Re: [users@httpd] Apache HTTP Server 2.4 EOL

2024-05-13 Thread Yehuda Katz
There is no planned EOL for 2.4, but you should always be on the most recently released version - currently 2.4.59 - or possibly on a version maintained by your OS distribution to keep up with the latest security patches. On Mon, May 13, 2024 at 10:50 PM Ehmann G wrote: > i tried searching on

Re: [users@httpd] openssl comand(s) for https mode on apache 2.4 on windows.

2024-04-16 Thread Yehuda Katz
I have always had issues with OpenSSL on Windows, so I gave up and started using xca (https://hohnstaedt.de/xca/). I created a root certificate that I imported into the Windows trust store and I create new certificates for each website in my dev environment. - Y On Tue, Apr 16, 2024 at 9:26 PM

Re: [users@httpd] Measurements of htaccess processing penalty

2024-03-04 Thread Yehuda Katz
The whole point of .htaccess files is that they aren't cached, it gives users who are not able to control the server the ability to make configuration changes. If you can control the server process, you should prut configuration in sections that are loaded at start time which are then cached in

[users@httpd] Measurements of htaccess processing penalty

2024-03-04 Thread Yehuda Katz
The HTTPD documentation says "You should avoid using .htaccess files completely if you have access to httpd main server config file. Using .htaccess files slows down your Apache http server. Any directive that you can include in a .htaccess file is better set in a Directory block, as it will have

Re: [users@httpd] Nginx to Apache

2024-01-21 Thread Yehuda Katz
OpenVPN port-share has nothing to do with which HTTP server is running behind it. You should have a completely working Apache configuration separate from anything connected to OpenVPN, then you can change the listening port for HTTPD and have OpenVPN forward traffic to it. The sites-enabled

Re: [users@httpd] site compromised and httpd log analysis

2022-07-06 Thread Yehuda Katz
On Wed, Jul 6, 2022 at 9:08 AM KK CHN wrote: > On Wed, Jul 6, 2022 at 8:33 AM Yehuda Katz wrote: > >> Your log doesn't start early enough. Someone uploaded a web shell (or >> found an existing web shell) to your server, possibly using an upload for >> that doesn't valid

Re: [users@httpd] site compromised and httpd log analysis

2022-07-05 Thread Yehuda Katz
Your log doesn't start early enough. Someone uploaded a web shell (or found an existing web shell) to your server, possibly using an upload for that doesn't validate the input, then used that shell to run commands on your server. I would consider your entire server to be compromised at this point

Re: [users@httpd] How to sign up using Apache

2022-07-03 Thread Yehuda Katz
There is no built-in module that provides user registration - that is something you would need to implement yourself. - Y On Sun, Jul 3, 2022 at 7:29 AM Ahmad Ismail wrote: > I can use `mod_auth_basic` or `mod_auth_digest` for authenticating users. > > I can sign in or sign out using

Re: [users@httpd] Can I serve CLI Applications using Apache

2022-06-23 Thread Yehuda Katz
You still have a bunch of options. Some possibilities using your own code: - Your CGI script or binary called by HTTPD is a wrapper which handles the piping and output capture of the other program. - Your CGI script or binary uses the available environment variables to determine where it is

Re: [users@httpd] Apache website conversion from alias to virtualhost

2022-06-08 Thread Yehuda Katz
g this option in file >> /etc/apache2/default-server.conf within returns a >> prohibited access (403 error) page: >> >> [image: image.png] >> >> >> -- >> >> >> Thomas WILLIAMSON • Technicien Systèmes et réseaux >> >> *Tél.* 05 4

Re: [users@httpd] Apache website conversion from alias to virtualhost

2022-06-08 Thread Yehuda Katz
You have "AllowOverride None" in your "". This means your .htaccess file and therefore your mod_rewrite configuration is not being read. The simplest option is "AllowOverride All" (you can specify specific overrides too if you want). - Y Sent from a device with a very small keyboard and

Re: [users@httpd] Mystifying start failure

2022-05-30 Thread Yehuda Katz
. I have updated ssl certificates recently. > > JMN > > On 30 May 2022, at 7:01, Yehuda Katz wrote: > > systemd doesn't know to look in the HTTPD log file. What does that log say? > Likely located in /var/log/apache2/ > > - Y > > On Mon, May 30, 2022 at 9:58 AM jnil...

Re: [users@httpd] Mystifying start failure

2022-05-30 Thread Yehuda Katz
systemd doesn't know to look in the HTTPD log file. What does that log say? Likely located in /var/log/apache2/ - Y On Mon, May 30, 2022 at 9:58 AM jnil...@jala.com wrote: > I recently rebooted the server and started apache only to get a failure. > Here's the diagnosis; I'm not sure what to

Re: [users@httpd] Re: Multi-domain with SSL - Virtualhost all need IPs?

