[EMAIL PROTECTED] Telling one IP address 404 Nothing found

2007-08-23 Thread Steve Swift
Is it possible to block a specific IP address such that they get 404 Not
found no matter what URL they try?

I don't want to use Deny From or other IP address blocking schemes,
because that will just alert them to the fact that I have my shields up.
I just want this particular IP address to think that my website is
completely empty.
And yes, it is a fixed IP address, so it's worth doing. It will cause them a
lot more grief to negotiate a different IP address, and hopefully they will
abandon their probing.

Then they'll stop pestering my server with request that all fail

-- 
Steve Swift
http://www.swiftys.org.uk


Re: [EMAIL PROTECTED] Telling one IP address 404 Nothing found

2007-08-23 Thread Vincent Bray
On 23/08/07, Steve Swift [EMAIL PROTECTED] wrote:
 Is it possible to block a specific IP address such that they get 404 Not
 found no matter what URL they try?

 I don't want to use Deny From or other IP address blocking schemes,
 because that will just alert them to the fact that I have my shields up.
 I just want this particular IP address to think that my website is
 completely empty.
 And yes, it is a fixed IP address, so it's worth doing. It will cause them a
 lot more grief to negotiate a different IP address, and hopefully they will
 abandon their probing.

 Then they'll stop pestering my server with request that all fail

Ok, then let's ignore proper http and try:

RewriteEngine On
RewriteCond ${REMOTE_ADDR} 1\.2\.3\.4
RewriteRule ^ - [R=404]

-- 
noodl

-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] Telling one IP address 404 Nothing found

2007-08-23 Thread Jeff Peng

 Original-Nachricht 
 Datum: Thu, 23 Aug 2007 14:54:46 +0700
 Von: Vincent Bray [EMAIL PROTECTED]
 An: users@httpd.apache.org
 Betreff: Re: [EMAIL PROTECTED] Telling one IP address 404 Nothing found

 On 23/08/07, Steve Swift [EMAIL PROTECTED] wrote:
  Is it possible to block a specific IP address such that they get 404
 Not
  found no matter what URL they try?
 
  I don't want to use Deny From or other IP address blocking schemes,
  because that will just alert them to the fact that I have my shields up.
  I just want this particular IP address to think that my website is
  completely empty.
  And yes, it is a fixed IP address, so it's worth doing. It will cause
 them a
  lot more grief to negotiate a different IP address, and hopefully they
 will
  abandon their probing.
 
  Then they'll stop pestering my server with request that all fail
 
 Ok, then let's ignore proper http and try:
 
 RewriteEngine On
 RewriteCond ${REMOTE_ADDR} 1\.2\.3\.4
 RewriteRule ^ - [R=404]
 

I'm not sure but would this reject IP like 11.2.3.44?since this also match the 
regex 1\.2\.3\.4
or set RewriteCond ${REMOTE_ADDR} ^1\.2\.3\.4$ ?
-- 
GMX FreeMail: 1 GB Postfach, 5 E-Mail-Adressen, 10 Free SMS.
Alle Infos und kostenlose Anmeldung: http://www.gmx.net/de/go/freemail

-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] Telling one IP address 404 Nothing found

2007-08-23 Thread Vincent Bray
On 23/08/07, Jeff Peng [EMAIL PROTECTED] wrote:
 I'm not sure but would this reject IP like 11.2.3.44?since this also match 
 the regex 1\.2\.3\.4
 or set RewriteCond ${REMOTE_ADDR} ^1\.2\.3\.4$ ?

Yep, good point. Use the anchors.

-- 
noodl

-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] mod_rewrite query

2007-08-23 Thread Vincent Bray
On 23/08/07, Bhavin Patel [EMAIL PROTECTED] wrote:
 Basically I have two webservers in which one of is Apache 2.0.52 webserver
 used for proxy server.

That's ancient. Can't you upgrade?

 Now other server internally servers the request and I need to rewrite url by
 mod_rewrite.

 But the thing is if I use both mod_rewrite and mod_proxy in proxy server ..
 mod_rewrite is not working as proxy redirect request to other webserver thus
 rules on proxy server for mod_rewrite is not working.

See [P] in the documentation for RewriteRule flags. It is used to
proxy the rewritten url.

