Re: [users@httpd] HTTP 403 after upgrade from Debian old-stable

2016-12-28 Thread Yehuda Katz
The config syntax for allow,deny access changed in 2.4. Check the upgrade docs for full details: http://httpd.apache.org/docs/2.4/upgrading.html The simplest option might be to enable mod_access_compat , but that might go away in a futur

Re: [users@httpd] Query for Apache Server support on Oracle Linux

2016-12-28 Thread Yehuda Katz
he > binaries.Please suggest if my understanding is correct or not . > > On Thu, Dec 29, 2016 at 12:14 AM, pritam sahoo > wrote: > >> Thanks this helps >> >> Get Outlook for iOS <https://aka.ms/o0ukef> >> >> _ >> From:

Re: [users@httpd] Re: pf 2017

2017-01-01 Thread Yehuda Katz
I would suggest looking on the cPanel documentation and forums. When you make changes in cPanel it generally overwrites the entire Apache config, so you need to be careful. - Y Sent from a device with a very small keyboard and hyperactive autocorrect. On Jan 1, 2017 4:07 PM, "Spork Schivago" wr

Re: [users@httpd] Re: pf 2017

2017-01-01 Thread Yehuda Katz
gt; > If I wanted to hide the port number from visitors so when they went to > something like mydomain.com:2083, it'd show subdomain.mydomain.com > instead, do you think I could accomplish that using a reverse proxy? Is > there any other ways to accomplish this that anyone knows of?

Re: [users@httpd] Access forbidden to wordpress tinymce loader

2017-01-12 Thread Yehuda Katz
You haven't given quite enough information for someone to help you. Is there anything in the error log? Can you post the relevant .htaccess files? Absent that, the best we probably can do is point you to the 2.2->2.4 migration documentation: http://httpd.apache.org/docs/2.4/upgrading.html - Y On

Re: [users@httpd] https://www.berkshirefurniture.com Issue on .htaccess rule.

2017-01-21 Thread Yehuda Katz
It looks more likely to be a problem with your PHP script. When I searched your website for the product in your URL, I found a different URL: https://www.berkshirefurniture.com/carter-upholstered-bed/p/U0h8Y2FydGVyIHVwaG9sc3RlcmVkIGJlZA== Check your access logs and/or turn on rewrite logging to se

Re: [users@httpd] Guidance on Fail Over for Load Balancers

2017-01-23 Thread Yehuda Katz
You could set up two HTTPD servers with a shared IP address (using VRRP with keepalived). In that case, I highly recommend using a configuration management tool (for example, puppet or chef) to make sure both systems have the same settings. If the two load balancers need to share session informati

Re: [users@httpd] Help tracking down a weird error with Apache and local / remote connections.

2017-02-05 Thread Yehuda Katz
Did you check your DNS to make sure both systems are resolving to the same IP address? - Y On Thu, Jan 26, 2017 at 3:31 PM, Spork Schivago wrote: > I have a bit of a weird problem that I'd like some help tracking down. > I'm pretty sure it's something with Apache. In my Apache 2.4.25 (cPanel)

Re: [users@httpd] Help tracking down a weird error with Apache and local / remote connections.

2017-02-05 Thread Yehuda Katz
iles from the domain.com VirtualHost directory. > ServerAliases have been commented out. To my knowledge, this should not > happen. > > I can probably regenerate it. I've restarted the server and everything, > but I was thinking maybe this was some sort of bug and not a miscon

Re: [users@httpd] Help tracking down a weird error with Apache and local / remote connections.

2017-02-05 Thread Yehuda Katz
; entry for hostname.domain.com, but nothing for www.domain.com. > > On Sun, Feb 5, 2017 at 7:38 PM, Yehuda Katz wrote: > >> This is a common enough setup that it is unlikely to be a bug and more >> likely to be a configuration error. >> >> cPanel creates VirtualHo

Re: [users@httpd] Help tracking down a weird error with Apache and local / remote connections.

2017-02-05 Thread Yehuda Katz
gt; But on Eugene (my local machine), and everyone elses machine, when I run: > curl www.jetbbs.com/.well-known/test.html, I see: > franklin.jetbbs.com test > > I still don't fully understand why I'm seeing different results based on > whether I run the command on the server r

Re: [users@httpd] Help tracking down a weird error with Apache and local / remote connections.

2017-02-07 Thread Yehuda Katz
x27;t getting redirected. I'm guessing that was added by cPanel. I need > to find away to redirect that now to port 443. I can't just add an entry > in the .htaccess file under /var/www/html because cPanel says those files > can get deleted at any time. > > Thank you

Re: [users@httpd] Core code in apache

2017-02-20 Thread Yehuda Katz
How do you define the core vs. modules? If you look at the documentation (http://httpd.apache.org/docs/2.4/mod/), it describes what is included in the core and what is a module. There are the core, mpms and other modules. Also maybe the LAYOUT file will help you. - Y On Mon, Feb 20, 2017 at 6:48

Re: [users@httpd] apache run status: how to tell as non-root user (on *nix)?

