Hi folks I figure this is a decent enough place to ask this I own a domain that has never been added to a host

CheapWebHosting.co.nz

Hey all I have a problem with an upload-script I wrote It worked fine until I edited upload_max_filesize and post_max_size

server-side
the odd thing is that sending FF through a proxy (like fiddler2), I get the page -- it's only browser-direct-to-server

hi all

All is not in today, EX-P

im using apache2 and mod_perl. A mod_perl handler has some ajax that makes a database call to refresh a table. Somewhere the database host results are being cached, where should I look ?

hmm, that is interesting. Is that the case in both opera and firefox?

mod_cache ? I tried disabling it completely as a test, but it didn't seem to change things

9 2007] file mod_macro.c, line 155, assertion "macros" failed "? what is

and I've set the headers so the browser does not cache things
i used a sniffer to be sure the server host was sending cached results

databases have query caches - might be a source to look at

Any decent database will clear its query cache if the data has changed.

thx for the clarification: I was going off-the-cuff there...

Could be the browser cache.
Oh, you said it's sending cached results.

anyone, I'm trying to write a RewriteRule that redirects everything *except* urls to /media

just confirmed with opera (I just installed it today to test this problem). So yes, opera & firefox retrieve correctly through the proxy, but get an error directly.

Having trouble parsing that sentence, but I think you mean: RewriteCond %{REQUEST_URI} !^/media

http://mydomain.com:2345 ?

define "translate"

erm..

redirect? or proxy ?

i want to type in mydomain/mail and have it go to mydomain:port
redirect i guess

redirect = tell the client "now go to that port"

yup

proxy = "fetch data for that port on behalf of the client, without letting them know it exists"

DrBacchus, that's right, actually, but does the condition pattern take into account my RewriteBase?

if you want to redirect, do :

redirect will be fine

Redirect /mail http://mydomain.com:2345/

Hmm. No matches for that, gryzor.

be quiet

shutting up

hah
that easy eh..sweet

can you get to any ssl hosting site with opera or firehox directly?

he i was digging through mods and stuff.

You didn't mention a rewritebase.

s/he/here/

If there's more to the story, I need to see the whole ruleset.

yes

DrBacchus, there's a rewritebase

Yes. So I'd gathered. What is it?

this problem happens with any machine, not just mine.

Is this in the main config, or in a .htaccess file?
If a .htaccess file, which directory is it in?

DrBacchus, RewriteBase /testing, it's in a .htaccess file, in a directory that's aliased to /testing
DrBacchus, I just added the base to the rewritecond and it's working now, but it'd be nice if it considered the base on its own

I'm stumped, any chance I could have a peek at the capture? The packets, they do not lie.
apc

Try using http://apache.pastebin.ca - It's a good pastebin, and is even set up to highlight Apache 'stuff'.

can anyone even hear me?

A directory that's *aliased* to /testing?
I think you lost me somewhere.
I saw your question, yes.

so, i've tried 3 different ways to get it working
all i need to configure php host version per vhost group, or at least per-vhost, without using the .php4 and .php5 extensions. is this even possible?

DrBacchus, it's okay.. your solution works once I modified it to account for the "base"

i've got php4 and php5 both working with fcgid

DrBacchus, thanks

http://apache.pastebin.ca/559579

for over 200 different hosts. Without creating a virtual host tag for each one, is it possible to write to different log files based on the virtual host specified?

look into mod-macro
i just discovered it

I said I saw your question. I didn't say that I know the solution.

you'd have to still do a bit reconfiguring
i know . do you think it's possible?

I think maybe you can use an AddHandler per vhost, but I'm not sure what you mean by "vhost group"
And I've never used mod_macro.
What's a "vhost group"?

well, mod_macro didn't help
it's something i made up

Anyways, %{REQUEST_URI} is unaffected by RewriteBase

i wanted to do it per-folder

is for.

as the case may be.

yeah that's not so useful without the payload, why dont you see if you can find ssldump. it will do a better job of decoding the ssl negotiation

right. well...i wanted the directory of Included files, not served files

I'll work on that and paste the appropriate output as soon as I have it.

DrBacchus, right, I thought it did, and I was wondering if there was anyway for REQUEST_URI to ever be affected by the base, because I would then have one less line to edit should my "base" directory ever change, which happens quite often actually

excuse

Flat tire on station wagon with tapes. ("Never underestimate the Bandwidth host of a station wagon full of tapes hurling down the highway" Andrew S. Tannenbaum)

heh

sneaker net!
high latency, but sweet throughput

Depends on your sneakers.

and what type of cart you utilize.

That's cheating.

that's what sneakernet is all about!
all our carts are busted...its annoying.

o_O

hmm, still no luck. my vhost: http://pastebin.ca/559621

block referring to the documentroot.

folks i need a rewrite rule to rewrite mysite.com to www.mysite.com

oh.
ok, thanks, i'll try that

how can I edit my apache config file?

(not all on one line, of course), but it didn't help

with an editor?

use the editor of your choice (vi, pico, nano, emacs, etc.)

you can try a hammer, but I doubt you'll be successful

The removehandler isn't necessary. I'm not sure what 'php-script5' means - I wasn't aware of that as a valid handler name.

i have a line "Action php-script5 /cgi-bin/php5" earlier in my apache2.conf (i'm running php5 with fcgid)

Ah. I didn't know that.

hmm, now i broke it comlpletely, whereas i had it working globally before. grrr

I'm not certain exactly what is happening, and how it differs from what you want happening, but it's becoming clear to me that I only have a small part of a larger picture. Perhaps I should get my grubby fingers out of it and go homw.
home, too.

well, i guess i'll have to keep playing
i have to go home soon too

blocks is the say to go.

However, if you also have an AddType hanging around somewhere, it may very well be messing things up.

right. that's what i'm trying to get working
no addtypes

Or, if you're on Debian, and they have that wretched php entry in the mime.types file
Which is an abomination.
1, and I am
And there's not much better in life than being expected.
So I must leave.
ttfn

aaah! wretched typo!

http://apache.pastebin.ca/559666
the details of the SSL handshake

aha! i gotit working
yay me!

that looks fine
well accept for the FIN before we ever get a request, hmmmmm
we should see some "application data" before that FIN

so would this be a firewall problem then?
(I'm not in control of the firewall, so if it is, then I'll put it squarely in the security guy's lap )

I dont think so, after that last handshake we should see application data. Thefact that it workswith IE, or when forward proxied with fiddler says it is not a firewall issue
I think the client and server are not agreeing on a cipherspec

would that be the meaning of this: cipherSuite Unknown value 0x39

that's normal. I dont know exctly what it means, but I am used to seeing those in cheap ssl transactions
well, I'm used to seeing 3 of those. You have 5. That could be it.
I'm sure it has do do what what ciphersepcs your client is claiming to support

would the version of the openssl libraries installed have anything to do with it?