-- 
noodl

-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] Telling one IP address 404 Nothing found

2007-08-23 Thread Steve Swift
Thanks for all the suggestions. I'll wait for a suitable time to reload our
server, and start off by blocking myself, from our test virtual host.

Incidentally, I forgot one part of my original plan.  I presume this will
get logged in our access/error logs? I don't suppose there's a way to stop
that.

On 23/08/07, Vincent Bray [EMAIL PROTECTED] wrote:

 Yep, good point. Use the anchors.


-- 
Steve Swift
http://www.swiftys.org.uk


Re: [EMAIL PROTECTED] Telling one IP address 404 Nothing found

2007-08-23 Thread Vincent Bray
On 23/08/07, Steve Swift [EMAIL PROTECTED] wrote:
 Thanks for all the suggestions. I'll wait for a suitable time to reload our
 server, and start off by blocking myself, from our test virtual host.

 Incidentally, I forgot one part of my original plan.  I presume this will
 get logged in our access/error logs? I don't suppose there's a way to stop
 that.

Indeed. I don't believe there's a way to conditionally log errors,
though plenty of people wish there were.

-- 
noodl

-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] Telling one IP address 404 Nothing found

2007-08-23 Thread Jeff Peng

 Original-Nachricht 
 Datum: Thu, 23 Aug 2007 10:25:03 +0100
 Von: Steve Swift [EMAIL PROTECTED]
 An: users@httpd.apache.org
 Betreff: Re: [EMAIL PROTECTED] Telling one IP address 404 Nothing found

 Incidentally, I forgot one part of my original plan.  I presume this will
 get logged in our access/error logs? I don't suppose there's a way to stop
 that.

I'm not sure if Apache's default config directive can do this.
But for me,I once meet some more complicated filter conditions than yours.Then 
I wrote an Apache module for it.It's simple to write an Apache module if you're 
familiar with its API (C API or modperl).In modperl you can use 
$r-log_error(...) to write error_log.
Good luck!



-- 
Ist Ihr Browser Vista-kompatibel? Jetzt die neuesten 
Browser-Versionen downloaden: http://www.gmx.net/de/go/browser

-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] Apache Config Problem

2007-08-23 Thread Junaid Arshad
Hi All,

I am trying to setup a SP on linux with apache2.0.59 and Shib SPv1.3.
The portal is a gridsphere portal so I have mod_jk to connect apache
and tomcat.

When I try to navigate the server it comes up with the following
error. I have tried to google it but nothing comes out, also the
shibd.log does not show any error information. Can anyone please
help...


Forbidden

You don't have permission to access /Shibboleth.sso/SAML/POST on this server.


I have sent it to shibboleth mailing list and the response I got was
that it is a apache config problem not a shibboleth one

Thanks!

junaid

-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] monitoring tools

2007-08-23 Thread Melanie Pfefer
hi,

My objective is to monitor apache server.

I installed webalyzer and is working fine. However, I
have these 3 questions:

1. should i run webalizer for each time I need new
stats?
2. how to log bad requests, timed-out requests...
3. I have another apache on the same machine. Can this
tool monitor a second apache?

I am looking also for a tool that monitors the
resources (cpu, ram,io...). Do you know if webalizer
can do such things (tho I doubt). Any other tool or
apache module that can report such info?

thanks.


  ___ 
Want ideas for reducing your carbon footprint? Visit Yahoo! For Good  
http://uk.promotions.yahoo.com/forgood/environment.html

-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] OpenBSD 4.1 CGI issues

2007-08-23 Thread Israel Brewster
First off, I apologize for asking a question that I know you get a  
lot, but I have just spent the last hour and a half beating my head  
against the wall and searching the internet trying to find a solution  
with no luck.


Short version: I have an existing OpenBSD 4.0 box on which Apache  
(version 1.3.29) is working properly, including execution of CGI  
scripts. I am trying to move to a new machine with OpenBSD 4.1, so I  
started with a fresh OpenBSD 4.1 install, which comes with the same  
version of Apache as 4.0, and copied the httpd.conf file over from my  
old machine. After starting the web server, however, I found that it  
could not run any CGI scripts- always just giving me the following  
error:


[Thu Aug 23 08:45:40 2007] [error] [client 127.0.0.1] Premature end  
of script headers: /cgi-bin/test-cgi


