny instead the configuration should deny all requests explicitly. You might also add

Re: [users@httpd] Help troubleshooting performance issue, after "1000 total children" Apache no longer responds to HTTP requests. Not MaxClients issue?

2012-05-03 Thread Pete Houston
On Thu, May 03, 2012 at 08:33:58AM -0300, Luis Fernando Alen wrote: > Perhaps your prefork settings are the cause of the issue. > > Look, you have 80 StartServers and 120 MaxSpareServers, and with such > settings, apache can spawn 9600 (80*120) children. That's not how prefork works. I think you

Re: [users@httpd] Help troubleshooting performance issue, after "1000 total children" Apache no longer responds to HTTP requests. Not MaxClients issue?

2012-05-03 Thread Pete Houston
On Thu, May 03, 2012 at 11:29:52AM -0700, P J wrote: > Good idea about raising the limit to accommodate the peak as a starting > point, I've switched it to: > > StartServers 500 > MinSpareServers 1024 > MaxSpareServers 1024 > ServerLimit 3500 > MaxClients 3500 > MaxRequestsPerChild

Re: [users@httpd] Redirecting a domain to another using Rewrite rules

2012-05-16 Thread Pete Houston
On Wed, May 16, 2012 at 05:06:24AM -0700, Desilets, Alain wrote: > I need to forward a domain www.wiki-translation.com to a different location > wiki-translation.wiki4us.com, while preserving the original url. > > I have been trying to do this for 30 mins now, using Rewrite rules, and > nothing

Re: [users@httpd] Redirecting a domain to another using Rewrite rules

2012-05-17 Thread Pete Houston
On Wed, May 16, 2012 at 07:39:17PM -0400, Desilets, Alain wrote: > When I try to go to www.wiki-translation.com, I see the url > wiki-translation.wiki4us.com in the browser (which is not what I want... I > want to keep the original www.wiki-translation.com url). In that case the approach will d

Re: [users@httpd] Denial of Service due to multiplication of httpd running

2012-05-24 Thread Pete Houston
On Wed, May 23, 2012 at 07:47:37PM -0700, Bill Unruh wrote: > But this is clearly a horrible kludge. Is there any way I can figure > out what is triggering these versions of httpd > to be piling up? Since you've looked at the logs and not found anything there (or at least eliminated what problems

Re: [users@httpd] Rewrite Role: navigation toolbar trouble

2012-05-24 Thread Pete Houston
If you can solve it with a symlink in the filesystem then the equivalent in the httpd configuration is to use an Alias. Pete -- Openstrike - improving business through open source http://www.openstrike.co.uk/ or call 01722 770036 / 07092 020107 pgpSpcXfWVOSK.pgp Description: PGP signature

Re: [users@httpd] Denial of Service due to multiplication of httpd running

2012-05-24 Thread Pete Houston
A dozen or so idle processes is perfectly normal for prefork (which you are clearly running, BTW). Only worry about this if there are a consistently high number of idle processes (say 30 or more for a lightly loaded server) in which case you can tune the value of MaxSpareServers to suit. Have a re

Re: [users@httpd] trouble with virtualhost in http/https

2012-06-06 Thread Pete Houston
You cannot have 2 https sites with different certificates sharing the same IP+port combination. This is a restriction of how https works and is outlined in the documentation here: http://httpd.apache.org/docs/2.4/ssl/ssl_faq.html#vhosts If you ensure that your https vhosts have either different IP

Re: [users@httpd] chinese character support

2012-06-23 Thread Pete Houston
On Wed, Jun 20, 2012 at 02:17:53PM -0500, Terry wrote: > This is my first experience with a non-english character set so please > excuse me if the answers are obvious. We have a Centos 5 box with apache > 2.2.3 serving several english websites. We have a request from the > customer to serve up a

Re: [users@httpd] apache changes status code from 500 to 200

2012-07-11 Thread Pete Houston
Sounds like you want mod_asis: http://httpd.apache.org/docs/2.4/mod/mod_asis.html Pete -- Openstrike - improving business through open source http://www.openstrike.co.uk/ or call 01722 770036 / 07092 020107 pgpjatXwibclp.pgp Description: PGP signature

Re: [users@httpd] apache changes status code from 500 to 200

2012-07-11 Thread Pete Houston
On Wed, Jul 11, 2012 at 03:21:12PM +0200, Ruud Dozijn wrote: > > I have put this in my httpd.conf: > > > SetHandler perl-script > PerlHandler ModPerl::Registry > Options ExecCGI > ErrorDocument 400 /handlers/400.h > > > > SetHandler send-as-is > > > > What I would real

