Re: [us...@httpd] Re: httpd is creating large number of shared memory segments.

2009-06-26 Thread Scott Gifford
"Chandranshu ." writes: > We changed our script that used to do a graceful restart to also > record the number of shared memory segments before and after the > restart. Plotting the number of shm segments vs. the number of times > the server was restarted gracefully was almost a straight line. H

Re: [us...@httpd] Need some SSL help please.

2009-08-07 Thread Scott Gifford
Josh Gooding writes: [...] > Run the Login.jsp through SSL, after successful login, drop the SSL. The > entire session doesn't need encrypted, only the login and password. Sure, that's possible. The general strategy is to accept the username and password on a secure connection, and if they

[us...@httpd] Different Limit rules on the same directory with mod_ftp

2009-10-27 Thread Scott Gifford
Hello, I'm using mod_ftp to provide authenticated FTP access to a Web directory. It is mostly read-only, but a few users should have write access to the directory. I am using mod_auth_mysql with groups for authentication; there is a reader group and a writer group, and the user with write access

Re: [us...@httpd] Different Limit rules on the same directory with mod_ftp

2009-10-27 Thread Scott Gifford
Nick Kew writes: > Scott Gifford wrote: >> Hello, >> I'm using mod_ftp to provide authenticated FTP access to a Web >> directory. It is mostly read-only, but a few users should have write >> access to the directory. I am using mod_auth_mysql with groups for &g

Re: [us...@httpd] equivalent of http://httpd.apache.org/docs/1.3/misc/howto.html#logreset

2009-12-17 Thread Scott Gifford
Shibi NS writes: > Is there any equivalent of http://httpd.apache.org/docs/1.3/misc/howto.html# > logreset in apache 2.X The information there still applies, although "apachectl graceful" or "apache2ctl graceful" is preferred over kill -1 `cat httpd.pid` nowadays. Scott. --

Re: [us...@httpd] Getting HTTP Headers from CGI program

2009-12-31 Thread Scott Gifford
André Warnier writes: > Tushar Joshi wrote: >> Hi thanks for the reply. I'm writing my applications in C so would >> have thought there might be a low level way of doing this. [...] > But, in general, if this is a CGI program, then it is running as a > separate process from Apache itself, and i

Re: [us...@httpd] Apache vs LiteSpeed

2010-01-12 Thread Scott Gifford
On Wed, Jan 13, 2010 at 1:31 AM, Jarrod Slick wrote: > Apache Users, > > As some of you may or may not know a fairly prominent commercial webserver, > LiteSpeed, claims to outperform even a well configured Apache 2.2.x > installation by orders of magnitude. They have some internal benchmarks > th

Re: [us...@httpd] Apache vs LiteSpeed

2010-01-14 Thread Scott Gifford
On Wed, Jan 13, 2010 at 2:08 AM, Jarrod Slick wrote: > > On Jan 13, 2010, at 12:47 AM, Scott Gifford wrote: > > On Wed, Jan 13, 2010 at 1:31 AM, Jarrod Slick wrote: > >> Apache Users, >> >> As some of you may or may not know a fairly prominent commercial &

Re: [us...@httpd] Apache vs LiteSpeed

2010-01-15 Thread Scott Gifford
On Fri, Jan 15, 2010 at 12:08 PM, Jarrod Slick wrote: [ ... ] > And another question: how would you do it differently? Sure, in an ideal > world I could assemble my own botnet and then blast my corporate network > with a gigabit of distributed traffic multiple times for each webserver -- > but ob

Re: [us...@httpd] can we run two SSL domains on one IP

2010-01-19 Thread Scott Gifford
On Tue, Jan 19, 2010 at 6:55 AM, Nilesh Govindarajan wrote: > > Oops. My bad. SSL protocol doesn't give the Host: header. So apache can't > decide which Vhost to serve (from apache docs :D). > Though SSL doesn't itself provide a Host: header, the HTTP session on top if it still does, so if you ca

Re: [us...@httpd] observed delay for changing process owner

2010-02-15 Thread Scott Gifford
On Mon, Feb 15, 2010 at 10:43 AM, Harald Falkenberg < harald.falkenb...@desy.de> wrote: [ ... ] > Now I observed, that it takes a long time to change the onwership of the > processes, which I set via the 'user' and 'grou' derictives in httpd.conf. > After the ownership changed, the processes serve

Re: [us...@httpd] Can I have 2 httpd servers running on 2 different ports?

