Re: [users@httpd] Can't start server due to dll

2013-12-27 Thread Yehuda Katz
PHP should be in your PATH. My solution was to add the entire PHP directory (for me: C:\Web\PHP5\) to the path. How to set the path and environment variables in Windows And this is my PHP configuration (for Apache 2.4, but it is basically the same

Re: [users@httpd] Qmailadmin is not working after update the php 5.4 from 5.1

2013-12-30 Thread Yehuda Katz
On Mon, Dec 30, 2013 at 11:14 PM, Chandran Manikandan wrote: > Internal Server Error > > The server encountered an internal error or misconfiguration and was > unable to complete your request. > > Please contact the server administrator, postmas...@panasiagroup.net and > inform them of the time th

Re: [users@httpd] Qmailadmin is not working after update the php 5.4 from 5.1

2013-12-30 Thread Yehuda Katz
2013] [error] [client 192.168.1.40] 00c92000-00c94000 > rw-p 00015000 08:12 70878375 /lib/libselinux.so.1 > [Tue Dec 31 11:59:55 2013] [error] [client 192.168.1.40] 00c99000-00c9a000 > r-xp 00c99000 00:00 0 [vdso] > [Tue Dec 31 11:59:55 2013] [error] [client 192.168.1.40] 00d2d

Re: [users@httpd] How to run Windows Server through mod_proxy

2014-01-04 Thread Yehuda Katz
You might be better off removing the port number from the ProxyPass and, more importantly, the ProxyPassReverse. Apache only rewrites matching URLs, and the links that your proxied server are creating probably do not include the port number. - Y On Sat, Jan 4, 2014 at 4:05 AM, Robert S wrote: >

Re: [users@httpd] Clarification - do I want to setup a 'reverse proxy' or do I want something else?

2014-01-08 Thread Yehuda Katz
Do you want to manually put up this message or have something like that go up automatically when the origin server is not reachable? If you want to do it manually, then you could put something like this in the virtualhost configuration for each site that the proxy allows access to (not tested sinc

Re: [users@httpd] Off Topic

2014-01-08 Thread Yehuda Katz
I don't know of a email list like this, but for programming questions (and answers) in any language, I suggest StackOverflow . - Y On Wed, Jan 8, 2014 at 8:07 PM, Robert wrote: > Is there an email forum like this one for javascript, php and mysql? > > Thanks, > Robe

Re: [users@httpd] Proxy questions - part 2

2014-01-09 Thread Yehuda Katz
On Thu, Jan 9, 2014 at 4:47 PM, Charles W Buege wrote: > Now when someone from the outside world goes to 'www.mycompany.com' > (which I presume via DNS matches the IP address of Physical Server 1), I'd > like the proxy server to pass along the request to Physical Server 2. > Correct. This is my b

Re: [users@httpd] SSL certificate error

2014-01-14 Thread Yehuda Katz
If your site is publicly available, you can check that the server is serving the correct chain with a number of websites including this one: http://www.sslshopper.com/ssl-checker.html Just put your website in and it will tell you if the chain is correctly configured. - Y On Wed, Jan 15, 2014 at

Re: [users@httpd] SSL certificate error

2014-01-14 Thread Yehuda Katz
ts resolve to the same IP Address, and with one it says, that port > 443 is not open(!) > > On Wed, January 15, 2014 06:40, Yehuda Katz wrote: > > If your site is publicly available, you can check that the server is > > serving the correct chain with a number of websites includi

Re: [users@httpd] Apache won't start, strace output enclosed

2014-01-17 Thread Yehuda Katz
SSLCACertificateFile is only for client certificate authentication. Are you trying to use that? If not, removing that line should solve that particular error. If you do want to use client certificate auth, then there is probably some other problem with your certificate. - Y On Fri, Jan 17, 2014

Re: [users@httpd] R: [users@httpd] CVE-2013-2566

2014-01-20 Thread Yehuda Katz
That configuration looks to me like it says NOT CBC or MD5. Can you confirm whether the server is actually accepting CBC or MD5 ciphers? A tool like https://www.ssllabs.com/ssltest/index.html can tell you if your server is publicly accessible. - Y Sent from a gizmo with a very small keyboard and

Re: [users@httpd] mod_rewrite url has pound (#) symbol

2014-01-20 Thread Yehuda Katz
The part of the URL after the # is not sent to the server, so it is not possible to match on it. Anyway, if you just remove it from your pattern, you should get the same result since you do not appear to be trying to match on anything after it. - Y Sent from a gizmo with a very small keyboard and

Re: [users@httpd] How To Compile Apache for Windows?

2014-01-20 Thread Yehuda Katz
Unfortunately, those directions are about as simple as it gets. Building the Windows binaries can be hard work. Unless you have a specific reason to them yourself, I recommend the builds from http://www.apachelounge.com/download/. - Y Sent from a gizmo with a very small keyboard and hyperactive a

Re: [users@httpd] How to debug the certificate chain processing within Apache for an LDAPS connection?

