DirectoryMatch -private and Location -private both match localhost-private but which one is better for security

CheapWebHosting.co.nz

Roobarb It depends on what they need and what I need My email and since I get zero spam Im happy to blurt it out
Hi my website is running very slow its about 6-7 seconds of loading everytime and i dont understand becouse its

not really getting the php errors anymore...

k
all in the main config?

that may be your only issue. Somethings that PHP link to do not play nice with threaded mpms

ahh ok
threads or fork better ?

worker makes a great reverse proxy though, but th back ends should run prefork

lol, its set to like 8 right now
go to 50?

Yes
Make sure you're updating the right mpm

portage is definitely not going to like installed 2 instances of apache

http://rafb.net/p/MXUiJV83.html
change it there?

Yes, and set MaxRequests to 0

really?

Yes

you see an issue with http://wiki.apache.org/httpd/Recipes/Different_UserIDs_Using_Reverse_Proxy : Alternative Proxy Configuration that may be causing issues with get vars ?

okie dokie

is working just fine

so I have no clue why you're having this problem

there is no serverlimit in this MPM, should I create it anyway?

unfortunately ATM I do not have access to a web browser to look

no worries thanks again

I appreciate the module I built won't support a lot of features, but it demonstrates the minimum set of things you need to get php working
httpd -M is apparently showing that it is

rici authored that I think, he's usually around and really helpful

yah i havent seen him in a few hours

grr @ mod_rewrite...

there is nothing in here called ServerLimit, should I just create the key?

Apache has an in-built ServerLimit (20k for worker and 200k for prefork on apache 2.2)

ping

is there a simple way to check how long apache is taking to render a page?

Could not determine the server's fully qualified domain host name, using 127.0.0.1 for ServerName

or complex. either ay

apache doesn't render anything

the site is all messed up!

if you need to use more than the _defaults_ (256 for prefork, 16 for worker) then set ServerLimit in your main config

fqdn

no. but it uses modules to do the rendering before it hands the page off. im interested in the delay between a request and the page being served

fqdn

fqdn is fully qualified domain name or http://wiki.apache.org/httpd/Errors/CouldNotDetermineServerName

define rendering

ok, setuid is asking for 1024, do I add that in the prefork.c?

to me, rendering a page means converting html into an image that can go to the screen; that's definitely the browser

to me, you're being a smart ass
and nitpicking semantics

ok... back to my problem

im interested in the delay between a request and the page being served

Cyric, no
Cyric, To your server config, not prefork.c
http://rafb.net/p/woAxcA62.html

i've got 25 virtual domains on here - is that an issue

in context of php hosting ?

I rewrite gallery/page1.xml into gallery/page1, and then mod_rewrite "adds path info postfix" (whatever that means) and converts it to /gallery/page1/page1.xml! that's not really helpful

iratik, no

so which domain should i put into /etc/hosts

logformat

logformat is http://httpd.apache.org/docs-2.0/mod/mod_log_config.html#logformat

ok, done.

yes. i need to be able to track when the slow down occurs so i can reference that to mysql and php logs

the domain your used in your vhost.

but there are alot of domains in vhost ?

Cyric, now cleanly stop and start the server (not graceful, not restart)

they ALL have to resolve, iratik

server configtest comes back ok

ALL OF THEM.

thanks

so do a stop, wait then start?

Yes

you got it. brb

I'm taking an httpd.conf file from a 2.0.53 install and using it within a 2.0.59 install, and the .59 is complaining that it doesnt know "IndexOptions"... but afaik there's no module or compile-in, its natively part of apache, right?

Make sure all of your logs are uncommented

stopped

IndexOptions

IndexOptions is http://httpd.apache.org/docs-2.0/mod/mod_autoindex.html#indexoptions for apache 2.0 http://httpd.apache.org/docs/mod/mod_autoindex.html#indexoptions in 1.3 http://httpd.apache.org/docs/2.2/mod/mod_autoindex.html#indexoptions for apache 2.2

Invalid command 'IndexOptions', perhaps mis-spelled or defined by a module not included in the server configuration

^^
IndexOptions

looking..

looking is a good start.

failed

read about logformat. there's a token in there that might be what you want.

logformat

logformat is http://httpd.apache.org/docs-2.0/mod/mod_log_config.html#logformat

hey guys l havent six my problem my website is working on my machine but if l try open in a other machine it dosent work

didn't seem to come up

What was the reason?
Check that top-level error.log again

I suspect you have a firewall on your computer, or you have "Listen 127.0.0.1" instead of "Listen 0.0.0.0"

ok the 2.0.53 install log must be wrong, whoever wrote it said they used .,/configure --disable-autoindex

maybe some thing like nagios....

yeah roobard y have listen 127.0.0.1
let me shange it

yeah. nagios gives me a lot of data, and im paying for some services to monitor delays on form processing from a few different datacenters

thanks thumbs and fajita

and rrd is graphing all sorts of stuff. but im trying to rule out apache from the problem

port was implied, and he understands the issue

sure.

you can get seconds and microseconds per request in your apache log.

Roobarb, No, I meant 'Listen 0.0.0.0' isn't the same thing as 'Listen: 80', and the latter is most-likely what he wants

im guessing you meant the %D option. which, iirc, is only for 2.0? im still 1.3

0, is actually what he

thanks

roobarb:http://apache.pastebin.ca/595960
look!

http://rafb.net/p/kxmeB314.html

maybe apache is already running, or maybe you need to be root to open that port to the world

as root, what do you get when you run: netstat -plant | grep ":80" ?

plant? lol

he is root, as indicated by the # in his prompt

yeah l was using root

-planet is also valid

oops

%T in seconds is in 1.3. that might be the best web hosting you can do.

