[us...@httpd] RE: Google Apps authentication

2010-11-10 Thread Assarsson, Emil
Hi,
I guess that OpenID would be one of the first things to look at. It can however 
only SSO http(s) based solutions. I'm not sure if Google supports it but PKI 
might be a solid way so solve it to.

--
Emil

From: Oliver Marshall [mailto:oliver.marsh...@g2support.com]
Sent: onsdag den 10 november 2010 09:33
To: users@httpd.apache.org
Subject: [us...@httpd] Google Apps authentication

Hi

We currently use LDAP authentication on all our apache servers to authenticate 
our staff against our AD. However we are looking at a mass move to Google Apps 
and need to allow the single sign on ability still.

We can keep the AD in place, and then have Google suck the AD account details 
from that (authenticate against AD would be the wrong term). We could also 
then use AD for the apache stuff still.

However there is also an idea to move away from AD completely as we are 
increasingly non-AD specific (macs, linux etc). Does anyone know if there is a 
module already in use that would allow apache to authenticate using Google App 
details?

Olly



[us...@httpd] Google Apps authentication

2010-11-10 Thread Oliver Marshall
Hi

We currently use LDAP authentication on all our apache servers to authenticate 
our staff against our AD. However we are looking at a mass move to Google Apps 
and need to allow the single sign on ability still.

We can keep the AD in place, and then have Google suck the AD account details 
from that (authenticate against AD would be the wrong term). We could also 
then use AD for the apache stuff still.

However there is also an idea to move away from AD completely as we are 
increasingly non-AD specific (macs, linux etc). Does anyone know if there is a 
module already in use that would allow apache to authenticate using Google App 
details?

Olly


[us...@httpd] Config of Apache Tomcat jkmod

2010-11-10 Thread hai . nguyen
Hi  there
I am trying to set the config Apache  Tomcat with jkmod 
and I need your helps please

I have two web application app1 and app2 on the server Debian with Apache2 
+ Tomcat 5.5 + jk mod 1.2.26
this server  has 2 IP:  IP1 (internal IP = intranet = 192.168.35.8) and 
IP2 (external IP = internet = 212.xxx.xxx.xxx)
and I have somes domain which point to this server
www.app1.com and www.app1.fr for application app1
www.app2.com and www.app2.fr for application app2

My goal: Two applications will be accessed by differents ways:
1. by domain, for ex www.app1.com(fr) for any users (by internet). 
2. by IP, for ex http://ip1/app1 or http://ip1/app2 for *internal users*

My configuration actual:

 Tomcat:  (server.xml) 
...
Connector port=8180 maxHttpHeaderSize=8192
   maxThreads=150 minSpareThreads=25 maxSpareThreads=75
   enableLookups=false redirectPort=8443 acceptCount=100
   connectionTimeout=2 disableUploadTimeout=true /
...
Connector port=8009 
   enableLookups=false redirectPort=8443 
protocol=AJP/1.3 /
...
Host name=www.app1.fr debug=0 appBase=/var/lib/tomcat5.5/webapps/ 
unpackWARs=true
Logger className=org.apache.catalina.logger.FileLogger
 directory=logs  prefix=app1. suffix=.txt 
timestamp=true/
Context path= docBase=app1 debug=0 reloadable=true/
Aliaswww.app1.com/Alias
/Host

Host name=www.app2.fr appBase=/var/lib/tomcat5.5/webapps/ debug=0 
unpackWARs=true
Logger className=org.apache.catalina.logger.FileLogger
 directory=logs  prefix=app2. suffix=.txt 
timestamp=true/
Context path= docBase=app2 debug=0 reloadable=true/
Aliaswww.app2.com/Alias
/Host

 Apache: (apache2.conf) 
...
Include /etc/apache2/sites-enabled/
In there, i have 2 files:

www.app1.fr
Alias /app1 /var/lib/tomcat5.5/webapps/app1
Alias /app2 /var/lib/tomcat5.5/webapps/app2

VirtualHost *:80
ServerAdmin webmas...@localhost
ServerName www.app1.fr
ServerAlias www.app1.com

DocumentRoot /var/lib/tomcat5.5/webapps/app1

JkMount / worker1
JkMount /* worker1
JkUnMount /*.gif worker1
JkUnMount /*.jpg worker1
JkUnMount /*.png worker1
JkUnMount /*.pdf worker1
JkUnMount /*.css worker1
JkUnMount /*.js worker1

DirectoryIndex index.jsp index.html
#   Globally deny access to the WEB-INF directory
LocationMatch ?.*WEB-INF.*?
deny from all
/LocationMatch
/VirtualHost

www.app2.fr
VirtualHost *:80
ServerAdmin webmas...@localhost
ServerName www.app2.fr
ServerAlias www.app2.com