2010-02-22 Thread Scott Gifford
On Mon, Feb 22, 2010 at 2:09 PM, Aruna Gummalla wrote: > Hi, > > Can I have 2 httpd servers running on 2 different ports? > Sure. You'll want to create a new configuration file and start Apache using that configuration file. You can run Apache by hand, or you can copy apache2ctl and change the

Re: [EMAIL PROTECTED] way for me to turn off if-modified-since & always return 304 reply ?

2008-09-12 Thread Scott Gifford
"dave selby" <[EMAIL PROTECTED]> writes: > Is there a way for me to turn off if-modified-since so the client > browser will ALWAYS use its locally cached document Dave, Usually sending an Expires header will tell browsers to mostly use a cached version. I use something like this to set my expir

Re: X-Forwarded-For

2008-12-15 Thread Scott Gifford
"Mohit Anchlia" writes: > Our traffic is going through proxy, how can I enable X-Forwarded-For > in apache to get the original IP. Does this also work for users using > ISP (private IP) and are behind the ISP router. Do you mean you have Apache acting as a proxy and you want it to send the X-For

Re: [us...@httpd] 'safe' way dismount a usb drive?

2009-01-04 Thread Scott Gifford
Foo JH writes: > I've managed to mount/ umount a usb drive. But I'm not sure if there is > any other commands I need to execute - as a best practice - before I > physically plug it out. Not sure what this has to do with Apache; are you serving Web files from the USB drive? At any rate, unmounti

Re: [us...@httpd] Lags on simple static file requests

2009-01-06 Thread Scott Gifford
"Paul Prescod" writes: > I grep my logs every day for slow queries. Sometimes I see a dynamic > request in there and I go and optimize the code. But more concerning > is when I see simple serving of very small static files on a very > underloaded machine. I am looking for hints about the source.

Re: [us...@httpd] Redirecting request from HTTP to HTTPS

2009-04-19 Thread Scott Gifford
"Tarun Narang" writes: > How could I redirect all my requests for http to https ? Hello Tarun, We use RedirectMatch for this. See: http://httpd.apache.org/docs/2.0/mod/mod_alias.html#redirectmatch > However, I have to redirect the non SSL request to SSL request, like when the > user requ

Re: [EMAIL PROTECTED] HTTP AUTH

2005-12-26 Thread Scott Gifford
Christopher Deeley <[EMAIL PROTECTED]> writes: > I would like to set up a user folder for each user on my site and > the only method I know to stop anyone but the user accessing that > folder is to use htaccess to require the valid user. I have PHP > running as a module on Apache. Is there a way

Re: [EMAIL PROTECTED] Can apache and ssh share port 80?

2006-03-31 Thread Scott Gifford
[EMAIL PROTECTED] writes: [...] > Ideally, I wish there were some kind of apache directives I could use > so that httpd would continue to monitor port 80, and if it gets a > connection that does not look like http or https, it would forward the > bits to port 22. But I doubt that is possible. T

Re: [EMAIL PROTECTED] Using apache as proxy only on specific folder

2007-05-09 Thread Scott Gifford
[EMAIL PROTECTED] writes: > Hi all. > > I want to make apache2 (port 80) to work like a proxyserver to a other > webserver that is running on the same machine on port 3000. > > The following works perfectly for this: > ProxyPass / http://localhost:3000/ > ProxyPassReverse / http://localhost:3000

Re: [EMAIL PROTECTED] Overriding url filename changing in Apache

2007-05-16 Thread Scott Gifford
"Harry Spier" <[EMAIL PROTECTED]> writes: > I have a website on a shared hosting Apache Linux server. [...] > I believe (but I'm not sure) that [...] mod-speling is enabled on > that Apache server. This is the default behaviior on the shared > hosting server and they wont change it. > > I need t

Re: [EMAIL PROTECTED] Is mod_ssl enough to authenticate?