2022-05-20 Thread Yehuda Katz
That is not correct. That causes httpd to try to look up the matching IP address using DNS. Use only IP addresses or wildcards. - Y On Fri, May 20, 2022 at 1:06 PM Bender, Charles wrote: > Your virtual host is defined wrong. Use the names not IP addresses > > http://1.1.1.13:443/>> >

Re: [users@httpd] Re: Multi-domain with SSL - Virtualhost all need IPs?

2022-05-20 Thread Yehuda Katz
> > It will have a different set of cert files. I let it have an IP which > nothing else shares. I'm keenly aware of this IP as I've set it up in DNS as well. If you have , it will use ALL IPs - if you want to dedicate an IP for a site, you need to specify IPs for every other site too. I am

Re: [users@httpd] Unable to connect to Apache test website on LocalHost

2022-04-12 Thread Yehuda Katz
Besides the ServerAlias, You probably also need to add DirectoryIndex index.html and also change your document root to the actual root directory where your website is located. - Y Sent from a device with a very small keyboard and hyperactive autocorrect. On Tue, Apr 12, 2022, 5:21 PM Eric

Re: [users@httpd] migrate apache httpd from 2.4.17 to 2.4.48

2022-03-03 Thread Yehuda Katz
It depends how you installed it originally. There is no official Windows package of HTTPD, but there are a number of other people/groups who make such builds available. I personally use the package built by ApacheLounge. It has no installer - I install it by unzipping to C:\Webserv\Apache and

Re: [users@httpd] How to get someone to look at a Apache bug report on Red Hat's Bugzilla?

2022-03-01 Thread Yehuda Katz
inking along! > > Jeroen Verhoeckx > > > > > *Support the independent web, use **Firefox* > <https://www.mozilla.org/en-US/firefox/new/> > > > > --- Original Message --- > On Thur

Re: [users@httpd] How to get someone to look at a Apache bug report on Red Hat's Bugzilla?

2022-02-24 Thread Yehuda Katz
t the independent web, use **Firefox* > <https://www.mozilla.org/en-US/firefox/new/> > > > > --- Original Message --- > On Friday, February 18th, 2022 at 8:38 PM, Yehuda Katz > wrote: > > > I see two options for you going forward: > 1. Contacting RedHat

Re: [users@httpd] How to get someone to look at a Apache bug report on Red Hat's Bugzilla?

2022-02-18 Thread Yehuda Katz
You mention in the bug report that you are running an old version of HTTPD because you are using the version packaged by RedHat. Your bug report asks RedHat to backport the specific fixes for your issue. I see two options for you going forward: 1. Contacting RedHat: You need a subscription to do

Re: [users@httpd] Re: Question about running apache server using WAMP

2021-07-30 Thread Yehuda Katz
: > On 30/07/2021 18:16, Yehuda Katz wrote: > > Once we get out of the technical discussion relating to HTTPD and into > > how to access Facebook, besides for the fact that this is not on topic > > for this mailing list, I suggest reading the Facebook Terms of Service > >

Re: [users@httpd] Question about running apache server using WAMP

2021-07-30 Thread Yehuda Katz
Once we get out of the technical discussion relating to HTTPD and into how to access Facebook, besides for the fact that this is not on topic for this mailing list, I suggest reading the Facebook Terms of Service which explicitly disallow account sharing. https://www.facebook.com/terms.php > 3.

Re: [users@httpd] Public viewing when it should be private

2021-05-20 Thread Yehuda Katz
I would also recommend mod_auth_cas if your SSO supports it - very easy to set up. - Y Sent from a device with a very small keyboard and hyperactive autocorrect. On Thu, May 20, 2021, 2:41 AM Michael Wechner wrote: > Hi Michael > > I think it depends on your SSO app, more specifically what

Re: [users@httpd] Replays from Internet

2021-01-19 Thread Yehuda Katz
It is likely that the user still has the browser tab open and it refreshes for some reason, or their browser crashed and reopened, or they use a session restore tool when they reopen the browser - all of these could cause an exact duplicate request. You might want to look into the

Re: [users@httpd] Alternative to Let's Encrypt?

2020-12-17 Thread Yehuda Katz
You can install certbot in a python virtualenv from pypi. This is technically not supported, but it does work. https://pypi.org/project/certbot/ See other alternate installation methods: https://certbot.eff.org/docs/install.html You can also use mod_md to have all the certificate generation

Re: [users@httpd] multiple internal websites

2020-09-23 Thread Yehuda Katz
The best choice would be to register a real domain name. Because of the gTLD program, almost anything can now be registered on the internet, so you will keep having issues. You could use .example or .test which shouldn't ever be on the public internet, or you could use .internal which might be

Re: [users@httpd] IP address show Apache welcome page but domain name working!

