[us...@httpd] suexec for another user

2010-08-11 Thread David Ricar
Hello, for quite some time I am digging into webserver security and sadly, I found basicaly two bad choices for multisite ultiuser server. I found some disscussions about the subject, but it seems that I am still missing something. 1) Standard way of usage with different ftp users and a

Re: [us...@httpd] suexec for another user

2010-08-11 Thread Jefferson Ogata
On 2010-08-11 13:23, David Ricar wrote: Am I missing an obvious solution that is possible without the patch or is my view too paranoid? Mount all your content read-only. - The official User-To-User support forum of the Apache

Re: [us...@httpd] suexec for another user

2010-08-11 Thread Phil Howard
On Wed, Aug 11, 2010 at 09:23, David Ricar r...@ethernet.cz wrote: Hello, I don't think I see anything you are trying to accomplish different than an ordinary multiuser server. You should be able to configure where CGI can be run from to a narrow space. I assume FTP is for the site owner to

[us...@httpd] url rewrite help

2010-08-11 Thread Matthew P. Smith
I need to rewrite requested urls from this: domain.com/some-directory/ to domain.com/some-directory/index.cfm Can someone provide an example? I need it to apply to all directory only requests. I looked here, but did not see how to do it.

Re: [us...@httpd] url rewrite help

2010-08-11 Thread David Ricar
I'd use default index and extend it for .cfm as this: DirectoryIndex index.html index.cgi index.pl index.php index.xhtml index.htm index.cfm Cheers David Matthew P. Smith wrote: I need to rewrite requested urls from this: domain.com/some-directory/ http://domain.com/some-directory/ to

Re: [us...@httpd] suexec for another user

2010-08-11 Thread David Ricar
Jefferson Ogata wrote: On 2010-08-11 13:23, David Ricar wrote: Am I missing an obvious solution that is possible without the patch or is my view too paranoid? Mount all your content read-only. Sadly most of the sites requires some places to upload images and so on, so this is not

Re: [us...@httpd] suexec for another user

2010-08-11 Thread David Ricar
Phil Howard wrote: For maintenance, it might be easier for you to make an suexec wrapper. Run your wrapper to do custom checks and if it decides to go on, it runs suexec. That way your maintenance is for your program, only, and you have to track a lot fewer changes to Apache code (basically

Re: [us...@httpd] SSL certificate and multiple names

2010-08-11 Thread Crypto Sal
On 08/10/2010 04:11 AM, Mark Watts wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 06/08/10 18:22, Hélène Montarou wrote: Hi, I have installed httpd-2.2.3 and I would like to generate a certificate. The machine on which it is installed has an internal name (internal.domain.com) and I

[us...@httpd] Need help with VirtualHost/forwarding

2010-08-11 Thread Mike Soultanian
Hi! I have three servers, all of which are running Apache: F is the failing server, P is the main production server, and I is the interim server. Our current site is here on server F (failing server): http://cota.csulb.edu That server is failing - I need to get the site off of that server

Re: [us...@httpd] Need help with VirtualHost/forwarding

2010-08-11 Thread Mike Soultanian
You know, I don't know why this didn't work when I first tried it, but I messed around and used the following entry and everything seems to work: VirtualHost *:80 Redirect permanent / http://www.csulb.edu/colleges/cota; /VirtualHost I don't mind forwarding all port 80 traffic to the new site

Re: [us...@httpd] url rewrite help

2010-08-11 Thread Matthew P. Smith
Hi, I have this in the conf: IfModule dir_module DirectoryIndex index.cfm /IfModule I am running coldfusion 9. I am tyring to use the onMissingTemplate function to call a custom 404. The application server does not invoke this function for directory calls, so I need to redirect to

Re: [us...@httpd] url rewrite help

2010-08-11 Thread Matthew Smith
Hi, I have this in the conf: IfModule dir_module DirectoryIndex index.cfm /IfModule I am running coldfusion 9. I am tyring to use the onMissingTemplate function to call a custom 404. The application server does not invoke this function for directory calls, so I need to redirect to