[us...@httpd] Apache server status - lot of Logging
Hi, On our production system, I am seeing lot of internal(::1) threads in Logging state. Sometimes upto 200+. When I searched on web, people says its normal to see these threads in 'Waiting for Connection' state. But I am worried about this 'Logging' status. This keeps growing and finally I need to restart the apache to release these threads. 0-0 20480 0/197/61485 L 0.1810665 0 0.0 0.94 372.68 ::1 xx.xxx. OPTIONS * HTTP/1.0 1-0 21625 0/69/61362 L 0.0610489 0 0.0 0.25 362.64 ::1 xx.xxx. OPTIONS * HTTP/1.0 2-0 20822 0/75/58176 L 0.0810621 0 0.0 0.22 362.40 ::1 xx.xxx. OPTIONS * HTTP/1.0 3-0 20491 0/430/59214 L 0.4010600 0 0.0 2.40 370.18 ::1 xx.xxx. OPTIONS * HTTP/1.0 4-0 20986 0/1178/58518L 1.1810255 0 0.0 5.88 354.69 ::1 xx.xxx. OPTIONS * HTTP/1.0 5-0 20616 0/15/57787 L 0.0110682 0 0.0 0.09 351.66 ::1 xx.xxx. OPTIONS * HTTP/1.0 6-0 21400 0/30/56886 L 0.0210538 0 0.0 0.19 349.33 ::1 xx.xxx. OPTIONS * HTTP/1.0 7-0 20649 0/29/56373 L 0.0210675 0 0.0 0.13 333.14 ::1 xx.xxx. OPTIONS * HTTP/1.0 8-0 19973 0/523/55010 L 0.5010651 0 0.0 2.84 325.93 ::1 xx.xxx. OPTIONS * HTTP/1.0 9-0 20650 0/149/54110 L 0.1310642 0 0.0 0.90 318.74 ::1 xx.xxx. OPTIONS * HTTP/1.0 Is this behaviour due to any wrong settings and how do we rectify this problem? Thanks, Srikanth - Thanks -- View this message in context: http://old.nabble.com/Apache-server-status---lot-of-Logging-tp30188782p30188782.html Sent from the Apache HTTP Server - Users mailing list archive at Nabble.com. - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org " from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
[us...@httpd] apache 2.2 mod rewrite/htaccess on windows 7
I have set up php, mysql and apache 2.2 but I can't seem to get mod_rewrites to work things that worked fine on xp and also linux just don't work on windows 7 wordpress and cakephp rewrites but have also tried a simple test as follows RewriteEngine on RewriteRule bob.html alice.html I have a single html file named alice.html abd an index.html file which links to bob.html and alice.html only the alice.html link works the other is error 404 I get this in access log for bob 127.0.0.1 - - [11/Nov/2010:16:33:41 +] "GET /mtest/bob.html HTTP/1.1" 404 212 and in error log [Thu Nov 11 16:29:42 2010] [error] [client 127.0.0.1] File does not exist: C:/www/htdocs/mtest/bob.html, referer: http://ss33/mtest/ would greatly appreciate any ideas to resolve this thx - S
Re: [us...@httpd] apache 2.2 mod rewrite/htaccess on windows 7
On 11/11/2010 05:48 PM, Sam Sherlock wrote: I have set up php, mysql and apache 2.2 but I can't seem to get mod_rewrites to work would greatly appreciate any ideas to resolve this RewriteLog and RewriteLogLevel are your friends. > RewriteEngine on > RewriteRule bob.html alice.html If this is in the main config, then this will never get matched, since the main config will use full pathnames (i.e. /bob.html if the URL is http://localhost/bob.html). Joost - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org " from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [us...@httpd] apache 2.2 mod rewrite/htaccess on windows 7
Thanks Joost I had it working before reading you reply minor change to the rule and removing some stuff from conf - Options All seemed to help cakephp & wordpress are also now rewriting I will be reading up on rewritelog and rewriteloglevel its useful to have friendly tools to assist when things go wierd - S On 11 November 2010 17:11, Joost de Heer wrote: > On 11/11/2010 05:48 PM, Sam Sherlock wrote: > >> I have set up php, mysql and apache 2.2 >> >> but I can't seem to get mod_rewrites to work >> > > would greatly appreciate any ideas to resolve this >> > > RewriteLog and RewriteLogLevel are your friends. > > > > RewriteEngine on > > RewriteRule bob.html alice.html > > If this is in the main config, then this will never get matched, since the > main config will use full pathnames (i.e. /bob.html if the URL is > http://localhost/bob.html). > > Joost > > - > The official User-To-User support forum of the Apache HTTP Server Project. > See http://httpd.apache.org/userslist.html> for more info. > To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org > " from the digest: users-digest-unsubscr...@httpd.apache.org > For additional commands, e-mail: users-h...@httpd.apache.org > >
Re: [us...@httpd] apache 2.2 mod rewrite/htaccess on windows 7
>> RewriteEngine on >> RewriteRule bob.html alice.html > > If this is in the main config, then this will never get matched, since the > main config will use full pathnames (i.e. /bob.html if the URL is > http://localhost/bob.html). it would still match since it's not anchored, but it would normally result in a 400. - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org " from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
[us...@httpd] SSLFIPS Directive
Apache 2.2.17 OpenSSL 0.9.8n FIPS PHP 5.3.2 libssh2 1.2.6 So, I have a web application where the front-end is Flex/AS3 and the back-end is a mix of PHP/C. PHP is compiled with the libssh2 library and the pecl extension to enable the ssh2 functionality. I use the ssh2 functions within PHP for communication between systems. For instance, the interface allows you to add another product of ours for communication with our primary product. Communication works via SSH, I'm not going to get into the details of that. Anyway, what happens when I introduce the SSLFIPS directive into my httpd.conf, apache child processes are crashing. This happens even if the directive's value is set to off. However, if I don't introduce the directive, everything works as expected. We are required by government customers to offer FIPS. [Thu Nov 11 13:50:43 2010] [notice] Operating in SSL FIPS mode [Thu Nov 11 13:50:43 2010] [error] Init: Skipping generating temporary 512 bit RSA private key in FIPS mode [Thu Nov 11 13:50:43 2010] [error] Init: Skipping generating temporary 512 bit DH parameters in FIPS mode [Thu Nov 11 13:50:43 2010] [notice] Apache/2.2.17 (Unix) mod_ssl/2.2.17 OpenSSL/0.9.8o-fips configured -- resuming normal operations digest.c(151): OpenSSL internal error, assertion failed: Digest update previous FIPS forbidden algorithm error ignored digest.c(151): OpenSSL internal error, assertion failed: Digest update previous FIPS forbidden algorithm error ignored [Thu Nov 11 13:50:58 2010] [notice] child pid 24913 exit signal Aborted (6) [Thu Nov 11 13:50:58 2010] [notice] child pid 24915 exit signal Aborted (6) Any thoughts? - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org " from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
[us...@httpd] SSLRequire & UTF-8 characters
I'm trying to setup a DN filter against a certificate that has UTF-8 characters
in it.
The Subject DN for the incoming certificate is:
C=CA,ST=Province,L=City,O=Company,OU=Unit,cn=“weird...@¿سǽ€.com
The filter I'm trying to use in the httpd configuration file is:
SSLRequire (%{SSL_CLIENT_S_DN} =~ m#^/.*cn=“weird...@¿سǽ€.*$#i)
This pattern does work for me for other certificates that do not contain UTF-*
characters.
After some investigation, I discovered that this line does successfully pick up
the certificate:
SSLRequire (%{SSL_CLIENT_S_DN} =~ m#^/.*CN= \\x1C\\x00W\\x00e\\x00i\\x00r\\x00d
\\x1d\\...@\\x00\\xbf\\x063\\x01\\xfd \\xAC\\x00.\\x00c\\x00o\\x00m.*$#i)
While that works for this particular case, I'm trying to develop something
where the regex string will be constructed based on an arbitrary certificate
supplied at runtime.
Questions:
1) Is it possible to configure httpd to match UTF-8 characters without all the
escaping?
2) If all the "\\x" escaping is necessary, why are there 3 spaces in the
escaped string when they're not present in the certificate? (One space is after
CN=, one after \\x00d, and one after \\xFD.)
Other relevant info:
Apache httpd v2.2.16
PCRE v6.6-2.el5_1.7
I also tried PCRE v8.10, but I did not note any change in behaviour.
[users@httpd] Looking for a logging module to use postgres as log destination
Hi All ! Does someone know a reliable module for this? If found "modpglogger", but no installable package for my debian [lenny]. The mod above depends on another packages ["apache-common", not available too]. I am too new to linux to manage this lot of dependencies at the moment. Any help would be great! br++mabra - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org " from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
[users@httpd]
http://www.hlpc.it/andrew.html
[users@httpd] Need Help with Apache AllowOverride
I have a web server at webIP off site. I have a second server for photos running a php photo gallery app behind apache at photoIP on my local LAN. I have a page on the web server that uses iframes to the photo server's images. I am trying to restrice access to the photo server to requests from the web server using apache Allowoverride on the photo server. Here is what I have: DocumentRoot /var/www/gallery Options FollowSymLinks AllowOverride None Options Indexes FollowSymLinks MultiViews AllowOverride All FileInfo Options Order allow,deny Deny from all # internal access Allow from 192.168.25.0/24 Allow from 127 # Web server Allow from webIP ErrorLog /var/log/apache2/hammerhead/ error.log # Possible values include: debug, info, notice, warn, error, crit, # alert, emerg. LogLevel debug CustomLog /var/log/apache2/access.log combined I can access the photos from a machine on my local LAN, but not from hosts off my LAN. The only way to get it to work is to change Deny from all to Allow from all. What am I doing wrong? Thanks! Mark
RE: [us...@httpd] SSLFIPS Directive (UNCLASSIFIED)
Classification: UNCLASSIFIED Caveats: NONE Related? http://rt.openssl.org/Ticket/Display.html?id=1278&user=guest&pass=guest --- Dwight Victor (Contractor), CISSP, RHCT, SCSECA DISA-PAC EMSS Gateway Hawaii EMAIL: dwight.victor@disa.mil TEL: (808) 653-3677 ext 229 -Original Message- From: ja...@nixsecurity.org [mailto:ja...@nixsecurity.org] Sent: Thursday, November 11, 2010 9:01 AM To: users@httpd.apache.org Subject: [us...@httpd] SSLFIPS Directive Apache 2.2.17 OpenSSL 0.9.8n FIPS PHP 5.3.2 libssh2 1.2.6 So, I have a web application where the front-end is Flex/AS3 and the back-end is a mix of PHP/C. PHP is compiled with the libssh2 library and the pecl extension to enable the ssh2 functionality. I use the ssh2 functions within PHP for communication between systems. For instance, the interface allows you to add another product of ours for communication with our primary product. Communication works via SSH, I'm not going to get into the details of that. Anyway, what happens when I introduce the SSLFIPS directive into my httpd.conf, apache child processes are crashing. This happens even if the directive's value is set to off. However, if I don't introduce the directive, everything works as expected. We are required by government customers to offer FIPS. [Thu Nov 11 13:50:43 2010] [notice] Operating in SSL FIPS mode [Thu Nov 11 13:50:43 2010] [error] Init: Skipping generating temporary 512 bit RSA private key in FIPS mode [Thu Nov 11 13:50:43 2010] [error] Init: Skipping generating temporary 512 bit DH parameters in FIPS mode [Thu Nov 11 13:50:43 2010] [notice] Apache/2.2.17 (Unix) mod_ssl/2.2.17 OpenSSL/0.9.8o-fips configured -- resuming normal operations digest.c(151): OpenSSL internal error, assertion failed: Digest update previous FIPS forbidden algorithm error ignored digest.c(151): OpenSSL internal error, assertion failed: Digest update previous FIPS forbidden algorithm error ignored [Thu Nov 11 13:50:58 2010] [notice] child pid 24913 exit signal Aborted (6) [Thu Nov 11 13:50:58 2010] [notice] child pid 24915 exit signal Aborted (6) Any thoughts? - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org " from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org Classification: UNCLASSIFIED Caveats: NONE smime.p7s Description: S/MIME cryptographic signature
[users@httpd] mod_proxy_http and input filters
Can someone please help me with this issue? I have recently created an input filter. This input filter was created to modify the POST uri on the condition that the body matches a certain string. After the uri is modified, mod_proxy_http would send the correct POST uri to the backend server. Yes, this worked and the correct uri is sent to the backend server. However, when there are two ProxyPass configuration, there is an issue. For example: ProxyPass /altlocation http://serverA/altlocation ProxyPass / http://defaultServer/ The input filter converts the original URI to /altlocation if the body matches a certain condition. The issue is that I always hit http://defaultServer/ rather than http://serverA/altlocation. It seems that this issue is occuring because the determination of which server to proxy to is performed after the header is sent, and not after the body arrives. Does anyone know how I can avoid this? Thanks, Lawrence
[users@httpd] "AppendToLog" statement somewhere?
Hello ! I am coming for IIS and ask me if and how my mono based webs kann relay on such a functionality and where I'll finally find that output. br++mabra The "AppendToLog" on IIS writes extra text. - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org " from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