I once was adding and removing options and ended up with du -hack

here you go! http://apache.pastebin.ca/595962

apache already running and using the port happily, it seems

Cyric, Yep, looks good

apache is already running (and listening on 0.0.0.0:80).
if you do a restart (instead of a start) does the error go away ?

let me see

ahh. awesome. i had glossed over that one;

but still fails =(

Are you sure you're getting the right error log? Check the error log for that last vhost you added

Something is breaking it, and its not the OS

i think that feeding that data into rrd would provide a good visual
thank you very much. i hope this solves things

nop the error still there

have you had a chance to read my comments above?

nothing in the error log but 404's

Cyric, Paste your entire main config somewhere

ok, do this: "/etc/init.d/apache2 stop", then run the netstat again
also, paste the following: ps axf | grep httpd

apache-config.pastefile

Remove the comments to reduce the size, it should be small anyway

here ! http://apache.pastebin.ca/595969

i is an issue with my apache jail

http://apache.pastebin.ca/595972

messaged you with the url

Cyric, I got nothing

k
fuck it
http://rafb.net/p/arWPFc22.html

ack
/msg setuid url

on freenode, you need to be registered with nickserv to send /msg

Lemme look this over

and Cyric isn't

ok I got the "ps" wrong - you should be grepping for "apache". Either way, apache is still running, so do the following: killall apache, then paste the netstat again

oh
yeah cause they won't give me my nick
even though I can always get on as Cyric

yea it seems somebody else has it registered

and I have been everywhere else as cyric for years and I don't feel like changing ;p

hi iam having a odd problem with apache i have emailed the mailing list but no answer. Some times when i try to restart apache it will fail but if i do a ulimit -n 600000 and try to restart it will work.

what error does it fail with?

512001 KB]

I've just installed apache on my machine and it works fine but I can't make php5 webhosting to work...

what is the bots name, nickserv?

apache2

apache2 is a name debian based distros give to the httpd-2.0 release

Adamska:
php

php is a scripting 'language' that is enabled by loading mod_php and AddHandler application/x-httpd-php php or http://www.devside.net/articles/php

http://apache.pastebin.ca/595981

Cyric, A few things... Keepalive On will kill performance, and reduce the number of modules you're using

ok good. now try and start apache again

Cyric, Are you really proxying or proxying ftp? If not, lose those modules

i have 4 gig in that pc.

yea, we really do proxy, its a gay ass coldfusion thing

with different ServerName's and I cannot figure out why I am seeing " [warn] VirtualHost ... overlaps..." ?

this is off free Mem: 4038036 4020360 17676 0 20204 3419916

Cyric, And set MaxRequestsPerChild to 0

oh yeah
you meantioned that, sorry
i'll fix

ok give me a moment

ok man take your time.

i've got this working correctly on a slightly different 2.0 and on a 2.2.2. I cannot figureout what the difference is

Cyric, There's nothing obvious in here that I can see that would break things... pastebot one of your recent vhosts, so I can see what that config looks like

sure

which version of apache?

2
its centos 4.5

no, which version exactly

umm let me get that for you

httpd -v

httpd -v returns Apache's version number. httpd -V returns compile settings, too.

paste your vhost confis somewhere
chrismon:
apc

Try using http://apache.pastebin.ca - It's a good pastebin, and is even set up to highlight Apache 'stuff'.

Apache/2.0.52 (CentOS) Server

http://apache.pastebin.ca/595991

Roobarb, actually I thikn I got it, no global ServerName was defined
but its complaining about the _default_ vhost... which is not defined O.o

ok, thats just a warning - can you see the site from your other computer?

http://rafb.net/p/hvHU3955.html

Apache 2.2.x does warn you about not having a default ServerName

Yeah, this is screaming for mod_macro
Cyric, Install mod_macro
Collapse all those vhosts into one block

yes!

I run a LOT of vhosts, and mod_macro made my life so much easier

i'll look into it
there are about 500 in there
total
actually, more like 700

http://24.184.210.0

http://24.184.210.0 is this working in my pc?

That's nothing

Roobarb, the errors are from the 2.0.59

o/ hey guys

http://www.cri.ensmp.fr/~coelho/mod_macro/

ok, thats good cause we add like 10 a day

I can't find a reference to that error anywhere in the apache 2.0(.59) source code.

any idea for the default vhost one? [warn] _default_ VirtualHost overlap on port 443, the first has precedence

Yep, mod_macro will make that as easy as adding 10 new lines per-day, 1 line per-vhost

hey does it work on you computer?
24.184.210.0

hmm well next time it does it ill tail the log file and get the error code again

nice
ok I will set that up

can't you grep for it?

i wonder if there is a reason we are using keepalives?

Cyric, Are you out of disk space on /www/?

I'm trying to download a file from an apache server through curl -C - -O 'url' but when i try to resume it, it won't append any data to the file. All the numbers are 0 and not moving. Any ideas?

Anyone who can figure out why i /usr/sbin/apache2: error while loading shared libraries: libdb-4.2.so: cannot open shared object file: No such file or directory

odd, I don't usually define a ServerName outside my Vhosts on Apache 2.0

.. /www 66% (34GB free)

Unable to open logs i do see that alot

I'm not too familiar with curl; does "wget -c URL" work ?

and no, i dont have libdb 4.2 on my box, its 4.2.. but it didnt complain until i added rewrite rules to my httpd.conf and vhosts file to avoid trace commands against the server.

how many vhosts do you have?

could this be because of some compiled option that came with this release?

over 200

have you tweaked your ulimit stuff?

since this is mainly jsut a redhat distro, could it be the way they compiled apache?

Cyric, No idea. Without an error message, I can't be sure.
Cyric, Does the directory that the log is trying to be written to, exist?

Roobarb:I'm having trouble installing wget on my mac. If it helps at all, download managers can't resume the download either

oh yeah, i feel your pain

do a ulimit -a to inspect them

i'll double check
but it should
all these vhost entries are made by a script
yeah, it exists

do you see any errors in the apache logs? I thought it supported resuming out of the box

Cyric, and perms permit writing to it?

yeah
its all good

Anyone who can figure out why i /usr/sbin/apache2: error while loading shared libraries: libdb-4.2.so: cannot open shared object file: No such file or directory

well thats the thing if i do a ulimit -n it will say 600000 but when i go to restart it will not work but if i do a ulimit -n 600000 it will start up just fine

Roobarb:unfortunately it's not my box.

