[users@httpd] Re: Apache server v2.4.58 - suexec issue

Le 07/04/2024 à 19:55, Abdullah Adnan a écrit : Good day dears, Recently we have installed Apache server v2.4.58 in our CentOS 9, when make vulnerability scan with Nessus on the server the Nessus shows this vulnerability: The remote host appears to be running Apache and is potentially affec

[users@httpd] Re: httpd 2.4.x mod_md module MDContactEmail Directive - does that directive permit more than one email address

Le 03/01/2023 à 20:12, paul@stgconsulting.com a écrit : Hello, I have a question re: httpd 2.4.x mod_md module. Does the Directive MDContactEmail permit more than one email address to be specified? Hi, no, it is not possible to specify several addresses. CJ If yes what is the syntax

[users@httpd] Re: mod_proxy_http tuning

Le 10/08/2022 à 17:49, Suvendu Sekhar Mondal a écrit : SSLProxyEngine On SSLProxyVerify off I don't see "off" in Apache doc. none/optional/require/optional_no_ca are allowed. If you don't want certificate ve

[users@httpd] Re: Request for API Documentation for Apache 2.4.41 & 2.4.51

Le 31/07/2022 à 08:46, Ori Shaines a écrit : Hi Apache user support, I am posting this because the official Apache support has suggested me, as you might be able to provide me what I look for. Well, as you can see, I am reaching out from ThriveDX Group as one of the security team members.

[users@httpd] Re: Latest version: should I use openssl 3+

Le 01/02/2022 à 19:12, Tom Browder a écrit : On Tue, Feb 1, 2022 at 11:06 AM Tom Browder wrote: I am upgrading from Apache 2.4.43 to 2.4.52 and using openssl from source. I currently use 1.1.1.k and would normally go to the latest LTS version1.1.1.m; however, would it be better to move to vers

[users@httpd] Re: Apache 2.4.49 not communicating with PHP-FPM socket

Le 26/09/2021 à 16:18, John Romano D'Orazio a écrit : Hello all, I recently updated the packages on my server, among the updates was apache2 which was updated to version 2.4.29 (I use the PPA for Apache 2.x : Ondřej Surý ). After the upda

[users@httpd] Re: Redirects and rewrites and performance

Hi, Le 20/09/2021 à 18:29, Dave Wreski a écrit : Hi, At what point does it begin to affect performance with the number of redirects and rewrites being used on a website? Have there been any performance studies on this? I've never seen such benchmark up to now. We have a website (linuxsec

[users@httpd] Re: Apache httpd 2.4.48 was installed successfully on CentOS 7.8 using rpm

Le 03/06/2021 à 07:39, kohmoto a écrit : Hi, Platform:     CentOS Linux release 7.9.2009 (Core)     kernel version: kernel-3.10.0-1160.25.1.el7.x86_64 I have installed the newly released Apache httpd 2.4.48 on the above platform through rpmbuilding successfully without problems. Thank yo

[users@httpd] Re: Consolidate multiple s

Le 18/05/2021 à 22:26, vad...@gmail.com a écrit : That format got even worse feedback and I would too :-). Lets try this one. Have you looked at mod_macro? CJ ProxyPass /confluencenode1 http://nodecnf001:8092/confluencenode1 ProxyPassReverse /conflue

[users@httpd] Re: util_pcre.c:58:10: fatal error: pcre.h: No such file or directory

Le 29/04/2021 à 01:39, back Button a écrit : I believe it is  pcre-8.44.tar.gz found on page https://ftp.pcre.org/pub/pcre/ I would  prefer to install it this way sudo apt install apache2 sudo service apache2 start as shown on https://httpd.apache.org/docs/2.4/install.html. But this way I am

[users@httpd] Re: Help: Building httpd from source with specific (different then system default) OpenSSL

Le 07/04/2021 à 18:56, Shariful Alam a écrit : Hello Yann, Thanks for the reply. Following is the output of *ldd mod_ssl.so, * still the same. No sign of OpenSSL library. root@xxx:/etc/apache2/modules# ldd mod_ssl.so linux-vdso.so.1 =>  (0x7fffce1c5000) libssl.so.1.0.0 => /lib/x86_64-linu

[users@httpd] Re: External exception in httpd

regards    Mike Am Mi., 31. März 2021 um 15:14 Uhr schrieb Yann Ylavic mailto:ylavic@gmail.com>>: On Wed, Mar 31, 2021 at 12:56 PM Christophe JAILLET mailto:christophe.jail...@wanadoo.fr>> wrote: > > Le 30/03/2021 à 11:30, Michael

[users@httpd] Re: External exception in httpd

Le 30/03/2021 à 11:30, Michael Rabatscher a écrit : Hey guys! I'm currently a Delphi developer creating a windows module for the apache 2.4 server. Every time I run the module with a debugger attached (and httpd.exe -X acutally to avoid 2 instances) I get a system exception on shutdown: syst