2020-09-22 Thread Yehuda Katz
That file is for Debian-flavor distributions. On RedHat-flavors, a similar file would be in /etc/httpd/conf.d if it exists (not in conf.modules.d though). You can check which files have the actual config for a vhost by running the command 'httpd -S'. - Y Sent from a device with a very small

Re: [users@httpd] File structure for nearly identical sites

2020-07-10 Thread Yehuda Katz
Your best option to do that might be to add a separate file with that config and call it with IncludeOptional For example: ServerName $domain ServerAlias www.$domain DocumentRoot "/var/www/vhosts/$name" ErrorLog "/var/log/httpd/$name.error_log" CustomLog

Re: [users@httpd] How to permanently disable default config files

2020-06-11 Thread Yehuda Katz
You can use yum-plugin-post-transaction-actions to delete the files (not currently available in CentOS 8 though): Create a file named /etc/yum/post-actions/httpd.action With the content: httpd*:update:rm -f /etc/httpd/conf.d/file_to_delete You should also be able to leave the files empty instead

Re: [users@httpd] Authentication plugins/front end

2020-06-06 Thread Yehuda Katz
We use mod_auth_cas. We wrote our own cas server, but there are some off the shelf options including with support for MFA, password reset, and lots more. There is also mod_auth_tkt, but I haven't used it. - Y Sent from a device with a very small keyboard and hyperactive autocorrect. On Sat, Jun

Re: [users@httpd] Small difference on error messages

2020-02-02 Thread Yehuda Katz
Hi Kazuhiko, This change was in response to CVE-2019-10092. People who aren't upgrading httpd for some reason should still remove the path information from the error pages to prevent XSS. - Y On Thu, Jan 30, 2020 at 4:05 AM kohmoto wrote: > Hi, > > I have learned small changes in httpd would

Re: [users@httpd] Remove Apache 2.4

2019-11-13 Thread Yehuda Katz
Open Command Prompt as administrator and run "httpd -k uninstall" to remove the Windows service, then just delete the folder. On Wed, Nov 13, 2019 at 9:12 AM Mystic Fallout wrote: > Hello, > > I need to remove version 2.4 from my laptop as it is going to my daughter, > factory reset is not a

Re: [users@httpd] RE: Need some advice - thread safe php module

2019-05-23 Thread Yehuda Katz
ssion_register_module > > _php_find_ps_module > > php_get_module_initialized > > php_module_startup > > php_module_shutdown_for_exec > > php_module_shutdown > > php_module_shutdown_wrapper > > php7_module > > /usr/lib64/php-zts/modules > > > > But

Re: [users@httpd] RE: Need some advice - thread safe php module

2019-05-23 Thread Yehuda Katz
Sorry for the delay. As Rainer said, the system-wide packages include zts builds. For example (I have php-73): /usr/lib64/httpd/modules/libphp7-zts.so /usr/bin/zts-php - Y On Thu, May 23, 2019 at 11:19 AM Jeff Cauhape wrote: > Thank you! > > Jeffrey Cauhape – IT Professional III – Linux and

Re: [users@httpd] RE: Need some advice - thread safe php module

2019-05-22 Thread Yehuda Katz
We are happy with Remi's Repo: https://rpms.remirepo.net/wizard/ (Remi is a core PHP team member). You should consider newer versions of PHP (7.1+) as older version are no longer maintained, unless you use the version supplied by RedHat (since they are still updating it). - Y On Wed, May 22,

Re: [users@httpd] Fwd: Apache 2.4.39 update for Ubuntu 14.04

2019-05-15 Thread Yehuda Katz
Ubuntu 14.04 is no longer supported, so the ppa you are using to install Apache is no long building new versions and Canonical is no longer releasing free security updates. If you pay for an extended support subscription, the version of Apache you will get will be maintained by Canonical and will

Re: [users@httpd] Re: CVE-2019-0211/0215/0217

2019-04-07 Thread Yehuda Katz
The distributions like RedHat, Debian, Ubuntu, etc. lock the version of their software packages when they release any specific version of their OS and they are responsible to backport any security or bug fixes. For example, you can see Debian's tracker here:

Re: [users@httpd] Scalability: Single Server with Multiple SSL cert and keys

2019-01-25 Thread Yehuda Katz
You could add a load balancer/proxy that does SSL termination in front of your web server (we use haproxy). If you are overloading your server, you might just need to get another one. - Y Sent from a device with a very small keyboard and hyperactive autocorrect. On Fri, Jan 25, 2019, 9:39 AM

Re: [users@httpd] Reverse proxy stalling forever

2019-01-22 Thread Yehuda Katz
I see that I can access your config.js from my browser, so httpd is serving that vhost. What does localhost resolve to and is prosody listening on that IP address. For example, maybe it is resolving to IPv6. Check with netstat -ln to see what IP prosody is

Re: [users@httpd] Reverse proxy stalling forever

2019-01-22 Thread Yehuda Katz
The configuration you sent doesn't show your server running on port 5280/5281, so we can't compare the configuration and see what might be different. My number one suspect would be your firewall. - Y On Tue, Jan 22, 2019 at 7:40 PM Alexandre Garreau wrote: > Hi, > > I’m trying to make Jitsi

Re: [users@httpd] Apache Fake Story?

