Re: [us...@httpd] Httpd on Ubuntu 9.04

2009-05-21 Thread Res

On Thu, 21 May 2009, Frank Gingras wrote:

The debian maintainers though it would be suitable to rename it to apache2 / 
apache2ctl.


See: http://wiki.apache.org/httpd/DistrosDefaultLayout


I often wonder who is worse, Micro$oft or Debian, both want everything 
"their" way.


My solution for the OP is apt-get remove apache2 (http2 or whatever they 
call it these days) and get the source (it will be a lot more current 
then ubuntu/debians version as well and wont be hacked or butchered) so 
will be cleaner and bug free'r.


If you still have issues you'll far likely get better support here useing 
it since few people here would know what butchering Debian have done.



--
Res

-Beware of programmers who carry screwdrivers

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
  "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



Re: [us...@httpd] Httpd on Ubuntu 9.04

2009-05-24 Thread Res
One would assume the Apache Debian packager is on this list, perhaps they 
would like to comment as to why they do this, but I suspect they will not.


Nothing beats the source install, if you screwup it takes seconds to 
revert to previous version and you know you are using just that version.


I do think we are getting off topic now, but my question stands (not that 
I use Debian on servers, I always believe in using non-butchering OS's, 
like Slackware, on *all* servers, critical and non critical)



On Sat, 23 May 2009, James Carroll wrote:


Not to add to the hijack, but I hear ya brother.  I've been trying to
get a local HTTPd/bugzilla set up for the last two weeks. I tried using
the Ubuntu/Debian packages and not only do they splay files (seemingly)
wherever they feel like it, they change the names so that the online
product doc is almost worthless. I love ubuntu and have great respect
for the work the volunteers do, but I don't think this is their best
effort.

On Fri, 2009-05-22 at 08:39 -0400, John Hudak wrote:

Hi:
I don't want to hijack this thread, but since the question has been
answered, I have a related one...WHY does the Debian distro 'relocate'
things such as apache?  Since I've been getting into the guts of
Debian and Ubuntu over the last 2-3 years, I am finding a lot of 'non
standard' things that drive me nuts when trying to solve a problem.  I
consider myself a fairly knowledgable Unix user/developer (at least,
back in the bad old days) and some of the changes I've seen in the
Debian/Ubuntu distros make me scratch my head and say Why?  For
example, their use of bin, and sbin, and root being acquired by
'sudo'..
Just curious...


--
Res

-Beware of programmers who carry screwdrivers

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
  "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



Re: [us...@httpd] Httpd on Ubuntu 9.04

2009-05-24 Thread Res

Sander,
Maybe a vote should be taken to issue notice to them, to cease renaming 
key apache components, its bad enough the butchering they do, but renaming is 
crossing the line IMHO, as we've just seen why in this thread, for every 
one you hear, you know there's many thousands more you don't.



On Sat, 23 May 2009, Sander Temme wrote:


On May 22, 2009, at 5:39 AM, John Hudak wrote:


WHY does the Debian distro 'relocate'
things such as apache?


Don't ask us, ask them.

S.

--
Sander Temme
scte...@apache.org
PGP FP: 51B4 8727 466A 0BC3 69F4  B7B8 B2BE BC40 1529 24AF






--
Res

-Beware of programmers who carry screwdrivers

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
  "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



Re: [us...@httpd] Httpd on Ubuntu 9.04

2009-05-24 Thread Res

On Sun, 24 May 2009, Lester Caine wrote:

This is a general anarchy problem with everybody reinterpreting the 'rules' 
for standardisation of the directory structure to their own ends. Since the



Not just directory naming, they rename binaries as well *THAT* is my key 
objection :)



--
Res

-Beware of programmers who carry screwdrivers

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
  "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



Re: [us...@httpd] 2.2.10 -> 2.2.11

2009-06-05 Thread Res

On Fri, 5 Jun 2009, MK wrote:


However, all my CGI files are now unable to write a log or db
*anywhere*.  I modified the http.conf to match my previous one ("Allow
all"), but this did not make any difference.  SELinux is disabled on my
system.