DocumentRoot /var/lib/tomcat5.5/webapps/app2

JkMount / worker1
JkMount /* worker1
JkUnMount /*.gif worker1
JkUnMount /*.jpg worker1
JkUnMount /*.png worker1
JkUnMount /*.pdf worker1
JkUnMount /*.css worker1
JkUnMount /*.js worker1

DirectoryIndex index.jsp index.html
#   Globally deny access to the WEB-INF directory
LocationMatch ?.*WEB-INF.*?
deny from all
/LocationMatch
/VirtualHost


 jkmod 1.2.26 
jk.load
LoadModule jk_module /usr/lib/apache2/modules/mod_jk.so

JkWorkersFile /etc/apache2/workers.properties
JkLogFile /var/log/apache2/mod_jk.log
JkShmFile /var/log/apache2/mod_jk.shm
JkLogLevel warn 
JkLogStampFormat [%a %b %d %H:%M:%S %Y]
JkRequestLogFormat %w %V %T

#JkOptions indicate to send SSL KEY SIZE
#JkOptions +ForwardKeySize +ForwardURICompat -ForwardDirectories


workers.properties:
workers.tomcat_home=/usr/share/tomcat5.5
workers.java_home=/usr/lib/jvm/java-6-sun

ps=/
worker.list=worker1
worker.worker1.port=8009
worker.worker1.host=localhost
worker.worker1.type=ajp13
worker.worker1.lbfactor=1


with this above config? It seems work
but with request http://IP1/app2 = log other_vhosts_access.log is 
following:

www.app1.fr:80 my IP - - [06/Nov/2010:16:29:37 +0100] GET /app2/index.jsp 
HTTP/1.1 200 3206 - Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; 
Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 
3.5.30729) 

I think, with the good config,  it should be www.app2.fr instead of 
www.app1.fr
and I told myself, perhaps, that is not good configuration ...

Another question:
for local testing with the domain: I am on a machine Windows XP, the 
server is Debian but have no IP2 (not extranet IP = no internet)
Could I do this config by adding 4 lines in file 
c:\WINDOWS\system32\drivers\etc\hosts
ip1 www.app1.fr
ip1 www.app1.com
ip1 www.app2.fr
ip1 www.app2.com


Any help/idea will be appreciated deeply!!!
thanks very much
best regards
Hai

__
Avertissement concernant la confidentialité
Le contenu de cet envoi, privilégié et confidentiel, ne 

Re: [us...@httpd] Indexes with Require group

2010-11-10 Thread Matus UHLAR - fantomas
On 01.11.10 08:39, Andrew Simpson wrote:
 I would like to only allow directory Indexes to certain AuthGroupFile groups.

you mean, that authorized users could see directory listings, others would
get an error?

 Is this possible via basic configuration?

afaik it's not.

-- 
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
You have the right to remain silent. Anything you say will be misquoted,
then used against you. 

-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
  from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



Re: [us...@httpd] What's this?

2010-11-10 Thread lists . httpd-user
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Hello Igor,

Oct 27, Oct 27, Igor Galić wrote to users@httpd.apache.org about Re:...:

IG   Regularly I see entries in the error log like: 
IG   GET http://98.126.64.106/judge123.php HTTP/1.1 404

IG  Somebody is using your server as open proxy, and successfully so.

Strange...

IG  Even though you see 404s, that doesn't mean it's being rejected.
IG  A 403 would mean it is being rejected.
IG  See: http://httpd.apache.org/docs/current/mod/mod_proxy.html#proxyrequests
IG  It's off by default, and for good.

I have not touched any proxy setting in my configuration. As you
say, proxy request forwarding should by default be be off. What I
don't understand is, why they do get the 404 errors. Or actually any
error at all.

Thanks,

J.D.H. Beekhuizen
e-mail: jdh.beekhui...@duinheks.nl
tel:++31(71)4015437
fax:++31(71)4017198

-BEGIN PGP SIGNATURE-
Version: GnuPG v2.0.14 (GNU/Linux)

iEYEARECAAYFAkzapHQACgkQLfImQU9wLUpS5gCgwNrBKh8b9rdXKvjQMNAm23Pd
hi0AoM6M9bCzZkKaDyvpSl2EbwHk4HdE
=ip7E
-END PGP SIGNATURE-

-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
  from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org

AW: [us...@httpd] Override main server conf

2010-11-10 Thread Axel Gallus
My main server is configured with

 LoadModule php5_module  modules/libphp5.so
 AddType application/x-httpd-php .php
 AddType application/x-httpd-php-source  .phps
 DirectoryIndex  index.html index.htm index.shtml index.php index.php3 index.cgi
 AddHandler  cgi-script  .cgi

Moreover I am allowed to use .htaccess in my webserver root:

Directory /home/../.public_html/webserverroot
AllowOverride All
Allow   from All
/Directory


In my webserver-root I want *.php files executed via mod_cgi and not mod_php5 
so I added this to my
.htaccess in the webserverroot:

Options +ExecCGI
AddHandler cgi-script .cgi .php

However I get an internal HTTP 500 Error when I try to execute *.php scripts.
Maybe this is due to the fact, that the server doesn't know if the *.php file 
is to be executed via mod_php5 or mod_cgi. If I rename the *.php scripts to 
*.cgi they work.
Is there a way to let the *.php scripts execute via mod_cgi in my 
virtualhost/webserver-directory 
and having the main-server config having all other virtual hosts configured via 
mod_php5?

