[EMAIL PROTECTED] Give me Solutions
Hi, I am compiling my program using following syntax : # gcc -I /usr/local/ssl/include -I /usr/local/mysql/include -I /usr/local/apache2/include -L /usr/local/ssl/lib -lcrypto -lssl -L /usr/local/mysql/lib/mysql -lmysqlclient -L /usr/local/apache2/lib -lapr-0 -laprutil-0 ts.c It is giving this type of a long error list. Give me any solution abt it. /tmp/ccqsAWu8.o(.text+0x1978): In function `ts_handler': : undefined reference to `ap_log_rerror' /tmp/ccqsAWu8.o(.text+0x19e3): In function `ts_handler': : undefined reference to `ap_log_rerror' /tmp/ccqsAWu8.o(.text+0x19f6): In function `ts_handler': : undefined reference to `ap_setup_client_block' /tmp/ccqsAWu8.o(.text+0x1a2a): In function `ts_handler': : undefined reference to `ap_log_rerror' /tmp/ccqsAWu8.o(.text+0x1a38): In function `ts_handler': : undefined reference to `ap_should_client_block' /tmp/ccqsAWu8.o(.text+0x1a6e): In function `ts_handler': : undefined reference to `ap_log_rerror' /tmp/ccqsAWu8.o(.text+0x1ad1): In function `ts_handler': : undefined reference to `ap_get_client_block' /tmp/ccqsAWu8.o(.text+0x1b20): In function `ts_handler': : undefined reference to `ap_log_rerror' /tmp/ccqsAWu8.o(.text+0x1b92): In function `ts_handler': : undefined reference to `ap_log_rerror' /tmp/ccqsAWu8.o(.text+0x1bf2): In function `ts_handler': : undefined reference to `ap_log_rerror' /tmp/ccqsAWu8.o(.text+0x1c64): In function `ts_handler': : undefined reference to `ap_set_content_length' /tmp/ccqsAWu8.o(.text+0x1c72): In function `ts_handler': : undefined reference to `ap_send_http_header' /tmp/ccqsAWu8.o(.text+0x1c82): In function `ts_handler': : undefined reference to `ap_rwrite' /tmp/ccqsAWu8.o(.text+0x1cb8): In function `ts_handler': : undefined reference to `ap_log_rerror' /tmp/ccqsAWu8.o(.text+0x1ce5): In function `ts_handler': : undefined reference to `ap_log_rerror' Ravi
Re: [EMAIL PROTECTED] Apache Launching one more unwanted daemon
On 6/5/07, Joshua Slive <[EMAIL PROTECTED]> wrote: On 6/5/07, Arnab Ganguly <[EMAIL PROTECTED]> wrote: > Hi, > I am replacing Apache with NES(Sun Web Server).NES is pretty old.So I > wanted to use Apache with single process and multi threaded web server > similar to NES. To be honest, that doesn't sound like a very good justification. Just because NES does it that way doesn't mean you want Apache to do it that way. > > Now I have used the mod_status also.The new process launched shows to be > active while the old daemon doesn't show anything. Interesting. Have you checked the error log to see if apache is restarting because it received a signal? Perhaps you have a log rotation script restarting apache? Or perhaps the old process got stuck processing something. You could try attaching to it with a debugger and figuring out what it is doing: http://httpd.apache.org/dev/debugging.html Joshua. - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] " from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] If you want a single process multi threaded server perhaps you should take a look at lighttpd, what others have said mpm_worker isn't designed to do what you are trying to do. In the mean time I'll continue embracing Apache :-). - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] " from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [EMAIL PROTECTED] TRACE and Apache 2.x
On 5/29/07, Jeroen Vriezen <[EMAIL PROTECTED]> wrote:
Hello,
Currently we are using Apache 2.0.46. On the 1.3.x version we always used
the following mod_rewrite rule to disable the TRACE option:
RewriteEngine on
RewriteCond %{REQUEST_METHOD} ^TRACE
RewriteRule .* - [F]
When using these rules on Apache 2.0.46, TRACE is still possible. Beside the
fact that the whole TRACK & TRACE
"security issue" is not that interesting, I still wonder how TRACE can be
disabled in Apache 2.0.46. I've also tried the TraceEnable option but that
options seems to be supported in 2.0.55 and later only.
Hope someone can point me in the right direction.
Kind Regards,
Jeroen.
Is there a good solid reason why you aren't using a newer version say
2.0.59? I could understand a reluctance to jump to 2.2.x but a version
jump within the 2.0.x doesn't seem to far fetched.
