Advice for finding a leaky Apache (probably PHP) process

2010-04-24 Thread Joe Auty
Hello, I'm wondering if you guys have any general tips on how to find the Apache process/app that is gobbling up my RAM randomly until my machine crashes and I'm forced to reboot? I'm tired of staring at top and working with flimsy hacks such as 10 minute Apache restart cronjobs. This seems

Re: Advice for finding a leaky Apache (probably PHP) process

2010-04-24 Thread Adam Vande More
On Sat, Apr 24, 2010 at 8:02 PM, Joe Auty j...@netmusician.org wrote: Hello, I'm wondering if you guys have any general tips on how to find the Apache process/app that is gobbling up my RAM randomly until my machine crashes and I'm forced to reboot? I'm tired of staring at top and working

Log rotation / newsyslog / apache not reloaded

2010-04-15 Thread Zbigniew Szalbot
will be sent. My problem is that while the apache logs are rotated as specified in the newsyslog.conf file, the apache server is not reloaded which causes it to write log entries to the now compressed files. Which flag should I specify to make sure apache is reloaded during log rotation? Thank you very

Re: Log rotation / newsyslog / apache not reloaded

2010-04-15 Thread Zbigniew Szalbot
On 15 Apr 2010 at 8:30, Zbigniew Szalbot wrote: Hello, I have the following lines in my /etc/newsyslog.conf /var/log/*-access.log 644 30*@T00 JCG /var/log/*-error.log644 30*@T00 JCG I added /var/run/httpd.pid at the end of both

Re: Log rotation / newsyslog / apache not reloaded

2010-04-15 Thread Morgan Wesström
added /var/run/httpd.pid at the end of both lines and will see if that helps. Zbigniew Szalbot Alternatively you can use sysutils/cronolog which will eliminate the need to restart Apache entirely. Apache's configuration file allows you to pipe your logs to sysutils/cronolog (or any other

Re: Log rotation / newsyslog / apache not reloaded

2010-04-15 Thread Matthew Seaman
Apache to do a graceful restart which is less disruptive for anyone using the web site, but it can result in a few log records being lost during the restart. If you're going to be running a busy website, then it's better to use rotatelogs(1) (comes with apache) or cronolog(1) (in ports) to cycle

Re: Install of Apache 2.2.15 after installing ssl lastes

2010-03-25 Thread Matthew Seaman
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 25/03/2010 01:48:36, Rob Weissenburger wrote: I have been picking my brain apart trying to figure this one out. Any help is appricated. ./configure --prefix=/usr/local/apache --mandir=/usr/local/man --enable-ssl --enable-suexec --enable-cgi

Install of Apache 2.2.15 after installing ssl lastes

2010-03-24 Thread Rob Weissenburger
I have been picking my brain apart trying to figure this one out. Any help is appricated. ./configure --prefix=/usr/local/apache --mandir=/usr/local/man --enable-ssl --enable-suexec --enable-cgi --enable-rewrite --enable-so --enable-modules=most --enable-mods-shared=max --sysconfdir=/etc

Force use of latest version of Apache

2010-01-16 Thread Carmel
depreciated. I have the latest version of Apache installed and I want to insure that I don't inadvertently end up with several different versions, or an older version installed. -- Carmel carmel...@hotmail.com ___ freebsd-questions@freebsd.org mailing list

Re: Force use of latest version of Apache

2010-01-16 Thread Bill Moran
that several older settings were depreciated. I have the latest version of Apache installed and I want to insure that I don't inadvertently end up with several different versions, or an older version installed. What kind of problem are you having? I've found that once I install an Apache port

Re: SA-09-15 vs Apache with client certificates

2009-12-07 Thread Toomas Aas
Toomas Aas wrote: Do I understand the NOTE WELL section of FreeBSD-SA-09:15 correctly that if I apply the patch then this functionality will no longer work? Testing confims that my understanding is correct. I applied the patch and authentication results in

SA-09-15 vs Apache with client certificates

2009-12-03 Thread Toomas Aas
Hello! We have Apache running on FreeBSD 7.2, where among others a SSL virtual host is defined. One particular subdirectory of this virtual host is configured to require client certificates, using .htaccess file: SSLVerifyClient Require

mod_security apache port

2009-11-26 Thread Alex Huth
Hello! When i use the ports to install mod_security on a fresh installed 8.0 system, it is installing apache 2.0.63_3. Are there any known problems why 2.2 isn't used together with mod_security? Thx Alex ___ freebsd-questions@freebsd.org mailing list