SSLCipherSuite

SSLCipherSuite is http://httpd.apache.org/docs-2.0/mod/mod_ssl.html#sslciphersuite

what does your SSLCipherSuite line look like?

SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL

hmm that's fine

on Firefox, it's using SSLv3 I think

yeah, v2 is kinda worthless, but it doesnt hurt to support it

IE is using v3 so that's not the problem

yeah everything should be

would the openssl version affect anything?

yeah, it could, when did the problem start?

day one
this is a Solaris 10 Sparc machine
the packaged version of OpenSSL installed at the moment is:
11.10.0,REV=2005.01.21.15.53

could you capture a working connection with ssl dump and see what cipher it settles on?

certainly

I'm upgrade that openssl pkg, that is really old
er i'd

TLS_RSA_WITH_RC4_128_MD5 is what was settled on
by IE

If it were me, I'd update openssl server side. If that does not sort it out, we'll have to consult the RFC and refresh my memory on ssl certificates negotiation
I'll go do that, but I need some wake up juice first, brb

oi oi, folks.
I got some files without extension... graphics files to be more precise, and they can be JPG or PNG. Is there a way to tell Apache to look at their headers before sending them, so it can send the correct MIME information?

Here's a quick one- If you run apache with a port higher than 1024 or something, it doesn't run with root privaleges or something? I thought that even if you ran apache as root, it runs itself under its own username. Can anyone straighten me out?

You need root access to start/stop/restart the Apache process, but that doesn't depend on the port. (I think.)

mod_mime_magic
iirc

And you are right, even tho one starts that as root... the process itself will be owned by www-data or whatever.
Ah, rici, lovely... was looking at some other MIME mod, but that seems to do exactly what I need, thanks.

I see, so it doesn't matter if it's started as root because it immediately runs under itself and drops all root privaleges?

Not true, non priv users can run apache and bind to ports above 1024
really it depends on how the ystem is confgure ultimately though

Aha, what arreyder said, then.

was trying to forward all requests of port 8080 to port 80, any ideas how to do this?

So a normaluser could start apache if it's run on port 4545 or something?

I now recall reading something like that, yeah. Sorry.

yep if the system is in a somewhat normal config yeah. some people tweak port restrictions so nothing but root can listen

Because the thing is, I have apache starting above 1024, and from my normaluser account, I can't start it

and I have no idea how mac or windows handles high ports

Linux here like most

mac os x is a unix

keep in mind, apache still needs the right to log and read files on the directories you have it configured to use

Used to be based on one of the original unix kernels

i mean, it handles ports the same way

Ah, I see- so better off running as root anyway if I have root access. Doesn't matter security-wise because apache drops root privalages, right?

your normal config may be trying to do things that require root, adjust it. also it may still be trying to become another user on start up. you mightneed to chaneg that behaviour as well

Got it, thanks

I know, but I thought perhaps it had restrcted binding to high ports. apple tends to be more security concious
does it?

Or doesn't it?

problem solved

not as far as i know

I owe you a beer for all your help. Thank you a bunch.

yes, only one master process wil remain running as root
ssl version?

yep

cool, sorry should have thought to ask that earlier

I should have caught that in the build process initially, but didn't. I'll not forget that one

you do have to enable the ports in the firewall, but it will allow non-root programs to bind to them.
root programs don't bypass the firewall, so it's two separate things.

thanks, good to know.
I really need something to run OSX on.

hello. i have a newbie question using 2.0.x. does apache cycle through every content handler that is set, regardless of the which "Location" sets it?

i configured everything in apache but i still need to put dom.ain.org:port to be able to connect, is there a way i could remove the port?

use port 80

thumbs, it's blocked

then you can't
router

In order to access your web site behind a router, you must forward the port apache is listening on to your internal IP. Then you can access your site by pointing your browser to http://your external IP here:port. If your ISP blocks port 80, see 'port 80 redirection'. Instructions on how to forward a port using most common routers can be found at http://portforward.com

i'm using 8080

port 80 redirection

port 80 redirection is If your ISP blocks port 80, visit http://www.afraid.org, obtain a free account and use the 'Web Forward' section on the left to point a site within their list of domains to your original site, including the port (i.e. http://foor.bar:8181)get a better ISP

that's your only hope

oh
okay..
thumbs, then i got another question

you should ask it.

cd /trac
crap

thumbs, the place where http files should be stored at default is /var/www/index.html is there a .conf file i could change the location of the folder to my own choice?

you seem off-trac
teeheehee
documentroot

DocumentRoot specifies where apache should look for content. See: http://httpd.apache.org/docs/2.2/mod/core.html#documentroot or http://httpd.apache.org/docs/2.0/mod/core.html#documentroot or default layout.

s/folder/directory/

thumbs, where should i point that?

where you want to host your files, perhaps.
what do YOU think?

thumbs, of course lol

got any more easy questions like those?

thumbs, but is apache.conf is the file to change in?

that depends on your distro
default layout

Pop along to http://wiki.apache.org/httpd/Info/DistrosDefaultLayout for an idea on where the main distros place Apache files.

thumbs, i'm using ubuntu

read the link.

thumbs, thanks

no worries.

bzzzzzzzzzzzzzzzzzzzzzzzzzz

hi
i got little problem with apache reinstall

do you?

yes
9 2007] [warn] module authn_file_module is already loaded,
i get list of files that modules are already loaded

so don't load it twice

how can i stop them loading ?

comment out the LoadModule line

httpd.conf ?

httpd.conf is the main Apache configuration file. By default it's located at /usr/local/apache2/conf/httpd.conf /etc/apache2/httpd.conf /home/httpd/conf/httpd.con C:/Program Files/Apache Group/Apache/conf/httpd.conf check 'httpd -V'

that depends on your distro

ubuntu 7.04
it worked like charm until today :/

default layout

Pop along to http://wiki.apache.org/httpd/Info/DistrosDefaultLayout for an idea on where the main distros place Apache files.

read that page

ok ty

If you go to http://site.com/index and it loads http://site.com/index.php what does that?
I assume it has to be an apache module...anybody know which?

mod_rewrite? mod_speling?

