Re: [users@httpd] missing image

2024-02-01 Thread Adam Weremczuk

Yup, all it needed was that missing slash. TA!

On 01/02/2024 13:46, Sherrard Burton wrote:
that is not the correct form of the absolute URL. absolute URLs are 
based at your DocumentRoot. so since your DocumentRoot is


DocumentRoot /var/www/html/holding

the correct absolute URL would be "/ms-logo.png"", and the resulting 
img tag would be




HTH

best,
Sherrard 


-
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



Re: [users@httpd] missing image

2024-02-01 Thread Adam Weremczuk

Hi Sherrard,

My index.html is super simple:

--








p {text-align: center;}


UNAVAILABLE





 


The Matrix Science website is currently unavailable.
We apologise for the unexpected downtime.
If you require assistance, please contact href=mailto:supp...@matrixscience.com>supp...@matrixscience.com.







--

Apache config file is very basic as well:

--



ServerName holding.matrixscience.com
ServerAdmin webmaster@localhost
DocumentRoot /var/www/html/holding

ErrorLog ${APACHE_LOG_DIR}/holding/error.log
CustomLog ${APACHE_LOG_DIR}/holding/access.log combined


Options Indexes FollowSymLinks
AllowOverride FileInfo
Require all granted



--

and .htaccess in root directory to handle errors:

--

ErrorDocument 400 /
ErrorDocument 401 /
ErrorDocument 402 /
ErrorDocument 403 /
ErrorDocument 404 /
ErrorDocument 405 /
ErrorDocument 406 /
ErrorDocument 407 /
ErrorDocument 408 /
ErrorDocument 409 /
ErrorDocument 410 /
ErrorDocument 411 /
ErrorDocument 412 /
ErrorDocument 413 /
ErrorDocument 414 /
ErrorDocument 415 /
ErrorDocument 416 /
ErrorDocument 417 /
ErrorDocument 422 /
ErrorDocument 423 /
ErrorDocument 424 /
ErrorDocument 426 /
ErrorDocument 428 /
ErrorDocument 429 /
ErrorDocument 431 /
ErrorDocument 451 /
ErrorDocument 500 /
ErrorDocument 501 /
ErrorDocument 502 /
ErrorDocument 503 /
ErrorDocument 504 /
ErrorDocument 505 /
ErrorDocument 506 /
ErrorDocument 507 /
ErrorDocument 508 /
ErrorDocument 510 /
ErrorDocument 511 /

--

After I replace:

img src="ms-logo.png"

with

img src="/var/www/html/holding/ms-logo.png"   (valid path)

the image doesn't even show on the home page.

Regards,
Adam


On 31/01/2024 19:53, Sherrard Burton wrote:



On 1/31/24 02:26 PM, Adam Weremczuk wrote:


I've already tried replacing relative path to the image with absolute 
but it made no difference.


Any ideas?



do you have a live example with the absolute path? the broken ones that 
i looked at all had the relative paths which (understandably) doesn't work.


-
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



-
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



[users@httpd] missing image

2024-01-31 Thread Adam Weremczuk

Hi all,

Apache 2.4.56.

I'm trying to set up a holding page that would catch all traffic 
(including errors) and redirect to a very basic holding page.


It seems to be working now as I want. Apart from the logo image missing 
if I supply any multi level path, e.g:


1. Logo showing:

https://holding.matrixscience.com/invalid.php
https://holding.matrixscience.com/invalid

2. Logo missing:

https://holding.matrixscience.com/invalid/
https://holding.matrixscience.com/invalid/invalid.php
https://holding.matrixscience.com/invalid1/invalid2/invalid.html

I've already tried replacing relative path to the image with absolute 
but it made no difference.


Any ideas?

Thanks,
Adam


-
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



Re: [users@httpd] pwauth to external server

2023-05-23 Thread Adam Weremczuk

Thank you Frank.

This is my entire gitweb config:

cat /etc/apache2/conf-available/gitweb.conf

  
    
  Define ENABLE_GITWEB
    
    
  Define ENABLE_GITWEB
    
  



  Alias /gitweb /usr/share/gitweb

    AddExternalAuth pwauth /usr/sbin/pwauth
    SetExternalAuthMethod pwauth pipe

  
    Options +FollowSymLinks +ExecCGI
    AddHandler cgi-script .cgi

    AuthName 'Enter your username and password'
    AuthType Basic
    AuthBasicProvider external
    AuthExternal pwauth
    Require valid-user

    Order Deny,Allow
    Satisfy any
    Deny from all
    Require valid-user

  


The configuration is working fine and authenticates users as expected.

What I don't understand is how does apache know which server to consult 
for the credentials?


Just saying "external" surely shouldn't be enough without specifying a 
FQDN or IP, port number etc. like you do with:


AuthLDAPURL ldap://

What am I missing here?

Regards,
Adam

On 18/05/2023 20:21, Frank Gingras wrote:

This comes to mind:

https://code.google.com/archive/p/mod-auth-external/wikis/AuthNZ.wiki

On Wed, May 17, 2023 at 12:48 PM Adam Weremczuk 
 wrote:


Hi all,

I run some old Bugzilla 3.6.11 (https://www.bugzilla.org) on SERVER1
(Debian 7 / Apache 2.2.22 / MySQL 5.5.31).

The following authentication works locally:

AuthType Basic
AuthPAM_Enabled on
AuthBasicAuthoritative off
AuthUserFile /dev/null

I have migrated Bugzilla to a modern stack on SERVER2 (Debian 11 /
Apache 2.4.56 / MariaDB 10.5.19) but struggle with authentication.

Is it possible to use pwauth to consult usernames/passwords on
SERVER1
from SERVER2 by IP?

What other authentication options do I have?

I would rather avoid doing things such as copying usernames and
passwords across.

Regards,
Adam


-
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org


[users@httpd] pwauth to external server

2023-05-17 Thread Adam Weremczuk

Hi all,

I run some old Bugzilla 3.6.11 (https://www.bugzilla.org) on SERVER1 
(Debian 7 / Apache 2.2.22 / MySQL 5.5.31).


The following authentication works locally:

AuthType Basic
AuthPAM_Enabled on
AuthBasicAuthoritative off
AuthUserFile /dev/null

I have migrated Bugzilla to a modern stack on SERVER2 (Debian 11 / 
Apache 2.4.56 / MariaDB 10.5.19) but struggle with authentication.


Is it possible to use pwauth to consult usernames/passwords on SERVER1 
from SERVER2 by IP?


What other authentication options do I have?

I would rather avoid doing things such as copying usernames and 
passwords across.


Regards,
Adam


-
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



[users@httpd] logging SSL handshake failures

2020-06-19 Thread Adam Weremczuk

Hi all,

I'm running Apache 2.4.25 on Debian 9 and trying to debug SSL.

Even with LogLevel set to trace8 error.log doesn't produce exhaustive 
details when I e.g. try to connect using older unsupported protocol:


openssl s_client -connect www.mysite.com:443 -tls1

[Fri Jun 19 16:15:54.339546 2020] [ssl:info] [pid 11437] [client 
192.168.10.196:46016] AH01964: Connection to child 2 established (server 
www.mysite.com:443)
[Fri Jun 19 16:15:54.339631 2020] [ssl:trace2] [pid 11437] 
ssl_engine_rand.c(126): Seeding PRNG with 656 bytes of entropy
[Fri Jun 19 16:15:54.339705 2020] [ssl:trace3] [pid 11437] 
ssl_engine_kernel.c(1989): [client 192.168.10.196:46016] OpenSSL: 
Handshake: start
[Fri Jun 19 16:15:54.339721 2020] [ssl:trace3] [pid 11437] 
ssl_engine_kernel.c(1998): [client 192.168.10.196:46016] OpenSSL: Loop: 
before/accept initialization
[Fri Jun 19 16:15:54.339737 2020] [ssl:trace4] [pid 11437] 
ssl_engine_io.c(2135): [client 192.168.10.196:46016] OpenSSL: read 11/11 
bytes from BIO#5641ea41b3e0 [mem: 5641ea420a40] (BIO dump follows)
[Fri Jun 19 16:15:54.339740 2020] [ssl:trace7] [pid 11437] 
ssl_engine_io.c(2064): 
+-+
[Fri Jun 19 16:15:54.339744 2020] [ssl:trace7] [pid 11437] 
ssl_engine_io.c(2102): | : 16 03 01 00 81 01 00 00-7d 03 
01 }..  |
[Fri Jun 19 16:15:54.339745 2020] [ssl:trace7] [pid 11437] 
ssl_engine_io.c(2108): 
+-+
[Fri Jun 19 16:15:54.339747 2020] [ssl:trace3] [pid 11437] 
ssl_engine_kernel.c(2027): [client 192.168.10.196:46016] OpenSSL: Exit: 
error in SSLv2/v3 read client hello A
[Fri Jun 19 16:15:54.339751 2020] [ssl:info] [pid 11437] [client 
192.168.10.196:46016] AH02008: SSL library error 1 in handshake (server 
www.mysite.com:443)
[Fri Jun 19 16:15:54.339775 2020] [ssl:info] [pid 11437] SSL Library 
Error: error:14076102:SSL routines:SSL23_GET_CLIENT_HELLO:unsupported 
protocol
[Fri Jun 19 16:15:54.339779 2020] [ssl:info] [pid 11437] [client 
192.168.10.196:46016] AH01998: Connection closed to child 2 with 
abortive shutdown (server www.mysite.com:443)


It doesn't say e.g. which protocol was attempted, URL, agent etc.

This type of info doesn't seem possible here according to:

http://httpd.apache.org/docs/trunk/mod/core.html#errorlogformat

Therefore I've attempted the following:

/etc/apache2/mods-available/ssl.conf


(...)
    ErrorLog /var/log/apache2/ssl_error.log
    LogLevel trace8
(...)


But nothing is being logged to this file when I make various invalid SSL 
requests to the server.


All I get is:

[Fri Jun 19 16:39:12.156511 2020] [core:notice] [pid 11679] AH00094: 
Command line: '/usr/sbin/apache2'
[Fri Jun 19 16:39:12.156514 2020] [core:debug] [pid 11679] log.c(1546): 
AH02639: Using SO_REUSEPORT: yes (1)
[Fri Jun 19 16:39:12.156521 2020] [mpm_prefork:debug] [pid 11679] 
prefork.c(1032): AH00165: Accept mutex: fcntl (default: sysvsem)
[Fri Jun 19 16:39:12.156615 2020] [watchdog:debug] [pid 11686] 
mod_watchdog.c(563): AH02980: Watchdog: nothing configured?


with the last message being repeated.

Is it a false positive?

apache2ctl -M | grep watchdog
[Fri Jun 19 16:42:05.186631 2020] [core:trace3] [pid 11707] 
core.c(3289): Setting LogLevel for all modules to trace8
[Fri Jun 19 16:42:05.186778 2020] [core:trace3] [pid 11707] 
core.c(3289): Setting LogLevel for all modules to trace8

 watchdog_module (static)

How can I log details of SSL handshake failures?

Thanks,
Adam



-
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org