[users@httpd] Re: httpd[803535]:

f you still have the issue. CJ On Sunday, March 14, 2021, 07:04:15 PM GMT+3:30, Christophe JAILLET wrote: Le 14/03/2021 à 14:59, Jason Long a écrit : Hello, I want to block Tor IP addresses and I downloaded a list of Tor IP addresses and put it as a "tor-ip.conf" fil

[users@httpd] Re: Error in Apache Documentation

Le 11/03/2021 à 20:03, John a écrit : On the Apache documentation page: https://httpd.apache.org/docs/2.4/misc/security_tips.html Under Denial of Service Attacks, the link: http://modules.apache.org/ leads to a 404 Not Found result. It probably requires updating. Regards, John Hi, thx

[users@httpd] Re: httpd[803535]:

Le 14/03/2021 à 14:59, Jason Long a écrit : Hello, I want to block Tor IP addresses and I downloaded a list of Tor IP addresses and put it as a "tor-ip.conf" file under the "/etc/httpd/conf.d/" directory. Then edited my Virtual Host configuration file as below: Options -Indexes AllowOverride

[users@httpd] Re: Customizing the HTTP Reason Phrase

Le 04/03/2021 à 21:15, Christophe JAILLET a écrit : Le 04/03/2021 à 08:20, Lars Bruun-Hansen a écrit : How do I customize the HTTP Reason Phrase ? Definition: The Reason Phrase is sent in an HTTP response on the very first line immediately following the status code, for example such line

[users@httpd] Re: Customizing the HTTP Reason Phrase

Le 04/03/2021 à 08:20, Lars Bruun-Hansen a écrit : How do I customize the HTTP Reason Phrase ? Definition: The Reason Phrase is sent in an HTTP response on the very first line immediately following the status code, for example such line may look like this: HTTP/1.1 401 Unauthorized In this

[users@httpd] Re: enforcing file transmutation in gzip format with Apache 2.4.46

Le 02/12/2020 à 16:59, Ran Mozes a écrit : Hi, I'd like to configure the server to always send the requested *.uar files in gzip format back to the client. The following configuration is used but it only works if the client (for example curl) runs with '—compressed' flag. I read that "SetEnv f

[users@httpd] Re: Server starting problem

Le 27/09/2020 à 14:59, Tara Hall a écrit : I've installed Apache-2.4.46 on a Raspberry Pi running FreeBSD 12.1 to use as an Intranet website. When I try to start the server after a doing basic config setup I get the following message: "Syntax error on line 236 of /usr/local/etc/apache24/htt

[users@httpd] Re: Modifying/adding cookie attributes on the fly?

Le 27/08/2020 à 09:11, Martin Knoblauch a écrit : Hi,  we have the following setup: Apache/httpd->mod_jk_>Apache/Tomcat. "httpd" and "mod_jk" are recent versions, Tomcat is 9.0.12 and cannot be upgraded. We also have only very limited influence on the application hosted there.  Problem is

[users@httpd] Re: Enable auth module in Apache/2.4.6

Le 29/07/2020 à 03:18, Kaushal Shriyan a écrit : Hi, I am running the Server version:  (CentOS) on CentOS Linux release 7.8.2003 (Core). Server version: Apache/2.4.6 (CentOS) Server built:   Apr  2 2020 13:13:23 Server's Module Magic Number: 20120211:24 Server loaded:  APR 1.4

[users@httpd] Re: Apache httpd 2.4.46 was installed successfully on CentOS 7.8 using rpm

Le 08/08/2020 à 08:14, kohmoto a écrit : Hi, Platform:     CentOS Linux release 7.8.2003 (Core)     kernel version: kernel-3.10.0-1127.18.2.el7.x86_64 I have installed the newly released Apache httpd 2.4.46 on the above platform through rpmbuilding successfully without problems. Thank yo

[users@httpd] Re: Apache and systemd

Le 18/06/2020 à 15:31, Tom Browder a écrit : On Thu, Jun 18, 2020 at 07:48 David Copeland mailto:david.copel...@jsidata.ca>> wrote: Hi Tom, To have Apache start on boot do: _systemctl enable apache2_ David, thanks so much! So should a person installing Apache from source with "--en

[users@httpd] Re: Where is gone RemoteIPProxyProtocol directive (mod_remoteip) ?

Le 06/05/2020 à 12:20, Rainer Canavan a écrit : On Wed, May 6, 2020 at 11:04 AM JK Pard0x wrote: Looking at the mod_remoteip source code for httpd 2.4.6 [1], it appears the directive RemoteIPProxyProtocol does not exist anymore. I'm not sure to understand how the versioning works. And indeed,

[users@httpd] Re: Custom Error Pages

Le 15/04/2020 à 08:24, Praveen Kumar K S a écrit : Hello, I'm looking for some help in configuring custom error pages in httpd 2.4.39 I'm compiling httpd and running it as a container. If someone can help me with the manuals or documentation, it will be helpful. Regards, Praveen Kumar K S

[users@httpd] Re: conditionally create a Virtual Host?