2014-01-21 Thread Yehuda Katz
Have you confirmed you can contact the LDAP server over LDAPS from any other system? I use Apache Directory Studio ( http://directory.apache.org/studio/ ) for this. You could also use Wireshark or a similar program to make sure the connection is actually going through. Sent from a gizmo with a ve

Re: [users@httpd] mod_rewrite help, # in input url

2014-01-21 Thread Yehuda Katz
It is not possible. The string after the `#` is NEVER sent to the server (that is because of the way the browser works and there is nothing the server can do about it). The ONLY way to send it to the server would be to have some client-side scripting that captures and sends it as a real query stri

Re: [users@httpd] Traffic forwarding.....

2014-02-04 Thread Yehuda Katz
On Tue, Feb 4, 2014 at 1:37 PM, Charles W Buege wrote: > Here's what I'd like to do now: If there is an incoming connection to > www.avengers.org that is going to port 3306 (MySQL) for example, how can > I configure the system to pass this information along? > Services like MySQL don't have the

Re: [users@httpd] File doesn't exist

2014-02-06 Thread Yehuda Katz
On Thu, Feb 6, 2014 at 8:30 PM, Roman Gelfand wrote: First, instead of Alias / "/var/www/dspam/" you should be using DocumentRoot /var/www/dspam I am not sure why I am getting this error. It actually brings up the > site but stylesheet is not applied. > > [Thu Feb 06 20:17:57 2014] [error] [cli

Re: [users@httpd] Proxy HTTPS tunneling

2014-02-11 Thread Yehuda Katz
Are you trying to set up a Forward Proxy or a Reverse Proxy (explanation: http://www.jscape.com/blog/bid/87783/Forward-Proxy-vs-Reverse-Proxy)? Your configuration looks like a forward proxy but your email implies that you really want a reverse proxy. See this part of the HTTPD manual for more abo

Re: [users@httpd] Proxy HTTPS tunneling

2014-02-11 Thread Yehuda Katz
or entity to whom they are addressed. > If you have received this email in error or think you may have done so, > you may not peruse, use, disseminate, distribute or copy this message. > Please notify the sender immediately and delete the original e-mail from > your system. > > > >

Re: [users@httpd] Possible exploit?

2014-02-12 Thread Yehuda Katz
When you go to those URLs on your website, what output do you get? That will likely tell you what output the attacker got. - Y Sent from a gizmo with a very small keyboard and hyperactive autocorrect. On Feb 12, 2014 10:58 AM, "Knute Johnson" wrote: > I found the following in my log this mornin

Re: [users@httpd] Preventing an open proxy with both a single SSL virtual host and a non-SSL virtual host

2014-02-14 Thread Yehuda Katz
Are those odd requests actually working? From your log it look like they get a 403 error which is exactly what your configuration is saying should happen. - Y (Had to remove your links so this would get through the spam filter) On Thu, Feb 13, 2014 at 2:16 AM, Richard Mixon wrote: > > We've set

Re: [users@httpd] ReverseProxy Exchange 2013

2014-02-15 Thread Yehuda Katz
Chris, are you trying to use webmail or Outlook Anywhere (or both)? I have heard the RPC module works but never used it myself. As for OWA, I will try it on one of my systems and see what happens. - Y Sent from a gizmo with a very small keyboard and hyperactive autocorrect. On Feb 15, 2014 7:03 P

Re: [users@httpd] Rewrite problem

2014-02-17 Thread Yehuda Katz
Your best bet might be to do your own reverse proxy to the old server which will allow HTTPD to rewrite the links for you. Rewrite rules are not appropriate for this situation. Look at ProxyPass and ProxyPassReverse. - Y On Mon, Feb 17, 2014 at 7:05 PM, Eggert Ehmke wrote: > I took over a doma

Re: [users@httpd] Redirecting virtual host to https in Apache 2.4

2014-02-18 Thread Yehuda Katz
That implies that you are not hitting the VirtualHost that you expect. This is the exact configuration I use on one of my servers: RewriteEngine On RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI} Can you look at your access logs and see which VirtualHost you are accessing? You can use

Re: [users@httpd] https

2014-04-03 Thread Yehuda Katz
Debian/Ubuntu have a slightly different default layout and include some tools to help you work with it. The tools just create the symlinks for you, but the major benefit is that all of them support tab-completion, so you know what is available. a2enmod / a2dismod: enable or disable apache modules

Re: [users@httpd] https

2014-04-03 Thread Yehuda Katz
rite_module is the identifier and mod_rewrite.c is the file name. On 04/03/2014 09:46 PM, Yehuda Katz wrote: > > Debian/Ubuntu have a slightly different default layout and include some > tools to help you work with it. The tools just create the symlinks for you, > but the major benefit

