Re: simple-conf branch

2005-04-03 Thread Greg Stein
On Sat, Apr 02, 2005 at 02:58:26PM -0500, Joshua Slive wrote:
 Please take a look at
 http://svn.apache.org/repos/asf/httpd/httpd/branches/simple-conf/docs/conf/
 
 This is my long-threatened project to massively simplify the basic 
 httpd.conf by splitting a bunch of stuff out into smaller files in the 
 extra/ directory that are not included by default.

As long as the default is a single file, then I'm cool with this. The key
here is that the gazillion little .conf files are *not* included in the
default .conf file. That would be a pain because changes could involve one
or more of N separate files.

So: given that... I'm very supportive of a smaller default file.

Cheers,
-g

-- 
Greg Stein, http://www.lyra.org/


Re: svn commit: r159797 - in httpd/httpd/branches/simple-conf/docs/conf: extra/httpd-mpm.conf httpd-std.conf.in

2005-04-03 Thread Greg Stein
Euh... don't we need one of those for proper operation? Or do they all
have defaults, so a .conf isn't really needed?

On Sat, Apr 02, 2005 at 07:16:08PM -, [EMAIL PROTECTED] wrote:
 Author: slive
 Date: Sat Apr  2 11:16:07 2005
 New Revision: 159797
 
 URL: http://svn.apache.org/viewcvs?view=revrev=159797
 Log:
 Move mpm config to extra/
 
 Added:
 httpd/httpd/branches/simple-conf/docs/conf/extra/httpd-mpm.conf
 Modified:
 httpd/httpd/branches/simple-conf/docs/conf/httpd-std.conf.in
 
 Added: httpd/httpd/branches/simple-conf/docs/conf/extra/httpd-mpm.conf
 URL: 
 http://svn.apache.org/viewcvs/httpd/httpd/branches/simple-conf/docs/conf/extra/httpd-mpm.conf?view=autorev=159797
 ==
 --- httpd/httpd/branches/simple-conf/docs/conf/extra/httpd-mpm.conf (added)
 +++ httpd/httpd/branches/simple-conf/docs/conf/extra/httpd-mpm.conf Sat Apr  
 2 11:16:07 2005
 @@ -0,0 +1,104 @@
 +#
 +# Server-Pool Size Regulation (MPM specific)
 +# 
 +# Only one of the below sections will be relevant on your
 +# installed httpd.  Use apachectl -l to find out the
 +# active mpm.
 +
 +
 +# prefork MPM
 +# StartServers: number of server processes to start
 +# MinSpareServers: minimum number of server processes which are kept spare
 +# MaxSpareServers: maximum number of server processes which are kept spare
 +# MaxClients: maximum number of server processes allowed to start
 +# MaxRequestsPerChild: maximum number of requests a server process serves
 +IfModule mpm_prefork_module
 +StartServers  5
 +MinSpareServers   5
 +MaxSpareServers  10
 +MaxClients  150
 +MaxRequestsPerChild   0
 +/IfModule
 +
 +# worker MPM
 +# StartServers: initial number of server processes to start
 +# MaxClients: maximum number of simultaneous client connections
 +# MinSpareThreads: minimum number of worker threads which are kept spare
 +# MaxSpareThreads: maximum number of worker threads which are kept spare
 +# ThreadsPerChild: constant number of worker threads in each server process
 +# MaxRequestsPerChild: maximum number of requests a server process serves
 +IfModule mpm_worker_module
 +StartServers  2
 +MaxClients  150
 +MinSpareThreads  25
 +MaxSpareThreads  75 
 +ThreadsPerChild  25
 +MaxRequestsPerChild   0
 +/IfModule
 +
 +# perchild MPM
 +# NumServers: constant number of server processes
 +# StartThreads: initial number of worker threads in each server process
 +# MinSpareThreads: minimum number of worker threads which are kept spare
 +# MaxSpareThreads: maximum number of worker threads which are kept spare
 +# MaxThreadsPerChild: maximum number of worker threads in each server process
 +# MaxRequestsPerChild: maximum number of connections per server process
 +IfModule mpm_perchild_module
 +NumServers5
 +StartThreads  5
 +MinSpareThreads   5
 +MaxSpareThreads  10
 +MaxThreadsPerChild   20
 +MaxRequestsPerChild   0
 +/IfModule
 +
 +# WinNT MPM
 +# ThreadsPerChild: constant number of worker threads in the server process
 +# MaxRequestsPerChild: maximum  number of requests a server process serves
 +IfModule mpm_winnt_module
 +ThreadsPerChild 250
 +MaxRequestsPerChild   0
 +/IfModule
 +
 +# BeOS MPM
 +# StartThreads: how many threads do we initially spawn?
 +# MaxClients:   max number of threads we can have (1 thread == 1 client)
 +# MaxRequestsPerThread: maximum number of requests each thread will process
 +IfModule mpm_beos_module
 +StartThreads10
 +MaxClients  50
 +MaxRequestsPerThread 1
 +/IfModule
 +
 +# NetWare MPM
 +# ThreadStackSize: Stack size allocated for each worker thread
 +# StartThreads: Number of worker threads launched at server startup
 +# MinSpareThreads: Minimum number of idle threads, to handle request spikes
 +# MaxSpareThreads: Maximum number of idle threads
 +# MaxThreads: Maximum number of worker threads alive at the same time
 +# MaxRequestsPerChild: Maximum  number of requests a thread serves. It is 
 +#  recommended that the default value of 0 be set for 
 this
 +#  directive on NetWare.  This will allow the thread to 
 +#  continue to service requests indefinitely.
   
