Re: [users@httpd] Apache httpd graphical monitor ?

2013-01-18 Thread Rose, John B
That is a significant consideration. But on a functional level, any comparison information. Thanks From: Zachary Stern mailto:z...@enternewmedia.com>> Reply-To: "users@httpd.apache.org" mailto:users@httpd.apache.org>> Date: Friday, January 18, 2013 4:48 PM To: use

Re: [users@httpd] Apache httpd graphical monitor ?

2013-01-18 Thread Zachary Stern
Solarwinds isn't free, FYI. (unless something has changed) On Fri, Jan 18, 2013 at 4:33 PM, Rose, John B wrote: > Appreciate the reply > > I spoke to one of our network folks and he mentioned they use something > called Solar Winds > > Any info on how Munin and Nagios compare with Solar Winds f

Re: [users@httpd] Apache httpd graphical monitor ?

2013-01-18 Thread Rose, John B
Appreciate the reply I spoke to one of our network folks and he mentioned they use something called Solar Winds Any info on how Munin and Nagios compare with Solar Winds for monitoring Apache httpd? Thanks On 1/18/13 5:34 AM, "Tom Evans" wrote: >On Thu, Jan 17, 2013 at 11:48 PM, Rose, John

Re: [users@httpd] running httpd in chroot jail

2013-01-18 Thread Zachary Stern
This has been enlightening, thanks! On Fri, Jan 18, 2013 at 2:47 PM, P Fudd wrote: > > > Zachary Stern wrote: > > Does it make sense to block outgoing connections for a web server? There > > are some cases where our apps do connect to things like external APIs, > and > > they do it on the back

Re: [users@httpd] running httpd in chroot jail

2013-01-18 Thread P Fudd
> Zachary Stern wrote: > Does it make sense to block outgoing connections for a web server? There > are some cases where our apps do connect to things like external APIs, and > they do it on the backend, not necessarily in-browser. Block outgoing connections to anything apart from the machines y

Re: [users@httpd] running httpd in chroot jail

2013-01-18 Thread Zachary Stern
Does it make sense to block outgoing connections for a web server? There are some cases where our apps do connect to things like external APIs, and they do it on the b ackend, not necessarily in-browser. On Fri, Jan 18, 2013 at 2:36 PM, P Fudd wrote: > On 18 January 2013 16:31, Zachary Stern w

Re: [users@httpd] running httpd in chroot jail

2013-01-18 Thread P Fudd
On 18 January 2013 16:31, Zachary Stern wrote: > I wanted to get some opinions - do you folks think running httpd in a > chroot jail is necessary on a server that only does httpd-serving and > nothing else? A chroot jail prevents a hacker from accessing anything you don't put in the jail. If you

Re: [users@httpd] running httpd in chroot jail

2013-01-18 Thread Zachary Stern
Maybe one day I will learn how SELinux works :) Anyway I am running on Ubuntu, which mainly supports AppArmor (although SELinux is available). So I'll probably look into that. On Fri, Jan 18, 2013 at 11:34 AM, Alex Leonhardt wrote: > is it a super secret application and if you get hacked you'll

Re: [users@httpd] running httpd in chroot jail

2013-01-18 Thread Alex Leonhardt
is it a super secret application and if you get hacked you'll expose lots of cc numbers or similar ? if not - i dont think running it in a jail is necessary - you should however run it with selinux on ;) ! On 18 January 2013 16:31, Zachary Stern wrote: > I wanted to get some opinions - do you f

[users@httpd] running httpd in chroot jail

2013-01-18 Thread Zachary Stern
I wanted to get some opinions - do you folks think running httpd in a chroot jail is necessary on a server that only does httpd-serving and nothing else?

Re: [users@httpd] WebDav setup

2013-01-18 Thread Johan Moraal
Ok. if I understand the manual correctly this should apply to my entire server: Allow from all Order allow,deny Options Indexes FollowSymLinks MultiViews AllowOverride None Dav On I've tried this in httpd.conf, but I still get a 405 response to a PUT reque

Re: [users@httpd] HTTP/1.0 response to HTTP/1.1 POST requests

2013-01-18 Thread Alex Leonhardt
Hiya, tried and still same with a HTTP/1.0 response - but I've been told by our developers that it's been coded in to force-use HTTP/1.0 (for whatever reason). Is there an option to force a HTTP/1.1 response by Apache or will the code always win over the daemon ? Alex On 18 January 2013 00:09

Re: [users@httpd] WebDav setup

2013-01-18 Thread Pete Houston
On Fri, Jan 18, 2013 at 12:39:36PM +0200, Johan Moraal wrote: > That's not the correct argument for Location. Location takes a web path, not a filesystem path. Eg. if your FQDN is www.foo.com and you wanted a Location section to match http://www.foo.com/bar/ you would need something like

Re: [users@httpd] WebDav setup

2013-01-18 Thread Johan Moraal
Thank you for your response I added this to httpd.conf and restarted the server: Allow from all Order allow,deny Options Indexes FollowSymLinks MultiViews AllowOverride None Dav On But I still get 405 responses. Is there some other way to check if mod_da

Re: [users@httpd] Apache httpd graphical monitor ?

2013-01-18 Thread Tom Evans
On Thu, Jan 17, 2013 at 11:48 PM, Rose, John B wrote: > Is there a graphical monitoring tool for Apache httpd that is granular > enough you can determine if you need to change configuration settings, such > as you need to change values for MaxClients, MinSpareServers, > MaxRequestsPerChild, Start

Re: [users@httpd] WebDav setup

2013-01-18 Thread Nick Kew
On 18 Jan 2013, at 09:33, Johan Moraal wrote: > And under > > I added Dav On Gotcha. mod_dav doesn't map to (or ). Use URL space (i.e. ). -- Nick Kew - To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For additio

[users@httpd] WebDav setup

2013-01-18 Thread Johan Moraal
Dear Apache users I'm trying to setup and enable the WebDav module in Apache 2. I'm running version 2.0.54 on a PowerPC based Linux platform. The Linux distro used is not well known, it is the factory default distributed by Freescale on the P1022DS development kit. The output of the "uname -a" com

Re: [users@httpd] How to make sure the my module run before the php module?

2013-01-18 Thread Nick Kew
On 18 Jan 2013, at 01:29, ericwu wrote: > I write the apache input filter module, > I want it log apache process pid and run before the php module, > but it always run after php, You seem to be misunderstanding the purpose of a filter module: it's not what you want. See http://www.apachetutor