Re: [users@httpd] Re: !!! Urgently need apache 2.4.3 source code Urgent due to heartbleed bug]

2014-04-10 Thread Yehuda Katz
Specifically 2.4.3? Why not upgrade to 2.4.9 (released March 2014). Current release is described at: http://httpd.apache.org/download.cgi#apache24 Previous releases are at: http://archive.apache.org/dist/httpd/ - Y On Thu, Apr 10, 2014 at 11:42 AM, Sachin Goyal wrote: > Where can I find apac

Re: [users@httpd] Using google domain user's and passwords

2014-04-14 Thread Yehuda Katz
Until recently, you could have used Google's OpenID provider with mod_auth_openid . Google is discontinuing their OpenID provider in April 2015. There was talk of a mod_auth_oauth module, but it appears that it does not actually exist yet

Re: [users@httpd] problems with malformed handshake message

2014-04-16 Thread Yehuda Katz
What browser are you using? I had no trouble accessing that site and an SSL Labs testdoes not show any major issues. - Y On Wed, Apr 16, 2014 at 7:51 PM, Al Zick wrote: > Hi, > > I really hope that someone can help

Re: [users@httpd] HTTPS configuration problem.

2014-04-17 Thread Yehuda Katz
On Thu, Apr 17, 2014 at 3:12 PM, Mark London wrote: > So I've been trying to find a configuration that redirects HTTPS://XXX.COMto > HTTPS://WWW.XXX.COM. Unfortunately, every configuration that I've tried, > doesn't work. All of the rewrite and redirect rules, are applied after the > browser ch

Re: [users@httpd] RE: IIS Apache 2.2 on port 443

2014-04-22 Thread Yehuda Katz
FYI (and for the list archives), this is a documented issue: http://support.microsoft.com/kb/954874 - Y On Tue, Apr 22, 2014 at 1:35 PM, Trevor Saldanha < trevor.salda...@comtrex.co.uk> wrote: > All fixed. > > > > Even though IIS is not bound to 0.0.0.0, the subsystem http.sys is bound > to 0.

Re: [users@httpd] Question

2014-04-28 Thread Yehuda Katz
mod_session_dbd and php $_SESSION have nothing to do with each other and php has its own session management system. If you can better explain what you are trying to do, someone might be able to give you a recommendation for whether to use mod_session or php session. Also, the Comments section on

Re: [users@httpd] Question

2014-04-29 Thread Yehuda Katz
failure. We have a many php websites and these all using php session. > > Is there any module that possible to sync php sessions. > > > > *From:* Yehuda Katz [mailto:yeh...@ymkatz.net] > *Sent:* Tuesday, April 29, 2014 12:27 PM > *To:* users@httpd.apache.org > *Subject:* Re:

Re: [users@httpd] Change from ~username to /username questions

2014-05-04 Thread Yehuda Katz
mod_userdir does not support this. You would have to create a symlink for each user. Off the top of my head, you might be able to work around it with mod_rewrite, but I can't test any rules now, so I don't want to try writing one. - Y On Fri, May 2, 2014 at 2:18 PM, Rose, John B wrote: > Has

Re: [users@httpd] Configuring two tomcat instances resolving to a directory on the same domain

2014-05-06 Thread Yehuda Katz
You should only need one vhost and it should look more like this: ServerName example.com ErrorLog /var/log/httpd/error.log CustomLog /var/log/httpd/access.log combined ProxyPass /first ajp://localhost:8009/ ProxyPassReverse /first ajp://localhost:8009/

[users] mod_proxy_fcgi with Plack

2014-06-09 Thread Yehuda Katz
Plack requires SCRIPT_NAME to be "" instead of "/" ( https://github.com/plack/Plack/issues/308). Is there a way to do this with Apache 2.4.7? My current config is ProxyPass / fcgi://localhost:9090/ - Y

Re: [users@httpd] Where is the Apache Server Admin Program

2014-06-17 Thread Yehuda Katz
There are third-party tools you can install for GUI management, but "out-of-the-box" Apache is managed through a config file. I have a customer who uses Webmin and another who uses Zpanel. YMMV. - Y On Tue, Jun 17, 2014 at 7:57 AM, Giovanni Bianchini wrote: > Dear Group; > > I just installed

Re: [users@httpd] Apache 2.2.27 MSI Installer

2014-06-20 Thread Yehuda Katz
Windows builds of Apache HTTPD were provided by volunteers who have commit access to the project and were never "official" builds. The best source for more recent builds is ApacheLounge. Builds of the newest releases (2.4) are here: http://www.apachelounge.com/download/ (but you will need to adjust

Re: [users@httpd] The requested URL /~myuser/mydir/mypage was not found on this server.

