RE: [users@httpd] specification of .htaccess [EXT]

2022-10-26 Thread James Smith
If you have that many look at RewriteMap https://httpd.apache.org/docs/current/rewrite/rewritemap.html From: Frank Gingras Sent: 26 October 2022 02:42 To: users@httpd.apache.org Subject: Re: [users@httpd] specification of .htaccess [EXT] This is an extremely bad idea. Do you have access to your

RE: [users@httpd] site compromised and httpd log analysis [EXT]

2022-07-06 Thread James Smith
Never had these issues at all if you set up vhosts correctly. But agree we tend to have 2 vhosts for the domain * vhost 1 is the real vhost and handle requests * vhost 2 contains all the redirects from other domain names to the canonical one The only ServerAlias lines in vhost 1 are for

RE: [users@httpd] NameVirtualHost fails [EXT]

2022-07-06 Thread James Smith
Lets encrypt is reliable from our point of view - never had an issue with it - we occasionally have issues when renewing certs - we have about 90 of them - but that is mainly with the "fake-manual" process of updating DNS which is not 100% reliable with the changes we make. In use speed should

Re: [users@httpd] Logs not working

2022-01-04 Thread James Coyle
9: > caught SIGTERM, shutting down > On Jan 4, 2022, at 5:51 PM, Jim Albert wrote: > > On 1/4/2022 8:37 PM, James Coyle wrote: >> I have checked both, but have made no changes to the locations of either the >> access log nor the error log: >> >> CustomLog &q

Re: [users@httpd] Logs not working

2022-01-04 Thread James Coyle
1/4/2022 8:11 PM, James Coyle wrote: >> I recently added PHP and MySql to my Apache setup, and now notice that the >> access and error logs are not working. (The site IS working) >> >> They both stopped working on the 31st - I don’t know if that is relevant or >> not.

[users@httpd] Logs not working

2022-01-04 Thread James Coyle
I recently added PHP and MySql to my Apache setup, and now notice that the access and error logs are not working. (The site IS working) They both stopped working on the 31st - I don’t know if that is relevant or not. I have not changed the location of the logs and I have not added a Virtual

[users@httpd] Additional error

2021-12-29 Thread James Coyle
Pursuant to my previous post, I’m now running into this error: Wed Dec 29 17:26:38.548023 2021] [so:notice] [pid 10505] AH06662: Allowing module loading process to continue for module at /usr/local/opt/php/lib/httpd/modules/libphp.so because module signature matches authority "James

Re: [users@httpd] PHP httpd.conf error

2021-12-29 Thread James Coyle
Thanks - that did help. Now if I can fix the other problem listed in my other email, I should be good to go. > On Dec 29, 2021, at 4:19 PM, Eric Covener wrote: > > On Wed, Dec 29, 2021 at 7:14 PM James Coyle > wrote: >> >> A short while ago, I loaded PHP to m

[users@httpd] PHP httpd.conf error

2021-12-29 Thread James Coyle
] [so:notice] [pid 4404] AH06662: Allowing module loading process to continue for module at /usr/local/opt/php/lib/httpd/modules/libphp.so because module signature matches authority "James Coyle" specified in LoadModule directive httpd: Syntax error on line 191 of /private/etc/apache2/

RE: [users@httpd] Upgrade from non_ssl to ssl possible? [EXT]

2021-11-20 Thread James Smith
If touching the configuration of the system is proving difficult – there is always an option to run a further apache on another machine which handles the SSL, and passes the requests back of plain HTTP, in fact this is the way most of the Apache servers we have are set up – it may be Apache,

RE: [users@httpd] SSL VHosts [EXT]

2021-09-01 Thread James Smith
to send HTTP requests - and instead send HTTPS requests. This works better than the redirect as with the redirect the payload has already been sent un encrypted before being resent, and also POST data is in the redirect. James -- The Wellcome Sanger Institute is operated by Genome Resear

Re: [users@httpd] Issues with accessing web page using DNS URL

2021-08-18 Thread James Moe
ard "user" (or "residential"), they may not allow incoming server connections. You would need to change your service type to "business." -- James Moe moe dot james at sohnen-moe dot com 520.743.3936 Think.