Regards

A.Gallus












 



-Ursprüngliche Nachricht-
Von: Igor Cicimov [mailto:icici...@gmail.com]
Gesendet: Mo 08.11.2010 07:15
An: users@httpd.apache.org
Betreff: Re: [us...@httpd] Override main server conf
 
According to mod_mime documentation

Context:server config, virtual host, directory, .htaccess

Files having the name extension will be served by the specified
handler-name. This mapping is added to any already in force, overriding any
mappings that already exist for the same extension

so your config should be ok. Did you test if it doesn't work? Do the .cgi
extension work for the host? Have you added

Options +ExecCGI

to make the files cgi executable for the appropriate directory in that
virtual host?

Post the vhost config if still having problems.

Igor

On Mon, Nov 8, 2010 at 9:49 AM, Axel Gallus axel.gal...@profindis.dewrote:

  Hello,

 I use apache in a virtual host environment.

 My main server is configured with

 LoadModule php5_module  modules/libphp5.so
 AddType application/x-httpd-php .php
 AddType application/x-httpd-php-source  .phps
 DirectoryIndex  index.html index.htm index.shtml index.php index.php3
 index.cgi
 AddHandler  cgi-script  .cgi

 so that only *.cgi files get executed via interpreter in my
 vhost-documentroot.

 I also want the *.php files to be executed as cgi, so I added
 AddHandler  cgi-script  .cgi .php
 to my perosnal vhost-config-section

 However, it seems that the main server config dominates the cgi-script
 *.php config.
 Is there a way to also treat .php files as cgi scripts in my virtualhost
 under
 this circumstances, how?

 Thx and regards

 A.Gallus








winmail.dat
-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
  from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org

Re: AW: [us...@httpd] Override main server conf

2010-11-10 Thread Frank Gingras

On 10/11/2010 10:01 AM, Axel Gallus wrote:

My main server is configured with

  LoadModule php5_module  modules/libphp5.so
  AddType application/x-httpd-php .php
  AddType application/x-httpd-php-source  .phps
  DirectoryIndex  index.html index.htm index.shtml index.php index.php3 
index.cgi
  AddHandler  cgi-script  .cgi

Moreover I am allowed to use .htaccess in my webserver root:

Directory /home/../.public_html/webserverroot
AllowOverride All
Allow   from All
/Directory


In my webserver-root I want *.php files executed via mod_cgi and not mod_php5 
so I added this to my
.htaccess in the webserverroot:

Options +ExecCGI
AddHandler cgi-script .cgi .php

However I get an internal HTTP 500 Error when I try to execute *.php scripts.
Maybe this is due to the fact, that the server doesn't know if the *.php file
is to be executed via mod_php5 or mod_cgi. If I rename the *.php scripts to 
*.cgi they work.
Is there a way to let the *.php scripts execute via mod_cgi in my 
virtualhost/webserver-directory
and having the main-server config having all other virtual hosts configured via 
mod_php5?

Regards

A.Gallus
















-Ursprüngliche Nachricht-
Von: Igor Cicimov [mailto:icici...@gmail.com]
Gesendet: Mo 08.11.2010 07:15
An: users@httpd.apache.org
Betreff: Re: [us...@httpd] Override main server conf

According to mod_mime documentation

Context:server config, virtual host, directory, .htaccess

Files having the name extension will be served by the specified
handler-name. This mapping is added to any already in force, overriding any
mappings that already exist for the same extension

so your config should be ok. Did you test if it doesn't work? Do the .cgi
extension work for the host? Have you added

Options +ExecCGI

to make the files cgi executable for the appropriate directory in that
virtual host?

Post the vhost config if still having problems.

Igor

On Mon, Nov 8, 2010 at 9:49 AM, Axel Gallusaxel.gal...@profindis.dewrote:


  Hello,

I use apache in a virtual host environment.

My main server is configured with

LoadModule php5_module  modules/libphp5.so
AddType application/x-httpd-php .php
AddType application/x-httpd-php-source  .phps
DirectoryIndex  index.html index.htm index.shtml index.php index.php3
index.cgi
AddHandler  cgi-script  .cgi

so that only *.cgi files get executed via interpreter in my
vhost-documentroot.