Re: [users@httpd] SSI not working

2012-07-18 Thread Pete Houston
On Wed, Jul 18, 2012 at 06:00:45PM -0400, Dunkle, Edward (Edward) wrote: > Options +IncludesNOEXEC FollowSymLinks Don't do that. If you mix +/- options with non-+/- options you'll have problems. Instead use maybe Options +IncludesNOEXEC +FollowSymLinks HTH, Pete -- Openstrike

Re: [users@httpd] Error compiling httpd 2.2.11 with openssl 0.9.8 on rhel 6

2012-07-26 Thread Pete Houston
On Wed, Jul 25, 2012 at 04:56:48PM -0700, Fleishman.Mark wrote: > I compiled openssl 0.9.8x using these options, and it compiled and installed > ok: > ./config --prefix=/apps/openssl/0.9.8x > --openssldir=/apps/openssl/0.9.8x/openssl shared > > Here are the compile options I am using with httpd

Re: [users@httpd] Can somebody help me to understand the strange GET requests logged in access.log and error.log ?

2012-08-13 Thread Pete Houston
On Mon, Aug 13, 2012 at 06:07:20PM +0200, Carlo Traversa wrote: > but I still see GET requests in the access.log > So is there something I did wrong or I didn't understand? The access log will (by default) contain all the requests to the server which are handled by apache, even if that handling is

Re: [users@httpd] What verification does Apache do as part of SSLVerifyClient?

2012-09-09 Thread Pete Houston
On Sun, Sep 09, 2012 at 08:36:30AM -0500, Tom Browder wrote: > So the client cert. does contain the private key? Then its password > is all that is protecting it? No, the key is normally (but not always) kept separately. > Mark, in your experience, what is the best way to distribute client > ce

Re: [users@httpd] Apache 3.4.3 or 3.3.1 Pre-Compiled Versions

2012-09-12 Thread Pete Houston
On Wed, Sep 12, 2012 at 06:07:18AM -0700, Frank Mancini wrote: > Does anyone know where I can get a pre-compiled version for both Linux and > Solaris of Apache 3.4.3 and 3.3.1? Those versions do not exist (yet). A reasonable guess for the former would b

Re: [users@httpd] can't display or download images on new Apache install

2012-09-19 Thread Pete Houston
On Wed, Sep 19, 2012 at 11:04:46AM -0400, Rick Lopez wrote: > However, if I open the index.html file as a file with Firefox it works > fine. I see the following message in the Firefox error console. "security > error: content at 192.168.1.10 may not load or link to > file://usr/local/apache2/images

Re: [users@httpd] can't display or download images on new Apache install

2012-09-19 Thread Pete Houston
On Wed, Sep 19, 2012 at 01:08:32PM -0400, Rick Lopez wrote: > Thanks for the reply. To clarify I am running Apache 2.4.3. I also used > Kompozer to create the index.html file so I assumed it was creating the > correct syntax. Kompozer created this for the embedded jpg file: > > src="file:///usr/lo

Re: [users@httpd] Uploading files to Apache Server

2012-09-24 Thread Pete Houston
On Mon, Sep 24, 2012 at 05:22:11PM +0530, Bhattacharya, Sudip wrote: > Also note that the file uploads will be via a JAVA application (not > servlet/manual uploads). So whatever is the option, it should enable uploads > via a java application. > The files to upload will vary from 1mb to 30mb to u

Re: [users@httpd] INFO: Marking servlet jsp as unavailable

2012-10-10 Thread Pete Houston
Hi Clodan, On Wed, Oct 10, 2012 at 10:38:24AM +0200, majin_clo...@t-online.de wrote: > I use kornak-api which provides a simple servlet-based recommender > application available under the Apache license. It looks like you have sent this to the wrong list. This list is for the Apache web server pr

Re: [users@httpd] How to conditionally enable mod_deflate?

2012-10-19 Thread Pete Houston
This sounds like a job for mod_negotiation to me. Any reason not to use that instead? Pete On Fri, Oct 19, 2012 at 09:14:35PM +0530, Bhattacharya, Sudip wrote: > I need to conditionally enable mod_deflate for clients who send a particular > custom HTTP Request Header. -- Openstrike - improving

Re: [users@httpd] apache 2.4.3 and Require instead of Allow from

2012-10-22 Thread Pete Houston
On Mon, Oct 22, 2012 at 11:44:44PM +0200, Alain Roger wrote: > How can i do to restrict this folder/website to 2 ip addresses (e.g. > 192.168.1.10 and 192.168.2.50) ? Require ip 192.168.1.10 192.168.2.50 as specified in the documentation at http://httpd.apache.org/docs/2.4/mod/mod_authz_c

  1   2   >