Re: [users@httpd] I need help figuring out a 500 response code

2017-05-02 Thread Dr James Smith
Is there an error.log in the same directory? This is usually in the same 
directory this should contain some information about why the system failed.



On 03/05/2017 07:41, John Covici wrote:

Hi.  I am having major problems figuring out a 500 response code I am
getting  on my hserver.

I am using apache 2.4.25 on gentoo linux up to date as of a few days
ago.

So, I havinstalled owncloud which is a cloud server written in php and
it has worked for a long time, but for a few days I have gotten 500
when I try to access it.  Now, I am using https normally to access and
when I look at the error_log, I get just one line like this:

[Wed May 03 02:14:37.074791 2017] [ssl:info] [pid 22312] [client
192.168.0.2:56613] AH01964: Connection to child 0 established (server
ccs.covici.com:443)

If I change the loglevel to debug, I get all kinds of ssl information
and the lines saying that requireall was granted, but nothing about
the error.

Now, if I change to http access, on my access_log I get lines like the
following:

192.168.0.2 - - [03/May/2017:02:33:38 -0400] "GET /owncloud HTTP/1.1"
301 295
192.168.0.2 - - [03/May/2017:02:33:38 -0400] "GET /owncloud HTTP/1.1"
301 295 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0;
rv:11.0) like Gecko"
192.168.0.2 - - [03/May/2017:02:33:38 -0400] "GET /owncloud HTTP/1.1"
301 295 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0;
rv:11.0) like Gecko"
192.168.0.2 - - [03/May/2017:02:33:38 -0400] "GET /owncloud/ HTTP/1.1"
302 -
192.168.0.2 - - [03/May/2017:02:33:38 -0400] "GET /owncloud/ HTTP/1.1"
302 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0)
like Gecko"
192.168.0.2 - - [03/May/2017:02:33:38 -0400] "GET /owncloud/ HTTP/1.1"
302 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0)
like Gecko"
192.168.0.2 - - [03/May/2017:02:33:38 -0400] "GET
/owncloud/index.php/login HTTP/1.1" 500 -
192.168.0.2 - - [03/May/2017:02:33:38 -0400] "GET
/owncloud/index.php/login HTTP/1.1" 500 - "-" "Mozilla/5.0 (Windows NT
10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.0.2 - - [03/May/2017:02:33:38 -0400] "GET
/owncloud/index.php/login HTTP/1.1" 500 - "-" "Mozilla/5.0 (Windows NT
10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"

Now, owncloud has theirownw log, but I get nothing in it.

So, my question is how to find out more about why I am getting the 500
response and what I can do about it.

Thanks in advance for any suggestions.





--
The Wellcome Trust Sanger Institute is operated by Genome Research 
Limited, a charity registered in England with number 1021457 and a 
company registered in England with number 2742969, whose registered 
office is 215 Euston Road, London, NW1 2BE. 


-
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



[users@httpd] I need help figuring out a 500 response code

2017-05-02 Thread John Covici
Hi.  I am having major problems figuring out a 500 response code I am
getting  on my hserver.

I am using apache 2.4.25 on gentoo linux up to date as of a few days
ago.

So, I havinstalled owncloud which is a cloud server written in php and
it has worked for a long time, but for a few days I have gotten 500
when I try to access it.  Now, I am using https normally to access and
when I look at the error_log, I get just one line like this:

[Wed May 03 02:14:37.074791 2017] [ssl:info] [pid 22312] [client
192.168.0.2:56613] AH01964: Connection to child 0 established (server
ccs.covici.com:443)

If I change the loglevel to debug, I get all kinds of ssl information
and the lines saying that requireall was granted, but nothing about
the error.