-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
" from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
Re: [EMAIL PROTECTED] WAMP stack
On 5/31/07, Sander Temme <[EMAIL PROTECTED]> wrote: Nat, On May 31, 2007, at 11:34 AM, Nat Colley wrote: That should really do the trick. However, you mentioned before that your client arrives at the wrong virtual host, so we'll need to find out what exactly happens and why. > # Use name-based virtual hosting. > # > NameVirtualHost *:80 > #VirtualHost example: > # Almost any Apache directive may go into a VirtualHost container. > # The first VirtualHost section is used for all requests that do not > # match a ServerName or ServerAlias in any block. > > ServerAdmin [EMAIL PROTECTED] > DocumentRoot /www/webapps/wordpress > ServerName mydomain1.com > ServerAlias www.mydomain1.com > ErrorLog logs/mydomain1.com-error_log > CustomLog logs/mydomain1.com-access_log common > As it says above, the first virtual host in the list is a special beast because it receives HTTP requests that don't match any virtual hosts in the list. Matching is done through the Host: header that the browser sends, which is in turn filled in by the browser with the hostname you typed into its Location bar. Apache will serve any request that arrives, and anything that is not matched to a particular virtual host will be served by the first one in the list. To make a match, you'll need to make sure that you type the correct hostname into the browser, and that your system is set up to resolve that hostname to the correct IP address. You can do this through DNS or through a local HOSTS file on your system, but that kind of falls outside the scope of this list. > > ServerAdmin [EMAIL PROTECTED] > DocumentRoot /www/webapps/joomla > ServerName mydomain2.com > ServerAlias www.mydomain2.com > ErrorLog logs/mydomain2.com-error_log > CustomLog logs/mydomain2.com-access_log common > > > > notice that in this configuration he has changed > > the files the web is served > > > content from htdocs to something else, and further > > aliased that to yet > > > another directory where the applications are. So > > mydomain1 and mydomain2 > > > both go to the same page, and mydomain1/app2 comes > > up even though app2 is > > > supposed to be the content for mydomain2. I asked I'm not really seeing that in the configuration above. It looks like your DocumentRoot is /www/webapps/wordpress and /www/webapps/joomla respectively, which are perfectly separate. These may be symbolic links to somewhere else on the file system level, but we can't see that from here and if you have Options FollowSymLinks there's no problem with that. The only problem with a forest of symbolic links is that it becomes hard to see the trees... better to keep things simple, and in the case of the above you might change DocumentRoot to the actual location of the content, and put in an appropriate block to control access. S. -- Sander Temme [EMAIL PROTECTED] PGP FP: 51B4 8727 466A 0BC3 69F4 B7B8 B2BE BC40 1529 24AF I guess I'm even more confused. The subject reads as WAMP stack, assuming W is Windows. The paths in the config are not of the Windows file system variety rather *NIX variety. - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] " from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: [EMAIL PROTECTED] Can't view SSL-enabled pages using Firefox
> -Original Message- > From: Salcedo, Simon [mailto:[EMAIL PROTECTED] > Sent: Wednesday, June 06, 2007 9:37 PM > To: users@httpd.apache.org > Subject: [EMAIL PROTECTED] Can't view SSL-enabled pages using Firefox > > Hi, > > > > I recently installed SSL certificates on our Apache 2.0 > server. Prior to that, I have been successful in viewing our > pages via Firefox and Internet Explorer. After installing > the certificates, I can still view the pages using IE, not > with Firefox. I am getting a connection timeout error > message. Any ideas on what may be happening here? Obviously, the mere act of putting up an SSL website does not usually cause FireFox to fail. So there must be something very peculiar about your setup. However, on the very sparse data provided, it is impossible to guess what. Is your site on the internet that we might look at it? wild guess: any FF extensions (eg NoScript), any funny navigation on the site (eg JS)? Rgds, Owen Boyle Disclaimer: Any disclaimer attached to this message may be ignored. > > > > Regards, > > Simon Salcedo > > > > > > This message is for the named person's use only. It may contain confidential, proprietary or legally privileged information. No confidentiality or privilege is waived or lost by any mistransmission. If you receive this message in error, please notify the sender urgently and then immediately delete the message and any copies of it from your system. Please also immediately destroy any hardcopies of the message. You must not, directly or indirectly, use, disclose, distribute, print, or copy any part of this message if you are not the intended recipient. The sender's company reserves the right to monitor all e-mail communications through their networks. Any views expressed in this message are those of the individual sender, except where the message states otherwise and the sender is authorised to state them to be the views of the sender's company. - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] " from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [EMAIL PROTECTED] Give me Solutions
On 6/7/07, Ravi Prakash <[EMAIL PROTECTED]> wrote: # gcc -I /usr/local/ssl/include -I /usr/local/mysql/include -I /usr/local/apache2/include -L /usr/local/ssl/lib -lcrypto -lssl -L /usr/local/mysql/lib/mysql -lmysqlclient -L /usr/local/apache2/lib -lapr-0 -laprutil-0 ts.c /tmp/ccqsAWu8.o(.text+0x1978): In function `ts_handler': : undefined reference to `ap_log_rerror' use apxs or tell gcc you're building a shared object -- Eric Covener [EMAIL PROTECTED] - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] " from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
[EMAIL PROTECTED] httpd attempts to open file.html/.htaccess (is this a bug?)