There is a myriad of build options, you'll need to
A: (fastest)
Look at the repository for the source version, then look at how 
they built apache and make sure you built the same


B: (slowest)
1/ paste how you built apache in here
2/ include relevant sections of httpd.conf
else its just a time wasting guessing game :)


--
Res

-Beware of programmers who carry screwdrivers

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
  "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



Re: [us...@httpd] Re: Mod_Rewrite voodoo

2010-01-06 Thread Res

On Thu, 7 Jan 2010, Jonesy wrote:


On Thu, 7 Jan 2010 08:23:12 +1100, Igor Cicimov wrote:


One more thing, it will work for this century only since 20xx is hard coded
in the rule. Thought should mention it although it's not going to be your
problem in 2100 haha


Actually, it will.
2100 is the last year in *this* century of the Common Era.


I think what he was saying is, its not going to be _YOUR_ problem.
But hey if you live to be 1 1/2 centuries of age, then I guess it might
be :)


--
Res

"What does Windows have that Linux doesn't?" - One hell of a lot of bugs!

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
  "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



Re: [us...@httpd] Trouble installing on windows 7

2010-01-07 Thread Res

On Thu, 7 Jan 2010, Daniel Reinhardt wrote:


Wesley,

many words is exactly why I hate the Open Source community with a passion. 
Your drive to force another operating system onto another user is rather 
immature, and quite frankly very unprofessional.  I have left user to user



and these comments of yours are just as trollish as his, please take your 
girly bitch sessions OFF this list, we do not care for it.


--
Res

"What does Windows have that Linux doesn't?" - One hell of a lot of bugs!

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
  "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



Re: [us...@httpd] redirects only working for some virtual hosts

2010-01-25 Thread Res

Hi Ryan,

On Mon, 25 Jan 2010, RYAN vAN GINNEKEN wrote:



ServerName mail.archesshoes.ca
Redirect permanent / https://mx1.canmail.org/



It is a very BAD idea to share a https server IP with an IP on a 
non-ssl http server (ideally, they should be two separate machines), 
I suspect this is where it might be going haywire, if you have another 
IP, put the secure server on that.


I just tried to hit it, and my DNS is not getting the instruction to 
lookup canmail.


Did the logs show anything?

--
Res

"What does Windows have that Linux doesn't?" - One hell of a lot of bugs!

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
  "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



[EMAIL PROTECTED] Age ol problem, No DBD Authn configured! w/2.2.4

2007-04-30 Thread Res

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

I did discover many people have this issue... Most the results were of 
crashing, which mine does not, it will connect to the DB but issue no 
querry and the vhost log reports "No DBD Authn configured!", where there 
certainly is.


I read it was put down to being in virtualhost blocks, so was a fix 
ever found for apache 2.2.4?  I'd really like to centralise these things.



- -- 


Cheers
Res

Vote for your favourite MTA at  http://polls.ausics.net/v3.php
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFGNdFTsWhAmSIQh7MRAhCrAKCznNPXYGtfiOmY/sFUdvLOLrIUtACfdrwX
cMLMrskd51lxIAhecNGfQq8=
=cMUd
-END PGP SIGNATURE-

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] Re: Age ol problem, No DBD Authn configured! w/2.2.4

2007-05-01 Thread Res

My Bad, forgot to mention this is DBDriver mysql

On Mon, 30 Apr 2007, Res wrote:


-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

I did discover many people have this issue... Most the results were of 
crashing, which mine does not, it will connect to the DB but issue no querry 
and the vhost log reports "No DBD Authn configured!", where there certainly 
is.


I read it was put down to being in virtualhost blocks, so was a fix ever 
found for apache 2.2.4?  I'd really like to centralise these things.



