Re: [EMAIL PROTECTED] Why do I need /var/www as DocumentRoot & www-data as www owner?

2008-09-02 Thread Lester Caine
Greg Platt - Platt Consultants wrote: I'm not arguing for or against what Debian did. One thing I can say is their approach provides an individual VirtualHost file for each domain. It thus tends to isolate any damage that might be done in editing httpd.conf to a single domain. It also makes it ea

Re: [EMAIL PROTECTED] Really strange access behaviours.... Only for the strong stomaches!

2008-09-02 Thread Peter Milanese
R Sorry guys. Scratch that. It wound up being the default umask on the pam mkdir module. Sorry!

[EMAIL PROTECTED] Really strange access behaviours.... Only for the strong stomaches!

2008-09-02 Thread Peter Milanese
Hi folks... I have a bit of a mod_perl config for my vhosts at this point. I'll post the relevant snip below. I am having a strange time figuring out why one site in this excerpt (which is not the first one loaded) has no access issues, but all of the others (vhosts) have 403's being bounced

Re: [EMAIL PROTECTED] redirect with query string

2008-09-02 Thread Peter Milanese
>- Original Message >From: "[EMAIL PROTECTED]" <[EMAIL PROTECTED]> >To: users@httpd.apache.org >Sent: Tuesday, September 2, 2008 4:39:22 PM >Subject: Re: [EMAIL PROTECTED] redirect with query string > >Hi Stephen, > >I have to rewrite the full URL. > >If I go to: http://www.domain.com/

RE: [EMAIL PROTECTED] Is there any way that allows user to logout while using basic apache webserver authentication ?

2008-09-02 Thread jaweed ali
Thanks for reply Yes i am using the "AuthType Basic" Apache directive with in tage And i am niether setting cookie not using javascripting for user id and password. In Basic Authentication When a request is made to a URI, the web server returns a HTTP 401 unauthorized status code to the

Re: [EMAIL PROTECTED] Is there any way that allows user to logout while using basic apache webserver authentication ?

2008-09-02 Thread Justin Pasher
jaweed ali wrote: Hi I have apache with basic authentication setup with LDAP for users credential. apache allow me to login on server but once a user login to the webapplication and then even close the browser, the browser still have Authentication Session safe. And next time if you just v

[EMAIL PROTECTED] [A2/Load balancing] mod_proxy vs. dedicated box?

2008-09-02 Thread Gilles Ganault
Hello I'd like some feedback about using Apache's mod_proxy to provide load balancing with other Apache2 servers vs. using a dedicated device. At this point, our first Apache2 server, acting as load balancer, is 50% idle, while the other Apache2 server is 0% idle: --- Apache #1 (includes load ba

[EMAIL PROTECTED] Is there any way that allows user to logout while using basic apache webserver authentication ?

2008-09-02 Thread jaweed ali
Hi I have apache with basic authentication setup with LDAP for users credential. apache allow me to login on server but once a user login to the webapplication and then even close the browser, the browser still have Authentication Session safe. And next time if you just visit same site the

Re: [EMAIL PROTECTED] Why do I need /var/www as DocumentRoot & www-data as www owner?

2008-09-02 Thread Eric Covener
On Tue, Sep 2, 2008 at 5:10 PM, Greg Platt - Platt Consultants <[EMAIL PROTECTED]> wrote: >> You're now using someone elses packaging of the Apache HTTP Server. >> What Apache change are you referring to? > On my old RedHat 7.2 server as it was delivered, DocumentRoot for each > was essentially

RE: [EMAIL PROTECTED] Why do I need /var/www as DocumentRoot & www-data as www owner?

2008-09-02 Thread Greg Platt - Platt Consultants
I'm not arguing for or against what Debian did. One thing I can say is their approach provides an individual VirtualHost file for each domain. It thus tends to isolate any damage that might be done in editing httpd.conf to a single domain. It also makes it easy to disable one domain using their a2d

RE: [EMAIL PROTECTED] Why do I need /var/www as DocumentRoot & www-data as www owner?

2008-09-02 Thread Greg Platt - Platt Consultants
On my old RedHat 7.2 server as it was delivered, DocumentRoot for each was essentially /home/www/mydomain or /www/mydomain depending on your perspective. One was basically a link to the other. In the new scheme of things, DocumentRoot was moved (and it seems to have been done by Apache themselves)

Re: [EMAIL PROTECTED] Why do I need /var/www as DocumentRoot & www-data as www owner?

2008-09-02 Thread Justin Pasher
Greg Platt - Platt Consultants wrote: Yes, I realize the DocumentRoot location can be changed. Indeed I've already changed it with the sites I converted earlier. What I came here hoping to find is someone who understands WHY it was changed by Apache to begin with and who could explain the implica

Re: [EMAIL PROTECTED] Why do I need /var/www as DocumentRoot & www-data as www owner?