2019-01-22 Thread Yehuda Katz
Check the bugzilla thread for all the details: https://bz.apache.org/bugzilla/show_bug.cgi?id=63098 The short version is that HTTPD developers found that the bug can only be reproduced under specific conditions with debugging options turned on, which is not the way people usually run the server

Re: [users@httpd] Port Forwarding Help?

2019-01-21 Thread Yehuda Katz
If your ISP blocks port 80 and port 443, there is no way for you to host the site without a port number. If you can run a server on those ports, HTTPD would listen there and reverse proxy to the internal port the app is running on (5501?). You would not want to forward 5501 through the router

Re: [users@httpd] Doubts in apache-2.4.37

2019-01-14 Thread Yehuda Katz
1. Don't know, should be easy to test. 2. Pipe. 3. I think this depends on which actual proxy module you are using. (There are parameters for controlling the buffer size and when to flush) On Mon, Jan 14, 2019 at 9:51 AM Hemant Chaudhary < hemantdude.chaudh...@gmail.com> wrote: > Hi Team, > >

Re: [users@httpd] Apache 2.4 how to exclude certain GET requests from log using SetEnvIf

2018-11-15 Thread Yehuda Katz
You need to specify an env= (or !=) On the LogFormat line. There is nothing magic about setting dontlog. - Y Sent from a device with a very small keyboard and hyperactive autocorrect. On Thu, Nov 15, 2018, 3:30 AM UniCapitals Hello to Apache Community, > I spent time with Apache docs and

Re: [users@httpd] Question about linking third-party GPL plugin to httpd

2018-10-29 Thread Yehuda Katz
You should definitely talk to your own lawyer but in general, the license applies to distribution, not to your own use. https://www.gnu.org/licenses/gpl-faq.en.html#GPLRequireSourcePostedPublic - Y Sent from a device with a very small keyboard and hyperactive autocorrect. On Mon, Oct 29,

Re: [users@httpd] How to auto-select SSL certificate by hostname

2018-09-12 Thread Yehuda Katz
There is no built-in way to handle this. You would need to list every domain name as a server alias for HTTPD to select the correct certificate. You could look at mod_macro so you don't need to rewrite the same configuration multiple times or a configuration management tool like Puppet/Chef/etc

Re: [users@httpd] Odd session cookies

2018-09-07 Thread Yehuda Katz
It looks like someone trying to guess existing cookies and retrieve session information for existing sessions. Based on the cookie format, I am guessing the sessions are actually controlled by PHP - you can add some code to log IP address and cookie combinations and see if there is a patterns. I

Re: [users@httpd] Renaming default page example.com to Data Portal

2018-08-09 Thread Yehuda Katz
The server doesn't set the title, the application does by sending the html tag. Check with your application developer. - Y On Thu, Aug 9, 2018 at 3:46 PM Collins O. Adoyo wrote: > Dear Users, > > I have a web portal with the title of page showing a default name > example.com. I wish to rename

Re: [users@httpd] How to start perl script using FCGID module

2018-08-09 Thread Yehuda Katz
12:51 PM Ananya Dey wrote: > Thanks for the response Yehuda Katz :) > Also, to run python scripts we need to use the WSGI module. So how do we > implement that with mod_fcgid? > > Regards > Ananya > > On Thu, Aug 9, 2018 at 6:50 PM, Yehuda Katz wrote: > >> The di

Re: [users@httpd] How to start perl script using FCGID module

2018-08-09 Thread Yehuda Katz
The difference between FastCGI and regular CGI is that regular CGI runs the program directly and FastCGI is expected to run continuously and handle requests. If you want to use FastCGI in Perl, you might want to start with a library like PSGI or a framework like Catalyst. - Y Sent from a device

Re: [users@httpd] Help with SSL not working on Ubuntu 14.04

2018-08-08 Thread Yehuda Katz
Hi Travis, I see you mentioned on StackOverflow that your question is resolved (extra virtual hosts in the configuration meant you weren't reaching to correct host). One recommendation based on the config you posted there: Don't use if it is critical to you that your site is available over ssl

Re: [users@httpd] Where to download HTTPD

2018-08-08 Thread Yehuda Katz
Welcome to the mailing list - please don't hijack other people's threads. There is no official binary distribution for HTTPD. I recommend the builds from ApacheLounge. https://www.apachelounge.com/download/win64/ - Y On Wed, Aug 8, 2018 at 8:05 PM Eric Ngo wrote: > Hi > Can someone point me