I also want the *.php files to be executed as cgi, so I added
AddHandler  cgi-script  .cgi .php
to my perosnal vhost-config-section

However, it seems that the main server config dominates the cgi-script
*.php config.
Is there a way to also treat .php files as cgi scripts in my virtualhost
under
this circumstances, how?

Thx and regards

A.Gallus











-
The official User-To-User support forum of the Apache HTTP Server Project.
SeeURL:http://httpd.apache.org/userslist.html  for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org


What does the error log say, exactly?

Frank.


-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
 from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



Re: [us...@httpd] dynamic mpm-itk

2010-11-10 Thread James Devine
vhost per user isn't something I would be able to do, what about a
module that runs prior to itk if thats possible to preset the uid

2010/10/26 Igor Galić i.ga...@brainsware.org:

 - James Devine fxmul...@gmail.com wrote:

 Is there a way to set the AssignUserId values associated with mpm-itk
 based on the URI?  Such as if a user accesses
 http://domain.tld/~username
 These users are in ldap so I would need to do some sort of external
 processing such as through a rewritemap or mod_perl

 No. You'll need a vhost per user. Once you've set that up,

 http://username.domain.tld/

 for instance, would work.

 So long,
 i
 --
 Igor Galić

 Tel: +43 (0) 664 886 22 883
 Mail: i.ga...@brainsware.org
 URL: http://brainsware.org/

 -
 The official User-To-User support forum of the Apache HTTP Server Project.
 See URL:http://httpd.apache.org/userslist.html for more info.
 To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
      from the digest: users-digest-unsubscr...@httpd.apache.org
 For additional commands, e-mail: users-h...@httpd.apache.org



-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
  from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



Re: [us...@httpd] dynamic mpm-itk

2010-11-10 Thread Tom Evans
On Wed, Nov 10, 2010 at 4:02 PM, James Devine fxmul...@gmail.com wrote:
 vhost per user isn't something I would be able to do, what about a
 module that runs prior to itk if thats possible to preset the uid


Not without significant hacking. From mpm-itk homepage:


apache2-mpm-itk (just mpm-itk for short) is an MPM (Multi-Processing
Module) for the Apache web server. mpm-itk allows you to run each of
your vhost under a separate uid and gid — in short, the scripts and
configuration files for one vhost no longer have to be readable for
all the other vhosts.


It is specifically designed to choose uid/gid based upon vhost, and
nothing else.

Cheers

Tom

-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
  from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



Re: [us...@httpd] dynamic mpm-itk

2010-11-10 Thread James Devine
well what I'm thinking of is to not set the uid/gid for a particular
vhost and have another module run prior to when ITK would set the uid
and set the UID/GID myself based on the URI

On Wed, Nov 10, 2010 at 9:36 AM, Tom Evans tevans...@googlemail.com wrote:
 On Wed, Nov 10, 2010 at 4:02 PM, James Devine fxmul...@gmail.com wrote:
 vhost per user isn't something I would be able to do, what about a
 module that runs prior to itk if thats possible to preset the uid


 Not without significant hacking. From mpm-itk homepage:

 
 apache2-mpm-itk (just mpm-itk for short) is an MPM (Multi-Processing
 Module) for the Apache web server. mpm-itk allows you to run each of
 your vhost under a separate uid and gid — in short, the scripts and
 configuration files for one vhost no longer have to be readable for
 all the other vhosts.
 

 It is specifically designed to choose uid/gid based upon vhost, and
 nothing else.

 Cheers

 Tom

 -
 The official User-To-User support forum of the Apache HTTP Server Project.
 See URL:http://httpd.apache.org/userslist.html for more info.
 To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
      from the digest: users-digest-unsubscr...@httpd.apache.org
 For additional commands, e-mail: users-h...@httpd.apache.org



-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
  from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



Re: [us...@httpd] dynamic mpm-itk

2010-11-10 Thread James Devine
well this method doesn't appear to work, setting the uid prior to itk
causes itk to fail out while trying to set the uid itself

On Wed, Nov 10, 2010 at 9:52 AM, James Devine fxmul...@gmail.com wrote:
 well what I'm thinking of is to not set the uid/gid for a particular
 vhost and have another module run prior to when ITK would set the uid
 and set the UID/GID myself based on the URI

 On Wed, Nov 10, 2010 at 9:36 AM, Tom Evans tevans...@googlemail.com wrote:
 On Wed, Nov 10, 2010 at 4:02 PM, James Devine fxmul...@gmail.com wrote:
 vhost per user isn't something I would be able to do, what about a
 module that runs prior to itk if thats possible to preset the uid


 Not without significant hacking. From mpm-itk homepage:

 
 apache2-mpm-itk (just mpm-itk for short) is an MPM (Multi-Processing
 Module) for the Apache web server. mpm-itk allows you to run each of
 your vhost under a separate uid and gid — in short, the scripts and
 configuration files for one vhost no longer have to be readable for
 all the other vhosts.
 