2008-09-02 Thread Joseph S D Yao
I have no clue why the Debian Etch distribution is set up as you describe. I do remember discussion about the time /var/www was first used, long ago, about /var always being a read-write file system even if the others were mounted read-only from some other medium [CD-ROM, NFS, etc.]. This seemed

RE: [EMAIL PROTECTED] Why do I need /var/www as DocumentRoot & www-data as www owner?

2008-09-02 Thread Greg Platt - Platt Consultants
You may be absolutely right here, Eric. Indeed, I hope you ARE right. That's exactly what I have begun to suspect. When I couldn't find anyone in the Debian world who could explain why I shouldn't change DocumentRoot on individual sites when I needed to, I began to suspect I had overreacted to the

Re: [EMAIL PROTECTED] Why do I need /var/www as DocumentRoot & www-data as www owner?

2008-09-02 Thread Eric Covener
On Tue, Sep 2, 2008 at 4:44 PM, Greg Platt - Platt Consultants <[EMAIL PROTECTED]> wrote: > > Yes, I realize the DocumentRoot location can be changed. Indeed I've already > changed it with the sites I converted earlier. What I came here hoping to > find is someone who understands WHY it was changed

Re: [EMAIL PROTECTED] Why do I need /var/www as DocumentRoot & www-data as www owner?

2008-09-02 Thread Peter J Milanese
I am unaware of apache's influence on _any_ configuration layout, with the possible exception of source compilation, which merely imitates what the distributions do through layout files. I agree that you are seeing way too much in this. Debian does it its own way, all other distributions (ubuntu

RE: [EMAIL PROTECTED] Why do I need /var/www as DocumentRoot & www-data as www owner?

2008-09-02 Thread Greg Platt - Platt Consultants
Thanks for the reply, Brian. Yes, I think I'm fairly familiar with the role of httpd.conf. It is for example, where the virtual hosts were defined on RedHat in my earlier version of Linux. In fact I did have an occasional need to make changes to that file on my old RedHat implementation of Linux.

RE: [EMAIL PROTECTED] Unable to load config info from

2008-09-02 Thread Tan, Liao
ah, then you are saying that it has nothing to do with the server that will receive the certificate, I mean, then I can simply specify the server_name in the open ssl commands in any machine, and once generated, I can use it in the machine I specified? Txs, Ingrid -Original Message-

Re: [EMAIL PROTECTED] Why do I need /var/www as DocumentRoot & www-data as www owner?

2008-09-02 Thread Eric Covener
On Tue, Sep 2, 2008 at 3:15 PM, Greg Platt - Platt Consultants <[EMAIL PROTECTED]> wrote: > I remember someone mentioning in a post I made weeks ago that the ownerships > and permissions on my web directories seemed odd. His remarks suggested he > thought all web directories ought to be owned by w

Re: [EMAIL PROTECTED] redirect with query string

2008-09-02 Thread [EMAIL PROTECTED]
Hi Stephen, I have to rewrite the full URL. If I go to: http://www.domain.com/abc/def/abcd.asp?abc=123&def=456&ghi=135 I have to be redirected to: http://www.domain.com/xzy/uvw/abc/xyz.asp?cba=000&zyx=111 Thank you, Charly - Mensaje original De: Stephen Wellington <[EMAIL PROTECTE

Re: [EMAIL PROTECTED] redirect with query string

2008-09-02 Thread Eric Covener
On Tue, Sep 2, 2008 at 4:13 PM, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: > I have this URL: > http://www.domain.com/abc/def/abcd.asp?abc=123&def=456&ghi=135 > > I have to redirect the requests to: > http://www.domain.com/xzy/uvw/abc/xyz.asp?cba=000&zyx=111 > > Anybody knows how to do it? Ca

Re: [EMAIL PROTECTED] Unable to load config info from

2008-09-02 Thread Eric Covener
On Tue, Sep 2, 2008 at 3:55 PM, Tan, Liao <[EMAIL PROTECTED]> wrote: >> Generate your certificates on a machine where openssl works. > hum..but this is the prod machine...have no other option Why do you have to generate your certificates there? Can you find openssl.cnf and specify its location on

Re: [EMAIL PROTECTED] redirect with query string

2008-09-02 Thread Stephen Wellington
On 9/2/08, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: > Hi, > > I have a redirect problem, I already googled it and I cannot find how to do > it. > > What I have to do is: > > I have this URL: > http://www.domain.com/abc/def/abcd.asp?abc=123&def=456&ghi=135 > > I have to redirect the reques