Summary:
When processing a "GET /.../file.html", Apache httpd briefly treats
file.html as a directory and attempts to open
"docroot/.../file.html/.htaccess". The os returns ENOTDIR, and then
processing of the request continues.
There would seem to be no reason for httpd to attempt to open
file.html/.htaccess, especially since it has already done a stat on
file.html and knows that it is a file, not a directory.
Does anyone else see the same behavior? Is this a bug?
Details:
Configuration: Apache httpd v 2.2.4 running on CentOS-5. Tested with stock
configuration distributed with CentOS-5, as well as a stock installation
compiled from the source.
Only change to http.conf is:
"AllowOverride None" changed to "AllowOverride All"
DocumentRoot is "/var/www/html", and I created an html file at
/var/www/html/dir/subdir/file.html
Command is "curl -i http://localhost/dir/subdir/file.html";
Result of "strace -f -e trace=file /usr/sbin/httpd":
[pid 24550] stat64("/var/www/html/dir/subdir/file.html",
{st_mode=S_IFREG|0644, st_size=48, ...}) = 0
[pid 24550] open("/var/www/html/.htaccess", O_RDONLY|O_LARGEFILE) = -1
ENOENT (No such file or directory)
[pid 24550] open("/var/www/html/dir/.htaccess", O_RDONLY|O_LARGEFILE) = -1
ENOENT (No such file or directory)
[pid 24550] open("/var/www/html/dir/subdir/.htaccess", O_RDONLY|O_LARGEFILE)
= -1 ENOENT (No such file or directory)
[pid 24550] open("/var/www/html/dir/subdir/file.html/.htaccess",
O_RDONLY|O_LARGEFILE) = -1 ENOTDIR (Not a directory)
[pid 24550] open("/var/www/html/dir/subdir/file.html", O_RDONLY|O_LARGEFILE)
= 18
Note the open("/var/www/html/dir/subdir/file.html/.htaccess"), which
returned ENOENT.
It is believed that this bug is somewhere in ap_directory_walk() in
server\request.c
-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
" from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
RE: [EMAIL PROTECTED] Apache using AD autentication
I don't know if you can add multiple LDAP (AD) entries to the container. I've (intentionally) moved well away from Windows support and don't have any way to test it or I'd give it a go. Eric -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Wednesday, June 06, 2007 6:02 PM To: users@httpd.apache.org Subject: RE: [EMAIL PROTECTED] Apache using AD autentication Does this LDAP authentication mentioned in the URL link work across multiple AD domains? Dan (sorry about the crappy top reply courtesy "notes") Please respond to users@httpd.apache.org To: cc: (bcc: Dan Mitton/YD/RWDOE) Subject:RE: [EMAIL PROTECTED] Apache using AD autentication LSN: Not Relevant User Filed as: Not a Record What have you done already to attempt to accomplish this?? I don't know if this doc will work, but a quick Google search for "apache active directory authentication" turned up a slew of links with this one being at the top: http://www.trustix.org/wiki/index.php/Active_Directory_Authentication_with_Apache One of the best ways to get answers on this and other mailing lists is to do a little leg work (a.k.a. RTFM & STFW) before you ask questions, and then, detail what you have already done to attempt to resolve your question in the e-mail so that a.) We know what common things have already been tried, and b.) we know that you're really interested in getting this resolved and are not just trying to waste others time. I think it was Sashi that linked to Eric Steven Raymond's "How To ask Questions the Smart Way" http://www.catb.org/~esr/faqs/smart-questions.html which was a nice way of saying "Search the Fabulous Web" (STFW) -- Eric DuToit (sorry about the crappy top reply courtesy "outlook") -Original Message- From: Mauricio Cavalcanti [mailto:[EMAIL PROTECTED] Sent: Wednesday, June 06, 2007 1:51 PM To: users@httpd.apache.org Subject: [EMAIL PROTECTED] Apache using AD autentication Hi, i put a apache web server into windows network working with Active Directory (AD). After that, I put many sites on it, but here is the problem: My workstations is running w2k (authenticated in AD). Some sites has to be restricted only to some (AD) users or groups and I want to use the workstation autentication to check if the user is able or not to see the web page without any prompt. What´s the best way to do this? Thanks in advance, Mauricio _ MSN Hotmail, o maior webmail do Brasil. http://www.hotmail.com - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] " from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] " from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] " from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] " from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [EMAIL PROTECTED] httpd attempts to open file.html/.htaccess (is this a bug?)