- -- 
Cheers

Res

Vote for your favourite MTA at  http://polls.ausics.net/v3.php
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFGNdFTsWhAmSIQh7MRAhCrAKCznNPXYGtfiOmY/sFUdvLOLrIUtACfdrwX
cMLMrskd51lxIAhecNGfQq8=
=cMUd
-END PGP SIGNATURE-



--

Cheers
Res

Vote for your favourite MTA at  http://polls.ausics.net/v3.php

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] FD_SETSIZE

2007-05-03 Thread Res

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Thu, 3 May 2007, Joshua Slive wrote:


On 5/2/07, Eduardo Meyer <[EMAIL PROTECTED]> wrote:

On Apache2, how do I set FD_SETSIZE? I have found some virtual hosts
limitations and FAQ and documentation tells I should define FD_SETSIZE
in EXTRA_CFLAGS, but where EXTRA_CFLAGS go?


I don't remember for sure, but I don't think that FD_SETSIZE has any
effect in 2.x. You just need to make sure that your OS has allocated
the necessary file descriptors to apache before you start.

Joshua.



I've founds you nearly always have to increase the value, this is 
what we use and should be sufficient for machines that do about 2K hosts

each, in apachectl:

ULIMIT_MAX_FILES="ulimit -H -n 16384"

check your logs for errors. you can also (playing it safe)
cd /usr/include
grep -R FD_SETSIZE *
in bits directory edit typesizes.h
and in linux directory posix_types.h

You'll possibly see a few returns all saying 1024, change them to 16384.
if you only have 1K host,s setting these all to 8192 will work just as 
good.


- -- 


Cheers
Res

Vote for your favourite MTA at  http://polls.ausics.net/v3.php
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFGOmwpsWhAmSIQh7MRAvJOAJ9pWJ/2T7aBShMysrP2i2tUsKI9HwCgoOUl
dJ0XMB6KhqccWEjHVB1YoPg=
=XR8J
-END PGP SIGNATURE-

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] Apache 2.2.24, mysql auth and vhosts

2007-05-07 Thread Res

Does anyone actually have 2.2.4 with mod_dbd and mysql authing working?

I logged a bug as my testing shows it does not do what the docs state, and 
it was closed with the simple statement of " it works for me " which might

be great for him but not so for us :)

If you do, am I leaving something out? Surely I dont have to go back to 
apache 1.3 just to have working database authentication.



in global I have :
DBDriver mysql
DBDParams "host=hidden dbname=hidden user=hidden pass=hidden"
DBDPersist off
(The docs state these can all even be used in vhost block, but apache 
fails to restart saying they are NOT allowed there so I left them in 
global where it appears happier)



in a virtualhost block I have:

 AuthName "Members"
 AuthType Basic
 AuthBasicProvider dbd
 AuthDBDUserPWQuery "SELECT user_passwd FROM user_info WHERE user_name = %s"
 Require valid-user


~# /usr/local/apache/bin/httpd  -l | grep dbd
  mod_authn_dbd.c
  mod_dbd.c


Am using apr_dbd_mysql.c in /usr/local/src/httpd-2.2.4/srclib/apr-util/dbd
did a buildconf and ./configure --with-apr=../apr  etc...

~#ldd /usr/local/apache/bin/httpd | grep libmysqlclient_r
libmysqlclient_r.so.15 => /usr/lib/mysql/libmysqlclient_r.so.15 
(0x40038000)


Now mysql reports it connects and logins in to the database but does not 
do a query, it disconnects right away,  the apache logs report

"No DBD Authn configured!" and the user gets a 500 int server error..

Anyone have any pointers?

TIA
Res


-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] RES: Re: Apache 2.2.24, mysql auth and vhosts

2007-05-10 Thread Res

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1


This has been resolved.
A bug (a few actually) found in mod_dbd and patches commited 
to apache devel.


Quey, I see you have possible the same issue as I had, contact me 
off-list and I'll send you the patches that should fix the brokeness.



On Mon, 7 May 2007, Res wrote:


Does anyone actually have 2.2.4 with mod_dbd and mysql authing working?

