Re: Ploetzliche Haeufung von Hack versuchen

2005-12-19 Thread Jens Wolf
On Mon, 19 Dec 2005 09:10:32 +0100
Jens Wolf [EMAIL PROTECTED] wrote:

 Hi Thomas,
 
 On Mon, 19 Dec 2005 01:47:42 +0100
 Thomas Drebert [EMAIL PROTECTED] wrote:
 
  
  Hallo
  in den letzten Tagen bekomme ich dauernd Hacker Angriffe auf meinen Server,
  irgend wie sieht es aus als wenn jemand ein neues Hackertool in 
  umlaufgebracht
  hat, weil die Angriffe kommen aus der ganzen Welt.
  Hat jemand eine Erklärung für die Häufung?
 
 Es dürfte sich um diesen Worm handeln 
 http://www.heise.de/security/news/meldung/54623
 
 MFG
 Jens

Ups, die Meldung ist ja von 2004. :-)
Dürfte sich aber um einen ähnlichen Wurm handeln.


--
Apache HTTP Server Mailing List users-de
  unsubscribe-Anfragen an [EMAIL PROTECTED]
   sonstige Anfragen an [EMAIL PROTECTED]
--



Re: [EMAIL PROTECTED] Certificate Import into Apache 2.2.0

2005-12-19 Thread Vincent Jong
I'm not an expert in anyway regarding certs or openssl and I'm assuming  
you've compiled apache with ssl support and the cert you're talking about  
is a server cert, you could probably try to edit your httpd.conf and  
httpd-ssl.conf file. The httpd-ssl.conf file is located in conf/extra and  
you can add the path to your cert and/or key in there. In httpd.conf, you  
would uncomment the include line that deals with the httpd-ssl.conf file.  
The line to uncomment would be:


Include conf/extra/httpd-ssl.conf

If that doesn't work, you probably want to convert your .p7b cert to  
something like PEM format and edit those conf files to point to the PEM  
cert. Unfortunately, I don't know much about .pb7 format as the only  
formats I've dealt with are .p12 and .pem certs.


Again, I'm assuming you're talking about a server cert and not a CA cert.

Vincent J.


On Sun, 18 Dec 2005 22:54:15 -0800, Wulf Kaiser  
[EMAIL PROTECTED] wrote:



Dear All,

I have a perhaps simple but nonetheless serious problem. I have build,
installed and configured an Apache 2.2.0 under Solaris 9, and i have a  
valid

certificate file in .p7b format from the DFN CA.

But: How can i import this into Apache?

T.i.A, yours

Wulf Kaiser
IT Services
Web Development | Database Administration
Webmaster www.mpimf-heidelberg.mpg.de
Zentrale Hard- und Softwarebeschaffung

Max-Planck-Institut für medizinische Forschung
Jahnstrasse 29 69120 Heidelberg
Fon +49 6221 486560
Fax +49 6221 486561
Mobil +49 172 6235901




--
Using Opera's revolutionary e-mail client: http://www.opera.com/mail/

-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
 from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] httpd installation on hp-ux 11.11 pa-risc2.0-64bit

2005-12-19 Thread Joe Orton
On Sat, Dec 17, 2005 at 09:39:10AM -0500, Boys Santos wrote:
 I am trying to install httpd version 2.2.0 on an hp-ux 11.11
 pa-risc2.0-64bit box.
 
 Following is the error from make:
 
/bin/sh /tmp/httpd-2.2.0/srclib/apr/libtool --silent --mode=compile cc 
 -
 Ae +Z +DAportable -mt  +DD64 -DHAVE_CONFIG_H -DHPUX11 -D_REENTRANT 
 -D_XOPEN_SOUR
 CE_EXTENDED -D_LARGEFILE64_SOURCE   -I./include 
 -I/tmp/httpd-2.2.0/srclib/apr/in
 clude/arch/unix -I./include/arch/unix -I/tmp/httpd-2.2.0/srclib/apr/include  
 -o
 file_io/unix/open.lo -c file_io/unix/open.c  touch file_io/unix/open.lo
 cc: warning 441: Previous '+DA' or '+DD' option overridden by '+DD64' option.
 cc: file_io/unix/open.c, line 115: error 1588: O_LARGEFILE undefined.
 *** Error exit code 1

That's pretty strange, configure has already checked that O_LARGEFILE is 
available.  Can you upload the srclib/apr/config.log file somewhere or 
send it to me privately?