On Thu, 7 Jun 2007 11:59:59 -0400 "Allen Pulsifer" <[EMAIL PROTECTED]> wrote: > Summary: > > When processing a "GET /.../file.html", Apache httpd briefly treats > file.html as a directory and attempts to open > "docroot/.../file.html/.htaccess". The os returns ENOTDIR, and then > processing of the request continues. Let me guess. You're using the version of ReiserFS that changed the semantics of stat()? -- Nick Kew Application Development with Apache - the Apache Modules Book http://www.apachetutor.org/ - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] " from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: [EMAIL PROTECTED] httpd attempts to open file.html/.htaccess (is this a bug?)
> Let me guess.
>
> You're using the version of ReiserFS that changed the
> semantics of stat()?
Hello Nick,
Its running whatever comes stock with a default installation of CentOS-5,
which is definitely not Reiser. If you think this is somehow relevant or
important, I'll try to figure out what it is. I would note that the
stat("file.html") returned st_mode=S_IFREG.
Allen
-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
" from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
[EMAIL PROTECTED] Address already in use: make_sock: could not bind to addres
All, I'm running Apache 2.0.59 on Solaris 10. When I try to start up Apache, I see the error: - (125)Address already in use: make_sock: could not bind to address [::]:443 no listening sockets available, shutting down Unable to open logs - I'm using https on port 80 (and not 443). I have confirmed that the Listen directive specifies my.ip.addr:80 in my httpd.conf. I'm not using the VirtualHost directive. I've trawled thru the mailing list archive but couldn't spot anything related. Why is Apache trying to use 443? What am I missing here? Any help is appreciated. Regards, Sashi Malladi CATE Network Eng 908-563-1249 - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] " from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: [EMAIL PROTECTED] Address already in use: make_sock: could not bind to addres
I figured it out. It's trying to use 443 as I didn't modify ssl.con (and I'm using https). I've made that change but when I try to run it again now it's complaining about port 80 not being available. Any help? Regards, Sashi Malladi CATE Network Eng 908-563-1249 -Original Message- From: Malladi, Sasikanth [mailto:[EMAIL PROTECTED] Sent: Thursday, June 07, 2007 2:59 PM To: users@httpd.apache.org Subject: [EMAIL PROTECTED] Address already in use: make_sock: could not bind to addres All, I'm running Apache 2.0.59 on Solaris 10. When I try to start up Apache, I see the error: - (125)Address already in use: make_sock: could not bind to address [::]:443 no listening sockets available, shutting down Unable to open logs - I'm using https on port 80 (and not 443). I have confirmed that the Listen directive specifies my.ip.addr:80 in my httpd.conf. I'm not using the VirtualHost directive. I've trawled thru the mailing list archive but couldn't spot anything related. Why is Apache trying to use 443? What am I missing here? Any help is appreciated. Regards, Sashi Malladi CATE Network Eng 908-563-1249 - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] " from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] " from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [EMAIL PROTECTED] Address already in use: make_sock: could not bind to addres
On 07/06/07, Malladi, Sasikanth <[EMAIL PROTECTED]> wrote: I figured it out. It's trying to use 443 as I didn't modify ssl.con (and I'm using https). I've made that change but when I try to run it again now it's complaining about port 80 not being available. Try here: http://wiki.apache.org/httpd/Errors/CouldNotBindToAddress -- noodl - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] " from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
[EMAIL PROTECTED] VHOST and SSL
Hi folks, We are running Apache/2.2.3 (Unix) mod_ssl/2.2.3 OpenSSL/0.9.8b DAV/2 PHP/5.1.4 and everything is working perfectly except one thing and I'm sure it's a configuration problem. We have some domains that have SSL certificate and some not. My problem is very simple, what i'm doing wrong if every vhost works using https and use the same certificate. What I need is that for exemple https://www.mydomain.com works with mydomain.com certificate but that https://www.myotherdom.com is not answering 'cause the SSL is only applied to mydomain.com! Right now every vhost is answering to SSL request. The config looks like that: NameVirtualHost x.x.x.x:80 NameVirtualHost x.x.x.x:443 ServerAdmin [EMAIL PROTECTED] ServerName www.mydomain.com DocumentRoot /services/mydomain.com CustomLog /services/www-logs/mydomain.com.log combined SSLEngine on SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL SSLCertificateFile /opt/Apache/2.2.3/conf/www.mydomain.com.crt SSLCertificateKeyFile /opt/Apache/2.2.3/conf/www.mydomain.com.key SSLCACertificateFile /opt/Apache/2.2.3/conf/SSLCA.crt SSLOptions +StdEnvVars SSLOptions +StdEnvVars BrowserMatch ".*MSIE.*" \ nokeepalive ssl-unclean-shutdown \ downgrade-1.0 force-response-1.0 ServerAdmin [EMAIL PROTECTED] ServerName www.otherdomain.com ServerAlias otherdomain.com DocumentRoot /services/otherdomain.com CustomLog /services/www-logs/otherdomain.com.log combined And my other question is how to replace ServerAdmin [EMAIL PROTECTED] ServerName www.otherdomain.com ServerAlias otherdomain.com DocumentRoot /services/otherdomain.com CustomLog /services/www-logs/otherdomain.com.log combined with something like that: ServerAdmin [EMAIL PROTECTED] ServerName www.$0 ServerAlias $0 DocumentRoot /services/$0 CustomLog /services/www-logs/$0.log combined Thanks - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] " from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [EMAIL PROTECTED] VHOST and SSL
