Re: [users@httpd] chinese char URL encoding/decoding fails

2016-09-14 Thread Rodrigo Cunha
You have htaccess in the root this website? I dont undestood this problem, like problem wich code but check hpaccess in your website or better call you developer code. troubleshot for this is change the root for other website code and check the problem, or make new vhost which identic configfile "w

RE: [users@httpd] Change user for Apache web server to a non-privileged user?

2016-09-14 Thread Richard
> Date: Wednesday, September 14, 2016 17:37:36 -0400 > From: Tom Hammond > >> From: Richard >> Sent: Wednesday, September 14, 2016 5:06 PM >> >>> Date: Wednesday, September 14, 2016 08:16:32 -0400 >>> From: Tom Hammond >>> >>> I have an Apache 2.2x server and would like to harden security

Re: [users@httpd] Change user for Apache web server to a non-privileged user?

2016-09-14 Thread Rodrigo Cunha
check strings in the apache config directory /etc/apache (debian) grep www- /etc/apache2/apache2.conf * -R or grep http /etc/apache2/apache2.conf * -R check strings content old users and change to new user : http-web check apache process run: ps -ef |grep -i apache or ps -ef |grep -i http PS: Chan

re: [users@httpd] chinese char URL encoding/decoding fails

2016-09-14 Thread Jim Walls
I don't read Chinese, but it appeared to work on this old XP computer running FireFox as a browser. Jim Walls From: "Oliver Klein" Sent: Wednesday, September 14, 2016 1:55 PM To: users@httpd.apache.org Subject: [users@httpd] chinese char URL encodin

RE: [users@httpd] Change user for Apache web server to a non-privileged user?

2016-09-14 Thread Tom Hammond
Hi Richard, Thanks for the advice! If I understand you, the user/group that the webserver is running as needs to have read access on files and execute on directories, but at the same time not be an "owner" of these files & directories. Is that correct? Thanks again, Tom -Original Message-

Re: [users@httpd] Change user for Apache web server to a non-privileged user?

2016-09-14 Thread Richard
> Date: Wednesday, September 14, 2016 08:16:32 -0400 > From: Tom Hammond > > I have an Apache 2.2x server and would like to harden security so > that hackers can't get in easily to the Apache webserver. One > suggestion is to change the user/group for Apache to a > non-privileged account. > >

[users@httpd] chinese char URL encoding/decoding fails

2016-09-14 Thread Oliver Klein
Hello mailing list, a warm hello from Frankfurt. I am first time using this mailing list, so I hope I do everything the right way. I appreciate any help, thank you. (I don’t even know if that is a server problem I am facing) I am experiencing an issue with our website chinafitter.com If you go

RE: [users@httpd] Apache TomCat 5.5.23 SSL

2016-09-14 Thread Pham, Mary (NIH/OD/ORS) [E]
Yehuda, Thanks for your advice. I will do that. -Mary From: Yehuda Katz [mailto:yeh...@ymkatz.net] Sent: Wednesday, September 14, 2016 10:23 AM To: users@httpd.apache.org Subject: Re: [users@httpd] Apache TomCat 5.5.23 SSL Are you using Apache HTTPD or just Tomcat? This list if for HTTPD questio

RE: [users@httpd] Apache TomCat 5.5.23 SSL

2016-09-14 Thread Pham, Mary (NIH/OD/ORS) [E]
Mauricio, Thanks for your research. Still, I do not know what to do yet )-:. Regards, -Mary -Original Message- From: Mauricio Tavares [mailto:raubvo...@gmail.com] Sent: Wednesday, September 14, 2016 10:35 AM To: users@httpd.apache.org Subject: Re: [users@httpd] Apache TomCat 5.5.23 SSL

Re: [users@httpd] Apache TomCat 5.5.23 SSL

2016-09-14 Thread Mauricio Tavares
On Wed, Sep 14, 2016 at 10:22 AM, Yehuda Katz wrote: > Are you using Apache HTTPD or just Tomcat? This list if for HTTPD questions. > A better place to ask for help with Tomcat is the Tomcat list: > http://tomcat.apache.org/lists.html > From the original post, she is talking about what she n

Re: [users@httpd] Apache TomCat 5.5.23 SSL

2016-09-14 Thread Yehuda Katz
Are you using Apache HTTPD or just Tomcat? This list if for HTTPD questions. A better place to ask for help with Tomcat is the Tomcat list: http://tomcat.apache.org/lists.html - Y On Wed, Sep 14, 2016 at 9:02 AM, Pham, Mary (NIH/OD/ORS) [E] < maryp...@mail.nih.gov> wrote: > *Hello EveryOne,* > >

[users@httpd] Apache TomCat 5.5.23 SSL

2016-09-14 Thread Pham, Mary (NIH/OD/ORS) [E]
Hello EveryOne, As new bee of Apache. We have been using one of the old Apache TomCat on windows server 2008R2. After we purchased and installed the SSL certificate. We need to apply a header directive in Apache "Strict-Transport-Security" so that our web site would be secured as the Governm

AW: [users@httpd] Change user for Apache web server to a non-privileged user? [wd-vc]

2016-09-14 Thread Bremser, Kurt (AMOS Austria GmbH)
The simplest thing is to to log on to the server with http-web (do a sudo su - http-web) and then navigate there to see where you fail. Also be sure that DocumentRoot from the httpd.conf points to a subdirectory of /opt/fpp/www. Kurt Bremser AMOS Austria Newton was wrong. There is no gravity. T

Re: [users@httpd] Change user for Apache web server to a non-privileged user? [wd-vc]

2016-09-14 Thread Tom Hammond
Hi Kurt, Thanks for the reply! May you provide the command that properly adds read/execute permissions to DocumentRoot at /opt/fpp/www I am new to learning Linux and could use some help. :) Thanks agian, Tom On Wed, Sep 14, 2016 at 8:26 AM, Bremser, Kurt (AMOS Austria GmbH) < kurt.brem...@a

AW: [users@httpd] Change user for Apache web server to a non-privileged user? [wd-vc]

2016-09-14 Thread Bremser, Kurt (AMOS Austria GmbH)
Looks like http-web misses read/execute permissions on your DocumentRoot directory. Kurt Bremser AMOS Austria Newton was wrong. There is no gravity. The Earth sucks. Von: Tom Hammond [tomino...@gmail.com] Gesendet: Mittwoch, 14. September 2016 14:16 An: u

[users@httpd] Change user for Apache web server to a non-privileged user?

2016-09-14 Thread Tom Hammond
Hello everyone, I have an Apache 2.2x server and would like to harden security so that hackers can't get in easily to the Apache webserver. One suggestion is to change the user/group for Apache to a non-privileged account. Currently the user "fpp" is the default user for Apache which has access