Re: [us...@httpd] Reload httpd.conf on Windows

2009-07-08 Thread William A. Rowe, Jr.
André Warnier wrote: > Vamshikrishna T wrote: >> Hi, >> >>> From your query, I observed that we can reload apache configuration file >> without restarting the apache web server on Linux. I would like to >> know, how can we do it? >> > See http://httpd.apache.org/docs/2.2/stopping.html or more impo

Re: [us...@httpd] Reload httpd.conf on Windows

2009-07-08 Thread André Warnier
Vamshikrishna T wrote: Hi, From your query, I observed that we can reload apache configuration file without restarting the apache web server on Linux. I would like to know, how can we do it? See http://httpd.apache.org/docs/2.2/stopping.html ---

RE: [us...@httpd] Reload httpd.conf on Windows

2009-07-08 Thread Vamshikrishna T
Hi, >From your query, I observed that we can reload apache configuration file without restarting the apache web server on Linux. I would like to know, how can we do it? Thanks in advance. --Vamshi :) -Original Message- From: dbezerra [mailto:dbeze...@accesssoftek.com] Sent: Tuesday, J

Re: [us...@httpd] Using SetEnvIf on response headers

2009-07-08 Thread Ray Van Dolson
On Wed, Jul 08, 2009 at 03:35:58PM -0700, André Warnier wrote: > Ray Van Dolson wrote: > > Hi all; > > > > I'm trying to strip out NTLM as an authentication option from response > > packets (my Apache is acting as a reverse proxy). > > By curiosity, what does this achieve ? > If the origin server

Re: [us...@httpd] Using SetEnvIf on response headers

2009-07-08 Thread André Warnier
Ray Van Dolson wrote: Hi all; I'm trying to strip out NTLM as an authentication option from response packets (my Apache is acting as a reverse proxy). By curiosity, what does this achieve ? If the origin server requires NTLM authentication for a resource, it is unlikely to be happy with a Bas

[us...@httpd] Using SetEnvIf on response headers

2009-07-08 Thread Ray Van Dolson
Hi all; I'm trying to strip out NTLM as an authentication option from response packets (my Apache is acting as a reverse proxy). At first I did this blindly with the Header command: Header always unset WWW-Authenticate Header always set WWW-Authenticate "Basic realm='%{SERVER_NAME}e'" Head

Re: [us...@httpd] Windows rotatelogs, cmd.exe permission

2009-07-08 Thread Philip J Dicke
This sounds like the solution until the new "real pipes" solution is implemented. Thank you all. On Wed, Jul 8, 2009 02:59 PM Sander Temme wrote: > > >On Jul 8, 2009, at 11:09 AM, Philip J Dicke wrote: > >> Windows does not seem to have the "apachectl graceful" command that >> unix does. >> T

Re: [us...@httpd] Windows rotatelogs, cmd.exe permission

2009-07-08 Thread Sander Temme
On Jul 8, 2009, at 11:09 AM, Philip J Dicke wrote: Windows does not seem to have the "apachectl graceful" command that unix does. The only solution that I see is to run apache, where it writes straight to a log file, write a script that shuts down httpd, moves the log file and restarts ht

Re: [us...@httpd] Apache under DOS

2009-07-08 Thread Jonathan Zuckerman
On Tue, Jul 7, 2009 at 11:50 PM, nima chavooshi wrote: > Hi > Recently attackers use new attack for DOS apache.for example see > http://isc.sans.org/diary.html?storyid=6601&rss . > Is there any solution for prevent this DOS attack? > what solution do you suggest for limit concurrent connection? > >

Re: [us...@httpd] Windows rotatelogs, cmd.exe permission

2009-07-08 Thread William A. Rowe, Jr.
Philip J Dicke wrote: >> Ok; please explain how the process initially has rights to invoke cmd.exe >> and how these were subtracted after initialization? > Well it works now b/c the webserver user has access to the cmd.exe. Security > review revealed that access needs to be removed. Ok; that's no

Re: [us...@httpd] Windows rotatelogs, cmd.exe permission

2009-07-08 Thread William A. Rowe, Jr.
Philip J Dicke wrote: > I currently have httpd running as a windows service, logging on as a > restricted > user called "webserver". That account is very restricted in the folders that > it can read/execute. In order to follow the security policy, the webserver > account needs to be configured s

[us...@httpd] Windows rotatelogs, cmd.exe permission

2009-07-08 Thread Philip J Dicke
Apache 2.2.11 Windows Server 2003 R2 x64 Hello all, I've searched the archives and only found confirmation of what my problem is, but no solutions. I am trying to configure apache httpd in such a way that logs are rotated on a daily basis, and the server is not shut down when doing so. Currently

