Re: [us...@httpd] CPAN cannot update some modules; example Encode
On Jul 15, 2009, at 1:29 PM, Kevin O'Gorman wrote: Observe the following typescript from a Gentoo Linux system. The module encode is currently at version 2.12, and I would like to upgrade it to the current CPAN version, which is 2.35. But when I try to do that, CPAN cannot find the module. This happens on a number of others as well, all of them unqualified so far (no '::' in the names). What gives? cpan[2]> m Encode Module id = Encode DESCRIPTION Character Encodings Handler CPAN_USERID DANKOGAI (Dan Kogai ) CPAN_VERSION 2.35 CPAN_FILED/DA/DANKOGAI/Encode-2.35.tar.gz DSLIP_STATUS Smhhp (standard,mailing-list,hybrid,hybrid,Standard- Perl) MANPAGE Encode - character encodings INST_FILE/usr/lib/perl5/5.8.8/i686-linux-thread-multi/Encode.pm INST_VERSION 2.12 cpan[3]> u Encode No modules found for Encode cpan[4]> q First, this is way off-topic. Second, m Encode shows that it's a standard module. INST_FILE shows it's not in the site_perl directory. Both of these mean it's distributed with Perl, and is not available on CPAN. The only way to get a new version of Encode is to upgrade Perl. Doug Bell -- Senior Developer, Plain Black Corp. [ http://plainblack.com ] all that groks is - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org " from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [us...@httpd] problem with cgi perl
Please don't top-post. On Jul 14, 2009, at 8:31 PM, fake...@fakessh.eu wrote: my config httpd.conf DocumentRoot "/home/fakessh/public_html" ServerName fakessh.eu ServerAlias www.fakessh.eu ServerAdmin postmas...@fakessh.eu ErrorLog logs/fakessh.eu-error_log CustomLog logs/fakessh.eu-access_log common allow from all Options +Indexes DocumentRoot "/home/renelacroute/public_html" ServerName renelacroute.fr ServerAlias www.renelacroute.fr ServerAdmin postmas...@renelacroute.fr ErrorLog logs/renelacroute.fr-error_log CustomLog logs/renelacroute.fr-access_log common allow from all Options +Indexes Looks like you don't have +ExecCGI in your Options directives. It should look like: Options +Indexes +ExecCGI If that doesn't work, please give us your error log. Le mercredi 15 juillet 2009 02:51, Eric Covener a écrit : On Tue, Jul 14, 2009 at 8:43 PM, fake...@fakessh.eu> wrote: I can not use cgi perl in their repertoires I configure with chown apache.apache I do not have permission to go to the cgi Is there a config, request, and/or errorlog entry related to this problem? Doug Bell -- Senior Developer, Plain Black Corp. [ http://plainblack.com ] all that groks is - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org " from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [us...@httpd] Help with rewrite / redirect
On Jul 14, 2009, at 6:40 PM, John Oliver wrote: On Tue, Jul 14, 2009 at 05:50:13PM -0500, Doug Bell wrote: On Jul 14, 2009, at 5:25 PM, John Oliver wrote: I have a server that's always been known as https://server1.com/ It's now known as https://server2.com/ Anyone who accesses it as https://server1.com/ winds up getting a certificate error as well as other issues. I want to grab and rewrite any https://server1.com/ URLs to https://server2.com/ But it seems like there are dozens of ways to do this, and none are working for me. mod_rewrite, mod_alias, Redirect, RewriteCond, blah blah blah... nothing I try ahs any effect. What do you mean by doesn't work? URL never changes. Then rather than give you things you've probably already tried, including the obvious: # .. in the old vhost .. Redirect permanent / https://server2.com/ Please tell me what you've tried already. Was there any errors in the error log when you tried these things? Doug Bell -- Senior Developer, Plain Black Corp. [ http://plainblack.com ] all that groks is - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org " from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [us...@httpd] Help with rewrite / redirect
On Jul 14, 2009, at 5:25 PM, John Oliver wrote: I have a server that's always been known as https://server1.com/ It's now known as https://server2.com/ Anyone who accesses it as https://server1.com/ winds up getting a certificate error as well as other issues. I want to grab and rewrite any https://server1.com/ URLs to https://server2.com/ But it seems like there are dozens of ways to do this, and none are working for me. mod_rewrite, mod_alias, Redirect, RewriteCond, blah blah blah... nothing I try ahs any effect. What do you mean by doesn't work? I'm guessing you mean it still has the certificate error, and that will happen. SSL must be negotiated before any HTTP Redirect can be sent. My suggestion is to keep a cert for both domains until the transition is complete. That will be the easiest (though not necessarily the cheapest). Doug Bell -- Senior Developer, Plain Black Corp. [ http://plainblack.com ] all that groks is - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org " from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [us...@httpd] Directory Permssions
