Re: [users@httpd] Help with Apache Configuration in Dockerized PHP Application

2024-10-07 Thread Abhijith
Hi, Yes, In the the root directory there is .htaccess file, the content of the file is ``` RewriteEngine on RewriteCond %{REQUEST_FILENAME} !-f RewriteCond %{REQUEST_FILENAME} !-d RewriteCond $1 !^(index\.php|robots\.txt|favicon\.ico) RewriteRule ^(.*)$ /index.php/$1 [L] ``` Since by @Eric's sugge

Re: [users@httpd] Help with Apache Configuration in Dockerized PHP Application

2024-10-07 Thread Frank Gingras
On Mon, Oct 7, 2024 at 7:51 AM Eric Covener wrote: > On Mon, Oct 7, 2024 at 7:12 AM Eric Covener wrote: > > > > >> [Sun Oct 06 10:02:48.889047 2024] [authz_core:error] [pid 10:tid > 131326541519672] [client 192.168.16.1:49194] AH01630: client denied by > server configuration: > /usr/local/apache

Re: [users@httpd] Help with Apache Configuration in Dockerized PHP Application

2024-10-07 Thread Eric Covener
On Mon, Oct 7, 2024 at 7:12 AM Eric Covener wrote: > > >> [Sun Oct 06 10:02:48.889047 2024] [authz_core:error] [pid 10:tid > >> 131326541519672] [client 192.168.16.1:49194] AH01630: client denied by > >> server configuration: > >> /usr/local/apache2/htdocs/apps/admin/public_html/.htaccess > > T

Re: [users@httpd] Help with Apache Configuration in Dockerized PHP Application

2024-10-07 Thread Abhijith
Thanks for the response, There is no other config file than admin.conf. here is the result of `apachectl -S`: ``` [Mon Oct 07 11:30:45.926201 2024] [core:trace3] [pid 102:tid 123653751024456] core.c(3469): Setting LogLevel for all modules to trace8 [Mon Oct 07 11:30:45.926287 2024] [core:trace3] [p

Re: [users@httpd] Help with Apache Configuration in Dockerized PHP Application

2024-10-07 Thread Eric Covener
>> [Sun Oct 06 10:02:48.889047 2024] [authz_core:error] [pid 10:tid >> 131326541519672] [client 192.168.16.1:49194] AH01630: client denied by >> server configuration: >> /usr/local/apache2/htdocs/apps/admin/public_html/.htaccess This error means it's not filesystem permissions. Are there other

[users@httpd] Help with Apache Configuration in Dockerized PHP Application

2024-10-07 Thread Abhijith
Hi all, I’m working on Dockerizing a PHP application and configuring Apache, but I’m encountering an issue related to `.htaccess` that I can’t seem to resolve. I’d greatly appreciate any guidance from the community! Here’s the setup I’m working with: *Docker Compose File (docker-compose.yml):*

Re: [users@httpd] mod_proxy_hcheck with Istio

2024-10-04 Thread Daniel Ferradal Márquez
On 30/9/24 10:50, Stanislav Samek wrote: Hi, I don't think that there is an issue with ssl. We have SSLProxyEngine turned on and also a backend name match with CN. In attachment you can find output from the curl command. Thank you What I would make sure in your case is SSLProtocols set u

RE: [users@httpd] How to fix Apache HTTPD Unauthenticated/Open Web Proxy Vulnerability?

2024-10-04 Thread Shinde, Pramod K
HTTPD. Thanks again. From: Eric Covener Sent: Friday, September 27, 2024 7:16 AM To: users@httpd.apache.org Subject: Re: [users@httpd] How to fix Apache HTTPD Unauthenticated/Open Web Proxy Vulnerability? EXTERNAL EMAIL - This email was sent by a person from outside your organization. Exercise ca

Re: [users@httpd] How to disable IndexStylesheet on a subdirectory

2024-09-30 Thread Frank Gingras
On Mon, Sep 30, 2024 at 8:31 PM Dan Mahoney (Gushi) wrote: > Hey there all, > > I can't find this in the manual. Assume I've set IndexStylesheet for some > directory of downloads, but on a subdirectory, would like apache to not > add the CSS header. > > (Specifically, we want as simple HTML as p

[users@httpd] How to disable IndexStylesheet on a subdirectory

2024-09-30 Thread Dan Mahoney (Gushi)
Hey there all, I can't find this in the manual. Assume I've set IndexStylesheet for some directory of downloads, but on a subdirectory, would like apache to not add the CSS header. (Specifically, we want as simple HTML as possible, for use with automated fetching scripts). I don't want to

Re: [users@httpd] mod_proxy_hcheck with Istio

2024-09-30 Thread Stanislav Samek
Hi, I don't think that there is an issue with ssl. We have SSLProxyEngine turned on and also a backend name match with CN. In attachment you can find output from the curl command. Thank you so 28. 9. 2024 o 22:02 Daniel Ferradal Márquez napísal(a): > > On 24/9/24 8:25, Stanislav Samek wrote: >

