Re: [users@httpd] Apache permissions stabs new Linux user in face with icepick. Suggestions?

2016-03-09 Thread Francis Roy
On 16-03-09 09:47 PM, Kurtis Rader wrote: On Wed, Mar 9, 2016 at 6:38 PM, Francis Roy mailto:li...@unimportantstuff.com>> wrote: Thank you that answers my question quite nicely. It's not a giant flag waving at the internet, but if someone got a hold of my machine directly, it could p

Re: [users@httpd] Apache permissions stabs new Linux user in face with icepick. Suggestions?

2016-03-09 Thread Wim Lewis
On Mar 9, 2016, at 6:38 PM, Francis Roy wrote: > Thank you that answers my question quite nicely. It's not a giant flag waving > at the internet, but if someone got a hold of my machine directly, it could > provide a small bit of information used in a general strategy. Right. It's not automati

Re: [users@httpd] Apache permissions stabs new Linux user in face with icepick. Suggestions?

2016-03-09 Thread Kurtis Rader
On Wed, Mar 9, 2016 at 6:38 PM, Francis Roy wrote: > > Thank you that answers my question quite nicely. It's not a giant flag > waving at the internet, but if someone got a hold of my machine directly, > it could provide a small bit of information used in a general strategy. Just to be pedantic

Re: [users@httpd] Apache permissions stabs new Linux user in face with icepick. Suggestions?

2016-03-09 Thread Francis Roy
On 16-03-09 09:29 PM, Kurtis Rader wrote: On Wed, Mar 9, 2016 at 6:17 PM, Francis Roy Probably not but it's not the sort of question anyone can answer without spending a few days reviewing your situation. The reason most UNIX distros create the home directory for a user with mode 750 (no publi

Re: [users@httpd] Apache permissions stabs new Linux user in face with icepick. Suggestions?

2016-03-09 Thread Kurtis Rader
On Wed, Mar 9, 2016 at 6:17 PM, Francis Roy wrote: > On 16-03-09 08:44 PM, Eric Covener wrote: > >> If you want to serve out of your home directory, it needs to be >> executable by "other". >> > > Thank you, Eric and Kurtis, both. That was the problem. > > I did the following: >sudo chmod 755

Re: [users@httpd] Apache permissions stabs new Linux user in face with icepick. Suggestions?

2016-03-09 Thread Francis Roy
On 16-03-09 08:44 PM, Eric Covener wrote: If you want to serve out of your home directory, it needs to be executable by "other". Thank you, Eric and Kurtis, both. That was the problem. I did the following: sudo chmod 755 /home/username If I may, a follow-up question: does this create a po

Re: [users@httpd] Apache permissions stabs new Linux user in face with icepick. Suggestions?

2016-03-09 Thread Eric Covener
On Wed, Mar 9, 2016 at 8:40 PM, Francis Roy wrote: > drwxr-x--- username If you want to serve out of your home directory, it needs to be executable by "other". -- Eric Covener cove...@gmail.com - To unsubscribe, e-mail: user

Re: [users@httpd] Apache permissions stabs new Linux user in face with icepick. Suggestions?

2016-03-09 Thread Kurtis Rader
If we take the error message at face value this part of it, "because search permissions are missing", is relevant. In the UNIX filesystem permission model the "file" permissions mean the following when applied to a directory: read: The process can read the contents of the directory; i.e., enumerat

[users@httpd] Apache permissions stabs new Linux user in face with icepick. Suggestions?