The details: Aside from being OpenBSD 4.1, the new box is set up the  
same as the old one. I have checked and double checked the  
permissions on both the cgi files, including the test cgi included  
with the install, as well as the CGI folder. The test-cgi, as well as  
the printenv both run fine from a terminal window. I tried reverting  
to the factory default httpd.conf, with no luck. The permissions on  
the contents of the cgi-bin folder are as follows:


ls -l /var/www/cgi-bin/
total 212
--  1 root  bin 99072 Mar 10 16:41 bgplg
drwxr-xr-x  2 root  daemon512 Aug 23 07:59 nagios
-rwxrwxrwx  1 root  bin   268 Mar 10 16:32 printenv
-rwxrwxrwx  1 root  bin   757 Mar 10 16:32 test-cgi

the cgi-bin folder itself has 755 permissions. The relevant section  
from the httpd.conf file is as follows:


ScriptAlias /cgi-bin/ /var/www/cgi-bin/

#
# @@ServerRoot@@/cgi-bin should be changed to whatever your  
ScriptAliased

# CGI directory exists, if you have that configured.
#
Directory /var/www/cgi-bin
AllowOverride None
Options none
Order allow,deny
Allow from all
/Directory

I have tried adding an AddHandler cgi-script .cgi directive to that  
block, as one webpage I found suggested, as well as changing the  
Option none to Options ExecCGI. I did, of course, restart the  
server between each configuration change. I have also tried with  
various different CGI scripts, most of which come from a fresh  
install. Nothing seems to make any difference- I still get the  
premature end of script headers error. If this was linux, i'd say  
check the SELinux settings, but it isn't. What am I missing here?


---
Israel Brewster
Computer Support Technician
Frontier Flying Service Inc.
5245 Airport Industrial Rd
Fairbanks, AK 99709
(907) 450-7250 x293
---



-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
 from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] OpenBSD 4.1 CGI issues

2007-08-23 Thread Joshua Slive
On 8/23/07, Israel Brewster [EMAIL PROTECTED] wrote:
 First off, I apologize for asking a question that I know you get a
 lot, but I have just spent the last hour and a half beating my head
 against the wall and searching the internet trying to find a solution
 with no luck.

 Short version: I have an existing OpenBSD 4.0 box on which Apache
 (version 1.3.29) is working properly, including execution of CGI
 scripts. I am trying to move to a new machine with OpenBSD 4.1, so I
 started with a fresh OpenBSD 4.1 install, which comes with the same
 version of Apache as 4.0, and copied the httpd.conf file over from my
 old machine. After starting the web server, however, I found that it
 could not run any CGI scripts- always just giving me the following
 error:

 [Thu Aug 23 08:45:40 2007] [error] [client 127.0.0.1] Premature end
 of script headers: /cgi-bin/test-cgi

It is always dangerous to give any advice about OpenBSD's apache,
because it is not true apache.org apache, but a hacked-up version
that was frozen in time years ago when Theo decided he didn't like the
Apache 2 License.

But anyway, this problem is fairly standard and is addressed here:
http://httpd.apache.org/docs/1.3/howto/cgi.html#butitsstillnotworking

The error means that apache is perfectly happy to launch your CGI
script, but the CGI is failing in some way.

The first thing to try is running the CGI from the command line:
cd /path/to/cgi-bin
./test-cgi

Joshua.


 The details: Aside from being OpenBSD 4.1, the new box is set up the
 same as the old one. I have checked and double checked the
 permissions on both the cgi files, including the test cgi included
 with the install, as well as the CGI folder. The test-cgi, as well as
 the printenv both run fine from a terminal window. I tried reverting
 to the factory default httpd.conf, with no luck. The permissions on
 the contents of the cgi-bin folder are as follows:

 ls -l /var/www/cgi-bin/
 total 212
 --  1 root  bin 99072 Mar 10 16:41 bgplg
 drwxr-xr-x  2 root  daemon512 Aug 23 07:59 nagios
 -rwxrwxrwx  1 root  bin   268 Mar 10 16:32 printenv
 -rwxrwxrwx  1 root  bin   757 Mar 10 16:32 test-cgi

 the cgi-bin folder itself has 755 permissions. The relevant section
 from the httpd.conf file is as follows:

  ScriptAlias /cgi-bin/ /var/www/cgi-bin/

  #
  # @@ServerRoot@@/cgi-bin should be changed to whatever your
 ScriptAliased
  # CGI directory exists, if you have that configured.
  #
  Directory /var/www/cgi-bin
  AllowOverride None
  Options none
  Order allow,deny
  Allow from all
  /Directory

 I have tried adding an AddHandler cgi-script .cgi directive to that
 block, as one webpage I found suggested, as well as changing the
 Option none to Options ExecCGI. I did, of course, restart the
 server between each configuration change. I have also tried with
 various different CGI scripts, most of which come from a fresh
 install. Nothing seems to make any difference- I still get the
 premature end of script headers error. If this was linux, i'd say
 check the SELinux settings, but it isn't. What am I missing here?