2017-02-21 Thread Yehuda Katz
That grep would not work on Debian-style packages because they show apache2 as the executable but it might be the best way on other systems. - Y Sent from a device with a very small keyboard and hyperactive autocorrect. On Feb 21, 2017 8:54 AM, "Tom Browder" wrote: > I need to programatically

Re: [users@httpd] Question about make openssl files

2017-02-23 Thread Yehuda Katz
Hi Rodrigo, This mailing list is for Apache HTTPD. If you have questions about OpenSSL, you should try an OpenSSL mailing list (https://www.openssl.org/ community/mailinglists.html) or documentation (https://www.openssl.org/docs/ manpages.html). To point you in the right direction though: you prob

Re: [users@httpd] Why ExpiresByType is ignored when has SetHandler application/x-httpd-php ?

2017-03-02 Thread Yehuda Katz
> *Subject:* Re: [users@httpd] Why ExpiresByType is ignored when has > SetHandler application/x-httpd-php ? > *Date:* trešdiena, 2016. gada 28. decembris 13:20:25 > *From:* Eric Covener > *To:* > > On Tue, Dec 27, 2016 at 10:29 PM, Yehuda Katz wrote: > > Why Ex

Re: [users@httpd] URG:DocumentRoot relate query on WIndows

2017-03-10 Thread Yehuda Katz
You can set the DocumentRoot to "C:/" (note the forward slash instead of the backslash). You can technically set it to just "/" also if you want the drive where HTTPD is located. When running HTTPD on Windows, it is good practice to use forward slashes even though backslashes work in some places.

Re: [users@httpd] Hiding Apache version info on the Aix server for Apache.

2017-03-14 Thread Yehuda Katz
/etc/conf-available/security.conf is part of the Debian/Ubuntu packaged layout of HTTPD, not standard. Do you get an error when you try to start up the server? - Y On Tue, Mar 14, 2017 at 9:08 AM, Chunduru, Krishnachaithanya < krishnachaithanya.chund...@broadridge.com> wrote: > Hi, > > > > I co

Re: [users@httpd] Hiding Apache version info on the Aix server for Apache.

2017-03-14 Thread Yehuda Katz
r. When the script is executed, it is giving > message like “starting Apache” later when we are checking the process is > not running. > > > > I can’t even find the /etc/conf-* dir in our Aix server. > > > > *Regards,* > > *Krishna* > > > > *From:* Yehud

RE: [users@httpd] Hiding Apache version info on the Aix server for Apache.

2017-03-16 Thread Yehuda Katz
I believe the only way to do that is to recompile HTTPD yourself. - Y Sent from a device with a very small keyboard and hyperactive autocorrect. On Mar 16, 2017 6:02 AM, "Chunduru, Krishnachaithanya" < krishnachaithanya.chund...@broadridge.com> wrote: > Hi Konstantin/All, > > I have now resolve

Re: [users@httpd] What is preferred PHP interface?

2017-03-29 Thread Yehuda Katz
The Apache wiki has a rundown of options: https://wiki.apache.org/httpd/php Plenty of people still use mod_php and it has been updated to work with HTTPD 2.4 and PHP 7. - Y On Wed, Mar 29, 2017 at 8:49 PM, John Iliffe wrote: > Reading several sources there is conflicting information as to what

Re: [users@httpd] configured HTTP(80) on the standard HTTPS(443) port!

2017-04-04 Thread Yehuda Katz
The first warning is telling you that you are serving regular HTTP traffic on what is usually an HTTPS port. This is because you do not have any SSL configuration on the virtual host on port 443. You need "SSLEngine on" and certificate information at least. You can ignore the second warning about "

Re: [users@httpd] Does Apache need to delay startup until system time set?

2017-04-20 Thread Yehuda Katz
There are some parts of the HTTP conversation which could be affected by having the wrong time, but HTTPD itself doesn't care. For example, if you are using cookies, caching, those could be affected by the time change (even more specifically, for PHP sessions, when the clock changes, the PHP sessio

Re: [users@httpd] paypal/php apache2 integration problem

2017-06-09 Thread Yehuda Katz
You should probably ask this on a Codeigniter help list or forum. This does not appear to be an issue with Apache HTTPD. - Y On Fri, Jun 9, 2017 at 1:54 PM, Paul Claridge wrote: > Hi Team, I have been battling this for several weeks now and am completely > stumped, so I am hoping for some inspi

Re: [users@httpd] SSL virtual Hosts

2017-06-09 Thread Yehuda Katz
Are any errors shown in the httpd logs? Is httpd actually reading the files you create in the conf.d directory? I sometimes check that by putting gibberish in the config file and then running `httpd -t` to test the configuration. What is the actual Include directive in httpd.conf that includes th

Re: [users@httpd] Re: SSL virtual Hosts

2017-06-10 Thread Yehuda Katz
HTTPD doesn't care how many files your configuration uses. You can include as many directives in a single file as you want. To quote from [the documentation](https://httpd.apache.org/docs/current/ configuring.html): > In addition, other configuration files may be added using the Include directive