Re: mod_security apache port

2009-11-26 Thread krad
2009/11/26 Alex Huth a.h...@tmr.net Hello! When i use the ports to install mod_security on a fresh installed 8.0 system, it is installing apache 2.0.63_3. Are there any known problems why 2.2 isn't used together with mod_security? Thx Alex

Re: mod_security apache port

2009-11-26 Thread Frank Shute
On Thu, Nov 26, 2009 at 12:05:44PM +0100, Alex Huth wrote: Hello! When i use the ports to install mod_security on a fresh installed 8.0 system, it is installing apache 2.0.63_3. Are there any known problems why 2.2 isn't used together with mod_security? Thx I think that 2.0 is just

Re: Apache 2.2 mod_ldap refusing to work over SSL/TLS

2009-11-25 Thread Brian A. Seklecki (CFI NOC)
As far as I can tell, it doesn't even get to the certificate verification phase even though the STARTTLS command is successful. Is there any level of debugging that can be increased on the Apache side ? Possibly a build/compile-time option for the module? Debugging apache code can always

Re: Apache 2.2 mod_ldap refusing to work over SSL/TLS

2009-11-25 Thread Maxim Khitrov
On Wed, Nov 25, 2009 at 10:46 AM, Brian A. Seklecki (CFI NOC) sekle...@noc.cfi.pgh.pa.us wrote: As far as I can tell, it doesn't even get to the certificate verification phase even though the STARTTLS command is successful. Is there any level of debugging that can be increased on the Apache

there will be a log in apache access.log?

2009-11-22 Thread IT民工
l install apache and svn .. and now l input http://192.168.0.100/svn/ in website . and it let me to input user name and password . and l did not konw the username and password ,so l quit ,close the website ... l know if l input the right ID and password there will be a record in apache

Re: there will be a log in apache access.log?

2009-11-22 Thread Roman Neuhauser
On Sun, Nov 22, 2009 at 05:54:12AM -0800, IT?? wrote: l install apache and svn .. and now l input http://192.168.0.100/svn/ in website . and it let me to input user name and password . and l did not konw the username and password ,so l quit ,close the website ... l know if l input

Re: there will be a log in apache access.log?

2009-11-22 Thread Chris Rees
2009/11/22 Roman Neuhauser neuhau...@sigpipe.cz: On Sun, Nov 22, 2009 at 05:54:12AM -0800, IT?? wrote: l install apache and svn ..  and now l input  http://192.168.0.100/svn/ in website .  and it let me to input user name and password .  and l did not konw the username and password

Re: there will be a log in apache access.log?

2009-11-22 Thread Glen Barber
Hello, On Sun, Nov 22, 2009 at 8:54 AM, IT民工 perfectxi...@gmail.com wrote: l install apache and svn ..  and now l input  http://192.168.0.100/svn/ in website .  and it let me to input user name and password .  and l did not konw the username and password  ,so l quit ,close the website

Apache 2.2 mod_ldap refusing to work over SSL/TLS

2009-11-19 Thread Maxim Khitrov
Hello all, Wasted many hours on this and am no closer to a solution. I'm trying to get apache 2.2 on FreeBSD 7.2 to authenticate against our active directory (Windows 2003). The current status is that authentication works without problems when SSL/TLS are not used. Furthermore, I can establish

Re: Apache 2.2 mod_ldap refusing to work over SSL/TLS (solved)

2009-11-19 Thread Maxim Khitrov
On Thu, Nov 19, 2009 at 11:33 AM, Maxim Khitrov mkhit...@gmail.com wrote: Hello all, Wasted many hours on this and am no closer to a solution. I'm trying to get apache 2.2 on FreeBSD 7.2 to authenticate against our active directory (Windows 2003). The current status is that authentication

Re: Ruby Enterprise Edition 1.8.7 Apache / Passenger on FreeBSD 7.2

2009-11-11 Thread Konstantinos Pachnis
, Konstantinos Pachnis wrote: Hello, I was trying to use Apache/Passenger with Ruby Enterprise Edition 1.8.7 (both versions) on a FreeBSD 7.2 (i386 and x86_64), and Apache reports the following error: Apache/2.2.13 (FreeBSD) mod_ssl/2.2.13 OpenSSL/0.9.8e DAV/2 PHP/5.2.11 with Suhosin-Patch