Now, if I change to http access, on my access_log I get lines like the
following:

192.168.0.2 - - [03/May/2017:02:33:38 -0400] "GET /owncloud HTTP/1.1"
301 295
192.168.0.2 - - [03/May/2017:02:33:38 -0400] "GET /owncloud HTTP/1.1"
301 295 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0;
rv:11.0) like Gecko"
192.168.0.2 - - [03/May/2017:02:33:38 -0400] "GET /owncloud HTTP/1.1"
301 295 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0;
rv:11.0) like Gecko"
192.168.0.2 - - [03/May/2017:02:33:38 -0400] "GET /owncloud/ HTTP/1.1"
302 -
192.168.0.2 - - [03/May/2017:02:33:38 -0400] "GET /owncloud/ HTTP/1.1"
302 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0)
like Gecko"
192.168.0.2 - - [03/May/2017:02:33:38 -0400] "GET /owncloud/ HTTP/1.1"
302 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0)
like Gecko"
192.168.0.2 - - [03/May/2017:02:33:38 -0400] "GET
/owncloud/index.php/login HTTP/1.1" 500 -
192.168.0.2 - - [03/May/2017:02:33:38 -0400] "GET
/owncloud/index.php/login HTTP/1.1" 500 - "-" "Mozilla/5.0 (Windows NT
10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.0.2 - - [03/May/2017:02:33:38 -0400] "GET
/owncloud/index.php/login HTTP/1.1" 500 - "-" "Mozilla/5.0 (Windows NT
10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"

Now, owncloud has theirownw log, but I get nothing in it.

So, my question is how to find out more about why I am getting the 500
response and what I can do about it.

Thanks in advance for any suggestions.

-- 
Your life is like a penny.  You're going to lose it.  The question is:
How do
you spend it?

 John Covici
 cov...@ccs.covici.com

-
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



Re: [users@httpd] Unstable PHP under Apache

2017-05-02 Thread John Iliffe
Thanks for your response Arthur.  I had considered that but in the end I 
have just capitulated and am running everything exactly as one would expect 
it to work under mod_php. phpinfo confirms that the underlying version of 
PHP is 7.1.3 under mod_php.  

That avoids the problems of reconfiguring the fairly large batch component 
of PHP on this server that is working properly already.  

The problem appears to have been that the script startup info passed to PHP 
by Apache either wasn't correct or wasn't complete, I don't know which, and 
I don't know how to find out.  One thing I did notice was that the notes in 
the Apache documentation seem to be aimed at 2.2 rather than 2.4 and I'm on 
PHP 7.1.3 which is noted in the PHP documentation as having a different API.  
Maybe there should be an upgrade to the docs? 

Anyhow, everything came up fine, so far as testing has shown up to now, 
under mod_php and I've run out of my window of opportunity to play with 
this new server, so I have to stop now.

Again, thanks to you and to all who responded to my questions.  I'm sorry 
that I was not able to get this resolved, but I guess we all have to call 
"enough" at some point.