Re: [users@httpd] How to configure two frontend Apache mod_proxy failover cluster with single backend webserver

2018-07-31 Thread Yehuda Katz
Hi Kamal, You could look into keepalived. This article is a decent (although old) guide: https://backreference.org/2012/04/25/load-balancing-and-ha-for-multiple-applications-with-apache-haproxy-and-keepalived/ (You can ignore all the parts about HAProxy) - Y On Tue, Jul 31, 2018 at 8:22 AM

Re: [users@httpd] access control and Apache load balancing

2018-07-30 Thread Yehuda Katz
You can filter based on the X-Forwarded-For header or use mod_remoteip. mod_remoteip will rewrite the remote address so you can use standard filters. To use X-Forwarded-For, you can do something like this: SetEnvIF X-Forwarded-For "^192\.168\.10\.\d+$" MY_PRIVATE_NETWORK1 SetEnvIF X-Forwarded-For

Re: [users@httpd] SSLCertificateChainFile

2018-07-19 Thread Yehuda Katz
You can use a tool like https://www.ssllabs.com/ssltest/ to check the chain (and other settings) or you can use openssl (openssl s_client -showcerts -connect www.example.com:443). As you found, putting the chain in the certificate file should work. - Y On Thu, Jul 19, 2018 at 2:47 PM wrote: >

Re: [users@httpd] Mutiple IP/Multiple SSL

2018-07-19 Thread Yehuda Katz
You can definitely do this. For each VirtualHost, make sure you have ServerName set to the main web site and ServerAlias set for any additional name that the SSL certificate is good for. When a request comes in, Apache compares the SNI information in the request to the ServerName/Aliases that it

Re: [users@httpd] download

2018-07-12 Thread Yehuda Katz
You can definitely try it on Windows 10, it shouldn't be worse than XP. The major difference since the last time you installed might be that there are no longer Windows binaries on the httpd website. [1] I recommend the builds from ApacheLounge: https://www.apachelounge.com/download/ If you

Re: [users@httpd] .php3 files recognised but .php files not

2018-06-10 Thread Yehuda Katz
I would suggest removing "" from your configuration. It is possible mod_php7 is not actually loaded and you have some other part of your configuration that is setting the handler for .php files. If you remove " wrote: > > > On 10/06/2018 18:53, Michael A. Peters wrote: > > On 06/10/2018 06:04 AM,

Re: [users@httpd] Rotate logs in apache-2.4.29

2018-06-08 Thread Yehuda Katz
Is rotatelogs actually located in /bin/ ? On my REHL 7 system, it is located in /usr/sbin/ On Ubuntu 16.04, it is located in /usr/bin/ - Y On Fri, Jun 8, 2018 at 5:11 AM Hemant Chaudhary < hemantdude.chaudh...@gmail.com> wrote: > Hi All, > > I am trying to use rotatelogs in my webserver, but

Re: [users@httpd] MySQL Java 10 and XQuery

2018-06-07 Thread Yehuda Katz
You have the wrong mailing list. On Thu, Jun 7, 2018 at 1:57 PM Ted Hickox wrote: > Can MySQL work with Java 10 and XQuery? >

Re: [users@httpd] Installation Error in Apache2

2018-05-13 Thread Yehuda Katz
LinkedIn: www.linkedin.com/in/deicool > > "Plant a Tree, Go Green" > > Make In India : http://www.makeinindia.com/home > > On Mon, May 14, 2018 at 12:26 AM, Yehuda Katz <yeh...@ymkatz.net> wrote: > >> Each configuration directive is valid in specific

Re: [users@httpd] Installation Error in Apache2

2018-05-13 Thread Yehuda Katz
Each configuration directive is valid in specific parts of the configuration. Look at "Context" in the manual: https://httpd.apache.org/docs/2.4/mod/directive-dict.html#Context For this specific case, https://httpd.apache.org/docs/2.4/mod/mod_ssl.html#sslrandomseed SSLRandomSeed can only be in

Re: [users@httpd] Newbie - Apache as internet facing proxy for Windows/IIS backend .net app server?

2018-05-10 Thread Yehuda Katz
ith our system, taking > advantage of mod_secs 'continuous passive security assessment' feature, and > anything else that makes sense. > > And thanks for the responses so far! > > *Charles* > > On Mon May 07 2018 13:56:56 GMT-0400 (Eastern Standard Time), Yehuda Katz > <yeh...

Re: [users@httpd] Newbie - Apache as internet facing proxy for Windows/IIS backend .net app server?

2018-05-07 Thread Yehuda Katz
> I don't mind doing the work, I'd just rather not go down a rabbit hole > trying to do something that can/will never work. > > Thanks again, > > *Charles* > > > On Mon May 07 2018 13:37:36 GMT-0400 (Eastern Standard Time), Yehuda Katz > <yeh...@ymkatz.net>

Re: [users@httpd] Newbie - Apache as internet facing proxy for Windows/IIS backend .net app server?