Please also describe exactly how you ran configure.

joe

-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] mod_cache again

2005-12-19 Thread Henning Meyer
Hello,

I still have the problem that script-generated images do not get cached.

I run apache 2.0.54-5 inside Debian Sarge with mod_fastcgi 2.4.0-5.
What do I need in my configuration to get images cached by mod_cache?
I tought this is enough, but obviously it isn't:

IfModule mod_cache.c
IfModule mod_disk_cache.c
CacheRoot /var/www/cache/
CacheSize 256000
CacheEnable disk /image
/IfModule
CacheDirLevels 5
CacheDirLength 3
/IfModule

What do I do wrong, or how can I find out more about this?

Please help!
Thank you!

Henning

-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] http 2.2.0 install issues

2005-12-19 Thread Joshua Slive
On 12/19/05, Jonathan White [EMAIL PROTECTED] wrote:
 I am trying to get http 2.2.0 running on debian and have the
 following error after installing (I am using the apache 2.2.0 source
 dist):

  /usr/local/apache2.2/bin/apachectl start

 [Sun Dec 18 22:08:17 2005] [warn] (92)Protocol not available: Failed
 to enable APR_TCP_DEFER_ACCEPT

Just a warning; nothing serious.  I believe it means that your kernel
does not support a certain option that apache tries to use, but apache
will fall back to another method.  You can probably get rid of the
warning by using
AcceptFilter http none
See:
http://httpd.apache.org/docs/2.2/mod/core.html#acceptfilter

Joshua.


[EMAIL PROTECTED] Apache and dynu

2005-12-19 Thread Tom



Hello,
 I am new to using apache. I have 
been told by people that in order to run a webserver from my computer I would 
need apache. I also need a dns client, and I was directed toward dynu, 
since its free. I am having a terrible time setting these two up together 
to work. Does anyone know how to configure apache to use dynu, or does 
anyone know another free DNS client type like dynu and how to configure 
it. 
When I tried to configure apache to work with dynu, 
I type in my address (asluttech.dynu.com) and at home I get my routers homepage, 
and here at work outside my network, I get a could not be found error. 

I have forwarded tcp port 80 through the router, 
but I am still not able to make it work. I am using windows 2000 sp4 behind a 
belkin wireless g router.
Any help would be appreciated.
 Thanks,
  
Tom


[EMAIL PROTECTED] Apache as a Rsync HTTP proxy

2005-12-19 Thread Vincent Blondel
Hi all,

Recently I had to set-up our external http proxy (apache 1.3.x) in such
a way that it accepts rsync traffic coming from our lan.

So I decided to add a 'CONNECT' in my httpd.conf. This is all working
now but not so fine as I could expect it. Sometimes the communication is
broken and I get this error message coming from rsync :

 ...
 rsync: connection unexpectedly closed ... [receiver]
 rsync error: error in rsync protocol data stream (code 12) at io.c(443)
 rsync: connection unexpectedly closed ...  [generator]
 rsync error: error in rsync protocol data stream (code 12) at io.c(443)
 ...

I give you below my current config.

 -

ServerType standalone
ServerName sbezoxaa
Listen sbezoxaa:8081
User www
Group www

ServerRoot /var/www

MinSpareServers 16
StartServers 16
MaxSpareServers 16
MaxClients 100
MaxRequestsPerChild 1000

LoadModule rewrite_module/usr/lib/apache/modules/mod_rewrite.so
LoadModule security_module   /usr/local/lib/mod_security.so
LoadModule proxy_module  /usr/lib/apache/modules/libproxy.so
LoadModule mime_magic_module /usr/lib/apache/modules/mod_mime_magic.so

KeepAlive On
MaxKeepAliveRequests 100
KeepAliveTimeout 15
Timeout 300
IdentityCheck Off
HostnameLookups Off
UseCanonicalName On
ServerSignature Off