Its fishy
zphinx, Install whatever requires libdb-4.2.so

i mean, all the rest work just fine

And then install the package that contains libdb-4.2.so

well, without access to the apache logs theres nto a lot I can suggest

sure. I understand

is it just a normal file?
or a script that serves it?

it's a tar.gz

setuid, cant see anything in log for whats needed, besides.. i have a newer version installed.

just the file. No script

libdb4.2: /usr/lib/libdb-4.2.so

can you give me the URL? if you don't want to post it to the channel, /msg PovAddict http://...

zphinx, If the module is looking for libdb-4.2.so, then you need THAT version

ok new problem just found out something is setting my ulimit -n back to 1024

williammcinnis yeah I was about to suggest that you changeit for the user that apache su's to

ok how can i do this?

add it to the startup script?

i mean what command do i execute?
just ulimit -n #?

you might look and see if your distro has a /etc/secuiryt/limits.conf
that's the appropriate place to handle it

there is but everything is commented out

hrm actually, I'm just thinking...is there a way to split a binary file into multiple pieces?

yeah, so change it...

man split

thats what it is for

in .bash_profile it might work

for the user apache

for the user apache is running under, right

yeah, what fajita said
lol

that's a useful factoid

So is there any other way to disable the TRACE feature in apache other then with mod_rewrite?

is this a static file

snakeoil

sorry...

snake oil

what?

http://httpd.apache.org/docs/2.0/en/mod/core.html#limit

dammit

or not... oops
"The TRACE method cannot be limited."
anyway why do you want to disable it?

well damn
so I guess there is no real solution to what is ailing my server?

ahaa! found it http://httpd.apache.org/docs/2.0/en/mod/core.html#TraceEnable

Not .bash_profile
Since apache never "logs in", it won't parse it
use sysctl
/etc/sysctl.conf

so you don't like RHEL 3?

Its insecure as hell

lovely
what would you recomment?
err
recommend?

find me a distro thats secure out of the box...

What's the goal?

the goal is *to get it completely outside of any blocks

Is this a corporate environment?

security, reliability

fajita, shush
Cyric, its primarily a webserver?

yeah

THen I'd go with BSD

only a webserver

ehm

ease of management?

Depends on how you manage it

lock apache, then firewall everything but 80 the vpn to access ssh, etc
secure.

secure is how you make it

well I suppose everything is easier than what I am doing right now

I run Debian and BSD as my webservers, they both have their quirks
Or just stick with RHEL3, and rip out their apache packages and build from source

lovely

rhel3 is pretty long in the tooth

hehe, people use packaged apache?

i'm running with a bunch of inherited stuff, and yes, people use packaged apache
since I don't build the apps, I just have to keep them running
but its a pain in the ass because in my opinion its running from kludged together code that runs through various app servers such as coldfusion and orion
the entire environment here needs TONS of work
when I started they had an office as a server room with a fan in the door way to cool things down
and I don't mean just a couple of machines
rackmountable machines stacked on each other so high that the tables they sat on were bowing because of the weight
so I started there as priority one....

order a rack and ACU, stat.

that was done when I started
4 racks and a leibert were installed
but that was only because they had already started that project

hello

i wanted to co-lo

ugh
telemarketers -_-

why could my apache2.2 refuse to run index.cgi in the DocumentRoot?

any1 knows how to fix URL Rewrites ????

colo. good idea. much better than keeping stuff in house

DocumentRoot /var/www/devsupport/htdocs
DirectoryIndex index.cgi

why not let apache tell yout hat? whati the error message

for cgi ?

decrease your responsibility also, gives you time to do other things

stupid non-specific question, and any1 isnt a word

ask

sorry, pastebin, one sec

ask

If you have an apache related question, please go ahead and ask it. We will not beat it out of you. We won't bite you either, at least until we get to know you better

http://pastebin.ca/596036
here is my virtualhost

i need to change the url from "http://wiki.galbijim.com/index.php/Main_Page" to http://wiki.galbijim.com/

error log

Look for the ErrorLog directive in your configuration file. Common locations include /var/log/apache/error_log, /var/log/httpd/error_log, /usr/local/apache/logs/error_log, and "C:/Program Files/Apache Software Foundation/Apache/[version]/logs/error.log"

"http://wiki.galbijim.com/Main_Page" *****

8 2007] [error] [client 192.168.0.117] Attempt to serve directory:

RewriteRule ^/$ /index.php/Main_Page

i have copied as it was on some website

so hard

http://paste.uni.cc/16549
it gives 404 error

when I directly open http://devsupport/index.cgi, I get the contents of the index.cgi file

do you think since they are using a pre-packaged version of apache there could be some compiile setting that is killing me? Is there anyway to cehck that now?

I doubt it
That would be a very silly thing for them to do

yeah thanks but it dont work

What does 'ulimit -n' show?

you doubt I can check it? or that there is a setting?

first off, you probably want "Options +ExecCGI", second - where do you specify the cgi handler?

as apache?

as apache is using the owner account ?

fajita, shush

http://paste.uni.cc/16549 it gives 404 error
can u tell whats the problem in it

42767

please repaste to:

http://httpd.apache.org/docs/2.2/howto/cgi.html

apc

Try using http://apache.pastebin.ca - It's a good pastebin, and is even set up to highlight Apache 'stuff'.

That's HUGE
Did you set that?

yeah

That's *WAY* too large

actually dont - its just a slow site

if it goes smaller, apache can't start

thanks, now http://devsupport/index.cgi gives me the correct output

Set that to something like 8192
No way

i'll check right now

but http://devsupport/ still says 404

lets see

If that's true, then you're running into some other physical limit, like cpu or RAM or something

ok i should paste it on some other pastebin

Roobarb ok
how should i show it then ?

pastebin.wootgnu.org

I see it now. the page took a while to load

thats a not too crowded pastebin!

I can't quite work out what those rules are trying to do though
what are you actually aiming to do?

servertokens pastebin.wootgnu.org

Apache/1.3.34 (Unix) PHP/4.4.1

oh!

ah, I used SetHandler cgi-script instead of AddHandler cgi-script .cgi
now it works

servertokens paste.wootgnu.org

Apache/2.2.4 (FreeBSD) PHP/5.2.3 with Suhosin-Patch mod_ssl/2.2.4 OpenSSL/0.9.7e-p1

all i need "http://wiki.galbijim.com/index.php/Main_Page" to "http://wiki.galbijim.com/Main_Page"

sorry for the lame questions, and thank you again
bye

take care, hon

paste.wootgnu.org i meant

RedirectMatch ^/index.php/Main_Page$ http://wiki.galbijim.com/Main_Page
no need to use mod_rewrite

just one line ?
RedirectMatch ^/index.php/Main_Page$ http://wiki.galbijim.com/Main_Page

just one line

k let me try
i am getting 404 error: URL /Main_Page was not found on this server.

thats not a fault of the Redirect

hmmm ok...

ok
hmmm

you evidently don't have a file called "Main_page" in your DocumentRoot

appears that its still working

actually i have problem i just want to elimante the /index.php/ from the URL

and i set it to 8192

are you trying to redirect to a directory ?

