Re: apache & log files

2004-11-03 Thread Upayavira
Marek Podmaka wrote:
Hello,
 I have apache 1.3 webserver hosting about 150 domains (more than 400
 virtual hosts). Now I have separate error log for each domain
 (something.sk) and separate combined log for each virtual host (for
 example www.abcq.sk and new.abcq.sk). This has many positives for
 me: easy to find some data related to each virtual host and that I
 can make seaparate statistics for each virtual host. I use awstats.
 And now the bad side - the number of open files in each apache
 process is more than 500 just for these log files. It's no problem
 for now, but with more domains in future it will hit the 1024 per
 process limit of open files.
 And now the questions :)
 1) Where does that 1024 open files limit come from? Is it somewhere
 configurable? Or do you think it's totally bad idea to have such
 number of log files?
 2) Is it possible to have separate statistics for each virtual host
 with awstats and only one log file? It would be nice if certain
 virtual hosts could have different configuration of awstats. Now I
 use my script which checks all virtual hosts in mysql (from where
 also the apache config is refreshed every 15 mins) and creates
 config file for awstats if none exists. Then it runs awstats for
 each config (one after another of course).
 3) Or you maybe use some other solution to this problem?
 

Check out Cronolog. Piping your logs to that would at least get them 
into another process!

Apache 2 config would be:
   CustomLog "| /path/to/cronolog /path/to/logfile_%Y_%m.log" combined
Would that help you? Dunno if it scales to the levels you need - just an 
idea.

Regards, Upayavira
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]


Re: Suggestions for remote server monitoring

2005-01-05 Thread Upayavira
Jacob S wrote:
On Wed, 5 Jan 2005 06:50:24 +0300
Peter Clark <[EMAIL PROTECTED]> wrote:
 

   What software would people recommend for remotely monitoring a
   server? I'm 
not talking about intrustion detection and whatnot, just keeping an
eye on things like CPU load, memory, bandwidth usage, etc. Bonus
points if it uses something like RRD--graphs and charts are not just
pretty eyecandy for me.
   

apt-cache show nagios
Nagios will keep track of all your services - from http, to e-mail, to
ftp, etc. as well as the number of running processes, disk usage, etc.
It will also e-mail you when it sees a problem. It has a webpage admin
interface that's pretty informative. The only thing I think it doesn't
do is monitor bandwidth for you; that would require a different program.
 

If you have access to the data, it isn't hard to extend Nagios to handle 
custom monitoring tasks. Just write a script that returns a status code 
and some text.

We have been using it for several servers at work for a while with good
success.
 

Likewise.
Regards, Upayavira
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]


Re: suexec permissions

2005-01-10 Thread Upayavira
Blair Strang wrote:
nodata wrote:
Good morning,
I'm having a some permissions trouble with suexec running on Sarge.
I have a virtualhost for a user called Bob which specifies User Bob and
Group Bob in the /etc/apache/conf.d/bob.conf file.

If I switch user to bob, and run ls -la on /, /var, /var/www, 
/var/www/bob
I can see all of the files, so why is apache running as this user not 
able
to?


Hiya,
You'll probably find that all your Apache processes are running as 
www-data
based on the User directive in your main httpd.conf -- and they can't 
read
bob's files.  Only CGI scripts will be affected by the "User" 
directive in a
VirtualHost.

From: http://httpd.apache.org/docs/mod/core.html#user
"Special note: Use of this directive in  requires a properly
configured suEXEC wrapper. When used inside a  in this 
manner,
only the user that CGIs are run as is affected. Non-CGI requests are 
still
processed with the user specified in the main User directive."
Therefore, if you have a user called bob, and a group called bob, make 
the files group readable, and make the user www-data a member of that 
group. That should do it. Forget suexec, it is far more complicated than 
what it sounds like you need.

Regards, Upayavira