2014-07-14 Thread Yehuda Katz
Have you double checked the URL for typos? Are you getting to it by clicking a directory listing or by a link that you typed? - Y On Tue, Jul 15, 2014 at 1:57 AM, Carlos Carcamo wrote: > Hello, I have a little problem maybe you could help me. > I have the userdir directive activated and now I

Re: [users@httpd] The requested URL /~myuser/mydir/mypage was not found on this server.

2014-07-15 Thread Yehuda Katz
exes > >> #AllowOverride All > >> #Options MultiViews Indexes SymLinksIfOwnerMatch IncludesNoExec > >> Options MultiViews Indexes SymLinksIfOwnerMatch > >> > >> Order allow,deny > >> Allow from all > >&g

Re: [users@httpd] Apache 2.4 - non adoption reasons??

2014-07-18 Thread Yehuda Katz
> > Also, as I recall, conf files also changed to require having a .conf >> suffix, >> which also meant every conf file had to be renamed + all old symlinks >> removed >> (from sites-enabled) + all domains re-enabled. >> > > Is that a Debian thing? Apache httpd didn't make any such change. > Thi

Re: [users@httpd] Apache 2.4 - non adoption reasons??

2014-07-18 Thread Yehuda Katz
Should add that they even provided a script for renaming: /usr/share/doc/apache2/migrate-sites.pl - Y On Fri, Jul 18, 2014 at 11:40 AM, Yehuda Katz wrote: > Also, as I recall, conf files also changed to require having a .conf >>> suffix, >>> which also meant ever

Re: [users@httpd] Can I use different Directory according to the source IP?

2014-07-23 Thread Yehuda Katz
On Wed, Jul 23, 2014 at 7:30 PM, Mark jensen wrote: > First, I may ask the question in a different way: can we have two defined > Directory tag for one directory? > It would not accomplish what you want if it would work at all. > - users with source 192.168.1 > > > Order Deny,Allow >

Re: [users@httpd] Directory fetch?

2014-08-27 Thread Yehuda Katz
That means it served what ever your DirectoryIndex is. The default is usually index.html or something similar. If you set "DirectoryIndex disabled" (in Apache 2.4), Apache won't look for any file. If mod_autoindex is loaded, it could also serve a directory listing. You could disable it or you coul

Re: [users@httpd] Multiple SSL vhosts problem

2014-09-05 Thread Yehuda Katz
You don't need NameVirtualHost, but you do need ServerName and/or ServerAlias directives to tell apache which ghost serves which site. - Y Sent from a gizmo with a very small keyboard and hyperactive autocorrect. On Sep 5, 2014 6:07 PM, "Theodotos Andreou" wrote: > Hi guys. I am trying to setu

Re: [users@httpd] SSI / .shtml expressions /

2014-09-13 Thread Yehuda Katz
On Sat, Sep 13, 2014 at 9:53 AM, Simen Mangseth wrote: > I have two questions regarding SSI and .shtml files. > > 1: I’m using Apache 2.4, and now I can’t write like this anymore: > The simplest option might be to enable the Legacy Expression PArser: SSILegacyExprParser on http://httpd.apache.o

Re: [users@httpd] SSI / .shtml expressions /

2014-09-14 Thread Yehuda Katz
On Sun, Sep 14, 2014 at 4:03 AM, Simen Mangseth wrote: > Thanks for your reply, Yehuda. However, I can’t get any of your > suggestions to work. You can get the whole file if you want, but for the > time being, I’ll just send the pieces of code that doesn’t work. > > Here’s the new if-code: > >

Re: [users@httpd] SSI / .shtml expressions /

2014-09-15 Thread Yehuda Katz
’s my fault. It won’t work. I’m > thinking, the old code worked if only one expression and not “||” (the > or-sign), the new code doesn’t work on anything. > > the 404.shtml a small file defining some variables and including the error > template 1HTTP.shtml. > > / Simen >

Re: [users@httpd] SSI / .shtml expressions /

2014-09-15 Thread Yehuda Katz
Except for the one "$side = ddcountry" which you missed converting... On Mon, Sep 15, 2014 at 12:03 PM, Yehuda Katz wrote: > EasyApache is the cPanel program that builds the Apache (and PHP) binaries > and config files, so if you use cPanel, you use EasyApache. > > I look

Re: [users@httpd] SSI / .shtml expressions /

2014-09-15 Thread Yehuda Katz
west Apache. I don’t know where the fault is. Really > frustrating that this code works with you, and nothing works on my site. > > *Fra:* Yehuda Katz > *Sendt:* ‎mandag‎, ‎15‎. ‎september‎ ‎2014 ‎18‎:‎06 > *Til:* users@httpd.apache.org > > Except for the one "$side = ddcountry&quo

Re: [users@httpd] .htaccess 500 error with invalid command '