Right, that's more sane, but what about that last vhost?

yes

how do you mean?

ok, add a / to the end of the line

try uncommenting the log entry?

RedirectMatch ^/index.php/Main_Page$ http://wiki.galbijim.com/Main_Page/

did that.. same error
actually index.php is a file
i read a tutorial here "http://www.mediawiki.org/wiki/Manualhort_URL#Subdomain_with_no_Subdirectory_in_Article_URL"

can you browse http://wiki.galbijim.com/Main_Page/ ?
actually I see you can't.

still failes

its something like that http://wiki.galbijim.com/index.php?title=Main_Page

And still no error?

no error is being logged into the ssl error file even.. only the browser is complaining

let me check

well that isn't what you asked for

i trying to explain..
guess i was not clear..
did u understand now ?

are you actually trying to get visitors to http://wiki.galbijim.com/ automatically redirected to http://wiki.galbijim.com/index.php?title=Main_Page ?

7 app04 httpd: httpd shutdown
9 app04 httpd: httpd startup

well when u type wiki.galbijim.com u already taken to http://wiki.galbijim.com/index.php?title=Main_Page by the script..
i just want to change it to Pretty URL/ short URL

/var/log/messages? Wrong log

thats not the behaviour I see

well I went to /etc/httpd/logs/error_log
and i get nothing

if u see here they have the re-write rules "http://www.mediawiki.org/wiki/Manualhort_URL#Subdomain_with_no_Subdirectory_in_Article_URL"

where it is putting all teh debug info correct?

but why am i getting 404 errors, thats something i cant understand

Cyric, no

which log should I look at?

/www/logs/error.log

ok, the RewriteRule stuff on that page is, or should be, redirecting http://wiki.galbijim.com/ to http://wiki.galbijim.com/index.php?title=Main_Page

if LogLevel is warn, and I have a CustomLog directive after this, will only warnings get logged?
i need to log this data for ALL requests

please remove the RedirectMatch I gave earlier, and restart apache

no such thing

i thinkw e have the error log set to logs/error_log

I want to see if what you started with actually does something useful

done

cd /etc/httpd/logs/
find . -type f -name error_log | xargs -i tail -f "{}"

its back to orignal now..

http://rafb.net/p/PtobMY73.html

THen in another shell, stop and start the server, with all vhost log lines uncommented

see line 159

have you copied, verbatim, the RewriteRules from that MediaWiki page into a .htaccess ?

Apache is failing to start but there's no error msgs or nothing in the logs, ugh... exit value is 1

i'll do that

rather than using the main config

what else can I look at?

yes i did
whats verbatim ?

and did you add the 2 lines to Localsettings.php ?

Roobarb yes i did

verbatim

Verbatim means "word for word" "copy and paste". It means we want the exact error message from the error log. That also means use a pastebin for 3 lines. Ask me about 'apc' for which pastebin to use.

it gave me 404 error, the URL was showing as same but the error was same
too

I see
do you have any other RewriteRules anywhere in your config?

nop

when it starts back up, that log doesn't have anything come into it
its fails obviously when it starts back up

i just have .htaccess in www

I'd rip their package out and rebuild from source

what fails? apache fails to start up?

That'd be my next test

i agree

megaspaz, Yes, after he adds one more vhost log entry

hmm ok. give me a while to install it on a text box

run it from the command line

but with it being production theres nothing I can do at the moment

Roobarb ok.. sure

don't start apache from init.d

megaspaz, He has 500 vhosts, and when he adds #501's log lines, it fails to start

explain ... ok
how?

how is it going ??? i have a problem here with web services and java mix. This is the kind of problem that is breaking my head hope not yours http://pastebin.ca/201503

what distro are you on?

RHEL 3

RHEL 3 is *2.0.46 http://eul0000727.eu.verio.net/blah

i want to say /usr/sbin/httpd restart

k
gotcha
will do
one sec

somewhere in either /sbin/ or /usr/sbin
or search for apachectl
that's the script that should be used to start up apache really

-k restart?
ok
i'll use that

apachectl

apachectl is http://httpd.apache.org/docs/programs/apachectl.html or just a shell script. It can be hacked to set things like library paths, umasks, etc

yeah

apachectl start

apachectl start is how you start apache

you get the idea
if apache fails to start, that script will output to stderr
and should tell you why

ummmmmmmmmmmmmmmmmmmm
wtf?

but with 500 vhosts, could be that there all writing to their own log files?

WTF?!?!?1

file handlers

well spit it out man!

ok...

it jsut restarts
no error

no error is being logged into the ssl error file even.. only the browser is complaining

nothing

nothing is _ALWAYS_ a wrong answer/description.

and works

hah

fajita, shut up

Shutting up.

gremlins

They're out to get you, and they're gaining on you. Hehe :-)

forget no error

I forgot no error

well that's interesting...

be nice to the bot

wtf, this doesn't make sence
it has to be the start up script then

well the odd thing is, rhel's init.d script should just be a call to apachectl...
so um...
:/
BOO!

Eeek! O_o

Wait...

anyone mind taking a look at this httpd.conf file and telling my what's wrong? I can't get cgi scripts to run with it... http://rafb.net/p/s4hqLB21.txt

So the init script breaks it after vhost #501?
wth?

wth is Sager

its not, because the previous admin edited the crap out of it

ah!
All bets are off

well then yeah... possible...
heh
gremlins

They're out to get you, and they're gaining on you. Hehe :-)

ok
so i'll try this
i just restarted it with apachectl

Gremlins indeed

forgetr wth
forget wth

I forgot wth

http://apache.pastebin.ca/596104 any reason someone can see why the delays log isnt being written to?

i'll try using service again and see if it breaks this time
yep, fails
apachectl start works

hahaha

the httpd_detail dir is owned by the right use and the logfile perms are correct....

wtf
dude
i'm banging my head over here
ok

Pull the original rpm and look at the init script
compare, and diff

i'm going to pastebot my start script
http://rafb.net/p/vJU8K527.html
wtf...

heh heh
1.3 config check...