On 6/7/07, Sebastien Roy <[EMAIL PROTECTED]> wrote: Hi folks, We are running Apache/2.2.3 (Unix) mod_ssl/2.2.3 OpenSSL/0.9.8b DAV/2 PHP/5.1.4 and everything is working perfectly except one thing and I'm sure it's a configuration problem. We have some domains that have SSL certificate and some not. My problem is very simple, what i'm doing wrong if every vhost works using https and use the same certificate. What I need is that for exemple https://www.mydomain.com works with mydomain.com certificate but that https://www.myotherdom.com is not answering 'cause the SSL is only applied to mydomain.com! Right now every vhost is answering to SSL request. The config looks like that: You can't have one name "not answer", because apache doesn't know the name until after it has already done the SSL negotiation. (The name is carried in the HTTP Host request header which is part of the encrypted content. This is the same reason you can't do name-based virtual hosts with SSL.) You can use mod_rewrite to return forbidden errors to certain hostnames. (You can even, notwithstanding what I just wrote, use name-based virtual hosts with identical ssl configuration to capture and deny the bad names.) You will still get certificate warnings on the bad names, of course. Joshua. - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] " from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: [EMAIL PROTECTED] VHOST and SSL
Hello Sebastien, Short answer: the host running HTTPS must have a dedicated IP address. Long answer: when a client connects to the server at port 443, the first thing they will do is an SSL handshake. This happens even before the client sends its HTTPS request with the url and Host header. Therefore, during this handshake, the server has no idea what vhost the client wants to connect to, and the server will send the only certificate it has for that IP address. The client will then report a certificate hostname mismatch error. This again happens even before the client sends the HTTPS request. If the client attempts to continue with the connection and sends the HTTPS request with the URL and Host header, what happens at that point is up to the server. What currently happens and what do you want to happen? Allen > -Original Message- > From: Sebastien Roy [mailto:[EMAIL PROTECTED] > Sent: Thursday, June 07, 2007 3:41 PM > To: users@httpd.apache.org > Subject: [EMAIL PROTECTED] VHOST and SSL > > > Hi folks, > > We are running Apache/2.2.3 (Unix) mod_ssl/2.2.3 OpenSSL/0.9.8b DAV/2 > PHP/5.1.4 and everything is working perfectly except one > thing and I'm > sure it's a configuration problem. We have some domains that > have SSL > certificate and some not. My problem is very simple, what i'm doing > wrong if every vhost works using https and use the same certificate. > What I need is that for exemple https://www.mydomain.com works with > mydomain.com certificate but that https://www.myotherdom.com is not > answering 'cause the SSL is only applied to mydomain.com! > > Right now every vhost is answering to SSL request. The config looks > like that: > > NameVirtualHost x.x.x.x:80 > NameVirtualHost x.x.x.x:443 > > > ServerAdmin [EMAIL PROTECTED] > ServerName www.mydomain.com > DocumentRoot /services/mydomain.com > CustomLog /services/www-logs/mydomain.com.log combined > > SSLEngine on > SSLCipherSuite > ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL > SSLCertificateFile /opt/Apache/2.2.3/conf/www.mydomain.com.crt > SSLCertificateKeyFile /opt/Apache/2.2.3/conf/www.mydomain.com.key > SSLCACertificateFile /opt/Apache/2.2.3/conf/SSLCA.crt > > > SSLOptions +StdEnvVars > > > SSLOptions +StdEnvVars > > > BrowserMatch ".*MSIE.*" \ > nokeepalive ssl-unclean-shutdown \ > downgrade-1.0 force-response-1.0 > > > > ServerAdmin [EMAIL PROTECTED] > ServerName www.otherdomain.com > ServerAlias otherdomain.com > DocumentRoot /services/otherdomain.com > CustomLog /services/www-logs/otherdomain.com.log > combined > > > And my other question is how to replace > > > ServerAdmin [EMAIL PROTECTED] > ServerName www.otherdomain.com > ServerAlias otherdomain.com > DocumentRoot /services/otherdomain.com > CustomLog /services/www-logs/otherdomain.com.log > combined > > > with something like that: > > > ServerAdmin [EMAIL PROTECTED] > ServerName www.$0 > ServerAlias $0 > DocumentRoot /services/$0 > CustomLog /services/www-logs/$0.log combined > > > Thanks > > > - > The official User-To-User support forum of the Apache HTTP > Server Project. See > http://httpd.apache.org/userslist.html> for more info. > To unsubscribe, e-mail: [EMAIL PROTECTED] >" from the digest: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] > - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] " from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
[EMAIL PROTECTED] Apache, Windows XP, and mapped drives
I just set up Apache 2.2.4 on a Windows XP system (from the current .msi), and I thought I'd share my findings about using mapped network drives. On my old W2K system, I could succesfully Alias to my mapped drives by logging in the Apache service using my account, or a special "apache" account that the IT people had set up for me. But in XP (SP2), it just wouldn't work - the Aliased resource was "not found on the server.". I still don't know why. I tried an older Apache ZIP distro (ABOUT_APACHE.TXT said "February 2002") on the same PC, installing it directly as files and folders, and I had the same problem. I tried the current .msi on a second XP system, with the same disappointing result. If anyone else is trying to deal with this, one workaround is to turn the Apache service off and run httpd.exe in a command-prompt window instead. That worked for me. I've added the httpd.exe to my startup folder.