I logged a bug as my testing shows it does not do what the docs state, and it 
was closed with the simple statement of " it works for me " which might

be great for him but not so for us :)

If you do, am I leaving something out? Surely I dont have to go back to 
apache 1.3 just to have working database authentication.



in global I have :
DBDriver mysql
DBDParams "host=hidden dbname=hidden user=hidden pass=hidden"
DBDPersist off
(The docs state these can all even be used in vhost block, but apache fails 
to restart saying they are NOT allowed there so I left them in global where 
it appears happier)



in a virtualhost block I have:

AuthName "Members"
AuthType Basic
AuthBasicProvider dbd
AuthDBDUserPWQuery "SELECT user_passwd FROM user_info WHERE user_name = %s"
Require valid-user


~# /usr/local/apache/bin/httpd  -l | grep dbd
 mod_authn_dbd.c
 mod_dbd.c


Am using apr_dbd_mysql.c in /usr/local/src/httpd-2.2.4/srclib/apr-util/dbd
did a buildconf and ./configure --with-apr=../apr  etc...

~#ldd /usr/local/apache/bin/httpd | grep libmysqlclient_r
   libmysqlclient_r.so.15 => /usr/lib/mysql/libmysqlclient_r.so.15 
(0x40038000)


Now mysql reports it connects and logins in to the database but does not do a 
query, it disconnects right away,  the apache logs report

"No DBD Authn configured!" and the user gets a 500 int server error..

Anyone have any pointers?

TIA
Res




- -- 


Cheers
Res

Vote for your favourite MTA at  http://polls.ausics.net/v3.php
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFGQv/IsWhAmSIQh7MRAkycAKCOae2MV6NdglD+s4Vo31UB3TNHEACdHUFB
iZVo3HMy98lqiZ55DWRUEQI=
=d9zR
-END PGP SIGNATURE-

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] Apache 2.2 security concern

2007-05-12 Thread Res

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Sat, 12 May 2007, Dragon wrote:


PHP provides for this directly.

There is a restrict_base_dir setting that can be applied to each virtual host 
that prevents users from accessing anything outside of the specified 
directory tree.


Correct, everybody should be using this in a shared hosting environment, 
and also to tighten the reins furher should use disable_functions


The one I use and has given us no complaints except for some lame program 
that wants to know the system uptime stats, which has nothing to do with
a user anyway, even if it only wants it for the load, again, nothing to do 
with user, if the load gets high (above 5 on 15 min avge) we have alarms 
to let us know.


disable_functions = exec, shell_exec, system, virtual, show_source, 
readfile, passthru, escapeshellcmd, popen, pclose, phpinfo




- -- 


Cheers
Res

Vote for your favourite MTA at  http://polls.ausics.net/v3.php
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFGRj6fsWhAmSIQh7MRAumRAKCf4eW3oY4sGAfEP0xewn/fZgGR8ACfaJuC
KQyQOYmGKCWvUUNNKQ1Dk9w=
=0tLW
-END PGP SIGNATURE-

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] Internet Explorer 7 only downloads half of file

2007-05-28 Thread Res

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Mon, 28 May 2007, Steve Finkelstein wrote:


Hello -

I've seen something similar in a previous development environment I had
participated in setting up. In particular, the culprit was a .css file,
however that was most likely coincidence and irrelevant as the Content
Type of the file was not at fault.

What happens if you try to wget/curl the file manually, without using a
browser as a client?


What about with firefox?

I doubt this apache, I've seen this hundreds of times with incorrect MTU
on routers




Thanks,

- Steve

ahlist wrote:

Hello,

Is anyone familiar with an issue where Internet Explorer will only
download approx half of a file from Apache 1.3.x servers?

A client has the same file loaded on our apache servers and his own
server. On ours it downloads (with out reporting an error) approx 400k
of an 800k file. The file is correct on disk and downloads fine on
firefox.

It is a single file being served direct from disk. No .htaccess, no
streaming from a script, etc.

I'd post URL's but I do not think the client would already approve.
Telling them to use something other than IE7 won't work either.

Any advice is appreciated. Thanks.

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


!DSPAM:1020,4659fa66706265414056337!