 +IfModule mpm_netware_module
 +ThreadStackSize  65536
 +StartThreads   250
 +MinSpareThreads 25
 +MaxSpareThreads250
 +MaxThreads1000
 +MaxRequestsPerChild  0
 +MaxMemFree 100
 +/IfModule
 +
 +# OS/2 MPM
 +# StartServers: Number of server processes to maintain
 +# MinSpareThreads: Minimum number of idle threads per process, 
 +#  to handle request spikes
 +# MaxSpareThreads: Maximum number of idle threads per process
 +# MaxRequestsPerChild: Maximum number of connections per server process
 

Re: svn commit: r159797 - in httpd/httpd/branches/simple-conf/docs/conf: extra/httpd-mpm.conf httpd-std.conf.in

2005-04-03 Thread André Malo
* Greg Stein wrote:

 Euh... don't we need one of those for proper operation? Or do they all
 have defaults, so a .conf isn't really needed?

Yes, they have (of course ;-).

nd
-- 
Das Verhalten von Gates hatte mir bewiesen, dass ich auf ihn und seine
beiden Gefährten nicht zu zählen brauchte -- Karl May, Winnetou III

Im Westen was neues: http://pub.perlig.de/books.html#apache2


[2.0 PATCH PR#31302] SSI #exec cmd and suexec

2005-04-03 Thread Kaspar Brand
[Seems that my first attempt didn't get through - maybe because I was not 
yet subscribed? I didn't get a bounce message, however. Anyway, here it's 
again.]

It's been almost 2 months since 2.0.53.  Think it is time for 2.0.54 yet?
Any chances that the fix I proposed for PR#31302 (suexec doesn't execute
commands if they're not in the current dir) finds its way into 2.0.54? I
have followed Ryan Bloom's advice of how to fix the issue properly, trying
to be as portable as possible (e.g. by using ap_os_is_path_absolute() and
apr_filepath_merge()). Comments welcome.
The bug was initially submitted on 2004-09-19; there is also a duplicate
(29534) from 2004-06-12.
Thanks,
Kaspar



Do these broken clients still exist?

2005-04-03 Thread Joshua Slive
Does someone with a high-traffic, general-interest web site want to take a 
look through their logs for these user-agent strings.  I don't mind 
keeping them if they make up even 1/100 of a percent of the trafic, but it 
seems silly to keep these extra regexes on every single request if these 
clients don't exist anymore in the wild.

#
# The following directives modify normal HTTP response behavior to
# handle known problems with browser implementations.
#
BrowserMatch Mozilla/2 nokeepalive
BrowserMatch MSIE 4\.0b2; nokeepalive downgrade-1.0 force-response-1.0
BrowserMatch RealPlayer 4\.0 force-response-1.0
BrowserMatch Java/1\.0 force-response-1.0
BrowserMatch JDK/1\.0 force-response-1.0
Joshua.


Re: Do these broken clients still exist?