Regards,

John
===
On Tuesday 02 May 2017 10:41:29 Arthur E. Johnston wrote:
> With your current configuration, PHP is not operating.  If PHP was
> operating you would (or should) have an entry in a PHP.log.
> 
> My suggestion is to eliminate your current PHP installation and use the
> default installation available with your operating system.
> 
> After PHP is operating, perform the modifications you desire.
> 
> Somewhere, in this chain you mentioned you did not use the method of
> installing PHP that was available with your operating system, because it
> would update PHP without allowing you control.
> 
> Rather than modifying the standard installation of PHP, modify the
> actions of the program that updates your operating system.
> 
> Arthur Johnston
> Meadowbrook Kennels
> 
> -Original Message-
> From: John Iliffe [mailto:john.ili...@iliffe.ca]
> Sent: Tuesday, May 02, 2017 7:25 AM
> To: users@httpd.apache.org
> Subject: Re: [users@httpd] Unstable PHP under Apache
> 
> That's the weird thing - there nothing in the php.log and php-fpm.log
> has only errors originating from the batch file processing.  (these are
> legitimate).
> 
> In the Apache error log, nothing.
> 
> In the Apache access log, the response is shown as 404 even though the
> browser displays "No Input file specified".  If I deliberately change
> the request location to be wrong, then the browser displays the
> expected 404 and so does the Apache access log.  The Apache error log
> never writes anything for this.
> 
> John
> =
> 
> On Monday 01 May 2017 23:18:04 Arthur E. Johnston wrote:
> > What are the errors in your PHP-FPM.LOG?
> > 
> > 
> > Arthur Johnston
> > Meadowbrook Kennels
> > 
> > -Original Message-
> > From: John Iliffe [mailto:john.ili...@iliffe.ca]
> > Sent: Monday, May 01, 2017 7:53 PM
> > To: users@httpd.apache.org
> > Subject: Re: [users@httpd] Unstable PHP under Apache
> > 
> > Still poking around with this and one thing seems very odd to me.
> > 
> > Coded exactly as shown in the Apache docs, php is NOT invoked by a php
> > script.  What I mean is:
> > 
> > This is from the docs, as I understand them:
> > -
> > # Add FCGI changes
> > 
> > FcgidMaxRequestsPerProcess 1
> > 
> > Alias /phpapp/ /httpd/
> > 
> > ##
> > 
> > AddHandler fcgid-script .php
> > 
> > ##AllowOverride None
> > 
> > Options +ExecCGI
> > 
> > #  Caution - if the version of Apache is updated then probably
> > #this wrapper script will need to be updated too
> > 
> > FcgidWrapper /usr/apache-2.4.25/bin/php-wrapper .php
> > Require all granted
> > 
> > #
> > 
> > ##
> > 
> > 
> > ---
> > Passes the apachectl -t test for syntax, but outputs only the html
> > portion of the page.
> > 
> > This one at least invokes php
> > 
> > # Add FCGI changes
> > 
> > FcgidMaxRequestsPerProcess 1
> > 
> > #Alias /phpapp/ /httpd/
> > #
> > 
> > 
> > AddHandler fcgid-script .php
> > 
> > ##AllowOverride None
> > 
> > Options +ExecCGI
> > 
> > #  Caution - if the version of Apache is updated then probably
> > #this wrapper script will need to be updated too
> > 
> > FcgidWrapper /usr/apache-2.4.25/bin/php-wrapper .php
> > Require all granted
> > 
> > #
> > 
> > 
> > #
> > 
> > 
> > Starts php-cgi but outputs "No Input file specified".
> > 
> > No error messages in http error log in either case.
> > 
> > John
> > ==
> > 
> > On Monday 01 May 2017 21:13:01 John Iliffe wrote:
> > > Thanks Arthur.
> > > 
> > > That was my initial thought, that the file permissions were wrong.
> > > 
> > > I just checked again 

[users@httpd] Apache + Squid Proxy: AH01991: SSL input filter read failed

2017-05-02 Thread chiasa.men
Hi,
my apache is behind a squid proxy which is configured like that:
https_port 3128 accel cert=/cert.pem key=/cert.key defaultsite=ww1.example.com 
vhost 
acl server20_domains dstdomain ww1.example.com ww2.example.com 
http_access allow server20_domains 
cache_peer server20 parent 443 0 no-query originserver name=server20 
login=PASSTHRU ssl sslversion=6 
cache_peer_access server20 allow server20_domains 
cache_peer_access server20 deny all 

The idea was to send ww1 and ww2 to server20 which is hosting an apache 
webservice for both sites. 
It works but each time I visit one of those sites the following messages 
appear in apache's logs: 

[00:00:39.641665] --- 
[00:00:44.641883] [ssl:info] ssl_engine_io.c(675): (70007)The timeout 
specified has expired: [client wwwclient:47122] AH01991: SSL input filter read 
failed. 
[00:00:44.642170] [ssl:info] ssl_engine_io.c(675): (70007)The timeout 
specified has expired: [client wwwclient:47120] AH01991: SSL input filter read 
failed. 
[00:00:44.642442] [ssl:info] ssl_engine_io.c(675): (70007)The timeout 
specified has expired: [client wwwclient:47118] AH01991: SSL input filter read 
failed. 
[00:00:44.642570] [ssl:info] ssl_engine_io.c(675): (70007)The timeout 
specified has expired: [client wwwclient:47124] AH01991: SSL input filter read 
failed. 
[00:00:44.642977] [ssl:debug] ssl_engine_io.c(1016): -: [client wwwclient: 
47118] AH02001: Connection closed to child 11 with standard shutdown (server 
ww1.example.com:443) 
[00:00:44.643241] [ssl:debug] ssl_engine_io.c(1016): -: [client wwwclient: 
47124] AH02001: Connection closed to child 6 with standard shutdown (server 
ww1.example.com:443) 
[00:00:44.643373] [ssl:debug] ssl_engine_io.c(1016): -: [client wwwclient: 
47120] AH02001: Connection closed to child 5 with standard shutdown (server 
ww1.example.com:443) 
[00:00:44.643560] [ssl:debug] ssl_engine_io.c(1016): -: [client wwwclient: 
47122] AH02001: Connection closed to child 8 with standard shutdown (server 
ww1.example.com:443) 
[00:00:44.647119] [ssl:info] ssl_engine_io.c(675): (70007)The timeout 
specified has expired: [client wwwclient:47116] AH01991: SSL input filter read 
failed. 
[00:00:44.647347] [ssl:debug] ssl_engine_io.c(1016): -: [client wwwclient: 
47116] AH02001: Connection closed to child 3 with standard shutdown (server 
ww1.example.com:443) 