Re: [users@httpd] allow deny file and multiple .conf question

2017-06-11 Thread Yehuda Katz
Allow/Deny directives apply to whatever container they are in. A single file can onl.y ever match a single block and the individual blocks do not have any connection to each other. In general, .conf files are loaded alphabetically, but in your example, it shouldn't matter. - Y On Fri, Jun 9, 2

Re: [users@httpd] Apache on Mac Sierra 10.12.5

2017-07-02 Thread Yehuda Katz
What does the error log say? What user and group is the httpd process actually running as? (`ps aux` should tell you.) - Y Sent from a device with a very small keyboard and hyperactive autocorrect. On Jul 2, 2017 4:12 PM, "Manal Helal" wrote: > I followed this guide to install apache on Sierr

Re: [users@httpd] [ANNOUNCEMENT] Apache HTTP Server 2.4.27 Released

2017-07-11 Thread Yehuda Katz
H2 is threaded and prefork is not, so the performance is poor or it doesn't work at all. There was a discussion about this on the dev list: https://lists.apache.org/thread.html/bae472cadaeeb761b88bb4569cc0b7d87bc2dcb2fbcbf472d895f32e@%3Cdev.httpd.apache.org%3E Sent from a device with a very small

Re: [users@httpd] Apache (2.4.26) changing permissions on passwd file?

2017-07-11 Thread Yehuda Katz
Did you compile Apache yourself or use a package from somewhere? - Y Sent from a device with a very small keyboard and hyperactive autocorrect. On Jul 11, 2017 11:53 AM, "Kevin Miles" wrote: I wonder if someone can shed some light on this. I've been running Apache 2.4.7 on Ubuntu 14.04LTS us

Re: [users@httpd] Subdomain of a virtual host ?

2017-07-17 Thread Yehuda Katz
You can create it exactly the same way as any other virtual host. - Y Sent from a device with a very small keyboard and hyperactive autocorrect. On Jul 17, 2017 12:10 PM, "Darryl Philip Baker" < darryl.ba...@northwestern.edu> wrote: > I have a virtual host configured for george.example.com comp

RE: [users@httpd] Subdomain of a virtual host ?

2017-07-17 Thread Yehuda Katz
affect from the order of the definitions? *Darryl Baker* Sr. System Administrator Distributed Application Platform Services *Northwestern University* darryl.ba...@northwestern.edu (847) 467-6674 *From:* Yehuda Katz [mailto:yeh...@ymkatz.net] *Sent:* July 17, 2017 11:28 AM *To:* users@

Re: [users@httpd] WebSockets support in transparent proxy

2017-07-17 Thread Yehuda Katz
What you are describing sounds like a reverse proxy to me. Are you using ProxyPass and did you try the same configuration with the ws or wss protocol (in place of http/https)? Can you post a snippet of your current configuration? - Y Sent from a device with a very small keyboard and hyperactive

Re: [users@httpd] Strange WebDAV behavior on MKCOL for 1 client only

2017-08-07 Thread Yehuda Katz
Try mod_dumpio or a packet capture to see what else is different about the request. - Y On Mon, Aug 7, 2017 at 3:53 PM, Todd Blum wrote: > Hello, > > I have Apache mod_dav running on Windows 2012. > > When a webDAV enabled application connects and tries to MKCOL on a > directory that already ex

Re: [users@httpd] Strange WebDAV behavior on MKCOL for 1 client only

2017-08-07 Thread Yehuda Katz
[client yyy.yyy.yyy.yy:61411] mod_dumpio: dumpio_out > (metadata-EOS): 0 bytes > [Mon Aug 07 14:48:34.518391 2017] [dumpio:trace7] [pid 3880:tid 1132] > mod_dumpio.c(164): [client yyy.yyy.yyy.yy:61411] mod_dumpio: dumpio_out > [Mon Aug 07 14:48:34.518391 2017] [dumpio:trace7] [pid 3880:tid 1132] > mod_dumpio.c(58): [client yyy.yyy.yyy.yy:61411] mod_dumpio: dumpio_out > (metadata-EOR): 0 bytes > [Mon Aug 07 14:

Re: [users@httpd] Strange WebDAV behavior on MKCOL for 1 client only

2017-08-08 Thread Yehuda Katz
i mismatch only happens when it connects > to Apache 2.4.4/OpenSSL/1.0.1e on Windows. What would explain the > difference? > > Todd > > On Mon, Aug 7, 2017 at 11:01 PM, Yehuda Katz wrote: > >> It looks like a problem with the implementation or configuration in the >> c

Re: [users@httpd] Unreliable Fedora 26 installation using a kickstart file

2017-08-11 Thread Yehuda Katz
I think you might have the wrong list... Sent from a device with a very small keyboard and hyperactive autocorrect. On Aug 11, 2017 2:56 AM, "fedora" wrote: > Dear listers > I never had such an unreliable installation as the one for fedora 26. I am > a long time user of fedora (at least since 2