 It is specifically designed to choose uid/gid based upon vhost, and
 nothing else.

 Cheers

 Tom

 -
 The official User-To-User support forum of the Apache HTTP Server Project.
 See URL:http://httpd.apache.org/userslist.html for more info.
 To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
      from the digest: users-digest-unsubscr...@httpd.apache.org
 For additional commands, e-mail: users-h...@httpd.apache.org




-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
  from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



Re: [us...@httpd] dynamic mpm-itk

2010-11-10 Thread Nick Kew
On Wed, 10 Nov 2010 10:48:48 -0700
James Devine fxmul...@gmail.com wrote:

 well this method doesn't appear to work, setting the uid prior to itk
 causes itk to fail out while trying to set the uid itself

What do you expect to do that you couldn't do with cgi/suexec or fastcgi?

mod_privileges may do the job for you, but use with caution if you
permit untrusted scripts to run with mod_perl or rewritemap!

-- 
Nick Kew

-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
  from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



Re: AW: [us...@httpd] Override main server conf

2010-11-10 Thread Eric Covener
On Wed, Nov 10, 2010 at 1:58 PM, Axel Gallus axel.gal...@profindis.de wrote:

 No errors have been logged in the error log.

 Any other idea?

 Does someone know if it is possible to user mod_cgi and mod_php at once... 
 (see below)..

Don't mix AddHandler and AddType -- just use AddHandler.


-- 
Eric Covener
cove...@gmail.com

-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
  from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



AW: AW: [us...@httpd] Override main server conf

2010-11-10 Thread Axel Gallus

No errors have been logged in the error log.

Any other idea?

Does someone know if it is possible to user mod_cgi and mod_php at once... (see 
below)..


Regards 

A.Gallus

-Ursprüngliche Nachricht-
Von: Frank Gingras [mailto:francois.ging...@gmail.com]
Gesendet: Mi 10.11.2010 16:12
An: users@httpd.apache.org
Betreff: Re: AW: [us...@httpd] Override main server conf
 
On 10/11/2010 10:01 AM, Axel Gallus wrote:
 My main server is configured with

   LoadModule php5_module  modules/libphp5.so
   AddType application/x-httpd-php .php
   AddType application/x-httpd-php-source  .phps
   DirectoryIndex  index.html index.htm index.shtml index.php index.php3 
 index.cgi
   AddHandler  cgi-script  .cgi

 Moreover I am allowed to use .htaccess in my webserver root:

 Directory /home/../.public_html/webserverroot
   AllowOverride All
   Allow   from All
 /Directory


 In my webserver-root I want *.php files executed via mod_cgi and not mod_php5 
 so I added this to my
 .htaccess in the webserverroot:

 Options +ExecCGI
 AddHandler cgi-script .cgi .php

 However I get an internal HTTP 500 Error when I try to execute *.php scripts.
 Maybe this is due to the fact, that the server doesn't know if the *.php file
 is to be executed via mod_php5 or mod_cgi. If I rename the *.php scripts to 
 *.cgi they work.
 Is there a way to let the *.php scripts execute via mod_cgi in my 
 virtualhost/webserver-directory
 and having the main-server config having all other virtual hosts configured 
 via mod_php5?

 Regards

 A.Gallus
















 -Ursprüngliche Nachricht-
 Von: Igor Cicimov [mailto:icici...@gmail.com]
 Gesendet: Mo 08.11.2010 07:15
 An: users@httpd.apache.org
 Betreff: Re: [us...@httpd] Override main server conf

 According to mod_mime documentation

 Context:server config, virtual host, directory, .htaccess

 Files having the name extension will be served by the specified
 handler-name. This mapping is added to any already in force, overriding any
 mappings that already exist for the same extension

 so your config should be ok. Did you test if it doesn't work? Do the .cgi
 extension work for the host? Have you added

 Options +ExecCGI

 to make the files cgi executable for the appropriate directory in that
 virtual host?

 Post the vhost config if still having problems.

 Igor

 On Mon, Nov 8, 2010 at 9:49 AM, Axel Gallusaxel.gal...@profindis.dewrote:

   Hello,

 I use apache in a virtual host environment.

 My main server is configured with

 LoadModule php5_module  modules/libphp5.so
 AddType application/x-httpd-php .php
 AddType application/x-httpd-php-source  .phps
 DirectoryIndex  index.html index.htm index.shtml index.php index.php3
 index.cgi
 AddHandler  cgi-script  .cgi

 so that only *.cgi files get executed via interpreter in my
 vhost-documentroot.

