Re: [us...@httpd] Someone hacked my apache2 server

2010-04-05 Thread Dan_Mitton
Oleg, Some other things to check/do if you don't already know this... Be sure that the httpd process runs as a completely unprivileged user with nothing but read access to ANYTHING. Be sure that the content of your site is not owned by the same user as the httpd user. Read only access should

Re: [us...@httpd] SSL on Apache 2.2.14

2009-11-25 Thread Dan_Mitton
John, You should not need to upgrade Solaris. I've got apache running on a solaris 9 box just fine. Your wrong path shouldn't be a problem either. Those are just the last place to look for an .so. Solaris will use what is in the 'crle' command and the LD_LIBRARY_PATH environment variable

Re: [us...@httpd] SSL on Apache 2.2.14

2009-11-25 Thread Dan_Mitton
John, This is a (very) short explanation of the error code at: http://www.mozilla.org/projects/security/pki/nss/ref/ssl/sslerr.html and this one has a possible cause: http://serverfault.com/questions/63167/sslerrorbadmacalert-error-in-firefox You might want to Google the message for more

Re: [us...@httpd] SSL on Apache 2.2.14

2009-11-25 Thread Dan_Mitton
We are only at Apache 2.2.9, but don't have any problems. The command I use to build apache with is: ./configure --prefix=/usr/local/apache-2.2.9 --with-ssl=/usr/local/ssl --with-z=/usr/local/lib --enable-ssl --enable-cache --enable-disk-cache --enable-mem-cache --enable-autoindex

Re: [us...@httpd] SSL on Apache 2.2.14

2009-11-25 Thread Dan_Mitton
I would stick with openssl-0.9.8l, the other have a bunch of vulnerabilities, but that can get taken care of once this other problem is fixed :) When you built OpenSSL, did you build it shared? My command is: ./config shared zlib-dynamic --prefix=/usr/local/ssl-0.9.8l

Re: [EMAIL PROTECTED] Error when compiling apache 2.2.10 on solaris 10, suggestions?

2008-10-28 Thread Dan_Mitton
Your output shows that the two undefined symbols are used/referenced in libapr-1.so. I would check over the build of your libapr and/or apr utils. Please respond to users@httpd.apache.org To: users@httpd.apache.org cc: (bcc: Dan Mitton/YD/RWDOE) Subject:[EMAIL PROTECTED]

Re: [EMAIL PROTECTED] install problem on solaris

2008-08-04 Thread Dan_Mitton
Matthew, YES! I had exactly the same problems. I have a very strange solution... Edit the /srclib/apr-util/Makefile and change: install-modules: install-modules-yes to: install-modules: install-modules-no I can't tell you why, only that it seemed to work and the modules were still

[EMAIL PROTECTED] Problems building httpd 2.2.9 on Sun Solaris 9 SPARC

2008-07-11 Thread Dan_Mitton
At several places in the 'configure' process, I am getting a WARNING about 'Unrecognized options'. I have used all of these options before, at least on the 2.2.2, 2.2.3, 2.2.4 2.2.6 versions. The help says they are all valid. Other then these WARNING, configure completes with no errors (see

Re: [EMAIL PROTECTED] Problems building httpd 2.2.9 on Sun Solaris 9 SPARC

2008-07-11 Thread Dan_Mitton
Followup... If I edit 'srclib/apr-util/Makefile' and change: install-modules: install-modules-yes to: install-modules: install-modules-no everything works AND the modules get installed !! Very strange!! Please respond to users@httpd.apache.org To: users@httpd.apache.org cc:

[EMAIL PROTECTED] rewrite rule to change spaces to underscores

2008-06-11 Thread dan_mitton
Is there a simple rewrite rule to change all space (and/or %20's) in a URL to underscores (_) ?? Thanks, Dan - The official User-To-User support forum of the Apache HTTP Server Project. See

Re: [EMAIL PROTECTED] SMTP server

2008-03-10 Thread Dan_Mitton
If you are only looking to SEND emails, you don't need a server at all. You just need something that will act as an SMTP client - Perl, PHP, Ruby, CGI... Please respond to users@httpd.apache.org To: users@httpd.apache.org cc: [EMAIL PROTECTED] (bcc: Dan Mitton/YD/RWDOE) Subject:

Re: [EMAIL PROTECTED] httpd2 vhost ssl configuration problem

2008-02-19 Thread Dan_Mitton
You state that your vhost config looks like: IfDefine SSL_DEFAULT_VHOST IfModule ssl_module VirtualHost *:80 . . . if you want https to work, I believe your virtual host command should read: VirtualHost *:443 I assume that in some other VirtualHost block, you already

Re: [EMAIL PROTECTED] HTTPD won't start. Fails with error message.

2008-02-15 Thread Dan_Mitton
How about the output from: netstat -na | grep LISTEN How many Listen commands do you have in your httpd.conf ? Please respond to users@httpd.apache.org To: users@httpd.apache.org cc: (bcc: Dan Mitton/YD/RWDOE) Subject:Re: [EMAIL PROTECTED] HTTPD won't start. Fails with

Re: [EMAIL PROTECTED] HTTPD won't start. Fails with error message.