It's not mod_rewrite...there are no rules here.

those are the two that came to mind for me, idk really

redirect

redirect is http://httpd.apache.org/docs-2.0/mod/mod_alias.html#redirect or http://httpd.apache.org/docs/mod/mod_alias.html#redirect or see 'Redirect Context'

So redirect does that by default?

nope but you can tell it to

Well mod_rewrite

mod_rewrite is http://httpd.apache.org/docs-2.0/mod/mod_rewrite.html or http://httpd.apache.org/docs/mod/mod_rewrite.html or see http://rewrite.drbacchus.com/

mod_negotiation on Options MultiViews

Yes, but it's doing it by default

s/on/and/

Ah that's probably it noodl

"mod_negotiatiand on Options MultiViews" eh?

hoi cythrawll. any news on mod_transform? has urkle looked at it at all?

thumbs, can u check http://paste.ubuntu-nl.org/25166/ ?

typo.. mod_negotiation *and* Options MultiViews

it is loading now same modules twice after i did reinstall

I'm REALLY going to try this week. Honest

http://apache.pastebin.ca/559850 can someone look at this?

nah my work pulled some crap on me and when I thought we could look at other solutions for what were doing is gonna have to wait

yep that did it

oh hey, didn't mean to ping you but ok, ping me if there's anything i can help with

they just rearranged the departments and now I'm in a completely different department.

thanks noodl

it's telling me ExecCGI is off when it's clearly not (2.x, btw)

so it'll probably get revisited soon

nod, I was just applying your s///

heh

but atleast it'll give you guys some time to work on it

grep your config for LoadModule
you're loading your modules TWICE.

I'm pretty much quoting the o'reilly's here, too

i c

and potentially have a duplicate Listen 80 directive as well

should i check for that in httpd.conf ?

I said grep your config
grep it recursively too.
if you read the factoid, you would know where to look too.
default layout

Pop along to http://wiki.apache.org/httpd/Info/DistrosDefaultLayout for an idea on where the main distros place Apache files.

this is way out of my knowledge :/

you can't use grep?

sry m8, i am new to apache

grep is not an apache concept
it's a basic unix command

same :/
got stuck on ubuntu month or so

where is your server admin?

how u mean that ?

in short, debian/ubuntu does NOT use the httpd.conf or apache2.conf file. do NOT put ANYTHING in it.
who is managing your server?

me :/
and i put in httpd.conf :/

don't

and after that all messed up

don't
default layout

Pop along to http://wiki.apache.org/httpd/Info/DistrosDefaultLayout for an idea on where the main distros place Apache files.

so right place would be apache2.conf ?

I don't use debian enough to know

i c

I just know it's NOT IN THE HTTPD.CONF or APACHE.CONF
as I said 3 times now

yes sry m8

what are you looking for?

trying to get apache back up after disaster when i messed with httpd.conf

just remove whatever you added in httpd.conf
it doesn't belong there.

ok will do now

/etc/apache2/apache2.conf:Include /etc/apache2/httpd.conf

ooh! found it. gentoo put the default site in a vhost in another file

another nice distro package.

OH
* Forcing reload of web server (apache2)... httpd (no pid file) not running
[ OK ]
root@atila:/etc/apache2#

ok, good.
now learn more on how the package is laid out before you edit it.

this was easyer then i messed it up
yes sure i need to
i was using lamp on windows b4 and decided to move to real deal , so this is heavyer then i thought but intresting
tnx a lot thumbs

you might want to pick up a good linux book too - those shell skills is indispensable.
s/is/are/

yes, i am learning slowly

all this heavy lifting will make you stronger

*umphf*

http://tldp.org/ --- good stuff, things linux
cheaper than a book

nice tnx

thumbs, i'm back but with an issue

uh-oh.

thumbs, i changed in /etc/apache2/sites-available/default the /var/www/ to my/folder/here it was a flash when i turn off or load the apache it still access it and even if i change that /my/folder/here/ to and other one it still loads the old one

slow down.
run apache2 -S, and pastebin the results.

http://apache.pastebin.ca/559923
thumbs, notice apache is off now

I suspect you broke this rule:
faq1

exactly. For example, NameVirtualHost *:80 must be used with VirtualHost *:80

thumbs, O.o
thumbs, and what should be done now?

make sure your vhost definitions match the namevirtualhost definition.
did you understand fajita's sentence?

thumbs, yeah i did, but don't know what i've done wrong rather than i changed in documentroot /var/www/ to a different folder

are you listening to me? at all?

thumbs, yes i do

your vhosts seem to be misconfigured. Namely, the VirtualHost and NameVirtualHost lines HAVE TO MATCH. Make sure they do.

thumbs, by vhost you mean /etc/hosts?

no.
your vhosts are NOT located in your hosts file.
they are defined in your apache config files.

Are rewrite questions good in here?

shoot, it's always better than arguing with that guy

I'll pastebin my config file and then ask my question ... just a sec.

sounds good.

http://apache.pastebin.ca/559935
The first three conditions work fine.
I want to have a default favicon.ico if a file called favicon.ico does not exist in the root directory.
I have a feeling that last condition is just plain not even in the same playing field.

give me a second, please.

sur
e

all right.
I feel like your rewriterule is incomplete, harleypig

I wouldn't be surprised ... I'm flailing in the dark as far as this is concerned.

perhaps this is how I would approach your issue

If the request is *not* for images.harleypig.com, the filename is favicon.ico and the file does not exist, then redirect them to images.harleypig.com/favicon.ico.

if the ^/favicon.ico file does not exist (! -f)
then rewrite it to a known good location.

I didn't know you could use the file test that way ...

why do you need to evaluate the hostname at all?
if the file is not there, it's not there.