Re: [users@httpd] RewriteMap and combining RewriteRules

2024-09-28 Thread Daniel Ferradal Márquez
On 14/7/24 19:56, Dave Wreski wrote: The problem is that it appears RewriteMap must consider ALL possibilities. It doesn't then fall back to actually see if the URL is valid or another RewriteRule exists. As I see it, you must define other patterns that will not fall into the rewritemap fi

Re: [users@httpd] Tomcat anibm semeru

2024-09-28 Thread Daniel Ferradal Márquez
On 23/9/24 16:52, andreas.moro...@wobi.bz.it wrote: Hello, we would like to use tomcat with ibm semeru as jre. I searched the web, but found no documentation. Is this combination supported and is there documentation on how to configure it? Greetings Andreas Although this is the user list

Re: [users@httpd] mod_proxy_hcheck with Istio

2024-09-28 Thread Daniel Ferradal Márquez
On 24/9/24 8:25, Stanislav Samek wrote: ... Probably it will be a problem that Istio is exposing endpoints in HTTP/2 revision. Don't you have a problem with this? Here is part of our configuration:   ProxyPassMatch ^/foobar/v1/(.*)$  balancer://application/api/$1   ProxyPassReverse ^/foobar

Re: [users@httpd] AH00051: child pid 3886730 exit signal Segmentation fault (11), possible coredump in /etc/httpd

2024-09-28 Thread Dave Wreski
Hi, thanks for your help. Bug created here. https://bz.apache.org/bugzilla/show_bug.cgi?id=69350 I can also provide a coredump (33MB). dave On 9/27/24 8:33 PM, Eric Covener wrote: Send the backtrace of all threads as an attachment or open a bug report and attach it there. https://bz.apache.or

Re: [users@httpd] AH00051: child pid 3886730 exit signal Segmentation fault (11), possible coredump in /etc/httpd

2024-09-27 Thread Eric Covener
Send the backtrace of all threads as an attachment or open a bug report and attach it there. https://bz.apache.org/bugzilla/enter_bug.cgi?product=Apache%20httpd-2&Bugzilla_remember=on&Bugzilla_restrictlogin=on&GoAheadAndLogIn=Log%20in On Fri, Sep 27, 2024 at 8:31 PM Dave Wreski wrote: > > I'm usi

Re: [users@httpd] AH00051: child pid 3886730 exit signal Segmentation fault (11), possible coredump in /etc/httpd

2024-09-27 Thread Dave Wreski
I'm using httpd-2.4.62 on fedora40 and noticed periodic errors related to core dumps. Is this a potential bug? I see there are several similar bug reports with previous versions but never a resolution. The crash symptom by iteslf doesn't mean very much without specific backtraceshttps://httpd.a

[users@httpd] How to fix Apache HTTPD Unauthenticated/Open Web Proxy Vulnerability?

2024-09-27 Thread Shinde, Pramod K
Hello, We are using Apache HTTPD 2.4.53 for an internal content management system. It is not customer-facing. The security solution considers the proxy vulnerable to an "Unauthenticated/Open Web Proxy Detected" vulnerability. After many back and forths with them to check if it's a false positiv

Re: [users@httpd] AH00051: child pid 3886730 exit signal Segmentation fault (11), possible coredump in /etc/httpd

2024-09-27 Thread Dave Wreski
Hi, I'm using httpd-2.4.62 on fedora40 and noticed periodic errors related to core dumps. Is this a potential bug? I see there are several similar bug reports with previous versions but never a resolution. [Wed Sep 25 11:07:16.786647 2024] [core:notice] [pid 1616:tid 161

Re: [users@httpd] How to fix Apache HTTPD Unauthenticated/Open Web Proxy Vulnerability?

2024-09-27 Thread Eric Covener
I suspect you are not running a forward proxy on purpose, so you should not have "ProxyRequests ON" in your configuration. You should just test without this, remove the other additions, and move on. If you're running a forward proxy on purpose, you have to restrict who can access it (and what hos

Re: [users@httpd] AH00051: child pid 3886730 exit signal Segmentation fault (11), possible coredump in /etc/httpd

2024-09-27 Thread Eric Covener
On Thu, Sep 26, 2024 at 10:26 PM Dave Wreski wrote: > > Hi, > > I'm using httpd-2.4.62 on fedora40 and noticed periodic errors related to > core dumps. Is this a potential bug? I see there are several similar bug > reports with previous versions but never a resolution. The crash symptom by ites

Re: [users@httpd] AH00051: child pid 3886730 exit signal Segmentation fault (11), possible coredump in /etc/httpd

2024-09-26 Thread Frank Gingras
On Thu, Sep 26, 2024 at 10:27 PM Dave Wreski wrote: > Hi, > > I'm using httpd-2.4.62 on fedora40 and noticed periodic errors related to > core dumps. Is this a potential bug? I see there are several similar bug > reports with previous versions but never a resolution. > > [Wed Sep 25 11:07:16.7866

[users@httpd] AH00051: child pid 3886730 exit signal Segmentation fault (11), possible coredump in /etc/httpd

