Re: [users@httpd] Vanity URL Rewrites Best Practices?

2011-10-03 Thread Scott Gifford
On Mon, Oct 3, 2011 at 2:25 PM, Nick Tkach ntk...@gmail.com wrote: Does anyone have any pointers/suggestions on the best way to do vanity url rewrites? For example,

Re: [users@httpd] Single Value Authentication Module

2011-09-12 Thread Scott Gifford
On Mon, Sep 12, 2011 at 1:01 PM, J.Lance Wilkinson jl...@psu.edu wrote: [ ... ] Actually, I *AM* trying to AUTHENTICATE with it. I have a directory that contains content that is to only be accessed by individuals who have paid a specific fee. I want HTTPD to only offer

Re: [users@httpd] giving write permissions to apache user on some folders in document root

2011-02-03 Thread Scott Gifford
On Thu, Feb 3, 2011 at 2:48 PM, James Godrej jamesgod...@yahoo.in wrote: [ ... ] I am not at all convinced by the idea of giving permissions to read,write and execute as these Learning Management Systems say. Let me know what you people have to say? What is the best practise in such

Re: [us...@httpd] debugging websites running on Apache?

2010-11-19 Thread Scott Gifford
On Fri, Nov 19, 2010 at 7:00 AM, Tomasz Chmielewski man...@wpkg.org wrote: How do you debug websites running on Apache? I have a few tricks I use. First, I try to write my applications so they can be run from the commandline. That means when they misbehave, I can run them directly under

Re: [us...@httpd] AllowOverride: Pros and Cons

2010-07-08 Thread Scott Gifford
On Thu, Jul 8, 2010 at 2:28 AM, James Corteciano ja...@linux-source.orgwrote: [ ... ] I am just concern about security matters that will produce if I will give the user full access on .htaccess (AllowOverride All) on their webroot? AllowOverride All effectively allows a user who can create a

Re: [us...@httpd] Apache getting stuck with all workers in a BUSY_READ state

2010-06-16 Thread Scott Gifford
On Wed, Jun 16, 2010 at 9:33 AM, David Fallon davef@gmail.com wrote: Thanks for the suggestion, but unfortunately I've tried that - truss in this case is attaching post whatever it's blocking on (so I just see it sleeping), and I haven't yet waited out the problem to see what happens

Re: [us...@httpd] I/O accounting for all processes?

2010-06-16 Thread Scott Gifford
On Wed, Jun 16, 2010 at 12:16 PM, Jakov Sosic jakov.so...@srce.hr wrote: On 06/16/2010 06:49 AM, Scott Gifford wrote: On Tue, Jun 15, 2010 at 5:33 PM, Jakov Sosic jakov.so...@srce.hr mailto:jakov.so...@srce.hr wrote: I'm interested in measuring I/O that all apache processes

Re: [us...@httpd] I/O accounting for all processes?

2010-06-15 Thread Scott Gifford
On Tue, Jun 15, 2010 at 5:33 PM, Jakov Sosic jakov.so...@srce.hr wrote: I'm interested in measuring I/O that all apache processes are generating. I used mod_logio to solve a similar problem not too long ago, with good success: http://httpd.apache.org/docs/2.0/mod/mod_logio.html Scott.

Re: [us...@httpd] Apache getting stuck with all workers in a BUSY_READ state

2010-06-15 Thread Scott Gifford
On Tue, Jun 15, 2010 at 1:02 PM, David Fallon davef@gmail.com wrote: [ ... ] Any suggestions on a solution, or how I might get more info out of apache as to what it's doing while everyone's in the read state? I would try using strace (or ktrace or truss depending on your OS) on the

Re: [us...@httpd] graceful restart occasionally gives could not bind error

2010-05-27 Thread Scott Gifford
I don't have an answer for you, but here are a few troubleshooting tips I have found helpful. If you can make it happen pretty often, you could try doing an strace/truss/ktrace (I think it's ktrace on BSD) of the process to see what system calls it's making and exactly which is failing. You

Re: [us...@httpd] Can I have 2 httpd servers running on 2 different ports?