Ruby Enterprise Edition 1.8.7 Apache / Passenger on FreeBSD 7.2

2009-11-10 Thread Konstantinos Pachnis
Hello, I was trying to use Apache/Passenger with Ruby Enterprise Edition 1.8.7 (both versions) on a FreeBSD 7.2 (i386 and x86_64), and Apache reports the following error: Apache/2.2.13 (FreeBSD) mod_ssl/2.2.13 OpenSSL/0.9.8e DAV/2 PHP/5.2.11 with Suhosin-Patch Phusion_Passenger/2.2.5

Re: APACHE/PHP/MYSQL Password Hash

2009-10-30 Thread Matthew Seaman
Monty Pyth wrote: I have inherited a website to work on that users authenticate to using a login and password from a login page. The server is FreeBSD 6.2 running APACHE/PHP/MYSQL. There is a MYSQL table that maintains all of the users. The table has a users name and password. The password

APACHE/PHP/MYSQL Password Hash

2009-10-29 Thread Monty Pyth
I have inherited a website to work on that users authenticate to using a login and password from a login page. The server is FreeBSD 6.2 running APACHE/PHP/MYSQL. There is a MYSQL table that maintains all of the users. The table has a users name and password. The password is hashed and some

Re: APACHE/PHP/MYSQL Password Hash

2009-10-29 Thread Olivier Nicole
Hi, The password is hashed and some examples are: 02SvtVJnRLzuQ 42jhVP6kxUBX6 Can anyone tell me what file I would look at to see what hash algorithm is being used to store the passwords in the table? Any help would be great. As a hint, to help make it easier to reply, where are the

Re: APACHE/PHP/MYSQL Password Hash

2009-10-29 Thread APseudoUtopia
On Thu, Oct 29, 2009 at 8:52 PM, Monty Pyth freebsdn...@yahoo.com wrote: I have inherited a website to work on that users authenticate to using a login and password from a login page. The server is FreeBSD 6.2 running APACHE/PHP/MYSQL. There is a MYSQL table that maintains all of the users

Help me configure Apache

2009-10-25 Thread Антон Андреевский
Good day! I have a home network consisting of two computers. Computers through a router connected to the Internet providers. There is a static IP address (93.81.252.152). Now I installed FreeBSD on one of the computers. Then I installed Apache 1.3. By command telnet localhost 80 I saw

Re: Help me configure Apache

2009-10-25 Thread Polytropon
. Then I installed Apache 1.3. By command telnet localhost 80 I saw on the computer screen index.html, which I created myself and placed in DocumentRoot. Unfortunately, the Internet browser does not display this page http://93.81.252.152 Show you how I configure Apache? Seems that Apache

Re: Help me configure Apache

2009-10-25 Thread adrienfirst
Антон Андреевский a écrit : Good day! I have a home network consisting of two computers. Computers through a router connected to the Internet providers. There is a static IP address (93.81.252.152). Now I installed FreeBSD on one of the computers. Then I installed Apache 1.3. By command

Re: Help me configure Apache

2009-10-25 Thread festin
FreeBSD on one of the computers. Then I installed Apache 1.3. By command telnet localhost 80 I saw on the computer screen index.html, which I created myself and placed in DocumentRoot. Unfortunately, the Internet browser does not display this page http://93.81.252.152 Show you how I configure

Apache server imap.so ssl_once_only_init error

2009-10-07 Thread David Southwell
Hi Would anyone be willing to help me out of my misery - I need to solcve this one: Thanks in advance David Apache22 server does not start httpd-error.log reads: [Wed Oct 07 16:03:17 2009] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?) [Wed Oct 07

Re: Apache server imap.so ssl_once_only_init error

2009-10-07 Thread Chuck Swiger
Hi-- On Oct 7, 2009, at 8:11 AM, David Southwell wrote: [Wed Oct 07 16:03:17 2009] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?) [Wed Oct 07 16:03:18 2009] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)

Re: Apache server imap.so ssl_once_only_init error

2009-10-07 Thread David Southwell
a new x.509 keypair, CSR, and signing that with your CA cert or have a Verisign, enTrust, openca.org, etc. Regards, I would guess that the imap.so symbol issue is what is causing Apache to die... The certificate-related messages are warnings and should not make it fatal. Markiyan