On Jul 14, 2009, at 2:45 PM, ML wrote: Hi Doug, So does that prevent crawling and browsing, but does allow if I click a link or include a file it will work? No, it prevents the directory and all files within from being served by the webserver at all. Anything else is either half-secure or half-broken I don't understand what you mean by "crawling", "browsing", and "include a file". They're really all the same thing: A client (be it Firefox or GoogleBot) is asking the webserver for something. If you want to prevent the nice robots from asking for something, you can use a robots.txt file. This will not prevent naughty robots from asking for something. Lets think about this a different way. Say I have a directory of files that contain my MySQL connection information, queries, etc, etc. How do I prevent people from browsing the directory but allow the files to still be used when I include them in a page. Say to connect to MySQL. So in this case, you mean "include" a la PHP's include()? Just because Apache can't serve the file does not mean that Perl, PHP, Python, or other things cannot USE the file. Apache's access controls only determine what Apache will do with the file when the file is requested by a user. For example, you could use Apache SSI to include a file that the user would not be able to see by directly trying to access the file. Doug Bell -- Senior Developer, Plain Black Corp. [ http://plainblack.com ] all that groks is - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org " from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [us...@httpd] Directory Permssions
Please don't top post. On Jul 14, 2009, at 1:00 PM, ML wrote: Hi Doug, So does that prevent crawling and browsing, but does allow if I click a link or include a file it will work? No, it prevents the directory and all files within from being served by the webserver at all. Anything else is either half-secure or half- broken I don't understand what you mean by "crawling", "browsing", and "include a file". They're really all the same thing: A client (be it Firefox or GoogleBot) is asking the webserver for something. If you want to prevent the nice robots from asking for something, you can use a robots.txt file. This will not prevent naughty robots from asking for something. On Jul 13, 2009, at 4:57 PM, Doug Bell wrote: On Jul 13, 2009, at 1:37 PM, ML wrote: Hello All, I am confused about directory permissions inside of my wwwroot/ I am using name-based virtual hosting and I have y web root as / var/www/html All of my websites are inside /var/www/html in their own directories. How can I i have a directory protected from crawlers indexing it? What is the right permission set? How can I have a directory that apache can use, but nobody can browse to? The reason is that I have PHP/MySQL Setup and I store all of my MySQL connection information and queries in a directory and I dont want people 'finding' this by simple browsing the website or using a web grabber to take a copy of the whole site. Can anyone provide insight? To prevent a directory from being served by the webserver, do this: Order allow,deny Deny from all Put this block in your block. Doug Bell -- Senior Developer, Plain Black Corp. [ http://plainblack.com ] all that groks is - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org " from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org " from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org " from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [us...@httpd] Permissions problem with accessing a file via a symbolic link - (Mac OS X 10.5.7, Apache 2.2.11)
Please do not top-post. On Jul 13, 2009, at 2:49 PM, Scott Ford wrote: Thanks for your reply. Before I received a reply, I did some testing and added Options Indexes FollowSymLinks to my alias directive, and everything started working. It should go in a block in the block. If there is no block, then somewhere after the DocumentRoot declaration. It should be Options +FollowSymLinks (always use +/- before the option) I am curious though, I did not add a "+" before, yet it is still working. What is the benefit to adding that? Options Indexes FollowSymLinks # Enable only these options Options +Indexes +FollowSymLinks # Add these two options to any previously enabled options So if you were to do: Options FollowSymLinks # Only FollowSymLinks, all other options disabled Options ExecCGI # Only ExecCGI, all other options disabled Options +Indexes # FollowSymLinks and Indexes are both enabled See http://httpd.apache.org/docs/2.2/mod/core.html#options Doug Bell -- Senior Developer, Plain Black Corp. [ http://plainblack.com ] all that groks is On Mon, Jul 13, 2009 at 11:41 AM, Doug Bell wrote: On Jul 13, 2009, at 1:13 PM, Scott Ford wrote: I am running Mac OS X 10.5.7 with Apache 2.2.11 installed. I have an audio application that creates an html log file of tracks that are playing. I am trying to use a symbolic link to access the html file so I can post it on my site over my LAN. The file resides in a directory inside of my documents folder... /Users/[username]/Documents/MegaSeg User Data/Logs I have verified that the permissions to all of the parent directories have at least execute privileges for others. The html