2016-03-09 Thread Francis Roy
Hello everyone, I hope you can help a semi-experienced Windows apache user, new to Linux. I am unable to access files (anything) from http://localhost or from any of my vhosts. This is a new install of Linux Mint 17.x with the default Apache/2.4.7 (Ubuntu) install at /etc/apache2 My websi

Re: [users@httpd] Re: [Bulk] Re: [users@httpd] rewrite simple php under a sub url

2016-03-09 Thread Sven Seeberg
Am 10.03.2016 um 00:43 schrieb Sven Seeberg: > Am 10.03.2016 um 00:40 schrieb lejeczek: >> >> On 09/03/16 23:29, Sven Seeberg wrote: >>> Ah sorry, I think I missunderstood your question. >> possibly >>> mod_rewrite only changes the "appearance" of the URL for the Browser / >>> user. This PHP progra

Re: [users@httpd] mod_substitute / mod_sed with Apache 2.4.7 (Ubuntu 14.04)

2016-03-09 Thread Sven Seeberg
mod_deflate still running on the backend server (I thought I had disabled it) and a missing AddOutputFilterByType were responsible. Problem solved. Am 09.03.2016 um 18:10 schrieb Sven Seeberg: > Hi everybody, > > I'm having a problem with mod_substitute or mod_sed while using one > apache2 (Ubuntu

Re: [users@httpd] Re: [Bulk] Re: [users@httpd] rewrite simple php under a sub url

2016-03-09 Thread Sven Seeberg
Am 10.03.2016 um 00:40 schrieb lejeczek: > > > On 09/03/16 23:29, Sven Seeberg wrote: >> Ah sorry, I think I missunderstood your question. > possibly >> >> mod_rewrite only changes the "appearance" of the URL for the Browser / >> user. This PHP programm still sees the original URL. >> >> Your probl

[users@httpd] Re: [Bulk] Re: [users@httpd] rewrite simple php under a sub url

2016-03-09 Thread lejeczek
On 09/03/16 23:29, Sven Seeberg wrote: Ah sorry, I think I missunderstood your question. possibly mod_rewrite only changes the "appearance" of the URL for the Browser / user. This PHP programm still sees the original URL. Your problem does not seem related to Apache but to the file paths on

Re: [users@httpd] rewrite simple php under a sub url

2016-03-09 Thread Sven Seeberg
Ah sorry, I think I missunderstood your question. mod_rewrite only changes the "appearance" of the URL for the Browser / user. This PHP programm still sees the original URL. Your problem does not seem related to Apache but to the file paths on your server. Maybe you could work around it with syml

Re: [users@httpd] rewrite simple php under a sub url

2016-03-09 Thread lejeczek
On 09/03/16 22:12, Sven Seeberg wrote: Hi there, you can either just move the DocumentRoot to a directory which contains the folder phpapp with all the PHP files in it. Or create an .htaccess file / edit your VirtualHost and add the following line: RewriteRule ^phpapp/(.*)$ $1 nope, having lo

Re: [users@httpd] rewrite simple php under a sub url

2016-03-09 Thread Sven Seeberg
Hi there, you can either just move the DocumentRoot to a directory which contains the folder phpapp with all the PHP files in it. Or create an .htaccess file / edit your VirtualHost and add the following line: RewriteRule ^phpapp/(.*)$ $1 (http://lmgtfy.com/?q=mod_rewrite+subdirectory+to+root)

[users@httpd] rewrite simple php under a sub url

2016-03-09 Thread lejeczek
hi everybody ough... this might sound silly what I'm hoping to achieve, well.. I have a php app that I don't know the code of but the app seems to only work under top url, eg: www.theapp.net but it has to be served from www.theapp.net/phpapp I fiddling with rewrites but not being an expert I th

Re: [users@httpd] Apache virus scanning

2016-03-09 Thread Wei-min Lee
Using ICAP is a good way to go so that the person uploading files can be notified of upload fails due to the virus scan. Relying on filesystem virus scans lacks visibility of quarantined/rejected files. On Wed, Mar 9, 2016 at 12:18 PM, Wei-min Lee wrote: > You could use clamav via ICAP with squ

Re: [users@httpd] Apache virus scanning

2016-03-09 Thread Wei-min Lee
You could use clamav via ICAP with squid transparently in front of apache. http://wiki.squid-cache.org/ConfigExamples/ContentAdaptation/C-ICAP http://squidclamav.darold.net/config.html http://louwrentius.com/setting-up-a-squid-proxy-with-clamav-anti-virus-using-c-icap.html On Wed, Mar 9, 2016 at

