then expand your regex in the setenvifnocase
the thing in the double quotes is the regex
ok i got another plan... anyway better for future
problems....
nope, just if you don't know what's left out and what's not, I
have no idea what's suddenly happening.. if You had said http://svn/ everything would've been perfectly
fine
my problem is, that I don't get why the redirect is
happening.
as i said...
if you access http://host/dir it 301
to http://host/dir/
ex. SetEnvIfNoCase blah_blah_dn "(cn=blah, email=blah|cn=foo,
email=foo)" valid_user=1 ... blah blah blah
and the svn client is stupid, he drops the last / i gave him, no
idea why
and then drops on the 301
totally nuts
I owe you another bear
you might want to anchor that regex... "^(... | ...)$"
...
err, Beer
over the last year I think that's a 6pack now
eh?
hmmmmmmmm
is your repository user windows? so tortoise?
let's try this:
oook...
AcceptPathINfo
AcceptPathINfo is http://httpd.apache.org/docs/2.2/mod/core.html#acceptpathinfo
aehm....
On or Off?
I can checkout svn co https://svn.brainsware.org/ocb
but I cannot check out like this: http://svn.brainsware.org/ocb/
[there's a redirect to https]
on
no result
on both
hm?
Off and On brings the same result
the result we dont want
very funny that you can do this....
i just thought about that it works in https but not http
would be funny
Yes.. it's hardly bearable how much I rule...
lol
ok i do now the other setup.....
location block for any svn with macro
i anyway need dedicated user rights....
and i guess i go home now, too much work makes getty
evil
hrm... what would really be cool is if you could just do
SSLVerifyClient require Subject="CN=foo, email=foo, ..."
something like that...
yeah
was hoping on such but your suggestions should get really damn
close
patches welcome...
Fix it yourself, loser!
:P
can anyone point me to documentation about running apache
from an NFS share?
what documentation?
The documentation is your friend. Read the documentation. It
will make you happy. (http://httpd.apache.org/docs/)
or http://httpd.apache.org/docs-2.0/
any documentation
apache doesn't care if it's on an nfs share or not
it's just files in a file system
as in, does it work, is there issues? things to consider?
thats not the case with everything
wouldn't it be the same as running it on the local
filesystem? depending on your perms and stuff of course...
nfs
lock files and whatnot can be an issue
nfs is sucks sweaty monkey balls or see EnableSendfile and
EnableMMAP
EnableSendfile
enablesendfile
a way to disable sendfile() for when you serve off a NFS/SMB
share. More info at http://httpd.apache.org/docs/2.0/mod/core.html#enablesendfile.
Works badly with some peoples windows systems: when in doubt,
disable it. Broken with IPv6 on Linux in most configurations.
a way to disable sendfile() for when you serve off a NFS/SMB share.
More info at a href="http://httpd.apache.org/docs/2.0/mod/core.html#enablesendfile"http://httpd.apache.org/docs/2.0/mod/core.html#enablesendfile/a.
Works badly with some peoples windows systems: when in doubt,
disable it. Broken with IPv6 on Linux in most
configurations.
enablemmap
enablemmap is http://httpd.apache.org/docs-2.0/mod/core.html#enablemmap
those are the only issues i know of... and that's serving
content on nfs shares...
serving content and config files and logs is what i would
want to do
although i suppose logs wont work
grrr
is there a possibility to get all files from a directory that i
cannot acces by http://whatever/dir/ because of error
403, but i am able to acces http://whatever/dir/special.file
it would be a little bit tricky to try http://whatever/dir/[a-z]{0-9}.suffix
files
files is http://httpd.apache.org/docs-2.2/mod/core.html#files
havocologe what are you asking?
i am trying to find a method to get files out of a directory
that is not allowing to be indexed
what do you mean "get files out"
for dirname/ i get an error 403 but for dirname/filename i
get no error but can acces the file
fajita directoryindex?
directoryindex is http://httpd.apache.org/docs/2.0/mod/mod_dir.html#directoryindex
or http://httpd.apache.org/docs/mod/mod_dir.html#directoryindex
my guess it's an Options Indexes being off...
and...
step one
whatever the problem, step one is to look in the error log
(and any other logs that may apply, such as suexec, mod_rewrite, or
mod_security).
considering there's 2 types of 403 causes...
i am not on the server side. how to set my server hosting up to
work like i described is a simple thing. i hoped there would be
something to work arround as client
there isn't
deliberately, in fact.
well you could just allow indexes to be shown...
if you choose not to, that implies you'd want clients not to
be able to list files
normaly i could download every file with wget -r
http:/whatever/ but this time that does not work
wired..
that requires that the file listing be available
if the admin has disabled file indexing, it means they don't
want you to be able to do that.
take it up with the admin
in that case...
mh. so i will have to get wget up to try every possible file
name ..
long but should work
that sounds like brute force
plus you couldn't get any newly created files there
either...
*shrugs*
trying every possible filename with about 8 letters.
it is only a dir with *.js files
so that should be possible
ah... brute force dictionary attack maybe?
long... painful... and still no guarantee you get every file in
there...
*shrugs*
hi, how do i rewrite a single url?
redirect
redirect is http://httpd.apache.org/docs-2.0/mod/mod_alias.html#redirect
or http://httpd.apache.org/docs/mod/mod_alias.html#redirect
or see 'Redirect Context'
does apache support virtual ssl domains each with its own
ssl certificates
hosting key?
(split into 3 lines) RewriteEngine on RewriteCond
%{REMOTE_ADDR} (.)* RewriteRule ^/split\.html$ /allowed.html [R] --
am I doing anything wrong (note the .* is for testing)
I am still able to open up split, when I should be forwarded to
allowed
I have apache set up with several domains and each has its
own SSLCertificateFile and SSLCertificateKeyFile directives but it
still serves up the same ssl key for all domains
ssl vhosts
When using SSL, each virtual host must have either its own IP
address or its own port. Or both. or for details see http://httpd.apache.org/docs-2.0/ssl/ssl_faq.html#vhosts2
or http://www.onlamp.com/pub/a/apache/2005/02/17/apacheckbk.html
or see SNI or consider wildcard certificates or http://wiki.cacert.org/wiki/VhostTaskForce
or see ip based vhosts
^^
this causes weird prompts in ie and firefox
how can I serve a /webdav directory to public (Allow from all)
but allow dav access to the same directory only for authenticated
users?
not wierd... expected prompts
limitexcept
limitexcept is http://httpd.apache.org/docs/2.2/mod/core.html#limitexcept
or http://httpd.apache.org/docs/mod/core.html#limitexcept
did you include RewriteEngine On ?