log file I am trying to link to has the following privileges... -rw-r--r--@ 1 [username] staff625 Jul 10 17:17 NowPlaying.html I used the following command to setup my symbolic link... ln -s /Users/[username]/Documents/MegaSeg\ User\ Data/Logs/ NowPlaying.html nowplaying.html That seemed to work fine, because when I do an ls -al in my website's folder I see the link. I have a basic index.html, with a link to nowplaying.html, but when I click on the link I get a 403 Forbidden error. What does the error log say exactly? http://wiki.apache.org/httpd/DistrosDefaultLayout#head-71b68a0694807d2b3b5d02e46b7a11f01fdd4836 <- find your error log here In reading the Apache documentation, I found that I may need to have FollowSymLinks somewhere in my configuration, but I am not sure from the Apache documentation where that should go. I assume it would either be in the form of a .htaccess file, or somewhere in the httpd.conf file. It should be noted that the DocumentRoot directory I am using is configured as an Alias in my httpd.conf. I am sure that this is configured correctly as I can access it just fine over my LAN. It should go in a block in the block. If there is no block, then somewhere after the DocumentRoot declaration. It should be Options +FollowSymLinks (always use +/- before the option)
Re: [us...@httpd] Directory Permssions
On Jul 13, 2009, at 1:37 PM, ML wrote: Hello All, I am confused about directory permissions inside of my wwwroot/ I am using name-based virtual hosting and I have y web root as /var/ www/html All of my websites are inside /var/www/html in their own directories. How can I i have a directory protected from crawlers indexing it? What is the right permission set? How can I have a directory that apache can use, but nobody can browse to? The reason is that I have PHP/MySQL Setup and I store all of my MySQL connection information and queries in a directory and I dont want people 'finding' this by simple browsing the website or using a web grabber to take a copy of the whole site. Can anyone provide insight? To prevent a directory from being served by the webserver, do this: Order allow,deny Deny from all Put this block in your block. Doug Bell -- Senior Developer, Plain Black Corp. [ http://plainblack.com ] all that groks is - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org " from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [us...@httpd] Permissions problem with accessing a file via a symbolic link - (Mac OS X 10.5.7, Apache 2.2.11)
On Jul 13, 2009, at 1:13 PM, Scott Ford wrote: I am running Mac OS X 10.5.7 with Apache 2.2.11 installed. I have an audio application that creates an html log file of tracks that are playing. I am trying to use a symbolic link to access the html file so I can post it on my site over my LAN. The file resides in a directory inside of my documents folder... /Users/[username]/Documents/MegaSeg User Data/Logs I have verified that the permissions to all of the parent directories have at least execute privileges for others. The html log file I am trying to link to has the following privileges... -rw-r--r--@ 1 [username] staff625 Jul 10 17:17 NowPlaying.html I used the following command to setup my symbolic link... ln -s /Users/[username]/Documents/MegaSeg\ User\ Data/Logs/ NowPlaying.html nowplaying.html That seemed to work fine, because when I do an ls -al in my website's folder I see the link. I have a basic index.html, with a link to nowplaying.html, but when I click on the link I get a 403 Forbidden error. What does the error log say exactly? http://wiki.apache.org/httpd/DistrosDefaultLayout#head-71b68a0694807d2b3b5d02e46b7a11f01fdd4836 <- find your error log here In reading the Apache documentation, I found that I may need to have FollowSymLinks somewhere in my configuration, but I am not sure from the Apache documentation where that should go. I assume it would either be in the form of a .htaccess file, or somewhere in the httpd.conf file. It should be noted that the DocumentRoot directory I am using is configured as an Alias in my httpd.conf. I am sure that this is configured correctly as I can access it just fine over my LAN. It should go in a block in the block. If there is no block, then somewhere after the DocumentRoot declaration. It should be Options +FollowSymLinks (always use +/- before the option) Doug Bell -- Senior Developer, Plain Black Corp. [ http://plainblack.com ] all that groks is - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org " from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [us...@httpd] I want a file can be accessed by some ip only, how to do that?
On Jun 30, 2009, at 11:52 PM, Yi Zhao wrote: hi, all: I have 2 file(index.html, run.log) in directory: index/, now both can be accessed by all people, but I want do that: run.log can be accessed by some specified ip only, how to do that? Order allow,deny Allow from all Order deny,allow Deny from all Allow from 127.0.0.1 Doug Bell -- Senior Developer, Plain Black Corp. [ http://plainblack.com ] all that groks is
Re: [us...@httpd] remove my email jayamo...@yahoo.co.uk address from users mailing list.