Re: Apache server imap.so ssl_once_only_init error

2009-10-07 Thread Markiyan Kushnir
I would guess that the imap.so symbol issue is what is causing Apache to die... The certificate-related messages are warnings and should not make it fatal. Markiyan. Chuck Swiger wrote: Hi-- On Oct 7, 2009, at 8:11 AM, David Southwell wrote: [Wed Oct 07 16:03:17 2009] [warn] RSA server

Re: Apache server imap.so ssl_once_only_init error

2009-10-07 Thread Robert Huff
David Southwell writes: /libexec/ld-elf.so.1: /usr/local/lib/php/20060613/imap.so: Undefined symbol ssl_onceonlyinit I look at this and ask (knowing very little about either) is this a problem with Apache, or a problem with PHP?. Robert huff

Re: Apache server imap.so ssl_once_only_init error

2009-10-07 Thread David Southwell
David Southwell writes: /libexec/ld-elf.so.1: /usr/local/lib/php/20060613/imap.so: Undefined symbol ssl_onceonlyinit I look at this and ask (knowing very little about either) is this a problem with Apache, or a problem with PHP?. Robert huff I

Re: Apache server imap.so ssl_once_only_init error

2009-10-07 Thread Michael Powell
Robert Huff wrote: David Southwell writes: /libexec/ld-elf.so.1: /usr/local/lib/php/20060613/imap.so: Undefined symbol ssl_onceonlyinit I look at this and ask (knowing very little about either) is this a problem with Apache, or a problem with PHP?. Easy enough to see - comment

Re: Apache server imap.so ssl_once_only_init error

2009-10-07 Thread David Southwell
Robert Huff wrote: David Southwell writes: /libexec/ld-elf.so.1: /usr/local/lib/php/20060613/imap.so: Undefined symbol ssl_onceonlyinit I look at this and ask (knowing very little about either) is this a problem with Apache, or a problem with PHP?. Easy enough to see - comment

Re: Apache server imap.so ssl_once_only_init error

2009-10-07 Thread Michael Powell
David Southwell wrote: Robert Huff wrote: David Southwell writes: /libexec/ld-elf.so.1: /usr/local/lib/php/20060613/imap.so: Undefined symbol ssl_onceonlyinit I look at this and ask (knowing very little about either) is this a problem with Apache, or a problem with PHP?. Easy

Re: Apache server imap.so ssl_once_only_init error

2009-10-07 Thread Michael Powell
Michael Powell wrote: David Southwell wrote: Robert Huff wrote: David Southwell writes: /libexec/ld-elf.so.1: /usr/local/lib/php/20060613/imap.so: Undefined symbol ssl_onceonlyinit Oh - forgot - this is what an ldd of my imap.so looks like on 7.2: testbed# pwd

Re: reducing size of apache instances

2009-09-12 Thread Dominic Fandrey
John Almberg wrote: I'm starting to wonder about the Swap info from top... it never changes. It has said the same thing all day, since I've been watching it. Does that make sense? Swap: 2008M Total, 150M Used, 1858M Free, 7% Inuse That looks about normal if your RAM suffices. In that case

Re: reducing size of apache instances

2009-09-11 Thread Gareth Brown
to any of your webpages John Almberg wrote: My Apache 2.2 instances are running about 18 Meg each. I've been thinking about doing something to trim these down, and I think tomorrow is the day to take action. They are getting out of hand. I've done a bit of research on this. I

Re: reducing size of apache instances

2009-09-11 Thread Ivan Voras
John Almberg wrote: My Apache 2.2 instances are running about 18 Meg each. I've been thinking about doing something to trim these down, and I think tomorrow is the day to take action. They are getting out of hand. I've done a bit of research on this. I think the way to get started

Re: reducing size of apache instances

2009-09-11 Thread John Almberg
Ivan Voras wrote: There is another thing you can try. Judging from the process size you've given it looks like you are not using PHP or a similar Apache module. Also, you didn't specify anything so I assume you are using the default configuration, which operates in prefork mode - MPM_PREFORK

Re: reducing size of apache instances

2009-09-11 Thread Ivan Voras
John Almberg wrote: I am using PHP, in fact. I've listed all the loaded modules below, and marked the ones I added with an '*'. I need the proxy modules because I use Apache as a front end for Mongrel. This WITH_MPM=worker sounds interesting. I'll have to read up on it. I guess

SVN + Apache

2009-09-11 Thread Steve Bertrand
Hi all, The only relevance that this has to FBSD is that both Apache and subversion were installed via packages. I've been meaning to get around to enabling SVN so that I can access my repo via HTTPs. However, most of the docs I've found via Sir Google claim that it's likely that I'll have