2024-09-26 Thread Dave Wreski
Hi, I'm using httpd-2.4.62 on fedora40 and noticed periodic errors related to core dumps. Is this a potential bug? I see there are several similar bug reports with previous versions but never a resolution. [Wed Sep 25 11:07:16.786647 2024] [core:notice] [pid 1616:tid 1616] AH00051: child pid

RE: FW: [users@httpd] rewrite rule issue with Apache 2.4.62

2024-09-26 Thread Daiya, Devendra singh
Hello Eric, I have opened a Bug for this issue - Bug 69344<https://bz.apache.org/bugzilla/show_bug.cgi?id=69344> Regards, Dev From: Eric Covener Sent: Saturday, September 14, 2024 12:35 AM To: users@httpd.apache.org Subject: Re: FW: [users@httpd] rewrite rule issue with Apache 2.4

[users@httpd] mod_proxy_hcheck with Istio

2024-09-23 Thread Stanislav Samek
Hello, we are trying to use apache in version 2.4.58 with modules mod_proxy_balancer, mod_proxy_hcheck and mod_proxy. Goal is to dynamically check the status of the application which is exposed by Istio gateway. Problem is that from the Apache server we are able to connect to the application endp

Re: [users@httpd] Tomcat anibm semeru

2024-09-23 Thread Zahid Rahman
The various jvms are developed to follow same specifications written by a higher design committee. Unless there is an undiscovered bug tomcat will work IBM jvm. Just try it. RUN IT. On Mon, 23 Sept 2024, 16:03 Frank Gingras, wrote: > > > On Mon, Sep 23, 2024 at 10:56 AM wrote: > >> Hello, >

Re: [users@httpd] Tomcat anibm semeru

2024-09-23 Thread Frank Gingras
On Mon, Sep 23, 2024 at 10:56 AM wrote: > Hello, > > we would like to use tomcat with ibm semeru as jre. > I searched the web, but found no documentation. > > Is this combination supported and is there documentation on how to > configure it? > > Greetings > Andreas > > Institut für den sozialen W

[users@httpd] Tomcat anibm semeru

2024-09-23 Thread Andreas . Moroder
Hello, we would like to use tomcat with ibm semeru as jre. I searched the web, but found no documentation. Is this combination supported and is there documentation on how to configure it? Greetings Andreas Institut für den sozialen Wohnbau des Landes Südtirol Istituto per l’edilizia sociale de

Re: [users@httpd] SSL setup assistance

2024-09-18 Thread j...@k6ccc.org
org Subject: Re: [users@httpd] SSL setup assistance It was thus said that the Great j...@k6ccc.org once stated: > So can someone either point me to a good step by step or walk me through > what I need to do to get this working. I had gotten the cert back then > via Let's Encryp

Re: [users@httpd] SSL setup assistance

2024-09-18 Thread Sean Conner
It was thus said that the Great j...@k6ccc.org once stated: > So can someone either point me to a good step by step or walk me through > what I need to do to get this working. I had gotten the cert back then > via Let's Encrypt, and that was the easy part. I have a write-up of what I went throu

Re: [users@httpd] SSL setup assistance

2024-09-18 Thread Frank Gingras
On Wed, Sep 18, 2024 at 3:02 PM Marc wrote: > > > > I am running Apache on a Windows server with at least close to latest > > release. It host my personal website and a website for my home Christmas > > light show. Just simple static web pages - nothing fancy at all. There > > is absolutely no

RE: [users@httpd] SSL setup assistance

2024-09-18 Thread Marc
> > I am running Apache on a Windows server with at least close to latest > release. It host my personal website and a website for my home Christmas > light show. Just simple static web pages - nothing fancy at all. There > is absolutely nothing that needs any degree of security. As such I hav

Re: [users@httpd] SSL setup assistance

2024-09-18 Thread Yehuda Katz
On Wed, Sep 18, 2024 at 2:56 PM Frank Gingras wrote: > >> You basically need to load the mod_ssl module with LoadModule, edit the > :443 vhost and add SSLEngine on, SSLCertificateFile and > SSLCertificateKeyFile. > I also recommend looking at the Mozilla SSL Configuration Generator. It will help

Re: [users@httpd] SSL setup assistance

2024-09-18 Thread Frank Gingras
On Wed, Sep 18, 2024 at 2:52 PM j...@k6ccc.org wrote: > I know this is going to be very basic for most of you. > > I am running Apache on a Windows server with at least close to latest > release. It host my personal website and a website for my home Christmas > light show. Just simple static we

[users@httpd] SSL setup assistance

2024-09-18 Thread j...@k6ccc.org
I know this is going to be very basic for most of you. I am running Apache on a Windows server with at least close to latest release. It host my personal website and a website for my home Christmas light show. Just simple static web pages - nothing fancy at all. There is absolutely nothing t

Re: FW: [users@httpd] rewrite rule issue with Apache 2.4.62

2024-09-13 Thread Eric Covener
ges made. Is this change support any new directive or it > deprecated some older rewrite directives which is causing failure. > > > > Please let us know. > > > > Thanks. > > > > Regards, > > Dev > > > > > > From: Daiya, Devendra s