Looks like yahoo.co.uk is preventing you from sending out the mail because it thinks you're trying to spam. Sounds like a weird reason, but that's the last mail server to receive it. I've sent a message to the long address on your behalf, hopefully it works and you won't get this message from the list. Doug Bell -- Senior Developer, Plain Black Corp. [ http://plainblack.com ] all that groks is On Jun 20, 2009, at 11:09 PM, Jay Jesus Amorin wrote: Yes, i can send email to users-unsubscr...@httpd.apache.org, but then i reply using the long email address sent by the confirmation email i got an error: Sorry, we were unable to deliver your message to the following address. >: Remote host said: 552 spam score (9.3) exceeded threshold [BODY] --- Below this line is a copy of the message. Received: from [217.12.4.215] by n23.bullet.mail.ukl.yahoo.com with NNFMP; 17 Jun 2009 16:15:08 - Received: from [217.146.182.191] by t2.bullet.ukl.yahoo.com with NNFMP; 17 Jun 2009 16:15:08 - Received: from [127.0.0.1] by omp105.mail.ukl.yahoo.com with NNFMP; 17 Jun 2009 16:15:08 - X-Yahoo-Newman-Property: ymail-3 X-Yahoo-Newman-Id: 293627.15499...@omp105.mail.ukl.yahoo.com Received: (qmail 90397 invoked by uid 60001); 17 Jun 2009 16:15:08 - DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.co.uk; s=s1024; t=1245255306; bh=5SkJw6LRt0lbLhoRlDCWFvOgZtbEjpaxjAM7wP/u3Dg=; h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:To:MIME- Version:Content-Type; b=g6HXaATbiV8eh1H92xY+t19s/c0zLCWRyXBP6tqu3+yK0nL4VOMMu2CrbqPDw+lbeT/ XwuDnWfzK88AoS5PI5oJ4jK3BGXKSwJUhb8Ieg7XYtM02vhjKHDmziOkqzVLTMeNwoGXY /PTb97Ja2qAiumdwMKpSrkByfGkns/h+t3s= DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.co.uk; h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:To:MIME- Version:Content-Type; and when i also use users-requ...@httpd.apache.org is just got a lot an error message: Hi. This is the qmail-send program at apache.org. I'm afraid I wasn't able to deliver your message to the following addresses. This is a permanent error; I've given up. Sorry it didn't work out. : ezmlm-request: fatal: the local part of the command string does not match this list (#5.1.1) --- Below this line is a copy of the message. On Sun, Jun 21, 2009 at 11:50 AM, Doug Bell wrote: Do you see the "To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org " text at the bottom of the e-mail you receive from this mailing list (including this mail?) If not, I'll repeat it here for you: To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org Doug Bell -- Senior Developer, Plain Black Corp. [ http://plainblack.com ][ Work: 703-286-2525 x850 ][ Cell: 920-203-0145 ] all that groks is On Jun 20, 2009, at 10:34 PM, Jay Jesus Amorin wrote: Hi, Sorry for the cross posting. I always got an error when i sent message to users-requ...@httpd.apache.org or when using the long email add that you gave me to confirm my unsubscribe email. Thanks, Jay - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org " from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org " from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org " from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [us...@httpd] remove my email jayamo...@yahoo.co.uk address from users mailing list.
Do you see the "To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org " text at the bottom of the e-mail you receive from this mailing list (including this mail?) If not, I'll repeat it here for you: To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org Doug Bell -- Senior Developer, Plain Black Corp. [ http://plainblack.com ][ Work: 703-286-2525 x850 ][ Cell: 920-203-0145 ] all that groks is On Jun 20, 2009, at 10:34 PM, Jay Jesus Amorin wrote: Hi, Sorry for the cross posting. I always got an error when i sent message to users-requ...@httpd.apache.org or when using the long email add that you gave me to confirm my unsubscribe email. Thanks, Jay - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org " from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org " from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [us...@httpd] Re: Digest authentication not working on default Apache installation on Slackware 12.1
On Jun 8, 2009, at 2:59 PM, Stuart P. Bentley wrote: After checking the error log, it seems that realm does, in fact, matter: it has to be the same as the AuthName. This should be documented somewhere. Ah, yes. AuthName in the apache config is also known as "Realm" to the HTTP protocol. The docs for AuthName say: "This directive sets the name of the authorization realm for a directory." "Doug Bell" wrote in message news:424510af-0acc-4a39-b3f5-7d0559868...