2010-02-22 Thread Scott Gifford
On Mon, Feb 22, 2010 at 2:09 PM, Aruna Gummalla aruna_gumma...@yahoo.comwrote: Hi, Can I have 2 httpd servers running on 2 different ports? Sure. You'll want to create a new configuration file and start Apache using that configuration file. You can run Apache by hand, or you can copy

Re: [us...@httpd] observed delay for changing process owner

2010-02-15 Thread Scott Gifford
On Mon, Feb 15, 2010 at 10:43 AM, Harald Falkenberg harald.falkenb...@desy.de wrote: [ ... ] Now I observed, that it takes a long time to change the onwership of the processes, which I set via the 'user' and 'grou' derictives in httpd.conf. After the ownership changed, the processes serve

Re: [us...@httpd] can we run two SSL domains on one IP

2010-01-19 Thread Scott Gifford
On Tue, Jan 19, 2010 at 6:55 AM, Nilesh Govindarajan li...@itech7.comwrote: Oops. My bad. SSL protocol doesn't give the Host: header. So apache can't decide which Vhost to serve (from apache docs :D). Though SSL doesn't itself provide a Host: header, the HTTP session on top if it still does,

Re: [us...@httpd] Apache vs LiteSpeed

2010-01-15 Thread Scott Gifford
On Fri, Jan 15, 2010 at 12:08 PM, Jarrod Slick jar...@e-sensibility.comwrote: [ ... ] And another question: how would you do it differently? Sure, in an ideal world I could assemble my own botnet and then blast my corporate network with a gigabit of distributed traffic multiple times for each

Re: [us...@httpd] Apache vs LiteSpeed

2010-01-14 Thread Scott Gifford
On Wed, Jan 13, 2010 at 2:08 AM, Jarrod Slick jar...@e-sensibility.comwrote: On Jan 13, 2010, at 12:47 AM, Scott Gifford wrote: On Wed, Jan 13, 2010 at 1:31 AM, Jarrod Slick jar...@e-sensibility.comwrote: Apache Users, As some of you may or may not know a fairly prominent commercial

Re: [us...@httpd] Apache vs LiteSpeed

2010-01-12 Thread Scott Gifford
On Wed, Jan 13, 2010 at 1:31 AM, Jarrod Slick jar...@e-sensibility.comwrote: Apache Users, As some of you may or may not know a fairly prominent commercial webserver, LiteSpeed, claims to outperform even a well configured Apache 2.2.x installation by orders of magnitude. They have some

Re: [us...@httpd] Getting HTTP Headers from CGI program

2009-12-31 Thread Scott Gifford
André Warnier a...@ice-sa.com writes: Tushar Joshi wrote: Hi thanks for the reply. I'm writing my applications in C so would have thought there might be a low level way of doing this. [...] But, in general, if this is a CGI program, then it is running as a separate process from Apache

Re: [us...@httpd] equivalent of http://httpd.apache.org/docs/1.3/misc/howto.html#logreset

2009-12-17 Thread Scott Gifford
Shibi NS shibi...@gmail.com writes: Is there any equivalent of http://httpd.apache.org/docs/1.3/misc/howto.html# logreset in apache 2.X The information there still applies, although apachectl graceful or apache2ctl graceful is preferred over kill -1 `cat httpd.pid` nowadays. Scott.

[us...@httpd] Different Limit rules on the same directory with mod_ftp

2009-10-27 Thread Scott Gifford
Hello, I'm using mod_ftp to provide authenticated FTP access to a Web directory. It is mostly read-only, but a few users should have write access to the directory. I am using mod_auth_mysql with groups for authentication; there is a reader group and a writer group, and the user with write

Re: [us...@httpd] Different Limit rules on the same directory with mod_ftp

2009-10-27 Thread Scott Gifford
Nick Kew n...@webthing.com writes: Scott Gifford wrote: Hello, I'm using mod_ftp to provide authenticated FTP access to a Web directory. It is mostly read-only, but a few users should have write access to the directory. I am using mod_auth_mysql with groups for What mod_auth_mysql

Re: [us...@httpd] Need some SSL help please.