"Hourly rates: $50.00/hr, I work alone. $100/hr, you help. $500/hour, you tried to fix it already."

50/hr is all?
hehehe

are you running 1.3?
at all?

adj, I work fast

not too hard if you don't get fancy

anyone?

it crashed
wierd
i thought it was working

ok... well if it crashed, when it was running, then you should have stuff in the error log

Crashed is not the same as "wouldn't start"

emphasis should....
doen't mean you will...

ok...
let me check
[root@app04 /etc/httpd/logs]# apachectl restart
httpd not running, trying to start
[root@app04 /etc/httpd/logs]# apachectl restart
httpd not running, trying to start

yeah

apachectl start

apachectl start is how you start apache

Not restart

right
the very next thing i did was this

If its dead, I don't think its smart enough to start clean

[root@app04 /etc/httpd/logs]# apachectl start
[root@app04 /etc/httpd/logs]# service httpd stop
[FAILED]

And on that note, I need food, and to shop for my daughter's birthday

good luck, thx for the help

nothing after failed?

i'm probably going to flood out for this

that certainly doesn't look like a default error that apachectl would spit out
pastebin it

[root@app04 /etc/httpd/logs]# service httpd stop
[FAILED]
[root@app04 /etc/httpd/logs]# service httpd start
[FAILED]
[root@app04 /etc/httpd/logs]# service httpd start

it looks to me like your previous admin had a field day with the apachectl script as well...

al;kfjawopicvawl;kcawl;eckmawo;fjqa

Purge the package and reinstall from a clean rpm

oh you're using service
don't use service

well, i started with apachectl

/usr/sbin/apachectl start

ok I think I have it

that's what the init.d script is trying to run

ahaan kool

what directory on disk did you put mediawiki into ?
and what directory is your DocumentRoot set to in httpd.conf

k
this problem seems to be inherent to the package
is there a way I can check to see what hte package was compiled with?

possibly... /me not a fan of distro packages...

got it
i'll paste bin it

um... not really... you can only get a general idea

sorry got dc...
i have mediawiki installed in www/wiki

no, full path

http://rafb.net/p/78cdYw39.html
yeah, i hear ya
but thats what it has

well from .srpm might get a basic idea of the compile options

its /home/galbijim/www/wiki

but not exact...

ok, and whats your DocumentRoot
/home/galbijim/www/ by any chance?

i guess...

-D APR_HAVE_IPV6 (IPv4-mapped addresses disabled)
o.O

check it

who's the dummy that did that?

in httpd.conf right ?

right

well considering I know nothing of IPv6, not me
brb

DocumentRoot /home/galbijim/public_html/wiki

well from here, i can see you have mpm prefork, some ipv6 only thing, and suexec

odd

*shrugs*

odd like?

I'd expect mediawiki to be installed to the same place
anyway, heres what I did to make it work:
DocumentRoot is /var/www/html/

this is my subdomain's Document root

mediawiki is in /var/www/html/wiki/
I created the .htaccess and put in it what the documentation says

where did u created .htaccess? inside the wiki folder or in html

from his butt

I then added $wgScriptPath = "/wiki"; and $wgArticlePath = "/$1"; to Localsettings.php
in the wiki directory

Roobarb has a magical butt

i have it in the www

well, hear me out

ok..

the settings above give the same 404 error on short URL's that you have
changing $wgArticlePath to be "/wiki/$1"; fixes it

ok... let me try ur steps

if you install mediawiki to your DocumentRoot, you probably need to set $wgScriptPath = "/"; and $wgArticlePath = "/$1";
which I shall just test

no its inside the folder named 'wiki'
cause i want to use it as subdomain

doesn't wiki have some install configuration thing?

actually, putting mediawiki in the DocumentRoot causes many other problems
so you're best off putting it in a /wiki/ subdirectory off of the DocumentRoot

$wgScriptPath = "/wiki";
$wgArticlePath = "/wiki/$1";
URL /wiki/index.php was not found on this server.
(
404

404 is Not Found

dym...

restart your browser

nop same error
this still works fine :s http://wiki.galbijim.com/index.php/Main_Page

https://www.linux-corner.info/wiki/Main_Page
https://www.linux-corner.info/httpd.conf is my configuration
my .htaccess is https://www.linux-corner.info/htaccess
and my Localsettings.php has the same 2 lins you just pasted
as a slight aside, I found that $wgScriptPath was already present in Localsettings.php

yeah i wonder why my is not working

when I boot apache and I have a SSL certificate in place, how do I set the password?
can I set the password in the ssl.conf file?
or does it need to be command line

if you have a passphrase on your key, you need to start apache by hand on the commandline - it will ask you for the password.

ok- what if the server dies and reboots, though?

the following will remove the passphrase: openssl rsa -in key.pem -out keyout.pem
most people don't set a passphrase

oh, ok

thanks
thought
though*

thanks

make sure you make the key (and cert) mode 400, owned by root:root

just remember to protect decrypted key, chmod 400...

I'm sorry I cant help you more. However, if you backup you config, then use mine (changing the ServerName and removing the SSL stuff) you should get the same results I do

hmmm can u put with a different file name so that i can copy it from ur server

https://www.linux-corner.info/httpd-example.conf

ok, cool- thanks

note that its a config for apache 2.2.x The only bit you really care about it the stuff inside the VirtualHost

ok
Roobarb you think my httpd.conf has problem ?

what I'm suggesting is that if you use the same config I do you should end up with the same results
is mediawiki the only thing you're trying to use through Apache ?

hm, generating a Client Certificate is the same process as generating the server cert/
?

mediawiki and IPB
i have 2 subdomains forums.domain , wiki.domain

more or less. I recommend you check-out tinyca - it manages all certificates, keys and CA's for you

cool, I will

block for wiki.domain

apc

Try using http://apache.pastebin.ca - It's a good pastebin, and is even set up to highlight Apache 'stuff'.