-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



- -- 
Cheers

Res
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFGW1EjsWhAmSIQh7MRAtwzAJ4hofq4Gn9kmq39Gb1Zf5HQtRnajQCfbNIv
5x76Xg2N1/Jv9VTi3doAaaI=
=KOCF
-END PGP SIGNATURE-

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] Security settings in apache

2007-06-17 Thread Res

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
NotDashEscaped: You need GnuPG to verify this message

On Sun, 17 Jun 2007, makhan wrote:



Hi

I am  trying to run an external program from the php using its exec()
function. But its not executing the program I think the issue is with the
apache security setting i.e its not allowing external requests to execute
programs on the server.

Can someone please guide me how I can enable these settings.


If your not root, you can't, this is a very common lockdown in php 
by host providors (at these those that know what they are doing) to 
help prevent script kiddies playing up.


If you are root, look in your php.ini for disable_functions, make sure you 
understand the serious risks of allowing this function (amongst others)

before you allow it, then consult google or php.net.

You might also need to check the open_basedir option as well.

If you are a script kiddie, its only a mater of time before you are 
caught and locked up.



--
Cheers
Res
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.7 (GNU/Linux)

iD8DBQFGdawLsWhAmSIQh7MRAtDbAKCtYLgM7oVP0IPp0Djq1TT5Cf/bugCeLZi+
FVuqRvlPCqC7+3MwSi9QVFU=
=7HHz
-END PGP SIGNATURE-

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] Security settings in apache

2007-06-17 Thread Res

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
NotDashEscaped: You need GnuPG to verify this message

On Sun, 17 Jun 2007, makhan wrote:



Thsnks man for your reply. I checked my php.ini file and the options which
you told me. They are not set . and I am not in the safe mode either so this
exec function should work. I have checked even a simple commands like data
or ls are not working correctly. Can you help me out what could be the
reason. I think it has something to do with some paths




in php.ini, change
display_errors = Off   ; to On

then comment out:
error_reporting  =  E_ALL & ~E_NOTICE
and insert:
error_reporting  =  E_ALL

restart apache and try again, this should show whats wrong, as it is php 
related you will probably have to go to a php forum for further help, as 
its not apache causing the problems


once you get it sorted remember to delete the new line above and 
uncomment the original, and change display errors back to off, you dont 
want people going to your site to see any and every error :)







Res-2 wrote:


-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
NotDashEscaped: You need GnuPG to verify this message

On Sun, 17 Jun 2007, makhan wrote:



Hi

I am  trying to run an external program from the php using its exec()
function. But its not executing the program I think the issue is with the
apache security setting i.e its not allowing external requests to execute
programs on the server.

Can someone please guide me how I can enable these settings.


If your not root, you can't, this is a very common lockdown in php
by host providors (at these those that know what they are doing) to
help prevent script kiddies playing up.

If you are root, look in your php.ini for disable_functions, make sure you
understand the serious risks of allowing this function (amongst others)
before you allow it, then consult google or php.net.

You might also need to check the open_basedir option as well.

If you are a script kiddie, its only a mater of time before you are
caught and locked up.


--
Cheers
Res
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.7 (GNU/Linux)

iD8DBQFGdawLsWhAmSIQh7MRAtDbAKCtYLgM7oVP0IPp0Djq1TT5Cf/bugCeLZi+
FVuqRvlPCqC7+3MwSi9QVFU=
=7HHz
-END PGP SIGNATURE-

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]








--
Cheers
Res
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.7 (GNU/Linux)

iD8DBQFGdbhTsWhAmSIQh7MRArolAJ9/PVuXkyp1lFNnfubGdu4bTSalCwCfef8e
Mi5SkqEK87Abk+z0IBd9nig=
=y0+Q
-END PGP SIGNATURE-

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] Security settings in apache

2007-06-17 Thread Res

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
NotDashEscaped: You need GnuPG to verify this message

On Sun, 17 Jun 2007, makhan wrote:



Thanks man, I did just that , but i am not getting anything in my browser,
even running simple commands like date or dir isn't working. I think there
is something wrong with my php. What it is i can't find out.