RE: FW: [users@httpd] rewrite rule issue with Apache 2.4.62

2024-09-13 Thread Daiya, Devendra singh
@httpd] rewrite rule issue with Apache 2.4.62 Hi Eric, Looks like mail was not posted on time. Re-attempting. Kindly review. Thanks. Regards, Dev From: Daiya, Devendra singh Sent: Tuesday, September 10, 2024 9: 45 PM To: users@  httpd. apache. org Hi Eric, Looks like mail was not posted on time

[users@httpd] Strange behavior of nested directives and mod_rewrite

2024-09-13 Thread Pascal Christen
Hi I have the following setup in my httpd.conf inside the : RewriteEngine on RewriteRule ^nonexists.php$ /target.php?nonexists RewriteRule ^exists.php$ /target.php?exists Header always set x-request-first-if "YES" Header always set x-request-seco

RE: FW: [users@httpd] rewrite rule issue with Apache 2.4.62

2024-09-11 Thread Daiya, Devendra singh
Hi Eric, Looks like mail was not posted on time. Re-attempting. Kindly review. Thanks. Regards, Dev From: Daiya, Devendra singh Sent: Tuesday, September 10, 2024 9:45 PM To: users@httpd.apache.org Subject: RE: FW: [users@httpd] rewrite rule issue with Apache 2.4.62 Hi Eric, Below are Traces

RE: FW: [users@httpd] rewrite rule issue with Apache 2.4.62

2024-09-10 Thread Daiya, Devendra singh
id#7fc5a8004f80/initial] setting lastsub to rule with output /launchpad.html [Thu Sep 05 06:17:05.862711 2024] [rewrite:trace2] [pid 3531713:tid 3531735] mod_rewrite.c(505): [client 123.11.22.345:9812] 123.11.22.345 - - [xct-launchpad-dev.domain.com/sid#7009f8][rid#7fc5a8004f80/initial] forc

Re: [users@httpd] Information

2024-09-09 Thread suman choudhary
Hello, Thank you very much for the information. Currently the apache version 2.4.53 is running on ubuntu 22.04. So if I try to upgrade or install apache 2.4.62 which is the latest version will it be compatible or work? On Tue, Sep 10, 2024 at 11:21 AM Frank Gingras wrote: > > > On Tue, Sep 10,

Re: FW: [users@httpd] rewrite rule issue with Apache 2.4.62

2024-09-09 Thread Eric Covener
On Mon, Sep 9, 2024 at 1:25 PM Daiya, Devendra singh wrote: > > Hi Eric, Team, > > > > We tested our application with 2.4.62 pointing to older version of > mod_rewrite.so module (2.4.59) and application is working fine. > > > > Could you please let us know if there are any limitation defined in

RE: FW: [users@httpd] rewrite rule issue with Apache 2.4.62

2024-09-09 Thread Daiya, Devendra singh
To: users@httpd.apache.org Subject: RE: FW: [users@httpd] rewrite rule issue with Apache 2.4.62 Hi Eric, For both versions, we have the same config. Below are the end-to-end files. httpd. conf #HTTPD. CONF #TEMPLATE? ServerName xyz. hostname. com Listen 1098 LoadModule mpm_event_module modules

Re: [users@httpd] Brotli compression

2024-09-05 Thread Dave Wreski
Hi, following up with my own email here to indicate I discovered the problem. It wasn't immediately clear from the Joomla AdminTools "prevent content transformation" setting that it essentially disables cloudflare's ability to proxy compressed content. Header merge Cache-Control "no-tra

[users@httpd] Re: Helpful and Friendly Mailing List Replies [WAS: Re: [users@httpd] Update Apache httpd to the latest version 2.4.62]

2024-09-03 Thread Jonesy
On Tue, 3 Sep 2024 01:04:13 -0400, Yehuda Katz wrote: > > I have been asked by a number of friends/colleagues why I am still on the > HTTPD users list when people are so unfriendly. > While this response is technically correct, and supporting a Ubuntu > packaged version of httpd is potentially not

Re: [users@httpd] Update Apache httpd to the latest version 2.4.62

2024-09-02 Thread Kaushal Shriyan
On Tue, Sep 3, 2024 at 10:25 AM Frank Gingras wrote: > > > On Tue, Sep 3, 2024 at 12:45 AM Kaushal Shriyan > wrote: > >> >> >> On Tue, Sep 3, 2024 at 9:08 AM Yehuda Katz wrote: >> >>> On Mon, Sep 2, 2024 at 11:30 PM Kaushal Shriyan < >>> kaushalshri...@gmail.com> wrote: >>> I am running Ub

[users@httpd] Helpful and Friendly Mailing List Replies [WAS: Re: [users@httpd] Update Apache httpd to the latest version 2.4.62]

2024-09-02 Thread Yehuda Katz
On Tue, Sep 3, 2024 at 12:56 AM x wrote: > On Tue, Sep 3, 2024 at 12:45 AM Kaushal Shriyan > wrote: > >> Are there any release notes where the security changes related to Apache >> HTTPD version 2.4.62 have been backported to the Apache HTTPD packages >> supplied by Ubuntu? >> >> Kaushal, > > Bes

Re: [users@httpd] Update Apache httpd to the latest version 2.4.62

2024-09-02 Thread Frank Gingras
On Tue, Sep 3, 2024 at 12:45 AM Kaushal Shriyan wrote: > > > On Tue, Sep 3, 2024 at 9:08 AM Yehuda Katz wrote: > >> On Mon, Sep 2, 2024 at 11:30 PM Kaushal Shriyan >> wrote: >> >>> I am running Ubuntu server version 24.04 LTS. Is there a way to update >>> Apache httpd to the latest version 2.4.