If you are still around thanks for the suggestion. The permissions weren't set right three levels up.

hehe glad i could be of assistance

oops. I kinda had to run earlier
thanks to whoever it was who gave me the split command

8 -0400] /survey.php 5 x" | sed '/[0-2]

what are you trying to do?

only display lines with a at the end

anyone mind looking at that config file i posted before?

no. i misspoke
i want to not display lines with 0, 1, or 2 followed by an a

ask the guys in #bash
my regex-foo is weak

yeah. actually i mischanned

heh

anyone know how -k graceful works ?

it schedules children to be killed once they've finished serving pages, and finished any timeouts.
it allows you to restart apache without dropping existing connections

`dear friedns!

ok... got a small issue with it

I will have a server for a week or so down, and I am looking for a way to display a web page witha warning on any connection
and redirect that web page within 8 seconds or so to the webpage that was being requested by the user in first place

I am starting several instances of apache with different flags... why when i do graceful on all of them they die except the first one?

you will lose all your impressions doing that

apache can only do part of that; redirecting to a warning page.
apache cannot push a refresh to a client - use the meta-refresh tag in html for that

and can I then have a refresh meta tag, and export the url requested by the user with apache?
anyhow?

why not add a header to all the pages with the warning? maybe have some js to hide that div after 10 secs or so?

like if it was a referrer
or so
I haven't thought about that
sounds good

you there?

I think adj's method is better

looks good indeed

if you add a 8 second delay you will lose your traffic becasue people won't stick around to see where the refresh goes

you ever done this http://wiki.apache.org/httpd/Recipes/Different_UserIDs_Using_Reverse_Proxy

no, but I've read it

anyway that I can add a peice of code (that js script) into all the webpages (not the error ones) ?

got everything working except the reload and im not sure why it does not work

I suspect the -k graceful is killing stuff be cause it doesn't realise you've started separate httpd instances

adj how would I add the header on all the pages?
not edditing them all one by one I supose...

a bash script? php include?

are you using the separate config files method?

i dont know how to do that with apache

i am using a -D to load the different parts
if i reload the port 80 public part, it works fine. If i reload the loopback ports they die.

are you using -D in the graceful ?

indeed

useing multiple -D statments?

i am doing the same thing that i did in start and stop
indeed

then I have no idea

for some reason my apachectl wont start my httpd

acid-trip: apachectl configtest

step one

acid-trip: apachectl configtest - does that say "Syntak OK" ?

whatever the problem, step one is to look in the error log (and any other logs that may apply, such as suexec, mod_rewrite, or mod_security).

Roobarb, yeah

you may have to wait for rici

7 2007] [alert] mod_unique_id: unable to

acid-trip: there you go

acid-trip: dont use mod_unique_id, unless you know what it brings to you

acid-trip: are you using mod_security ?

0 2007] [notice] Graceful restart requested, doing
could not open document config file /etc/apache2/httpd.conf
wonder if thats a jail problem

Roobarb, i dunno

oh, possibly

i think i want to go smoke before i try to fix this one... be back in a bit

acid-trip: then probably not. Look for the "LoadModule" line for mod_unique_id, and comment it out
acid-trip: look in your httpd.conf file

kk
hold on
Roobarb, now it's complaining that i commented it out
lol

I'm using Django which means I can only connect to one database. Is it possible to get MySQL to split things across different MySQL databases? depending on the query? Which is useful for horizontal scaling of users.

acid-trip: paste the error

I know it's the wrong channel but I was hoping someone here would have some ideas

Syntax error on line 275 of /usr/local/etc/apache/httpd.conf:
Cannot add module via name 'mod_unique_id.c': not in list of loaded modules
/usr/local/sbin/apachectl start: httpd could not be started

ugh, I have SSLRequire in an .htaccess in a directory- I visit it and SSL works fine, but it doesn't require a certificate- any ideas?

MattKelly sslrequire says nothing about client certificates

acid-trip: ah - you probably have another line (#275) refering to mod_unique_id - comment that out too
SSLRequireSSL

SSLRequireSSL is http://httpd.apache.org/docs-2.0/mod/mod_ssl.html#sslrequiressl

oops, I mean something like this- SSLRequire %{SSL_CLIENT_S_DN_O} eq "Organization" and %{SSL_CLIENT_S_DN_OU} in {"Dept"}

MattKelly you could have mentioned this right away....

don't you need SSLVerifyClient or something ?
SSLVerifyClient

SSLVerifyClient is http://httpd.apache.org/docs-2.0/mod/mod_ssl.html#sslverifyclient

he also wants to put restrictions on which client certs, it seems

yeah, but the first step is to even require a cert :p

hmm
Roobarb, i changed my servername and took out the www
and it works now
lol

Is there any force to force apache to show 404 error even if it was set to redirect to the home page?

Is there anyway I can have a directory hidden on http://localhost but still have pics in that directory anonymously hotlinked?

pi3 errordocument
techjimbo you can limit it to a specific IP

What about "limiting" it to all IPs?

Options -indexes

Options -Indexes turns off directory indexing. Ask me about mod_autoindex and Options for more details.

lol @ iam8up
My apologies. I've used erroneous English. As it stands, http://localhost is hiding a directory with pictures in it. Much to my dismay, I'll go to a web site where I want those pictures to show to viewers, and that website prompts for the username/pw. How can I allow those pictures to be shown on a third-party website w/o asking for authentication?

I need any URI containing "ignore" to be unaffected. I thought !^(ignore) would work, but I was wrong

techjimbo in that case, you're not "hiding" anything - you're requiring authentication
techjimbo you'll have to be specific as to what you mean by "hiding"
techjimbo nobody in the world can access localhost whatever your configuration, so you probably have to be more specific there, as well

http://localhost doesn't show protecteddirectory and also prompts for un/pw upon trying to connect via address bar
Is the hidden directory inside localhost mutually exclusive from being passworded?

techjimbo protecteddirectory is not a term I am familiar with, also, a password protected directory is not hidden in any sense of the word
perhaps you need to get your terminology straight ?

It's true my terminology is sour. http://qbertia.bounceme.net/ There is a /bag directory that doesn't show up in it's hierarchy and also prevents third party websites from hotlinking. How do I allow the latter?
any ideas?