2018-05-07 Thread Yehuda Katz
Certainly. I would start with the Reverse Proxy Guide: https://httpd.apache.org/docs/2.4/howto/reverse_proxy.html Come back here if you have any questions. - Y On Mon, May 7, 2018 at 1:32 PM Charles Marcus wrote: > Hello all, > > I just want to know if this is even

Re: [users@httpd] Re: apachectl -k graceful

2018-05-03 Thread Yehuda Katz
We have a server farm with a load balancer, but we still announce a maintenance window when we do major MediaWiki upgrades and take the site down for five minutes. The other thing we do is use PHP-FPM instead of mod_php. That lets us not worry about HTTPD restarts. - Y On Thu, May 3, 2018 at

Re: [users@httpd] Spurious access denied errors

2018-02-09 Thread Yehuda Katz
At first glance, something in your browser is probably requesting the page /test. Since it doesn't correspond to any of your alias statements, it hits the DocumentRoot which you have denied access to. Is there a corresponding entry in your access log? - Y Sent from a device with a very small

Re: [users@httpd] Probably small problem with SSL config

2018-02-05 Thread Yehuda Katz
I would agree that you should start by turning on logging. Do you get a slightly different error if you use a different browser? Firefox usually gives more detail than Internet Explorer. Better not to use in configuration you write yourself unless you need it for a specific reason. If you use

Re: [users@httpd] SFTP JAIL

2018-01-16 Thread Yehuda Katz
You should try asking in an OpenSSH forum, a forum for your operating system, or ServerFault. This list is for Apache HTTPD support. - Y Sent from a device with a very small keyboard and hyperactive autocorrect. On Jan 16, 2018 8:51 AM, "Rodrigo Cunha" wrote: > Hi

Re: [users@httpd] SSI/website rendering errors

2017-12-14 Thread Yehuda Katz
LiteSpeed is a commercial web server all by itself and has nothing to do with Apache HTTPD. If you are running LiteSpeed, you aren't running HTTPD and we can't do anything to help you. - Y Sent from a device with a very small keyboard and hyperactive autocorrect. On Dec 14, 2017 6:07 PM,

Re: [users@httpd] Apache2 php not responding

2017-12-12 Thread Yehuda Katz
The two log lines you posted show different client IP addresses. Which one of them is a request that you made that you know is legitimate? For the first line: The script not found message could be someone looking for vulnerabilities on the server and just not finding them. As far as the second

Re: [users@httpd] Problems using olingo library

2017-10-04 Thread Yehuda Katz
This list is for Apache HTTPD. Please ask about Olingo issues on an Olingo support list: https://olingo.apache.org/support.html - Y On Wed, Oct 4, 2017 at 11:51 AM, Bogdan Filip wrote: > Hello, > after trying to send an http request using apache olingo(version 4.4.0), i >

Re: [users@httpd] Offtopic: Apache Struts vulnerability: how to detect Struts & will DB encryption help

2017-09-10 Thread Yehuda Katz
Post Apache Struts questions on the Struts mailing list: http://struts.apache.org/mail.html It also happens that you are wrong about where HTTPD runs. Plenty of people have it running perfectly well on Windows. - Y Sent from a device with a very small keyboard and hyperactive autocorrect. On

[users@httpd] Debugging Intermittent 500 Errors

2017-09-05 Thread Yehuda Katz
We have set of three servers running Apache 2.4. (version distributed with RedHat 7) behind a Kemp LoadMaster load balancer. The configuration is managed by Puppet, so all the servers have the same configuration. I put the configuration in a Gist to keep the email simple:

Re: [users@httpd] Disable Autoindex module

2017-08-11 Thread Yehuda Katz
The server might not start because removing the module leaves an invalid configuration somewhere. If you run httpd -t or look in the error log, it should tell you where the problem is. - Y On Fri, Aug 11, 2017 at 12:01 PM, David Wright - NOAA Affiliate < david.e.wri...@noaa.gov> wrote: > Dear

Re: [users@httpd] Unreliable Fedora 26 installation using a kickstart file

2017-08-11 Thread Yehuda Katz
I think you might have the wrong list... Sent from a device with a very small keyboard and hyperactive autocorrect. On Aug 11, 2017 2:56 AM, "fedora" wrote: > Dear listers > I never had such an unreliable installation as the one for fedora 26. I am > a long time user of fedora

Re: [users@httpd] Strange WebDAV behavior on MKCOL for 1 client only

2017-08-08 Thread Yehuda Katz
ux. The HTTP 400 uri mismatch only happens when it connects > to Apache 2.4.4/OpenSSL/1.0.1e on Windows. What would explain the > difference? > > Todd > > On Mon, Aug 7, 2017 at 11:01 PM, Yehuda Katz <yeh...@ymkatz.net> wrote: > >> It looks like a problem wit