Re: SVN + Apache

2009-09-11 Thread Daniel Molina Wegener
2009/9/11 Steve Bertrand st...@ibctech.ca Hi all, The only relevance that this has to FBSD is that both Apache and subversion were installed via packages. I've been meaning to get around to enabling SVN so that I can access my repo via HTTPs. However, most of the docs I've found via Sir

Re: reducing size of apache instances

2009-09-11 Thread John Almberg
PHP is incredibly buggy and will in all probability break Apache if you try running it in threaded mode. That doesn't sound so good. As a sanity check... I've been studying these processes all morning. When I use 'top', the column RES shows the amount of RAM used for the process, correct

Re: reducing size of apache instances

2009-09-11 Thread Linda Messerschmidt
On Fri, Sep 11, 2009 at 1:48 PM, John Almberg jalmb...@identry.com wrote: As a sanity check... I've been studying these processes all morning. When I use 'top', the column RES shows the amount of RAM used for the process, correct? This is the value I'd like to get down. How many Apache

Re: reducing size of apache instances

2009-09-11 Thread Adam Vande More
used for the process, correct? This is the value I'd like to get down. How many Apache processes are involved, total? Because I'm really not sure how much success you're going to have with this. You're at 22mb already (by comparison mine are 44mb *without* mod_php). How much improvement

Re: reducing size of apache instances

2009-09-11 Thread Michael Powell
Ivan Voras wrote: John Almberg wrote: I am using PHP, in fact. I've listed all the loaded modules below, and marked the ones I added with an '*'. I need the proxy modules because I use Apache as a front end for Mongrel. This WITH_MPM=worker sounds interesting. I'll have to read up

Re: reducing size of apache instances

2009-09-11 Thread John Almberg
down. How many Apache processes are involved, total? Because I'm really not sure how much success you're going to have with this. You're at 22mb already (by comparison mine are 44mb *without* mod_php). How much improvement are you looking for? A couple of megs? Yup... that's about what I got

Re: reducing size of apache instances

2009-09-11 Thread Chuck Swiger
Hi-- On Sep 11, 2009, at 12:42 PM, John Almberg wrote: My basic problem is at peak usage times (usually in the afternoon), the server starts using swap space, and then response times really bog down. Limit the MaxChildren to the number of Apache httpd's which your machine can actually

Re: reducing size of apache instances

2009-09-11 Thread Adam Vande More
the amount of RAM used for the process, correct? This is the value I'd like to get down. How many Apache processes are involved, total? Because I'm really not sure how much success you're going to have with this. You're at 22mb already (by comparison mine are 44mb *without* mod_php). How much

Re: reducing size of apache instances

2009-09-11 Thread John Almberg
You've misunderstood what you've done. You have not saved a couple of MB, you've saved one. Of the 18 MB, nearly all of it is shared memory which is only loaded once. Ah... Okay. That actually makes sense. Thanks for the clarification. 1GB web server is more than enough for basic www

Re: reducing size of apache instances

2009-09-11 Thread Diego Montalvo
Have given Nginx web server a try? It is small and may work better with limited RAM. http://www.nginx.net/ http://urloid.com/nginx1 Diego 2009/9/11 John Almberg jalmb...@identry.com: You've misunderstood what you've done.  You have not saved a couple of MB, you've saved one.  Of the 18 MB,

Re: reducing size of apache instances

2009-09-11 Thread Adam Vande More
On Fri, Sep 11, 2009 at 3:20 PM, John Almberg jalmb...@identry.com wrote: You've misunderstood what you've done. You have not saved a couple of MB, you've saved one. Of the 18 MB, nearly all of it is shared memory which is only loaded once. Ah... Okay. That actually makes sense. Thanks

Re: reducing size of apache instances

2009-09-11 Thread Linda Messerschmidt
On Fri, Sep 11, 2009 at 4:20 PM, John Almberg jalmb...@identry.com wrote: I would have thought, but some times it really gets slow and I'm trying to figure out why. When bogged down, the load averages are low. The main thing that looks out of whack is swap space, which seems to never go below

Re: reducing size of apache instances

2009-09-11 Thread John Almberg
. Well the biggest SIZE process is mysql, followed by three mongrel instances (for a ruby on rails app), and then a bunch of httpd processes. Mysql is optimized for a small server, there isn't much I can do about the size of the Rails app, so the apache instances seemed like the logical place