Re: [EMAIL PROTECTED] VHOST and SSL
Hi Allen What currently happens is the certificate error and it's point to the first vhost using SSL and what I want to happen is no answer at all from port 443 on that vhost. So I think I will configure an another IP just for SSL! Thanks! Allen Pulsifer wrote: Hello Sebastien, Short answer: the host running HTTPS must have a dedicated IP address. Long answer: when a client connects to the server at port 443, the first thing they will do is an SSL handshake. This happens even before the client sends its HTTPS request with the url and Host header. Therefore, during this handshake, the server has no idea what vhost the client wants to connect to, and the server will send the only certificate it has for that IP address. The client will then report a certificate hostname mismatch error. This again happens even before the client sends the HTTPS request. If the client attempts to continue with the connection and sends the HTTPS request with the URL and Host header, what happens at that point is up to the server. What currently happens and what do you want to happen? Allen -Original Message- From: Sebastien Roy [mailto:[EMAIL PROTECTED] Sent: Thursday, June 07, 2007 3:41 PM To: users@httpd.apache.org Subject: [EMAIL PROTECTED] VHOST and SSL Hi folks, We are running Apache/2.2.3 (Unix) mod_ssl/2.2.3 OpenSSL/0.9.8b DAV/2 PHP/5.1.4 and everything is working perfectly except one thing and I'm sure it's a configuration problem. We have some domains that have SSL certificate and some not. My problem is very simple, what i'm doing wrong if every vhost works using https and use the same certificate. What I need is that for exemple https://www.mydomain.com works with mydomain.com certificate but that https://www.myotherdom.com is not answering 'cause the SSL is only applied to mydomain.com! Right now every vhost is answering to SSL request. The config looks like that: NameVirtualHost x.x.x.x:80 NameVirtualHost x.x.x.x:443 ServerAdmin [EMAIL PROTECTED] ServerName www.mydomain.com DocumentRoot /services/mydomain.com CustomLog /services/www-logs/mydomain.com.log combined SSLEngine on SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL SSLCertificateFile /opt/Apache/2.2.3/conf/www.mydomain.com.crt SSLCertificateKeyFile /opt/Apache/2.2.3/conf/www.mydomain.com.key SSLCACertificateFile /opt/Apache/2.2.3/conf/SSLCA.crt SSLOptions +StdEnvVars SSLOptions +StdEnvVars BrowserMatch ".*MSIE.*" \ nokeepalive ssl-unclean-shutdown \ downgrade-1.0 force-response-1.0 ServerAdmin [EMAIL PROTECTED] ServerName www.otherdomain.com ServerAlias otherdomain.com DocumentRoot /services/otherdomain.com CustomLog /services/www-logs/otherdomain.com.log combined And my other question is how to replace ServerAdmin [EMAIL PROTECTED] ServerName www.otherdomain.com ServerAlias otherdomain.com DocumentRoot /services/otherdomain.com CustomLog /services/www-logs/otherdomain.com.log combined with something like that: ServerAdmin [EMAIL PROTECTED] ServerName www.$0 ServerAlias $0 DocumentRoot /services/$0 CustomLog /services/www-logs/$0.log combined Thanks - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] " from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] " from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] " from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [EMAIL PROTECTED] Apache, Windows XP, and mapped drives
Jim Owens wrote: > I just set up Apache 2.2.4 on a Windows XP system (from the current > .msi), and I thought I’d share my findings about using mapped network > drives. > > If anyone else is trying to deal with this, one workaround is to turn > the Apache service off and run httpd.exe in a command-prompt window > instead. That worked for me. I’ve added the httpd.exe to my startup folder. It may also work if you change the dependencies of the service to wait to start until windows networking is started. This may simply be a race condition where networking share components don't finish starting before apache gets that far. - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] " from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [EMAIL PROTECTED] Apache, Windows XP, and mapped drives
William A. Rowe, Jr. wrote: Jim Owens wrote: > I just set up Apache 2.2.4 on a Windows XP system (from the current > .msi), and I thought Iâd share my findings about using mapped network > drives. > > If anyone else is trying to deal with this, one workaround is to turn > the Apache service off and run httpd.exe in a command-prompt window > instead. That worked for me. Iâve added the httpd.exe to my startup folder. It may also work if you change the dependencies of the service to wait to start until windows networking is started. This may simply be a race condition where networking share components don't finish starting before apache gets that far. End original message. - If what William states is in fact what is going on, you could probably still use Apache as a service if you start it manually instead of letting it start automatically. Change the service properties from automatic to manual and then start it from the service window after you are sure the network is functioning. Dragon ~~~ Venimus, Saltavimus, Bibimus (et naribus canium capti sumus) ~~~ - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] " from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [EMAIL PROTECTED] Apache, Windows XP, and mapped drives