Re: [users@httpd] Disable Autoindex module

2017-08-11 Thread Yehuda Katz
The server might not start because removing the module leaves an invalid configuration somewhere. If you run httpd -t or look in the error log, it should tell you where the problem is. - Y On Fri, Aug 11, 2017 at 12:01 PM, David Wright - NOAA Affiliate < david.e.wri...@noaa.gov> wrote: > Dear Ex

[users@httpd] Debugging Intermittent 500 Errors

2017-09-05 Thread Yehuda Katz
We have set of three servers running Apache 2.4. (version distributed with RedHat 7) behind a Kemp LoadMaster load balancer. The configuration is managed by Puppet, so all the servers have the same configuration. I put the configuration in a Gist to keep the email simple: https://gist.github.com/ya

Re: [users@httpd] Offtopic: Apache Struts vulnerability: how to detect Struts & will DB encryption help

2017-09-10 Thread Yehuda Katz
Post Apache Struts questions on the Struts mailing list: http://struts.apache.org/mail.html It also happens that you are wrong about where HTTPD runs. Plenty of people have it running perfectly well on Windows. - Y Sent from a device with a very small keyboard and hyperactive autocorrect. On S

Re: [users@httpd] SSL authentication by clients certificates or by IP

2013-03-14 Thread Yehuda Katz
I am not near my computer, so I can't test this, but I believe what you are looking for is the "Satisfy Any" directive. http://httpd.apache.org/docs/2.2/mod/core.html#satisfy - Y On Thursday, March 14, 2013, Jean-Francois Maeyhieux wrote: > Hello everyone ! > > >My purpose is simple: > > I w

Re: [users@httpd] Check if external url exists with standard Apache directives

2013-05-21 Thread Yehuda Katz
Your question looks similar to this StackOverflow question: http://serverfault.com/questions/83099/apache2-mod-proxy-w-multiple-reverse-proxies I am guessing from your question that you can't even change that much on the 'destination' server. I have also looked for a way to do this and come up emp

Re: [users@httpd] Interaction of mod_headers and mod_expires

2013-05-22 Thread Yehuda Katz
On Wed, May 22, 2013 at 7:21 AM, Michael Weiser < m.wei...@science-computing.de> wrote: > RewriteEngine on > RewriteCond %{REQUEST_URI} !/browser_not_supported/ > RewriteCond %{HTTP_USER_AGENT} > ^Mozilla/4\.0\s*\(compatible;\s*MSIE\s*(1|2|3|4|5|6|7|8)\.(?!.*IEMobile) > RewriteRule (.*) /browser_n

Re: [users@httpd] Help with Apache Virtual Host Config for Ubuntu Server 4 IPs

2013-06-25 Thread Yehuda Katz
On Tue, Jun 25, 2013 at 11:35 AM, Francis Lee Mondia wrote: > I'm trying to configure an Ubuntu server with 4 Public IPs to display > "This is a shared IP site" if any of the IPs are accessed directly. The > server has IP-based virtual-hosts configured on the different IPs. So far, > I'm not havin

Re: [users@httpd] Changing the User Which Runs Apache

2013-08-07 Thread Yehuda Katz
Do not run Apache as yourself. If it (or any application it runs as a module - like PHP if you use mod_php) is compromised, it will be able to modify your personal files. Most people run apache as www-data (or similar) in a dedicated directory. Check out how the default configuration of apache wor

Re: [users@httpd] I Know I Should Be on PHP List, But...

2013-08-09 Thread Yehuda Katz
First: Please get rid of Apache 2.0. Apache httpd 2.0.65 Released and Retired 2013-07-09 The Apache HTTP Server Project has ended legacy development of the 2.0 legacy branch, and announces the conclusive, historical release of version 2.0.65

Re: [users@httpd] What is the correct way to configure one DocumentRoot that is available both with and without SSL for requests to all hostnames

2013-08-14 Thread Yehuda Katz
On Wed, Aug 14, 2013 at 10:58 AM, Anthony DeCusati wrote: > We would like to enable SSL but still be able to get to the server without > SSL (same content served from both ports 80 and 443). We would like to use > one SSL cert for all hostnames used to reach the server - so the server > should be

Re: [users@httpd] name-based vhosts with 2 IP's

2013-09-08 Thread Yehuda Katz
Ubuntu moves some of the configuration around in the default installation, so you need to make sure you are putting things where it expects if you installed from apt. The first thing to check is if apache is listening for those vhosts. Look at the output of `apache2ctl -S` for your vhosts (you mig

Re: [users@httpd] Website access without initial www.