RE: [users@httpd] query regarding httpd server [EXT]

2021-07-16 Thread James Smith
You can add: Header always set X-XSS-Protection "1; mode=block" which will help – but the rest you need to look at the way you code your pages. Then you can look at (1) defensive code (2) Content-Security-Policy header (3) Specific rules in Apache to mitigate attacks Remembering that XSS is

RE: [users@httpd] Improve memory use [EXT]

2021-06-14 Thread James Smith
Yes the answer is almost certainly to do with the number of domains/size of code – even if all the sites are running the same code – they are likely to have different copies of it (unless they are all running the exact same copy of the code – and using a name based switch somewhere in it) There

RE: [users@httpd] Is NGINX faster than Apache? [EXT]

2021-03-11 Thread James Smith
This is what we saw as well - simple things like disabling .htaccess files can make a huge difference in performance (I haven't set up a server with .htaccess files enabled for the best part of 20 years now because of the performance hit) From: Rose, John B Sent: 11 March 2021 21:02 To:

RE: [users@httpd] What should be considered about the reverse proxy server? [EXT]

2021-03-11 Thread James Smith
. How about questions number 2 and 3? On Thursday, March 11, 2021, 09:46:03 PM GMT+3:30, James Smith wrote: A forward proxy is what you put between your web browser and the internet (often called a proxy by browsers) often this happens on corporate networks) - the reverse proxy

RE: [users@httpd] Is NGINX faster than Apache? [EXT]

2021-03-11 Thread James Smith
mod_event is comparable to NGINX I believe speed wise - but from experience Apache is more stable! -Original Message- From: Jason Long Sent: 11 March 2021 17:34 To: Users Maillingsliste Apache Subject: [users@httpd] Is NGINX faster than Apache? [EXT] Hello, Is it true that NGINX is

RE: [users@httpd] What should be considered about the reverse proxy server? [EXT]

2021-03-11 Thread James Smith
A forward proxy is what you put between your web browser and the internet (often called a proxy by browsers) often this happens on corporate networks) - the reverse proxy is between the internet and the webserver There are some issues with mod_security and e.g. wordpress sites - so you have to

RE: [users@httpd] What should be considered about the reverse proxy server? [EXT]

2021-03-11 Thread James Smith
forward the requests? On Wednesday, March 10, 2021, 09:47:03 AM GMT+3:30, Jason Long wrote: Thank you so much. Thus, The Front end and Back end servers are same about the security. What does "handle backend server down" mean? On Tuesday, March 9, 2021, 04:30:01 PM GMT+3:30, Jame

RE: [users@httpd] What should be considered about the reverse proxy server? [EXT]

2021-03-09 Thread James Smith
Yes - you should harden the front-end as this is what is likely to be compromised by general attacking. Run SSL, run a static server & proxy server, set security headers, handle backend server down, handle http -> https redirects, handle basic auth (you can have a general rule for wordpress

RE: [users@httpd] Which parameters must be set to solve these Vulnerabilities? [EXT]

2021-02-08 Thread James Smith
Without knowing what your website is we can’t really see what is wrong. Have you used chrome (or whatever browser you are using) developer’s tools to see what is blocked by your content security policy (CSP) From: Nick Folino Sent: 08 February 2021 17:30 To: users@httpd.apache.org Subject: Re:

RE: [users@httpd] Which parameters must be set to solve these Vulnerabilities? [EXT]

2021-02-08 Thread James Smith
-Original Message- From: Eric Covener Sent: 08 February 2021 13:13 To: users@httpd.apache.org Subject: Re: [users@httpd] Which parameters must be set to solve these Vulnerabilities? [EXT] On Mon, Feb 8, 2021 at 6:24 AM Jason Long wrote: > > Hello, > I scanned my Apache web server and

RE: [users@httpd] Replays from Internet [EXT]

2021-01-19 Thread James Smith
is better to be something like a UUID or similar. Second time payment is attempted on cart with given UUID the attempt is rejected. James -Original Message- From: John Sent: 19 January 2021 16:56 To: Apache Subject: [users@httpd] Replays from Internet [EXT] Since the beginning

RE: [users@httpd] Apache in under attack. [EXT]

2021-01-14 Thread James Smith
The first place to look in this case is the size of the apache processes. Once the OP has got on top of this - then other issues can be investigated. So process would be: 1) Reduce number of modules in Apache (>100 at the moment) should be around 15-25 region; 2) Look at memory

RE: [users@httpd] Aw: Re: [users@httpd] Apache in under attack. [EXT]

2021-01-13 Thread James Smith
der attack. [EXT] Hi James, what was the command you used to see that apache uses ~1GB of memory? I deleted the mail and that was a bad idea: there were some very useful commands you were giving us here. On 12.01.21 12:17, James Smith wrote: > That shows you only have 2 incoming requests. Ho

RE: [users@httpd] How to clean Apache memory automatically? [EXT]

2021-01-12 Thread James Smith
Htcacheclean is I think only a disk based cache cleaner (something you shouldn't really be using anyway!) The only way to clean up apache memory is a either to kill your child processes or restart apache itself. -Original Message- From: Jason Long Sent: 12 January 2021 23:26 To:

RE: [users@httpd] Aw: Re: [users@httpd] Apache in under attack. [EXT]