The corresponding squid access.log entries would be: 
[00:00:39] "GET https://ww1.example.com/a/ HTTP/1.1" 503 4033 "-" "ua" 
TCP_MISS:FIRSTUP_PARENT 
[00:00:39] "GET https://ww1.example.com/some.js HTTP/1.1" 304 240 "https:// 
ww1.example.com/a/" "ua" TCP_MISS:FIRSTUP_PARENT 
[00:00:39] "GET https://ww1.example.com/someother.js HTTP/1.1" 304 239 
"https://ww1.example.com/a/"; "ua" TCP_MISS:FIRSTUP_PARENT 
[00:00:39] "GET https://ww1.example.com/more.js HTTP/1.1" 304 241 "https:// 
ww1.example.com/a/" "ua" TCP_MISS:FIRSTUP_PARENT 
[00:00:39] "GET https://ww1.example.com/some.css HTTP/1.1" 304 277 "https:// 
ww1.example.com/a/" "ua" TCP_MISS:FIRSTUP_PARENT 
[00:00:39] "GET https://ww1.example.com/someother.css HTTP/1.1" 304 277 
"https://ww1.example.com/a/"; "ua" TCP_MISS:FIRSTUP_PARENT 
[00:00:39] "GET https://ww1.example.com/a.png HTTP/1.1" 304 241 "https:// 
ww1.example.com/a/" "ua" TCP_MISS:FIRSTUP_PARENT 


You can see that approximately after 5s the timeout happens. Is it a message 
to worry about? (it is just "info" labled) Why does it occur?

I sent basically the same problem to squid's mailing list because I supposed 
squid was the problematic part here. But since they suggested apache could be 
the weirdo, I'm asking here
Thanks for your help

Regards 
Chia 


-
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



Re: [users@httpd] XSS Issue in v2.0.59

2017-05-02 Thread Adam R. Vest
Hey, I don't have any input on how to address those vulnerabilities, but I 
think the energy you're going to expend trying to patch those would be put to 
better use trying to fix whatever's incompatible with newer versions of apache 
so you can upgrade.

Just my two cents. Good luck either way.

On May 1, 2017 11:24:01 PM EDT, "Hagan, Mark "  wrote:
>Hello All,
>
>Looking for some help to determine if I can configure Apache 2.0.59 to
>address a couple Cross Site Scripting (XSS) vulnerabilities. I'm not
>able to upgrade to a later version, so I'm trying to understand if
>there is functionality within this version to address the XSS issue.
>
>
>I have 2 specific issues:
>
>1. Validating input (whitelisting acceptable characters)
>
>2. Sanitizing or encoding output (For instance, the character < would
>be encoded as < which would be displayed by the browser as the
>"less-than" character instead of being interpreted as the start
>of an HTML tag.)
>
>
>I am not an experienced apache administrator, so any help would be most
>appreciated.
>
>
>Thanks.

-- 
Sent from my Android device with K-9 Mail. Please excuse my brevity.

RE: [users@httpd] Unstable PHP under Apache

2017-05-02 Thread Arthur E. Johnston
With your current configuration, PHP is not operating.  If PHP was operating
you would (or should) have an entry in a PHP.log. 