 I also want the *.php files to be executed as cgi, so I added
 AddHandler  cgi-script  .cgi .php
 to my perosnal vhost-config-section

 However, it seems that the main server config dominates the cgi-script
 *.php config.
 Is there a way to also treat .php files as cgi scripts in my virtualhost
 under
 this circumstances, how?

 Thx and regards

 A.Gallus










 -
 The official User-To-User support forum of the Apache HTTP Server Project.
 SeeURL:http://httpd.apache.org/userslist.html  for more info.
 To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
from the digest: users-digest-unsubscr...@httpd.apache.org
 For additional commands, e-mail: users-h...@httpd.apache.org

What does the error log say, exactly?

Frank.


-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
  from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org




winmail.dat
-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
  from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org

AW: AW: [us...@httpd] Override main server conf

2010-11-10 Thread Axel Gallus

You mean I should use 

AddHandler application/x-httpd-php  .php

instead of

AddType application/x-httpd-php  .php?

Unfortunately this part of the configuration is not under my control.

Can you explain why mixing those directives is a problem?
Is there a workaround?

Regards 

A.Gallus
 



-Ursprüngliche Nachricht-
Von: Eric Covener [mailto:cove...@gmail.com]
Gesendet: Mi 10.11.2010 20:03
An: users@httpd.apache.org
Betreff: Re: AW: [us...@httpd] Override main server conf
 
On Wed, Nov 10, 2010 at 1:58 PM, Axel Gallus axel.gal...@profindis.de wrote:

 No errors have been logged in the error log.

 Any other idea?

 Does someone know if it is possible to user mod_cgi and mod_php at once... 
 (see below)..

Don't mix AddHandler and AddType -- just use AddHandler.


-- 
Eric Covener
cove...@gmail.com

-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
  from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org




winmail.dat
-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
  from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org

Re: [us...@httpd] dynamic mpm-itk

2010-11-10 Thread James Devine
I'm trying to get all content (php, perl, cgi etc) to run as the
intended user, which works fine with mpm-itk for individual vhosts,
but a few of those vhosts implement user directories which should be
associated with different users

On Wed, Nov 10, 2010 at 11:07 AM, Nick Kew n...@webthing.com wrote:
 On Wed, 10 Nov 2010 10:48:48 -0700
 James Devine fxmul...@gmail.com wrote:

 well this method doesn't appear to work, setting the uid prior to itk
 causes itk to fail out while trying to set the uid itself

 What do you expect to do that you couldn't do with cgi/suexec or fastcgi?

 mod_privileges may do the job for you, but use with caution if you
 permit untrusted scripts to run with mod_perl or rewritemap!

 --
 Nick Kew

 -
 The official User-To-User support forum of the Apache HTTP Server Project.
 See URL:http://httpd.apache.org/userslist.html for more info.
 To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
      from the digest: users-digest-unsubscr...@httpd.apache.org
 For additional commands, e-mail: users-h...@httpd.apache.org



-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
  from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



Re: [us...@httpd] Override main server conf

2010-11-10 Thread Nick Kew
On Wed, 10 Nov 2010 20:18:35 +0100
Axel Gallus axel.gal...@profindis.de wrote:

 Can you explain why mixing those directives is a problem?
 Is there a workaround?

AddType for things that aren't types (like cgi or php) is a
grotty hack from the very early days.  It's been wrong since
AddHandler was introduced in Apache 1.1 (1996).

-- 
Nick Kew

-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
  from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



Re: [us...@httpd] Please add timestamps to Apache Service Monitor

2010-11-10 Thread Jeff Trawick
On Fri, Nov 5, 2010 at 2:55 PM, Ken Winter k...@sunward.org wrote:
 In the Apache Service Monitor for Windows, it would be helpful if the pane
 that shows an action that has been performed (e.g. “The Apache2.2 service
 has restarted”) would include a timestamp (e.g. “2010-11-05 12:41:27: The
 Apache2.2 service has restarted”).



 This would help me, as a developer, keep track of where I’m at in my debug
 cycle.

I suggest filing an enhancement request at http://issues.apache.org/bugzilla

-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
  from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



AW: AW: [us...@httpd] Override main server conf

2010-11-10 Thread Axel Gallus

I succeeded by removing the mod_php5 mimme type via 
RemoveType .php.
After that I could register my own mod_cgi handler via AddHandler cgi-script 
.php.

Thx for your input.

Regards

A.Gallus





-Ursprüngliche Nachricht-
Von: Axel Gallus [mailto:axel.gal...@profindis.de]
Gesendet: Mi 10.11.2010 20:18
An: users@httpd.apache.org
Betreff: AW: AW: [us...@httpd] Override main server conf
 

You mean I should use 

AddHandler application/x-httpd-php  .php

instead of

AddType application/x-httpd-php  .php?

Unfortunately this part of the configuration is not under my control.