What about a php file with simply this in it...


That will tell you how apache and php are talking.
Do the apache logs show any problems loading php ?
Else, re install php ? I'm far from a guru at php so I dunno...



--
Cheers
Res
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.7 (GNU/Linux)

iD8DBQFGddoDsWhAmSIQh7MRAv6fAJwP7dyj+NQUkEZq7jQTfI3Fn3xBNwCfXLHI
5biQUyokyItlzOhiD3z5vD0=
=ZQEc
-END PGP SIGNATURE-

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] DBD and MySQL: No DBD Authn configured!

2007-07-04 Thread Res

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
NotDashEscaped: You need GnuPG to verify this message

Aaron,

On Wed, 4 Jul 2007, Aaron Dalton wrote:

Yeah, something is still wrong.  My query log shows a connect and an 
immediate quit.  No query is actually getting passed.  If anybody has had 
this problem, I'd appreciate hearing about how you fixed it.  For me, it's 
back to Google.



Is this 2.2.4 ?
If so it is a bug that has been corrected but no new update released.

I forget where on apache.org it is hidden but grab the fixed mod_dbd.c
(use below it's current)

cd /path/to/httpd-2.2.4/modules/database
cp mod_dbd.c mod_dbd.c.origi
wget http://www.ausics.net/mod_dbd.c

Then make clean and recompile apache again


--
Cheers
Res
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.7 (GNU/Linux)

iD8DBQFGjBxEsWhAmSIQh7MRAv4NAJ90ALQkUwZ9joexv8l54XMjz0hMiQCfVKa0
ENaig+juPn648X3lCPgMzS4=
=KM+x
-END PGP SIGNATURE-

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] RE : Re: [EMAIL PROTECTED] DBD and MySQL: No DBD Authn configured!

2007-07-05 Thread Res

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
NotDashEscaped: You need GnuPG to verify this message

On Thu, 5 Jul 2007, Laurent FAILLIE wrote:


I've sent a mail to this mailing list on June the 25th
"Authentication against database issue", because,
despite I've upgraded this mod_dbd.c, there still some
problems : I have to retry 6 or 8 times before my
granting are accepted.



I've opened a bug report on the same but it has been
closed as "misconfiguration" ... but according the


The problem is some people close it off right away saying misconfig or 
works for them without really doing squat, when it is in fact a bug, my 
ticket was closed by NK effectivly saying it works for him, when it doesnt 
on stable,  despite the Docs also being wrong, I had to email one of the 
devlopers privately to get action, it was then fixed within hours, that 
developer and I did several live tests, I did so on live servers to 
confirm the resolution, so re-open the bug and hope someone else grabs it.




--
Cheers
Res
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.7 (GNU/Linux)

iD8DBQFGjMaRsWhAmSIQh7MRAvScAKCzyGUwEiaPQVFzAf9F4Cvcph2lnwCgjSBX
UjnlJdXPMZSqARYvgKQills=
=TjE0
-END PGP SIGNATURE-

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] DBD and MySQL: No DBD Authn configured!

2007-09-03 Thread Res

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1


On Mon, 3 Sep 2007, Aaron Dalton wrote:


cd /path/to/httpd-2.2.4/modules/database
cp mod_dbd.c mod_dbd.c.origi
wget http://www.ausics.net/mod_dbd.c

Then make clean and recompile apache again




Well, it appears that I had some old files were hanging around.  Just
because I hate giving up I uninstalled apache22 again, made sure all the
previous libraries were removed, and recompiled.  Now it appears to be
working correctly!  Thank you for your help and patience.



No problems


- -- 


Cheers
Res

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.7 (GNU/Linux)

iD8DBQFG3IXBsWhAmSIQh7MRAgwJAJ9AozlY/nOsRG0/HY6hR9MUmmq5YwCdEmax
R2bKqKzEMkcGFFJOAoEccK8=
=cLlc
-END PGP SIGNATURE-

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] Apache 2.2.6 installation problem / libtool

2007-09-18 Thread Res

What OS, version.