Hi, I have a dir that is protected by a htaccess file the has "Require user foo" , now in a subdir of that dir there is a php file and i want to allow access to this file without a need to log in. is that possible I've not been able to get it working

satisfy any

Roobarb thank you that worked

hello! how can i tell apache2.0 to use always "Transfer-encoding: chunked"?

is Apache 2.2.4 and php 5.2.3 compatible together ?

yes
I don't think you do

r-chunked = 1;

when the chunking filter sees that, it'll chunk the response
there may be some unlesses in there - like, make sure you haven't set a Content-length

umm
is any of what you've just said, a configuration directive ?

nope

I have no idea what any of that meant

anyone know of a really good tutorial

i got it: i have to use "flush()" in php, and it will use "chunked" otherwise it works with content-length (non-chunked)
thx though

at least one of us understood

what distro are you using?

i am using windows XP

php

php is a scripting 'language' that is enabled by loading mod_php and AddHandler application/x-httpd-php php or http://www.devside.net/articles/php

I feel sorry for you.

Didn't I tell you to keep your comments to yourself

you never did. Nor do I care, really. You're stuck with a troublesome scenario

I'm working on getting Apache 2.0.53 to do basic auth using mod_auth_ldap, but having some trouble. I have "debug" level logging on and when I try to authenticate for a protected directory I see this in error_log: " auth_ldap authenticate: user danielstest authentication failed; URI /private [LDAP: ldap_simple_bind_s() failed][Can't contact LDAP server] ".

Hi all

All is not in today, bpat1434

using " ldapsearch -H ldaps://10.5.38.1 -x -b 'uid=danielstest,ou=People,dc=dencolo' " I can get the results of the query for my user, so I'm not understanding why it says it can't connect. Anyone worked with this before?

I'm having issues with mod_security and SVN, specifically the rules I set to allow SVN to work aren't being triggered. See: http://apache.pastebin.ca/596448

My authz_ldap.conf file is here: http://apache.pastebin.ca/596452, and the relevant lines from httpd.conf are here: http://apache.pastebin.ca/596454
the certificate in use for SSL encryption is self signed, but i've provided Apache with the base64 encoded CA certificate that signs the SSL cert in use

Hi all. I am writing an app server in tcl. It would be really handy if apache would be able to "pass-off" a request against a specific domain to a port on which a custom tcl script is listening. can it do that?

reverse proxy

reverse proxy is http://www.apachetutor.org/admin/reverseproxies

ty
i'll read up on it

hello

hi
what was your issue, exactly?

so i have this file and its location is /var/www/was/Betas/index.php
i want to be able to see it from http://localhost...
not exactly how php stuff works but i think you get the just of it

what is your documentroot set to, exactly?

not sure what that means so i dont know

documentroot

DocumentRoot specifies where apache should look for content. See: http://httpd.apache.org/docs/2.2/mod/core.html#documentroot or http://httpd.apache.org/docs/2.0/mod/core.html#documentroot or default layout.

isnt that address they give me distro specific

what address?
the link fajita gave you is distro-agnostic

/usr/www
i think i just need to know where to put the files

I need to know what your documentroot is set to.
and that will answer your question
edit your httpd.conf file, and find out.

is it possible to make mod_rewrite operate on the entire GET string rather than just the pre-? component?

rewriterule does not see the query string. rewritecond does.

oh and you can back-reference that, right?

sure
rewriteguide

http://httpd.apache.org/docs-2.0/misc/rewriteguide.html http://httpd.apache.org/docs/misc/rewriteguide.html http://www.engelschall.com/pw/apache/rewriteguide/ http://httpd.apache.org/docs/2.2/rewrite/rewrite_guide.html http://rewrite.drbacchus.com/ http://httpd.apache.org/docs/1.3/misc/rewriteguide.html

great, problem solved, thanks very much

you would typically use %1 in a rewriterule
as opposed to the usual $1

right

/var/www/htdocs which is where i thought it was initially

OK.
place your index.php file there.
then load up http://localhost/index.php

this is where it is now /var/www/htdocs/was/Betas
this is what i typed in firefox
http://localhost/was/Betas/index.php

then load http://localhost/was/Betas/index.php

yea i got nothing

what happens when you view that URL?

is there a shell command I can use to get the version of my apache install?

problem loading page

what does the error log tell you, exactly?

httpd -V

httpd -v returns Apache's version number. httpd -V returns compile settings, too.

thanks

where is the log?

error log

i dont see a error_log file

what is your ErrorLog directive set to, exactly?

its in /var/log/apache but that dir is empty

what is your ErrorLog directive set to, exactly?

ErrorLog /var/log/apache/error_log
that what your looking for?

thumbs, i have it working beautifully now, thanks again

yes.
there should be entries in there.

that file doesnt exist
/var/log/apache is empty

then you might be looking at the wrong config.
apache will ALWAYS write to the error log
try using find or locate

locate ErrorLog finds nothign
locate error_log fins nothign either

try find.

this is the comment in the file:
http://localhost/was/Betas/index.php
oops

oops is an understatement... :P

yeah emacs wont let me copy to here

i don't particularly care to see the comment in the file. I want to see error log entries

thats what im getting at...

well I don't have all day...

container, that host's errors will be logged there and not here." in reference to the ErrorLog /var/log/apache/error_log line

yeah i dont think that applies now that i read it

an easier way would be to use find to locate the file.
see man find

lol...
yeah i said that it didnt find it like 3 times

with locate.

tried that too

then I suggested you use find instead.

i tried both long before you asked

what find command did you try, exactly?

find error_log

that will not work.
you need to specify the source path
and
find / -name "error_log"
run it.

running
it didnt find anything

how the hell did you install apache?

work? I would assume this would only match the /private directory on the filesystem, but it also matches as a Location like localhost/private

directorymatch matches directory paths for a regex
that will match any directory path which includes the characters /private in that order

right, and I understand that. But .... oh okay
gotcha ... I wasn't thinking that way

This construct should work, yes? http://rafb.net/p/3UA07t57.html

does it not?

thumbs, why-yoo-eyein'-me?

order?