 ---
 Israel Brewster
 Computer Support Technician
 Frontier Flying Service Inc.
 5245 Airport Industrial Rd
 Fairbanks, AK 99709
 (907) 450-7250 x293
 ---



 -
 The official User-To-User support forum of the Apache HTTP Server Project.
 See URL:http://httpd.apache.org/userslist.html for more info.
 To unsubscribe, e-mail: [EMAIL PROTECTED]
   from the digest: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]



-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: [EMAIL PROTECTED] monitoring tools

2007-08-23 Thread Jeff Beard
Sorry, I haven't used Webalizer for while so I'm no use to you on that
point.

I use a tool called monit (http://www.tildeslash.com/monit ) to monitor the
run state of various system daemons (this is for UNIX and UNIX like
systems). I've used Cacti (http://cacti.net) in the past for tracking and
graphing system performance metrics. I've also used munin
(http://munin.projects.linpro.no). You can look on http://www.howtoforge.com
(not affiliated) for recipes for setting up a number of tools that do these
types of things.

--Jeff

 -Original Message-
 From: Melanie Pfefer [mailto:[EMAIL PROTECTED]
 Sent: Thursday, August 23, 2007 9:47 AM
 To: users@httpd.apache.org
 Subject: [EMAIL PROTECTED] monitoring tools
 
 hi,
 
 My objective is to monitor apache server.
 
 I installed webalyzer and is working fine. However, I
 have these 3 questions:
 
 1. should i run webalizer for each time I need new
 stats?
 2. how to log bad requests, timed-out requests...
 3. I have another apache on the same machine. Can this
 tool monitor a second apache?
 
 I am looking also for a tool that monitors the
 resources (cpu, ram,io...). Do you know if webalizer
 can do such things (tho I doubt). Any other tool or
 apache module that can report such info?
 
 thanks.
 
 
   ___
 Want ideas for reducing your carbon footprint? Visit Yahoo! For Good
 http://uk.promotions.yahoo.com/forgood/environment.html
 
 -
 The official User-To-User support forum of the Apache HTTP Server Project.
 See URL:http://httpd.apache.org/userslist.html for more info.
 To unsubscribe, e-mail: [EMAIL PROTECTED]
   from the digest: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]



-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] OpenBSD 4.1 CGI issues

2007-08-23 Thread Dragon

Israel Brewster wrote:

First off, I apologize for asking a question that I know you get a
lot, but I have just spent the last hour and a half beating my head
against the wall and searching the internet trying to find a solution
with no luck.

Short version: I have an existing OpenBSD 4.0 box on which Apache
(version 1.3.29) is working properly, including execution of CGI
scripts. I am trying to move to a new machine with OpenBSD 4.1, so I
started with a fresh OpenBSD 4.1 install, which comes with the same
version of Apache as 4.0, and copied the httpd.conf file over from my
old machine. After starting the web server, however, I found that it
could not run any CGI scripts- always just giving me the following
error:

[Thu Aug 23 08:45:40 2007] [error] [client 127.0.0.1] Premature end
of script headers: /cgi-bin/test-cgi

The details: Aside from being OpenBSD 4.1, the new box is set up the
same as the old one. I have checked and double checked the
permissions on both the cgi files, including the test cgi included
with the install, as well as the CGI folder. The test-cgi, as well as
the printenv both run fine from a terminal window. I tried reverting
to the factory default httpd.conf, with no luck. The permissions on
the contents of the cgi-bin folder are as follows:

ls -l /var/www/cgi-bin/
total 212
--  1 root  bin 99072 Mar 10 16:41 bgplg
drwxr-xr-x  2 root  daemon512 Aug 23 07:59 nagios
-rwxrwxrwx  1 root  bin   268 Mar 10 16:32 printenv
-rwxrwxrwx  1 root  bin   757 Mar 10 16:32 test-cgi

the cgi-bin folder itself has 755 permissions. The relevant section
from the httpd.conf file is as follows:

ScriptAlias /cgi-bin/ /var/www/cgi-bin/

#
# @@ServerRoot@@/cgi-bin should be changed to whatever your
ScriptAliased
# CGI directory exists, if you have that configured.
#
Directory /var/www/cgi-bin
AllowOverride None
Options none
Order allow,deny
Allow from all
/Directory

I have tried adding an AddHandler cgi-script .cgi directive to that
block, as one webpage I found suggested, as well as changing the
Option none to Options ExecCGI. I did, of course, restart the
server between each configuration change. I have also tried with
various different CGI scripts, most of which come from a fresh
install. Nothing seems to make any difference- I still get the
premature end of script headers error. If this was linux, i'd say
check the SELinux settings, but it isn't. What am I missing here?

 End original message. -

Are you sure that this new version of BSD doesn't have something 
similar to selinux that may be blocking your access?


It sure matches the symptoms one gets when selinux is the culprit on 
a linux installation.


Dragon

~~~
 Venimus, Saltavimus, Bibimus (et naribus canium capti sumus)
~~~


-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
 from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] Forbidden error on .exe files in apache on RH 4.0

2007-08-23 Thread Ali, Saqib
Hello All,

I just installed a RH 4.0 box with apache, and I am getting a
Forbidden error when trying to d/l .EXE files.

The log says:
Options ExecCGI is off in this directory: /path/path/file.exe

Any thoughts?
Saqib

-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] Forbidden error on .exe files in apache on RH 4.0

2007-08-23 Thread Joshua Slive
On 8/23/07, Ali, Saqib [EMAIL PROTECTED] wrote:
 Hello All,

 I just installed a RH 4.0 box with apache, and I am getting a
 Forbidden error when trying to d/l .EXE files.

 The log says:
 Options ExecCGI is off in this directory: /path/path/file.exe

In httpd.conf, you have an Options directive applying to that path (or
a parent directory) that does not include the ExecCGI option.

Joshua.

-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] Apache 2 on Windows

2007-08-23 Thread Steffen

Just to let you know.

The Apache Lounge is pulled down, because we have some (legal) issues.

See http://www.apachelounge.com/

Sorry that we have to leave a lot of Windows users  in the dark.

Hopefully we can come back. I keep you informed.


Steffen








-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
 from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] Forbidden error on .exe files in apache on RH 4.0

2007-08-23 Thread Ali, Saqib
but this is not a CGI file.

On 8/23/07, Joshua Slive [EMAIL PROTECTED] wrote:
 On 8/23/07, Ali, Saqib [EMAIL PROTECTED] wrote:
  Hello All,
 
  I just installed a RH 4.0 box with apache, and I am getting a
  Forbidden error when trying to d/l .EXE files.
 
  The log says:
  Options ExecCGI is off in this directory: /path/path/file.exe

 In httpd.conf, you have an Options directive applying to that path (or
 a parent directory) that does not include the ExecCGI option.

 Joshua.

 -
 The official User-To-User support forum of the Apache HTTP Server Project.
 See URL:http://httpd.apache.org/userslist.html for more info.
 To unsubscribe, e-mail: [EMAIL PROTECTED]
   from the digest: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]




-- 
Saqib Ali, CISSP, ISSAP
http://www.full-disk-encryption.net

-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] Forbidden error on .exe files in apache on RH 4.0

2007-08-23 Thread Joshua Slive
On 8/23/07, Ali, Saqib [EMAIL PROTECTED] wrote:
 but this is not a CGI file.

Well, they are marked as such in your config file. You likely have an
AddHandler or AddType directive designating .exe files as cgi scripts.
You'll need to get rid of that if you want them downloaded without
processing.

Joshua.

-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] OpenBSD 4.1 CGI issues

2007-08-23 Thread Israel Brewster

On Aug 23, 2007, at 9:56 AM, Joshua Slive wrote:

On 8/23/07, Israel Brewster [EMAIL PROTECTED] wrote:

First off, I apologize for asking a question that I know you get a
lot, but I have just spent the last hour and a half beating my head
against the wall and searching the internet trying to find a solution
with no luck.