[EMAIL PROTECTED] redirect with query string

2008-09-02 Thread [EMAIL PROTECTED]
Hi, I have a redirect problem, I already googled it and I cannot find how to do it. What I have to do is: I have this URL: http://www.domain.com/abc/def/abcd.asp?abc=123&def=456&ghi=135 I have to redirect the requests to: http://www.domain.com/xzy/uvw/abc/xyz.asp?cba=000&zyx=111 Anybody knows

RE: [EMAIL PROTECTED] Unable to load config info from

2008-09-02 Thread Tan, Liao
hum..but this is the prod machine...have no other option -Original Message- From: Eric Covener [mailto:[EMAIL PROTECTED] Sent: Tuesday, September 02, 2008 4:54 PM To: users@httpd.apache.org Subject: Re: [EMAIL PROTECTED] Unable to load config info from On Tue, Sep 2, 2008 at 3:47 PM,

Re: [EMAIL PROTECTED] Unable to load config info from

2008-09-02 Thread Eric Covener
On Tue, Sep 2, 2008 at 3:47 PM, Tan, Liao <[EMAIL PROTECTED]> wrote: > > Folks, > I know this a well known issue, but still didnt find a solution. > When generating the key pair certificates, running the command > openssl req -new -key mydomain.com.key -out mydomain.com.csr) I received and > err

[EMAIL PROTECTED] Unable to load config info from

2008-09-02 Thread Tan, Liao
Folks, I know this a well known issue, but still didnt find a solution. When generating the key pair certificates, running the command openssl req -new -key mydomain.com.key -out mydomain.com.csr) I received and error message as follows: Unable to load config info from /var/empty/extlib/tmp/

Re: [EMAIL PROTECTED] Why do I need /var/www as DocumentRoot & www-data as www owner?

2008-09-02 Thread Brian Mearns
Correct me if I'm wrong, but based on the way your message sounds, you don't appear to have any knowledge of the httpd.conf file? It's the main configuration file for your server, and it includes a DocumentRoot directive that allows you to specify the document root. The default may be /var/www, but

[EMAIL PROTECTED] Why do I need /var/www as DocumentRoot & www-data as www owner?

2008-09-02 Thread Greg Platt - Platt Consultants
I'm throwing in the towel on this question. I've been puzzling over how and why Apache changed its default document root location and trying to figure out how that would affect me for weeks now. But no matter how much research I do the best I've been able to do is to find occasional obtuse referenc

Re: [EMAIL PROTECTED] How to start Apache automatically with certificate?

2008-09-02 Thread Joseph S D Yao
On Mon, Sep 01, 2008 at 06:34:09AM +0200, Krist van Besien wrote: > On Fri, Aug 29, 2008 at 18:43, Joseph S D Yao <[EMAIL PROTECTED]> wrote: > > On Fri, Aug 29, 2008 at 08:48:34AM +0200, Krist van Besien wrote: > > ... > >> You need super user powers to maintain a webserver anyway. > > > > Why? >

[EMAIL PROTECTED] Re: block inherited user?

2008-09-02 Thread Mike -- EMAIL IGNORED
[...] My apologies for noise. The problem was a typo. Mike. - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL

[EMAIL PROTECTED] Re: block inherited user?

2008-09-02 Thread Mike -- EMAIL IGNORED
On Tue, 02 Sep 2008 08:13:37 -0700, Peter Milanese wrote: > Try reversing those Directory segments. > > It looks like it approves it before it hits the 'child' segment. > > > > Try reversing those > Directory segments. >   > It looks like it appro

Re: [EMAIL PROTECTED] How set up the httpd-ssl.conf for htdocs directory

2008-09-02 Thread kohanm
Thanks for your replay. The problem is when the request is http the apache can open it. but when the request is https can not. mk On 9/2/08, Krist van Besien <[EMAIL PROTECTED]> wrote: > On Mon, Sep 1, 2008 at 18:18, kohanm <[EMAIL PROTECTED]> wrote: > > > (13)Permission denied: file permission

Re: [EMAIL PROTECTED] block inherited user?

2008-09-02 Thread Peter Milanese
Try reversing those Directory segments. It looks like it approves it before it hits the 'child' segment.

[EMAIL PROTECTED] mod_cache issue?

2008-09-02 Thread Peter Milanese
Hi All-   Quick question with regard to mod_cache. I have it caching some streamed images to local disk. This works fine when the URL includes the script name, i.e. index.php?arg1=1, etc.   How, besides throwing a rewrite in, can I have it cache calls to /?arg1=1 ? Thanks- Pete

[EMAIL PROTECTED] block inherited user?