2021-01-12 Thread James Smith
Tuesday, January 12, 2021, 02:55:14 PM GMT+3:30, James Smith wrote: That shows you only have 2 incoming requests. How many lines if you remove the TIME_WAIT Try: netstat -n | grep ':80 ' | wc This may show lots of short requests happening over time But to be honest the host important thing y

RE: [users@httpd] Aw: Re: [users@httpd] Apache in under attack. [EXT]

2021-01-12 Thread James Smith
:16126      FIN_WAIT2   tcp6       0      0 X.X.X.X:80        X.X.X.X:64595      FIN_WAIT2  On Tuesday, January 12, 2021, 02:20:00 PM GMT+3:30, James Smith wrote: If you want incoming traffic you can do: netstat -n | grep ':443 ' | grep -v TIME_WAIT The incoming IP should be the 2nd

RE: [users@httpd] Aw: Re: [users@httpd] Apache in under attack. [EXT]

2021-01-12 Thread James Smith
-DFOREGROUND 1250040 3912624 978156  64 /usr/sbin/httpd -DFOREGROUND 1299300 3986396 996599  84 /usr/sbin/httpd -DFOREGROUND 1367304 4012976 1003244  74 /usr/sbin/httpd -DFOREGROUND How can I see the IP addresses and their incoming traffic? On Tuesday, January 12, 2021, 01:49:21 PM GMT+3:30, James Smith

RE: [users@httpd] Apache in under attack. [EXT]

2021-01-12 Thread James Smith
Subject: Re: [users@httpd] Apache in under attack. [EXT] System administrators doing it manually??? On Tuesday, January 12, 2021, 01:28:50 PM GMT+3:30, James Smith wrote: Rate limiting may work - but the rate may be just slightly to slow for your setting - manually doing it is a good

RE: [users@httpd] Apache in under attack. [EXT]

2021-01-12 Thread James Smith
Sometimes we are attacked from a farm of machines so it may have to be an ip range that is the issue -Original Message- From: James Smith Sent: 12 January 2021 10:19 To: 'users@httpd.apache.org' Subject: RE: [users@httpd] Apache in under attack. [EXT] Yes - it is something we need

RE: [users@httpd] Aw: Re: [users@httpd] Apache in under attack. [EXT]

2021-01-12 Thread James Smith
n it automatically blocked. > > > > > > > On Tuesday, January 12, 2021, 12:49:50 PM GMT+3:30, James Smith > wrote: > > > > > > Jason, > > I would also query why your process are ~ 1G resident that seems quite large > for apache.

RE: [users@httpd] Apache in under attack. [EXT]

2021-01-12 Thread James Smith
GMT+3:30, James Smith wrote: Can't see anything that should blow up like that to be honest - I usually use ubuntu - which configures apache in a much, much nicer way {generally for web development stuff it is a better flavour of linux} What is the output of: apache2 -t -D DUMP_MODULES

RE: [users@httpd] Apache in under attack. [EXT]

2021-01-12 Thread James Smith
, but "Firewalld" or "iptables" can't do it automatically? When an IP sending many request then it automatically blocked. On Tuesday, January 12, 2021, 12:49:50 PM GMT+3:30, James Smith wrote: Jason, I would also query why your process are ~ 1G resident that seems qui

RE: [users@httpd] Apache in under attack. [EXT]

2021-01-12 Thread James Smith
Can't see anything that should blow up like that to be honest - I usually use ubuntu - which configures apache in a much, much nicer way {generally for web development stuff it is a better flavour of linux} What is the output of: apache2 -t -D DUMP_MODULES to see what modules you have

RE: [users@httpd] Apache in under attack. [EXT]

2021-01-12 Thread James Smith
of small static request (images/css/js) where you run two web servers - one serving static content and proxying back to dynamic content. James -Original Message- From: James Smith Sent: 12 January 2021 09:09 To: users@httpd.apache.org Subject: RE: [users@httpd] Apache in under attack. [EXT

RE: [users@httpd] Apache in under attack. [EXT]

2021-01-12 Thread James Smith
Put a firewall rule into block whatever that first IP address is then. Something like: firewall-cmd --permanent --add-rich-rule="rule family='ipv4' source address='X.X.X.X' reject" If you are seeing a current attack then you can tweak Charles' command line to: tail -1 access.log | awk

RE: [users@httpd] Ratelimiting Apache File Upload Speed [EXT]

2020-12-17 Thread James Smith
Why do you want to rate limit the upload speed to your server - slow upload speeds tend to be the thing that causes Apache issues rather than the other way round. If it is because your server is on a narrow pipe and you are worried about being swamped by one connection - then rate limiting

RE: [users@httpd] Questions to SSLciphersuite [EXT]