2009-08-07 Thread Scott Gifford
Josh Gooding josh.good...@gmail.com writes: [...] Run the Login.jsp through SSL, after successful login, drop the SSL. The entire session doesn't need encrypted, only the login and password. Sure, that's possible. The general strategy is to accept the username and password on a secure

Re: [us...@httpd] Re: httpd is creating large number of shared memory segments.

2009-06-26 Thread Scott Gifford
Chandranshu . chandran...@gmail.com writes: We changed our script that used to do a graceful restart to also record the number of shared memory segments before and after the restart. Plotting the number of shm segments vs. the number of times the server was restarted gracefully was almost a

Re: [us...@httpd] Redirecting request from HTTP to HTTPS

2009-04-20 Thread Scott Gifford
Tarun Narang tarun.nar...@xchanging.com writes: How could I redirect all my requests for http to https ? Hello Tarun, We use RedirectMatch for this. See: http://httpd.apache.org/docs/2.0/mod/mod_alias.html#redirectmatch However, I have to redirect the non SSL request to SSL request,

Re: [us...@httpd] Lags on simple static file requests

2009-01-06 Thread Scott Gifford
Paul Prescod p...@prescod.net writes: I grep my logs every day for slow queries. Sometimes I see a dynamic request in there and I go and optimize the code. But more concerning is when I see simple serving of very small static files on a very underloaded machine. I am looking for hints about

Re: [us...@httpd] 'safe' way dismount a usb drive?

2009-01-04 Thread Scott Gifford
Foo JH jhfoo...@extracktor.com writes: I've managed to mount/ umount a usb drive. But I'm not sure if there is any other commands I need to execute - as a best practice - before I physically plug it out. Not sure what this has to do with Apache; are you serving Web files from the USB drive?

Re: X-Forwarded-For

2008-12-15 Thread Scott Gifford
Mohit Anchlia mohitanch...@gmail.com writes: Our traffic is going through proxy, how can I enable X-Forwarded-For in apache to get the original IP. Does this also work for users using ISP (private IP) and are behind the ISP router. Do you mean you have Apache acting as a proxy and you want it

Re: [EMAIL PROTECTED] way for me to turn off if-modified-since always return 304 reply ?

2008-09-12 Thread Scott Gifford
dave selby [EMAIL PROTECTED] writes: Is there a way for me to turn off if-modified-since so the client browser will ALWAYS use its locally cached document Dave, Usually sending an Expires header will tell browsers to mostly use a cached version. I use something like this to set my expires

Re: [EMAIL PROTECTED] IP based virtual hosting and security

2008-07-23 Thread Scott Gifford
César Leonardo Blum Silveira [EMAIL PROTECTED] writes: [...] So, my question is: how safe is it to let the other interface listen, even if it will not respond correctly to any request? What is the potential for security vulnerabilities in the 8080 port of the other interface? There actual

Re: [EMAIL PROTECTED] Unsecuring a URL

2008-05-30 Thread Scott Gifford
Mark Mcdonald [EMAIL PROTECTED] writes: [...] There are no errors, the authentication prompt just remains after apache is restarted. I am testing on a box using Basic auth, with the following file in /etc/apache2/sites-enabled: VirtualHost * [...] Location /node/feed

Re: [EMAIL PROTECTED] Re: Apache Security Problem

2008-05-30 Thread Scott Gifford
Andre Hübner [EMAIL PROTECTED] writes: Hi, You can do restrictions of particular options using the technique shown her= e: http://httpd.apache.org/docs/2.2/howto/htaccess.html#how But I have a feeling that there are other ways around your separation. It depends on exactly the details of how

Re: [EMAIL PROTECTED] Heavy Wait on My Shoulders

2008-05-30 Thread Scott Gifford
amiribarksdale [EMAIL PROTECTED] writes: About the only strange thing in my debug-level error logs is (32)Broken pipe: client stopped connection before rwrite completed That's an interesting clue. It looks like it is in the middle of a URL rewrite (mod_rewrite) while it is stuck. Maybe

Re: [EMAIL PROTECTED] Heavy Wait on My Shoulders

2008-05-30 Thread Scott Gifford
or looping. Scott. Ben On Fri, May 30, 2008 at 9:53 AM, Scott Gifford [EMAIL PROTECTED] wrote: amiribarksdale [EMAIL PROTECTED] writes: About the only strange thing in my debug-level error logs is (32)Broken pipe: client stopped connection before rwrite completed That's

Re: [EMAIL PROTECTED] Is it possible to keep a module running after closing a connection?