[users@httpd] mod_substitute / mod_sed with Apache 2.4.7 (Ubuntu 14.04)

2016-03-09 Thread Sven Seeberg
Hi everybody, I'm having a problem with mod_substitute or mod_sed while using one apache2 (Ubuntu 14.04) as a proxy and load balancer. The connection between proxy and backend is not encrypted, therefore the backend delivers only non-https links with the backend FQDN. Those have to be replaced by

Re: [users@httpd] Apache virus scanning

2016-03-09 Thread Aurélien Terrestris
On a large scale prod (200 000 users/day), I was using proxies working with antivirus through ICAP protocol (RFC 3507). The results were pretty good. I am not sure we could use this technology with Apache, and ICAP seems a bit old now. 2016-03-09 16:45 GMT+01:00 Christopher Schultz : > John, > >

Re: [users@httpd] Apache virus scanning

2016-03-09 Thread Christopher Schultz
John, On 3/9/16 10:21 AM, Rose, John B wrote: > What about if your web sites allow for uploading files? Would you not want > to scan those on upload before they got on your filesystem? Sure, it would be nice to have the file scanned during upload, but I'm guessing that the AV can't give an opinio

Re: [users@httpd] Apache virus scanning

2016-03-09 Thread David Copeland
Hi John, For that I use a php script that handles the upload. It runs clamscan on the uploaded file. For example: $outputlines = array(); $last = exec ( "clamscan --quiet ".$_FILES['uploadedfile']['tmp_name'], $outputlines, $rc ); # then check $rc . 1 => a virus was fo

Re: [users@httpd] Apache virus scanning

2016-03-09 Thread Rose, John B
What about if your web sites allow for uploading files? Would you not want to scan those on upload before they got on your filesystem? On 3/9/16 9:49 AM, "Christopher Schultz" wrote: >John, > >On 3/8/16 6:02 PM, Rose, John B wrote: >> I am interested in both >> >> Thanks >> >> Sent from my iPa

Re: [users@httpd] Apache virus scanning

2016-03-09 Thread Christopher Schultz
John, On 3/8/16 6:02 PM, Rose, John B wrote: > I am interested in both > > Thanks > > Sent from my iPad > >> On Mar 8, 2016, at 3:27 PM, Christopher Schultz >> wrote: >> > John > On 3/8/16 2:43 PM, Rose, John B wrote: Looking for comments on mod_clamav, and any other alternative >>

Re: [users@httpd] Lots of messages "[ssl:warn] Resource deadlock avoided: AH02026: Failed to acquire SSL session cache lock"

2016-03-09 Thread Yann Ylavic
Hi, On Wed, Mar 9, 2016 at 2:18 PM, Hiwot Wonago wrote: > hello everyone, please don't hijack threads, just open a new one. Regards, Yann. - To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For additional commands, e

Re: [users@httpd] Lots of messages "[ssl:warn] Resource deadlock avoided: AH02026: Failed to acquire SSL session cache lock"

2016-03-09 Thread Hiwot Wonago
hello everyone, I downloaded Apache24, i was trying to install it as a service. i run it on cmd, its looks fine on the command prompt. The problem is its not working on browser. its Bringd Forbidden, error 403What should i do? plus if i start Apache monitor service, it doesnt work on cmd, if i

Aw: [users@httpd] Lots of messages "[ssl:warn] Resource deadlock avoided: AH02026: Failed to acquire SSL session cache lock"

2016-03-09 Thread Hildegard Meier
We have also this messages with severity "emergency": grep emerg /var/log/apache2/error.log [Wed Mar 09 07:09:31.099331 2016] [mpm_worker:emerg] [pid 26526:tid 139668485949184] (35)Resource deadlock avoided: AH00273: apr_proc_mutex_lock failed. Attempting to shutdown process gracefully. [Wed Mar