PidFile run/httpd.pid
LockFilerun/accept.lock
ErrorLog|/usr/local/sbin/cronolog /var/www/logs/%Y/%m/%
d/error.log
LogLevelwarn
LogFormat   %h %l %u %t \%r\ %s %b \%{Referer}i\
\%{User-Agent}i\ combined
CustomLog   |/usr/local/sbin/cronolog /var/www/logs/%Y/%m/%
d/access.log combined

TypesConfig etc/apache/mime.types
DefaultType text/plain

IfModule mod_mime_magic.c
MIMEMagicFile etc/apache/magic
/IfModule

DocumentRoot   /tmp
RewriteLog /dev/null
TransferLog/dev/null
AccessConfig   /dev/null
ResourceConfig /dev/null

Directory /
Options -FollowSymLinks -SymLinksIfOwnerMatch
AllowOverride None
/Directory

ProxyRequests On
ProxyVia On

# Note to add these connection authorization for Rsync
# 443   : https
# 873   : rsync
AllowCONNECT 443 873

Directory proxy:*
Order deny,allow
Allow from all
/Directory

CacheRoot /tmp
CacheSize 1048576
CacheGcInterval 1
CacheMaxExpire 24
CacheLastModifiedFactor 0.1
CacheDefaultExpire 1

ProxyReceiveBufferSize 2048
ProxyIOBufferSize 131072

 -

So if somebody gets any experience with this, I would appreciate some
help to solve this problem.

Regards
Vincent



-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] trying to use mod_proxy with a sso

2005-12-19 Thread François Conil

hello,

After looking for an answer in the archives, I'll try asking here.

I'm currently managing a three servers set up : A sso server, a reverse 
proxy front end and a http backend.


Basically, i'm trying to have things like this work :

proxy.domain/public_app - proxy - backend.local/private_app - calls 
sso - sso.domain/auth - redirects to public_app -proxy.domain/public_app

(the names of the application folders aren't the same).

It works pretty fine, except that the SSO only use the X-Forwarded-for 
header to redirects the user to the right server. Problem is that it 
redirects the user to proxy_server/private_app instead of 
proxy_server/public_app.


Using the same names for private and public app names isn't a solution, 
and I would like to know which header sent to/received by the backend 
server will give me the part after *proxy.domain/* so that I can tweak 
this particular sso implementation to suits my needs.



Thanks by advance,

--
François Conil
Administrateur Systèmes et Réseaux
Lenz Oh man...
Lenz my mom just asked me to rewind the dvd for her




-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
 from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] Which directory

2005-12-19 Thread Bill Belew
Title: Message



I'm trying very hard 
to use the documentation and not ask for help on obvious things, but I find some 
simple things very ambiguous. What directory is the message below 
referring to?

If you can see this, 
it means that the installation of theApache web serversoftware on 
this system was successful. You may now add content to this 
directory
Bill


RE: [EMAIL PROTECTED] Which directory

2005-12-19 Thread Gallagher, Jon
Most webservers have a document root.  This is described in detail and can be 
configured in the httpd.conf file.  However - out of the box, the document root 
for apache httpd is:  apache_installation_dir/htdocs

Where apache_installation_dir is where you installed apache. 

In there you will find the page that renders the  If you can see this, it 
means that the installation of the Apache web server software on this system 
was successful message.

Drop an html file in there and it will render.

The documentation can walk you through change the location of the document 
root, changing permissions, etc.



From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bill Belew
Sent: Monday, December 19, 2005 11:46 AM
To: users@httpd.apache.org
Subject: [EMAIL PROTECTED] Which directory

I'm trying very hard to use the documentation and not ask for help on obvious 
things, but I find some simple things very ambiguous.  What directory is the 
message below referring to?
 
If you can see this, it means that the installation of the
Apache web server
 software on this system was successful. You may now add content to this 
directory
Bill

-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: [EMAIL PROTECTED] Which directory

2005-12-19 Thread Bill Belew
Thank you!  I made that change to the documentroot.  Now can you tell me
what I need to do to give permission per the message below?