My suggestion is to eliminate your current PHP installation and use the
default installation available with your operating system.

After PHP is operating, perform the modifications you desire.

Somewhere, in this chain you mentioned you did not use the method of
installing PHP that was available with your operating system, because it
would update PHP without allowing you control.

Rather than modifying the standard installation of PHP, modify the actions
of the program that updates your operating system.

Arthur Johnston
Meadowbrook Kennels

-Original Message-
From: John Iliffe [mailto:john.ili...@iliffe.ca] 
Sent: Tuesday, May 02, 2017 7:25 AM
To: users@httpd.apache.org
Subject: Re: [users@httpd] Unstable PHP under Apache

That's the weird thing - there nothing in the php.log and php-fpm.log has
only errors originating from the batch file processing.  (these are 
legitimate).   

In the Apache error log, nothing.

In the Apache access log, the response is shown as 404 even though the
browser displays "No Input file specified".  If I deliberately change the
request location to be wrong, then the browser displays the expected 404 and
so does the Apache access log.  The Apache error log never writes anything
for this.

John
=
On Monday 01 May 2017 23:18:04 Arthur E. Johnston wrote:
> What are the errors in your PHP-FPM.LOG?
> 
> 
> Arthur Johnston
> Meadowbrook Kennels
> 
> -Original Message-
> From: John Iliffe [mailto:john.ili...@iliffe.ca]
> Sent: Monday, May 01, 2017 7:53 PM
> To: users@httpd.apache.org
> Subject: Re: [users@httpd] Unstable PHP under Apache
> 
> Still poking around with this and one thing seems very odd to me.
> 
> Coded exactly as shown in the Apache docs, php is NOT invoked by a php 
> script.  What I mean is:
> 
> This is from the docs, as I understand them:
> -
> # Add FCGI changes
> 
> FcgidMaxRequestsPerProcess 1
> 
> Alias /phpapp/ /httpd/
> 
> ##
> AddHandler fcgid-script .php
> ##AllowOverride None
> Options +ExecCGI
> #  Caution - if the version of Apache is updated then probably
> #this wrapper script will need to be updated too
> FcgidWrapper /usr/apache-2.4.25/bin/php-wrapper .php
> Require all granted
> #
> 
> ##
> 
> 
> ---
> Passes the apachectl -t test for syntax, but outputs only the html 
> portion of the page.
> 
> This one at least invokes php
> 
> # Add FCGI changes
> 
> FcgidMaxRequestsPerProcess 1
> 
> #Alias /phpapp/ /httpd/
> #
> 
> AddHandler fcgid-script .php
> ##AllowOverride None
> Options +ExecCGI
> #  Caution - if the version of Apache is updated then probably
> #this wrapper script will need to be updated too
> FcgidWrapper /usr/apache-2.4.25/bin/php-wrapper .php
> Require all granted
> #
> 
> 
> #
> 
> 
> Starts php-cgi but outputs "No Input file specified".
> 
> No error messages in http error log in either case.
> 
> John
> ==
> 
> On Monday 01 May 2017 21:13:01 John Iliffe wrote:
> > Thanks Arthur.
> > 
> > That was my initial thought, that the file permissions were wrong.
> > 
> > I just checked again and the permission on the root directory of 
> > this page (/httpd) is rwxr-xr-x and it is owned by root so the 
> > directory can be world read and descended.
> > 
> > Same for all of the virtual host lever directories below it, so they 
> > are world-readable and world descendable.  All of these directories 
> > are also owned by root, mainly to control anything being written 
> > over the page and script files.
> > 
> > All of the page and script files are world readable but owned by 
> > their "user".  For example, the phpinfo file that won't run is:
> > 
> > -rw-r--r--.  1 John John   213 Mar 19 17:23 phpinfo.php
> > 
> > Making this file executable doesn't do anything for the problem.  It 
> > shouldn't but it was worth a try.
> > 
> > As a test, I picked a file on which I don't have any permissions in 
> > a different virtual host and was able to cat it.  So no matter what 
> > uid apache and mod_fcgid/php-cgi are running under should be able to 
> > read the script.
> > 
> > When I try to run the script phpinfo from a fresh start of Apache, 
> > before the script runs there is no php-cgi shown as running.  After 
> > attempting to run, php-cgi is running and is a child of one of the 
> > httpd process children.  That is, httpd is under pid 10613, the 
> > httpd children are 10614 to 10617 with parent pid 10613, and the 
> > php-cgi process is pid 10780 with parent pid 10614.
> > 
> > As a further test I modified things so that the php script was not 
> > treated as php and the page displays only the pure html lines in the 
> > script.  No problems get