Re: reducing size of apache instances

2009-09-11 Thread Robert Huff
John Almberg writes: I'm starting to wonder about the Swap info from top... it never changes. It has said the same thing all day, since I've been watching it. Does that make sense? The current machine has 8G, so ... porbably not a good test case. :-) It's predecessor

Re: reducing size of apache instances

2009-09-11 Thread Dan Nelson
app, so the apache instances seemed like the logical place to start. I'm starting to wonder about the Swap info from top... it never changes. It has said the same thing all day, since I've been watching it. Does that make sense? Swap: 2008M Total, 150M Used, 1858M Free, 7% Inuse If you

reducing size of apache instances

2009-09-10 Thread John Almberg
My Apache 2.2 instances are running about 18 Meg each. I've been thinking about doing something to trim these down, and I think tomorrow is the day to take action. They are getting out of hand. I've done a bit of research on this. I think the way to get started is to eliminate unused modules

Re: reducing size of apache instances

2009-09-10 Thread Chuck Swiger
On Sep 10, 2009, at 7:58 PM, John Almberg wrote: My Apache 2.2 instances are running about 18 Meg each. I've been thinking about doing something to trim these down, and I think tomorrow is the day to take action. They are getting out of hand. [ ... ] But what about the set that is left after

Re: reducing size of apache instances

2009-09-10 Thread Linda Messerschmidt
On Thu, Sep 10, 2009 at 10:58 PM, John Almberg jalmb...@identry.com wrote: I assume that some are critical to the basic operation of Apache. I am hoping I can google a list of these tomorrow. Obviously these I'll have to live with. This is a pretty short list, and Apache won't start without

activate apache mod_rewrite

2009-07-12 Thread Ray
with other php websites. I installed apache 2.2 along with php 5.2 from ports. google says that the following lines should appear in httpd.conf LoadModule rewrite_module libexec/apache/mod_rewrite.so AddModule mod_rewrite.c first line does appear, slightly modified LoadModule

Re: activate apache mod_rewrite

2009-07-12 Thread Gregory T Helton
under other hosting. The server has been working properly for over a year with other php websites. I installed apache 2.2 along with php 5.2 from ports. google says that the following lines should appear in httpd.conf LoadModule rewrite_module libexec/apache/mod_rewrite.so AddModule

Re: activate apache mod_rewrite

2009-07-12 Thread Ray
out how to turn it on. The website was working properly under other hosting. The server has been working properly for over a year with other php websites. I installed apache 2.2 along with php 5.2 from ports. google says that the following lines should appear in httpd.conf LoadModule

Re: activate apache mod_rewrite

2009-07-12 Thread Michael Powell
can't figure out how to turn it on. The website was working properly under other hosting. The server has been working properly for over a year with other php websites. I installed apache 2.2 along with php 5.2 from ports. google says that the following lines should appear in httpd.conf

Re: activate apache mod_rewrite

2009-07-12 Thread Gregory T Helton
about to be hosting a php website that does use it and I can't figure out how to turn it on. The website was working properly under other hosting. The server has been working properly for over a year with other php websites. I installed apache 2.2 along with php 5.2 from ports

Re: activate apache mod_rewrite (solved)

2009-07-12 Thread Ray
See the section in the docs. Usually there are two other directives used to configure functionality after activating it. You will usually have one, or more, RewriteCond conditions which when evaluated run through a RewriteRule of some kind. Brush up on your Apache regex handling

Secure apache with php

2009-07-09 Thread Nicolas Letellier
Hello. I want to secure my Apache/PHP environment without : - safe_mode - suphp / suexec So, I found this : http://mpm-itk.sesse.net/ In this page, we can see that a FreeBSD port exists, but I can't find it. What do you thinh about it? This tool seems to be good. Which Apache version do you

Re: Secure apache with php

2009-07-09 Thread Nicolas Letellier
Le Thu, 9 Jul 2009 13:18:39 +0300, Reko Turja reko.tu...@liukuma.net a écrit : I want to secure my Apache/PHP environment... Full suhosin, both patch and mod for the PHP. IIRC suhosin patch is optional in PHP port and the mod can be installed via ports. (http://www.hardened-php.net

Re: Secure apache with php

2009-07-09 Thread Reko Turja
I want to secure my Apache/PHP environment... Full suhosin, both patch and mod for the PHP. IIRC suhosin patch is optional in PHP port and the mod can be installed via ports. (http://www.hardened-php.net/suhosin/index.html) Apache environment and binaries set up in a jail. Which Apache