Forbidden
You don't have permission to access / on this server.
Apache/2.0.55 (Win32) Server at belewconsulting.com Port 80

Bill


-Original Message-
From: Gallagher, Jon [mailto:[EMAIL PROTECTED] 
Sent: Monday, December 19, 2005 11:52 AM
To: users@httpd.apache.org
Subject: RE: [EMAIL PROTECTED] Which directory


Most webservers have a document root.  This is described in detail and can
be configured in the httpd.conf file.  However - out of the box, the
document root for apache httpd is:  apache_installation_dir/htdocs

Where apache_installation_dir is where you installed apache. 

In there you will find the page that renders the  If you can see this, it
means that the installation of the Apache web server software on this system
was successful message.

Drop an html file in there and it will render.

The documentation can walk you through change the location of the document
root, changing permissions, etc.



From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Bill Belew
Sent: Monday, December 19, 2005 11:46 AM
To: users@httpd.apache.org
Subject: [EMAIL PROTECTED] Which directory

I'm trying very hard to use the documentation and not ask for help on
obvious things, but I find some simple things very ambiguous.  What
directory is the message below referring to?
 
If you can see this, it means that the installation of the Apache web server
 software on this system was successful. You may now add content to this
directory Bill

-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info. To
unsubscribe, e-mail: [EMAIL PROTECTED]
  from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]





-- 
No virus found in this incoming message.
Checked by AVG Free Edition.
Version: 7.1.371 / Virus Database: 267.14.1/206 - Release Date: 12/16/2005



-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: [EMAIL PROTECTED] Which directory

2005-12-19 Thread Gallagher, Jon
Check you're email, I can help off-list :)

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bill Belew
Sent: Monday, December 19, 2005 1:04 PM
To: users@httpd.apache.org
Subject: RE: [EMAIL PROTECTED] Which directory

Thank you!  I made that change to the documentroot.  Now can you tell me
what I need to do to give permission per the message below?

Forbidden
You don't have permission to access / on this server.
Apache/2.0.55 (Win32) Server at belewconsulting.com Port 80

Bill


-Original Message-
From: Gallagher, Jon [mailto:[EMAIL PROTECTED] 
Sent: Monday, December 19, 2005 11:52 AM
To: users@httpd.apache.org
Subject: RE: [EMAIL PROTECTED] Which directory


Most webservers have a document root.  This is described in detail and can
be configured in the httpd.conf file.  However - out of the box, the
document root for apache httpd is:  apache_installation_dir/htdocs

Where apache_installation_dir is where you installed apache. 

In there you will find the page that renders the  If you can see this, it
means that the installation of the Apache web server software on this system
was successful message.

Drop an html file in there and it will render.

The documentation can walk you through change the location of the document
root, changing permissions, etc.



From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Bill Belew
Sent: Monday, December 19, 2005 11:46 AM
To: users@httpd.apache.org
Subject: [EMAIL PROTECTED] Which directory

I'm trying very hard to use the documentation and not ask for help on
obvious things, but I find some simple things very ambiguous.  What
directory is the message below referring to?
 
If you can see this, it means that the installation of the Apache web server
 software on this system was successful. You may now add content to this
directory Bill

-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info. To
unsubscribe, e-mail: [EMAIL PROTECTED]
  from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]





-- 
No virus found in this incoming message.
Checked by AVG Free Edition.
Version: 7.1.371 / Virus Database: 267.14.1/206 - Release Date: 12/16/2005



-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] LDAP and Firefox

2005-12-19 Thread Matt Weston

I have configured LDAP authentication for a particular section of our website 
and when I try to access this page in FireFox it tends to take quite a bit 
longer to load than when you use IE or Opera with the same website.  Does 
anyone know a good reason and/or fix for this?




-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] LDAP and Firefox

2005-12-19 Thread Alfred Vahau

Matt Weston wrote:


I have configured LDAP authentication for a particular section of our website 
and when I try to access this page in FireFox it tends to take quite a bit 
longer to load than when you use IE or Opera with the same website.  Does 
anyone know a good reason and/or fix for this?




-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
 from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


 


Hi,
Is the response time still long if you disable IPv6 in firefox?