Re: [users@httpd] Update Apache httpd to the latest version 2.4.62

2024-09-02 Thread Yehuda Katz
On Tue, Sep 3, 2024 at 12:45 AM Kaushal Shriyan wrote: > Thanks, Yehuda, for the quick response. I really appreciate it. Are there > any release notes where the security changes related to Apache HTTPD > version 2.4.62 have been backported to the Apache HTTPD packages supplied > by Ubuntu? > You

Re: [users@httpd] Update Apache httpd to the latest version 2.4.62

2024-09-02 Thread Kaushal Shriyan
On Tue, Sep 3, 2024 at 9:08 AM Yehuda Katz wrote: > On Mon, Sep 2, 2024 at 11:30 PM Kaushal Shriyan > wrote: > >> I am running Ubuntu server version 24.04 LTS. Is there a way to update >> Apache httpd to the latest version 2.4.62? >> > > You can always download and compile HTTPD for yourself. Th

Re: [users@httpd] Update Apache httpd to the latest version 2.4.62

2024-09-02 Thread Yehuda Katz
On Mon, Sep 2, 2024 at 11:30 PM Kaushal Shriyan wrote: > I am running Ubuntu server version 24.04 LTS. Is there a way to update > Apache httpd to the latest version 2.4.62? > You can always download and compile HTTPD for yourself. The instructions in the documentation are pretty clear. https://h

[users@httpd] Update Apache httpd to the latest version 2.4.62

2024-09-02 Thread Kaushal Shriyan
Hi, I am running Ubuntu server version 24.04 LTS. Is there a way to update Apache httpd to the latest version 2.4.62? Please guide me. Thanks in advance. Best regards, Kaushal

RE: FW: [users@httpd] rewrite rule issue with Apache 2.4.62

2024-08-29 Thread Daiya, Devendra singh
oto--)/(.*)([0-9]\.glb.wellsfargo.net)/? $1/${map-file:${lowercase:$2}|$2}$3 Regards, Dev From: Eric Covener Sent: Wednesday, August 28, 2024 7:17 PM To: users@httpd.apache.org Subject: Re: FW: [users@httpd] rewrite rule issue with Apache 2.4.62 > Is there

RE: FW: [users@httpd] rewrite rule issue with Apache 2.4.62

2024-08-28 Thread Daiya, Devendra singh
<mailto:devendra.s.da...@wellsfargo.com> From: Eric Covener Sent: Wednesday, August 28, 2024 7:17 PM To: users@httpd.apache.org Subject: Re: FW: [users@httpd] rewrite rule issue with Apache 2.4.62 > Is there anything we need to update in config file for Rewrite rule? I > responded last week with follow

Re: FW: [users@httpd] rewrite rule issue with Apache 2.4.62

2024-08-28 Thread Eric Covener
> Is there anything we need to update in config file for Rewrite rule? I responded last week with followup questions. - To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.

FW: [users@httpd] rewrite rule issue with Apache 2.4.62

2024-08-28 Thread Daiya, Devendra singh
Hi All, For below issue, any leads would be of great help. Is there anything we need to update in config file for Rewrite rule? Thanks. Regards, Dev From: Daiya, Devendra singh Sent: Friday, August 23, 2024 8:49 PM To: users@httpd.apache.org Subject: [users@httpd] rewrite rule issue with

Re: [users@httpd] Location of Web Site Pages

2024-08-26 Thread Yehuda Katz
On Sun, Aug 25, 2024 at 8:09 PM Lawrence Taylor wrote: > Thanks Paul I have read the document, which explains all the ways you map > the URL to file system locations. What it does not say (from what I can > see) is how to check where this mapping is located. Can you help? > You have everything

Re: [users@httpd] Location of Web Site Pages

2024-08-25 Thread Lawrence Taylor
Thanks Paul I have read the document, which explains all the ways you map the URL to file system locations. What it does not say (from what I can see) is how to check where this mapping is located. Can you help? On Sat, Aug 24, 2024 at 2:32 PM Paul wrote: > On 2024-08-24 14:58, Lawrence Taylor

[users@httpd] reverse proxy test ,multiple test sites

2024-08-25 Thread bruce
Hi, Update on testing apache - reverse proxy/nextjs apps. The idea is to run a local node server (http://127.0.0.1:x) whis is displayed via Apache. I have two/2 examples that appear to work if run separately. running is configured (a2enmod/a2ensite) as well as "systemctl restart apache2". I can

Re: [users@httpd] Location of Web Site Pages

2024-08-24 Thread Frank Gingras
On Sat, Aug 24, 2024 at 4:32 PM Paul wrote: ... I think it's about time that you move the matter to a web/html/js forum - this thread was not really pertinent to httpd, as far as the asked questions are concerned.