Re: [us...@httpd] apache modules

2009-07-08 Thread William A. Rowe, Jr.
Boyle Owen wrote: > If you just load modules but don't actually use them (ie, no directives > in config), then no. That is not entirely true. Most register a hook provider to evaluate if they are the candidate for providing auth, injecting filters or handling the request. Those hooks do cost som

Re: [us...@httpd] apache monitoring

2009-07-08 Thread ricardo figueiredo
On Wed, Jul 8, 2009 at 12:24 PM, Morten K. Poulsen wrote: > On Wed, 2009-07-08 at 12:12 -0300, ricardo figueiredo wrote: > > There is a Perl program to extract information. > > > > The program requests a page created for mod_status and write in a file > > Yes, and it's the "requests a page" part w

Re: [us...@httpd] apache monitoring

2009-07-08 Thread Morten K. Poulsen
On Wed, 2009-07-08 at 12:12 -0300, ricardo figueiredo wrote: > There is a Perl program to extract information. > > The program requests a page created for mod_status and write in a file Yes, and it's the "requests a page" part which can be a problem, if the server is not responding. Morten --

Re: [us...@httpd] apache monitoring

2009-07-08 Thread ricardo figueiredo
Hi, There is a Perl program to extract information. The program requests a page created for mod_status and write in a file Ricardo On Wed, Jul 8, 2009 at 12:03 PM, Morten K. Poulsen wrote: > On Wed, 2009-07-08 at 09:57 -0400, Tony Rice (trice) wrote: > > Be sure to configure it with Extended S

RE: [us...@httpd] apache monitoring

2009-07-08 Thread Morten K. Poulsen
On Wed, 2009-07-08 at 09:57 -0400, Tony Rice (trice) wrote: > Be sure to configure it with Extended Status on to get a wealth of > info. (Obvious self-promotion) We have a free (as in speech) tool, which might help you get the information out of mod_status if the server is unresponsive. http://f

RE: [us...@httpd] apache monitoring

2009-07-08 Thread Tony Rice (trice)
Be sure to configure it with Extended Status on to get a wealth of info. -Tony From: Boyle Owen [mailto:owen.bo...@six-group.com] Sent: Wednesday, July 08, 2009 3:36 AM To: users@httpd.apache.org Subject: RE: [us...@httpd] apache monitoring http://httpd.apache.org/docs/2.2/mod/mod_stat

RE: [us...@httpd] SSI - file not included

2009-07-08 Thread Boyle Owen
> -Original Message- > From: Marc Patermann [mailto:hans.mo...@ofd-sth.niedersachsen.de] > Sent: Wednesday, July 08, 2009 10:47 AM > To: users@httpd.apache.org > Subject: Re: [us...@httpd] SSI - file not included > > Boyle Owen schrieb: > > >> Can the included file not be placed in an au

Re: [us...@httpd] SSI - file not included

2009-07-08 Thread Marc Patermann
Boyle Owen schrieb: Can the included file not be placed in an authentictaion protected directory ? Apparently not... Otherwise, it would be a way to circumvent authentication. Check what it says in the error_log; that should tell you more than "..stops working.." If there is a 401 Unauthorize

Re: [us...@httpd] apache modules

2009-07-08 Thread André Warnier
nima chavooshi wrote: Hi I have one question about Apache modules.with loading more modules on apache, may apache responses with more delay ?? Re these recent threads : - [us...@httpd] Apache under DOS - [us...@httpd] apache monitoring - [us...@httpd] apache modules It is always a good idea, i

RE: [us...@httpd] apache modules

2009-07-08 Thread Boyle Owen
If you just load modules but don't actually use them (ie, no directives in config), then no. From: nima chavooshi [mailto:nima0...@gmail.com] Sent: Wednesday, July 08, 2009 8:59 AM To: users@httpd.apache.org Subject: [us...@httpd]

RE: [us...@httpd] apache monitoring

2009-07-08 Thread Boyle Owen
http://httpd.apache.org/docs/2.2/mod/mod_status.html From: nima chavooshi [mailto:nima0...@gmail.com] Sent: Wednesday, July 08, 2009 8:51 AM To: users@httpd.apache.org Subject: [us...@httpd] apache monitoring

RE: [us...@httpd] SSI - file not included

2009-07-08 Thread Boyle Owen
> -Original Message- > From: Marc Patermann [mailto:hans.mo...@ofd-sth.niedersachsen.de] > Sent: Wednesday, July 08, 2009 9:07 AM > To: users@httpd.apache.org > Subject: [us...@httpd] SSI - file not included > > Hi, > > I tried a simple "include" with SSI. > > In the root directory I ad

[us...@httpd] SSI - file not included

2009-07-08 Thread Marc Patermann
Hi, I tried a simple "include" with SSI. In the root directory I added a .htaccess file with AddType text/html .shtml AddOutputFilter INCLUDES .html In index-test.html i added This works fine. Now I moved the footer.html to another directory. This works fine, too. Now I moved the file aga