2005-04-03 Thread Colm MacCarthaigh
On Sun, Apr 03, 2005 at 01:58:56PM -0400, Joshua Slive wrote:
 BrowserMatch Mozilla/2 nokeepalive

I don't know about the rest, but Ask Jeeves spoofs this user-agent in
its webcrawls;

Mozilla/2.0 (compatible; Ask Jeeves/Teoma;
+http://sp.ask.com/docs/about/tech_crawling.html)

Not sure if the crawler supports keepalives, but either way it's a
(somewhat artificial) source of requests matching the useragent.

-- 
Colm MacCárthaighPublic Key: [EMAIL PROTECTED]


Re: Do these broken clients still exist?

2005-04-03 Thread Noah
On Sun, Apr 03, 2005 at 01:58:56PM -0400, Joshua Slive wrote:
 Does someone with a high-traffic, general-interest web site want to take a 
 look through their logs for these user-agent strings.  I don't mind 
 keeping them if they make up even 1/100 of a percent of the trafic, but it 
 seems silly to keep these extra regexes on every single request if these 
 clients don't exist anymore in the wild.

[snip]
 BrowserMatch Mozilla/2 nokeepalive

I still see this; .001% of ~2M requests from the following full UA
strings:

Mozilla/2.0 (compatible; Ask Jeeves/Teoma; 
+http://sp.ask.com/docs/about/tech_crawling.html)
Mozilla/2.0 (compatible; MS FrontPage 4.0)
Mozilla/2.0 (compatible; MS FrontPage 5.0)
Mozilla/2.0 (compatible; MSIE 3.02; Update a; AK; Windows 95)
Mozilla/2.0 (compatible; MSIE 3.02; Windows 95)
Mozilla/2.0 (compatible; MSIE 3.02; Windows CE)
Mozilla/2.0 (compatible; MSIE 3.02; Windows CE; PPC; 240x320) 
BlackBerry7100/4.0.0 Profile/MIDP-2.0 Configuration/CLDC-1.1
Mozilla/2.0 (compatible; MSIE 3.02; Windows CE; PPC; 240x320)
Mozilla/2.0 (compatible; MSIE 3.0; Windows 95)
Mozilla/2.0 (compatible; MSIE 3.0b; AOL 4.0; Windows 3.1)

--n

-- 
huey dd of=/dev/fd0 if=/dev/flippy bs=1024
huey ^^^ Making Flippy Floppy



[2.0 PATCH PR#31302] SSI #exec cmd and suexec

2005-04-03 Thread Kaspar Brand
It's been almost 2 months since 2.0.53.  Think it is time for 2.0.54 yet?
Any chances that the fix I proposed for PR#31302 (suexec doesn't execute 
commands if they're not in the current dir) finds its way into 2.0.54? I 
have followed Ryan Bloom's advice of how to fix the issue properly, trying 
to be as portable as possible (e.g. by using ap_os_is_path_absolute() and 
apr_filepath_merge()). Comments welcome.

The bug was initially submitted on 2004-09-19; there is also a duplicate 
(29534) from 2004-06-12.

Thanks,
Kaspar 



Re: Do these broken clients still exist?

2005-04-03 Thread Greg Stein
On Sun, Apr 03, 2005 at 01:58:56PM -0400, Joshua Slive wrote:
 Does someone with a high-traffic, general-interest web site want to take a 
 look through their logs for these user-agent strings.

I, uh, have just a few logs that I can scan. ;-)

I'll use Blogger/BlogSpot logs, as those will have a wider variety of user
agents than the main Google site. (which is fortunate, as I don't have
access to the main logs anyways)

A week or two of logs should provide good coverage. You never know what
times of day, or days of the week, that a given UA might be active.

 I don't mind
 keeping them if they make up even 1/100 of a percent of the trafic, but it 
 seems silly to keep these extra regexes on every single request if these 
 clients don't exist anymore in the wild.

I'll take a look at some logs tomorrow, and mail back with some results.

Cheers,
-g

-- 
Greg Stein, http://www.lyra.org/


Re: Do these broken clients still exist?

2005-04-03 Thread Ben Collins-Sussman
On Apr 3, 2005, at 7:57 PM, Greg Stein wrote:
On Sun, Apr 03, 2005 at 01:58:56PM -0400, Joshua Slive wrote:
Does someone with a high-traffic, general-interest web site want to 
take a
look through their logs for these user-agent strings.
I, uh, have just a few logs that I can scan. ;-)
Showoff.  :-)