Short version: I have an existing OpenBSD 4.0 box on which Apache
(version 1.3.29) is working properly, including execution of CGI
scripts. I am trying to move to a new machine with OpenBSD 4.1, so I
started with a fresh OpenBSD 4.1 install, which comes with the same
version of Apache as 4.0, and copied the httpd.conf file over from my
old machine. After starting the web server, however, I found that it
could not run any CGI scripts- always just giving me the following
error:

[Thu Aug 23 08:45:40 2007] [error] [client 127.0.0.1] Premature end
of script headers: /cgi-bin/test-cgi


[...snip...]
But anyway, this problem is fairly standard and is addressed here:
http://httpd.apache.org/docs/1.3/howto/cgi.html#butitsstillnotworking


As I mentioned in the first line, I was aware of that fact, and had  
been searching the internet for a solution and trying different  
things for the last hour and a half before asking for help :-)




The error means that apache is perfectly happy to launch your CGI
script, but the CGI is failing in some way.

The first thing to try is running the CGI from the command line:
cd /path/to/cgi-bin
./test-cgi

Joshua.



[...snip...]
The test-cgi, as well as
the printenv both run fine from a terminal window.


Yep, as I also mentioned, tried that. Worked fine. I did manage to  
fix the problem though-turns out that the problem was with Apache  
being chrooted. The first line of the test script was looking for / 
bin/sh, which, when chrooted, Apache could not find. I thought I had  
checked this against my functioning box, but apparently I was looking  
at the wrong box or something. At any rate, un-chrooting Apache fixed  
the issue. Thanks for the help attempt!


---
Israel Brewster
Computer Support Technician
Frontier Flying Service Inc.
5245 Airport Industrial Rd
Fairbanks, AK 99709
(907) 450-7250 x293
---


I tried reverting
to the factory default httpd.conf, with no luck. The permissions on
the contents of the cgi-bin folder are as follows:

ls -l /var/www/cgi-bin/
total 212
--  1 root  bin 99072 Mar 10 16:41 bgplg
drwxr-xr-x  2 root  daemon512 Aug 23 07:59 nagios
-rwxrwxrwx  1 root  bin   268 Mar 10 16:32 printenv
-rwxrwxrwx  1 root  bin   757 Mar 10 16:32 test-cgi

the cgi-bin folder itself has 755 permissions. The relevant section
from the httpd.conf file is as follows:

 ScriptAlias /cgi-bin/ /var/www/cgi-bin/

 #
 # @@ServerRoot@@/cgi-bin should be changed to whatever your
ScriptAliased
 # CGI directory exists, if you have that configured.
 #
 Directory /var/www/cgi-bin
 AllowOverride None
 Options none
 Order allow,deny
 Allow from all
 /Directory

I have tried adding an AddHandler cgi-script .cgi directive to that
block, as one webpage I found suggested, as well as changing the
Option none to Options ExecCGI. I did, of course, restart the
server between each configuration change. I have also tried with
various different CGI scripts, most of which come from a fresh
install. Nothing seems to make any difference- I still get the
premature end of script headers error. If this was linux, i'd say
check the SELinux settings, but it isn't. What am I missing here?

---
Israel Brewster
Computer Support Technician
Frontier Flying Service Inc.
5245 Airport Industrial Rd
Fairbanks, AK 99709
(907) 450-7250 x293
---



-
The official User-To-User support forum of the Apache HTTP Server  
Project.

See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




-
The official User-To-User support forum of the Apache HTTP Server  
Project.

See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
 from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] Forbidden error on .exe files in apache on RH 4.0

2007-08-23 Thread Ali, Saqib
Hi Joshua,

Thank you very much :) That resolved the issue. Your posting are
indeed very helpful.

Saqib Ali


On 8/23/07, Joshua Slive [EMAIL PROTECTED] wrote:
 On 8/23/07, Ali, Saqib [EMAIL PROTECTED] wrote:
  but this is not a CGI file.

 Well, they are marked as such in your config file. You likely have an
 AddHandler or AddType directive designating .exe files as cgi scripts.
 You'll need to get rid of that if you want them downloaded without
 processing.

 Joshua.