Because I have blog.harleypig.com, wiki.harleypig.com, etc.harleypig.com ...
Some have their own favicon.ico, others are using a default favicon.ico.

basically
if (rewritecond) the URI is ^favicon.ico
AND
the file does not exist (! -f)
THEN
rewrite it to a known good url.
are you following me?

oh, i see ... it should exist in images anyway (it's a known good location) then I don't need to check the domain.

exactly.

you betcha

So ... RewriteCond ${REQUEST_URI} ^/favicon.ico (! -f)

you need to chain two rewritecond

Two separate conditions.

one if the URI matches, and one if the file does not exist.
THEN use a rewriterule.

Hi folks, I figure this is a decent enough place to ask this. I own a domain that has never been added to a host before and yet when entered into the address bar takes the user to a site not owned by myself. The whois informs me it is still under my ownership and the DNS points to my registrars default zones. Any insight into why this might be happening?

DNS poisoning?

But the uri needs to be rewritten ... if blog.harleypig.com/favicon.ico doesn't exist then they need to go to images.harleypig.com/favicon.ico ... doesn't RewriteRule ${HTTP_HOST} images.harleypig.com do that?

not completely.

No clue what that is unfortunately.

the registrar is parking it for you?

injecting fake hosts into DNS servers.

fair enough ... what am I missing?

Yes harleypig.

if you use a full redirect, then the proper hostname will be used in the end.

I don't really know where to start, but the domain is faerris.com

i think you want to do a redirect in that case

[R,L]

Rather, http://faerris.com/

agreed.
that was my approach.

personally i'd just copy the favicon into each site.

hi rici. did you see my message earlier today regarding spanish speaking docs reviewers?

oh ... interesting. I have no idea.

my DNS resolves it, and brings me to Marcel &c
contact the DNS server admin for that site.

I want it to be automatically available when a new subdomain is created.

Yeah thumbs, that is not my site.

try my solution.

k, well yango is doing some work on translating the docs and needs a native speaking reviewer. do you know anybody with the time and knowledge to help out?

i'm not a native speaker, but i could see if i could find one.

[R]

[R] is a redirect

http://www.linkedin.com/in/marcelk

there are a lot of docs iirc
it would be a serious time commitment

Oh ... so RewriteRule http://images.harleypig.com/favicon.ico [R]

not the domain owner, the DNS server that holds faerris.com at the moment.

Yeah that's Gandi.

something like that.
the admin of that server will be able to help you.

Right, thanks thumbs.

yeah, it would be. the trouble is usually coordinating the time.. many times people show up on docs@ offering to help, don't find anyone else who can and wander off again

rewriterule ^/(.*) http://images.harleypig.com/favicon.ico [R] (slightly overkill)

good evening

if it is a good evening, which niq doubts

folks, how do i enable access to a certain directory _and_ its subdirs? I get "client access denied" on a subdir

what does the error log tell you, exactly?

sec
client denied by server configuration: /home/admin/work/ocaml/cocanwiki/html/_repos/mnesia/.hg/

client denied by server configuration

Have a look at http://wiki.apache.org/httpd/Errors/ClientDeniedByServerConfiguration for a better idea of what this error message means

thanks

huh?

the thing is that i have this as well

...but thing is im gettin this sporadically, for example when i turned froyd's machine on this morning it was fine because froyd's mysql was responding at froyd's domain name...

Location /_repos
ExpiresActive On

i'm not following you...

ExpiresDefault "now plus 24 hours"
Order allow,deny
Allow from all

Order allow,deny is The Allow directives are evaluated before the Deny directives. Access is denied by default. Any client which does not match an Allow directive or does match a Deny directive will be denied access to the server

Options +FollowSymlinks +Indexes

Allow from all is a whorehouse, innit?

/Location

this channel is NOT a pastebin

mea culpa

you made a mess, and it's unreadable.
try putting it in a pastebin.

http://apache.pastebin.ca/560049

that is not the proper segment.

i have "allow access" on the parent dir

what?

proper segment?

block, not location.

the one immediate parent.

i don't have a directory block

you need one.

will override it.

and that will deny access.

i seem to be able to do without. with a bunch of location-s

without seeing your whole config, it's hard to say.

hehe

are you suggesting that i replace that location with directory?

is there a particular reason why you want to use location?

i don't know better

then use directory

I'm trying to compile Apache 2.2.4 (httpd) with VS2003, but it gives me "error returned with rc.exe". I even applied the perlscript path for 2005, but the problem remained. any suggestions?

heh, good luck
compilign on wintendo is a PITA.

hahah good one
wintendo

Wintendo is Microsoft's idea of an OS. Good for gaming, terrible for anything else.Wiindows'http://en.wiktionary.org/wiki/Wintendo

in all seriousness.

thumbs ... it's not even good for gaming

I touched VS once... and I got scared.

it's just that DX won the heart of lazy and nubish programmers

I am not even sure we have VS users here.

so it automatically became the perfect platform for gaming

perhaps

and why did it win their hearts you might ask?
Tutorials, good documentation easy for lazy people

your VS compilation question is probably gonna remain unanswered here

i replaced location with directory but still get the same error

thumbs? perhaps ... I'm willing to bet my entire savings on it

what directory did you specify, exactly?

perhaps*?

the bit in paste. i just replaced location with directory.
left everything else the same

then that is wrong. /_repos can't possibly be a real directory.

i have it under my docroot. should i move it up and specify the full path to it?

thumbs ... 1 thing worse than Windows... Cygwin... a true pain in the bottom

block.

had any luck in the windows forums?

Hmm .. I actualy looked it up on the forums.. haven't really posted
I got the VS2005 patch
and applied it ... apparently it solved nothing

thanks

sure, let me know how it goes.

I could do either of 2 things ... get vs2005 or post in forums

the last version I used was VS6Entr
it was terrible

it probably works fine with that

ok then, give that one a try?

+ MS developer SDK or something

better now, i think. question... how can i allow access to a dir outside of the docroot while at the same time letting people access it as /_repos?

if you showed me a makefile, I could probably fix it.
a unix one, that is.
alias

alias is http://httpd.apache.org/docs/2.2/mod/mod_alias.html#alias

sigh ... it'll be a bitch to uninstall vs2003 and install that ...

perhaps pctony can help?

thanks

he's quite skilled in that department.

who is pctony?

pctony is my new daddy! That's three daddies now!

one of the helpers, as I am.

thumbs ... quite honestly I've been planning a move to Linux for some time now
Gotta move some of my project to GLX dependant state
then I'm good to go

right

thumbs , you use GNU/Linux ?

exclusively (at home)

Distro?

what distro are we dealing with here?