^^
yeah, I did
cool - thanks!
or i guess...
limit
limit is http://httpd.apache.org/docs/2.2/mod/core.html#limit
This can't be right. it seems absurd. What is the purpose of
having virtual domains if you can't handle them
separately
no... i think limitexcept is what you want...
it's the ssl protocol
and it is right
problem is the host information happens to be encrypted...
HI
privet, Apollo78.
there are some fixes in apache2.2 which will allow the use of
tls, but that's subject to browser compatibility...
no sorry
but ssl, doesn't deal with this... never has...
arggggh
and there is ip
address host based hosting which is how right now you'd do
multiple hosts with different certs...
virtual domains are kind of a hack, anyway
i tried to install ocsinventory and after installation i am
trying to restart apache and getting the following error
synty
this is so irritating
configuration or is it sufficient to put it only in one
vhost?
should be sufficient in the http vhost
life's like that sometimes
well tls is the way to go for that...
but older browsers don't support tls...
with some caveats
so basically there is no way to do name-based ssl certificates
hosting virtual hosts?
and i'm not so sure that the tls actually works in mod_ssl...
.
it means the request is not encrypted
you can do it if they all share a cert
well there is... use different ports
:P
syntax error on line 16 of
/etc/apache2/conf.d/ocsinventory.conf invalid command perlsetenv!
Any idea, please?
or wild card certs...
please link to wild card cert docs
that works fine if all your domain host names are
{something}.you.com
yeah
that's the only caveat
yep, but it works fine. we do that.
what if my domains are all different?
you're SOL
then you need separate ip numbers
hmmmmm
if you think about it, it makes sense
or I tell my customers that is just the way apache is
the ip connection doesn't know what domain name you
used.
they all have to accept the error
it's not apache... it's the ssl protocol
it's not apache... it's the ssl host protocol
in order to get that into the request, you have to send it as
part of the request
how come I have never seen this with IIS
however, ssl provides an encrypted connection
you need the cert to construct the connection
but the domain name is part of the request, so it's not available
when you're constructing a connection
are there any plans to fix this with newer versions of
ssl?
not in ssl, that i'm aware of... again, tls is supposed to do
this
there's a proposal to use STARTTLS in apache
that allows the initial part of the request to be sent
unencrypted and then upgraded to an encrypted
connection
do all the major browsers support tls???
yeah, smtp allows that, and ftp
yes
but it's still a proposal
hmmm
anyone know how long I have to wait?
so does ldap, for that matter
well, newer versions of the major browsers
yup
new features
new features is http://httpd.apache.org/docs-2.0/new_features_2_0.html
or http://www.onlamp.com/pub/a/apache/2004/06/17/apacheckbk.html
or for ssl http://httpd.apache.org/docs-2.0/ssl/ssl_compat.html
http://httpd.apache.org/docs/2.2/new_features_2_0.html
http://httpd.apache.org/docs/2.2/new_features_2_2.html
but the difference is that http is a stateless protocol
mod_ssl
mod_ssl is http://httpd.apache.org/docs-2.0/ssl/
or http://www.modssl.org/ (for
1.3) or http://httpd.apache.org/docs-2.0/mod/mod_ssl.html
or http://cvs.apache.org/~mads/ac2004/MO18mod_ssl.pdf
or see mod_gnutls for an alternative
Added a support for RFC 2817, which allows connections to
upgrade from clear text to TLS encryption.
that's from the new features for 2.2
all those other ones involve a persistent verified
connection
anyway, you can try it with apache 2.2
i actually haven't played with it correctly... i'll need to do
that...
but i can't seem to test it with openssl s_client....
but using separate ip numbers and a connection encrypted from
the start is probably more secure
although, according to the browser... TLS v1.0 128 bit ARC4
(1024 bit RSA/SHA)
*shrugs*
i don't think s_client handles rfc 2817
i could be wrong
i dunno... there's the --tls1 flag
seems odd to have that flag if it didn't support it...
i could be mistaken on it's exact purpose though...
rfc2817 is how you get http to switch to tls in the middle of a
connection
hrm...
--tls1 just uses tls 1.0 instead of ssl 3.0 to make a
connection
rfc2817 assumes you start with a cleartext connection, then send a
StartTls header, or some such,
and then upgrade the connection.
so doing something like openssl s_client -connect blah.com:80
--tls1 still wouldn't work... hrm...
i don't remember all the details
okey dokey then...
this has the potential for leaking secure information in the
initial request
so i've never used it.
maybe i was just being too paranoid.
heh
never a bad thing really
anyway, we can use a wildcard cert, so we do.
although, it depends on what's being communicated...
if the only thing sent is the host info to use, i don't see it
being that insecure of a protocol to use...
the file ownership on /var/www is owner: www-data group:
www-data. But when using a ftpserver to load files directly into my
/var/www the ftp server needs read/write permissions, should I just
add ftpuser to the www-data group?
no
you shouldn't even have done that to your docroot
or chown the whole /var/www directory to owner: ftpuser group:
ftpgroup?
you should've just changed the owner of the directory where the
uploads were to take place
and you need mod_umask
mod_umask
mod_umask is http://www.outoforder.cc/projects/apache/mod_umask/
and is loaded by LoadModule umask_module
modules/mod_umask.so
ok to recap if for example i have /var/www/somewebsite/ i
chown the somewebsite folder?
i personally chgrp it
but that's just me...
chown should work fine without having to use mod_umask...
oh wait... you were talking about ftp to that dir, huh....
ok will give this a go... yes was talking about ftp into
/var/www/somewebsite...
but that's some client ftping directly to the dir, right?
or are you using something like mod_ftp?
yes some client ftping into directory... but I have setup
proftp to use mysql so the users should be ftpuser
ftpgroup...