Re: [users@httpd] Location of Web Site Pages

2024-08-24 Thread Paul
On 2024-08-24 14:58, Lawrence Taylor wrote: The mixed content error I am getting now when I force HTTPS is A script with an insecure url of " http://www.luxurybeach.com/admin/js/source/jquery-ui/development-bundle/slides.min.jquery.js"; was loaded on line: 129 of https://www.luxurybeach.com/. --

Re: [users@httpd] Location of Web Site Pages

2024-08-24 Thread Lawrence Taylor
The mixed content error I am getting now when I force HTTPS is A script with an insecure url of " http://www.luxurybeach.com/admin/js/source/jquery-ui/development-bundle/slides.min.jquery.js"; was loaded on line: 129 of https://www.luxurybeach.com/. -- This URL will nee

[users@httpd] SetHandler is included in "FileInfo" .htaccess override: this makes it difficult to protect UDS FPM webmasters against each other

2024-08-24 Thread Alain Knaff
Hi, We have a server hosting PHP websites of several distinct organizations (users). Each organization should run its php scripts under its own Unix user. It should not be possible for user Bob to cause Apache to execute stuff as user Alice by manipulating the .htaccess of his own site. In the o

[users@httpd] Re: node/apache -- reverse proxy subfolder

2024-08-23 Thread bruce
Hi. This is a follow up to the issue I posted earlier with the Github app/https://github.com/berat/waitlist-landing-page. The app is a node app that I wanted to display via Apache/ubuntu. I'm posting this here as a dat apoint to anyone who might search for node/pm2/apache/reverse proxy! There a

[users@httpd] node/apache -- reverse proxy subfolder

2024-08-23 Thread bruce
(had created a thread for this a few days ago.. but it was accidentally deleted!) Hi Frank/list. This is continuing on my issue of figuring out how to have a test github/node app run from apache2. Instead of getting the site content, I seem to get -->"403 forbidden No matching DirectoryIndex..."

Re: [users@httpd] rewrite rule issue with Apache 2.4.62

2024-08-23 Thread Eric Covener
> Could you please review this case and let us know if we need to adjust any > configuration with 2.4.62 version. > > 2.4.62 (failing to error.html) > > [Mon Aug 19 14:14:47.360450 2024] [rewrite:trace4] [pid 1177:tid 11999] > mod_rewrite.c(505): [client :] - - > [cci-launchpad-dev.hostname.com

[users@httpd] rewrite rule issue with Apache 2.4.62

2024-08-23 Thread Daiya, Devendra singh
Hi Team, We are facing issues with rewrite rule, post migrating from 2.4.59 to 2.4.62. We faced similar issues with 2.4.60/61 as well. We are using below rewrite rules: Below are set in httpd.conf file: - RewriteRule ^--proto--/--error-- \ /launchpad.html [PT,L] RewriteRule ^(--proto--/.*)-

Re: [users@httpd] reverse proxy -- showing directory index

2024-08-22 Thread Frank Gingras
On Thu, Aug 22, 2024 at 11:54 AM bruce wrote: > Hi. > > I'm testing out a github site. I had posted most of this awhile ago, > and it had appears to work. However, something is amiss/screwing up on > my part. In other words, FUBAR! > > Instead of getting the site content, getting the directory in

[users@httpd] reverse proxy -- showing directory index

2024-08-22 Thread bruce
Hi. I'm testing out a github site. I had posted most of this awhile ago, and it had appears to work. However, something is amiss/screwing up on my part. In other words, FUBAR! Instead of getting the site content, getting the directory index. The test app: https://github.com/berat/waitlist-land

Re: [users@httpd] Location of Web Site Pages

2024-08-21 Thread Lawrence Taylor
Thanks Yehuda This is above my expertise so will need to hire someone Thanks On Wed, Aug 21, 2024 at 6:27 PM Yehuda Katz wrote: > There is no way to know without actually looking at the code. Some PHP > applications have a templating engine, some just have includes of different > files in dif

Re: [users@httpd] Location of Web Site Pages

2024-08-21 Thread Yehuda Katz
There is no way to know without actually looking at the code. Some PHP applications have a templating engine, some just have includes of different files in different places. You can search the code for the name of the javascript file. There are definitely other files that are included from a non-se

Re: [users@httpd] Location of Web Site Pages

2024-08-21 Thread Stormy
On 2024-08-21 14:08, Yehuda Katz wrote: I see a lot of absolute links to http resources (and I see the name of the company that made the website). It does not appear to be any off-the-shelf application, it was probably something made specifically for your company. - Y On Wed, Aug 21, 2024 at 1:

Re: [users@httpd] Location of Web Site Pages

2024-08-21 Thread Yehuda Katz
I see a lot of absolute links to http resources (and I see the name of the company that made the website). It does not appear to be any off-the-shelf application, it was probably something made specifically for your company. - Y On Wed, Aug 21, 2024 at 1:57 PM Lawrence Taylor wrote: > When you