Re: Secure apache with php

2009-07-09 Thread Julien Cigar
requests per process before it gets killed and re-launched (usefull if a webapp leaks memory), etc Then in your Apache config you put something like : = FastCgiExternalServer /usr/local/www/apache22/cgi-bin/scar-php-wrapper.fcgi -host 127.0.0.1:5009 -idle-timeout 1800 Location /cgi-bin

Re: Secure apache with php

2009-07-09 Thread Nicolas Letellier
-cgi -b 127.0.0.1:5009 = you can control how much children have to be fork(), the number of maximum requests per process before it gets killed and re-launched (usefull if a webapp leaks memory), etc Then in your Apache config you put something like

Re: Secure apache with php

2009-07-09 Thread Julien Cigar
memory), etc Then in your Apache config you put something like : = FastCgiExternalServer /usr/local/www/apache22/cgi-bin/scar-php-wrapper.fcgi -host 127.0.0.1:5009 -idle-timeout 1800 Location /cgi-bin/scar-php-wrapper.fcgi SetHandler fastcgi-script

Re: Secure apache with php

2009-07-09 Thread Nicolas Letellier
Le Thu, 09 Jul 2009 14:36:11 +0200, Julien Cigar jci...@ulb.ac.be a écrit : When I tested php in cgi, performances were bad. That's why, php_mod is better (in my case != It's not CGI, it's FastCGI. There is no performance loss if you use an opcode cacher (like x-cache). And is

Re: Secure apache with php

2009-07-09 Thread Pierre Guinoiseau
Just build www/apache22 with WITH_MPM=itk and you'll have it. :) Then add something like this in each vhost: IfModule mpm_itk_module AssignUserId my_user my_group /IfModule Nicolas Letellier wrote: Le Thu, 09 Jul 2009 14:36:11 +0200, Julien Cigar jci...@ulb.ac.be a écrit : When I

Re: Secure apache with php

2009-07-09 Thread Mister Olli
Hi, I'm currently using mpm-itk (on debian, but should be replaced with freebsd soon ;-)). I'm quite happy with the solution as it's easy to setup many user accounts for web without ugly access right stuff and all that. apache never made a problem after setup :-) unfortunately I've never had

Re: Hacker problem...Takes down apache?

2009-07-08 Thread Steve Bertrand
to the restrictive hardware firewall, plus the one I saw relies on a bash shell which I don't have). Also another one looks like a generic network bouncer -- something like netcat. However what I can't figure out is how it is causing interference with Apache (and possibly networking in general

Re: Hacker problem...Takes down apache?

2009-07-08 Thread Lowell Gilbert
ch...@darkadsl.ca ch...@darkadsl.ca writes: I run a virtual hosting server and one of my clients got hacked (weak password in CMS). Since you know the machine was hacked, you can't trust *anything* on the machine. If possible, you should rebuild it. If a jail was hacked, replacing that jail

Hacker problem...Takes down apache?

2009-07-07 Thread ch...@darkadsl.ca
, plus the one I saw relies on a bash shell which I don't have). Also another one looks like a generic network bouncer -- something like netcat. However what I can't figure out is how it is causing interference with Apache (and possibly networking in general). The processes I've seen from

Re: FreeBSD and apache 2.2 band width limiting

2009-06-15 Thread Jos Chrispijn
on someone else to solve your traffic problems, you can take matters into your own hands and install the Apache module mod_throttle. mod_throttle allows you to build custom bandwidth and connection rate policies for individual files and directories and entire servers. To understand why

FreeBSD and apache 2.2 band width limiting

2009-06-14 Thread Dave
Hello, I've got a FreeBSD 7.2 box that i want to run web services on with apache. I've got requirements to have protected content. Two groups of users should be able to access it and no one else, in one group they get a certain amound of band width, the other group gets another set amount

Re: FreeBSD and apache 2.2 band width limiting

2009-06-14 Thread Chad Brown
On Sun, Jun 14, 2009 at 3:06 PM, Dave dave.meh...@gmail.com wrote: Hello, I've got a FreeBSD 7.2 box that i want to run web services on with apache. I've got requirements to have protected content. Two groups of users should be able to access it and no one else, in one group they get