2013-09-11 Thread Yehuda Katz
Do requests to the non-www site show up in the access or error log? (run tail -n 0 -f /var/log/apache2/*.log and access the bare domain.) There might be something useful there if you compare it with a good request. Additionally, I recommend changing your CustomLog to combined_vh (I think that is w

Re: [users@httpd] keep access.log file with rotatelogs

2013-09-17 Thread Yehuda Katz
Have you looked at LogRotateWin ? Documentation: http://sourceforge.net/p/logrotatewin/wiki/LogRotate/ - Y On Tue, Sep 17, 2013 at 2:26 PM, wrote: > > I would like to archive my access.log files but keep the current file > called access.log while renaming

Re: [users@httpd] Tls-Psk support

2013-09-23 Thread Yehuda Katz
On Mon, Sep 23, 2013 at 11:35 AM, wrote: > how to use psk key for tls authentication in apache web server? > Try the documentation: http://httpd.apache.org/docs/2.4/ssl/ Besides that, if you have more specific questions, post here again. Make sure you include what operating system you are u

Re: [users@httpd] http 403 error for any file in the directory of awstats.pl

2013-09-23 Thread Yehuda Katz
That configuration is for Apache 2.2. Apache 2.4 has changed several things: https://httpd.apache.org/docs/2.4/upgrading.html#run-time In a nutshell, you need to find everywhere where it says: > Order allow,deny > Allow from all and replace it with > Require all granted On Mon, Sep 23, 2013

Re: [users@httpd] Apache insists on binding to *all* addresses even though Listen directives specify specific ip addresses

2013-09-23 Thread Yehuda Katz
I think I had a similar problem and it turned out the reason was that one of the IP addresses I was trying to Listen on was not actually bound to an interface. That could cause the misleading error. The other thing I sometimes do is stop the other service, start apache and look at the server-info

Re: [users@httpd] Apache - 64bit Unix

2013-10-01 Thread Yehuda Katz
./configure should default to the same type as the system you are running it on. You can override it with the correct environment variables set when you call configure (I think it is something like CFLAGS="-m32" CPPFLAGS="-m32" LDFLAGS="-L/usr/lib32" to build x86 on x64) - Y On Tue, Oct 1, 2013

Re: [users@httpd] Name based virtualhosts with default

2013-10-01 Thread Yehuda Katz
On Tue, Oct 1, 2013 at 10:02 AM, Redalert Commander < redalert.comman...@gmail.com> wrote: > Our configuration has the typical include of > "/etc/httpd/conf.d/*.conf", it is here that the vhosts are defined in > separate files. Should the default also be placed in here or does it > have to be defi

Re: [users@httpd] rewrite (remapping?) url

2013-10-04 Thread Yehuda Katz
I think you are looking for a reverse proxy using mod_proxy(_http): http://httpd.apache.org/docs/current/mod/mod_proxy.html On Fri, Oct 4, 2013 at 2:25 PM, Pol Hallen wrote: > Howdy :-) > > I'm not sure what's the best module for my issue... > > my problem is: > > I've http://domain1.org > > an

Re: [users@httpd] Public Vs. Development (Private) URL to Document: Not Same Document Roots For Absolute URLs of Supporting Documents

2013-10-07 Thread Yehuda Katz
I usually create vhosts for development for this reason. I would add a vhost for something like opinion.localhost (and add that to your hosts file). The only other option would be using some type of CMS that is aware of the multiple access paths. - Y On Mon, Oct 7, 2013 at 8:12 AM, Steve Penne

Re: [users@httpd] ssl setup checking

2013-10-07 Thread Yehuda Katz
OpenSSL supports each of the options you need (one at a time). http://www.cyberciti.biz/faq/test-ssl-certificates-diagnosis-ssl-certificate/ Just add the server to the hosts file. - Y On Mon, Oct 7, 2013 at 5:22 AM, Robin Becker wrote: > I'm using multi ipaddress setup with virtual hosts to su

Re: [users@httpd] Permission Still Denied with Moodle

2013-10-09 Thread Yehuda Katz
> > "AH00035: access to /moodle/ denied (filesystem path > '/var/www/html/moodle') because search permissions are missing on a > component of the path" This implies that the x permission is missing. You posted for every directory except /var . What are its permissions? I have no idea if selinux co

Re: [users@httpd] Permission Still Denied with Moodle

2013-10-09 Thread Yehuda Katz
1. For the "http://*my ip*/moodle" problem: It appears that there are no vhosts at all, so that should not get in the way. I should have listed this before too: Can you check if apache is listening on all ips? netstat -ln | grep 80 2. For the localhost problem: I can't shake the feeling that this

Re: [users@httpd] Apache Virtual Host Config issue

2013-10-09 Thread Yehuda Katz
Hi Ammar, If your vhost is only bound to port 8080, then going to http://subdomain.example.com/ will not load the site from the apache server. You need to explicitly us http://subdomain.example.com:8080/ Since it is working from localhost, that implies that apache is only listening on localhost an

Re: [users@httpd] Trying to run expect from web page

2013-10-09 Thread Yehuda Katz
You might have better luck with this on a PHP forum/list. You would also need to provide more information. For example: where are you running the knock-3-times vs. the "expect" script; can you share more of the source (not here, since this is not a PHP list); what works or does not work - not coun

Re: [users@httpd] Apache Virtual Host Config issue

2013-10-09 Thread Yehuda Katz
On Wed, Oct 9, 2013 at 11:03 PM, Ammar Hassan wrote: > Thank you for a detailed reply. I have gone through the things you asked > me to check. There was an entry in netstat -an like this: > > TCP[::]:8080 [::]:0 LISTENING > > Which suggests that Apache is running.