Re: [users@httpd] Location of Web Site Pages

2024-08-21 Thread Lawrence Taylor
When you view the source code on the landing page does that tell you anything?luxurybeach.comSent from my iPhoneOn 21 Aug 2024, at 11:51 a.m., Yehuda Katz wrote:There are probably no "html" files - the website is generated dynamically by the PHP application.It looks like the PHP application is li

Re: [users@httpd] Location of Web Site Pages

2024-08-21 Thread Yehuda Katz
There are probably no "html" files - the website is generated dynamically by the PHP application. It looks like the PHP application is linking to insecure URLs for javascript and stylesheets, so when you go to the page with HTTPS, your browser refuses to load those resources and that is why your pa

Re: [users@httpd] Location of Web Site Pages

2024-08-21 Thread Lawrence Taylor
Thanks but the html files still exist somewhere though correct?The purpose of all this is that I am trying to force HTTPS. But when I do the landing page is not rendered properly, and the other pages become error pages.Sent from my iPhoneOn 21 Aug 2024, at 11:32 a.m., Yehuda Katz wrote:Your .htac

Re: [users@httpd] Location of Web Site Pages

2024-08-21 Thread Yehuda Katz
Your .htaccess is doing three things: forwarding all secure traffic to your website to be not secure, forwarding some requests for specific files to different places, telling the system to use a ridiculously old version of PHP. You probably need a PHP developer to look at your application specific

Re: [users@httpd] Location of Web Site Pages

2024-08-21 Thread Lawrence Taylor
Hi Yehuda Here is my .htaccess file, does it show anything? RewriteCond %{SERVER_PORT} ^443$ RewriteRule (.*) http://www.luxurybeach.com [R=301,L] redirect 301 /pdf/127/Condo%20Las%20Pe�as%20Vallarta%20 http://www.luxurybeach.com/pdf/127/Condo%20Las%20Pe�as%20Vallarta.pdf redirect 301 /pdf/139/

Re: [users@httpd] Location of Web Site Pages

2024-08-20 Thread Yehuda Katz
This is a side issue, but I can see in your screenshots that you are running cPanel version 86. That version is 3+ years out of date and could have security vulnerabilities. You should not expose a server running software which has not been updated in such a long time on the Internet. - Y Sent fr

Re: [users@httpd] Location of Web Site Pages

2024-08-20 Thread Yehuda Katz
You have some kind of PHP application running your website. You can check your .htaccess file for RewriteRule or other directives that affect requests and direct them to the application. There isn't enough information in the screenshots to see whether it is a custom application or something off the

Re: [users@httpd] Location of Web Site Pages

2024-08-20 Thread Frank Gingras
On Tue, Aug 20, 2024 at 8:18 PM Lawrence Taylor wrote: > Yehuda > > I attach the images of the directories in CPanel for the web site user. > These directories do not have html files. > > What do you suggest now? > > Regards > > Lawrence > > > > On Tue, Aug 20, 2024 at 2:36 PM Lawrence Taylor >

Re: [users@httpd] Location of Web Site Pages

2024-08-20 Thread Lawrence Taylor
Thanks Yahuda I will try that!Sent from my iPhoneOn 20 Aug 2024, at 2:28 p.m., Yehuda Katz wrote:Based on the links you posted, it looks like your server is running cPanel. cPanel stores each website it hosts in its own user directory.You need to figure out which user your website is running as,

Re: [users@httpd] Location of Web Site Pages

2024-08-20 Thread Yehuda Katz
On Tue, Aug 20, 2024 at 4:25 PM Marc wrote: > what about doing a > > find / -iname '*cse.cgi*' -ls > If anyone comes across this in the future: cse is ConfigServer Explorer, a cPanel plugin that provides a filesystem browser. It has nothing to do with HTTPD or with where the files of the website

Re: [users@httpd] Location of Web Site Pages

2024-08-20 Thread Yehuda Katz
Based on the links you posted, it looks like your server is running cPanel. cPanel stores each website it hosts in its own user directory. You need to figure out which user your website is running as, then look at the public_html directory in the user account's home directory. If a single cPanel ac

RE: [users@httpd] Location of Web Site Pages

2024-08-20 Thread Marc
> I have been trying to find the location of the actual html pages that you > see on my website so I can edit them. But in my document root I only have > > 400.shtml > iew&p=/var/www/html&f=400.shtml#new> 229 28-Oct-2

[users@httpd] Location of Web Site Pages

2024-08-20 Thread Lawrence Taylor
Hi I have been trying to find the location of the actual html pages that you see on my website so I can edit them. But in my document root I only have 400.shtml 229 28-Oct-2021 07:25:02 r

[users@httpd] httpd 2.2 to httpd 2.4 - how to avoid SSLCADNRequestPath with thousands of certs

2024-08-19 Thread J Harri
I'm migrating an application from httpd 2.2 to httpd 2.4, and the way client authentication is configured for httpd 2.2 will not work for httpd 2.4 . The application serves static files to thousands of different clients, each with their own self signed certificates. For httpd 2.2, set up was don

[users@httpd] b...@httpd.apache.org

2024-08-18 Thread 老玉米
(only x86_64 GNU/Linux)apache 2.4.62 index file download bug: index file,file name is "CGI-SpeedyCGI-2.22-apache2.2.tar.gz",cannot download, error_log and access_log is 200 response。 brower is chrome.