On Tue, 18 Sep 2007, Felix Dreher wrote:


Hello,

I'm currently running Apache 2.2.3 and would like to upgrade to 2.2.6. 
However, when I use the same configure options (shown below) as with 2.2.3, 
"make" terminates with the following error:


/bin/sh: /usr/build-1/libtool: No such file or directory
make[3]: *** [maketables.lo] Error 127

So it seems to search for libtool at the wrong place, as it is actually at 
/usr/bin.


Does anybody know a solution to this?

Thanks + regards,
Felix


These are the configure options:

#! /bin/sh
#
# Created by configure

"./configure" \
"--prefix=/xyz/var/httpd" \
"--enable-proxy" \
"--enable-ssl" \
"--enable-rewrite" \
"--enable-vhost-alias" \
"--with-ssl" \
"--enable-cgi" \
"$@"




-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
 "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



--

Cheers
Res


-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] Vhost not working

2007-10-09 Thread Res


On Tue, 9 Oct 2007, Chris Arnold wrote:



   ServerAdmin @domain.tld
   ServerName demo.mytimewithgod.net
   DocumentRoot /srv/www/htdocs/demo

   ScriptAlias /cgi-bin/ "/srv/www/vhosts/dummy-host.example.com/cgi-bin/"
   


I assume you just didn't correct these paths in your example to us, or at 
least they do exist...



try running /path/to/httpd -t 
if thats good you need to run vhost checks: /path/to/httpd -S



--

Cheers
Res

Slackware -V- sloooUbuntu
http://lxer.com/module/newswire/view/93393/

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] dbd and mysql in apache 2.2.6

2007-11-07 Thread Res



Daniel Campbell schrieb:
Has anyone had any luck building mysql into apache version 2.2.6?  I am 
able to get it to compile fine but if I "ldd httpd" there is no mysql 
library linked in and if I try and use the "DBDriver mysql" in the 
httpd.conf file I get "DBD: No driver for mysql" when starting it.


I have followed the INSTALL.MYSQL instructions under the srclib/apr-util 
directory which says to download the apr_dbd_mysql.c file from the 
http://apache.webthing.com/database/ website to the srclib/apr-util/dbd 
directory and run the main buildconf and configure.  My configure is long 
but should work.  I have even tried it with a very short basic one to no 
avail.


Daniel, can you indicate what steps you are doing for us to see that way 
we can advise you further.


Should be... firstly, you may need to run a dummy ./configure in the main 
source dir (to generate some other stuff it needs, if this is a fresh 
install)



cd httpd-2.2.6/srclib/apr-util/dbd
get the apr_dbd_mysql.c (which I read you have) into this directory
cd ..(should now be in httpd-2.2.6/srclib/apr-util)
./buildconf
./configure --with-apr=../apr
cd ../../(back to main source dir) and run your full configure line, 
make, install then run the test.



--
Cheers
Res



-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] dbd and mysql in apache 2.2.6

2007-11-07 Thread Res


Daniel,. this sounds like you did not run ./configure from teh very top 
source directory first.

This needs to be done to make the apr stuff available from what I can see.
Like I said earlier do a dummy ./configure run from the main source 
directory first.




On Wed, 7 Nov 2007, Daniel Campbell wrote:

I did the following but get a configure error with --with-apr=../apr Any 
Ideas?


Thanks,
Dan

build_machine:/usr/local/src#tar -xjf httpd-2.2.6.tar.bz2
build_machine:/usr/local/src#cd httpd-2.2.6
build_machine:/usr/local/src/httpd-2.2.6#cd srclib/apr
apr   apr-util
build_machine:/usr/local/src/httpd-2.2.6#cd srclib/apr-util/dbd/
build_machine:/usr/local/src/httpd-2.2.6/srclib/apr-util/dbd#cat 
../INSTALL.MySQL

The MySQL driver is not distributed from apache.org due to licensing issues.

If you wish to build the driver, download apr_dbd_mysql.c from
http://apache.webthing.com/database/
and copy it into the dbd directory.
Now run buildconf, followed by configure.