Re: [users@httpd] Permission Still Denied with Moodle

2013-10-13 Thread Yehuda Katz
On Sunday, October 13, 2013, Timothy Curchod wrote: > > Taking moodle out of the picture and running strace on > http://211.220.31.50/test.html cuases the same error. So it's not a > Moodle problem. Here are some more details I may or may not have posted in > earlier e-mails: > > netstat -ln | gr

Re: [users@httpd] Permission Still Denied with Moodle

2013-10-13 Thread Yehuda Katz
Now that I am at the computer, a more in-depth reply. On Sun, Oct 13, 2013 at 8:17 AM, Timothy Curchod wrote: > However, changing that value to '$CFG->wwwroot = 'http:// > *my*.*ip*.*goes*.*here*:80/moodle';" and going to http:// > *my*.*ip*.*goes*.*here*:80/moodle doesn't. Google Chrome remov

Re: [users@httpd] Permission Still Denied with Moodle

2013-10-13 Thread Yehuda Katz
On Sun, Oct 13, 2013 at 10:10 AM, Timothy Curchod wrote: > SO I tried: > #Listen 80 > Listen 192.0.2.100:80 > > But got this error and Apache failed to start. > Active: failed (Result: exit-code) since Sun 2013-10-13 22:42:53 KST; > 1min 4s ago > Process: 12488 ExecStop=/usr/sbin/httpd $OPTION

Re: [users@httpd] Permission Still Denied with Moodle

2013-10-13 Thread Yehuda Katz
On Sun, Oct 13, 2013 at 10:37 AM, Timothy Curchod wrote: > Hi again Yehuda, > > I pasted that "Listen 192.0.2.100:80" number from some code example and > didn't notice that it wasn't localhost. I'm getting tired here. > However, that using 192.168.1.100:80 didn't work. And, if that value is > i

Re: [users@httpd] Permission Still Denied with Moodle

2013-10-14 Thread Yehuda Katz
On Mon, Oct 14, 2013 at 6:06 AM, Timothy Curchod wrote: > The bad news is that in the error log there is nothing when going to > http://192.186.1.100/info.php or http://*my*.*ip*.*goes*.*here*/info.php. > Localhost works fine. > > So if there is no error in the httpd error_log, then I am on th

Re: [users@httpd] Permission Still Denied with Moodle

2013-10-15 Thread Yehuda Katz
Good to hear. I also discovered that the netstat output not showing an IPv4 listener was (at least in Debian) a design decision. They considered changing it to be type 'tcp46' instead of just 'tcp6', but it is not clear why that was not changed. I believe it also depends on the kernel and I have n

Re: [users@httpd] Can a certificate error bring down a server?

2013-10-16 Thread Yehuda Katz
On Wed, Oct 16, 2013 at 5:17 AM, John McIntyre wrote: > This morning, I head into the office, and as usual, login to my horde > instance for e-mail and calendar. At the same time, trying to get mailman > running, I decide to remove the mailman instance with yum remove mailman. > Five minutes la

Re: [users@httpd] Reverse Proxy Questions

2013-10-17 Thread Yehuda Katz
There is a timeout, but I don't think it has changed in this version: http://httpd.apache.org/docs/2.4/mod/mod_proxy.html How long do you expect the response to take? Do you know if the request is getting to the Exchange server? - Y On Thu, Oct 17, 2013 at 3:48 PM, Shawn Cannon wrote: > We ha

Re: [users@httpd] Virtual Hosts and SSL Puzzler

2013-10-22 Thread Yehuda Katz
On Tue, Oct 22, 2013 at 9:10 AM, Chris Gordon wrote: > SSL wraps http and you need a cert to decrypt the data sent via SSL. If > you have 3 virtual hosts and you are using Name Based Virtual Hosting how > does the Apache web server know which cert to use to decrypt and read the > header so it c

Re: [users@httpd] Virtual Hosts and SSL Puzzler

2013-10-22 Thread Yehuda Katz
On Tue, Oct 22, 2013 at 9:39 AM, Dennis Putnam wrote: > Thanks. That might make more sense (at least to me). After more reading, > I am not sure that I don't have SNI capable version of httpd already > installed (how do I tell?). The pages that work are very simple but the > one that doesn't is

Re: [users@httpd] Virtual Hosts and SSL Puzzler

2013-10-22 Thread Yehuda Katz
t 22, 2013 at 9:59 AM, Dennis Putnam wrote: > On 10/22/2013 9:44 AM, Yehuda Katz wrote: > > On Tue, Oct 22, 2013 at 9:39 AM, Dennis Putnam wrote: > >> Thanks. That might make more sense (at least to me). After more reading, >> I am not sure that I don't ha

Re: [users@httpd] Virtual Hosts and SSL Puzzler

2013-10-22 Thread Yehuda Katz
On Tue, Oct 22, 2013 at 10:08 AM, Chris Gordon wrote: > To answer your questions: > *"Doesn't the SSLCertificate parameter for each VH say which cert to use*? > > > Yes, but how does Apache know which VH to get the cert from until it has > used a cert to decrypt the SSL? It just used the first