2008-03-31 Thread Scott Gifford
Brown Chris-CCB034 [EMAIL PROTECTED] writes: I'm looking at a situation where we'd want to close a connection (for example the message size is too large) but we'd like to keep the thread active so that we can perform some other steps before releasing the thread. Is this possible? I've

Re: [EMAIL PROTECTED] Prefetch

2008-03-20 Thread Scott Gifford
Krist van Besien [EMAIL PROTECTED] writes: [...] What I now want to do, is have apache (or something else) look at the content of the response that comes from the backend, and _prefetch_ all the images that are linked in it, so that when the request for the images comes they are already

Re: [EMAIL PROTECTED] About ListenBackLog and MinspareThread

2008-03-18 Thread Scott Gifford
Arnab Ganguly [EMAIL PROTECTED] writes: Hi All, My Apache server is heavily loaded.I am using Apache 2.2.8 on Red-Hat 3 with MPM=worker.Can I reduce the load by reducing the value of ListenBackLog? No, at best that will save you a small amount of memory in your TCP stack, at worst it will

Re: [EMAIL PROTECTED] Cannot access localhost

2008-03-07 Thread Scott Gifford
Ben Schonle [EMAIL PROTECTED] writes: *In Short: - After fresh installation of apache2 trying to access localhost or 127.0.0.1 is not working Hi Ben, What error do you get when you try to connect? What happens if you type telnet 127.0.0.1 80 on the Web server to connect directly?

Re: [EMAIL PROTECTED] Re: PerlSetEnv in .htaccess ?

2008-01-23 Thread Scott Gifford
abhishek jain [EMAIL PROTECTED] writes: Pl. do not mind i am posting again within an hour, but the problem is taking my nerves, is there a way to go forward i believe the webhost is not allowing to set me PerlSetEnv is there another method to do the same, You could try just using SetEnv.

Re: [EMAIL PROTECTED] Re: PerlSetEnv in .htaccess ?

2008-01-23 Thread Scott Gifford
abhishek jain [EMAIL PROTECTED] writes: On second thoughts is there a method by which i can execute some piece of code to execute even before my scripts are called, remember i am on a shared host, I don't know of a way to do exactly this on a shared host. If your provider supports mod_perl

Re: [EMAIL PROTECTED] Resource temporarily unavailable:,setuid: unable to change to uid: 502

2007-09-27 Thread Scott Gifford
kazekun [EMAIL PROTECTED] writes: Hello, I'm new to linux and had installed apache 2.2.6 on Fedora 7 about a month ago. It seems to be working fine (still able to access the website) except that when I check the error log today (Sept. 27), I notice that there are some error messages [Wed

Re: [EMAIL PROTECTED] Is mod_ssl enough to authenticate?

2007-05-25 Thread Scott Gifford
Naveen Rawat [EMAIL PROTECTED] writes: Hi All, I want to authenticate modules(certificate based) against each other before any communcation takes place among .Modules may reside on local and remote servers. In both cases,Is mod_ssl enough for authentication or I have to implement

Re: [EMAIL PROTECTED] Overriding url filename changing in Apache

2007-05-16 Thread Scott Gifford
Harry Spier [EMAIL PROTECTED] writes: I have a website on a shared hosting Apache Linux server. [...] I believe (but I'm not sure) that [...] mod-speling is enabled on that Apache server. This is the default behaviior on the shared hosting server and they wont change it. I need to

Re: [EMAIL PROTECTED] Using apache as proxy only on specific folder

2007-05-09 Thread Scott Gifford
[EMAIL PROTECTED] writes: Hi all. I want to make apache2 (port 80) to work like a proxyserver to a other webserver that is running on the same machine on port 3000. The following works perfectly for this: ProxyPass / http://localhost:3000/ ProxyPassReverse / http://localhost:3000/ But

Re: [EMAIL PROTECTED] Can apache and ssh share port 80?