Re: [users@httpd] Strange WebDAV behavior on MKCOL for 1 client only

2017-08-07 Thread Yehuda Katz
(58): [client yyy.yyy.yyy.yy:61411] mod_dumpio: dumpio_out > (metadata-EOS): 0 bytes > [Mon Aug 07 14:48:34.518391 2017] [dumpio:trace7] [pid 3880:tid 1132] > mod_dumpio.c(164): [client yyy.yyy.yyy.yy:61411] mod_dumpio: dumpio_out > [Mon Aug 07 14:48:34.518391 2017] [dumpio:trace7] [pid 3880:tid 1132] > mod_dumpio.c(58): [client yyy.yyy.yyy.yy:61411] mod_dumpio: dumpio_out > (metadata-EOR): 0

Re: [users@httpd] Strange WebDAV behavior on MKCOL for 1 client only

2017-08-07 Thread Yehuda Katz
Try mod_dumpio or a packet capture to see what else is different about the request. - Y On Mon, Aug 7, 2017 at 3:53 PM, Todd Blum wrote: > Hello, > > I have Apache mod_dav running on Windows 2012. > > When a webDAV enabled application connects and tries to MKCOL on a >

Re: [users@httpd] WebSockets support in transparent proxy

2017-07-17 Thread Yehuda Katz
What you are describing sounds like a reverse proxy to me. Are you using ProxyPass and did you try the same configuration with the ws or wss protocol (in place of http/https)? Can you post a snippet of your current configuration? - Y Sent from a device with a very small keyboard and hyperactive

RE: [users@httpd] Subdomain of a virtual host ?

2017-07-17 Thread Yehuda Katz
Any affect from the order of the definitions? *Darryl Baker* Sr. System Administrator Distributed Application Platform Services *Northwestern University* darryl.ba...@northwestern.edu (847) 467-6674 *From:* Yehuda Katz [mailto:yeh...@ymkatz.net] *Sent:* July 17, 2017 11:28 AM *To:* users@

Re: [users@httpd] Subdomain of a virtual host ?

2017-07-17 Thread Yehuda Katz
You can create it exactly the same way as any other virtual host. - Y Sent from a device with a very small keyboard and hyperactive autocorrect. On Jul 17, 2017 12:10 PM, "Darryl Philip Baker" < darryl.ba...@northwestern.edu> wrote: > I have a virtual host configured for george.example.com

Re: [users@httpd] Apache (2.4.26) changing permissions on passwd file?

2017-07-11 Thread Yehuda Katz
Did you compile Apache yourself or use a package from somewhere? - Y Sent from a device with a very small keyboard and hyperactive autocorrect. On Jul 11, 2017 11:53 AM, "Kevin Miles" wrote: I wonder if someone can shed some light on this. I've been running Apache

Re: [users@httpd] [ANNOUNCEMENT] Apache HTTP Server 2.4.27 Released

2017-07-11 Thread Yehuda Katz
H2 is threaded and prefork is not, so the performance is poor or it doesn't work at all. There was a discussion about this on the dev list: https://lists.apache.org/thread.html/bae472cadaeeb761b88bb4569cc0b7d87bc2dcb2fbcbf472d895f32e@%3Cdev.httpd.apache.org%3E Sent from a device with a very

Re: [users@httpd] Apache on Mac Sierra 10.12.5

2017-07-02 Thread Yehuda Katz
What does the error log say? What user and group is the httpd process actually running as? (`ps aux` should tell you.) - Y Sent from a device with a very small keyboard and hyperactive autocorrect. On Jul 2, 2017 4:12 PM, "Manal Helal" wrote: > I followed this guide to

Re: [users@httpd] allow deny file and multiple .conf question

2017-06-11 Thread Yehuda Katz
Allow/Deny directives apply to whatever container they are in. A single file can onl.y ever match a single block and the individual blocks do not have any connection to each other. In general, .conf files are loaded alphabetically, but in your example, it shouldn't matter. - Y On Fri, Jun 9,

Re: [users@httpd] Re: SSL virtual Hosts

2017-06-10 Thread Yehuda Katz
HTTPD doesn't care how many files your configuration uses. You can include as many directives in a single file as you want. To quote from [the documentation](https://httpd.apache.org/docs/current/ configuring.html): > In addition, other configuration files may be added using the Include

Re: [users@httpd] SSL virtual Hosts

2017-06-09 Thread Yehuda Katz
Are any errors shown in the httpd logs? Is httpd actually reading the files you create in the conf.d directory? I sometimes check that by putting gibberish in the config file and then running `httpd -t` to test the configuration. What is the actual Include directive in httpd.conf that includes

Re: [users@httpd] paypal/php apache2 integration problem

2017-06-09 Thread Yehuda Katz
You should probably ask this on a Codeigniter help list or forum. This does not appear to be an issue with Apache HTTPD. - Y On Fri, Jun 9, 2017 at 1:54 PM, Paul Claridge wrote: > Hi Team, I have been battling this for several weeks now and am completely > stumped, so

Re: [users@httpd] Does Apache need to delay startup until system time set?