2014-10-04 Thread Yehuda Katz
That means that the modules that supply those directives are not loaded. On Sat, Oct 4, 2014 at 10:18 PM, Volkan Gezer wrote: > /srv/http/owncloud/.htaccess: Invalid command 'SetEnvIfNoCase', > perhaps misspelled or defined by a module not included in the server > configuration > SetEnvIfNoCase

Re: [users@httpd] index.php ist used (internally) when /index.php/ is requested

2014-11-13 Thread Yehuda Katz
This is usually the intended behavior. Many PHP frameworks use PATH_INFO to handle requests. See the documentation for AcceptPathInfo: http://httpd.apache.org/docs/current/mod/core.html#acceptpathinfo - Y On Thu, Nov 13, 2014 at 10:25 AM, Christoph Gröver wrote: > > Hello list, > > Strange thi

Re: [users@httpd] index.php ist used (internally) when /index.php/ is requested

2014-11-16 Thread Yehuda Katz
As far as I know, the default has not changed since the directive was introduced: DefaultThe treatment of requests with trailing pathname information is determined by the handler responsible for the request. The core handler for normal files defaults

Re: [users@httpd] How to send mails to this group without beeing rejected for spamming ?

2014-12-14 Thread Yehuda Katz
My second try, since my first was also rejected by the spam filter. Set your mail client to send plain text instead of HTML. I have found that is usually enough. You could also try post your config as a gist (gist.github.com) (or similar) and have one link in your message. - Y On Sun, Dec 14, 2

Re: [users@httpd] cannot figure out how to add a new user

2014-12-31 Thread Yehuda Katz
What configuration do you have that requires the password (from your config file or htaccess file)? You need to have htpasswd modify the htpasswd file that your configuration is already referring to and you need to make sure you are not requiring a specific username. - Y On Wed, Dec 31, 2014 at 2

Re: [users@httpd] 2.4 Configuration Errors

2015-01-15 Thread Yehuda Katz
The allow and deny directives have been removed in 2.4. See the upgrade documentation: http://httpd.apache.org/docs/2.4/upgrading.html - Y Sent from a gizmo with a very small keyboard and hyperactive autocorrect. On Jan 15, 2015 5:20 PM, "Chris Arnold" wrote: > > apache 2.4.10 on SLES 12. We ar

Re: [users@httpd] Redirect http to https

2015-01-28 Thread Yehuda Katz
Make sure you put these in the correct VHOST. They need to be in the :80 vhost, not the :443 vhost. I usually use the Redirect directive ( http://httpd.apache.org/docs/2.4/mod/mod_alias.html#redirect) instead. - Y On Wed, Jan 28, 2015 at 4:55 PM, Chris Arnold wrote: > Apache 2.4.10 on SLES 12

Re: [users@httpd] More mod_proxy

2015-01-29 Thread Yehuda Katz
That should be the correct directive to have it ignore the name on the certificate. Does the target system have an error log showing the connection? There could be other errors with the SSL handshake besides the name not matching. - Y On Thu, Jan 29, 2015 at 6:40 PM, Chris Arnold wrote: > Apa

Re: [users@httpd] mod_cache fixed in which Apache version?

2015-02-06 Thread Yehuda Katz
Are you asking if you should update your 2.2.11 servers too or are you asking what is the oldest version you could update to and still resolve the problem? I would guess that almost everyone here will tell you to upgrade to the newest version on all your systems. Older versions may have security is

Re: [users@httpd] why Apache strip html data attribute ???

2015-02-08 Thread Yehuda Katz
HTML 4.01 and XHTML 1.0 don't support the data- attributes since they were added in HTML5, so striping them out is the correct behavior. If that is not what you want it to do, don't set that directive. - Y On Sun, Feb 8, 2015 at 12:15 PM, A. Lotfi wrote: > Hi, > > I am not an Apache expert, I a

Re: [users@httpd] Changing Email Signatures

2015-02-23 Thread Yehuda Katz
Try a support list for your email client. HTTPD does not handle email. - Y On Mon, Feb 23, 2015 at 10:09 PM, phil wrote: > > Silly question i cant seem able to google up for some reason. > How do i get those email sigs that change every day or every email. > Just a push in the direction of the

Re: [users@httpd] About installing Apache web server

2015-04-14 Thread Yehuda Katz
Apache HTTPD runs perfectly fine without X (and that is probably how most users have it). If lynx or any other text browser shows output, then Apache is working. The browser you use has nothing to do with how Apache works. The only other option is to test from another computer. - Y On Tue, Apr 14

Re: [users@httpd] Apache Installation

2015-04-14 Thread Yehuda Katz
On Tue, Apr 14, 2015 at 9:05 PM, Eric Covener wrote: > On Tue, Apr 14, 2015 at 10:36 AM, Ethan Rosenberg > wrote: > > [Tue Apr 14 00:51:10.502172 2015] [:error] [pid 7610] [client ::1:53486] > > script '/var/www/html/start.php' not found or unable to stat > > Something non-standard under /etc/ap

Re: [users@httpd] Apache Installation

2015-04-15 Thread Yehuda Katz
Check your PHP error reporting level and/or error log for PHP errors. - Y On Wed, Apr 15, 2015 at 11:13 PM, Ethan Rosenberg < erosenb...@hygeiabiomedical.com> wrote: > On 04/14/2015 10:18 PM, Yehuda Katz wrote: > >> On Tue, Apr 14, 2015 at 9:05 PM, Eric Covener > cove

Re: [users@httpd] .MSI Files?