Alfred,


-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
 from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] 403 forbidden

2005-12-19 Thread Benjamin Adams

I'm trying to step up mod_userdir
It works for people on the default home directory.  But most of the  
people are located on a raid through a ln.

/users/username - /Volumes/Raid/users/username/

If I type localhosst/~raiduser/
I get 403 forbidden but for people with the home dir on the default  
location the mon_userdir works fine.


httpd.conf:
IfModule mod_userdir.c
UserDir Sites
/IfModule

Also tried:
Directory /Raid/users/*/Sites
   AllowOverride FileInfo AuthConfig Limit
Options MultiViews Indexes SymLinksIfOwnerMatch IncludesNoExec
 Limit GET POST OPTIONS PROPFIND
Order allow,deny
Allow from all
/Limit
LimitExcept GET POST OPTIONS PROPFIND
Order deny,allow
Deny from all
/LimitExcept
/Directory

help would be great:
The OS is Mac 10.4.3 apache 1.3.33

When logining in to the system, my home dir works and I'm on the RAID
I see why this is not working since I'm linking the home dir to the  
RAID and not just the Site dir


---Thanks for any help




-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
 from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] https RewriteRule before authentication

2005-12-19 Thread Diana Shepard
Title: https RewriteRule before authentication






I am running Apache 2.0.53 on Sun Solaris 9.


I am trying to force the use of https for a particular web site. 

I've done:


VirtualHost *:80

ServerName www.somewhere.com

RewriteEngine On

RewriteCond %{REQUEST_URI} /somestring/

RewriteRule ^(.*)$ https://www.somewhere.com/$1

/VirtualHost


The problem is that the user must first be authenticated against an ldap

and that password authentication happens before the redirect;

defeats the whole purpose. The purpose is to encrypt the login to the ldap.


Any suggestions?


Diana Shepard

University of Colorado, Boulder

303-492-9201




Diana Shepard

University of Colorado

University Management Systems

Unix System Admin

[EMAIL PROTECTED]

303-492-9201





Re: [EMAIL PROTECTED] https RewriteRule before authentication

2005-12-19 Thread Joshua Slive
On 12/19/05, Diana Shepard [EMAIL PROTECTED] wrote:


 I am running Apache 2.0.53 on Sun Solaris 9.

 I am trying to force the use of https for a particular web site.
 I've done:


 VirtualHost *:80
 ServerName www.somewhere.com
 RewriteEngine On
 RewriteCond %{REQUEST_URI} /somestring/
 RewriteRule ^(.*)$ https://www.somewhere.com/$1
 /VirtualHost

 The problem is that the user must first be authenticated against an ldap
 and that password authentication happens before the redirect;
 defeats the whole purpose. The purpose is to encrypt the login to the ldap.

 Any suggestions?

Scope the login directives inside the VirtualHost :443 section.

Joshua.


Re: [EMAIL PROTECTED] 403 forbidden

2005-12-19 Thread Joshua Slive
On 12/19/05, Benjamin Adams [EMAIL PROTECTED] wrote:

 If I type localhosst/~raiduser/
 I get 403 forbidden but for people with the home dir on the default
 location the mon_userdir works fine.


Start by checking the error log.

Joshua.


[EMAIL PROTECTED] user nobody group nobody??

2005-12-19 Thread Arthur DiSegna
Hi,

 

I'm wondering about the necessity of placing User Nobody and Group Nobody lines 
in httpd.conf. 

 

I loaded a high performance type httpd.conf file and these values are left out. 
Apache still runs the initial process as root with all child processes run 
under nobody. 

 

Is it even necessary to specify the user and group values in an httpd.conf file 
(unless you want something different)?

 

Thanks

 


Re: [EMAIL PROTECTED] user nobody group nobody??

2005-12-19 Thread Joshua Slive
On 12/19/05, Arthur DiSegna [EMAIL PROTECTED] wrote:
 I'm wondering about the necessity of placing User Nobody and Group Nobody 
 lines in httpd.conf.

 I loaded a high performance type httpd.conf file and these values are left 
 out. Apache still runs the initial process as root with all child processes 
 run under nobody.

 Is it even necessary to specify the user and group values in an httpd.conf 
 file (unless you want something different)?