It is distributed under the GPL to conform with MySQL License terms
This means it cannot be distributed from apache.org, as that would
violate ASF policy.

Using the driver with APR and Apache is of course allowed,
and there is no problem with a third party bundling the driver,
provided you respect both the ASF and GPL licenses.
build_machine:/usr/local/src/httpd-2.2.6/srclib/apr-util/dbd#wget 
http://apache.webthing.com/database/apr_dbd_mysql.c

--17:36:22--  http://apache.webthing.com/database/apr_dbd_mysql.c
  => `apr_dbd_mysql.c'
Resolving apache.webthing.com... 195.50.92.131
Connecting to apache.webthing.com[195.50.92.131]:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 18,999 [text/plain]

100%[>] 
18,999   115.34K/s


17:36:23 (114.69 KB/s) - `apr_dbd_mysql.c' saved [18999/18999]

build_machine:/usr/local/src/httpd-2.2.6/srclib/apr-util/dbd#cd ..
build_machine:/usr/local/src/httpd-2.2.6/srclib/apr-util#./buildconf

Looking for apr source in /usr/local/src/httpd-2.2.6/srclib/apr
Creating include/private/apu_config.h ...
Creating configure ...
Generating 'make' outputs ...
Invoking xml/expat/buildconf.sh ...
Copying libtool helper files ...
Incorporating /usr/share/aclocal/libtool.m4 into aclocal.m4 ...
Creating config.h.in ...
autoheader: WARNING: Using auxiliary files such as `acconfig.h', 
`config.h.bot'
autoheader: WARNING: and `config.h.top', to define templates for 
`config.h.in'

autoheader: WARNING: is deprecated and discouraged.
autoheader:
autoheader: WARNING: Using the third argument of `AC_DEFINE' and
autoheader: WARNING: `AC_DEFINE_UNQUOTED' allows to define a template without
autoheader: WARNING: `acconfig.h':
autoheader:
autoheader: WARNING:   AC_DEFINE([NEED_FUNC_MAIN], 1,
autoheader: [Define if a function `main' is needed.])
autoheader:
autoheader: WARNING: More sophisticated templates can also be produced, see 
the

autoheader: WARNING: documentation.
Creating configure ...
rebuilding rpm spec file
build_machine:/usr/local/src/httpd-2.2.6/srclib/apr-util#./configure 
--with-apr=../apr

checking build system type... i686-pc-linux-gnu
checking host system type... i686-pc-linux-gnu
checking target system type... i686-pc-linux-gnu
checking for a BSD-compatible install... /usr/bin/ginstall -c
checking for working mkdir -p... yes
APR-util Version: 1.2.10
checking for chosen layout... apr-util
checking for gcc... gcc
checking for C compiler default output file name... a.out
checking whether the C compiler works... yes
checking whether we are cross compiling... no
checking for suffix of executables...
checking for suffix of object files... o
checking whether we are using the GNU C compiler... yes
checking whether gcc accepts -g... yes
checking for gcc option to accept ANSI C... none needed
Applying apr-util hints file rules for i686-pc-linux-gnu
checking for APR... configure: error: the --with-apr parameter is incorrect. 
It must specify an install prefix, a build directory, or an apr-config file.

build_machine:/usr/local/src/httpd-2.2.6/srclib/apr-util#

Res wrote:



Daniel Campbell schrieb:
Has anyone had any luck building mysql into apache version 2.2.6?  I am 
able to get it to compile fine but if I "ldd httpd" there is no mysql 
library linked in and if I try and use the "DBDriver mysql" in the 
httpd.conf file I get "DBD: No driver for mysql" when starting it.


I have followed the INSTALL.MYSQL instructions under the srclib/apr-util 
directory which says to download the apr_dbd_mysql.c file from the 
http://apache.webthing.com/database/ website to the srclib/apr-util/dbd 
directory and run the main buildconf and configure.  My configure is long 
but should work.  I have even tried it with a very short basic one to no 
avail.


Daniel, can you indicate what steps you are doing