[users@httpd] (only x86_64 GNU/Linux)apache 2.4.62 index file download bug

2024-08-18 Thread 老玉米
(only x86_64 GNU/Linux)apache 2.4.62 index file download bug: index file,file name is "CGI-SpeedyCGI-2.22-apache2.2.tar.gz",cannot download, error_log and access_log is 200 response。 brower is chrome.

[users@httpd] AH00656 can't open DBM RewriteMap

2024-08-15 Thread Dave Wreski
Hi, I've just upgraded fedora38 to fedora40 with apache-2.4.62 and now my my rewritemap doesn't work: [Thu Aug 15 21:31:49.488178 2024] [rewrite:error] [pid 518406:tid 518478] (13)Permission denied: [client 68.195.111.42:0] AH00656: mod_rewrite: can't open DBM RewriteMap /etc/httpd/conf.d/my

[users@httpd] Re: Problem Configuring httpd 2.4 to allow expired client certficates

2024-08-13 Thread J Harri
I have since found this link: https://stackoverflow.com/questions/72020602/how-to-set-ld-preload-in-systemd The difficulties getting LD_PRELOAD to work with systemd is discussed there, and it said the wrapper approach was the solution. I had already tried the other approaches discussed, with no

RE: [users@httpd] 2.4.62 broke my UDS reverse proxy

2024-08-13 Thread Ohrstrom, Jeffrey
HTTP: declining URL unix:/var/run/ondemand-nginx/jeff/passenger.sock|http://localhost/pun/sys/dashboard, referer: http://localhost:5556/ -Original Message- From: Ohrstrom, Jeffrey Sent: Tuesday, August 13, 2024 2:05 PM To: users@httpd.apache.org Subject: RE: [users@httpd] 2.4.62 bro

RE: [users@httpd] 2.4.62 broke my UDS reverse proxy

2024-08-13 Thread Ohrstrom, Jeffrey
t: RE: [users@httpd] 2.4.62 broke my UDS reverse proxy Thanks for the response! Here's the lua code - though it's a different bit (pun_proxy.lua is a directory above and calls this method that I think is more relevant). You can see in my original email the -- req_handler="pro

RE: [users@httpd] 2.4.62 broke my UDS reverse proxy

2024-08-13 Thread Ohrstrom, Jeffrey
quot; time_user_map="0.003" res_location="" res_content_length="527" res_content_location="" local_user="jeff" req_uri="/pun/sys/dashboard" req_method="GET" res_content_language="" req_user_ip="10.0.2.100" allowed_

Re: [users@httpd] 2.4.62 broke my UDS reverse proxy

2024-08-13 Thread Eric Covener
On Tue, Aug 13, 2024 at 1:13 PM Ohrstrom, Jeffrey wrote: > we use LuaHookFixups to set some things and I get the sense that could have > something to do with it. Can you share pun_proxy.lua? Can you test with pun_proxy.lua only touching r->handler in the way that SetHandler example looks in ht

[users@httpd] 2.4.62 broke my UDS reverse proxy

2024-08-13 Thread Ohrstrom, Jeffrey
Hi, I run an open source project that uses apache. Our continuous integration has broken recently with the 2.4.62 update. Before opening a bug with httpd, I read I should post here first. Specifically I seem to be running into this warning message that ends up resulting in a 500 error message f

[users@httpd] Problem Configuring httpd 2.4 to allow expired client certficates

2024-08-12 Thread J Harri
I am working on migrating an application to httpd 2.4 on AL2023.  The application uses client certificates, which will be expiring before they can all be rotated with new expirations. I am attempting to configure httpd 2.4 to continue requiring client certificates, but change the configuration t

Re: [users@httpd] mod_proxy health check custom header

2024-08-12 Thread Aaron Rosenzweig
Hi Eric thanks for digging into code to confirm what I was asking for isn't currently possible. Sounds like while it might be a reasonable enhancement, and somewhat easy to implement, it's not a slam dunk because it could have complications. Yes, you are right, by checking for a particular endpoin

Re: [users@httpd] mod_proxy health check custom header

2024-08-12 Thread Eric Covener
> Does anyone know how to configure the mod_proxy health check to use a custom > header? Or is it not possible currently? Thank you :-) Not a user but I checked the code and I don't think it's possible without an enhancement to mod_proxy_hcheck. The change would not be too bad though. https://g

[users@httpd] Re: mod_proxy health check custom header

2024-08-12 Thread Aaron Rosenzweig
Does anyone have advice for me regarding custom headers in mod_proxy health check? Thank you :-) On Wed, Aug 7, 2024 at 2:31 PM Aaron Rosenzweig wrote: > We have mod_proxy doing balancing and working great with the exception of > one thing, the health check. I'm talking about the heartbeat inter

  1   2   3   4   5   6   7   8   9   10   >