Dragon wrote: > William A. Rowe, Jr. wrote: >> Jim Owens wrote: >> > I just set up Apache 2.2.4 on a Windows XP system (from the current >> > .msi), and I thought I’d share my findings about using mapped network >> > drives. >> > >> > If anyone else is trying to deal with this, one workaround is to turn >> > the Apache service off and run httpd.exe in a command-prompt window >> > instead. That worked for me. I’ve added the httpd.exe to my >> startup folder. >> >> It may also work if you change the dependencies of the service to wait to >> start until windows networking is started. This may simply be a race >> condition where networking share components don't finish starting before >> apache gets that far. > End original message. - > > If what William states is in fact what is going on, you could probably > still use Apache as a service if you start it manually instead of > letting it start automatically. > > Change the service properties from automatic to manual and then start it > from the service window after you are sure the network is functioning. Nice test case, yes! - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] " from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [EMAIL PROTECTED] Apache, Windows XP, and mapped drives
William A. Rowe, Jr. wrote: Dragon wrote: William A. Rowe, Jr. wrote: Jim Owens wrote: I just set up Apache 2.2.4 on a Windows XP system (from the current .msi), and I thought I’d share my findings about using mapped network drives. If anyone else is trying to deal with this, one workaround is to turn the Apache service off and run httpd.exe in a command-prompt window instead. That worked for me. I’ve added the httpd.exe to my startup folder. It may also work if you change the dependencies of the service to wait to start until windows networking is started. This may simply be a race condition where networking share components don't finish starting before apache gets that far. End original message. - If what William states is in fact what is going on, you could probably still use Apache as a service if you start it manually instead of letting it start automatically. Change the service properties from automatic to manual and then start it from the service window after you are sure the network is functioning. Nice test case, yes! I have just tried to replicate this, and when you use the mapped network drives, or other media that is dis-connectable (USB, FlashMedia etc) Apache throws up errors in the errorlog. In so much that is alias is "ignored" and you generate a standard 404 error. "[Thu Jun 07 22:49:46 2007] [error] [client 127.0.0.1] File does not exist.." That is if you use a block. If you use a block instead the error is no longer recorded. Even with LogLevel debug enabled. However if you replace the mapped drive letter with the full UNC path it works just fine. i.e. Alias /myuncpath "//server1.example.com/folder1/folder2/youruncpath" I have just tested this option, and it works fine with 2.2.4, 2.2.3, and 2.0.59. On Windows XP, and Windows 2000 Jim, you also say you get an error "the Aliased resource was not found on the server." where are you seeing that exactly? In the errorlog? - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] " from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] " from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
[EMAIL PROTECTED] need to alter FROM address when sending with PHP forms
My company has a RH ES4 web server running apache/2.2.2 and PHP 5.1.4. Our PHP programmer has developed quite a few PHP email forms and each time an email is sent, the FROM: address is [EMAIL PROTECTED] I don't know if this is a PHP problem or apache problem (or even a sendmail problem for that matter) so I am asking both lists for help. I have tried lookup up apache docs and PHP docs to alter the FROM: address to no avail. No matter what I and my programmer try in PHP or apache the from address stays coming from the user apache runs as @webserver.domain.com (obviously I mean the FQDN of the server). We would like to be able to alter the FROM: address per form as we should be able to do in PHP. If there is an apache fix for this any help would be appreciated. If this is definitely NOT an apache problem, please let me know and I will move on from there. Thank you. Dylan - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] " from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: [EMAIL PROTECTED] Apache, Windows XP, and mapped drives
Thanks all. I've been looking further into this, and according to Microsoft (http://support.microsoft.com/kb/180362/en-us), "On Windows NT and on Windows 2000, drive letters are global to the system. All users on the system share the letters A-Z. Each user does not get their own set of drive letters. This means a user can access the redirected drives of another user if they have the appropriate security access. . . "On Windows XP and on Microsoft Windows Server 2003, each logon session receives its own set of drive letters, A through Z. Therefore, redirected drives cannot be shared between processes that are running under different user accounts. Additionally, a service (or any process that is running in its own logon session) cannot access the drive letters that are established in a different logon session. However, drive letters that are mapped from a service that is running under the local System account are visible to all logon sessions." Microsoft also recommends using