I run slackware.

thumbs ... it might sound funny but ... I've fell in love with a Knoppix HDD installation
damn it comes with everything

your choice is as good as mine.

some suggest Suse, some redhat
most Ubuntu :/

I will not tell you my distribution is better than yours.
However, I will tell you this

what's the highlight of slackware?

the apache packages shipped with debian/ubuntu are terriblibly deceiving, and disorganized
stability, simplicity, speed

and since Knoppix over Debian ... apt is going to rape me

and easy of upgrading (less dependencies)

does it have a 'ports' type of thing?
or similar

no, you 'rsync', then upgradepkg *.tgz
it's achieved in one command either way.
or you can use slackpkg, or many alternate methods
over the years, veteran users wrote very handy scripts

mhm

been racking my brains for a week straight looking for a solution to something may prve very trivial to one of you. Is anyone home?

question

If you have a question, please go ahead and ask it. We have the answers... or a whole lot of sarcasm...

rofl kk
(just migrating from win2k3 r2 IIS6 to linux/apache)

hey guys. I'm writing an API for our web service. I have a "dispatcher" that gets called as follows:
http://mysite.com/api/rest?method=vg.printHello

So I have my server running.. it's with the virtual hosts... created a couple virtual hosts no matter what domain I try to call in the browser, they both pull up the first virtual host I created.

he method indicates which script should run. I am using mod_perl2, and my question is: is it better to do an internal redirect to call a url that executes a script, or is it ok to just call the script's method from the dispatcher.
I'm worried if I do the latter, that apache won't create enough instances of the dispatcher to handle many simultaneous requests. Is this correnct, or am I just being paranoid?

faq1

exactly. For example, NameVirtualHost *:80 must be used with VirtualHost *:80

both of my vhost entries are VirtualHost *:80....

what does the factoid say?

ah anbut the namevirtualhost is my ip:80
kk

when i try to load a .php my browser expects me to d/l other then view it

thumbs ... I got what I was trying to get! ... I needed libhttpd, libapr and libaprutil to compile a custom module ... I dl'ed the Win32 bins and used those libs and also combined the include dir for the bin package with the include dir of the source,libapr and libaprutil for some missing headers ^_^

so, the first virtual host entry would be the default handler for unallocated requests right?

the file has a question mark by it

allllllright.

what do i need

faq3

faq3 is If you have recently installed php and are seeing your browser offering a download, first flush your browser's caches via the menus and restart it

are you usign debian or ubuntu?

debian

debian is one of the worst offender see "debian config" see "distro layout" see /usr/share/doc/apache*/README.Debian* or http://wiki.apache.org/httpd/Platform/DebianLike

debian php

debian php is here http://wiki.apache.org/httpd/ScratchPad/DebianPHP

that's correct

hehe ... 1 helova hack

if they used AddType instead of AddHandler, clearing the cache would not be necessary.

indeedy. still, that often fixes the problem for people who've tried requesting php files before having enabled php
ff caches the dud type

errm
reverse AddType and AddHanlder

if that doesn't work i generally lose interest. there's only so many times i can stand fixing debian's mess

the handler would bypass the client cache.
the debian php wiki works well enough in those cases

if they didnt have the php
pfft
if they didnt have the php 'type' in mime.types then they'd get DefaultType instead, and no download dialog
enable php

granted
the mime types hack is horrendous.
debian--

given that this question comes up at least 10 times a day, we should really come up with a doc to deal with it

addtype?

addtype is http//httpd.apache.org/docs-2.0/mod/mod_mime.html#addtype or http://httpd.apache.org/docs/mod/mod_mime.html#addtype or should NOT be used for things like PHP and CGI - that's a _very_ old and grotty hack, and anyone advocating it this century needs a clue or see http://www.devside.net/articles/php

the debian php wiki?

good enough for me ^^

that devside's too verbose, frankly. unless you already know apache it just goes over the head, imho
*tht devside article's

you may have a point.
http://wiki.apache.org/httpd/ScratchPad/DebianPHP is missing ONE item
it should suggest to remove the entry from the mime.types

phone..

Using Linux, if I have mounted an external usb drive to xfer files to the /home/virtualhost/public_html directory, as root, will I have to chmod the xferred files?

depends on your default umask

probably

probably is the same as 'definitely not' when dealing with important or critical applications - if you're not sure, don't let 'probably' suffice

if I want to set user password for entering in my site with ".htaccess" how I reconfigure my .htaccess for all valid users aaccording to this article? http://www.linux.org/lessons/interm/c1685.html

htaccess purpose

Don't confuse htaccess with password-protection. The purpose of htaccess is to enable users to configure apache locally for their own directories, when they have no privilege to do so in httpd.conf. Using htaccess slows the server. Also rewriterules and redirects are more complex in htaccess

htpasswd

htpasswd is http://httpd.apache.org/docs-2.0/programs/htpasswd.html. A utility for creating password files for use with Basic authentication

container

yah
ah hrm... o.O

hi all. Some help with mod_perl please. I'm trying to get TWiki running, but Apache won't start with the conf file settings as per TWiki. I suspect the prob is with the Perl Module. How do I check whether perl worls correctly?

megaspaz you mean that I have to pass all the usernames and paswords o my system in .htpasswd conf file?

anyone familiar with webmin + virtualmin?

something like that... you use the htpasswd binary to append new users to an existing htpasswd file...
you could of course use something like ldap for system users...

ldap?