2007-05-25 Thread Scott Gifford
"Naveen Rawat" <[EMAIL PROTECTED]> writes: > > > Hi All, > > > > I want to authenticate modules(certificate based) against each other before > any > communcation takes place among .Modules may reside on local and remote > servers. > In both cases,Is mod_ssl enough for authentication or I hav

Re: [EMAIL PROTECTED] Resource temporarily unavailable:,setuid: unable to change to uid: 502

2007-09-27 Thread Scott Gifford
kazekun <[EMAIL PROTECTED]> writes: > Hello, > > I'm new to linux and had installed apache 2.2.6 on Fedora 7 about > a month ago. It seems to be working fine (still able to access the > website) except that when I check the error log today (Sept. 27), I > notice that there are some error messages

Re: [users@httpd] mod_rewrite: Overwriting REMOTE_ADDR with HTTP_X_FORWARDED_FOR

2005-06-24 Thread Scott Gifford
Werner Schalk <[EMAIL PROTECTED]> writes: > Hi, > > well apologies for bringing this issue up again but none of the suggested > solutions actually does work. I tried the following output filter: Why do you need to solve it exactly this way? Can't you instruct your code or your Apache to simply

Re: [users@httpd] mod_rewrite: Overwriting REMOTE_ADDR with HTTP_X_FORWARDED_FOR

2005-06-24 Thread Scott Gifford
Werner Schalk <[EMAIL PROTECTED]> writes: > Hi, > > well of course I could use HTTP_X_FORWARDED_FOR instead of REMOTE_ADDR in all > my scripts but the problem is that I have some customers and their scripts > are relying on REMOTE_ADDR so I don't want to ask them to change their > scripts... A

Re: [users@httpd] Chroot question.

2005-06-24 Thread Scott Gifford
"Gold, Samuel (Contractor)" <[EMAIL PROTECTED]> writes: > Hey all, > > I have setup apache 1.3.33 on Solaris 9 in a chroot environment and just > wanted to ask a simple question. If there is a /proc directory in the jail > should the apache processes be in the real root /proc directory or in the

Re: [EMAIL PROTECTED] Capturing IP.

2005-07-22 Thread Scott Gifford
Luis Croker <[EMAIL PROTECTED]> writes: > I have an Apache web server (server-A) which Im using like a proxy with > SSL, I mean... I receive all connections and forward them to another server > (server-B). Everything works fine. Now, we want to capture the source IP > address of the connect

Re: [EMAIL PROTECTED] Multiple SSL servers behind one public ip

2005-08-26 Thread Scott Gifford
"Dan Carl" <[EMAIL PROTECTED]> writes: [...] > The way I understand it is that because of the nature of the SSL protocol > you can only have one ssl site per IP. > Is there no way around this? You can run the two SSL servers on two different ports, then use a URL like: https://example.com:4

Re: [EMAIL PROTECTED] how to run a root programme from apache server

2005-09-01 Thread Scott Gifford
Arun Naik <[EMAIL PROTECTED]> writes: > Hi, > I have to run a program from apache server, whose owner is root. As apache > server runs from user apache, it is not able to run the program ( owned by > root). Is there any way out ? Change the permissions on the file so Apache has permission to run

Re: [EMAIL PROTECTED] how to run a root programme from apache server

2005-09-01 Thread Scott Gifford
Anatoly Pugachev <[EMAIL PROTECTED]> writes: > On Thu, Sep 01, 2005 at 11:02:31AM -0400, Scott Gifford wrote: > | Arun Naik <[EMAIL PROTECTED]> writes: > | > | > Hi, > | > I have to run a program from apache server, whose owner is root. As apache > | >

Re: [EMAIL PROTECTED] Different security based on network interface

2005-09-13 Thread Scott Gifford
"AragonX" <[EMAIL PROTECTED]> writes: [...] > I know that mod_access and I think mod_security will allow me to do this > but they do it based on IP address. I'm afraid someone will spoof the IP > addresses of the internal network to bypass this security measure. The easiest way to do this is wi

Re: [EMAIL PROTECTED] unwanted file upload

2005-09-19 Thread Scott Gifford
John Hammer <[EMAIL PROTECTED]> writes: > I am relatively new to this so if this is not the correct forum I would > appreciate being pointed to the right place. > > Over the weekend I discovered an unwanted program running on my server. In > the error_log I found this entry: > >> --13:29:54-- h

Re: [EMAIL PROTECTED] Apache running with PID of 0

2005-10-04 Thread Scott Gifford
"Duncan Drury" <[EMAIL PROTECTED]> writes: [...] > one of the symptoms is Apache ends up running with a PID of 0 (or > shows up as doing so when I ps -aux | grep httpd) Can you paste the output of "ps -aux |head -1" and "ps -aux |grep httpd" which shows this into an email back to the list? Unle

Re: [EMAIL PROTECTED] Re: PerlSetEnv in .htaccess ?