2017-04-20 Thread Yehuda Katz
There are some parts of the HTTP conversation which could be affected by having the wrong time, but HTTPD itself doesn't care. For example, if you are using cookies, caching, those could be affected by the time change (even more specifically, for PHP sessions, when the clock changes, the PHP

Re: [users@httpd] configured HTTP(80) on the standard HTTPS(443) port!

2017-04-04 Thread Yehuda Katz
The first warning is telling you that you are serving regular HTTP traffic on what is usually an HTTPS port. This is because you do not have any SSL configuration on the virtual host on port 443. You need "SSLEngine on" and certificate information at least. You can ignore the second warning about

Re: [users@httpd] What is preferred PHP interface?

2017-03-29 Thread Yehuda Katz
The Apache wiki has a rundown of options: https://wiki.apache.org/httpd/php Plenty of people still use mod_php and it has been updated to work with HTTPD 2.4 and PHP 7. - Y On Wed, Mar 29, 2017 at 8:49 PM, John Iliffe wrote: > Reading several sources there is conflicting

RE: [users@httpd] Hiding Apache version info on the Aix server for Apache.

2017-03-16 Thread Yehuda Katz
I believe the only way to do that is to recompile HTTPD yourself. - Y Sent from a device with a very small keyboard and hyperactive autocorrect. On Mar 16, 2017 6:02 AM, "Chunduru, Krishnachaithanya" < krishnachaithanya.chund...@broadridge.com> wrote: > Hi Konstantin/All, > > I have now

Re: [users@httpd] Hiding Apache version info on the Aix server for Apache.

2017-03-14 Thread Yehuda Katz
rror. When the script is executed, it is giving > message like “starting Apache” later when we are checking the process is > not running. > > > > I can’t even find the /etc/conf-* dir in our Aix server. > > > > *Regards,* > > *Krishna* > > > > *From:* Yehud

Re: [users@httpd] Hiding Apache version info on the Aix server for Apache.

2017-03-14 Thread Yehuda Katz
/etc/conf-available/security.conf is part of the Debian/Ubuntu packaged layout of HTTPD, not standard. Do you get an error when you try to start up the server? - Y On Tue, Mar 14, 2017 at 9:08 AM, Chunduru, Krishnachaithanya < krishnachaithanya.chund...@broadridge.com> wrote: > Hi, > > > > I

Re: [users@httpd] URG:DocumentRoot relate query on WIndows

2017-03-10 Thread Yehuda Katz
You can set the DocumentRoot to "C:/" (note the forward slash instead of the backslash). You can technically set it to just "/" also if you want the drive where HTTPD is located. When running HTTPD on Windows, it is good practice to use forward slashes even though backslashes work in some places.

Re: [users@httpd] Why ExpiresByType is ignored when has SetHandler application/x-httpd-php ?

2017-03-02 Thread Yehuda Katz
> *Subject:* Re: [users@httpd] Why ExpiresByType is ignored when has > SetHandler application/x-httpd-php ? > *Date:* trešdiena, 2016. gada 28. decembris 13:20:25 > *From:* Eric Covener <cove...@gmail.com> <cove...@gmail.com> > *To:* <users@httpd.apache.org> <use

Re: [users@httpd] Question about make openssl files

2017-02-23 Thread Yehuda Katz
Hi Rodrigo, This mailing list is for Apache HTTPD. If you have questions about OpenSSL, you should try an OpenSSL mailing list (https://www.openssl.org/ community/mailinglists.html) or documentation (https://www.openssl.org/docs/ manpages.html). To point you in the right direction though: you

Re: [users@httpd] apache run status: how to tell as non-root user (on *nix)?

2017-02-21 Thread Yehuda Katz
That grep would not work on Debian-style packages because they show apache2 as the executable but it might be the best way on other systems. - Y Sent from a device with a very small keyboard and hyperactive autocorrect. On Feb 21, 2017 8:54 AM, "Tom Browder" wrote: > I

Re: [users@httpd] Core code in apache

2017-02-20 Thread Yehuda Katz
How do you define the core vs. modules? If you look at the documentation (http://httpd.apache.org/docs/2.4/mod/), it describes what is included in the core and what is a module. There are the core, mpms and other modules. Also maybe the LAYOUT file will help you. - Y On Mon, Feb 20, 2017 at 6:48

  1   2   3   4   5   >