2015-04-16 Thread Yehuda Katz
There are no Apache committers who build Windows binaries. http://httpd.apache.org/docs/current/platform/windows.html#down You can get binaries from other sources - I usually use ApacheLounge. None of these source build an MSI of Apache by itself. The recommended installation method is to downloa

Re: [users@httpd] Deny didn't work

2015-05-04 Thread Yehuda Katz
What version of Apache are you using? Apache 2.4 changed the access control directives unless you specifically enable the old style: http://httpd.apache.org/docs/2.4/upgrading.html#access Also, make sure you have the correct AllowOverride statements. - Y On Mon, May 4, 2015 at 7:33 PM, Joshua Sm

Re: [users@httpd] Fwd: E tag numbers

2015-05-11 Thread Yehuda Katz
E-tags are generated based on information about the file being served. You can see the documentation here: http://httpd.apache.org/docs/current/mod/core.html#fileetag As you noted, Apache HTTPD is used by a significant number of people all over the world. There is no central registry of who owns a

Re: [users@httpd] Fwd: E tag numbers

2015-05-11 Thread Yehuda Katz
was hoping to find how E tag numbers are allocated! are they purchased, > where do they > > come from etc. if so it should be then possible to identify the actual > user (assuming they > > have used proper names, bank details etc etc.. > > > > Can you share any light on

Re: [users@httpd] Fwd: E tag numbers

2015-05-11 Thread Yehuda Katz
uld appear that I > may need to > > address the matter direct with Apache! > > > > Many many thanks for your time. > > > > Kindest regards > > > > Steve > > > > On Mon May 11 17:26 , Yehuda Katz sent: > > > > >1. It is considered rude to

Re: [users@httpd] Help - 2.2 to 2.4 migration onto new server failing

2015-05-12 Thread Yehuda Katz
Which distribution are you using (a.k.a. where did you download from)? Is there anything in the apache error log? The first thing that comes to mind is make sure IIS is not running. - Y On Tue, May 12, 2015 at 12:55 PM, Jim Walls wrote: > Help! I have been running Apache 2.2 for quite a few

Re: [users@httpd] Help - 2.2 to 2.4 migration onto new server failing

2015-05-12 Thread Yehuda Katz
> again and it's did not resurrect itself from the dead. > > Jim > > > -- > *From*: "Yehuda Katz" > *Sent*: Tuesday, May 12, 2015 10:08 AM > *To*: "users@httpd.apache.org" , j...@k6ccc.org > *Subject*: Re: [users@ht

Re: [users@httpd] Help - 2.2 to 2.4 migration onto new server failing

2015-05-12 Thread Yehuda Katz
> Incorrect function. > > > There are no other events in any of the server logs. > > > > > > > -- > *From*: "Yehuda Katz" > *Sent*: Tuesday, May 12, 2015 11:29 AM > *To*: "users@httpd.apache.org" , "jim&quo

Re: [users@httpd] how to block the duplicated requests?

2015-05-19 Thread Yehuda Katz
There are a few modules that you might be able to modify to meet your needs - although these things are generally designed for DDoS protection. - mod_security - http://www.modsecurity.org/ - mod_evasive - http://www.zdziarski.com/blog/?page_id=442 - mod_cband - http://dembol.org/blog/mod_

Re: [users@httpd] Re:Re: [users@httpd] how to block the duplicated requests?

2015-05-19 Thread Yehuda Katz
... > > Looking forward to your nice feedback:) > > At 2015-05-19 22:01:45, "Yehuda Katz" wrote: > > There are a few modules that you might be able to modify to meet your > needs - although these things are generally designed for DDoS protection. > >- mo

Re: [users@httpd] Problems using olingo library

2017-10-04 Thread Yehuda Katz
This list is for Apache HTTPD. Please ask about Olingo issues on an Olingo support list: https://olingo.apache.org/support.html - Y On Wed, Oct 4, 2017 at 11:51 AM, Bogdan Filip wrote: > Hello, > after trying to send an http request using apache olingo(version 4.4.0), i > encountered some probl