2020-11-27 Thread James Smith
To be honest from a security point of view - you shouldn't be doing this if the client can't talk to your server you need to look for a new client? Assuming from what you say this is just a monitoring tool. We have switched off TLS v1.0 and v1.1 as all the browsers which we consider secure

RE: [users@httpd] apache tuning for 1500/2000 concurrent connections [EXT]

2020-11-15 Thread James Smith
rent connections can it handle? James -Original Message- From: Massimo Iovino Sent: 14 November 2020 09:35 To: users@httpd.apache.org Subject: [users@httpd] apache tuning for 1500/2000 concurrent connections [EXT] Hello everyone. I need to configure Apache 2.4 mpm-prefork (or I don't

RE: [users@httpd] Bad Gateway with large file upload [EXT]

2020-10-29 Thread James Smith
to get to you. We have noticed quite large differences with users going through VPNs having major issues. And remember that remotely many users will be using asymmetric connections – download is fast, upload is usually throttled to between 10 and 25% of the download speed. James From: eric tse

RE: [users@httpd] Bad Gateway with large file upload [EXT]

2020-10-29 Thread James Smith
better ways of transferring large files in web-browsers nowadays using clever JavaScript which slices the file and a script which stitches the parts back together at your end – transfers are smaller and avoids time outs. Can also parallelize them if required. James From: eric tse Sent: 29

RE: [users@httpd] Forwarding IP to HTTPS. [EXT]

2020-10-12 Thread James Smith
@httpd] Forwarding IP to HTTPS. [EXT] James, Unless the user has many hosts, I would recommend against using mod_rewrite here. It isn't needed. And your vhost should include an explicity ServerName directive. On 12/10/20 11:56 AM, James Smith wrote: > So I would do this for the virtual h

RE: [users@httpd] Forwarding IP to HTTPS. [EXT]

2020-10-12 Thread James Smith
ubject: Re: [users@httpd] Forwarding IP to HTTPS. [EXT] Excuse me, Can you clean my configuration? On Monday, October 12, 2020, 07:06:17 PM GMT+3:30, Frank mailto:thu...@apache.org>> wrote: James, Omitting an explicit ServerName in name-based vhosts is a bad idea as well. You can

RE: [users@httpd] Forwarding IP to HTTPS. [EXT]

2020-10-12 Thread James Smith
the floor -Original Message- From: Frank Sent: 12 October 2020 16:36 To: users@httpd.apache.org Subject: Re: [users@httpd] Forwarding IP to HTTPS. [EXT] James, Omitting an explicit ServerName in name-based vhosts is a bad idea as well. You can create conflicts or ambiguities. O

RE: [users@httpd] Forwarding IP to HTTPS. [EXT]

2020-10-12 Thread James Smith
This would be my set-up in your case - note as someone said it was too complex I've removed the extra security bits I'd left in by accident... ## Port 80 && 443 default configs... RequestHeader unset X-is-ssl RewriteEngine on RewriteRule ^(.*)$

RE: [users@httpd] Forwarding IP to HTTPS. [EXT]

2020-10-12 Thread James Smith
Yes - with Apache you put a default virtual host which redirects all traffic to your https server RequestHeader unset X-is-ssl Require all denied Require all granted ProxyPreserveHost on RewriteEngine on RewriteRule ^(.*)$

RE: [users@httpd] To Gzip or not? [EXT]

2020-10-10 Thread James Smith
There are two sorts of compression - TLS and HTTP. It is recommended not to compress the TLS traffic (as CRIME can then be used to guess cookies etc) - compresses the whole response. But compressing HTTP traffic is OK - unless there is some secret stored in the body of the HTML page {it only

RE: [users@httpd] Configuring KeepAliveTimeout to individual URIs [EXT]

2020-10-07 Thread James Smith
This has nothing to do with keepalivetimeout – that is to do with keeping a connection open to send subsequent requests without re-negotiating the connection. It is TimeOut which is the gap between sending packets of the response. If your response is taking more than 1 minute to generate then

RE: [users@httpd] Re: Alternatives to SSI (server side includes)? [EXT]

2020-10-05 Thread James Smith
play anything. Another way of solving some of these issues is to use tell-tales – small images {blank gif/png} that are embedded into the HTML that are generated dynamically – this is the way google analytics/matamo etc do this sort of logging. Or just use AJAX. James From: Tom Browder Sent

Re: [users@httpd] Alternatives to SSI (server side includes)?