2008-09-02 Thread Mike -- EMAIL IGNORED
In the httpd.conf fragment below, I want jack and jane to have access to base, but only jack to have access to child. However, I find that jane has access to child How can i block this? Thanks for your help, Mike. btw: $ rpm -q httpd httpd-2.2.4-4.1.fc7 Options -All SymLinksIfOwnerMatch Ex

Re: [EMAIL PROTECTED] mod_rewrite question

2008-09-02 Thread Jason Pruim
On Sep 2, 2008, at 8:01 AM, Krist van Besien wrote: On Tue, Sep 2, 2008 at 13:12, Jason Pruim <[EMAIL PROTECTED]> wrote: and this is my log file entry: 127.0.0.1 - - [02/Sep/2008:07:06:14 -0400] [127.0.0.1/sid#1802648][rid#1836238/initial] (2) init rewrite engine with requested uri /server

Re: [EMAIL PROTECTED] mod_rewrite question

2008-09-02 Thread Krist van Besien
On Tue, Sep 2, 2008 at 13:12, Jason Pruim <[EMAIL PROTECTED]> wrote: > and this is my log file entry: > 127.0.0.1 - - [02/Sep/2008:07:06:14 -0400] > [127.0.0.1/sid#1802648][rid#1836238/initial] (2) init rewrite engine with > requested uri /server-status > 127.0.0.1 - - [02/Sep/2008:07:06:14 -0400]

Re: [EMAIL PROTECTED] mod_rewrite question

2008-09-02 Thread Jason Pruim
On Sep 2, 2008, at 6:54 AM, Eric Covener wrote: On Tue, Sep 2, 2008 at 6:20 AM, Jason Pruim <[EMAIL PROTECTED]> wrote: RewriteEngine on RewriteLog "/var/log/httpd/rewrite.log" RewriteLogLevel 9 RewriteRule /(.*) p.php?purl=$1 Outside of directory/location/htac

RE: [EMAIL PROTECTED] Moving website that uses full paths

2008-09-02 Thread Andrew Hodgson
Nick Kew wrote: On Tue, 2 Sep 2008 10:35:06 +0100 "Andrew Hodgson" <[EMAIL PROTECTED]> wrote: >> Is there anything I can do about this issue in Apache? I am not sure >> whether there is, since the browser is being instructed to go to the >> full path, which Apache is doing correctly, but I th

Re: [EMAIL PROTECTED] mod_rewrite question

2008-09-02 Thread Eric Covener
On Tue, Sep 2, 2008 at 6:20 AM, Jason Pruim <[EMAIL PROTECTED]> wrote: >RewriteEngine on >RewriteLog "/var/log/httpd/rewrite.log" >RewriteLogLevel 9 >RewriteRule /(.*) p.php?purl=$1 Outside of directory/location/htaccess, you have to rewrite to an absolute pa

Re: [EMAIL PROTECTED] Moving website that uses full paths

2008-09-02 Thread Peter Milanese
>mod_proxy_html fixes exactly that problem.  It's designed for use in a >reverse proxy (where the same issue is common), but can also fix up >your more self-inflicted problem. > >But I really wouldn't recommend it if you have static documents. >Better just to cobble up a one-off script to fix y

Re: [EMAIL PROTECTED] mod_rewrite question

2008-09-02 Thread Jason Pruim
On Aug 29, 2008, at 10:10 AM, Krist van Besien wrote: On Fri, Aug 29, 2008 at 15:21, Jason Pruim <[EMAIL PROTECTED]> wrote: Look in to your log: It says: [127.0.0.1/sid#1802648][rid#1836238/initial] (4) RewriteCond: input='GET' pattern='^TRACE' => not-matched What exactly do you have in you

Re: [EMAIL PROTECTED] Moving website that uses full paths

2008-09-02 Thread Nick Kew
On Tue, 2 Sep 2008 10:35:06 +0100 "Andrew Hodgson" <[EMAIL PROTECTED]> wrote: > Is there anything I can do about this issue in Apache? I am not sure > whether there is, since the browser is being instructed to go to the > full path, which Apache is doing correctly, but I thought I would ask >

[EMAIL PROTECTED] Moving website that uses full paths

2008-09-02 Thread Andrew Hodgson
Hi, I am implementing a website that used to be available on https://domain.com/, and I want it on https://domain2.com/website/. The problem I am finding is that the site has code in it like this: Which is causing the browser to go to https://domain2.com/file.css The Apache

Re: [EMAIL PROTECTED] How set up the httpd-ssl.conf for htdocs directory

2008-09-02 Thread Krist van Besien
On Mon, Sep 1, 2008 at 18:18, kohanm <[EMAIL PROTECTED]> wrote: > (13)Permission denied: file permissions deny server access: > /usr/local/apache2.2/htdocs/documents/myfile.pdf Have a look at the error message: It says that "file permission" deny server access. In other words, your apache proces