a UNC, but in my case this doesn't work. The resources I'm mapping are on a file server, not an http server, and when I request them directly from the file server using the http protocol, I don't get them. Not in Firefox anyway -- I think IE might bend the rules here. -Original Message- From: Tony Stevenson [mailto:[EMAIL PROTECTED] Sent: Thu 6/7/2007 6:04 PM To: users@httpd.apache.org Subject: Re: [EMAIL PROTECTED] Apache, Windows XP, and mapped drives William A. Rowe, Jr. wrote: > Dragon wrote: > >> William A. Rowe, Jr. wrote: >> >>> Jim Owens wrote: >>> I just set up Apache 2.2.4 on a Windows XP system (from the current .msi), and I thought Iâ?Td share my findings about using mapped network drives. If anyone else is trying to deal with this, one workaround is to turn the Apache service off and run httpd.exe in a command-prompt window instead. That worked for me. Iâ?Tve added the httpd.exe to my >>> startup folder. >>> >>> It may also work if you change the dependencies of the service to wait to >>> start until windows networking is started. This may simply be a race >>> condition where networking share components don't finish starting before >>> apache gets that far. >>> >> End original message. - >> >> If what William states is in fact what is going on, you could probably >> still use Apache as a service if you start it manually instead of >> letting it start automatically. >> >> Change the service properties from automatic to manual and then start it >> from the service window after you are sure the network is functioning. >> > > Nice test case, yes! > I have just tried to replicate this, and when you use the mapped network drives, or other media that is dis-connectable (USB, FlashMedia etc) Apache throws up errors in the errorlog. In so much that is alias is "ignored" and you generate a standard 404 error. "[Thu Jun 07 22:49:46 2007] [error] [client 127.0.0.1] File does not exist.." That is if you use a block. If you use a block instead the error is no longer recorded. Even with LogLevel debug enabled. However if you replace the mapped drive letter with the full UNC path it works just fine. i.e. Alias /myuncpath "//server1.example.com/folder1/folder2/youruncpath" I have just tested this option, and it works fine with 2.2.4, 2.2.3, and 2.0.59. On Windows XP, and Windows 2000 Jim, you also say you get an error "the Aliased resource was not found on the server." where are you seeing that exactly? In the errorlog? > - > The official User-To-User support forum of the Apache HTTP Server Project. > See http://httpd.apache.org/userslist.html> for more info. > To unsubscribe, e-mail: [EMAIL PROTECTED] >" from the digest: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] > > - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] " from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] <>- The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] " from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [EMAIL PROTECTED] need to alter FROM address when sending with PHP forms
On 08/06/07, Dylan Bouterse <[EMAIL PROTECTED]> wrote: If this is definitely NOT an apache problem, please let me know and I will move on from there. Thank you. It isn't an apache problem (apache doesn't send mail unless you do highly specialised tricks with it). But anyway try this for giggles. php_admin_value sendmail_path "/usr/sbin/sendmail -t -i -f [EMAIL PROTECTED]" With that set on a per-vhost basis you should be able to distinguish the sender address. Assuming you're calling the sendmail binary rather than using smtp from php, the trick is to pass the right options to the mta. -- noodl - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] " from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [EMAIL PROTECTED] Apache, Windows XP, and mapped drives
Jim Owens wrote: > > "However, drive letters that are mapped from a service that is running under > the local System account are visible to all logon sessions." WTH? That's nonsense since MS strongly recommends against EVERY granting the LocalSystem account any network privileges at all. > Microsoft also recommends using a UNC, but in my case this doesn't work. The > resources I'm mapping are on a file server, not an http server, and when I > request them directly from the file server using the http protocol, I don't > get them. Not in Firefox anyway -- I think IE might bend the rules here. Huh? > Alias /myuncpath "//server1.example.com/folder1/folder2/youruncpath" > > http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] " from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
[EMAIL PROTECTED] Howto include sqlite3 --with-dbd
I'm struggling to find any info or examples on how to include sqlite3 support for mod_authn_dbd and httpd-2.2.4. This is my current configure line but it's not working. I suspect I need to build apr separately but it's not clear if I need to and/or how to. Can anyone suggest modifications to my ./configure ? ./configure --prefix=/usr --enable-layout=RedHat --datadir=/home/httpd \ --enable-modules=all --enable-mods-shared=all --enable-ssl --enable-so \ --enable-proxy --enable-proxy-connect --enable-proxy-ftp \ --enable-proxy-http --enable-suexec --enable-dbd --with-sqlite3 \ --enable-cache --enable-disk-cache --enable-mem-cache \ --with-apr=/usr --with-apr-util=/usr --markc - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] " from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