Re: [users@httpd] Apache2 php not responding

2017-12-12 Thread Yehuda Katz
The two log lines you posted show different client IP addresses. Which one of them is a request that you made that you know is legitimate? For the first line: The script not found message could be someone looking for vulnerabilities on the server and just not finding them. As far as the second li

Re: [users@httpd] SSI/website rendering errors

2017-12-14 Thread Yehuda Katz
LiteSpeed is a commercial web server all by itself and has nothing to do with Apache HTTPD. If you are running LiteSpeed, you aren't running HTTPD and we can't do anything to help you. - Y Sent from a device with a very small keyboard and hyperactive autocorrect. On Dec 14, 2017 6:07 PM, wrote:

Re: [users@httpd] SFTP JAIL

2018-01-16 Thread Yehuda Katz
You should try asking in an OpenSSH forum, a forum for your operating system, or ServerFault. This list is for Apache HTTPD support. - Y Sent from a device with a very small keyboard and hyperactive autocorrect. On Jan 16, 2018 8:51 AM, "Rodrigo Cunha" wrote: > Hi everyone, > I have a problem

Re: [users@httpd] Probably small problem with SSL config

2018-02-05 Thread Yehuda Katz
I would agree that you should start by turning on logging. Do you get a slightly different error if you use a different browser? Firefox usually gives more detail than Internet Explorer. Better not to use in configuration you write yourself unless you need it for a specific reason. If you use it,

Re: [users@httpd] Spurious access denied errors

2018-02-09 Thread Yehuda Katz
At first glance, something in your browser is probably requesting the page /test. Since it doesn't correspond to any of your alias statements, it hits the DocumentRoot which you have denied access to. Is there a corresponding entry in your access log? - Y Sent from a device with a very small key

Re: [users@httpd] Re: apachectl -k graceful

2018-05-03 Thread Yehuda Katz
We have a server farm with a load balancer, but we still announce a maintenance window when we do major MediaWiki upgrades and take the site down for five minutes. The other thing we do is use PHP-FPM instead of mod_php. That lets us not worry about HTTPD restarts. - Y On Thu, May 3, 2018 at 9:32

Re: [users@httpd] Newbie - Apache as internet facing proxy for Windows/IIS backend .net app server?

2018-05-07 Thread Yehuda Katz
Certainly. I would start with the Reverse Proxy Guide: https://httpd.apache.org/docs/2.4/howto/reverse_proxy.html Come back here if you have any questions. - Y On Mon, May 7, 2018 at 1:32 PM Charles Marcus wrote: > Hello all, > > I just want to know if this is even worth my time trying to figur

Re: [users@httpd] Newbie - Apache as internet facing proxy for Windows/IIS backend .net app server?

2018-05-07 Thread Yehuda Katz
g the work, I'd just rather not go down a rabbit hole > trying to do something that can/will never work. > > Thanks again, > > *Charles* > > > On Mon May 07 2018 13:37:36 GMT-0400 (Eastern Standard Time), Yehuda Katz > wrote: > > Certainly. I would start with

Re: [users@httpd] Newbie - Apache as internet facing proxy for Windows/IIS backend .net app server?

2018-05-10 Thread Yehuda Katz
stem, taking > advantage of mod_secs 'continuous passive security assessment' feature, and > anything else that makes sense. > > And thanks for the responses so far! > > *Charles* > > On Mon May 07 2018 13:56:56 GMT-0400 (Eastern Standard Time), Yehuda Katz >

Re: [users@httpd] Installation Error in Apache2

2018-05-13 Thread Yehuda Katz
Each configuration directive is valid in specific parts of the configuration. Look at "Context" in the manual: https://httpd.apache.org/docs/2.4/mod/directive-dict.html#Context For this specific case, https://httpd.apache.org/docs/2.4/mod/mod_ssl.html#sslrandomseed SSLRandomSeed can only be in the

Re: [users@httpd] Installation Error in Apache2

2018-05-13 Thread Yehuda Katz
ww.linkedin.com/in/deicool > > "Plant a Tree, Go Green" > > Make In India : http://www.makeinindia.com/home > > On Mon, May 14, 2018 at 12:26 AM, Yehuda Katz wrote: > >> Each configuration directive is valid in specific parts of the >> configuration. >&g

Re: [users@httpd] MySQL Java 10 and XQuery

2018-06-07 Thread Yehuda Katz
You have the wrong mailing list. On Thu, Jun 7, 2018 at 1:57 PM Ted Hickox wrote: > Can MySQL work with Java 10 and XQuery? >

Re: [users@httpd] Rotate logs in apache-2.4.29

2018-06-08 Thread Yehuda Katz
Is rotatelogs actually located in /bin/ ? On my REHL 7 system, it is located in /usr/sbin/ On Ubuntu 16.04, it is located in /usr/bin/ - Y On Fri, Jun 8, 2018 at 5:11 AM Hemant Chaudhary < hemantdude.chaudh...@gmail.com> wrote: > Hi All, > > I am trying to use rotatelogs in my webserver, but un