2008-01-23 Thread Scott Gifford
"abhishek jain" <[EMAIL PROTECTED]> writes: > Pl. do not mind i am posting again within an hour, but the problem is taking > my > nerves, is there a way to go forward i believe the webhost is not allowing to > set me PerlSetEnv is there another method to do the same, You could try just using Set

Re: [EMAIL PROTECTED] Re: PerlSetEnv in .htaccess ?

2008-01-23 Thread Scott Gifford
"abhishek jain" <[EMAIL PROTECTED]> writes: > On second thoughts is there a method by which i can execute some > piece of code to execute even before my scripts are called, remember > i am on a shared host, I don't know of a way to do exactly this on a shared host. If your provider supports mod_

Re: [EMAIL PROTECTED] Cannot access "localhost"

2008-03-07 Thread Scott Gifford
Ben Schonle <[EMAIL PROTECTED]> writes: > *In Short: > - After fresh installation of apache2 trying to access localhost or > 127.0.0.1 is not working Hi Ben, What error do you get when you try to connect? What happens if you type "telnet 127.0.0.1 80" on the Web server to connect directly? ---

Re: [EMAIL PROTECTED] About ListenBackLog and MinspareThread

2008-03-18 Thread Scott Gifford
"Arnab Ganguly" <[EMAIL PROTECTED]> writes: > Hi All, > My Apache server is heavily loaded.I am using Apache 2.2.8 on Red-Hat 3 with > MPM=worker.Can I reduce the load by reducing the value of > ListenBackLog? No, at best that will save you a small amount of memory in your TCP stack, at worst it

Re: [EMAIL PROTECTED] Prefetch

2008-03-20 Thread Scott Gifford
"Krist van Besien" <[EMAIL PROTECTED]> writes: [...] > What I now want to do, is have apache (or something else) look at the > content of the response that comes from the backend, and _prefetch_ > all the images that are linked in it, so that when the request for the > images comes they are alrea

Re: [EMAIL PROTECTED] Is it possible to keep a module running after closing a connection?

2008-03-31 Thread Scott Gifford
"Brown Chris-CCB034" <[EMAIL PROTECTED]> writes: > I'm looking at a situation where we'd want to close a connection (for example > the message size is too large) but we'd like to keep the thread active so that > we can perform some other steps before releasing the thread. Is this > possible? >

Re: [EMAIL PROTECTED] Unsecuring a URL

2008-05-30 Thread Scott Gifford
Mark Mcdonald <[EMAIL PROTECTED]> writes: [...] > There are no errors, the authentication prompt just remains after apache is > restarted. > > I am testing on a box using Basic auth, with the following file in > /etc/apache2/sites-enabled: > > [...] > > Order allow,deny >

Re: [EMAIL PROTECTED] Re: Apache Security Problem

2008-05-30 Thread Scott Gifford
Andre Hübner <[EMAIL PROTECTED]> writes: > Hi, > >>> You can do restrictions of particular options using the technique >>> shown her= >>>e: >>>http://httpd.apache.org/docs/2.2/howto/htaccess.html#how > >>>But I have a feeling that there are other ways around your separation. >>>It depends on exact

Re: [EMAIL PROTECTED] Heavy Wait on My Shoulders

2008-05-30 Thread Scott Gifford
amiribarksdale <[EMAIL PROTECTED]> writes: > About the only strange thing in my debug-level error logs is > > (32)Broken pipe: client stopped connection before rwrite completed That's an interesting clue. It looks like it is in the middle of a URL rewrite (mod_rewrite) while it is stuck. Maybe

Re: [EMAIL PROTECTED] Heavy Wait on My Shoulders

2008-05-30 Thread Scott Gifford
ite, unless the rewrite was very slow or looping. Scott. > > Ben > > On Fri, May 30, 2008 at 9:53 AM, Scott Gifford > <[EMAIL PROTECTED]> wrote: >> amiribarksdale <[EMAIL PROTECTED]> writes: >> >>> About the only strange thing in my debug-leve

Re: [EMAIL PROTECTED] IP based virtual hosting and security

2008-07-23 Thread Scott Gifford
"César Leonardo Blum Silveira" <[EMAIL PROTECTED]> writes: [...] > So, my question is: how safe is it to let the other interface listen, > even if it will not respond correctly to any request? What is the > potential for security vulnerabilities in the 8080 port of the other > interface? There a

Re: [us...@httpd] graceful restart occasionally gives "could not bind" error

2010-05-27 Thread Scott Gifford
I don't have an answer for you, but here are a few troubleshooting tips I have found helpful. If you can make it happen pretty often, you could try doing an strace/truss/ktrace (I think it's ktrace on BSD) of the process to see what system calls it's making and exactly which is failing. You could

Re: [us...@httpd] I/O accounting for all processes?