Can you explain why mixing those directives is a problem?
Is there a workaround?

Regards 

A.Gallus
 



-Ursprüngliche Nachricht-
Von: Eric Covener [mailto:cove...@gmail.com]
Gesendet: Mi 10.11.2010 20:03
An: users@httpd.apache.org
Betreff: Re: AW: [us...@httpd] Override main server conf
 
On Wed, Nov 10, 2010 at 1:58 PM, Axel Gallus axel.gal...@profindis.de wrote:

 No errors have been logged in the error log.

 Any other idea?

 Does someone know if it is possible to user mod_cgi and mod_php at once... 
 (see below)..

Don't mix AddHandler and AddType -- just use AddHandler.


-- 
Eric Covener
cove...@gmail.com

-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
  from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org





winmail.dat
-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
  from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org

[us...@httpd] internal redirects error

2010-11-10 Thread Tim Johnson
I'm using apache2 on ubuntu 10.04.
I am a programmer familiar with the command line, but
new to fine-tuning apache.

I'm getting following error message:

Request exceeded the limit of 10 internal redirects due to probable
configuration error. Use 'LimitInternalRecursion' to increase the
limit if necessary

This is caused by the follow directive (I believe)
Directory /home/http/py
IfModule mod_dir.c
DirectoryIndex pyindex.py
/IfModule
AllowOverride all
Options +ExecCGI -MultiViews +SymLinksIfOwnerMatch
Order allow,deny
Allow from all
/Directory
The intent is that for directory /home/http/py the default 'page' 
would be pyindex.py. And I want to restrict pyindex.py as
only the default page for that particular directory.

So what is the configuration error?
thanks
-- 
Tim 
tim at johnsons-web.com or akwebsoft.com
http://www.akwebsoft.com

-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
  from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



Re: [us...@httpd] internal redirects error

2010-11-10 Thread Igor Cicimov
AllowOverride all so maybe some redirection in .htaccess file in that
directory causing infinite loop?

Try setting it to None instead and see if the problem goes away. Then you'll
know the problem is in the .htaccess file for sure.

Igor

On Thu, Nov 11, 2010 at 11:31 AM, Tim Johnson t...@johnsons-web.com wrote:

 I'm using apache2 on ubuntu 10.04.
 I am a programmer familiar with the command line, but
 new to fine-tuning apache.

 I'm getting following error message:
 
 Request exceeded the limit of 10 internal redirects due to probable
 configuration error. Use 'LimitInternalRecursion' to increase the
 limit if necessary
 
 This is caused by the follow directive (I believe)
Directory /home/http/py
IfModule mod_dir.c
DirectoryIndex pyindex.py
/IfModule
AllowOverride all
Options +ExecCGI -MultiViews +SymLinksIfOwnerMatch
Order allow,deny
Allow from all
/Directory
 The intent is that for directory /home/http/py the default 'page'
 would be pyindex.py. And I want to restrict pyindex.py as
 only the default page for that particular directory.

 So what is the configuration error?
 thanks
 --
 Tim
 tim at johnsons-web.com or akwebsoft.com
 http://www.akwebsoft.com

 -
 The official User-To-User support forum of the Apache HTTP Server Project.
 See URL:http://httpd.apache.org/userslist.html for more info.
 To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
  from the digest: users-digest-unsubscr...@httpd.apache.org
 For additional commands, e-mail: users-h...@httpd.apache.org




Re: [us...@httpd] internal redirects error

2010-11-10 Thread Tim Johnson
* Igor Cicimov icici...@gmail.com [101110 15:41]:
 AllowOverride all so maybe some redirection in .htaccess file in that
 directory causing infinite loop?
 
 Try setting it to None instead and see if the problem goes away. Then you'll
 know the problem is in the .htaccess file for sure.
  Yes, that solves that problem, but creates another: now a
  ScriptAlias directive fails. 
  So now I have the following in total:
ScriptAlias /reg/ /home/http/py/
Directory /home/http/py
IfModule mod_dir.c
DirectoryIndex pyindex.py
/IfModule
#AllowOverride all
## Scriptalias will not work with AllowOverride set to 'None'
AllowOverride None
Options +ExecCGI -MultiViews +SymLinksIfOwnerMatch
Order allow,deny
Allow from all
/Directory
  Now if I point the browser to http://localhost/py, pyindex.py executes,
  but if I point the browser to http://localhost/reg I get
You don't have permission to access /reg/ on this server.
.htaccess is as follows:
# begin
RewriteEngine on
RewriteCond %{REQUEST_FILENAME} !-f
RewriteRule ^(.*)$ ./pyindex.py/$1 [L,QSA]
# end

  *However* I really don't need the ScriptAlias. But this is a learning
  experience for me.
  Thank you. 