Take a look at http://wiki.apache.org/httpd/Recipes/UseLDAPToPasswordProtectAFolder for an example LDAP configuration

is this proper? Rewriterule ^/WebObjects/Info.woa/wa/Query/accountInfo /ai.php

looks fine to me

mod_auth_pam

mod_auth_pam is a module that requires access to one's system password file. http://pam.sourceforge.net/mod_auth_pam/ recommends the use of mod_authnz_external as mod_auth_pam is no longer developed/supported

hmm, or maybe not
mod_authnz_external

mod_authnz_external is http://unixpapa.com/mod_auth_external/ also see pwauth

looks trivial to use that with pam (and therefore systems aacounts if they already exists) for access controls

ok, got it figured
bye

take care, hon

excuse

secretary plugged hairdryer into UPS

ouchies!

agreed. a sed -i ought to be able to remove any lines from mime.types containing php, right?

how do I enable https

mod_ssl

mod_ssl is http://httpd.apache.org/docs-2.0/ssl/ or http://www.modssl.org/ (for 1.3) or http://httpd.apache.org/docs-2.0/mod/mod_ssl.html or http://cvs.apache.org/~mads/ac2004/MO18mod_ssl.pdf or see mod_gnutls for an alternative

SSLEngine On

SSLEngine On is indeed valid directive in 1.3.x

SSLCertificateFile

SSLCertificateFile is http://httpd.apache.org/docs-2.0/mod/mod_ssl.html#sslcertificatefile

SSLCertificateKeyFile

SSLCertificateKeyFile is Ghttp://httpd.apache.org/docs-2.0/mod/mod_ssl.html#sslcertificatekeyfile

and maybe even...
SSLCACertificateFile

SSLCACertificateFile is Fhttp://httpd.apache.org/docs-2.0/mod/mod_ssl.html#sslcacertificatefile

fajita, ssl tutorial

ssl tutorial is http://www.vanemery.com/Linux/Apache/apache-SSL.html but look out fot the typos

t0ny-p40: ^^

I think I have something to offer to the community! modbwwin32.sourceforge.net (it'll be up after sf's done reviewing it)
it's mod_bw ... but made superbly easy to compile and regularly updated so that Apache users with Win32 can easily use it (source + latest apache bins)
mod_bw is a module for bandwidth shaping for Apache (modbw.sourceforge.net)

bandwidth

bandwidth is see netnice mod_bandwidth mod_throttle mod_bwshare mod_cband mod_bw mod_tsunami mod_evasive mod_limitipconn/please share your experiences with any of these

great, now go do the rest.
chop chop!

I know all those mods
but there's just one problem
Their bins for Win32 are not really maintained by anyone
and you know how much of a b%^&h it is to compile these under Windows
unlike Unix where you have the sweet sweet apxs

nah I wouldnt
never tried, not really into pain.

and the thing that bothered me
IIS inherently has bandwidth shaping
But Apache under Windows (which is far more superior) doesn't have a counterpart

apache on linux, or bsd does as well, via the OS

well if you're on unix , dummynet with ipfw is the waaaaay to go =D
but Apache under Windows doesn't have any place that has , let's say, mod_bw.so regularly built for new and upcoming Apache release
so that admins don't have to deal with the horrors of installing Visual Studio or compiling custom modules with it
I'm providing this so that a Windows admin (-- I know how foolish that sounds) can just download the module and have fun!

greak
great too

but seriously ... Bosses are tyrants ... if they say 'Do Windows' you can't say 'well unix cut costs'

yes, catoring to the windows mentality
im sure it will be appreciated

they'll say 'well I'll cut costs by firing you if you don't do Windows'

we have some holdouts in my org than still run it on win32
I'm sure they will be delighted

^_^

easily.

Hmm. ATM I have php running as cgi with suexec. It works good. I was wondering how I could get everything else to run under a different user too...

not a well supported one, perchild/metux MPMs

is it possible, via .htaccess files, to create a global auth usr/pass config with exceptions for certain directories?

that does not work
not on this bsd system.

CaT[tm]: no, you can't

drat and blast.

CaT[tm]: the 'config' you will create will be limited to the current directory your htaccess file sits in.
CaT[tm]: and you can't include files within htaccess

yeah. and having a .htaccess with auth stuff deeper in the tree does not override the earlier one.

CaT[tm]: the solution is not to use htaccess in the first place

yeah. it's an annoying, inconveniant solution.

it's never a scalable, long-term solution
you should only use htaccess if you don't have access to the main config.

i'm not using it for anything that's under heavy use.

yet you can use the main config
and yet you choose to use htaccess files
CaT[tm]: are you askapache in disguise?

hehe
no. I'm not the one who writes the webpages and I don't want to be constantly annoyed by minor changes here and there.

waaaait a minute
htaccess deeper in the directory should override the earlier one no ?
it doesn't ... ?

they're added, with the later ones overriding where permintted

no. Since auth only applies to a specific directory
some directives might work that way. Not auth.

So htaccess for foo/ doesn't apply to foo/bar
ahh

Options is one of them

You mean like Basic Auth etc.
umm ... Basic Auth for foo/ also applies to foo/bar/ ?

yes.

I would have guessed so

goodie

if a parent directory is protected, every child is too.

yeah .. should be

hello

however, protecting child directories using htaccess files in parent directories is a mistake.

why so?

it should be done in the directory in question
it introduces spaghetti-like directives that are hell to diagnose.

so foo/ and foo/bar/ should both have maybe an identical .htaccess ?

how can i make apache list all the files in a folder?

no
Option +Indexes

excuse me?

Options +Indexes

Options +Indexes is If a URL which maps to a directory is requested, and the there is no DirectoryIndex (e.g., index.html) in that directory, then the server will return a formatted listing of the directory.

if you wish for bar to be unprotected, then place a htaccess with satify any in it.
in that subdirectory, that is.

oh ... nevermind I was thinking about securethis/importantdocs/ kind of thing
so securethis is protected

of course it is.

and importantdocs should be
so that's great

Unless you unprotect the subdirectory.

I shall never do that
pubstuff/ should not be in securethis/

a good design would entail that, yes.

did i explained my self?

I answered you.

where?

Options +Indexes

oh!

you also need a module loaded for that as well Mergar
which I think is automatically loaded
mod_dir or something

mod_dir

mod_dir is http://httpd.apache.org/docs-2.0/mod/mod_dir.html or http://httpd.apache.org/docs/mod/mod_dir.html

i thought fajita was sombody else :p

fajita is a bot

bot

I am a bot. I am not a sentient being. I cannot hold intelligent conversations.

apparently a useful one at that
yeah mod_dir should be loaded by default in httpd.conf
LoadModule mod_directory mod_dir ... or something like that

loadmodule

loadmodule is http://httpd.apache.org/docs/2.2/mod/mod_so.html#loadmodule

thumbs, 403 error

what does the error log say, exactly?

He said 403 error on the link methinks
oh wait no

hey guys,

yes?