Re: apache not starting on reboot

2009-05-20 Thread Mel Flynn
On Monday 18 May 2009 10:55:00 Odhiambo ワシントン wrote: On Mon, May 18, 2009 at 11:03 AM, Brent Clark brentgclarkl...@gmail.comwrote: Hiya I have the following in my /etc/rc.conf mitm# cat /etc/rc.conf | grep apache apache22_enable=YES mitm# The problem I seem to be experiencing

apache not starting on reboot

2009-05-18 Thread Brent Clark
Hiya I have the following in my /etc/rc.conf mitm# cat /etc/rc.conf | grep apache apache22_enable=YES mitm# The problem I seem to be experiencing is that if I reboot the machine, then apache does not come up. Its only on when I run /usr/local/etc/rc.d/apache22 restart that apache

Re: apache not starting on reboot

2009-05-18 Thread Odhiambo ワシントン
On Mon, May 18, 2009 at 11:03 AM, Brent Clark brentgclarkl...@gmail.comwrote: Hiya I have the following in my /etc/rc.conf mitm# cat /etc/rc.conf | grep apache apache22_enable=YES mitm# The problem I seem to be experiencing is that if I reboot the machine, then apache does not come up

Re: Apache won't start - undefined symbol libintl_bindtextdomain

2009-05-05 Thread turutani
Somerson billsomer...@gmail.comwrote: how about the patch in http://www.freebsd.org/cgi/query-pr.cgi?pr=134227 ? -- View this message in context: http://www.nabble.com/Apache-won%27t-start---undefined-symbol-%22libintl_bindtextdomain%22-tp23259886p23384784.html Sent from the freebsd-questions

Re: Apache errors.

2009-05-05 Thread Martin Smith
Armin Pirkovitsch wrote: Hi! Have you tried to recompile the port from which that library came? (pkg_info -W /usr/local/lib/libavahi-common.so.3 should help you finding the correct port if you do not know which port that is) Armin On Sun 03 May 2009, Jeff Molofee wrote: Just started

Re: Apache errors.

2009-05-05 Thread Mel Flynn
. The bindtextdomain is from gettext. If that don't help, disable mod_dnssd and ping avahi/apache maintainers. Most users don't need this module. It is used to advertise your http server to the local network, just in case you have it on another port. gnome-user-share and as such x11/gnome2 finds

Apache errors.

2009-05-03 Thread Jeff Molofee
Just started getting this.. can anyone tell me how to fix it? Performing sanity check on apache22 configuration: httpd: Syntax error on line 104 of /usr/local/etc/apache22/httpd.conf: Cannot load /usr/local/libexec/apache22/mod_dnssd.so into server: /usr/local/lib/libavahi-common.so.3:

Re: Apache errors.

2009-05-03 Thread Armin Pirkovitsch
Hi! Have you tried to recompile the port from which that library came? (pkg_info -W /usr/local/lib/libavahi-common.so.3 should help you finding the correct port if you do not know which port that is) Armin On Sun 03 May 2009, Jeff Molofee wrote: Just started getting this.. can anyone tell me

Re: Running Apache with as few modules as possible

2009-04-30 Thread Tom Worster
On 4/29/09 4:59 PM, Charles Howse cho...@charter.net wrote: I recall Bill Gates saying, 640k is enough for anybody. I agree, it's not much of a savings, and there's always the possibility that the webmaster may add something later that needs a module that's commented, and run around in

Re: Running Apache with as few modules as possible

2009-04-29 Thread Tom Worster
On 4/28/09 6:45 PM, Adam Vandemore amvandem...@gmail.com wrote: OK, here we go: With Apache running on the development machine, modules commented as in my first post -- CPU: 0.8% user, 0.0% nice, 0.4% system, 0.8% interrupt, 98.1% idle Mem: 27M Active, 139M Inact, 64M Wired, 11M Cache

Re: Running Apache with as few modules as possible

2009-04-29 Thread Charles Howse
On Apr 29, 2009, at 3:18 PM, Tom Worster wrote: On 4/28/09 6:45 PM, Adam Vandemore amvandem...@gmail.com wrote: OK, here we go: With Apache running on the development machine, modules commented as in my first post -- CPU: 0.8% user, 0.0% nice, 0.4% system, 0.8% interrupt, 98.1% idle

Running Apache with as few modules as possible

2009-04-28 Thread Charles Howse
really my make your mistakes here, instead of on the REAL web server machine. I researched each module on the Apache site, and to the extent that I understood, chose whether to comment them or not. It loads without any syntax errors, and I have tested the things that I can think of that might

<    1   2   3   4   5   6   7   8   9   10   >