-- 
Tim 
tim at johnsons-web.com or akwebsoft.com
http://www.akwebsoft.com

-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
  from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



Re: [us...@httpd] internal redirects error

2010-11-10 Thread Igor Cicimov
Your RewriteRule doesn't make much sense though. It will cause to redirect
http://localhost/reg to pyindex.py/reg (plus append the query string if any)
and I don't see the purpose of this redirect. What are you really trying to
achieve here?

If the idea is to redirect virtual links, the one without real files in the
apache file system, then you better do

RewriteEngine on
RewriteCond %{REQUEST_FILENAME} !-f
RewriteRule ^(.*)$ /py/ http://pyindex.py/$1 [L]

which will redirect any non existing link to the pyindex.py file which is
your home page I assume.

Igor

On Thu, Nov 11, 2010 at 11:54 AM, Tim Johnson t...@johnsons-web.com wrote:

 * Igor Cicimov icici...@gmail.com [101110 15:41]:
  AllowOverride all so maybe some redirection in .htaccess file in that
  directory causing infinite loop?
 
  Try setting it to None instead and see if the problem goes away. Then
 you'll
  know the problem is in the .htaccess file for sure.
   Yes, that solves that problem, but creates another: now a
  ScriptAlias directive fails.
  So now I have the following in total:
ScriptAlias /reg/ /home/http/py/
 Directory /home/http/py
IfModule mod_dir.c
DirectoryIndex pyindex.py
/IfModule
#AllowOverride all
 ## Scriptalias will not work with AllowOverride set to 'None'
AllowOverride None
 Options +ExecCGI -MultiViews +SymLinksIfOwnerMatch
Order allow,deny
Allow from all
/Directory
   Now if I point the browser to http://localhost/py, pyindex.py executes,
  but if I point the browser to http://localhost/reg I get
 You don't have permission to access /reg/ on this server.
 .htaccess is as follows:
 # begin
 RewriteEngine on
 RewriteCond %{REQUEST_FILENAME} !-f
 RewriteRule ^(.*)$ ./pyindex.py/$1 [L,QSA]
 # end

  *However* I really don't need the ScriptAlias. But this is a learning
  experience for me.
  Thank you.

 --
 Tim
 tim at johnsons-web.com or akwebsoft.com
 http://www.akwebsoft.com

 -
 The official User-To-User support forum of the Apache HTTP Server Project.
 See URL:http://httpd.apache.org/userslist.html for more info.
 To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
  from the digest: users-digest-unsubscr...@httpd.apache.org
 For additional commands, e-mail: users-h...@httpd.apache.org




Re: [us...@httpd] internal redirects error

2010-11-10 Thread Tim Johnson
* Igor Cicimov icici...@gmail.com [101110 16:55]:
 Your RewriteRule doesn't make much sense though. It will cause to redirect
 http://localhost/reg to pyindex.py/reg (plus append the query string if any)
 and I don't see the purpose of this redirect. What are you really trying to
 achieve here?
 
 If the idea is to redirect virtual links, the one without real files in the
 apache file system, then you better do
 
 RewriteEngine on
 RewriteCond %{REQUEST_FILENAME} !-f
 RewriteRule ^(.*)$ /py/ http://pyindex.py/$1 [L]
 
 which will redirect any non existing link to the pyindex.py file which is
 your home page I assume.
  Thank you Igor. The changes that you recommend above for .htaccess
  have been implemented. I believe that I have solved my problem.
  best of luck. Keep up the great help.
-- 
Tim 
tim at johnsons-web.com or akwebsoft.com
http://www.akwebsoft.com

-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
  from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



[us...@httpd] mod_mbox and % in message id, % = %25 defect ?

2010-11-10 Thread Jeremy Carroll


I am a newbie here, and apologies in advance if this is a repeat or 
otherwise undesirable.


I was trying to understand why in this archive
http://mail-archives.apache.org/mod_mbox/incubator-general/201011.mbox/browser 


messages from Mattmann, Chris A (388J) do not load, such as the second.

Using firefox, if I open link in new tab, I get:
http://mail-archives.apache.org/mod_mbox/incubator-general/201011.mbox/ajax/%3cc8f432ca.238db%chris.a.mattm...@jpl.nasa.gov%3e

which has the obvious perecent escape problem of not having escaped the 
% in the message id.


Fix this and

http://mail-archives.apache.org/mod_mbox/incubator-general/201011.mbox/ajax/%3cc8f432ca.238db%25chris.a.mattm...@jpl.nasa.gov%3e 



returns appropriate XML content

c.f.
http://mail-archives.apache.org/mod_mbox/incubator-general/201011.mbox/%3cc8f432ca.238db%25chris.a.mattm...@jpl.nasa.gov%3e 



I do not know which version of httpd and/or mod_mbox is being used on 
that server.


Do I need to report this somewhere?

Jeremy




-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
 from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org