Re: [users@httpd] Apache 2.4 with Mysql authentication

2017-05-02 Thread David Mehler
Hello,

I'm running 2.4. Not seeing an error, in fact I just fixed one. What
i'm wanting to know is does everything look good? I'm not as up on the
2.4 way of doing this as I was with 2.2.

Thanks.
Dave.


On 5/2/17, Luca Toscano  wrote:
> Hi David,
>
> 2017-05-01 23:39 GMT+02:00 David Mehler :
>
>>
>> Can someone take a look at my mysql setup and tell me if I have any
>> mistakes in it?
>>
>
> Can you tell us what is the issue that you are seeing? Anything relevant in
> the error_log? What version of httpd?
>
> Thanks,
>
> Luca
>

-
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



Re: [users@httpd] Why is AuthLDAPCompareAsUser discouraged?

2017-05-02 Thread Eric Covener
On Tue, May 2, 2017 at 10:31 AM, Ian Pilcher  wrote:
> I had to enable this option, because FreeIPA 4 doesn't make group
> membership visible to anonymous binds.  The documentation for this
> option says:
>
>   This directive should only be used when your LDAP server doesn't
>   accept anonymous comparisons and you cannot use a dedicated
>   AuthLDAPBindDN.
>
> I've been trying to think of a way in which creating an additional LDAP
> user, just for this purpose, and storing its password in cleartext in a
> configuration file is a better option.  I can't come up with anything.
>
> Does anyone know why this option is discouraged?

It's probably over-stated. It should say that it's the reason this
relatively late in the life of mod_ldap/mod_authnz_ldap this directive
was added.

-
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



[users@httpd] Why is AuthLDAPCompareAsUser discouraged?

2017-05-02 Thread Ian Pilcher

I had to enable this option, because FreeIPA 4 doesn't make group
membership visible to anonymous binds.  The documentation for this
option says:

  This directive should only be used when your LDAP server doesn't
  accept anonymous comparisons and you cannot use a dedicated
  AuthLDAPBindDN.

I've been trying to think of a way in which creating an additional LDAP
user, just for this purpose, and storing its password in cleartext in a
configuration file is a better option.  I can't come up with anything.

Does anyone know why this option is discouraged?

--

Ian Pilcher arequip...@gmail.com
 "I grew up before Mark Zuckerberg invented friendship" 


-
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



Re: [users@httpd] Unstable PHP under Apache

2017-05-02 Thread John Iliffe
That's the weird thing - there nothing in the php.log and php-fpm.log has 
only errors originating from the batch file processing.  (these are 
legitimate).   

In the Apache error log, nothing.

In the Apache access log, the response is shown as 404 even though the 
browser displays "No Input file specified".  If I deliberately change the 
request location to be wrong, then the browser displays the expected 404 
and so does the Apache access log.  The Apache error log never writes 
anything for this.