2010-06-15 Thread Scott Gifford
On Tue, Jun 15, 2010 at 5:33 PM, Jakov Sosic wrote: > I'm interested in measuring I/O that all apache processes are > generating. I used mod_logio to solve a similar problem not too long ago, with good success: http://httpd.apache.org/docs/2.0/mod/mod_logio.html Scott.

Re: [us...@httpd] Apache getting stuck with all workers in a BUSY_READ state

2010-06-15 Thread Scott Gifford
On Tue, Jun 15, 2010 at 1:02 PM, David Fallon wrote: [ ... ] > Any suggestions on a solution, or how I might get more info out of > apache as to what it's doing while everyone's in the read state? I would try using strace (or ktrace or truss depending on your OS) on the processes to see what th

Re: [us...@httpd] Apache getting stuck with all workers in a BUSY_READ state

2010-06-16 Thread Scott Gifford
On Wed, Jun 16, 2010 at 9:33 AM, David Fallon wrote: > Thanks for the suggestion, but unfortunately I've tried that - truss > in this case is attaching post whatever it's blocking on (so I just > see it sleeping), and I haven't yet waited out the problem to see what > happens when/if whatever's b

Re: [us...@httpd] I/O accounting for all processes?

2010-06-16 Thread Scott Gifford
On Wed, Jun 16, 2010 at 12:16 PM, Jakov Sosic wrote: > On 06/16/2010 06:49 AM, Scott Gifford wrote: > > On Tue, Jun 15, 2010 at 5:33 PM, Jakov Sosic > <mailto:jakov.so...@srce.hr>> wrote: > > > > I'm interested in measuring I/O that all apache processes

Re: [us...@httpd] AllowOverride: Pros and Cons

2010-07-07 Thread Scott Gifford
On Thu, Jul 8, 2010 at 2:28 AM, James Corteciano wrote: [ ... ] > I am just concern about security matters that will produce if I will give > the user full access on .htaccess (AllowOverride All) on their webroot? > AllowOverride All effectively allows a user who can create a .htaccess file to ac

Re: [us...@httpd] debugging websites running on Apache?

2010-11-19 Thread Scott Gifford
On Fri, Nov 19, 2010 at 7:00 AM, Tomasz Chmielewski wrote: > How do you debug websites running on Apache? > I have a few tricks I use. First, I try to write my applications so they can be run from the commandline. That means when they misbehave, I can run them directly under strace or a debugg

Re: [users@httpd] HTTP authentication using HTTP

2011-01-11 Thread Scott Gifford
On Tue, Jan 11, 2011 at 4:52 AM, Anders Melchiorsen wrote: > Hi. > > I want to password protect some directories by forwarding the HTTP > authentication to a different URL. That is, rather than using LDAP or MySQL > as a backend, I want to use a CGI script (possibly on a different server). > You

Re: [users@httpd] giving write permissions to apache user on some folders in document root

2011-02-03 Thread Scott Gifford
On Thu, Feb 3, 2011 at 2:48 PM, James Godrej wrote: [ ... ] > I am not at all convinced by the idea of giving permissions to read,write > and > execute as these Learning Management Systems say. > Let me know what you people have to say? > What is the best practise in such situations? > James, Y

Re: [users@httpd] Single Value Authentication Module

2011-09-12 Thread Scott Gifford
On Mon, Sep 12, 2011 at 1:01 PM, J.Lance Wilkinson wrote: [ ... ] > >Actually, I *AM* trying to AUTHENTICATE with it. I have a directory >that contains content that is to only be accessed by individuals who >have paid a specific fee. I want HTTPD to only offer that > di

Re: [users@httpd] Vanity URL Rewrites Best Practices?

2011-10-03 Thread Scott Gifford
On Mon, Oct 3, 2011 at 2:25 PM, Nick Tkach wrote: > Does anyone have any pointers/suggestions on the best way to do vanity url > rewrites? > > For example, > > > > http://foo.com/mmh/maintenance_plan/tip?contentCategoryType=MaintenanceTip&id=%2Fwww%2Favm_webapps%2Fmmh%2Fmaintenance-tips%2Fcontent