@plainblack.com ... On Jun 7, 2009, at 7:12 AM, Stuart P. Bentley wrote: Why is this httpd.conf code working: DAV svn SVNPath /srv/repo AuthType Basic AuthName "NONE SHALL PASS" AuthDigestDomain /repo AuthUserFile /srv/auth/svn-auth-basic-file #AuthUserFile /srv/auth/svn-auth-digest Require valid-user #Allow users of a certain authentication level read-only access AuthzSVNAccessFile /srv/auth/svn-access-file #WebDAV accessibility settings SVNAutoversioning on ModMimeUsePathInfo on What do you mean by working? What exactly is it doing correctly ( in other words, what do you want to do?) but this isn't? DAV svn SVNPath /srv/repo AuthType Digest AuthName "NONE SHALL PASS" AuthDigestDomain /repo #AuthUserFile /srv/auth/svn-auth-basic-file AuthUserFile /srv/auth/svn-auth-digest Require valid-user #Allow users of a certain authentication level read-only access AuthzSVNAccessFile /srv/auth/svn-access-file #WebDAV accessibility settings SVNAutoversioning on ModMimeUsePathInfo on What do you mean by isn't working? What is it really doing? Could my digest file be bad? Did you create it using htpasswd? Is there a rule for what to put in for realm? No, it's just a string. Also, what is in the error log? Doug Bell -- Senior Developer, Plain Black Corp. [ http://plainblack.com ] - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org " from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org " from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org " from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [us...@httpd] Digest authentication not working on default Apache installation on Slackware 12.1
On Jun 7, 2009, at 1:32 PM, aman parashar wrote: i installed php correctly(i.e when i used following code it shows all the tables i was expecting ) but still m having problem with other statements i.e when i treid to run echo statement it just wont read it. If the phpinfo(); works, then PHP is set up properly in the Apache config. Please visit a PHP mailing list, IRC channel (##PHP on irc.freenode.net), or web forum. You will get better help for PHP problems in places where more PHP users are. Doug Bell -- Senior Developer, Plain Black Corp. [ http://plainblack.com ] all that groks is - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org " from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [us...@httpd] Digest authentication not working on default Apache installation on Slackware 12.1
On Jun 7, 2009, at 7:12 AM, Stuart P. Bentley wrote: Why is this httpd.conf code working: DAV svn SVNPath /srv/repo AuthType Basic AuthName "NONE SHALL PASS" AuthDigestDomain /repo AuthUserFile /srv/auth/svn-auth-basic-file #AuthUserFile /srv/auth/svn-auth-digest Require valid-user #Allow users of a certain authentication level read-only access AuthzSVNAccessFile /srv/auth/svn-access-file #WebDAV accessibility settings SVNAutoversioning on ModMimeUsePathInfo on What do you mean by working? What exactly is it doing correctly ( in other words, what do you want to do?) but this isn't? DAV svn SVNPath /srv/repo AuthType Digest AuthName "NONE SHALL PASS" AuthDigestDomain /repo #AuthUserFile /srv/auth/svn-auth-basic-file AuthUserFile /srv/auth/svn-auth-digest Require valid-user #Allow users of a certain authentication level read-only access AuthzSVNAccessFile /srv/auth/svn-access-file #WebDAV accessibility settings SVNAutoversioning on ModMimeUsePathInfo on What do you mean by isn't working? What is it really doing? Could my digest file be bad? Did you create it using htpasswd? Is there a rule for what to put in for realm? No, it's just a string. Also, what is in the error log? Doug Bell -- Senior Developer, Plain Black Corp. [ http://plainblack.com ] - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org " from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [us...@httpd] How does Prefork work?
On May 28, 2009, at 4:19 PM, CrystalCracker wrote: MaxClients at 250 means that potentially 250 httpd processes can be running at once. Do you have the memory to support that many without swapping? Swapping usually ends up killing a system, especially if it's already handling a lot of disk i/o. Regarding MaxClients at 250, the only thing that I need to worry about is whether I have enough memory for 250 processes if there really are. Right? Right. MaxSpareServers at 20 means that at most 20 servers will sit there idle. MinSpareServers means at least 5 will sit idle. So, regardless of how many threads are active (until it reaches MaxClients/ServerLimit), apache will always have between MinSpareServers and MaxSpareServers ready to serve. Right? Right. But don't confuse "threads" with "processes". We're talking "processes" here. Does your traffic tend to be steady throughout the day or does it spike sharply once or more? I do see some spikes when the system is doing full GC, which sometimes takes longer than usual. Thats is like once every week or more. That causes the app to slow down, and threads trying to do their jobs pile up over time. And then it recovers in a few minutes. At other times, I don't see huge spikes. I probably should consider reducing MaxSpareServers to 10. Also right. Doug Bell -- Senior Developer, Plain Black Corp. [ http://plainblack.com ] - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org " from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [us...@httpd] How does Prefork work?
On May 28, 2009, at 2:55 PM, CrystalCracker wrote: Thanks a lot for the response. I will do some ab and siege tests to verify it, but I am trying to conceptually understand it first. StartServers 5 MinSpareServers 5 MaxSpareServers 20 MaxClients250 MaxRequestsPerChild 4000 I have at least 20 active apache threads (ps -ef | grep httpd), average is about 40 threads and goes upto 70 at the peak. Does the above setting sounds resonable? Firstly, please don't top-post. It is difficult to maintain the thread of conversation when you top-post. Next: MaxClients at 250 means that potentially 250 httpd processes can be running at once. Do you have the memory to support that many without swapping? Swapping usually ends up killing a system, especially if it's already handling a lot of disk i/o. MaxSpareServers at 20 means that at most 20 servers will sit there idle. MinSpareServers means at least 5 will sit idle. These are best tweaked for how you want the server to respond to a mass influx of traffic. Does your traffic tend to be steady throughout the day or does it spike sharply once or more? If you have spikes, then your Min/ MaxSpareServers are fine as they are. If not, you might want to reduce the MaxSpareServers to 10 so that the memory can be reclaimed and used for better things. Doug Bell-4 wrote: On May 27, 2009, at 11:14 PM, CrystalCracker wrote: Can anyone explain me how exactly prefork works? StartServers 2 MaxClients 150 MinSpareThreads 25 MaxSpareThreads 75 ThreadsPerChild 25 ServerLimit 16 Prefork works by spawning one process to handle one connection. So here, Apache can spawn a maximum of 150 httpd processes (MaxClients is maximum number of concurrent connections, which in prefork works out to number of processes). I think I got confused between the terms - server, process and thread. If prefork is a single thread process, what does that ThreadsPerChild mean for prefork? Prefork is not threaded, so the thread config values do not apply. Lets say, I wan't to support 250 active sessions logged into my site, what would be a tentative settings to meet the load? "Active sessions" is difficult to measure. Let's say a person requests a page which takes 10 seconds, then looks at it for 20 seconds (on average). This means that you need one httpd process for three users (the other two people using the 20 seconds the first user isn't using). So to get 250 users from these assumptions, we need MaxClients 74. I would use "siege" to measure your performance. It has settings for how many concurrent users, and can attempt to simulate randomness and "user is reading the page" time. Doug Bell -- Senior Developer, Plain Black Corp. [ http://plainblack.com ] - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org " from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [us...@httpd] How does Prefork work?
On May 27, 2009, at 11:14 PM, CrystalCracker wrote: Can anyone explain me how exactly prefork works? StartServers 2 MaxClients 150 MinSpareThreads 25 MaxSpareThreads 75 ThreadsPerChild 25 ServerLimit 16 Prefork works by spawning one process to handle one connection. So here, Apache can spawn a maximum of 150 httpd processes (MaxClients is maximum number of concurrent connections, which in prefork works out to number of processes). I think I got confused between the terms - server, process and thread. If prefork is a single thread process, what does that ThreadsPerChild mean for prefork? Prefork is not threaded, so the thread config values do not apply. Lets say, I wan't to support 250 active sessions logged into my site, what would be a tentative settings to meet the load? "Active sessions" is difficult to measure. Let's say a person requests a page which takes 10 seconds, then looks at it for 20 seconds (on average). This means that you need one httpd process for three users (the other two people using the 20 seconds the first user isn't using). So to get 250 users from these assumptions, we need MaxClients 74. I would use "siege" to measure your performance. It has settings for how many concurrent users, and can attempt to simulate randomness and "user is reading the page" time. Doug Bell -- Senior Developer, Plain Black Corp. [ http://plainblack.com ] - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org " from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [us...@httpd] How do you build a FIPS 140-2 apache ?!?!?!