Re: [users@httpd] .php3 files recognised but .php files not

2018-06-10 Thread Yehuda Katz
I would suggest removing "" from your configuration. It is possible mod_php7 is not actually loaded and you have some other part of your configuration that is setting the handler for .php files. If you remove " wrote: > > > On 10/06/2018 18:53, Michael A. Peters wrote: > > On 06/10/2018 06:04 AM,

Re: [users@httpd] download

2018-07-12 Thread Yehuda Katz
You can definitely try it on Windows 10, it shouldn't be worse than XP. The major difference since the last time you installed might be that there are no longer Windows binaries on the httpd website. [1] I recommend the builds from ApacheLounge: https://www.apachelounge.com/download/ If you haven'

Re: [users@httpd] Mutiple IP/Multiple SSL

2018-07-19 Thread Yehuda Katz
You can definitely do this. For each VirtualHost, make sure you have ServerName set to the main web site and ServerAlias set for any additional name that the SSL certificate is good for. When a request comes in, Apache compares the SNI information in the request to the ServerName/Aliases that it kn

Re: [users@httpd] SSLCertificateChainFile

2018-07-19 Thread Yehuda Katz
You can use a tool like https://www.ssllabs.com/ssltest/ to check the chain (and other settings) or you can use openssl (openssl s_client -showcerts -connect www.example.com:443). As you found, putting the chain in the certificate file should work. - Y On Thu, Jul 19, 2018 at 2:47 PM wrote: > I

Re: [users@httpd] access control and Apache load balancing

2018-07-30 Thread Yehuda Katz
You can filter based on the X-Forwarded-For header or use mod_remoteip. mod_remoteip will rewrite the remote address so you can use standard filters. To use X-Forwarded-For, you can do something like this: SetEnvIF X-Forwarded-For "^192\.168\.10\.\d+$" MY_PRIVATE_NETWORK1 SetEnvIF X-Forwarded-For

Re: [users@httpd] How to configure two frontend Apache mod_proxy failover cluster with single backend webserver

2018-07-31 Thread Yehuda Katz
Hi Kamal, You could look into keepalived. This article is a decent (although old) guide: https://backreference.org/2012/04/25/load-balancing-and-ha-for-multiple-applications-with-apache-haproxy-and-keepalived/ (You can ignore all the parts about HAProxy) - Y On Tue, Jul 31, 2018 at 8:22 AM kamal

Re: [users@httpd] Where to download HTTPD

2018-08-08 Thread Yehuda Katz
Welcome to the mailing list - please don't hijack other people's threads. There is no official binary distribution for HTTPD. I recommend the builds from ApacheLounge. https://www.apachelounge.com/download/win64/ - Y On Wed, Aug 8, 2018 at 8:05 PM Eric Ngo wrote: > Hi > Can someone point me to

Re: [users@httpd] Help with SSL not working on Ubuntu 14.04

2018-08-08 Thread Yehuda Katz
Hi Travis, I see you mentioned on StackOverflow that your question is resolved (extra virtual hosts in the configuration meant you weren't reaching to correct host). One recommendation based on the config you posted there: Don't use if it is critical to you that your site is available over ssl (o

Re: [users@httpd] How to start perl script using FCGID module

2018-08-09 Thread Yehuda Katz
The difference between FastCGI and regular CGI is that regular CGI runs the program directly and FastCGI is expected to run continuously and handle requests. If you want to use FastCGI in Perl, you might want to start with a library like PSGI or a framework like Catalyst. - Y Sent from a device w

Re: [users@httpd] How to start perl script using FCGID module

2018-08-09 Thread Yehuda Katz
18 at 12:51 PM Ananya Dey wrote: > Thanks for the response Yehuda Katz :) > Also, to run python scripts we need to use the WSGI module. So how do we > implement that with mod_fcgid? > > Regards > Ananya > > On Thu, Aug 9, 2018 at 6:50 PM, Yehuda Katz wrote: > >> T

Re: [users@httpd] Renaming default page example.com to Data Portal

2018-08-09 Thread Yehuda Katz
The server doesn't set the title, the application does by sending the html tag. Check with your application developer. - Y On Thu, Aug 9, 2018 at 3:46 PM Collins O. Adoyo wrote: > Dear Users, > > I have a web portal with the title of page showing a default name > example.com. I wish to rename

Re: [users@httpd] Odd session cookies

2018-09-07 Thread Yehuda Katz
It looks like someone trying to guess existing cookies and retrieve session information for existing sessions. Based on the cookie format, I am guessing the sessions are actually controlled by PHP - you can add some code to log IP address and cookie combinations and see if there is a patterns. I a

<    1   2   3   4   5   >