John
=
On Monday 01 May 2017 23:18:04 Arthur E. Johnston wrote:
> What are the errors in your PHP-FPM.LOG?
> 
> 
> Arthur Johnston
> Meadowbrook Kennels
> 
> -Original Message-
> From: John Iliffe [mailto:john.ili...@iliffe.ca]
> Sent: Monday, May 01, 2017 7:53 PM
> To: users@httpd.apache.org
> Subject: Re: [users@httpd] Unstable PHP under Apache
> 
> Still poking around with this and one thing seems very odd to me.
> 
> Coded exactly as shown in the Apache docs, php is NOT invoked by a php
> script.  What I mean is:
> 
> This is from the docs, as I understand them:
> -
> # Add FCGI changes
> 
> FcgidMaxRequestsPerProcess 1
> 
> Alias /phpapp/ /httpd/
> 
> ##
> AddHandler fcgid-script .php
> ##AllowOverride None
> Options +ExecCGI
> #  Caution - if the version of Apache is updated then probably
> #this wrapper script will need to be updated too
> FcgidWrapper /usr/apache-2.4.25/bin/php-wrapper .php
> Require all granted
> #
> 
> ##
> 
> 
> ---
> Passes the apachectl -t test for syntax, but outputs only the html
> portion of the page.
> 
> This one at least invokes php
> 
> # Add FCGI changes
> 
> FcgidMaxRequestsPerProcess 1
> 
> #Alias /phpapp/ /httpd/
> #
> 
> AddHandler fcgid-script .php
> ##AllowOverride None
> Options +ExecCGI
> #  Caution - if the version of Apache is updated then probably
> #this wrapper script will need to be updated too
> FcgidWrapper /usr/apache-2.4.25/bin/php-wrapper .php
> Require all granted
> #
> 
> 
> #
> 
> 
> Starts php-cgi but outputs "No Input file specified".
> 
> No error messages in http error log in either case.
> 
> John
> ==
> 
> On Monday 01 May 2017 21:13:01 John Iliffe wrote:
> > Thanks Arthur.
> > 
> > That was my initial thought, that the file permissions were wrong.
> > 
> > I just checked again and the permission on the root directory of this
> > page (/httpd) is rwxr-xr-x and it is owned by root so the directory
> > can be world read and descended.
> > 
> > Same for all of the virtual host lever directories below it, so they
> > are world-readable and world descendable.  All of these directories
> > are also owned by root, mainly to control anything being written over
> > the page and script files.
> > 
> > All of the page and script files are world readable but owned by their
> > "user".  For example, the phpinfo file that won't run is:
> > 
> > -rw-r--r--.  1 John John   213 Mar 19 17:23 phpinfo.php
> > 
> > Making this file executable doesn't do anything for the problem.  It
> > shouldn't but it was worth a try.
> > 
> > As a test, I picked a file on which I don't have any permissions in a
> > different virtual host and was able to cat it.  So no matter what uid
> > apache and mod_fcgid/php-cgi are running under should be able to read
> > the script.
> > 
> > When I try to run the script phpinfo from a fresh start of Apache,
> > before the script runs there is no php-cgi shown as running.  After
> > attempting to run, php-cgi is running and is a child of one of the
> > httpd process children.  That is, httpd is under pid 10613, the httpd
> > children are 10614 to 10617 with parent pid 10613, and the php-cgi
> > process is pid 10780 with parent pid 10614.
> > 
> > As a further test I modified things so that the php script was not
> > treated as php and the page displays only the pure html lines in the
> > script.  No problems getting there.
> > 
> > John
> > 
> > 
> > On Monday 01 May 2017 17:27:05 Arthur E. Johnston wrote:
> > > I experienced similar messages when working outside of the Apache
> > > directory.
> > > 
> > > Check your permissions.
> > > 
> > > Arthur Johnston
> > > 
> > > Sent from my iPhone.  Please excuse
> > > The typos.
> > > 
> > > > On May 1, 2017, at 1:20 PM, John Iliffe 
> > > > wrote:
> > > > 
> > > > This is set to:
> > > > 
> > > > max_execution_time = 30
> > > > max_input_time = 60
> > > > 
> > > > This is the default and I would expect to run a simple phpinfo it
> > > > would be adequate.
> > > > 
> > > > I was playing further and now I have got rid of the "No Input File
> > > > Specified" in favour of "Prohibited".   I had this problem before
> > > > while I was trying to resolve the situation.
> > > > 
> > > > Makes me think th

Re: [users@httpd] Apache 2.4 with Mysql authentication

2017-05-02 Thread Luca Toscano
Hi David,

2017-05-01 23:39 GMT+02:00 David Mehler :

>
> Can someone take a look at my mysql setup and tell me if I have any
> mistakes in it?
>

Can you tell us what is the issue that you are seeing? Anything relevant in
the error_log? What version of httpd?