If I want to have a url one my site, www.example.com/image45219.jpg really pull up a similar url on another site like www.affiliate.com/my_new_image45219_for_you.jpg but still have the url to the end user access my site look the same with no indication of it changing to the user, how would I do that

you know I'm dying to install SpamAssassin on the BSD server ... but I just refrain from doing so for some reason ... spam mail makes me more confident that the server's up and running

lol

thumbs, don't have access to the logs

use mod_rewrite

well if you decide to go that route I would go with dspam plus some good known blacklists like zen.spamhaus.org

rewriteguide

http://httpd.apache.org/docs-2.0/misc/rewriteguide.html http://httpd.apache.org/docs/misc/rewriteguide.html http://www.engelschall.com/pw/apache/rewriteguide/ http://httpd.apache.org/docs/2.2/rewrite/rewrite_guide.html http://rewrite.drbacchus.com/ http://httpd.apache.org/docs/1.3/misc/rewriteguide.html

thanks thumbs

then ask your admin

hello there, I would like a virtual host, that when you enter just the ip address, that it jumps to that specific virtual host. How would I do that?

sleeping

sleeping is GOOD

Mergar /var/log ?

ok. Come back when he's available.

or ...

without an error entry, we can't do anything.

CDocume.....something or other ....\apache2\log ?

bak, server is running debian

then /var/log

yes i know :p

wait
CProgram fi.... something ...\apache2\log
more like choly ******* **** it's too long\somewhere_useful

he's not on windows.

I know
was just making a point

hey bak, whats the weather like in my hometown today?

humm
Canadian?

Canadians like doing things differently

Or did you just trace me or something
Well the weather's fabulous
soo dang perfect

bak, I am from toronto

yay
sup?

noodls karma

and yeah, I have a friend that has a similar name so I did a whois

fellow Torontonian

your not him but I recognized the isp

where are you right now?
The weather's great

yeah, I am in Fort Lauderdale atm, have been for three years but yeah, I was born and raised in georgetown
halton hills
bramptons friendlier quieter neighbor

So how's life in FL?

ah, so so, it's supposed to be a bad hurricane season this year
I think I just traded eadly fucking winters for 150 mile wide tornadoes
\*deadly

hahaha
Why is everyone bitching anyway?
it's not so bad
You know the Swedish have a saying

last year was good but the year before that hurricane wilma hit which was the third worst one in history (behind katrina and andrew) and I had tickets to the Nine Inch Nails show that night and the thing was cancelled, pissed me off more then the storm

"There's no such thing is bad weather ... just bad preparations"
as*

right...
youtube katrina and tell me how prepaired you would be, lol

Well ... bad weather not natural disasters

katrina hit us first, hit like 6 miles from my home, which is close for a hurricane but it was so weak that we all just laughed it off untill it cut across florida and gained strength in the gulf before hitting Luisianna and we were all like.. "um... wow"

Hi. IIRC there's a way of making mod_autoindex hide the files for which apache has no read permission, can anyone tell me if I'm right, and maybe where to look?

more like "um... **it"

anyways, yeah I agree, I can be under prepared for a thunderstorm but hurricane wilma left me without power for 16 days and about two thirds to three quarters of the traffic lights around the city were out, half of them on the ground

wow

[ AndroidData] the webserver will be running as root

that sucks hard

I was chattign with my mom and uncle in toronto and they couldn't beleive no power for so long
my mom says this winter was rather nice for canada this year though

The only thing that would be a b***h is no power for my server

fajita, good girl

Not all girls are good you know!

my emails would go nowhere
and I'd be pissed

right, I mean I don't need to do laundry or cook but no server power? ouch
bright, I mean I don't need to do laundry or cook but no server power? ouch/b
bbright, I mean I don't need to do laundry or cook but no server power? ouch/b/b

yeah ... laundry, I can do that by hand

AC?

food? just go to subway
AC as in air conditioner?

right, and subway doesn't need electricity to bake bread either

just pick a notebook or something

yeah @ ac

Hmm

although

although is /var/www/localhost/cgi-bin in the docroot?

right ... food ... food ...

summers in the gta are hotter then florida

well... cook thy neighbor!
but seriously ... server must have power!

I ate out a lot for those two weeks, at first a lot of places had generators and then parts of the city were restored little at a time
I was like second last on the list but several entire counties were without power the day of
we played a lot of drunken candle lit poker those first few nights, fun as hell, lol

man ... think of all those massive uptimes that people could show off on IRC channels

hehe

like
up since 1969
that's like a PDP-7
running Apache
somehow

i have a name based vhost with the default webroot and one other webapp.

UAMP

apache 2.2

apache 2.2 is vthe current Apache version, at http://httpd.apache.org/. See also http://www.regdeveloper.co.uk/2006/01/30/apache_22/]new features (since 2.0) are listed at http://httpd.apache.org/docs/2.2/new_features_2_2.html

true but if you own a hosting firm you should have emergency power contacts, I used to do comp sec for banks and a lot of them had an agreement with a company that if they lost power an 18 wheeler truck with a giant deisel generator was on it's way

I haven't got drunk ... in a long while
need lan party

pdp-7? hehe
I don't game myself

dns is configured fo rthe fqdn, and the fqdn brings up the appropriate page. but if the hostname prtion of the virtual host is entered, it goies to the default webroot.

I went to my room mates lan party with a bunch of friends of mine as well, I crimped all their cat cables and then just chilled on the couch with my laptop and drank a shit load of beer
speaking of beer, I miss molson stock ale

can i specify 2 names on the servername directive, didnt look liek it in the docs

slestak, you want apache to respond to two server names?

my Yeungling is in the downstairs fridge, time to make a trip

ah
while I am in the US I prefer Guiness stout ale, but back home it was molson stock ale

well, i have nomachine login setuop on the defaul webroot (proteus.my.com)

Yeungling is too light for me

and i have trac setup on trac.my.com, and it works.
same apache, using name based vhosts

I don't know what nomachine login is but you want your apache server to respond to two dns names? yes?
ok, so with name based vhosts, whats the question?

yes, and it does this correctly
trac.commercecorp.com and proteus.commercecorp.com both work. but if somoeone enteres just trac in firefox, it goes to defaul webroot

if User www and Group www are both defined in httpd.conf, and Apache is started by root, shouldn't ps -ax reflect httpd processes running under "www" not root?

it does

chye-fhut: not sure.

chye-fhut: it will show running as www:www

ot does it vary by the OS?

slestak, if someone enters trac.page.com they get the correct page but if someone enter http://trac they get page.com?