On May 27, 2009, at 6:37 PM, Jeff Shearer wrote: I was able to build a FIPS 140-2 apache, thanks to nobody at the apache users list. On a more constructive note: docs get written when someone does the work and puts them together. Find a stable place for your notes and publish them, so others can find them. It sure would be great if Sam the man would publish his notes so others wouldn't suffer the same learning frustration as Sam. Or this "nobody" character. Perhaps s/he should help write some docs for us. Doug Bell -- Senior Developer, Plain Black Corp. [ http://plainblack.com ] - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org " from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [us...@httpd] Running php scripts outside of document root
On May 24, 2009, at 12:31 AM, Lyle Wincentsen wrote: In short, I am trying to set up my document root to be /var/www/htdocs and I want my php scripts to run in /var/www/cgi-bin. Why? You can run PHP scripts in the same directory as your htdocs as you want. For some reason I am getting "500 internal server error" when I try to run a script (called phpauth.php) in that directory. If I try to run the same script in the document root, it works fine but I don't want to do that. Here are the relevant lines of the error log: [Sat May 23 22:19:02 2009] [error] [client {mylaptop.ip.address}] (8)Exec format error: exec of '/var/www/cgi-bin/phpauth.php' failed, referer: http://{myserver.ip.address} [Sat May 23 22:19:02 2009] [error] [client {mylaptop.ip.address}] Premature end of script headers: phpauth.php, referer: http://{myserver.ip.address} Exec format error means your #! line is incorrect. Since you're using PHP, you're probably not using CGI (which requires the #! line) # ScriptAlias /cgi-bin/ /usr/lib/cgi-bin/ ScriptAlias /cgi-bin/ /var/www/cgi-bin/ Here's the issue. It should be "Alias" not "ScriptAlias". If you intend on also running CGI scripts from this directory, add "AddHandler cgi-script .cgi" to the block. Make sure to enable PHP for that directory as well: AddHandler application/x-httpd-php .php Doug Bell -- Senior Developer, Plain Black Corp. [ http://plainblack.com ] - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org " from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [us...@httpd] ip-based vhost not working
On May 15, 2009, at 7:43 PM, graham wrote: Hi I'm having trouble setting up an ip-based vhost. It's something I've done ok in the past, but this time I just can't get it to work, and have tried so many variations on the configuration I feel I'm going in circles.. This is a RH4 remotely hosted system with Apache 2.0. It was configured with one IP address (x.x.x.106) but the provider told me addresses x.x.x.107-110 were also available. I set up /etc/sysconfig/network-scripts/eth0:0, eth0:1, eth0:2 and eth0:3 with the respective IP addresses. ifconfig shows they are available. I can ping the host on each of the 5 IP addresses. The vanilla RH apache configuration was working. I set the default Listen config to '*:80'. I then added a vhost starting ... /usr/sbin/httpd -S shows the vhost configuration has been accepted. But telnetting to x.x.x.107 gives me the pages from the default apache on x.x.x.106. The 107 vhost log files have been created, but stay at zero bytes.I cannot actually access my vhost, either externally or locally. Do you have two specific NameVirtualHost lines? NameVirtualHost x.x.x.106:80 NameVirtualHost x.x.x.107:80 Then make sure that all your match one or the other. A NameVirtualHost *:80 will blanket all addresses apache is listening on. If I change the configuration to add an explicit: Listen x.x.x.107:80 apache refuses to restart, giving me the error: (99)Cannot assign requested address: make_sock: could not bind to address x.x.x.107:80 Did you remove the Listen *:80 line? Apache binds to the Listen directives in order. so first it binds to *:80, then it tries to bind to x.x.x.107:80 (which is already bound to apache) and fails. Doug Bell -- Senior Developer, Plain Black Corp. [ http://plainblack.com ] all that groks is - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org " from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [us...@httpd] how to using apache to SVN
On May 1, 2009, at 9:47 AM, 陈旭 wrote: I want to deploy a SVN platform in linux, how can I configure apache such that it will goes welll in SVN.Thanks Read the SVN Red Book, it has everything you will ever want to know about SVN (including how to install it), and it's completely free. http://svnbook.red-bean.com/ Doug Bell -- Senior Developer, Plain Black Corp. [ http://plainblack.com ] all that groks is - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org " from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [us...@httpd] 403 error from apache 2.2
On Apr 30, 2009, at 10:52 AM, l...@mit-web.dk wrote: I have installed the source tarball on my fedora 10 pc with the following configure --prefix=/home/lars/opt --enable-headers -- enable-expires --enable-so --with-mpm=prefork All i get in response is 403! Where shall I start in the conf file? You should start in the error log, probably located in /usr/local/ apache2/logs/error_log. Please give us the full error message. Doug Bell -- Senior Developer, Plain Black Corp. [ http://plainblack.com ] all that groks is - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org " from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [us...@httpd] Shell Script to automatically start Apache with SSL passphrase?
On Apr 27, 2009, at 6:16 PM, Mike Lyon wrote: It's another link in the security of that certificate... I'd prefer to keep it. It guarantees continuity from the creation of the CSR until you get the cert back from the CA. -Mike On Mon, Apr 27, 2009 at 4:12 PM, Igor Cicimov wrote: Recreate the certificate without passphrase, what do you need it for any way? On Tue, Apr 28, 2009 at 8:50 AM, Mike Lyon wrote: Hello All, There has to be an easy answer to this question. When I restart apache, it prompts me to enter in the passphrase for the SSL certs. How can I create a shell script to automatically enter in the passphrase for me when apache starts up at boot-up? Thank you, Mike Perl's Expect module might be able to help you, if you know Perl, but I second the notion to remove the passphrase. You don't need to ask the CA to resign the cert if I'm not mistaken. # openssl rsa -in www.domain.com.key -out www.domain.com.nopassphrase.key Doug Bell -- Senior Developer, Plain Black Corp. [ http://plainblack.com ] all that groks is
Re: [us...@httpd] How to define constant in apache configuration?