Thanks,

Luca


Re: [users@httpd] how to enable TLS v1.1 and TLS v1.2 alone in Apache 2.4.10 ?

2017-05-02 Thread Luca Toscano
Hi,

I'd suggest to reach out to the IRC #httpd channel on Freenode, a lot of
people in there can help you quickly than a users@ email thread, especially
due to the fact that your issue will require a lot of details not yet
provided.

Luca

2017-05-01 15:20 GMT+02:00 Chunduru, Krishnachaithanya <
krishnachaithanya.chund...@broadridge.com>:

> Hi,
>
>
>
> Thanks for the info.
>
>
>
> I have already tried this, but was getting fatal mod_ssl error while
> enabling TLSv1.1 or 1.2.
>
>
>
> *Regards,*
>
> *Krishna*
>
>
>
> *From:* K R [mailto:kp0...@gmail.com]
> *Sent:* Saturday, April 29, 2017 9:28 AM
>
> *To:* users@httpd.apache.org
> *Subject:* Re: [users@httpd] how to enable TLS v1.1 and TLS v1.2 alone in
> Apache 2.4.10 ?
>
>
>
> https://serverfault.com/questions/314858/how-to-
> enable-tls-1-1-and-1-2-with-openssl-and-apache
>
>
>
> On Wed, Apr 19, 2017 at 7:37 AM, Chunduru, Krishnachaithanya <
> krishnachaithanya.chund...@broadridge.com> wrote:
>
> Hi Eric/All,
>
> Can you please help me with the below.
>
> Regards,
> Krishna
>
>
> -Original Message-
> From: Chunduru, Krishnachaithanya [mailto:Krishnachaithanya.
> chund...@broadridge.com]
> Sent: Monday, April 17, 2017 6:34 PM
> To: users@httpd.apache.org
> Subject: RE: [users@httpd] how to enable TLS v1.1 and TLS v1.2 alone in
> Apache 2.4.10 ?
>
> Hi Eric,
>
> We used the openssl version is 1.0.1.515 while installing the Apache
> 2.4.10.
>
> Regards,
> Krishna
>
> -Original Message-
> From: Eric Covener [mailto:cove...@gmail.com]
> Sent: Monday, April 17, 2017 6:18 PM
> To: users@httpd.apache.org
> Subject: Re: [users@httpd] how to enable TLS v1.1 and TLS v1.2 alone in
> Apache 2.4.10 ?
>
> On Mon, Apr 17, 2017 at 6:59 AM, Chunduru, Krishnachaithanya <
> krishnachaithanya.chund...@broadridge.com> wrote:
> > Is TLS v1.1 and v1.2 not supported in Apache 2.4.10 running with
> > Openssl
> > 1.0.2.1000 ? your suggestions are highly appreciated as this is
> > pending in my account from long time.
>
> It probably depends what openssl  build your httpd was built against, not
> just what's loaded at runtime.
>
> -
> To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
> For additional commands, e-mail: users-h...@httpd.apache.org
>
>
> This message and any attachments are intended only for the use of the
> addressee and may contain information that is privileged and confidential.
> If the reader of the message is not the intended recipient or an authorized
> representative of the intended recipient, you are hereby notified that any
> dissemination of this communication is strictly prohibited. If you have
> received this communication in error, please notify us immediately by
> e-mail and delete the message and any attachments from your system.
>
> This message and any attachments are intended only for the use of the
> addressee and may contain information that is privileged and confidential.
> If the reader of the message is not the intended recipient or an authorized
> representative of the intended recipient, you are hereby notified that any
> dissemination of this communication is strictly prohibited. If you have
> received this communication in error, please notify us immediately by
> e-mail and delete the message and any attachments from your system.
>
> -
> To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
> For additional commands, e-mail: users-h...@httpd.apache.org
>
>
>
> This message and any attachments are intended only for the use of the
> addressee and may contain information that is privileged and confidential.
> If the reader of the message is not the intended recipient or an authorized
> representative of the intended recipient, you are hereby notified that any
> dissemination of this communication is strictly prohibited. If you have
> received this communication in error, please notify us immediately by
> e-mail and delete the message and any attachments from your system.
>