Not really.  To see how a directive behaves when it is omitted from
the config file, check the Default setting in the docs:
http://httpd.apache.org/docs/2.2/mod/mpm_common.html#user
http://httpd.apache.org/docs/2.2/mod/mpm_common.html#group
In the case of User/Group the default is #-1, which will work fine on
some OSes and not so well on others.

Joshua.


Re: [EMAIL PROTECTED] Virtual Hosting and SSL

2005-12-19 Thread Jerry Baker

Jerry Baker wrote:
Is there 
a way to configure a vhost so that the regular access and SSL access 
use the same configuration (other than using config file includes)?


I guess another way of putting it is, I am looking to see if it is 
possible to just tell Apache that anything on port 443 is to be treated 
as SSL and anything on port 80 is to be treated as normal HTTP? It seems 
awkward and clumsy to have to have two virtual hosts for every real 
virtual host just to include SSL.


--
Jerry Baker

-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
 from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] RedirectMatch

2005-12-19 Thread Ed Sawicki

I'm administering an Apache server that runs PHP-based
Webapps that I have not written and cannot change. These
Webapps are being successfully attacked. Here's an
example from the log:

66.57.121.127 - - [19/Dec/2005:19:50:46 -0800] GET
/phplive/image_tracker.php?l=Bobx=1deptid=0page=
http%3A//www.pcbpro.com/pcb-quote.php%3FWT.mc_id%3D
psepi3%26referrer%3Dhttp%253a%252f%252fz-quest.com
%252fgo.php%253fidUser%253d36%2526z%253dasaphczzhihd
%2526idXmlFeed%253d37%2526idKeyword%253d145%2526
idSearchStatus%253d2%2526st%253d%2526url%253duggc
%253a%252f%252fgkpyvpx.rcvybg.pbz%252fpyvpx.nfck
%2540aoavhy%2540x%253dryrpgebavpf%2540aoaphy%2540o
%253d700%2540aoaphy%2540c%253drcvybg%2540aoaphy
%2540f%253dmdhrfgz%2540aoaphy%2540cbf%253d1%2540aoaphy
%2540g%253d24%2540aoaphy%2540xvq%253dQP8N5Q43-Q517-40O0-
87Q9-P281S6QN0458%2540aoaphy%2540rc%253d255%2540aoaphy
%2540fvq%253d815O3P57-3PS6-41S0-80S9-N79084865R39%2540
aoaphy%2540y%253duggc%253a%2540aoamhy%25402S%2540aoamhy
%25402Sjjj.cpoceb.pbz%2540aoamhy%25402Scpo-dhbgr.cuc
%2540aoamhy%25403SJG.zp_vq%253dcfrcv3%2526ts
%253danaihxzszxhdzahczmzh%2526rb%253daaaphfhpzf
%2526is%253d66%25252E57%25252E121%25252E127%2526
idDomain%253d0unique=1135050643687 HTTP/1.1 200 43

In this example, I'd like to detect the string go.php
and redirect the request elsewhere. I've tried to
use RedirectMatch but nothing I've tried works.
Here's just one example of the many, many statements
I've tried:

RedirectMatch   301 (.*)go\.phphttp://127.0.0.1

This is Apache 2.0.46 with mod_alias loaded.

Ed

-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
 from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] Upgrading to Apache/2.0.54 from 1.3.26

2005-12-19 Thread Gerry Danen
I have set up a new server and adjusted the config files, but I keep
getting connection refused. Been chewing on this for some time now.
Does anybody have any suggestions?

Many thanks


--
Gerry
http://portal.danen.org/

-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] Upgrading to Apache/2.0.54 from 1.3.26

2005-12-19 Thread Alfred Vahau

Hi,
Is Apache running at all?
If Apache is running, what happens if you explicitly set Listen your ip 
address:80 in the conf file and then try to access

the index page from the browser

http://your ip address/index.html

Alfred,

Gerry Danen wrote:


I have set up a new server and adjusted the config files, but I keep
getting connection refused. Been chewing on this for some time now.
Does anybody have any suggestions?

Many thanks


--
Gerry
http://portal.danen.org/

-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
 from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


 



-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
 from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]