[BlueOnyx:19756] Re: 5209R YUM Updates (important!)

2016-06-24 Thread Dirk Estenfeld
Michael, hmm, sendmail and saslauthd seems to be the only problems. But on the 5209 we are maintaining both services did not start automatically. I had to walk over all the servers and started sendmail and saslauth manually. Best regards, Dirk --- bla

[BlueOnyx:19757] Maximum value for upload files in OWN-Cloud Web-App

2016-06-24 Thread Manuel Perissinotto
Hi all, I need to change the Maximum value for upload files in OWN-Cloud Web-App. We I'm on OWN-Cloud "admin" page, I try to change value from 5 MB to 512 MB, but if I change page when I come back I see the old default value (5 MB). I tried to change information about "upload_max_filesize" in /

[BlueOnyx:19758] Maximum value for upload files in OWN-Cloud Web-App

2016-06-24 Thread Manuel Perissinotto
Hi all, I need to change the Maximum value for upload files in OWN-Cloud Web-App. We I'm on OWN-Cloud "admin" page, I try to change value from 5 MB to 512 MB, but if I change page when I come back I see the old default value (5 MB). I tried to change information about "upload_max_filesize" in /home

[BlueOnyx:19759] Re: Maximum value for upload files in OWN-Cloud Web-App

2016-06-24 Thread Chris Gebhardt - VIRTBIZ Internet
Hi Manuel, On 6/24/2016 5:59 AM, Manuel Perissinotto wrote: Hi all, I need to change the Maximum value for upload files in OWN-Cloud Web-App. We I'm on OWN-Cloud "admin" page, I try to change value from 5 MB to 512 MB, but if I change page when I come back I see the old default value (5 MB). I t

[BlueOnyx:19760] Re: Maximum value for upload files in OWN-Cloud Web-App

2016-06-24 Thread Manuel Perissinotto
Hi Chris, That's the answer for my question! I've changed the value in BlueOnix GUI, and the same value is changed automatically in OWN-Cloud GUI! Thanks! ___ Blueonyx mailing list Blueonyx@mail.blueonyx.it http://mail.blueonyx.it/mailman/listinfo/blue

[BlueOnyx:19761] Enabling the rewrite module in Apache config

2016-06-24 Thread Chuck Tetlow
Does anyone have any experience with, or recommendations on enabling the rewrite module in the Apache config? I've got a site developer that insists the ExpressEngine requires the rewrite module enabled for his site to work correctly.  I haven't found anything on-line suggesting that it would b

[BlueOnyx:19762] Re: Enabling the rewrite module in Apache config

2016-06-24 Thread Michael Stauber
Hi Chuck, > Does anyone have any experience with, or recommendations on enabling the > rewrite > module in the Apache config? It's enabled by default on all BlueOnyx versions. You can verify it this way: [root@5209r ~]# /usr/sbin/httpd -M|grep rewrite rewrite_module (shared) So you (or your s

[BlueOnyx:19763] Re: Enabling the rewrite module in Apache config

2016-06-24 Thread Chuck Tetlow
That's what I'm afraid of Michael. That "AllowOverride - ALL" is a server-wide setting.  And wouldn't that open it up to possible vulnerabilities, maybe in other older-software sites on the server?  We've got some customers who are running 10 year old PHP sites on our newer BlueOnyx servers - a

[BlueOnyx:19764] Re: Enabling the rewrite module in Apache config

2016-06-24 Thread Greg Kuhnert
This is a complex topic. I thought I would provide some details to help people to decide how they want to configure their boxes. These settings enable a number of tweaks at an Apache level globally across all vSites. I did talk to Michael about possibly making them configurable at a site level.

[BlueOnyx:19765] Re: Enabling the rewrite module in Apache config

2016-06-24 Thread Michael Stauber
Hi all, Greg wrote: > The biggest risk in my opinion relates to open_basedir. That and "allow_url_fopen" and "allow_url_include", which are fruit of the poison tree. If these are on, all bets of server integrity are off. A vulnerable script can then be tricked into including remotely hosted PHP c

[BlueOnyx:19766] Re: Enabling the rewrite module in Apache config

2016-06-24 Thread Greg Kuhnert
Hi Michael. Nothing like a little friendly debate… and in this case I disagree with you… Your email below talked about “all bets of server integrity are off” if we allow end users to set allow_url_fopen and allow_url_include to on. I disagree with that statement. Yes, allow_url_fopen and allo