On Apr 20, 2009, at 8:23 PM, Alfonsas Stonis wrote: 2009/4/20 Krist van Besien On Mon, Apr 20, 2009 at 7:37 AM, Alfonsas Stonis wrote: Hi, I want to define constant that I will use latter in several places. Old documentation says that there was Define statement (or similar) Define myUrl "ldap://localhost"; ... AuthLDAPUrl $myUrl I don't think that there was ever, in any version of Apache, a way to do what you describe above. However, there is nothing in current documentation (I was not able to find the same or similar module). Can you tell me how to do it with apache2? I tried to search on web, but found only dozens of the same question (no answers). I tried: SetEnv myUrl "ldap://localhost"; ... AuthLDAPUrl $myUrl Did not worked too. You can't do this in Apache. You could try using mod_perl, which allows you to use perl statements in an apache config. But do you really want this amount of complexity? Krist I can not find now the definition, but there was some module for apache 1.3 (maybe it was third party) that allowed to write define. However, I found hard to believe that such basic thing would not be supported in apache 2 configuration. There should be some easy way to do this. This is a configuration file, not a programming language. If you want, you can use Include to mimic the functionality. Make a file with all the LDAP stuff you want, and then Include conf/ldap.conf In all the places you want the LDAP stuff to appear. If this is unacceptable, then use mod_perl as was suggested before. Doug Bell -- Senior Developer, Plain Black Corp. [ http://plainblack.com ] all that groks is - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org " from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [us...@httpd] Rewrite all except one case
On Apr 16, 2009, at 3:07 AM, dietmar.muel...@eurotours.at wrote: Hi all, I play a long time with rewrite to get follow rule: server/foo/(.*) should proxied to server/abc/$1 This works with RewriteRule /foo/(.*) /abc/$1 [P] then all requests to directory /foo are proxied (also with arguments) to /abc/ but now I need one exception: /foo should be proxied / or redirected to /abc/ers I try this with RewriteCondition (PATH_INFO and SCRIPT_FILENAME) but without success. The condition is either always true or false in all cases. I don't find the right Condition or ServerVariable Try using RewriteCond and %{REQUEST_FILENAME}. If that doesn't help, what does your condition look like? Did you use RewriteLog to see what the server is trying to match against? Doug Bell -- Senior Developer, Plain Black Corp. all that groks is - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org " from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [us...@httpd] Config file name of Apache 2.2.9 and its default location on Ubuntu 8.10???
On Apr 15, 2009, at 3:13 PM, Jimmyboy wrote: Hi, I am following the Quickstart Guide for installing NAGIOS using http://nagios.sourceforge.net/docs/3_0/quickstart-ubuntu.html . One of the prerequisites is Apache2, which I installed, and was successful in getting "It Works!!" for http://127.0.0.1. However, I am unable to understand which one of 'apache2.conf' & 'httpd.conf' happens to be the server's config file. Some say, it is 'apache2.conf', and others say, 'httpd.conf'. Because you installed from source, you want /usr/local/apache2/conf/ httpd.conf. The ubuntu package (from APT) uses /etc/apache2/ apache2.conf. 1] I installed Ubuntu 8.10 desktop OS in my VMWare. I also installed Apache2.2.9 using the apache2-2.2.9.orig.tar.gz file. "ps -ef | grep httpd" shows the result below. "root 17723 1 0 05:51 ?00:00:00 /usr/local/apache2/ bin/httpd -k start" followed by a couple of lines for the daemon service holding different PIDs. The httpd.pid file under '/usr/local/ apache2/logs' shows '17723' as above. 2] When I stop the service by issuing the command '/usr/local/apache2/ bin/apachectl -k stop', I do not find any result for "ps -ef | grep httpd". Neither does http://127.0.0.1 work. The httpd.pid file under '/usr/local/apache2/logs' no longer exists. 3] Excerpt from the error_log file under '/usr/local/apache2/logs': [notice] caught SIGTERM, shutting down [notice] Apache/2.2.9 (Unix) configured -- resuming normal operations Looking at the description above, can I say that Apache is installed correctly? Yes. Also, the website https://help.ubuntu.com/6.10/ubuntu/serverguide/C/httpd.html talks about editing the config file apache2.conf. Is it true in case of Apache on Ubuntu 8.* as well? Yes, but only for the ubuntu packages (from APT). Doug Bell -- Senior Developer, Plain Black Corp. all that groks is