2006-03-31 Thread Scott Gifford
[EMAIL PROTECTED] writes: [...] Ideally, I wish there were some kind of apache directives I could use so that httpd would continue to monitor port 80, and if it gets a connection that does not look like http or https, it would forward the bits to port 22. But I doubt that is possible. The

Re: [EMAIL PROTECTED] HTTP AUTH

2005-12-26 Thread Scott Gifford
Christopher Deeley [EMAIL PROTECTED] writes: I would like to set up a user folder for each user on my site and the only method I know to stop anyone but the user accessing that folder is to use htaccess to require the valid user. I have PHP running as a module on Apache. Is there a way to

Re: [EMAIL PROTECTED] Apache running with PID of 0

2005-10-04 Thread Scott Gifford
Duncan Drury [EMAIL PROTECTED] writes: [...] one of the symptoms is Apache ends up running with a PID of 0 (or shows up as doing so when I ps -aux | grep httpd) Can you paste the output of ps -aux |head -1 and ps -aux |grep httpd which shows this into an email back to the list? Unless

Re: [EMAIL PROTECTED] unwanted file upload

2005-09-19 Thread Scott Gifford
John Hammer [EMAIL PROTECTED] writes: I am relatively new to this so if this is not the correct forum I would appreciate being pointed to the right place. Over the weekend I discovered an unwanted program running on my server. In the error_log I found this entry: --13:29:54--

Re: [EMAIL PROTECTED] Different security based on network interface

2005-09-13 Thread Scott Gifford
AragonX [EMAIL PROTECTED] writes: [...] I know that mod_access and I think mod_security will allow me to do this but they do it based on IP address. I'm afraid someone will spoof the IP addresses of the internal network to bypass this security measure. The easiest way to do this is with a

Re: [EMAIL PROTECTED] how to run a root programme from apache server

2005-09-01 Thread Scott Gifford
Arun Naik [EMAIL PROTECTED] writes: Hi, I have to run a program from apache server, whose owner is root. As apache server runs from user apache, it is not able to run the program ( owned by root). Is there any way out ? Change the permissions on the file so Apache has permission to run it,

Re: [EMAIL PROTECTED] how to run a root programme from apache server

2005-09-01 Thread Scott Gifford
Anatoly Pugachev [EMAIL PROTECTED] writes: On Thu, Sep 01, 2005 at 11:02:31AM -0400, Scott Gifford wrote: | Arun Naik [EMAIL PROTECTED] writes: | | Hi, | I have to run a program from apache server, whose owner is root. As apache | server runs from user apache, it is not able to run

Re: [EMAIL PROTECTED] Capturing IP.

2005-07-22 Thread Scott Gifford
Luis Croker [EMAIL PROTECTED] writes: I have an Apache web server (server-A) which Im using like a proxy with SSL, I mean... I receive all connections and forward them to another server (server-B). Everything works fine. Now, we want to capture the source IP address of the connections

Re: [users@httpd] mod_rewrite: Overwriting REMOTE_ADDR with HTTP_X_FORWARDED_FOR

2005-06-24 Thread Scott Gifford
Werner Schalk [EMAIL PROTECTED] writes: Hi, well of course I could use HTTP_X_FORWARDED_FOR instead of REMOTE_ADDR in all my scripts but the problem is that I have some customers and their scripts are relying on REMOTE_ADDR so I don't want to ask them to change their scripts... Ah. Is

Re: [users@httpd] Chroot question.

2005-06-24 Thread Scott Gifford
Gold, Samuel (Contractor) [EMAIL PROTECTED] writes: Hey all, I have setup apache 1.3.33 on Solaris 9 in a chroot environment and just wanted to ask a simple question. If there is a /proc directory in the jail should the apache processes be in the real root /proc directory or in the jail