2020-10-04 Thread James Moe
n't > looked into actual debugging yet. > Aren't cookies good for this type of tracking? Your description of the backend processing does not seem to preclude their use. -- James Moe moe dot james at sohnen-moe dot com 520.743.3936 Think. signature.asc Description: OpenPGP digital signature

RE: [users@httpd] Re: Alternatives to SSI (server side includes)? [EXT]

2020-10-04 Thread James Smith
Definitely SQLite will be a bottle neck in this system – not great for writing to – both Pg or MySQL would be an almost certainly better solution for repeated writing to. You could get some simple gains by splitting the database up so that there is a database per site rather than a database

RE: [users@httpd] Re: Alternatives to SSI (server side includes)? [EXT]

2020-10-04 Thread James Smith
I frames have their use – but usually to include content from another site (e.g. google maps, you tube etc) – or to embed dynamic content that either needs to be dynamically updated and can’t do this with AJAX or you are struggling with CSS clashes as the iframe is a different document. Not

RE: [users@httpd] Re: Alternatives to SSI (server side includes)? [EXT]

2020-10-04 Thread James Smith
what you are doing - perhaps an example URL or two would be useful for us to offer some support... James -Original Message- From: Tom Browder Sent: 03 October 2020 19:08 To: users@httpd.apache.org Subject: [users@httpd] Re: Alternatives to SSI (server side includes)? [EXT] On Sat

RE: [users@httpd] Some questions about configuration Apache from a beginer. [EXT]

2020-09-07 Thread James Smith
ason Long Sent: 06 September 2020 12:22 To: users@httpd.apache.org; James Smith Subject: Re: [users@httpd] Some questions about configuration Apache from a beginer. [EXT] Thank you for your help. Is the content of "/etc/hosts" and "/etc/hostname" files important for get HTTPS ce

RE: [users@httpd] Some questions about configuration Apache from a beginer. [EXT]

2020-09-05 Thread James Smith
The first one doesn’t matter – but to be honest you shouldn’t do it – you should create two configurations – one for the www.domain and one for domain. Choose one as canonical (the one you really want users to see) and put the real configuration here. Under the other domain – you include a

RE: [users@httpd] Apache and nextcloud - insecure ? [EXT]

2020-09-03 Thread James Smith
Not sure what Nextcloud is - but this is often common amongst "black-box" web apps that bootstrap themselves, and handle upgrades from the UI interface. The webserver has to be able to re-write it's own files for the upgrades. Scary and against all "normal" secure procedures if you manage

RE: [users@httpd] How to Migrate Wordpress Website from 32-bit CentOS Linux 6.3 to 64-bit CentOS Linux 8.2 (2004) [EXT]

2020-09-02 Thread James Smith
You will need to read up the difference between the 2.2 and 2.4 apache documents [there are some ugrade docs] - just copying the configuration over will not work... e.g. LockFile -> Mutex; Order allow,deny / Deny from all -> Require all denied Order allow,deny / Allow from all -> Require all

RE: [users@httpd] http-https [EXT]

2020-08-12 Thread James Smith
Add also remember to add the HSTS headers Header always set Strict-Transport-Security "max-age=63072000; includeSubDomains; preload" {only put includeSubDomains & preload if you can} this stops the client sending further HTTP requests but only HTTPS {most web servers} This can stop the plain

Re: [users@httpd] Bizarre problem with Apache HTTPD, a number of Tomcats, mod_proxy_balancer and mod_jk - any ideas where to look for the root cause welcome [EXT]

2020-03-18 Thread Dr James Smith
Do you see anything different between the users that work and the users that don't.. Do they use a different browser (useragent) or HTTP protocol? On 18/03/2020 12:40, "Jürgen Göres" wrote: Hi all, we are currently observing a really bizarre problem on a customer system. Our software runs a

Re: [users@httpd] Complete list of Expires Headers for WordPress site? [EXT]

2020-02-18 Thread Dr James Smith
Do you embed external resources (like fonts in) these don't tend to have the same headers set... I get this with one of my static sites - I have 13 requests and three are for google fonts (nunito-sans) and these don't have decent headers set! On 18/02/2020 19:00, edflecko . wrote: I mention

Re: [users@httpd] Expose my server to internet

2020-01-15 Thread James Moe
others have noted, access to your site is blocked either by your ISP, by your firewall or router, or both. Many ISPs have two general services: residential and business. Often the residential service does not allow incoming/public service access to a host, like HTTP or email. -- James Moe moe d

[users@httpd] RE: Apache/2.4.26 (Unix) undocumented error AH02651

2019-08-22 Thread HISEY, JAMES
for the information and I apologize for needlessly engaging the mail list. Jim -Original Message- From: Christophe JAILLET Subject: Re: Apache/2.4.26 (Unix) undocumented error AH02651 Le 21/08/2019 à 17:58, HISEY, JAMES a écrit : > Running Apache 2.4.26 on RHEL7, I'm receiving an error in my apache er