Re: [users@httpd] X-Forwarded-For

2013-10-24 Thread Yehuda Katz
The X-Forwarded-For header is set by Apache automatically ( http://httpd.apache.org/docs/2.2/mod/mod_proxy.html#x-headers). Your inside servers need to know to use it. CloudFlare has some documentation about how to handle this on different servers: https://support.cloudflare.com/hc/en-us/sections/2

Re: [users@httpd] X-Forwarded-For

2013-10-25 Thread Yehuda Katz
I thought each section has non-mod_cloudflare workarounds - I see only some do. The Apache documentation for mod_proxy has a suggestion for changing the format of the log file (can paste a link from this device, but it should e easy enough to find) to also include the header, but if you want to rep

Re: [users@httpd] apache forward proxy

2013-10-30 Thread Yehuda Katz
By reading the documentation ( http://httpd.apache.org/docs/2.4/mod/mod_proxy.html). If you have specific questions or more details about what you need help doing, THEN ask here. On Wednesday, October 30, 2013, wrote: > > Please let me know how to do apache configuration to work as forward proxy

Re: [users@httpd] Another mod_proxy Question/Issue

2013-10-30 Thread Yehuda Katz
On Wed, Oct 30, 2013 at 9:24 PM, Chris Arnold wrote: > Apache/2.2.12 (Linux/SUSE). We have a web app that runs under tomcat > (8080). We have apache using mod_proxy (80 and 443). According to the > tomcat mailing list: > > What we need is for apache to proxy, rewrite or whatever the 443 requests

Re: [users@httpd] building a web farm

2013-10-31 Thread Yehuda Katz
On Thu, Oct 31, 2013 at 4:54 AM, trifo wrote: > I am running a web site using Apache httpd on several server nodes to > provide high availability and performance. At present, the web content > resides on a clustered filesystem (GPFS) to ensure that all the nodes serve > the same content in any mo

Re: [users@httpd] Another mod_proxy Question/Issue

2013-10-31 Thread Yehuda Katz
Did you have a trailing slash in the ProxyPass? I would expect that it would have tried to get /share*/*share/. - Y On Thu, Oct 31, 2013 at 10:20 AM, Chris Arnold wrote: > On Wed, Oct 30, 2013 at 9:24 PM, Chris Arnold > wrote: > >> Apache/2.2.12 (Linux/SUSE). We have a web app that runs under t

Re: [users@httpd] Another mod_proxy Question/Issue

2013-10-31 Thread Yehuda Katz
On Thu, Oct 31, 2013 at 11:08 AM, Chris Arnold wrote: > >Did you have a trailing slash in the ProxyPass? > >I would expect that it would have tried to get /share*/*share/. > > Yes, i had a trailing slash and it did in fact tried to get /share/share. > When i remove the trailing slash it gives me /

Re: [users@httpd] Another mod_proxy Question/Issue

2013-10-31 Thread Yehuda Katz
On Thu, Oct 31, 2013 at 11:42 AM, Chris Arnold wrote: > The trailing slash is important. >> > ProxyPass / https://192.168.123.3:8443/share > > >This is telling Apache to strip off the slash when it does the proxy. > This is probably not what you want to do. > > I removed the trailing slash > I me

Re: [users@httpd] Another mod_proxy Question/Issue

2013-10-31 Thread Yehuda Katz
Is HTTPD giving that error or Tomcat? What does the log say is the reason? - Y On Thu, Oct 31, 2013 at 12:15 PM, Chris Arnold wrote: > >>What URL are you using to access this vhost? > >> >If you want to access https://example.com/share/ and have that hit the >> proxy, you would need to make t

Re: [users@httpd] Another mod_proxy Question/Issue

2013-10-31 Thread Yehuda Katz
What about when you go to https://share.example.com/share/? - Y On Thu, Oct 31, 2013 at 12:59 PM, Chris Arnold wrote: > *>*Is HTTPD giving that error or Tomcat? > > HTTPD > > >What does the log say is the reason? > > Directory index forbidden by directive: /srv/www/htdocs >

Re: [users@httpd] Another mod_proxy Question/Issue

2013-10-31 Thread Yehuda Katz
Are you accessing this URL from a web browser or a dedicated program? The implication is that your client might be requesting (or the web application redirecting to) https://share.example.com/share/ which you are rewriting to already include the /share/, therefore, the doubled share. - Y On Thu,

Re: [users@httpd] Another mod_proxy Question/Issue

2013-10-31 Thread Yehuda Katz
When you say "And this gives me a 403 access denied.", you need to also include the exact URL that you entered in the browser (minus the hostname if you want). If you have the rewrite rule: *RewriteRule ^/(.*) https://192.168.123.3:8443/$1 [P]* and you navigate to https://share.example.com/, you s

Re: [users@httpd] Another mod_proxy Question/Issue

2013-10-31 Thread Yehuda Katz
have a look off list to figure out either 1) why reverse is not catching this or 2) if the tomcat server can be set to know it is behind a proxy. - Y On Thu, Oct 31, 2013 at 10:21 PM, Chris Arnold wrote: > > > Sent from my iPhone > > On Oct 31, 2013, at 10:06 PM, "Yehuda Ka

Re: [users@httpd] Why is relative linking bad?