2008-02-15 Thread Dan_Mitton
You fat fingered it when you cut and pasted from the error log?? What do your Listen and VirtualHost directives look like? Please respond to users@httpd.apache.org To: users@httpd.apache.org cc: (bcc: Dan Mitton/YD/RWDOE) Subject:Re: [EMAIL PROTECTED] HTTPD won't start.

Re: [EMAIL PROTECTED] HTTPD won't start. Fails with error message.

2008-02-15 Thread Dan_Mitton
Ok, how about: ifconfig -a Please respond to users@httpd.apache.org To: users@httpd.apache.org cc: (bcc: Dan Mitton/YD/RWDOE) Subject:Re: [EMAIL PROTECTED] HTTPD won't start. Fails with error message. LSN: Not Relevant User Filed as: Not a Record I fat fingered it when I

Re: [EMAIL PROTECTED] Tomcat and Apache on the same port?

2007-09-28 Thread Dan_Mitton
Tony, The only way to have two services use/listen on the same port is to use two different IP addresses, one for each. Then each can listen on port 80. A possible, very high effort, alternative would be to write a program that would sit in front of both apache and tomcat, that could examine

Re: [EMAIL PROTECTED] Tomcat and Apache on the same port?

2007-09-28 Thread Dan_Mitton
Tony, Aaah. That is what I feared. You would need to get a second static IP address from your ISP to make any of this work. If you are stuck with one static IP address from your ISP, I think your only solution is the mod_jk that you are already doing. Why is proxying the tomcat requests

Re: [EMAIL PROTECTED] Tomcat and Apache on the same port?

2007-09-28 Thread Dan_Mitton
Tony, Another question just came to mind... Are we trying to solve the wrong problem here? If you have tomcat, why do you need apache at all? - The official User-To-User support forum of the Apache HTTP Server Project. See

Re: [EMAIL PROTECTED] Tomcat and Apache on the same port?

2007-09-28 Thread Dan_Mitton
Tony, Yes. One physical server and/or network card can support multiple IP addresses. What OS is this? When you say LAN, is this a corporate LAN or a home/isp LAN? Which versions of apache and tomcat? proxy_ajp and mod_jk are the same thing, only proxy_ajp is for apache 2.2+ and mod_jk

Re: [EMAIL PROTECTED] Tomcat and Apache on the same port?

2007-09-28 Thread Dan_Mitton
Tomcat can serve static content too. Please respond to users@httpd.apache.org To: users@httpd.apache.org cc: (bcc: Dan Mitton/YD/RWDOE) Subject:Re: [EMAIL PROTECTED] Tomcat and Apache on the same port? LSN: Not Relevant User Filed as: Not a Record I have a web site with

Re: [EMAIL PROTECTED] Permissions dilemma in the /var/log/httpd directory

2007-09-14 Thread Dan_Mitton
Have you tried setting the umask in your apache startup script? I'm running on Sun Solaris and I've used ACL's to get the permissions I want. Dan Please respond to users@httpd.apache.org To: users@httpd.apache.org cc: (bcc: Dan Mitton/YD/RWDOE) Subject:[EMAIL PROTECTED]

Re: [EMAIL PROTECTED] Permissions dilemma in the /var/log/httpd directory

2007-09-14 Thread Dan_Mitton
Remember, that this would effect every file create by apache or any children (like cronlog). If there are CGI script that create files, these will be effected too. By putting an ACL on the log directory, you kind of limit the scope of the change. My ACL on our log directory looks like: #

[EMAIL PROTECTED] select proxy network interface

2007-07-27 Thread Dan_Mitton
On a multi network interface system, is there a way to specify which interface is used for the inward facing half of the proxy connection? Thanks, Dan - The official User-To-User support forum of the Apache HTTP Server

[EMAIL PROTECTED] need mod_proxy_ajp example

2007-07-26 Thread Dan_Mitton
Does anyone have an example of using mod_proxy_ajp to connect to tomcat? And/or a little 'How to' convert JkMounts to the new proxy directives? Thanks in advance, Dan - The official User-To-User support forum of the Apache

Re: [EMAIL PROTECTED] need mod_proxy_ajp example

2007-07-26 Thread Dan_Mitton
Serge, Thanks!! I was hoping it was that simple. Dan Please respond to users@httpd.apache.org To: users@httpd.apache.org cc: (bcc: Dan Mitton/YD/RWDOE) Subject:Re: [EMAIL PROTECTED] need mod_proxy_ajp example LSN: Not Relevant User Filed as: Not a Record Something like

Re: [EMAIL PROTECTED] How to configure Host-Header based VirtualHost in Apache? IIS works.

2007-06-20 Thread Dan_Mitton
Also, name-based virtual hosting only works with HTTP. You can not run HTTPS that way. Please respond to users@httpd.apache.org Sent by:[EMAIL PROTECTED] To: users@httpd.apache.org cc: (bcc: Dan Mitton/YD/RWDOE) Subject:Re: [EMAIL PROTECTED] How to configure

Re: [EMAIL PROTECTED] Apache using AD autentication

2007-06-06 Thread Dan_Mitton
If you have a single AD domain, it seems like mod_auth_kerb works well. I have not been able to get it working across multiple AD domains. Please respond to users@httpd.apache.org To: users@httpd.apache.org cc: (bcc: Dan Mitton/YD/RWDOE) Subject:[EMAIL PROTECTED] Apache

Re: [EMAIL PROTECTED] Check if mod_ssl was built

2007-05-16 Thread Dan_Mitton
Use 'httpd -l' (that's lowercase L) to see if it was compiled in, or check the modules subdirectory for mod_ssl.so Please respond to users@httpd.apache.org To: users@httpd.apache.org cc: (bcc: Dan Mitton/YD/RWDOE) Subject:[EMAIL PROTECTED] Check if mod_ssl was built LSN: Not

Re: [EMAIL PROTECTED] Re: https redirection

2007-05-16 Thread Dan_Mitton
Have you tried looking at mod_alias and using the 'redirect' directive inside your https://www. virtual host? Please respond to users@httpd.apache.org To: users@httpd.apache.org cc: (bcc: Dan Mitton/YD/RWDOE) Subject:[EMAIL PROTECTED] Re: https redirection LSN: Not Relevant

Re: [EMAIL PROTECTED] RESTARTING APACHE

2007-05-04 Thread Dan_Mitton
Yes, cronolog has been very nice for us here. Below are a couple of lines from our httpd.conf file that we use to get daily logs... CustomLog |/usr/local/bin/cronolog /var/log/apache2/myhost-%Y%m%d combined ErrorLog |/usr/local/bin/cronolog /var/log/apache2/myhost-%Y%m%d Please respond to

Re: [EMAIL PROTECTED] RESTARTING APACHE

2007-05-03 Thread Dan_Mitton
I run on UNIX (Sun Solaris 8/9), but Apache only comes down with the box while doing patches. To rotate log files, we use cronolog (cronolog.org), which auto-magically switches to new logs files on a configurable basis (we use daily). Please respond to users@httpd.apache.org To:

Re: [EMAIL PROTECTED] Problem with mod_dav compile in Apache http

2007-04-20 Thread Dan_Mitton
David, Use the --enable-mods-shared. Here is my configure line... ./configure --prefix=/usr/local/apache-2.0.59 --with-ssl=/usr/local/ssl --with-z=/usr/local/lib --enable-ssl --enable-cache --enable-disk-cache --enable-mem-cache --enable-autoindex --enable-mods-shared=rewrite ssl dav dav-fs

Re: [EMAIL PROTECTED] WebDAV

2007-04-17 Thread Dan_Mitton
John, I added the DAVDepthInfinity On, right after my DAV On line, but it doesn't seem to do anything. Directory /usr/local/apache2/htdocs/WebDAV DAV On DAVDepthInfinity On AllowOverride FileInfo AuthConfig Limit Indexes . . . Dan Please respond to

Re: [EMAIL PROTECTED] WebDAV

2007-04-17 Thread Dan_Mitton
I have no rewrite rules. The WebDAV directory is: [EMAIL PROTECTED]:/usr/local/apache2/confls -la ../htdocs/WebDAV/ total 330 drwxrwxr-x 2 apache apache 512 Apr 12 11:03 ./ drwxr-xr-x 3 apache apache 1536 Apr 9 13:42 ../ -rw-r--r-- 1 apache apache109425 Apr 12 11:03

Re: [EMAIL PROTECTED] WebDAV

2007-04-12 Thread Dan_Mitton
Joshua, Thanks, it looks like the http://server.name.dom:80/WebDAV did the trick with getting basic authentication to work, but now from XP sp2 Explorer, the directory of the WebDAV share, also contains an infinite recursion of the WebDAV directory itself !!??!! Here is my apache setup:

[EMAIL PROTECTED] WebDAV

2007-04-11 Thread Dan_Mitton
Is there anyone using WebDAV and Basic Authentication from a Windows Explorer client?? Dan

[EMAIL PROTECTED] logging question

2007-03-08 Thread Dan_Mitton
Is it possible to log both IP address and hostname to the apache logs? Thanks!

Re: [EMAIL PROTECTED] logging question

2007-03-08 Thread Dan_Mitton
How?? Please respond to users@httpd.apache.org To: users@httpd.apache.org cc: (bcc: Dan Mitton/YD/RWDOE) Subject:Re: [EMAIL PROTECTED] logging question LSN: Not Relevant User Filed as: Not a Record [EMAIL PROTECTED] wrote: Is it possible to log both IP address and

Re: [EMAIL PROTECTED] Re: adding multiple SSLCACertificateFile in vhost.conf

2007-03-08 Thread Dan_Mitton
Why would you need to support both SSL certificates? From what I've seen (at least with Verisign) when you renew a certificate, it adds the renewal period to the end of your current expiration period, but is valid from the date you renew! As soon as you get the new certificate, you should be