 -
 The official User-To-User support forum of the Apache HTTP Server Project.
 See URL:http://httpd.apache.org/userslist.html for more info.
 To unsubscribe, e-mail: [EMAIL PROTECTED]
   from the digest: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]




-- 
Saqib Ali, CISSP, ISSAP
http://www.full-disk-encryption.net

-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] config timefmt not working without a filename

2007-08-23 Thread Kateri Abeyta
We are running Apache HTTP Server Version 2.2.
I'm using the following code:

!--#config timefmt=%A, %B %d, %Y --
!--#echo var=DATE_LOCAL --

in which the time format works fine when I access the page as
http://denverlibrary.org/index.html , but when I access the page from
http://denverlibrary.org (without the index.html filename specified) the
time formatting does not work.

Does any one have any ideas about why this is happening?  My UNIX Admin
isn't sure what could be going on.

Thanks for any help,
Kateri


[EMAIL PROTECTED] Apache Permmisions error

2007-08-23 Thread John Wyatt
Hey folks, i'm coding a php blog from a IBM's developerWorks tutorial and I get 
this error with permissions.

Main blog page

 
 Warning:  mkdir() [function.mkdir]: Permission denied in 
/home/www/edit/index.php on line 9
 
 Warning:  fopen(../blogs/Aug 2007/Aug 23 2007 18 13) [function.fopen]: failed 
to open stream: No such file or directory in /home/www/edit/index.php on line 11
 
 Warning:  fwrite(): supplied argument is not a valid stream resource in 
/home/www/edit/index.php on line 12
 
 Warning:  fclose(): supplied argument is not a valid stream resource in 
/home/www/edit/index.php on line 13
 Blog entry saved/updated


I'm using php mod and i'm a newbie to both php  apache, I was wondering if 
someone could help me with this since I haven't  found an answer in the 
documentation.


John
   
-
Take the Internet to Go: Yahoo!Go puts the Internet in your pocket: mail, news, 
photos  more. 

Re: [EMAIL PROTECTED] Forbidden error on .exe files in apache on RH 4.0

2007-08-23 Thread Jeff Peng

 Original-Nachricht 
 Datum: Thu, 23 Aug 2007 11:35:30 -0700
 Von: Ali, Saqib [EMAIL PROTECTED]
 An: users@httpd.apache.org
 Betreff: [EMAIL PROTECTED] Forbidden error on .exe files in apache on RH 4.0

 Hello All,
 
 I just installed a RH 4.0 box with apache, and I am getting a
 Forbidden error when trying to d/l .EXE files.
 
 The log says:
 Options ExecCGI is off in this directory: /path/path/file.exe
 

because this directory doesn't have ExecCGI options,you can add it if 
needed.like,

Directory /the/path
AllowOverride None
Options ExecCGI
/Directory

-- 
GMX FreeMail: 1 GB Postfach, 5 E-Mail-Adressen, 10 Free SMS.
Alle Infos und kostenlose Anmeldung: http://www.gmx.net/de/go/freemail

-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] Apache Permmisions error

2007-08-23 Thread Jeff Peng

 Original-Nachricht 
 Datum: Thu, 23 Aug 2007 18:49:33 -0700 (PDT)
 Von: John Wyatt [EMAIL PROTECTED]
 An: users@httpd.apache.org
 Betreff: [EMAIL PROTECTED] Apache Permmisions error

 Hey folks, i'm coding a php blog from a IBM's developerWorks tutorial and
 I get this error with permissions.
 
 Main blog page
 
  
  Warning:  mkdir() [function.mkdir]: Permission denied in
 /home/www/edit/index.php on line 9
  
  Warning:  fopen(../blogs/Aug 2007/Aug 23 2007 18 13) [function.fopen]:
 failed to open stream: No such file or directory in /home/www/edit/index.php
 on line 11
  
  Warning:  fwrite(): supplied argument is not a valid stream resource in
 /home/www/edit/index.php on line 12
  
  Warning:  fclose(): supplied argument is not a valid stream resource in
 /home/www/edit/index.php on line 13
  Blog entry saved/updated
 
 

This is most likely because PHP doesn't have the privileges to read/write 
special directory or files.By default apache/php are running as nobody user,so 
at first you take a look at that php program to find out which directory/file 
it try to access,then set the correct privileges to that directory/file.

Under unix,you can use 'chmod' or 'chown' to ajust the privileges on dir/files.

-- 
Pt! Schon vom neuen GMX MultiMessenger gehört?
Der kanns mit allen: http://www.gmx.net/de/go/multimessenger

-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]