You always need that little boost by root, cause it's a priv'ed port
1024

1024 is the Well-Known Ports

that still doesn't sound right to me

on my test machine running FreeBSD 6.2, there's one process that's owned by root, every other httpd processes are running under "www"

all right how well does fajita respond to agressive comments?

running Apache 2.2.4

GO TO HELL!

excuse me?

exactly, when trac is entered, they get the content from proteus.

chye-fhut: that is normal.

oh, ok, i thought i screwed up something

chye-fhut, on a unix system, root is the only user who can open a port under 1024, they are protected ports so apache splits afaik and root does some things for port handling and changes it's uid for user oriented tasks

thank you

is that what suexec is with cgi?

slestak, why would anyone just enter trac? it's not a host over an fqdn at all

alright ... I'm dying to tell fajita the stf-word
but it might be considered rude

slestak, you have me on that one

:'(

what is the stf word?

add u

the name based question or the suexec?

well, now I am curious...
stfu

oh dear
stfu means shut the .... up

fajita, stfu

what are you guys trying to accomplish, exactly?

excuse me?

fajita, stfu

huh?

ok enough

enough is enough. 9 hours

lol

bak: stop it?

yessir
cause it's kind of odd, anything I say , fajita suddenly adds something
bcause it's kind of odd, anything I say , fajita suddenly adds something/b

thanks again

best not use basic apache keywords and directives, then.

ah that felt good

yeah well...

is blah' or fajita, forget

no, you have no access to remoev factoids.

'fajita forget something'
ahh
how about adding new entries?

if there is an inappropriate entry, please notify me

all right
fajita, modbwwin32 is mod_bw ready for Win32

OK, bak.

modbwwin32

modbwwin32 is mod_bw ready for Win32

that is quite useless. At least provide a URL.
forget modbwwin32

I forgot modbwwin32

well the sf project is not yet ready
when it is approved it'll probably be modbwwin32.sf.net

until then, id' rather not add entries without references.

section or can they part of a global site config?

i am seeing a bunch of HTTP/1.0 requests from MSIE clients on HTTPS requests even when i don't have the 'force-response-1.0' set. it works fine from some machines but not from others (that i don't have access to). anyone know where i can start looking? can't sniff the packets since it's HTTPS.

you could start by getting access to the version of IE that it doesn't work on

i did. well, i used the same version that i see in the UserAgent part of the log. i'll hunt around for a more specific match but tried MSIE 6 and 7. and works from the machines i tried it from. we do do a 302 redirect and only accept high grade ciphers. if that has anything to do with it..
the 302 is from http to https

are there any firewall/proxies that could be ruining it?

i don't see how on an https connection?? maybe when they get the 302 (in http), it's turned into HTTP/1.0 by a proxy at the browsers end?

not sure, just throwing things out there ...

that's the best so far

do these other versions of IE support that strength crypto?

yes
or at least i haven't heard otherwise..
did apache come configured with a forced-downgrade for MSIE for SSL? what was the reason?

hay ayuda en español
o q canal puede ayudarme

Try #apache-es
later.

http://rafb.net/p/OZ52J678.html and I beleive it's supposed to make it so when someone goes to example.com they should be redirected to www.example.com but it does not work, now since it is my first mod_rewrite rule I am not even sure how to tell if it is beign read, I checked the access.log and error.logs and saw noth

ing

garbage

try putting junk in your htaccess file. If it's being read, you will get an Internal Server Error when accessing that resource.

um... I am not using .htaccess

ah ok, lemme see

it's actually placed in a named virtual host file, although it is the one for the primary host of the server

presumably you're using example.com as an example, yes?

I'm having some problems configuring subversion with apache. I'm getting a message: 'You don't have permission to access /svn/project on this server.' Can any1 please help?

step one

whatever the problem, step one is to look in the error log (and any other logs that may apply, such as suexec, mod_rewrite, or mod_security).

leesiulung, I would also just check the directory permissions first

I had it set to 755, although it probably doesn't need execute permission

hmm, is the owner / group of the file the same as the one that apache / subversion is trying to access it as
?
also like noodl said, check error logs

ok, assuming you're not actually using example.com in your config.. there's a better way than using mod_rewrite for this job. see: http://wiki.apache.org/httpd/Rewrite/WhenNotToUseRewrite

hello everybody... i tried researching the web with no results/examples of doing such a thing: i have apache server serving my ~home/public_html directory as an index (no index.html whatsoever)... when i create a soft link to another directory apache doesn't display it, but new directories r displayed just fine - is there a workaround?

right, no I am not using example.com but I am using this example to ensure that mod_rewrite works before I move on to somethign a little more complex with it

FollowSymlinks or some such..

that page doesn't cover the whole story, sorry. anyway, if you want to redirect one hostname to another, create two vhosts and use Redirect in one of them

the problem is I am not sure at the moment if mod_rewrite is not working or it's rules are not working etc, nor am I sure how to check, I do know that the mod_rewrite engine is loaded though

also, i think the symlink target has to be within public_html (i think)..

thanks jetole and noodl.
'The URI does not contain the name of a repository.' ?

what do you mean that page does not cover the whole story?

try requesting the symlinked url directly. you'll see a 403 most likely

and yes, I need mod_rewrite to be working

anyone know why IE doing HTTPS be forced to HTTP/1.0 even without 'SetEnv downgrade'?

if there is a better way to do that then fine, I will look into it after the fact that I know mod_rewrite is working
hooya_, I think the answer to your question is bill gates and his "devl" team

thanks, but i tried that and it ignores it, the target is not within that dir.... and yeah if i try access via URI i get 403

but no, lol, I don't know the answer

heh
if only my client would take that for an answer

so you don't know mod_rewrite @ noodl ?

you getting 403 is why mod_autoindex isn't showing the link. question then becomes, "why does this link give me a 403", to which the answer is..
step one

whatever the problem, step one is to look in the error log (and any other logs that may apply, such as suexec, mod_rewrite, or mod_security).

i know it well, thanks the point is in this case you shouldn't be using it

I had another weird error with IE 7 lately too that I didn't find an answer to, it loaded flash in a popup window for streaming media which worked fine every time for the first three and then on number 4 it would always load the same media as 3 regardless of what you selected