[users@httpd] Apache/2.4.26 (Unix) undocumented error AH02651

2019-08-21 Thread HISEY, JAMES
Running Apache 2.4.26 on RHEL7, I'm receiving an error in my apache error log of AH02651: Error writing request body to script I am unable to locate a meaningful description of AH02651 anywhere as all error lists I can find stop in the lower 2000's. It appears to happen when the POSTDATA

Re: [users@httpd] Expose my server to internet

2019-07-13 Thread James Moe
gt; Many ISPs have restrictions on servers. Often a "residential" Internet service does not allow website or email servers. That is, connections initiated from outside your network are blocked. Check with your ISP about serving websites. -- James Moe moe dot james at sohnen-moe d

[users@httpd] Blocking particular URL/file patterns

2019-07-02 Thread James Moe
deny from 40.77.167.0/24 deny from 207.46.13.0/24 Is there a way to write a filter that blocks the above URL patterns without generating a 404 response? -- James Moe moe dot james at sohnen-moe dot com 520.743.3936 Think. signature.asc Description: OpenPGP digital signature

Re: [users@httpd] Question about order of execution

2019-02-05 Thread James Moe
On 04/02/2019 6.18 PM, Eric Covener wrote: >> My question is: Does the certificate validation occur before or after >> processing <.htaccess>? > > Long before, the handshake is complete before any HTTP request. > Ah, quite. Thanks. -- James Moe moe dot

[users@httpd] Question about order of execution

2019-02-04 Thread James Moe
"https://sohnen-moe.com/products/books/#product-business-mastery; # # # 20180315 jmm: Always use a secure connection # RewriteEngine on RewriteCond %{HTTPS} !=on RewriteRule ^(.*)$ https://%{HTTP_HOST}/$1 [R] [ end ] -- James Moe moe dot james at sohnen-moe dot com 520.743

Re: [users@httpd] Internal Server Error - strange characters "ę" and "ł"

2018-11-13 Thread James Kerwin
field which doesn't typically require it. thanks again for the advice; it's greatly appreciated. James On Tue, Nov 13, 2018 at 2:49 PM David Spector < david...@springtimesoftware.com> wrote: > James Kerwin, > > When strange characters cause HTTP error 500, this is usually caused

[users@httpd] Internal Server Error - strange characters "ę" and "ł"

2018-11-13 Thread James Kerwin
would be helpful as I'm not getting far with it at the moment. Thanks, James

[users@httpd] [OT] bounced messages

2018-08-13 Thread James Moe
for real? 2018-08-13_01:52:12 50332-03786 [Worker_1] [TLS-in] [TLS-out] 23.83.215.32 to: ji...@sohnen-moe.com disconnected: session:7F62FA585BC0 23.83.215.32 - processing time 1 seconds 2018-08-13_01:52:12 [Worker_1] Worker_1 will sleep now [ end ]---- -- James Moe moe dot james at sohnen-mo

[users@httpd] Re: [SOLVED] "Permissions" lost after upgrade to 2.4.33

2018-07-17 Thread James Moe
On 07/16/2018 02:53 PM, James Moe wrote: > After the upgrade from v2.4.23 to v2.4.33, https requests yield error > 403: > Access forbidden! > You don't have permission to access the requested directory. There is > either no index document or the directory is read-protected. >

[users@httpd] "Permissions" lost after upgrade to 2.4.33

2018-07-17 Thread James Moe
On 07/16/2018 02:53 PM, James Moe wrote: > After the upgrade from v2.4.23 to v2.4.33, https requests yield error > 403: Access forbidden! > http requests return: error 400 Bad request! > I have read the docs. I have added what seemed like the correct directive for allowing a

[users@httpd] Re: "Permissions" lost after upgrade to 2.4.33

2018-07-16 Thread James Moe
On 07/16/2018 02:53 PM, James Moe wrote: > So, the "permissions" are an apache thing, not OS? > These are the OS directory permissions to the Doc Root /data01/t-drv/websites/sma-v3/: drwxrwxr-x 1 root users 104 Feb 25 16:14 data01/ drwxrwxr-x 1 sma-user3x users 140 Ju

[users@httpd] "Permissions" lost after upgrade to 2.4.33

2018-07-16 Thread James Moe
l/www.sma.com.cert-01.pem" SSLCertificateKeyFile "/data01/srv/vhosts.sma/ssl/www.sma.com.insecure-01.key" # SSLCipherSuite HIGH:!SSLv2:!ADH:!aNULL:!eNULL:!NULL SSLProtocol ALL -SSLv2 [ end ] -- James Moe moe dot james at sohnen-moe dot com 520.743.3936 Think. signature.asc Description: OpenPGP digital signature

[users@httpd] Re: Apache2 does not start after OS upgrade

2018-07-16 Thread James Moe
On 07/16/2018 11:59 AM, James Moe wrote: > On opensuse v42.3 apache2 v2.4.23 worked fine. On opensuse 15.0 apache2 > v2.4.33 refuses to start. > After re-installing the package, an additional error was showm regarding a missing SSL certificate listed in . Fixing that allowed apache

[users@httpd] Apache2 does not start after OS upgrade

2018-07-16 Thread James Moe
3 systemd[1]: apache2.service: Unit entered failed state. 2018-07-16T10:14:23-0700 sma-server3 systemd[1]: apache2.service: Failed with result 'protocol'. -- James Moe moe dot james at sohnen-moe dot com 520.743.3936 Think. signature.asc Description: OpenPGP digital signature

Re: [users@httpd] httpd won't start with SQLSRV enabled

2018-07-05 Thread James Montalvo
#comment1190872_919581 On Thu, Jul 5, 2018 at 11:07 AM James Montalvo wrote: > `sudo apachectl restart` failure with SQLSRV enabled, success with it > disabled. journalctl output below: > > Jul 05 10:38:03 someserver sudo[17255]: someuser : TTY=pts/0 ; > PWD=/etc/rc.d/init.d ; USER

Re: [users@httpd] httpd won't start with SQLSRV enabled

2018-07-05 Thread James Montalvo
/PolicyKit1/AuthenticationAgent, locale C) (disconnected from bus) On Wed, Jul 4, 2018 at 6:30 PM Frank Gingras wrote: > Next step would be to see if using `apachectl restart` works instead of > relying on your distro's init scripts / systemd. > > On Tue, Jul 3, 2018 at 11:45 AM Ja

Re: [users@httpd] httpd won't start with SQLSRV enabled

2018-07-03 Thread James Montalvo
FYI, I posted this question on Server Fault: https://serverfault.com/questions/919326/apache-wont-start-with-systemd I included in that question the stack traces mentioned in my previous email. On Mon, Jul 2, 2018 at 2:02 PM James Montalvo wrote: > You're right, running `httpd -X` is not dy

Re: [users@httpd] httpd won't start with SQLSRV enabled

2018-07-02 Thread James Montalvo
capture a test case where: > > 1) That php extension is loaded > 2) httpd stops with httpd -X > > If httpd keeps running with -X while that extension is loaded, then there > is no issue, and httpd is working fine. > > > On Fri, Jun 29, 2018 at 6:28 PM James Montalv

Re: [users@httpd] httpd won't start with SQLSRV enabled

2018-06-29 Thread James Montalvo
c33efd5f0, SOCK_CLOEXEC) = ? ERESTARTSYS (To be restarted if SA_RESTART is set) --- SIGINT {si_signo=SIGINT, si_code=SI_KERNEL} --- rt_sigreturn({mask=[]}) = -1 EINTR (Interrupted system call) On Thu, Jun 28, 2018 at 7:37 PM Frank Gingras wrote: > I'm going to venture that yo

Re: [users@httpd] two servers and sites on single IP

2018-06-29 Thread Dr James Smith
mod_proxy is the standard approach here.. Set up a second vhost on 192.168.0.1 and get that to proxy back to 192.168.0.2 You will need to specify a small folder as doc root - basically to serve error pages! - our error directory has static pages for each error message we wont to handle +

[users@httpd] httpd won't start with SQLSRV enabled

2018-06-28 Thread James Montalvo
quot;, and "/var/log/httpd/error_log" for relevant log output. Can anyone help me troubleshoot this? Also, this setup works fine on other servers, and I can't think how this one is different. [1] https://github.com/Microsoft/msphpsql [2] https://github.com/Microsoft/msphpsql/issues/805 Thanks in advance, James

Re: [users@httpd] SSL Certificate Validation

2018-02-09 Thread Dr James A Smith
didn’t think you could have two virtualhost entries with the same IP/port.  I would probably do this within with a single VirtualHost, myself.  Something like this combined with the RewriteRule: RewriteCond %{HTTP_HOST} !^THE.CORRECT.HOSTNAME$ Rick Houser Web Engineer *From:*Dr James A Smith

Re: [users@httpd] SSL Certificate Validation

2018-02-08 Thread Dr James A Smith
The easiest way to do this is to make sure you have the correct hostname in the virtual host - the one that matches your certificate and another virtual host which has no hostname in it to catch all the other requests.   return a forbidden response for all requests!   RewriteEngine On

[users@httpd] apache2 a2enmod error after update

2017-09-26 Thread James Moe
.) Does zypper spawn a non-root process to run a2enmod? If so, what changes are needed so it can run a2enmod? -- James Moe moe dot james at sohnen-moe dot com 520.743.3936 Think. signature.asc Description: OpenPGP digital signature

Re: [users@httpd] Trouble updating PHP version on MAMP on Mac

2017-06-01 Thread Dr James Smith
Looks like you are using php5_module with a PHP7 so file - you should be using: LoadModule php7_module /libphp7.0.so On 01/06/2017 20:26, Roparzh Hemon wrote: I am not on Apple here, and you don't say whether you are using php-fpm or not, but assuming that you are, check the start up

[users@httpd] Re: SSL Installation with certbot; problems

2017-05-17 Thread James Kerwin
sting help... Thanks, James On Wed, May 17, 2017 at 2:53 PM, James Kerwin <jkerwin2...@gmail.com> wrote: > Hello all, > > Firstly, I'm a bit of a beginner so please be as patient as you can. > > I set up a practice website that sent data collected from a form to a > dat

[users@httpd] SSL Installation with certbot; problems

2017-05-17 Thread James Kerwin
can't provide a secure connection" and "ERR_SSL_PROTOCOL_ERROR". Would somebody be willing to help? So far I have this from openssl (sorry if it formats terribly, like I said; beginner): james@localhost:~$ openssl s_client -connect www.mydomain.com:443 CONNECTED(0003) 1401982735

Re: [users@httpd] Redirect all unconfigured sub-domains to specific sub-domain

2017-05-15 Thread James Smith
You really only have one option at the moment and that is to pay for a wild card certificate which will do this {lets encrypt doesn't allow you yet} It will probably set you back something like 100$ a year o/w you will need to set your redirects up from xxx. to https:// individually

Re: [users@httpd] I need help figuring out a 500 response code

2017-05-03 Thread Dr James Smith
Is there an error.log in the same directory? This is usually in the same directory this should contain some information about why the system failed. On 03/05/2017 07:41, John Covici wrote: Hi. I am having major problems figuring out a 500 response code I am getting on my hserver. I am

Re: [users@httpd] redirect port from 80 to 443

2017-02-18 Thread Dr James Smith
T+01:00 Richard <lists-apa...@listmail.innovate.net <mailto:lists-apa...@listmail.innovate.net>>: > Date: Saturday, February 18, 2017 11:04:34 -0700 > From: James Moe <ji...@sohnen-moe.com <mailto:ji...@sohnen-moe.com>> > > On 02/18/2017 05:08 AM, R

Re: [users@httpd] redirect port from 80 to 443

2017-02-18 Thread James Moe
le.com/$1 [R] -- James Moe moe dot james at sohnen-moe dot com 520.743.3936 Think. signature.asc Description: OpenPGP digital signature

Re: [users@httpd] hello

2017-01-19 Thread James Smith
Debian 8 (Jessie?) Apache version is 2.4.10 which would suggest your error is in the Order Allow, Deny area.. Should just be: Requireall granted see: https://httpd.apache.org/docs/2.4/upgrading.html On 2017-01-19 04:34 PM, David Miranda Aragón wrote: Good morning. I am looking for help on

Re: [users@httpd] Copyright notices in httpd source files

2016-12-28 Thread Dr James Smith
At work all out software is open source - but we have to include a copyright notice in all source files where possible - as we then distribute the content under LGPL. The logic is that if we didn't claim copyright on the contents of the source - someone else might claim it and make it closed

Re: [users@httpd] resources prioritization/scheduler (app vs assets)

2016-12-10 Thread Dr James Smith
Before you get into trying to resolve issues with load there are a few things to consider: Your "model" of traffic is probably wrong... * Have you seen this traffic shape.. if a user requests a page - it will probably be a few milliseconds before the browser requests the first static

Re: [users@httpd] Mod_Substitute - Match the last occurrence of a string in the response

2016-11-23 Thread Dr James Smith
Why are you attaching after the last meta tag - wouldn't it be easier just before the tag or just after the tag - you should have no other js in the header - except possibly an HTML 5 shim... On 23/11/2016 08:08, Mayuresh wrote: Any suggestions? On Nov 22, 2016 11:32 AM, "Mayuresh"

Re: [users@httpd] Mod_Substitute - Match the last occurrence of a string in the response

2016-11-22 Thread Dr James Smith
Never used mod_substitute - but the standard PCRE way is s/(.*)>/$1/mxs - the .* will capture greedily - so captures all but last meta... On 22/11/2016 16:50, Mayuresh wrote: Hi, How can I check for the last occurrence of a string in the response html and only replace the last

Re: [users@httpd] Regarding Disk & File Cache

2016-11-13 Thread James Moe
On 11/13/2016 02:14 AM, Jayaram Ponnusamy wrote: > > [For] Some reason our sites are extreme slow, ... > You should discover the reason why the sites are so slow. -- James Moe moe dot james at sohnen-moe dot com 520.743.3936 Think. signature.asc Description: OpenPGP digital signature

  1   2   3   4   5   6   >