order is http://httpd.apache.org/docs-2.0/mod/mod_access.html#order or http://httpd.apache.org/docs/mod/mod_access.html#order also see: http://httpd.apache.org/docs/2.2/mod/mod_authz_host.html#order

don't get into it.

thumbs, Get into what?

yeah, that's the default. does it not work?

rici, Well, its not logging the denials, so let me see if the accesses are let through
Slurp was hitting me last night, about 15 times every 3-4 seconds, from over 4,800 unique IPs inside their range
About 58k hits in 24 hours

you should see the denial in the access log
setenvif

http://httpd.apache.org/docs/2.2/mod/mod_setenvif.html#setenvif just substitute your version number

ah, they're regexen
consequently, no, it won't work.
because of the ()

But .*Yahoo\! Slurp.* would

presumably
i don't think you need the .*'s either
is ! a metacharacter in pcre? i can't keep up

Yes, so it has to be escaped
9 -0400] "GET /robots.txt HTTP/1.0" 200 421 "-" "Mozilla/5.0 (compatible; Yahoo! Slurp;
I guess not

are you denying access to robots.txt?
that seems counter-productive.

No, not in this case, I just want to block the entire Yahoo crawler network, without deploying 4,800+ unique iptables rules, or even 300 /24 iptables rules

sure
if it gets an error reading robots.txt, it figures the site is all ok, so it will generate a new request
if you give it a robots.txt that says go away, it might go away

hey all I just installed the php module for apache 2.2 simply to get phpmyadmin workingI copied across the directives it asked for
and the handles

ok, and?

3 2007] [error] [client 80.177.203.164] Directory index forbidden by Options directive:
anyone point out whats wrong

Directory index
/usr/local/www/apache22/data/phpMyAdmin/

Directory index is OK

options indexes

Options +Indexes allows a directory listing to be displayed if there is no index document in the directory the user requested.

Directory index forbidden by Options directive

huh?

directoryindex

directoryindex is http://httpd.apache.org/docs/2.0/mod/mod_dir.html#directoryindex or http://httpd.apache.org/docs/mod/mod_dir.html#directoryindex

the php installer did not tell me to add that

um...

phpmyadmin *

you have to add it

didn't it tell you to put in DirectoryIndex index.php or something?

no
it gave me a block to add I can paste bin it if you wish

is there a file called index.php in the phpMyAdmin directory?

let me check
laptop# ls /usr/local/www/apache22/data/phpMyAdmin/ | grep -i index
index.php
tbl_indexes.php

index.php is &specified in the DirectoryIndex option

right, so you need to add index.php to your DirectoryIndex directive

http://www.pastebin.ca/596614
is what i got told to add

otherwise, apache will just look for index.html, not find it, try to generate a directory listing, find out you haven't allowed it, and return the error you're getting

ok
ah it worked

man I'm beat... I'll be back later, need to cash in on a quick nap

thansk guys, I really should tell the port maintainer about that

no, that's common apache knowledge.
one is expected to think when configuring apache

thumbs, yes I often think about directives I never normally have to tamper with

um...

I mess with that quite often

if you deal with php, you might want to start thinking about tampering with directoryindex
or with cgi's

as I said, this is only for phpmyadmin
I dont develop in php at all for any purpose
thats why it was not installed

if you say so.

as above so below

DirectoryMatch /private and Location /private both match localhost/private ... but which one is better for security and execution speed? DirectoryMatch gets evaluated before location per the docs, so would DirectoryMatch be the better way?
nvm, found my answer in the docs ... I overlooked it

docs++

I'm trying to install apache2 on my desktop, and was wondering if this is the place to get help.
I don't fully understand what tasks the apache server is responsible for? More specifically, how is it different than database software like mysql?

um
o.O
apache httpd's completely different from mysql
mysql's a database
httpd is an http webserver

A webserver is just a piece of software that sends people visiting site x to page x.blah1, x.blah2?

@?@

a web server serves web content to clients, i.e. web browsers

Ok.
Hello?

Hail, cad_!

what?
as far as I know, you never asked a question.

Ok. I have a very basic question - the only way that my computer can get on the internet is if I set my /etc/network/interfaces file to - auto eth0, iface eth0 inet static, address mystaticip, subnetmask 255.255.255.0, gateway mystaticip

.... um?

I'm told that this configuration is wrong, but I've tried other configurations and none will allow me on the internet.

your question is not related to apache.
perhaps #linux can help

So question 1 is, can I go ahead with installing apache if I can browse the internet

you can install apache even if you don't have internet access.

apache SERVES content. you dont need apache to surf the web

Right. But the question is whether my being able to surf the web proves that people will be able to access a properly configured server.

Yeah, I was worried about that.

just because you can get to the web doesnt mean others can connect to you

Right. How do I ensure that they can?

router

In order to access your web site behind a router, you must forward the port apache is listening on to your internal IP. Then you can access your site by pointing your browser to http://your external IP here:port. If your ISP blocks port 80, see 'port 80 redirection'. Instructions on how to forward a port using most common routers can be found at http://portforward.com

I dont mean to sound like an ass or anything, but usually people who dont have a clue how a webserver works or what it even does probably should be trying to run one

install a trojan and everyone can get to you... ;P

I know, but I figure I have to start somewhere.

I'll give you this last chance... perhaps, as imMute said, you need to learn how computers operate a little better before you install any server of any kind.
err
^^

yeah
that made no sense
heh

What does ^^ mean?

look up.

Oh, ok.

you made no sense.

that's my job

Ok, where do I go to educate myself?

here would be fine, if you don't mind sarcasm...

you can read tutorials on the net, buy good books
in order to get a useful response here, you need to ask relevant and precise questions

the worst thing you can do is expect others to just put up with your ignorance. if someone points you at a tutorial or something, read it, not skim, read

Fair enough.

yes, playing dumb doesn't get you very far in here

anywhere

Not playing dumb. Just don't know.
And to get a little defensive - I think I do understand web servers in an abstract sense. I've read a couple books. I just don't understand the apache implementation yet.

you're unlikely to grasps the entire apache 'implementation' so easily. It's a big project.
you can start by going to httpd.apache.org, and read.

ok, thanks.
What language is apache written in? Can I learn anything by looking at the source?

c mostly

Ok.

by our guest, while you're at it, fix a couple bigs for us.

Related Topic: