[users@httpd] How to apply worker MPM

[vishesh kumar]

Dear all
   I am not newbie in Apache.  I am using Apache Server on Centos 5.5. I
need to remove prefork MPM  and apply worker MPM in place of that, Do i need
to recompile Apache ?

Thanks & Regards
vishesh kumar

-- 
http://linuxmantra.com

[users@httpd] Applets Failed to load with http server as Proxy/Reverse with SSL

[Pankaj Tiwari]

1. Configured http server 2.2.17 as proxy and reverse proxy for my web
application
2. The web application is running under Jboss without SSL
3. Able to load the web application (except Applets) through http server (no
ssl)
4. Able to load the web application as well as Applets through http server
(no ssl) but had to set ProxyPreserveHost in httpd.conf file
5. *Unable to load the web application at all when http server is configured
with ssl (ProxyPreserveHost is enabled)*
6. *Able to load the web application but not the Applets when http server is
configured with ssl (ProxyPreserveHost disabled)*

My VirtualHost configuration for SSL looks like this
//File: httpd-ssl.conf

..
ServerName WEBAPP.COM 
..
ProxyRequests Off
ProxyPass /WEBAPP http://WEBAPP.COM:8080/WEBAPP
ProxyPassReverse /WEBAPP
http://WEBAPP.COM:8080/WEBAPP
#ProxyPreserveHost On
...

Q1. Is this a correct redirection  (HTTPS request) --> [HTTP Server]
-->  (HTTP redirect) --> [Web Application]
Q2. Any configuration change to allow applet load successfully?
Q3. The behavior of ProxyPreserveHost parameter.  It allows applets to load
when I am using plain HTTP but not when ssl is enabled

Any help is appreciated

Thanks,
Pankaj

[users@httpd] Re: [mod_fcgid] Question about FcgidCmdOptions (InitialEnv) and session (cookie) problem with PHP

[Carsten Wiedmann]

Am 14.01.2011 10:13, schrieb Carsten Wiedmann:

1)
With FcgidInitialEnv I write:
| FcgidInitialEnv FOO "C:\\ProgramData\\Foo"

but with FcgidCmdOptions it's:
| FcgidCmdOptions "C:/usr/bin/cgi.exe" \
| InitialEnv FOO=C:\ProgramData\Foo

I have to use a single backslash and not a double backslash as usual. Why?

Another problem: How can I set a value with space? e.g:
| FcgidInitialEnv FOO "C:\\Program Files\\Foo"

is working. But:
| InitialEnv FOO=C:\Program Files\Foo
or
| InitialEnv FOO="C:\Program Files\Foo"
not.


Hm, next problem with a space. How can I use a space in FcgidWrapper?
| FcgidWrapper "C:/Program Files/PHP/php-5.3.5/php-cgi.exe" .php

is not working. Error:
| Syntax error on line 34 of C:/ProgramData/.../php.conf:
| Wrapper C:/Program cannot be accessed: (720002)Das System kann die | | 
angegebene Datei nicht finden.


Maybe the whole thing is more a question for Dev@?

Regards,
Carsten


-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
  "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org

Re: [users@httpd] How to apply worker MPM

[Tom Evans]

On Wed, Feb 9, 2011 at 8:25 AM, vishesh kumar  wrote:
> Dear all
>    I am not newbie in Apache.  I am using Apache Server on Centos 5.5. I
> need to remove prefork MPM  and apply worker MPM in place of that, Do i need
> to recompile Apache ?
> Thanks & Regards
> vishesh kumar
>

Yes, or install a differently compiled package at any rate.

Cheers

Tom

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
   "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org

Re: [users@httpd] PHP to control Apache

[Nilesh Govindarajan]

On 02/09/2011 01:16 AM, Jorge Schrauwen wrote:

On Tue, Feb 8, 2011 at 3:01 PM, Matus UHLAR - fantomas
  wrote:

On 06.02.11 23:05, Lars Nielsen wrote:

I am writing a PHP application to control primarily my VirtualHost
configurations in Apache(2.2.9). Can you guide my to any good knowlegde
of
  1. how to structure the generated configurationfile(s)
  2. how to reload/restart apache from PHP?


mod_perl is designed to do such things. It can do much more of course.

Here is a simple example:
http://wiki.apache.org/httpd/ApacheVirtualHostMysql



The problem with using mod_perl is one needs to know perl to a decent 
extent or at least db operations in perl. It is a strict requirement.
Where as if you use inotify events to reload the config file when it is 
changed, there's no requirement of perl, you can do the automatic config 
modifier in your favorite language.


Another idea (may be bad one) is to use a RewriteMap and generate 
rewrite maps using php (it would be a highly cpu intensive task for 
apache probably, no ideas..never used rewritemap)


--
Regards,
Nilesh Govindarajan
Facebook: http://www.facebook.com/nilesh.gr
Twitter: http://twitter.com/_linuxgeek_
Website: http://www.itech7.com

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
  "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org

Re: [users@httpd] PHP to control Apache

[Fredric Fredricson]

On 02/09/2011 12:20 PM, Nilesh Govindarajan wrote:

[snip]

The problem with using mod_perl is one needs to know perl to a decent 
extent or at least db operations in perl. It is a strict requirement.

[snip]
This, of course, depends on your situation but perl DBI is quite well 
documented and fairly easy to use and Perl, as a language, is not that 
strange and comparable with php (if you exclude the OOP-parts, avoid OOP 
in Perl). As a text processing language, Perl is better than all others 
I have seen and vastly superior to php (not that php is exactly bad, 
perl is just much better).


But there is, of course, a learning curve.

Just saying..

/Fredric
<>
-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
   "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org

Re: [users@httpd] Domain Registrant's Details

[Stormy]

At 03:25 AM 2/9/2011 +, Stephen Love wrote:
I do know that GoDaddy.com has a private/lock feature that hides details 
of the ownership info, but I've just never chosen to use it. [snip]


This is really OT for this list, but one of my "functions" is setting 
policy and overseeing the abuse desks covering nearly 3*10^6 user email 
addresses. If spam is detected coming from *your* domain (whether you are a 
direct spammer or your system has become infected with a worm, trojan, 
botnet, etc) and we cannot contact *you*, then we will contact your IP 
supplier - and this can hurt *you* as most suppliers (who are not already 
black-listed) have strict ToS (Terms of Service) and AUPs (Authorized User 
Policies) banning Unsolicited Bulk Email (UBE).


Godaddy are amongst the worst offenders (from an abuse desk pov) for 
"cloaking" - to the point that we hardly use their whois at all, and just 
advise the IP supplier direct. Other registrars offer a "semi private" 
email forwarding scheme that will take most of *your* pain away while still 
allowing contact with role addresses (postmaster@, admin@, etc)


My two cents...
Best - Paul


-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
  "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org

[users@httpd] Re: SetHandler mod_ruby Apache 2.2.17 Windows

[Tom Evans]

On Wed, Feb 9, 2011 at 2:59 PM, Zeno Davatz  wrote:
> Dear Tom
>
> Thank you for your reply.
>
> Yes, it seems so, as my index.rbx is not being loaded AFAICT.
>
> According to my understanding the above setup should work, but it does
> not work as the page is not served but I just get the following error:
>
> [client 127.0.0.1] Attempt to serve directory: 
> C:/Users/zdavatz/de.oddb.org/doc/
>
> and the page in the browser tells me
>
> Not Found - The requested URL / was not found on this server. But it
> is there. The directory is there as well and index.rbx is in the
> directory C:/Users/zdavatz/de.oddb.org/doc/
>
> To my Linux understanding this should work on Apache for Windows as well.
>
> Best
> Zeno
>

(why are we talking on dev@ btw, this seems clearly a users@
discussion. If/when you reply, please drop dev@)

OK, there are some inconsistencies in your conf.

First, in your vhost configuration, you have SetHandler ruby-object at
the top level. This *will* set the handler for all requests to the
vhost to use handler ruby-object. All requests. Including for files,
directory indexes, and so on...

Secondly, in the directory where I expect you probably do want to have
ruby-object as the handler, you tell apache to execute *.rbx as
cgi-script. I thought this whole exercise was to have them executed by
mod_ruby..

Finally, having found that bug report, you seem to be trying hard to
trigger it! In the bug report you linked to us, there is a good
work-around listed by wrowe@ - why not use that?

Cheers

Tom

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
   "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org

[users@httpd] SetHandler mod_ruby Apache 2.2.17 Windows

[Zeno Davatz]

Hi

This concerns the following:

https://issues.apache.org/bugzilla/show_bug.cgi?id=25435

My question is in reading to above Bug-Report as mod_ruby.so uses
SetHandler as well.

my mod_ruby.conf file in in C:\Apache2.2\conf\extra is

https://gist.github.com/818508

my httpd_vhost.conf is

https://gist.github.com/818654

and my C:\Apache2.2\conf\httpd.conf file includes the following lines:

Include conf/extra/mod_ruby.conf
Include conf/extra/httpd-vhosts.conf

Now when I try to access

http://de.oddb.win

on my local machine the Apache error Log tells me:

[client 127.0.0.1] Attempt to serve directory: C:/Users/zdavatz/de.oddb.org/doc/

LogLevel in httpd.conf file is set to debug.

Is this related to the above bug-Report?

Also my C:\Windows\System32\drivers\etc\hosts has this set

127.0.0.1       de.oddb.win

This setup works on Linux.

Thank you for any Feedback.

Best
Zeno

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
   "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org

[users@httpd] Re: SetHandler mod_ruby Apache 2.2.17 Windows

[Zeno Davatz]

Dear Tom

On Wed, Feb 9, 2011 at 4:12 PM, Tom Evans  wrote:

> (why are we talking on dev@ btw, this seems clearly a users@
> discussion. If/when you reply, please drop dev@)
>
> OK, there are some inconsistencies in your conf.
>
> First, in your vhost configuration, you have SetHandler ruby-object at
> the top level. This *will* set the handler for all requests to the
> vhost to use handler ruby-object. All requests. Including for files,
> directory indexes, and so on...

What do you mean by top level?

Sorry, I do not understand what you are trying to say. I also tried
this vhosts.conf setting with the same result. As said this setting
works on Linux (without the


SetHandler ruby-object
.

https://gist.github.com/818654

> Secondly, in the directory where I expect you probably do want to have
> ruby-object as the handler, you tell apache to execute *.rbx as
> cgi-script. I thought this whole exercise was to have them executed by
> mod_ruby..

So where you that be in your opinion? Can you be a bit more specific please.

> Finally, having found that bug report, you seem to be trying hard to
> trigger it! In the bug report you linked to us, there is a good
> work-around listed by wrowe@ - why not use that?

I just sent a Mail to users@

That solution does not seem to work, see this: https://gist.github.com/818654

Best
Zeno

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
   "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org

[users@httpd] Re: SetHandler mod_ruby Apache 2.2.17 Windows

[Zeno Davatz]

Dear Tom

On Wed, Feb 9, 2011 at 4:12 PM, Tom Evans  wrote:

> (why are we talking on dev@ btw, this seems clearly a users@
> discussion. If/when you reply, please drop dev@)

It seems a dev issue because what works on Linux does not seem to work
on Apache for Windows. That is why I sent this to dev@ as well.

> OK, there are some inconsistencies in your conf.
>
> First, in your vhost configuration, you have SetHandler ruby-object at
> the top level. This *will* set the handler for all requests to the
> vhost to use handler ruby-object. All requests. Including for files,
> directory indexes, and so on...
>
> Secondly, in the directory where I expect you probably do want to have
> ruby-object as the handler, you tell apache to execute *.rbx as
> cgi-script. I thought this whole exercise was to have them executed by
> mod_ruby..
>
> Finally, having found that bug report, you seem to be trying hard to
> trigger it! In the bug report you linked to us, there is a good
> work-around listed by wrowe@ - why not use that?

This is my mod_ruby.conf settings on Linux and there it just works fine:

LoadModule ruby_module modules/mod_ruby.so

# taken from the example file
# If the ruby module is installed, this will be enabled.
# for Apache::RubyRun
RubyRequire apache/ruby-run

# exec files under /ruby as ruby scripts.

SetHandler ruby-object
RubyHandler Apache::RubyRun.instance
Options ExecCGI


# exec *.rbx as ruby scripts.

SetHandler ruby-object
RubyHandler Apache::RubyRun.instance


So if you mean this "Options ExecCGI" then yes, to my understanding
Ruby is executed as CGI on Apache, at least on Linux it is.

Now Apache on Windows delivers me the same result (as so is the following)

[error] [client 127.0.0.1] Attempt to serve directory:
C:/Users/zdavatz/de.oddb.org/doc/

with these settings here: https://gist.github.com/818654

This option here https://gist.github.com/818519 I just tried to see if
I get the same result or not.

Best
Zeno

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
   "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org

[users@httpd] --enable-rule=SSL_EXPERIMENTAL in 2.0.64

[Kogelheide, Ryan SSBC:EX]

Hi everyone,

I'm trying to compile 2.0.64 on Solaris 10.  Unfortunately, I get the message:

configure: WARNING: unrecognized options: --enable-nonportable-atomics, 
--disable-ipv6, --enable-rule, --enable-lib64 

According to the posts I see, these are just warnings, but when I try to start 
I get:

Invalid command 'SSLCryptoDevice', perhaps mis-spelled or defined by a module 
not included in the server configuration

This worked in 2.0.63 no problem.

Does anyone have a workaround for this issue? Any ideas, no matter how 
harebrained would be welcome :-)

Details:
sparc-sun-solaris2.10-gcc (GCC) 4.3.3 (20091210) (gccfss)
CC="gcc -m64 -mcpu=niagara2 -O3 -R${GCCRT_DIR}/lib/sparcv9 
-L${GCCRT_DIR}/lib/sparcv9 -R${OPENSSL_DIR}/lib -L${OPENSSL_DIR}/lib 
-R/usr/sfw/lib/64 -L/usr/sfw/lib/64"
./configure \
"--with-mpm=worker" \
"--enable-nonportable-atomics=yes" \
"--disable-ipv6" \
"--enable-unique-id=shared" \
"--enable-ssl=shared" \
"--enable-headers=shared" \
"--enable-rewrite=shared" \
"--enable-proxy=shared" \
"--prefix=${HTTPD_DIR}" \
"--enable-rule=SSL_EXPERIMENTAL" \
"--with-ssl=${OPENSSL_DIR}" \
"--enable-lib64"

Regards,

Ryan

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
   "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org

[users@httpd] Re: SetHandler mod_ruby Apache 2.2.17 Windows

[Tom Evans]

On Wed, Feb 9, 2011 at 4:07 PM, Zeno Davatz  wrote:
> Dear Tom
>
> On Wed, Feb 9, 2011 at 4:12 PM, Tom Evans  wrote:
>
>> (why are we talking on dev@ btw, this seems clearly a users@
>> discussion. If/when you reply, please drop dev@)
>
> It seems a dev issue because what works on Linux does not seem to work
> on Apache for Windows. That is why I sent this to dev@ as well.

Hmm. Please don't - this isn't a dev issue. See below - you aren't
running the same configuration on windows as on linux. Stop harassing
our poor devs :)

>
>> OK, there are some inconsistencies in your conf.
>>
>> First, in your vhost configuration, you have SetHandler ruby-object at
>> the top level. This *will* set the handler for all requests to the
>> vhost to use handler ruby-object. All requests. Including for files,
>> directory indexes, and so on...
>>
>> Secondly, in the directory where I expect you probably do want to have
>> ruby-object as the handler, you tell apache to execute *.rbx as
>> cgi-script. I thought this whole exercise was to have them executed by
>> mod_ruby..
>>
>> Finally, having found that bug report, you seem to be trying hard to
>> trigger it! In the bug report you linked to us, there is a good
>> work-around listed by wrowe@ - why not use that?
>
> This is my mod_ruby.conf settings on Linux and there it just works fine:
>
> LoadModule ruby_module modules/mod_ruby.so
>
> # taken from the example file
> # If the ruby module is installed, this will be enabled.
> # for Apache::RubyRun
> RubyRequire apache/ruby-run
>
> # exec files under /ruby as ruby scripts.
> 
>    SetHandler ruby-object
>    RubyHandler Apache::RubyRun.instance
>    Options ExecCGI
> 
>
> # exec *.rbx as ruby scripts.
> 
>    SetHandler ruby-object
>    RubyHandler Apache::RubyRun.instance
> 
>
> So if you mean this "Options ExecCGI" then yes, to my understanding
> Ruby is executed as CGI on Apache, at least on Linux it is.

OK. That config is WAY different to your posted windows config. In
your windows config, you have "SetHandler ruby-object" at the vhost
level, on linux you do not. It's a big difference!

According to [1], ExecCGI is only required for eruby.

>
> Now Apache on Windows delivers me the same result (as so is the following)
>
> [error] [client 127.0.0.1] Attempt to serve directory:
> C:/Users/zdavatz/de.oddb.org/doc/
>
> with these settings here: https://gist.github.com/818654
>
> This option here https://gist.github.com/818519 I just tried to see if
> I get the same result or not.
>
> Best
> Zeno
>

OK, replace your vhost conf file with this one[2]. Does that work?

Cheers

Tom

[1] http://modruby.net/en/doc/?InstallGuide
[2] http://pastebin.com/X79K6V8U

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
   "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org

Re: [users@httpd] Re: SetHandler mod_ruby Apache 2.2.17 Windows

[Eric Covener]

On Wed, Feb 9, 2011 at 11:07 AM, Zeno Davatz  wrote:
> Dear Tom
>
> On Wed, Feb 9, 2011 at 4:12 PM, Tom Evans  wrote:
>
>> (why are we talking on dev@ btw, this seems clearly a users@
>> discussion. If/when you reply, please drop dev@)
>
> It seems a dev issue because what works on Linux does not seem to work
> on Apache for Windows. That is why I sent this to dev@ as well.

Stop copying the development list.

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
   "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org

Re: [users@httpd] Re: SetHandler mod_ruby Apache 2.2.17 Windows

[Zeno Davatz]

Dear Tom

Thanks for the reply.

On Wed, Feb 9, 2011 at 5:22 PM, Tom Evans  wrote:

>> This is my mod_ruby.conf settings on Linux and there it just works fine:
>>
>> LoadModule ruby_module modules/mod_ruby.so
>>
>> # taken from the example file
>> # If the ruby module is installed, this will be enabled.
>> # for Apache::RubyRun
>> RubyRequire apache/ruby-run
>>
>> # exec files under /ruby as ruby scripts.
>> 
>>    SetHandler ruby-object
>>    RubyHandler Apache::RubyRun.instance
>>    Options ExecCGI
>> 
>>
>> # exec *.rbx as ruby scripts.
>> 
>>    SetHandler ruby-object
>>    RubyHandler Apache::RubyRun.instance
>> 
>>
>> So if you mean this "Options ExecCGI" then yes, to my understanding
>> Ruby is executed as CGI on Apache, at least on Linux it is.
>
> OK. That config is WAY different to your posted windows config. In
> your windows config, you have "SetHandler ruby-object" at the vhost
> level, on linux you do not. It's a big difference!

This is my vhosts Linux config: https://gist.github.com/818788

> According to [1], ExecCGI is only required for eruby.

Well it is in our Linux mod_ruby Config as well and we do not use Eruby.

>> Now Apache on Windows delivers me the same result (as so is the following)
>>
>> [error] [client 127.0.0.1] Attempt to serve directory:
>> C:/Users/zdavatz/de.oddb.org/doc/
>>
>> with these settings here: https://gist.github.com/818654
>>
>> This option here https://gist.github.com/818519 I just tried to see if
>> I get the same result or not.

> OK, replace your vhost conf file with this one[2]. Does that work?

Thanks for the file. This just displays me the content of my index.rbx
as plain text but ruby is not actually executed. The access log tells
me:

"GET / HTTP/1.1" 304 -

Best
Zeno

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
   "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org

Re: [users@httpd] Re: SetHandler mod_ruby Apache 2.2.17 Windows

[Tom Evans]

On Wed, Feb 9, 2011 at 4:54 PM, Zeno Davatz  wrote:
> Dear Tom
>
> Thanks for the reply.
>

I'm not a windows guy. I've just noticed that one of your directories
starts 'C:\Users\..'. Doesn't windows do something crazy with 'user'
folders? Can you move your docroot outside of this and see if it makes
any difference?

Cheers

Tom

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
   "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org

Re: [users@httpd] Re: SetHandler mod_ruby Apache 2.2.17 Windows

[Zeno Davatz]

Dear Tom

On Wed, Feb 9, 2011 at 6:01 PM, Tom Evans  wrote:

> I'm not a windows guy. I've just noticed that one of your directories
> starts 'C:\Users\..'. Doesn't windows do something crazy with 'user'
> folders? Can you move your docroot outside of this and see if it makes
> any difference?

;) - me neither. Ok, I will try that. How do you come to that
conclusion, any links or documentation?

Best
Zeno

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
   "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org

Re: [users@httpd] Re: SetHandler mod_ruby Apache 2.2.17 Windows

[Zeno Davatz]

Dear Tom

On Wed, Feb 9, 2011 at 6:01 PM, Tom Evans  wrote:

> I'm not a windows guy. I've just noticed that one of your directories
> starts 'C:\Users\..'. Doesn't windows do something crazy with 'user'
> folders? Can you move your docroot outside of this and see if it makes
> any difference?

I get the same results when I exchange the User Path with this path

C:\Ruby-1.8.6-oniguruma\lib\ruby\gems\1.8\gems\de.oddb-2.0.0\doc

index.rbx shows but only as plain text.

That is why I linked to the bug in the first place, because William
mentioned this:

https://issues.apache.org/bugzilla/show_bug.cgi?id=25435#c7

I still think this is a dev-issue.

Best
Zeno

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
   "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org

Re: [users@httpd] Re: SetHandler mod_ruby Apache 2.2.17 Windows

[Zeno Davatz]

Dear Tom

On Wed, Feb 9, 2011 at 6:01 PM, Tom Evans  wrote:

> I'm not a windows guy. I've just noticed that one of your directories
> starts 'C:\Users\..'. Doesn't windows do something crazy with 'user'
> folders? Can you move your docroot outside of this and see if it makes
> any difference?

If I replace this


SetHandler ruby-object
RubyHandler Apache::RubyRun.instance


with this


SetHandler ruby-object
RubyHandler Apache::RubyRun.instance


then I again get

 Attempt to serve directory:
C:/Ruby-1.8.6-oniguruma/lib/ruby/gems/1.8/gems/de.oddb-2.0.0/doc/

I find this indeed quite intriguing. Same error as with my very
initial configuration.

Best
Zeno

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
   "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org

[users@httpd] improve speed and performace of apache server on Windows 7

[Alain Roger]

Hi,

i have apache on Windows 7 OS and i would like to know how can i seepd up it
respectively how can i improve it to make its answer to php request faster ?
thx.

-- 
Alain
---
Windows 7 x64 / Fedora 14 x64
PostgreSQL 8.3.5 / MySQL 5
Apache 2.2.16
PHP 5.3.1
C# 2005-2008

Re: [users@httpd] --enable-rule=SSL_EXPERIMENTAL in 2.0.64

[Igor Galić]

- Original Message -
> Hi everyone,
>
> I'm trying to compile 2.0.64 on Solaris 10.  Unfortunately, I get the
> message:

First off: The latest and best version is currently: 2.2.17


> configure: WARNING: unrecognized options:
> --enable-nonportable-atomics, --disable-ipv6, --enable-rule,
> --enable-lib64

These are probably all APR/APR-Util options, which you're not compiling.
i.e.: There is *no* --with-included-apr in your configure.

> According to the posts I see, these are just warnings, but when I try
> to start I get:
>
> Invalid command 'SSLCryptoDevice', perhaps mis-spelled or defined by
> a module not included in the server configuration

Is the module loaded?

> This worked in 2.0.63 no problem.
>
> Does anyone have a workaround for this issue? Any ideas, no matter
> how harebrained would be welcome :-)
>
> Details:
> sparc-sun-solaris2.10-gcc (GCC) 4.3.3 (20091210) (gccfss)
> CC="gcc -m64 -mcpu=niagara2 -O3 -R${GCCRT_DIR}/lib/sparcv9
> -L${GCCRT_DIR}/lib/sparcv9 -R${OPENSSL_DIR}/lib -L${OPENSSL_DIR}/lib
> -R/usr/sfw/lib/64 -L/usr/sfw/lib/64"
> ./configure \
> "--with-mpm=worker" \
> "--enable-nonportable-atomics=yes" \
> "--disable-ipv6" \
> "--enable-unique-id=shared" \
> "--enable-ssl=shared" \
> "--enable-headers=shared" \
> "--enable-rewrite=shared" \
> "--enable-proxy=shared" \
> "--prefix=${HTTPD_DIR}" \
> "--enable-rule=SSL_EXPERIMENTAL" \
> "--with-ssl=${OPENSSL_DIR}" \
> "--enable-lib64"
>
> Regards,
>
> Ryan

i

--
Igor Galić

Tel: +43 (0) 664 886 22 883
Mail: i.ga...@brainsware.org
URL: http://brainsware.org/

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
   "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org

Re: [users@httpd] Help with Apoache config to support Subversion

[Igor Galić]

- Original Message -
> Hello, I am finishing up my configuration for Apache/SVN and have one

Generally we recommend us...@subversion.apache.org for subversion
related problems, but in this case I guess the fix is easy.

> last authorization quandary. I am on Ubuntu 10.04 with LAMP, SVN and
> Eclipse comprising my dev environment. I have everything installed,
> config'd and running except the last SVN configuration for
> authorization. I have the Eclipse plugins installed for Subversive
> and I
> can connect to the SVN repo I have created, I get challenged and
> provide
> my user/pass, but get bounced with the following message.
>
> [Tue Feb 08 06:08:16 2011] [error] [client 127.0.0.1] access to /SVN
> failed, reason: require directives present and no Authoritative
> handler.
>
> I have a password file I created with htpasswd. It seems to be
> hitting
> this file because I can pass a bad username and it will come back
> with
> user not found. If I use my username it will ask for a password, but
> will fail as above. I have the following modules loading
> dav_svn.load
> dav_svn.conf
>
>
> Here is my httpd.conf
> ##
> ## httpd.conf
> ##
> DocumentRoot "/var/www"
> #
> Servername "superglts"
> #
> Alias /SVN /home/apesa/Development/SVN
> #
> 
> AllowOverride All
> DAV svn
> Order allow,deny
> Allow from all
> 
> #
> #
> 
> DAV svn
> SVNListParentPath on
> SVNParentPath "/SVN"
> AuthName "SVN"
> AuthType Basic
> SVNPathAuthz off
> AuthBasicProvider file
> AuthUserFile "/home/apesa/Development/passwords"
> Require valid_user

http://httpd.apache.org/docs/current/mod/core.html#require

Note how it's "Require valid-user", not "Require valid_user"


> 
>
> Any help or pointers are appreciated,
> Thanks,
> Pat

i

--
Igor Galić

Tel: +43 (0) 664 886 22 883
Mail: i.ga...@brainsware.org
URL: http://brainsware.org/

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
   "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org

Re: [users@httpd] improve speed and performace of apache server on Windows 7

[Igor Galić]

- Original Message -
> Hi,
>
> i have apache on Windows 7 OS and i would like to know how can i
> seepd up it respectively how can i improve it to make its answer to
> php request faster ?

Faster? How much faster?
How fast is it now?
How fast do you need it to be?
How fast does it have to be on a single node in order to be feasible?

> thx.
>
> --
> Alain
> ---
> Windows 7 x64 / Fedora 14 x64
> PostgreSQL 8.3.5 / MySQL 5
> Apache 2.2.16
> PHP 5.3.1
> C# 2005-2008


This is nice, but it doesn't say anything about your config or
your system.

What machine do you have? How much RAM does it sport?

What MPM settings do you have?
Do you use a PHP accelerator like APC?
Are you running the DB on the same box as the Web server?
Are you caching? Are your sites cachable?
What does C# have to do with any of that?


See our wiki: http://wiki.apache.org/httpd/PerformanceScalingUp
It might be a little heavy on Unix right now, but that's
because I'm a Unix dork and my Windows-Fu is very weak.

I'd love to read some feedback ;)

i

--
Igor Galić

Tel: +43 (0) 664 886 22 883
Mail: i.ga...@brainsware.org
URL: http://brainsware.org/

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
   "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org

Re: [users@httpd] Global 301 Redirects

[Igor Galić]

- Original Message -
> Greetings,
>
> I'm trying to figure out a way to have each of my vhosts do a 301
> redirect upon receiving a request which contains "www."
>
> Basically we want to drop all of those www subdomains for SEO
> purposes,
> but we are hosting dozens of websites, and would rather not have to

Really? Just dozens?

> put
> in a redirect on every vhost entry.  My thought were that we could do
> this using mod-rewrite and regexp, but not sure.

Anyway... Sure you could use mod_rewrite to complicate your config
even more -- as, with dozens! of vhosts you're afraid of touching them

But even then you'd have to add, at least:

RewriteEngine On
RewriteOptions inherit

to each vhost.

> Any insights?

Now, instead of complicating things, why not take a shot at simplifying
it with mod_macro:
http://www.cri.ensmp.fr/~coelho/mod_macro/

> Thanks.
>
> --
> --asai

i

--
Igor Galić

Tel: +43 (0) 664 886 22 883
Mail: i.ga...@brainsware.org
URL: http://brainsware.org/

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
   "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org

Re: [users@httpd] 64 Bit Apache httpd on Solaris

[Igor Galić]

- Original Message -
> Hi William,
> I tried CFLAGS="gcc -m64", (gcc is installed in /usr/sfw/bin/), but
> it broke configure ...
>
> checking for gcc... gcc
> checking for C compiler default output file name...
> configure: error: in
> `/opt/oracle/stage/tmp/k_working/Apache2.2/httpd-2.2.17/srclib/apr':
> configure: error: C compiler cannot create executables

Well *that* does look broken.

Like Eugen I use Sun cc to compile my stack:

https://scm.brainsware.org/svn/webstack/solaris/

I too use CFLAGS="... -m64 .." and I've never seen any issues.

i


--
Igor Galić

Tel: +43 (0) 664 886 22 883
Mail: i.ga...@brainsware.org
URL: http://brainsware.org/

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
   "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org

[users@httpd] How do you build apache 2.2.17 with openssl FIPS ???

[Keith Theman]

Hello,

I am trying to build Apache 2.2.17 on RH linux 5 with openssl FIPS 
openssl-fips-1.2.2.tar.gz

I built and install openssl fips 1.2.2 and then ran my apache config:

 ./configure --prefix=/usr/local/apache2 --with-ssl=/usr/local/fips_openssl/ssl 
--with-mpm=prefork --enable-ssl

I did make, make install and then tried to run my apache with "SSLFIPS on" 
within my httpd-ssl.conf, BUT when I try to boot, I get: 

"Syntax error on line 1 of /usr/local/apache2/conf/extra/httpd-ssl.conf:
SSLFIPS invalid, rebuild httpd and openssl compiled for FIPS"

Any ideas?

Sam




  

RE: [users@httpd] Help with Apoache config to support Subversion

[Arthur Pesa]

Thanks for the reply, I was not aware of the dedicate subversion list. I have 
already changed the require directive to use "valid-user".  I restarted Apache 
and now have this message from Eclipse

"Location Information has been specified incorrectly"
Svn: Malformed XML
Keep Location Anyway

I know this is not supposed to be this complicated, but there is not much in 
the way of troubleshooting this connection. I have found several examples of 
different confs and have tried several different things with the current config 
getting so close. I will try to repost this in the svn apache list.

Thanks again,
Pat

-Original Message-
From: Igor Galić [mailto:i.ga...@brainsware.org] 
Sent: Wednesday, February 09, 2011 9:42 AM
To: users@httpd.apache.org
Subject: Re: [users@httpd] Help with Apoache config to support Subversion



- Original Message -
> Hello, I am finishing up my configuration for Apache/SVN and have one

Generally we recommend us...@subversion.apache.org for subversion related 
problems, but in this case I guess the fix is easy.

> last authorization quandary. I am on Ubuntu 10.04 with LAMP, SVN and 
> Eclipse comprising my dev environment. I have everything installed, 
> config'd and running except the last SVN configuration for 
> authorization. I have the Eclipse plugins installed for Subversive and 
> I can connect to the SVN repo I have created, I get challenged and 
> provide my user/pass, but get bounced with the following message.
> 
> [Tue Feb 08 06:08:16 2011] [error] [client 127.0.0.1] access to /SVN 
> failed, reason: require directives present and no Authoritative 
> handler.
> 
> I have a password file I created with htpasswd. It seems to be hitting 
> this file because I can pass a bad username and it will come back with 
> user not found. If I use my username it will ask for a password, but 
> will fail as above. I have the following modules loading dav_svn.load 
> dav_svn.conf
> 
> 
> Here is my httpd.conf
> ##
> ## httpd.conf
> ##
> DocumentRoot "/var/www"
> #
> Servername "superglts"
> #
> Alias /SVN /home/apesa/Development/SVN #  /home/apesa/Development/SVN> AllowOverride All DAV svn Order 
> allow,deny Allow from all  # #  DAV svn 
> SVNListParentPath on SVNParentPath "/SVN"
> AuthName "SVN"
> AuthType Basic
> SVNPathAuthz off
> AuthBasicProvider file
> AuthUserFile "/home/apesa/Development/passwords"
> Require valid_user

http://httpd.apache.org/docs/current/mod/core.html#require

Note how it's "Require valid-user", not "Require valid_user"


> 
> 
> Any help or pointers are appreciated,
> Thanks,
> Pat

i

--
Igor Galić

Tel: +43 (0) 664 886 22 883
Mail: i.ga...@brainsware.org
URL: http://brainsware.org/

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
   "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
   "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org

RE: [users@httpd] Help with Apoache config to support Subversion

[Arthur Pesa]

I went ahead and created this post as a new post on
subversion.apache.org so please reply to that if you see my mistake or
have more advice as I don't want to cross post, I just did not see the
dedicated svn list. I hope to do better on that list.

Thanks to all,
Pat
On Wed, 2011-02-09 at 10:09 -0800, Arthur Pesa wrote:
> Thanks for the reply, I was not aware of the dedicate subversion list. I have 
> already changed the require directive to use "valid-user".  I restarted 
> Apache and now have this message from Eclipse
> 
> "Location Information has been specified incorrectly"
> Svn: Malformed XML
> Keep Location Anyway
> 
> I know this is not supposed to be this complicated, but there is not much in 
> the way of troubleshooting this connection. I have found several examples of 
> different confs and have tried several different things with the current 
> config getting so close. I will try to repost this in the svn apache list.
> 
> Thanks again,
> Pat
> 
> -Original Message-
> From: Igor Galić [mailto:i.ga...@brainsware.org] 
> Sent: Wednesday, February 09, 2011 9:42 AM
> To: users@httpd.apache.org
> Subject: Re: [users@httpd] Help with Apoache config to support Subversion
> 
> 
> 
> - Original Message -
> > Hello, I am finishing up my configuration for Apache/SVN and have one
> 
> Generally we recommend us...@subversion.apache.org for subversion related 
> problems, but in this case I guess the fix is easy.
> 
> > last authorization quandary. I am on Ubuntu 10.04 with LAMP, SVN and 
> > Eclipse comprising my dev environment. I have everything installed, 
> > config'd and running except the last SVN configuration for 
> > authorization. I have the Eclipse plugins installed for Subversive and 
> > I can connect to the SVN repo I have created, I get challenged and 
> > provide my user/pass, but get bounced with the following message.
> > 
> > [Tue Feb 08 06:08:16 2011] [error] [client 127.0.0.1] access to /SVN 
> > failed, reason: require directives present and no Authoritative 
> > handler.
> > 
> > I have a password file I created with htpasswd. It seems to be hitting 
> > this file because I can pass a bad username and it will come back with 
> > user not found. If I use my username it will ask for a password, but 
> > will fail as above. I have the following modules loading dav_svn.load 
> > dav_svn.conf
> > 
> > 
> > Here is my httpd.conf
> > ##
> > ## httpd.conf
> > ##
> > DocumentRoot "/var/www"
> > #
> > Servername "superglts"
> > #
> > Alias /SVN /home/apesa/Development/SVN #  > /home/apesa/Development/SVN> AllowOverride All DAV svn Order 
> > allow,deny Allow from all  # #  DAV svn 
> > SVNListParentPath on SVNParentPath "/SVN"
> > AuthName "SVN"
> > AuthType Basic
> > SVNPathAuthz off
> > AuthBasicProvider file
> > AuthUserFile "/home/apesa/Development/passwords"
> > Require valid_user
> 
> http://httpd.apache.org/docs/current/mod/core.html#require
> 
> Note how it's "Require valid-user", not "Require valid_user"
> 
> 
> > 
> > 
> > Any help or pointers are appreciated,
> > Thanks,
> > Pat
> 
> i
> 
> --
> Igor Galić
> 
> Tel: +43 (0) 664 886 22 883
> Mail: i.ga...@brainsware.org
> URL: http://brainsware.org/
> 
> -
> The official User-To-User support forum of the Apache HTTP Server Project.
> See http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
>"   from the digest: users-digest-unsubscr...@httpd.apache.org
> For additional commands, e-mail: users-h...@httpd.apache.org
> 
> 
> 
> -
> The official User-To-User support forum of the Apache HTTP Server Project.
> See http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
>"   from the digest: users-digest-unsubscr...@httpd.apache.org
> For additional commands, e-mail: users-h...@httpd.apache.org
> 



-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
   "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org

Re: [users@httpd] VirtualHost Question

[IrishStudent76]

Hi Eric,

I believe that I've sorted the issue, it appears to be the route to the
public index page. I'm following a book in learning the zend framework but
it appears to have a few typos and lack of information in general.

Thanks for your help.


Graham


Eric Covener wrote:
> 
>> My problem is that if I enter http://sqaure/ I receive a 403 error "You
>> don't have permission to access / on this server". However if I enter
>> http://square/public I the default zend framework index.php page appears.
> 
> What does your error log say?
> 
> -
> The official User-To-User support forum of the Apache HTTP Server Project.
> See http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
>"   from the digest: users-digest-unsubscr...@httpd.apache.org
> For additional commands, e-mail: users-h...@httpd.apache.org
> 
> 
> 

-- 
View this message in context: 
http://old.nabble.com/VirtualHost-Question-tp30859374p30885936.html
Sent from the Apache HTTP Server - Users mailing list archive at Nabble.com.


-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
   "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org

Re: [users@httpd] PHP to control Apache

[Lars Nielsen]

ons, 09 02 2011 kl. 14:59 +0100, skrev Fredric Fredricson:
> On 02/09/2011 12:20 PM, Nilesh Govindarajan wrote: 
> > [snip]
> > 
> > The problem with using mod_perl is one needs to know perl to a
> > decent extent or at least db operations in perl. It is a strict
> > requirement. 
> > [snip]
> This, of course, depends on your situation but perl DBI is quite well
> documented and fairly easy to use and Perl, as a language, is not that
> strange and comparable with php (if you exclude the OOP-parts, avoid
> OOP in Perl). As a text processing language, Perl is better than all
> others I have seen and vastly superior to php (not that php is exactly
> bad, perl is just much better). 
> 
> But there is, of course, a learning curve.
> 
> Just saying..
> 
> /Fredric
> -
> The official User-To-User support forum of the Apache HTTP Server Project.
> See http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
>"   from the digest: users-digest-unsubscr...@httpd.apache.org
> For additional commands, e-mail: users-h...@httpd.apache.org

Thank you all for your suggestions,
I will look further into mod_perl and mod_vhost_dbd. I know a little
perl so it might not be that hard!

Thanks.
Regards Lars Nielsen


-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
   "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org

RE: [users@httpd] How do you build apache 2.2.17 with openssl FIPS ???

[Keith Theman]

When I boot with SSLFIPS off, I see this in my log:

[Wed Feb 09 15:50:10 2011] [notice] Apache/2.2.17 (Unix) mod_ssl/2.2.17 
OpenSSL/FIPS configured -- resuming normal operations

I have compiled in openSSL FIPS, but why doesn't 2.2.17 recognize it as such?

Sam

From: xray...@hotmail.com
To: users@httpd.apache.org
Date: Wed, 9 Feb 2011 12:51:13 -0500
Subject: [users@httpd] How do you build apache 2.2.17 with openssl FIPS ???








Hello,

I am trying to build Apache 2.2.17 on RH linux 5 with openssl FIPS 
openssl-fips-1.2.2.tar.gz

I built and install openssl fips 1.2.2 and then ran my apache config:

 ./configure --prefix=/usr/local/apache2 --with-ssl=/usr/local/fips_openssl/ssl 
--with-mpm=prefork --enable-ssl

I did make, make install and then tried to run my apache with "SSLFIPS on" 
within my httpd-ssl.conf, BUT when I try to boot, I get: 

"Syntax error on line 1 of /usr/local/apache2/conf/extra/httpd-ssl.conf:
SSLFIPS invalid, rebuild httpd and openssl compiled for FIPS"

Any ideas?

Sam




  

[users@httpd] 403/

[ohaya]

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
   "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org

[users@httpd] Problem configuring proxy (forbidden error locally)

[o haya]

 
We are trying to use the Apache (2.0.x) that comes with Redhat to 
reverse-proxy. 
 
We have a pretty simple configuration.  Basically, we have just 1 
, with a bunch of ProxyPass/ProxyPassReverse directive-pairs, in 
 sections, e.g.: 
 
 
ProxyPass http://test.host.com/Foo 
ProxyPassReverse http://test.host.com/Foo 
 
 
However, when we try to browse to http://http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
   "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org

Re: [users@httpd] Problem configuring proxy (forbidden error locally)

[Eric Covener]

> so the 403 is coming from the Apache proxy itself

What do the proxy logs say?

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
   "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org

Re: [users@httpd] Problem configuring proxy (forbidden error locally)

[Igor Cicimov]

have you tried the Order statement and putting "Allow from All" ?

On Thu, Feb 10, 2011 at 11:07 AM, Eric Covener  wrote:

> > so the 403 is coming from the Apache proxy itself
>
> What do the proxy logs say?
>
> -
> The official User-To-User support forum of the Apache HTTP Server Project.
> See http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
>   "   from the digest: users-digest-unsubscr...@httpd.apache.org
> For additional commands, e-mail: users-h...@httpd.apache.org
>
>

Re: [users@httpd] Problem configuring proxy (forbidden error locally)

[o haya]

Hi Eric and Igor,
The Apache proxy logs show "403" errors.
I've been hunting down all the deny/allows and  directives/sections, 
and these are all that I found in the httpd.conf:

                Options FollowSymLinks
                AllowOverride None

 

                Options Indexes FollowSymLinks
                AllowOverride None
                Order Allow,deny
                Allow from all

 

                Options Indexes MultiViews
                AllowOverride None
                Order allow,deny
                Allow from all

 

                AllowOverride None
                Options None
                Order allow,deny
                Allow from all

 

                AllowOverride None
                Options IncludeNoExec
                AddOutputFilter Include html
                AddHandler type-map var
                Order allow,deny
                Allow from all
                LanguagePriority en es de fr
                ForceLanguagePriority Prefer Fallback

 My understanding is the above would only apply to physical directories on the 
proxy machine, plus it doesn't seem like any of them would cause a "deny"?
There's also an :
#
#ProxyRequests 
On
 
#
#                Order deny,allow
#                Deny from all
#                 Allow from .example.com
#
 But, that was commented out already in the httpd.conf, so it wouldn't affect 
anything?
 I think that if uncommented that , and changed it to allow:
#ProxyRequests On                 Order 
allow,deny                 Allow from all
that might fix the problem, but, and maybe I'm being stubborn, I'd really 
rather find exactly what is causing the deny (it always worries me when I don't 
understand exactly why something is not doing what I think it should).

This is Apache 2.0.x, so there's not the "extras" directory and files, just the 
httpd.conf and ssl.conf, so any ideas about what ELSE might be causing JUST the 
proxying to get a deny (note: we CAN access resources that are LOCAL on the 
proxy Apache server).
Thanks,Jim

--- On Wed, 2/9/11, Igor Cicimov  wrote:

From: Igor Cicimov 
Subject: Re: [users@httpd] Problem configuring proxy (forbidden error locally)
To: users@httpd.apache.org
Date: Wednesday, February 9, 2011, 7:55 PM

have you tried the Order statement and putting "Allow from All" ?

On Thu, Feb 10, 2011 at 11:07 AM, Eric Covener  wrote:

> so the 403 is coming from the Apache proxy itself



What do the proxy logs say?



-

The official User-To-User support forum of the Apache HTTP Server Project.

See http://httpd.apache.org/userslist.html> for more info.

To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org

   "   from the digest: users-digest-unsubscr...@httpd.apache.org

For additional commands, e-mail: users-h...@httpd.apache.org








  

Re: [users@httpd] Problem configuring proxy (forbidden error locally)

[Igor Cicimov]

First un-comment the

#ProxyRequests On

and make it

ProxyRequests Off

if you want to run reverse proxy.

On Thu, Feb 10, 2011 at 12:26 PM, o haya  wrote:

> Hi Eric and Igor,
>
> The Apache proxy logs show "403" errors.
>
> I've been hunting down all the deny/allows and 
> directives/sections, and these are all that I found in the httpd.conf:
>
> 
>
> Options FollowSymLinks
>
> AllowOverride None
>
> 
>
>
>
> 
>
> Options Indexes FollowSymLinks
>
> AllowOverride None
>
> Order Allow,deny
>
> Allow from all
>
> 
>
>
>
> 
>
> Options Indexes MultiViews
>
> AllowOverride None
>
> Order allow,deny
>
> Allow from all
>
> 
>
>
>
> 
>
> AllowOverride None
>
> Options None
>
> Order allow,deny
>
> Allow from all
>
> 
>
>
>
> 
>
> AllowOverride None
>
> Options IncludeNoExec
>
> AddOutputFilter Include html
>
> AddHandler type-map var
>
> Order allow,deny
>
> Allow from all
>
> LanguagePriority en es de fr
>
> ForceLanguagePriority Prefer Fallback
>
> 
>
>
> My understanding is the above would only apply to physical directories on
> the proxy machine, plus it doesn't seem like any of them would cause a
> "deny"?
>
> There's also an :
>
> #
>
> #ProxyRequests On
>
>
>
> #
>
> #Order deny,allow
>
> #Deny from all
>
> # Allow from .example.com
>
> #
>
>
> But, that was commented out already in the httpd.conf, so it wouldn't
> affect anything?
>
>
> I think that if uncommented that , and changed it to allow:
>
> 
>
> #ProxyRequests On
>
>
>
> 
>
> Order allow,deny
>
>  Allow from all
>
> 
>
> that might fix the problem, but, and maybe I'm being stubborn, I'd really
> rather find exactly what is causing the deny (it always worries me when I
> don't understand exactly why something is not doing what I think it should).
>
>
> This is Apache 2.0.x, so there's not the "extras" directory and files, just
> the httpd.conf and ssl.conf, so any ideas about what ELSE might be causing
> JUST the proxying to get a deny (note: we CAN access resources that are
> LOCAL on the proxy Apache server).
>
> Thanks,
> Jim
>
>
> --- On *Wed, 2/9/11, Igor Cicimov * wrote:
>
>
> From: Igor Cicimov 
> Subject: Re: [users@httpd] Problem configuring proxy (forbidden error
> locally)
> To: users@httpd.apache.org
> Date: Wednesday, February 9, 2011, 7:55 PM
>
>
> have you tried the Order statement and putting "Allow from All" ?
>
> On Thu, Feb 10, 2011 at 11:07 AM, Eric Covener 
> http://mc/compose?to=cove...@gmail.com>
> > wrote:
>
> > so the 403 is coming from the Apache proxy itself
>
> What do the proxy logs say?
>
> -
> The official User-To-User support forum of the Apache HTTP Server Project.
> See http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: 
> users-unsubscr...@httpd.apache.org
>   "   from the digest: 
> users-digest-unsubscr...@httpd.apache.org
> For additional commands, e-mail: 
> users-h...@httpd.apache.org
>
>
>
>

Re: [users@httpd] Problem configuring proxy (forbidden error locally)

[Eric Covener]

On Wed, Feb 9, 2011 at 8:26 PM, o haya  wrote:
>
> Hi Eric and Igor,
> The Apache proxy logs show "403" errors.

Don't paraphrase the logs. Include them verbatim in your response.

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
   "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org

Re: [users@httpd] Problem configuring proxy (forbidden error locally)

[o haya]

Hi,
According to:
http://httpd.apache.org/docs/2.0/mod/mod_proxy.html#proxyrequests
the default for ProxyRequests is "Off"?
Jim

--- On Wed, 2/9/11, Igor Cicimov  wrote:

From: Igor Cicimov 
Subject: Re: [users@httpd] Problem configuring proxy (forbidden error locally)
To: users@httpd.apache.org
Date: Wednesday, February 9, 2011, 9:56 PM

First un-comment the 

#ProxyRequests On

and make it 

ProxyRequests Off


if you want to run reverse proxy.

On Thu, Feb 10, 2011 at 12:26 PM, o haya  wrote:

Hi Eric and Igor,

The Apache proxy logs show "403" errors.
I've been hunting down all the deny/allows and  directives/sections, 
and these are all that I found in the httpd.conf:


                Options
 FollowSymLinks
                AllowOverride None


 


                Options Indexes
 FollowSymLinks
                AllowOverride None
                Order Allow,deny

                Allow from all


 


                Options Indexes MultiViews
                AllowOverride None

                Order allow,deny
                Allow from all


 


                AllowOverride None

                Options None
                Order allow,deny

                Allow from all


 


                AllowOverride None
                Options IncludeNoExec

                AddOutputFilter Include html
                AddHandler type-map var

                Order allow,deny
                Allow from all

                LanguagePriority en es de fr
            
    ForceLanguagePriority Prefer Fallback


 My understanding is the above would only apply to physical directories on the 
proxy machine, plus it doesn't seem like any of them would cause a "deny"?

There's also an :

#
#ProxyRequests 
On
 
#
#                Order deny,allow
#                Deny from all
#                 Allow from .example.com
#
 But, that was commented out already in the httpd.conf, so it wouldn't affect 
anything?

 I think that if uncommented that , and changed it to allow:

#ProxyRequests On
 
                Order allow,deny
                 Allow from all


that might fix the problem, but, and maybe I'm being stubborn, I'd really 
rather find exactly what is causing the deny (it always worries me when I don't 
understand exactly why something is not doing what I think it should).


This is Apache 2.0.x, so there's not the "extras" directory and files, just the 
httpd.conf and ssl.conf, so any ideas about what ELSE might be causing JUST the 
proxying to get a deny (note: we CAN access resources that are LOCAL on the 
proxy Apache server).

Thanks,Jim


--- On Wed, 2/9/11, Igor Cicimov  wrote:


From: Igor Cicimov 
Subject: Re: [users@httpd] Problem configuring proxy (forbidden error locally)
To: users@httpd.apache.org

Date: Wednesday, February 9, 2011, 7:55 PM

have you tried the Order statement and putting "Allow from All" ?

On Thu, Feb 10, 2011 at 11:07 AM, Eric Covener  wrote:


> so the 403 is coming from the Apache proxy itself



What do the proxy logs say?



-

The official User-To-User support forum of the Apache HTTP Server Project.

See http://httpd.apache.org/userslist.html> for more info.

To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org

   "   from the digest: users-digest-unsubscr...@httpd.apache.org

For additional commands, e-mail: users-h...@httpd.apache.org








  




  

Re: [users@httpd] Problem configuring proxy (forbidden error locally)

[o haya]

Eric,

Sorry for that.  The system is at work, so I'll have to get that tomorrow.

Jim


--- On Wed, 2/9/11, Eric Covener  wrote:

> From: Eric Covener 
> Subject: Re: [users@httpd] Problem configuring proxy (forbidden error locally)
> To: users@httpd.apache.org
> Date: Wednesday, February 9, 2011, 9:58 PM
> On Wed, Feb 9, 2011 at 8:26 PM, o
> haya 
> wrote:
> >
> > Hi Eric and Igor,
> > The Apache proxy logs show "403" errors.
> 
> Don't paraphrase the logs. Include them verbatim in your
> response.
> 
> -
> The official User-To-User support forum of the Apache HTTP
> Server Project.
> See http://httpd.apache.org/userslist.html> for more
> info.
> To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
>    "   from the digest: users-digest-unsubscr...@httpd.apache.org
> For additional commands, e-mail: users-h...@httpd.apache.org
> 
> 




-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
   "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org

Re: [users@httpd] Problem configuring proxy (forbidden error locally)

[o haya]

Hi,

BTW, to help guide me on what to look for, my understanding is that there are 
basically two things that can cause Apache to provide the 403/Forbidden 
response:

- Linux permissions
- Something in the Apache .conf files that sets a "deny"

For the former, and assuming the we don't have any local resources in the 
s (i.e., no ), and only a bunch of 
ProxyPass/ProxyPassReverse directives, I think that the  would 
"inherit" the  from the server configuration, so what we'd have 
to do is to look at where the  is pointing to, and confirm that 
the user and group specified in the User and Group directives in the Apache 
.conf files have read/write/execute perms on that and all of its parent 
directories.

Is that correct?

For the latter, we need to look for all "deny", and check that none of them 
apply to the  directives in the  sections.

Is that correct?

Thanks,
Jim


--- On Wed, 2/9/11, o haya  wrote:

> From: o haya 
> Subject: Re: [users@httpd] Problem configuring proxy (forbidden error locally)
> To: users@httpd.apache.org
> Date: Wednesday, February 9, 2011, 10:23 PM
> Eric,
> 
> Sorry for that.  The system is at work, so I'll have
> to get that tomorrow.
> 
> Jim
> 
> 
> --- On Wed, 2/9/11, Eric Covener 
> wrote:
> 
> > From: Eric Covener 
> > Subject: Re: [users@httpd] Problem configuring proxy
> (forbidden error locally)
> > To: users@httpd.apache.org
> > Date: Wednesday, February 9, 2011, 9:58 PM
> > On Wed, Feb 9, 2011 at 8:26 PM, o
> > haya 
> > wrote:
> > >
> > > Hi Eric and Igor,
> > > The Apache proxy logs show "403" errors.
> > 
> > Don't paraphrase the logs. Include them verbatim in
> your
> > response.
> > 
> >
> -
> > The official User-To-User support forum of the Apache
> HTTP
> > Server Project.
> > See http://httpd.apache.org/userslist.html> for more
> > info.
> > To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
> >    "   from the digest: users-digest-unsubscr...@httpd.apache.org
> > For additional commands, e-mail: users-h...@httpd.apache.org
> > 
> > 
> 
> 
> 
> 
> -
> The official User-To-User support forum of the Apache HTTP
> Server Project.
> See http://httpd.apache.org/userslist.html> for more
> info.
> To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
>    "   from the digest: users-digest-unsubscr...@httpd.apache.org
> For additional commands, e-mail: users-h...@httpd.apache.org
> 
> 




-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
   "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org

[users@httpd] Applets fail to load with UndeclaredThrowableException when using Proxy

[Pankaj Tiwari]

The HTTP server is configured as Proxy as well as Reverse Proxy for the Web
Application

(HTTP request) --> [HTTP Server] -->  (HTTP redirect) --> [Web Application]
// Web application loads except the applets
(java.lang.reflect.UndeclaredThrowableException ). If I enable
ProxyPreserveHost in httpd.conf file, applets load successfully

(HTTPS request) --> [HTTP Server] --> (HTTP redirect) --> [WebApplication]
// Web application loads except the applets
(java.lang.reflect.UndeclaredThrowableException) (ProxyPreserveHost is
disabled)


Any suggestions on why applets might not be loading successfully.

Thanks,
Pankaj