mod_ftp would require some kind of chown (if it supported
write), regular ftp would require probably some group change on the
dir as well as adding the user to that group... unless you wanted
to add everyone to group www-data
then i would chgrp the dir to ftpgroup
what info is at risk in your assessment? Is it really any
more info than wireshark would provide? As long as data
transmission is protected, source and destination don't seem that
valuable
and leave ownership to www-data?
only if you wanted apache to write to that dir
you might also want to set the group sticky bit on that dir so
all new files created will be owned by ftpgroup
doesn't apache need write access to use php?
hi folks,
hi folks, is there a good apache gui
i have a problem with apache2 and webdav
heres my site-config:
http://apache.pastebin.ca/562351
only if your php requires writing there...
ok.
is your ftp client some web based thing?
thanks all who replied to my ssl/tls question
the webdav dir is writeable from www-data and files are
displayed correctly on client side
problem is lots of ways to go with that ftp thing... depends
on what you're using...
but I'can't create and delete files with an logged in user,
via webdav
what am I doing wrong?
im not sure if i should ask this question here... Here is the
problem: my cgi scripts are not executed..(rather im able to read
it) but my php scripts work fine
step one
whatever the problem, step one is to look in the error log
(and any other logs that may apply, such as suexec, mod_rewrite, or
mod_security).
i have mod_perl installed
so if /var/www is owned by www-data group www-data but
somewebsite directory is owned by ftpuser:ftpgroup apache will
still serv?
define serve... you mean read access? you'd have to set
read/exec access to others for apache to serve
and having /var/www owned by the apache user is just plain
bad
think i got it...
will go and tinker ...
Thx for info, ditto fajita...
so this isnt a apche problem?
s/apche/apache/
i don't use mod_perl, so i couldn't tell you... apparently no
one else here seems to either...
http://apache.pastebin.ca/562370
o.O
i guess i should try at #perl
http://www.google.com/search?hl=en&client=opera&rls=en&hs=3wB&q=apache+Could+not+open+property+database.&btnG=Search
1st hit says check the owner of the dav lock file...
and i guess change the owner to the user apache is running
as...
ok, that would be www-data probably
oh and if you're using selinux, try disabling it
temporarily...
meandtheshell, nope it's a fresh debian installation, just can't
find the lockfile
/var somewhere??? not sure...
but my only experience with dav is svn...
are there any web stats programs that do ip-geolocation stuff
automatically and compile city/state/country stats?
maybe look in /var/www?
yep
i looked there but there's only the apache2-default site
dir
hrm... maybe /var/apache2 or /var/log/apache2?
or heck, maybe in /etc/apache2?
or just use locate... :P
well, updatedb first...
i removed dir /changed owner of the empty /var/cache/apache2
sorry /var/lock/apache2
hmm, restarted and still the same message
Could not open property database.
so the file must be missing
well, /var/lock/apache2 i would imagine would only have apache's
running pid...
do you have mod_dav and mod_dav_fs enabled?
ah, you have to specify the davlock
ex. DavLockDB /usr/local/apache2/var/DavLock
The directory containing the lock database file must be writable
by the User and Group under which Apache is running.
yep, found out in that moment, that pointet to somewhere...
...wrong
http://httpd.apache.org/docs/2.2/mod/mod_dav.html
megaspaz, thx :-)
it's a bit slow but...
it's working :-)
good job
motd
I could calculate your chance of survival, but you won't like
it...
0 - this means that this apache2 will never accept requests
from other machines than 127.0.0.1,
help! i can't seem to have more than 1 proxy on a domain in
apache
Whoops! That's not the name of a module.
fasta, correct
great, thanks
elaborate please
ok, thanks...just a sec
I got ProxyPass and ProxyPassReverse lines that work fine for
/financial/ extension...when I tried to add another 2 lines for
/wiki/ it didn't take
could you put what you have up for us to see please?
apc
Try using http://apache.pastebin.ca - It's a
good pastebin, and is even set up to highlight Apache
'stuff'.
http://apache.pastebin.ca/562465
hello world
to make apache only listen for local network connections is it
just "Listen 192.168.0.0/24:80"?
the /financial/ works but not /wiki/
Eclipse75, I wouldn't use a networkaddress
how the hell could you make apache on one machine listen on
port 80 from another machine?
well im just setting up a http remote managed local file
server
what's it doing?
i get server not found when i try to go to /wiki
.....however
eh yeah i see what youre talking about now
on server i can do "lynx localhost:8200" and get it
did you restart apache after the change?
im just trying to figure out how to only allow local
addresses to connect
also...if i go to /wiki/ --- with 2nd slash it works
yes
well yeah...the way you wrote the rule you need the /
you use access controls like allow, deny, order
order
order is http://httpd.apache.org/docs-2.0/mod/mod_access.html#order
or http://httpd.apache.org/docs/mod/mod_access.html#order
also see: http://httpd.apache.org/docs/2.2/mod/mod_authz_host.html#order
allow
allow is http://httpd.apache.org/docs-2.0/mod/mod_access.html#allow
or http://httpd.apache.org/docs/mod/mod_access.html#allow
http://httpd.apache.org/docs/2.2/mod/mod_authz_host.html
deny
deny is http://httpd.apache.org/docs-2.0/mod/mod_access.html#deny
or http://httpd.apache.org/docs/mod/mod_access.html#deny
or http://httpd.apache.org/docs/2.2/mod/mod_authz_host.html
but why /financial doesn't need 2nd slash
?
alrighty, thank you
this is all port 80 right? so we can disregard the 443 stuff
you put up
correct
does /wiki give a 403?
Not Found
The requested URL /wiki was not found on this server.
i don't see the numbers 403
I think you are hitting your default vhost and not being
proxypassed
for the /financial request, does it actually appear in the logs
of your server listeing on port 8100?
i assume so..let me check
what is a netstat or related command to get listening
ports?
:o
netstat -nltp
netstat
netstat prints network connections, routing tables, interface
statistics, masquerade connections, and multicast memberships. Use
netstat -an grep -w 80 to check if port 80 is in use. (On linux,
you can use netstat -pan to see which program uses the port.) (For
Windows use -ano to show the state, PID, and connection in IP not
name format.)
yes 8100
weird that 8100 and /financial work fine
yu see that request in its logs?
is /var/www/family the same docroot on the server listeing on
8100 as the server listening on 80?
i think you may have found the bug
even though i don't use /var/www/family/financial i had to create
it....
i forgot to create /var/www/family/wiki
arreyder:
well, we still have a problem
inthat you arent really doing what you think you are doing
oh?
you are just serving them with apache on port 80, and not
really proxypassing
at least when going without the / on the end
wait.....if /financial is a web app on 8100 then apache must
be proxying to 8100 right?
because you are sharing the documentroot it works
nah, /financial isnotproxied, /financial/ is
yes.../financial gets converted to /financial/home
umm, no I donna thinka so
unless there is moreto your config than you gave me
ever heard of TurboGears? it is like rails
i got turbogears apps on /financial and /wiki
each uses a different port
No, but I am intimately familiar with ProxyPass
not that i created /var/www/family/wiki for some reason apache
successfully hands off /wiki to localhost:8200
now*
is there some way to debug steps apache takes?
ok, but it is not happening for the reasons that you think it
is. at least not if those rules are all that is really going
on
in this case the access_log would be enough
but you can turn Loglevel Debug on in that vhost and waht
mod_proxy handle or NOT handle the request
I submit that it is not handling /wiki or /financial but you may
have a default page in those locations that is
redirecting/rewriting to /wiki/ /financial/ and making it
work
ok..i sent you a private message with URL to real virtual hosts
using Now
currently using zoneedit for registrars DNS to vhosts on my
server, though I am running webmin/bind/virtualmin and everything
works fine... BUT cant I just bypass zoneedit and point to my box
instead?
ok, giving it a look.
my /var/ww/family/* directories are empty :/
testing a theory, one minute
ok..thanks
could you paste up the tail of your access log please for the
apache on port 80?
while you are doing that, I need to afk a sec, brb
nothing shows up in /var/log/apache2/access.log
does anyone have any experience with grinder
or know of a better one to use?
not possible unless you have logging off
does anyone have any experience with benchmarking server
tools?
siege, jmeter, ab
siege
siege is HTTP regression testing and benchmarking utility that
can be found at http://www.joedog.org/JoeDog/Siege
jmeter
jmeter is http://jakarta.apache.org/jmeter/
or http://javaboutique.internet.com/tutorials/JMeter/
ab
apachebench
apachebench is http://httpd.apache.org/docs/2.2/programs/ab.html
or better known as 'ab' or comes with apache or not very good to
test with according to chipig.
apachebench is a href="http://httpd.apache.org/docs/2.2/programs/ab.html"http://httpd.apache.org/docs/2.2/programs/ab.html/a
or better known as 'ab' or comes with apache or not very good to
test with according to chipig.
thanks
ab's not enough characters for a factoid...
where do you toggle logging on/off?
logging
logging is http://httpd.apache.org/docs/logs.html
or http://httpd.apache.org/docs-2.0/logs.html
but whats the best?
I like jmeter for testing applications, but building the scripts
can be a bit tenuous
httperf
httperf is http://www.hpl.hp.com/research/linux/httperf/
that one's nice. gives stddev numbers too so you can tell
spurious results
hmm wrong word, bit difficult
cool, new toy to try
I tried running grinder but its confusing and the documentation
sucks
not free but cheap enough, and goes in to good detail. somewhat
rails specific but not so much that it's not generally
applicable
bah
humbug
noodl and his rails stuff
:P
not free not for me
for some reason I am only able to send two concurrent requests
to my apache server from any given client
is there a way to increase that?
any more than two wait for one of the active two to complete before
making progress
i've seen total request limits, but not per-client
check your client too
i've created a .htaccess but it doesn't seem to be doing a thing
(it's just listing the directory contents of the folder .htaccess
is in) - the .htaccess looks like this: http://dpaste.com/12108/ -
thansk
my client is firefox
at least at this point
firfox has a limit
hmm
isn't it like 8 though...
check about:config for the exact ones
ooo
network.http.max-persistent-connections-per-server
persistent-connections...
just plain connections per is 8
that one looks like two
i wonder what the threshold is for "persistant"
thanks for the tip
no problem
btw, I am sure there are apache modules to limit this
Im trying to run jmeter on mac os x
what do i need to dl to get it to work?
jpk?
I dont know what this means
-bash: PK: command not found
block are totally ignored?
yes
thanks
Perhaps a very simple question, but how do forward the
visitors of a certain site another site?
you shouldn't need anything extra. jmeter works just fone for
me on the mac.. just double click the .jar file
*to another site
fajita redirect?
redirect is http://httpd.apache.org/docs-2.0/mod/mod_alias.html#redirect
or http://httpd.apache.org/docs/mod/mod_alias.html#redirect
or see 'Redirect Context'
noodl, ok, i'll check thanks
Directory /var/www/darcs
Options +ExecCGI +FollowSymLinks
Order Allow,Deny
Deny from All
Allow from 127.0.0.1
Order Allow,Deny is The Allow directives are evaluated before
the Deny directives. Access is denied by default. Any client which
does not match an Allow directive or does match a Deny directive
will be denied access to the server
Deny from All is Denies access to the resource. See also Order,
Allow, and Satisfy.
/Directory
It appears symlinks are _not_ being followed by a cgi script
that uses this directory.
don't paste
What can be the possible reasons for this?
5 lines.
6
what error are you getting? 404?
It's darcs.cgi and I get that the repository contains zero
patches.
It does show the name of the symbolic link to the repo.
I get no errors.
uh
repository?
patches?
im lost
i thought you're trying to execute a CGI
the cgi file gets executed already
it just seems that it doesn't cross the symbolic link
the CGI is a symlink?
if it gets executed then it must be following the symlink
right?
no, the CGI is not a symlink
the script itself is trying to access a symlink but
can't?
the file in the directory /var/www/darcs is
that's what I think is happening.
that has nothing to do with apache config...
that should have nothing to do with the webserver
it could be a permissions problem
what happens if you run your script on the command line?
I am not sure how to execute that script. Just doing
./darcs.cgi does execute the script, but doesn't give HTML, like
when run via Apache.
This is the script: http://pastebin.ca/562706
eh
is there any special way in which Apache calls the cgi
script?
I just do 127.0.0.1/cgi-bin/darcs.cgi in my browser.
well there's a lot of environment variables that will be
missing/different when run from the command line
so if the script is designed to know whether its being executed
from a browser or not it might behave different
well, that's happening.
but if it gives no output at all then it sounds like
something's wrong with it
it does give output
oh
did you paste the output to the pastebin?
make a new pastebin with the command line output
bad script_name "" at ./darcs.cgi line 311.
that's what I get from the CLI.
ehhhh
i guess that's what it's designed to do
heh
it wants to be run from a browser
what's the output when run from a browser?
anyone know how to link to an Intranet path from the web? is it
file://////Server/Folder/
?
when run from a browser I get a listing containing one
element of the project I am interested in.
when I click that, the project is empty.
i.e. contains zero patches.
Darcs is a SCM
i don't know how to fix that since it's not an apache
problem
yes, I understand.
I think it's just some piece of crappy software.
(the script)
if it takes me longer than 5 minutes to get working, obviously it's
not polished.
could you give an example? I don't understand what you want
to do
he wants to link to a file on his computer
local file
i think
at any rate, it's not an apache question :P
i'm building an intranet document site and I want to include
some links to shares and documents on the network
the link should be whatever appears to work in your browser
if file://blah/blah works then
that's the link
perfecto
the answer is whatever the answer is
is your last name Bush?
uhh
wha?
nm that was retarded
do you know how to bring up the file in a browser?
try the link in a browser and see if it works
so in other words, when I find out what the right address is...
thats the address
open file...
what OS/browser?
will probably give you a directory browser and then show you the
url and the file
needs to work in windows
right click on the file, open with, internet explorer
then look in the browser and see what URL appears
but for folders
uh
i guess that part would be easy enough to work out with the
quick file test...
thats where it gets tricky
there's no difference
ok...
you just leave out the /filename part at the end and you have a
folder
I want to open ctemp
file:///c:/temp/ is the URL I
use
yup
right
with a sharename iirc
so that's what your link should be like
but what if its an intranet server path?
such as \\server\path
then it's file://server/path/
have you tried it?
rotate the \ clockwise 60 degrees and put file: on the
front
maybe if you try it you'll find that it works :P
and if you want to open \\SERVER\folder\ you go to file://///SERVER/folder/
where did all those /'s come from?
file:/// + //SERVER/folder/
i don't know
ask bill gates
yaha wtf it didn't work before
maybe I has an extra /
you did in your initial example
just keep adding or removing /'s until it works
the end
the end is only the beginning
lol, best advice
/// is for any folder and since \\ is for server you add //
?
perfect
peeeeeerrrrrrfect. With Cheese on Top
jeeze
don't try to make sense of it
that doesn't seem right to me. but then windows often
doesn't
yep
i'd go with jesse's strategy. start with a couple of slashes
and then add more until it works
you'll probably find \\SERVER\folder\ works fine in IE
though
i'd be surprised if you got to 5
although it will break FF
smells like a contest
file:/// is "this server" btw
right
the leading // is absolute, and the server is defaulted
how does one forward all requests to http://mysite.com to http://www.mysite.com
I've tried different combinations of server alias and name but with
no effect
i would suggest a rewrite rule that looks at the
HTTP_HOST
could you point me to an example of that ?
RewriteCond %{HTTP_HOST} ^mysite.com$
RewriteRule ^.*$ http://www.mysite.com/$1
I see - thanks mercutio
but i'm not an expert
the rule follows the condition
if ...RewriteCond... then ...RewriteRule... (if you see what i
mean)
I do
hello, what's a 'specific error 1' when i try to netstart
apache?
where do you see it
in the cmd windows at starts
i'm on windows, i'm using wampserver, and since 1hour i can't
start apache
on localhost
3 2007] [notice] Parent: Child process exited
and no log error registered since there
oh
uhh
i really dunno if i done something wrong in the httpd.conf or
php.ini
or if it's a bad save file encoding via notepad, for
instance
windows doesn't give ya much help
eh i've no time and no money to switch to linux
linux is free
well
it can be free
i've a win modem
i c
and i've ubuntu here already
i just wanna work on localhost as all every normal people
1 2007] [notice] Parent: Received shutdown signal -- Shutting down
the
3 2007] [notice] Child 2560: All worker threads have
ok sto
stop
HAMMERTIME!
that's all i've in the log
before 21.40 it worked
maybe it's better if i google a bit instead bother yourself
thanks the same
true
does apache 2 still use a pooled-process architecture?
i think so
mpm
mpm is http://httpd.apache.org/docs/2.2/mpm.html
or Multi-Processing Modules or sexyhandyhandy
^
sexyhandyhandy?
uh yeah
i guess
i donut geddit.
well years ago they used to be sexy
c.f. not having them
maybe they grew hands too?
guys, one question. What does apache don't who letter with
acents? like: á ?
sorry Toerkeium i can't parse your question
I mean, I just uploaded a web site which contains á
characters, and ther arent shown like that
AddDefaultCharset
AddDefaultCharset is http://httpd.apache.org/docs/2.2/mod/core.html#adddefaultcharset
thank you!
k
because I have á and ñ, if I add UTF8 it shows
'á', but not 'ñ', and vice versa
I guess I have to add two then
no, that can't work
only one?
only one is perl and its enabled
http can only specify one charset= per response, and besides,
there's no way to indicate which parts of the response are in which
charset
no only one is reply
OK, noodl.
humm.. and how can I troubleshoot this?
any idea what can be done?
if your html file uses two distinct charsets, it's broken.
not much apache can do about that.
actually, what i was wondering
I don't think it uses 2 distinct charsets..
is whether apache server runs as a single process
I am probably missing the right one
or pre-forks
like 1.3 did
see the mpm docs. generally is keeps a process pool, which can
be threaded if you run worker
what's the most common charset used?
k, i didn't read far enough into it, ty
I guess that should be the right one
very much
the default is 8859-1 but that's pretty useless. go with utf8
and fix your content to use it ")
but I think UTF8 doesn't support the ñ character
that's doubtful
when I force apache to use UTF8 the ñ character is not
shown
then your document isn't encoded with utf-8
probably
probably is the same as 'definitely not' when dealing with
important or critical applications - if you're not sure, don't let
'probably' suffice
find a text editor that doesn't lie to you
probably
probably is the same as 'definitely not' when dealing with
important or critical applications - if you're not sure, don't let
'probably' suffice
lol
it's true, definitely not using UTF8 :P)
I mean, I have just downloaded this pages from a web server from
the usa, where á and ñ characters are not default for
that language, so they have to have a charset which can be used for
this, some spanish charset I guess
ISO-8859-8 ?
iso-8859-15 perhaps. anyway it's pointless guessing.. one
strategy is to funge your browser's encoding menu 'till it looks
right and then stick with that
if you have documents with mutliple character sets, use mod_mime
to send the correct header based on a file name
extension
Do I need to do apache2ctl restart to reread the server
configuration always? Isn't there some binding to the Linux kernel
to some fils system notification library?
s/fils/file
that'd be silly. saving a broken config would kill your
server
but restart is wrong too, use graceful
"Kill"?
it would simply not work
that doesn't kill existing connections
In a production setup I can imagine that.
ok, is there some mode s.t. it is in "develop" setup?
nope. remember that apache is maintained by C programmers who
have to recompile to check ever change they make. at a guess,
issuing a USR2 for them isn't a big deal :p
*every
definition but I get the same error.
heh, yes, what horror would it be to develop it.
I modified an Emacs IRC client while it was running.
Options context
server config, virtual host, directory, .htaccess (.htaccess
requires AllowOverride Options in the httpd config)
just like you can do in SmallTalk or other 30 year old
tech.
WAAA! lisp zealot!
block
hmm, not really.
C, the language, is good in some areas.
It's just that the notion of "interactive development" doesn't
exist in the C world.
it has nothing to do with the language in which apache is
written
here's the cookie.. is emacs threaded in such a way that
saving config files/scripts could change the behaviour of running
requests? that's why i think httpd avoids checking httpd.conf for
changes
it's for efficiency
that's ridiculous
getting the kernel to notify you takes constant time.
O(1)
did that.
restart apache.
not really.. there's a bunch of stuff that can be done in
advance with apache modules that you wouldn't want to do
per-request
if you have a kernel which can notify on file changes and you
know all the relevant files,
AllowOverride All /Directory
then script a graceful restart
did that
if all else fails, pastebin the relevant section of your
config.
not all os's have that facility anyway, and apache is
xplat.
sample url
Could you please give us a URL at which the behavior is
demonstrated. This would help us troubleshoot the
problem.
however, the efficiency i was referring to was effectively
compiling parts of the config file into runtime structures
ok, google just won't give me the right answer
rereading the config file is relatively expensive
how can I do a simple redirect to make http://webmail.domain.com go to
http://mail.domain.com/webmail
?
that can also work differently
redirect
redirect is http://httpd.apache.org/docs-2.0/mod/mod_alias.html#redirect
or http://httpd.apache.org/docs/mod/mod_alias.html#redirect
or see 'Redirect Context'
^^
sure, there are alternatives
change your nick
thanks fasta
fasta--
+ thumbs
?
but the one apache chose is optimized for the case where the
webserver runs for a long time without config changes, and uses the
minimum resources on each request
oh, never mind
your tab completion stinks
not my fauls
http://apache.pastebin.ca/562995
er fault
I am sure that Apache also isn't optimal for that purpose.
is usually sufficient.
it may not be but it gives it a good try
I can agree with that.
I never had probems making configs in 1.3... ever since I
switched to 2 everything I touch busts.
i think fasta's got a point. parsing the config, which might
include reading big mime lists etc, is expensive and not something
i'd want to see happen simply on file saves, but there's a case to
be made for being able to change the config tree in-mempory at
runtime
http://apache.pastebin.ca/562995
sure, but it's harder than it looks
which brings us back to C
no doubt
in the original prefork'ing architecture, every child has its
own copy of the config
pastebin the FULL error log entries as well please
chill.. it's not fasta's fault that you mistyped the nick and
you're being a little aggressive on the point
fasta++
in the threaded model, there's just one but it's immutable
and therefore doesn't need to be protected with a mutex
in either case, doing a graceful restart does actually just
reread the config file and use it for new connections
so that seems like it's good enough, no?
of course, there are some limitations.
http://apache.pastebin.ca/563018
so it's not ideal, certainly
thumbs, the apache docs only provide options for redirecting
directories, not redirecting FROM the subdomain
no arguments here.. just there's a bunch of people who'd like
to be able to configure apache via their browsers without needing
plesk etc
you can redirect in the vhost.
redirect context
server config, virtual host, directory, .htaccess
could I bother you for an example?
that seems OK. There is an external element that seems to
complicate matters
I found "something"
redirect 301 / http://some.server.com
it messes up the character set when the page get values from
a database, which field is defined as latin1_spanish_ci
so I guess it's not an apache problem
probably a mysql or php
blame php
PHP should be presumed to be at fault until conclusively
proven otherwise. And even thereafter, if it's
convenient
yeah, i sympathize with that
heh
apache doesn't care much about character sets
it just sends the encoding to the browser, which needs to
know.
ahhh. nice..
so you have to tell apache what character encoding is used, so
it can tell the browser
thumbs++
how does sound like this to you? :
i'll look in the main config
no no.. I was going to say something stupid
go ahead. maybe you'll be immortalized.
What's wrong with this cgi configuration? http://pastebin.ca/563036
(knowing, I could already said something stupid without
knowing)
you never know
heheh jpeg
I placed a file helloworld.cgi, made it executable.
gonna do a bit of more research
it's killing me
Options ExecCGI is redundant, the ScriptAlias directive takes
care of that.
Never mind
what does the error log say?
what is your issue?
I looked at it and solved it already
ok.
the database is presumably returning latin1 (with spanish
collation) -- i don't know what ci means
Sorry for bothering. I am a new Apache user, well, I used it
years ago, but that was an EasyPHP distribution. I am now setting
up a real solution for my personal needs.
disabling UTF8 from apache makes everthing works, but only
data retrieved from a database is now showing characters
properly
now = not
"disabling utf8" means removing the adddefaultcharset line, i
presume?
i think your problem is that you're inserting latin1 characters
into a utf8 template, probably
yes
you'll need to make sure that the whole web page is in just
one character set
php has an interface to iconv iirc
it's nothing really to do with apache. apache just ships the
bits
the problem is that this is a customer, which was hosting the
webpage in some other place, and without this issue
yes, I think apache is not the problem
perhaps the pages are in a consistent character set but you're
not setting the correct one
you could do that in php, too.
Ok, I got CGI working in a different virtual host. How
nice
what do you mean by "consistent" ?
all the same
ohh
Consistent means not(A and not A)
ok, now I am sure it's because of the data field setting to
latin_bla_bla
where A is any formula
in this case, the formula is (exists ch s.t. ch is encoded in
X) for some char encoding X
buaaa
noodl-- not(chilli sauce & not chilli sauce (noodls, in
fact))
yes, you have to tell databases how text is encoded, and how
to collate it.
before I lear abour charaset encoding, I need to learn
english
we could do this in spanish if you prefer
heheh nice!
no it's ok, I understand what you said
so I should try to find how to show that information retrieved
from the database which is set to a charset 'latin_blabla'
properly
try to find how to show = convert, right?
well, there are two options
either you make sure the text it is inserted into is also
latin1
and then you send the whole page as latin1
or you convert the database text to utf8 (assuming that's what the
template uses)
and then you send the whole page as utf8
where "send the page as" means setting the character encoding in
the headers
so for example, if I let clear the charset configuration in
database, then I it should be corrected right?
no, the database isn't converting the data.
the configuration is a declaration. probably
you can't change it without changing all the data.
at least in the databases i'm familiar with.
yes, realize of that just one second ago
the problem is that text doesn't have an implicit
encoding.
can't change it
it's just a bunch of bits
so I have to screw-up php
was the whole installation working on "some other system"
(possibly apache 1.3)?
or did you change the php
or perhaps the database?
yes, it was another apache verion, I tried copying the
httpd.conf file, and said "found apache 1.3 directives" or
something like that
you know, I tried all the lazzy things to do before using my
brain
heh
there are surely all different version, php, apache and mysql
it was in a old system
ah
well, there is something you should know, anyway.
there are two ways of telling a browser what the character
encoding is:
1) in the headers sent before the html
tag
the second one only works if the first one is not used
yes, I readed that in httpd.conf
tags
2.0 included a feature to set a default character set, so a
lot of people started doing that
and then broke applications which were setting the encoding in a
meta
this could be your issue. or it might be something else.
html pages, have iso-8859-1 setup
but I think that's not a spanish charset, correct?
anyway now I have commented the UTF8 line in apache
iso-8859-1 includes all spanish characters
it's the "western european" encoding
http://aseguratuviajecl.dnsba.com/asistenciaviajeeuropa.php
in the combo menu is where you can see the characters not bein
shown properly
as opposed to the rest of the static page text
combo menu?
yes, the "desitino" menu
at the left of the web site
right, that data is in utf-8
i recognize the utf-8 viewed as though it were latin-1
heh
curiously, año is correct in the fecha nacimiento
menu
i suppose that's static text
let me check database
yes
it's static
but residencia says Origen instead of Orígen
well, that's minor
anyway, the stuff in those menus is definitely utf-8
see what happens if I set iso-8859-1 in apache
no, it's the same if I set it to iso-8859-1
apache is sending it in latin1
the problem is that (some of) the data isn't in latin1
"Queremos que no tenga ningún"
note the ú
which is a way of getting around encoding issues.
yes
check not, I turnied apache in UTF-8
using the customlog directive in apache 2.0, if i write my
own process instead of rotatelog, why are there two processes
spawned for my one customlog directive?
Si viajas a Europa no debes olvidarte de contratar el plan de
asistencia al viajero exigido r según
(right at the top)
exigido r ?
yes, there is a typo
gonna tell to the customer
it now looks fine except for año which can't be
rendered because it's in latin1
it shows up as ao in my browser
but all the residencia and destino menu values are fine
yes
and the body text looks ok, because it was
entity-encoded.
you say in the " fecha de nacimiento" menu right?
yes
the default value is "año" encoded in latin-1
I think I am going to let it this way, and tell the customer
to rename all thoose characters
that's not a valid utf-8 string, so the browser tosses out
the ñ
it's the only one i see
ponies!
ponies is tasty
ponies
ponies is tasty
so the problem is that I am using a new apache version
:P
lol
i'm trying to play with apache synapse, is there a channel for
that?
gonna tell that to the customer
:P
I better leave it this way right rici ?
meta http-equiv="Content-Type" content="text/html;
charset=iso-8859-1"
from one of the pages
fortunately, my browser is ignoring that because you're sending
utf-8 in the header.
the templates have typos, too.
how do you see which headers your browser receives?
META name="tittle"
that should be "title"
use curl or wget to see the headers
oh. . see something I did some time ago, now fist time
useful
or there's a firefox feature which shows them
http://www.bairestools.com/index.php?http_dominio=aseguraronline.dnsba.com
the response to a send HTTP HEAD
heh
http://wiki.apache.org/httpd/Recipes/WatchingHttpHeaders
that wikipedia is soooo..... sooo... sooooo.....
oh, not wikipedia
hehe
I I think I am going to backup the database and create it
again withtout charset configuration
"Generally speaking, supporting tens of thousands of
simultaneous requests from a single web-
server is not what you’re supposed to do."
echan, sorry
fixed!
creating the database without specifying the charset latin1 make it
works
well guys
I guess you want the rest of us to ignore you then,
Toerkeium
why fajita?
bots aren't guys, Toerkeium :p
bot?
I am a bot. I am not a sentient being. I cannot hold intelligent
conversations.
lol
well
I am not a bot, and I cannot hold intelligent conversations
too
Toerkeium++ a splendid repost
well... as you said at first lines..
there was some mixed encoding types in the html
so now fixed, untill customer start uploading his things in
different charsets
very very thank you guys
rici, noodl. thank you!
very very np
going home now, to have a decent eat and a nice tequila
drink
Can I ask questions about other apache projects like HttpClient
here?
I'm wondering how to use HttpClient to log on to a website that
doesn't use username/password credentials, instead it only uses
email.
you can ask but you're not likely to get an answer. most of the
java based projects use mailing lists primarily
i'm trying to play with synapse and get "you must set the
java_home variable before running axis2 script. how do i set that
variable?
ubuntu-home: JAVA_HOME=/some/path/to/java;export
JAVA_HOME
arreyder - how can i determine the path to java?
the path to java is littered with good intent
probably /opt/somewhere
you'll have to hunt it up, I dunno where ubuntu shoves it
it seems that my host (me) has disallowed directory indexes,
what do i need to tamper with to get it to show them?
and very witty f00li5h
DirectoryIndex
DirectoryIndex is http://httpd.apache.org/docs/2.0/mod/mod_dir.html#directoryindex
or http://httpd.apache.org/docs/mod/mod_dir.html#directoryindex
and Options Indexes maybe
block if you just want to do it for certain dirs
flaming skulls-- !!
flaming lips++
doom3 on veteran making me angry!
bah. i've got doom3 but vista makes it run like a granny
now that sounds good to me
(disingenuous--) haven't tried doom3 yet with vista but all the
other games go slow
I couldnt play it back when i bought it, video cards finally
got cheap enough 3 years? later
was I right? that was from the hip, I dont use
Indexes
it looks right... but it's not working
which means someone has done something stupid to my httpd
-_-
arreyder can be disingenous as well, even if he had to look at
what noodl type to know how to spell it
might need to be +Indexes
noodl knows
2.. doom3 hasn't been around quite that long. doesn't stop
this nvidia go73000 graphics card from sucking in vista sadly i
lack the ability and inclination to make xp secure enough for
gaming
u2.. doom3 hasn't been around quite that long. doesn't stop this
nvidia go73000 graphics card from sucking in vista sadly i lack the
ability and inclination to make xp secure enough for
gaming/u
how do i unset a directive? i want to remove
DirectoryIndex
DirectoryIndex can't be unset
hi
privet, jesse408.
it's cumulative
gah
let's wind it back (since i clearly don't know as much as i
thought)
best you can do is set it only in the contexts in which it's
required, sadly
one of those ancient ncsa hangovers
8
step one
whatever the problem, step one is to look in the error log
(and any other logs that may apply, such as suexec, mod_rewrite, or
mod_security).
nothing in the logs about it
empty error log
If there's no message in the error log, it never happened. or
For the clue-challenged, that's ERROR log, not access log or maybe
you're looking at the wrong file
uh, sorry wrong factoid
look in the right error log
ah.
- 8 - /subdomain/f00li5h/html/
forbidden sounds kinda serious -_-
not really.. Options Indexes set in the right context will
help. if you're running a distro with hidden vhosts, find them will
lead you to the right context
shouldn't my Options +Indexes beat it?
not if it's in the wrong context. where's your Options
directive?
my .htaccess
adding IgnoreChickens +Foo scores me a 500, so that's
working
anything else on your Options argument? Options is a tricky
bugger.. see:
relative options
Options values should generally be all absolute, or all
relative. Don't try Options +Foo Bar. Options Bar +Quux is ok, but
should be avoided anyway. See:
http://people.apache.org/~rbowen/presentations/apacheconEU2005/hate_apache.pdf
nope, just Options +Indexes
i recall reading about partially-absolute Options being bad for
you
pp3
hrm?
yeah, they're bad. not sure why that's not fixed yet.. there's
plenty of simillar directives that aren't borked like that
(IndexOptions etc)
well, since my httpd is on ensim, and they seem to like
meat-axing things, i'm going to raise myself a helpdesk ticket, and
see if i get back yet another "computers are not that far advanced"
type answer
hehe, good lucj
luck too. sounds like you've covered the obvious points..
why do i pay you guys?
be roy
THIS IS PRIORITY 99!!! THIS HAS BEEN A TOP PRIORITY SINCE
LAST MARCH!!!|
be george
she is havening a problem with her mouse she try to left,and
right it will not work either way ,she is not recievening error
messages
recievening++
be homer
Mmmm. Hog jowels..replyI am so smart! I am so smart!
S-M-R-T!
oh my, I think we had George as an intern.
I'm still a little confused about the user issue. If I want to
let apache run as a separate user, do I need to add a user to
linux?
yes, perhaps. what is it you're trying to achieve?
This is definitely the wrong channel, but I want a good
source of information for constructing TCP/IP packets. If you got
one or have an idea on where to look (other than google) please
share it.
well, apparently to harden Linux/Apache, I'm suppose to run
apache as a different user than 'nobody'
do you understand why that advice is given?
iirc there's a #networking channel
Thanks!
The RFC is a real good place to start
tools like hping can be useful after you have an understanding
of ip
http://www.kohala.com/start/tcpipiv1.html
the best place to start
the best place to start is the documentation.
well, if apache was breached (i.e. buffer overrun etc) then
they can't access the system as 'nobody'. I'm thinking most
programs run as nobody unless specified otherwise and thus many
files have permissions set for nobody to access...
Thanks!
close
programs need to be configured to run as "nobody" but there's
always the temptation to do that
it's better to run each service as it's own independent
low-privilege user
The idea is to create packets using a state machine, thus I
really want to go into depth.
reading stevens is pretty well mandatory if you want to
construct raw packets
i'm curious, what is inaccurate abou what i said?
"unless specified otherwise"
there's no such thing
you might be labouring under the impression that 'nobody'
means nobody. it really doesn't in this context. that's just
another user account name. you could call it bob and you'd be in
the same pickle.
don't confuse the 'nobody' account with world permissions.
they're two very different concepts.
I had a sneaking suspicion that was the case with 'nobody' being
like 'bob'. However, confused with the world permissions. Can you
elaborate?
you might offend bob though by suggesting that he is
nobody
you might offend nobody by suggesting he is a pickle
Related Topic:
Can someone answer me the question if i can connect my apache with an active directory 2000 server through mod_authnz_ldap