2013-11-04 Thread Yehuda Katz
This is not an Apache HTTPD issue. That said, the article you linked to is specifically about WordPress - defending their decision to make ALL links absolute links. I worked on a government project (using Wordpress) that required that all URLs be relative unless absolutely necessary and we had to

Re: [users@httpd] Why is relative linking bad?

2013-11-04 Thread Yehuda Katz
nstructed to bring this discussion to this list from bugzilla. If > that instruction was incorrect, I apologize. > > *- Milo Hyson* > Chief Scientist > CyberLife Labs, Inc. > > On Nov 4, 2013, at 1:56 PM, Yehuda Katz wrote: > > This is not an Apache HTTPD issue

Re: [users@httpd] Single quotes in ajax POST data getting prefixed with backslash

2013-12-09 Thread Yehuda Katz
That is a PHP configuration option called Magic Quotes ( http://www.php.net/manual/en/info.configuration.php#ini.magic-quotes-gpc) that used to be on by default and is now off by default in recent PHP releases. - Y Sent from a gizmo with a very small keyboard and hyperactive autocorrect. On Dec 9

Re: [users@httpd] Web Site Testing

2013-12-11 Thread Yehuda Katz
Something like Nagios? Setting it up is a big deal, but it can do what you want (and a lot more). http://www.nagios.org/ Nagios Core is free and fully open source. (Nagios XI is not) On Wed, Dec 11, 2013 at 10:29 PM, Roman Gelfand wrote: > I think I was misunderstood. I am looking for a web s

Re: [users@httpd] Removing Posts [WAS: Terminology clarification question.....]

2013-12-12 Thread Yehuda Katz
Nagaraju: 1. Don't hijack other people's threads. Start your own with a new subject that describes what you want. 2. That is not possible. Once you send a message, you can't take it back. Ever. This list is archived in a variety of places on the internet as well as hundreds (or thousands) of indivi

Re: [users@httpd] Removing Posts [WAS: Terminology clarification question.....]

2013-12-12 Thread Yehuda Katz
a < nagaraju.ku...@enhancesys.com> wrote: > How can i edit my post at least in httpd mailing list :) > > > On Fri, Dec 13, 2013 at 10:26 AM, Yehuda Katz wrote: > >> Nagaraju: >> 1. Don't hijack other people's threads. Start your own with a new subject >> th

Re: [users@httpd] Terminology clarification question.....

2013-12-12 Thread Yehuda Katz
On Thu, Dec 12, 2013 at 4:24 PM, Charles W Buege wrote: > Periodically, we need to have our web sites down for maintenane - updates, > backups, etc. What I've been told to do is find a way to have a 'front > end' to our web sites so that, when they are down for maintenance, that > then end-users

Re: [users@httpd] Need an example of how to use Apache Server 2.2.

2013-12-24 Thread Yehuda Katz
If you put HTML files in the htdocs folder, Apache should serve them as HTML and then it depends on your browser understanding the HTML properly. In most browsers, there is a development or debug panel that let's you see the raw request and response. If you are not sure how to get that or what the

Re: [users@httpd] always says "Forbidden", what's the matter?

2013-12-25 Thread Yehuda Katz
Did you check the error log? It should tell you exactly what the problem is. - Y On Wed, Dec 25, 2013 at 10:43 PM, Heng Zhou wrote: > Hi, > > I'm using Apache 2.4.6 on Ubuntu, I have a html file hello.html located in > the /var/www. When I type in http://localhost/hello.html and press return >

Re: [users@httpd] always says "Forbidden", what's the matter?

2013-12-25 Thread Yehuda Katz
something like wrote: > Yes, I checked, the log only says:"client denied by server configuration: > /home/zh/workspace/testhtml/hello.html". I could not get any idea from this > simple log. > > > On Wed, Dec 25, 2013 at 11:22 PM, Yehuda Katz wrote: > >> Did you ch

Re: [users@httpd] always says "Forbidden", what's the matter?

2013-12-25 Thread Yehuda Katz
Order allow, deny > Allow from all > > > > On Thu, Dec 26, 2013 at 1:07 PM, Heng Zhou wrote: > >> Yes, I checked, the log only says:"client denied by server configuration: >> /home/zh/workspace/testhtml/hello.html". I could not get any idea from this >&g

Re: [users@httpd] Need an example of how to use Apache Server 2.2.

2013-12-26 Thread Yehuda Katz
On Thu, Dec 26, 2013 at 6:25 PM, Frederick Miller wrote: > i am trying to unsubscribe, but I send to: > *users-unsubscr...@httpd.apache.org **and > it comes back as permanently undeliverable* > I just tested and the unsubscribe address is working properly. What is the full error you get? > *I'

<    1   2   3   4   5   >