Hi, this has been backported to 2.4.x branch. It will be part of apache 2.4.42. No date is foreseen at the moment. The release should happen in a couple of months. CJ Le 05/09/2019 à 21:12, Christophe JAILLET a écrit : Hi, we don't have a fixed schedule for release. 2.4.41 has just

[users@httpd] Re: Server-side includes not working...

Hi, as explained in [1], I guess that a "AllowOverride Options" is missing in your configuration file. BTW, if you can use only configuration files (and avoid using .htaccess files), performance should be better. Best regards, CJ [1] http://httpd.apache.org/docs/2.4/en/mod/mod_include.ht

[users@httpd] Re: conditionally create a Virtual Host?

he change gets approved, approximately when will the next release become available? -------- *From:* Christophe JAILLET *Sent:* Wednesday, September 4, 2019 2:14 PM *To:* users@httpd.apache.org ; Heather Lotz *Subject:* Re: conditionall

[users@httpd] Re: conditionally create a Virtual Host?

crit : Hello - Just wondering if there has been any progress made on getting to work for Windows. *From:* Heather Lotz *Sent:* Saturday, August 24, 2019 11:40 AM *To:* Christophe JAILLET ; users@httpd.apache.org *Subject:

[users@httpd] Re: conditionally create a Virtual Host?

01/09/2019 à 01:11, Heather Lotz a écrit : Hello - Just wondering if there has been any progress made on getting to work for Windows. *From:* Heather Lotz *Sent:* Saturday, August 24, 2019 11:40 AM *To:* Christophe J

[users@httpd] Re: conditionally create a Virtual Host?

rmats https://stackoverflow.com/questions/23041983/path-prefixes-and *From:* Christophe JAILLET *Sent:* Friday, August 23, 2019 8:55 AM *To:* users@httpd.apache.org ; Heather Lotz *Subject:* Re: conditionally create a Vi

[users@httpd] Re: conditionally create a Virtual Host?

patch expect and the patch will allow the code within the tags to execute as it would on a Linux machine? I opened the patch file in Notepad++ but don't understand the contents. -------- *From:* Heather Lotz *Sent:* Friday, Au

[users@httpd] Re: conditionally create a Virtual Host?

Le 23/08/2019 à 05:04, Heather Lotz a écrit : After some more testing, it seems that this syntax - is the root cause of Apache not starting when the external storage device, mapped to Z:, is detached from the Windows 10 PC. I tested these variants individually, which are more *nix like - a

[users@httpd] Re: Apache/2.4.26 (Unix) undocumented error AH02651

Le 21/08/2019 à 17:58, HISEY, JAMES a écrit : Running Apache 2.4.26 on RHEL7, I'm receiving an error in my apache error log of AH02651: Error writing request body to script I am unable to locate a meaningful description of AH02651 anywhere as all error lists I can find stop in the lower 2

[users@httpd] Re: Apache httpd 2.4.41 was installed successfully to CentOS 7.6 using rpm

Le 16/08/2019 à 04:44, kohmoto a écrit : Hi, Platform:     CentOS Linux release 7.6.1810 (Core)     kernel version: kernel-3.10.0-957.27.2.el7.x86_64 I have installed the newly released Apache httpd 2.4.41 on the above  platform through rpmbuilding successfully with no problems. Thank you a

[users@httpd] Re: uncompressing lzw payload

Le 16/08/2019 à 17:33, Mark Lybarger a écrit : i'm reading about mod_deflate where it can handle gzipped content sent and automatically uncompress the payload. i have embedded clients that want to send compressed data over the wire due to bandwidth constraints. they can only support LZW compres

[users@httpd] Re: Comments unusable?

back, we should, IMHO, remove it from the doc to avoid confusion. Best regards. Christophe Jaillet Le 18/06/2019 à 20:21, Frank a écrit : Hello, The server hosting the comments has been offline for a little while now, yes. I am unsure on the plans as far as reviving it - I can check with

[users@httpd] Re: Simple file listing issue in browser, 2.2 vs 2.4

from  all *Jeffrey Cauhape – IT Professional III – Linux and Solaris Administrator* Nevada Department of Employment, Training and Rehabilitation (775) 684-3804 (office) jpcauh...@detr.nv.gov <mailto:jpcauh...@detr.nv.gov> *From:*Christophe JAILLET [mailto:christophe.jail...@wanadoo.fr]

[users@httpd] Re: Simple file listing issue in browser, 2.2 vs 2.4

Le 03/05/2019 à 21:26, Jeff Cauhape a écrit : Folks, This is probably a simple issue, but so far I haven’t found anything in the doc that addresses this directly. A user has pointed out that a listing of a directory on one system running Apache 2.2.3 shows files with their details – mod ti

[users@httpd] Re: mod_echo configuration

Just, for the records. On 28/03/2019 19:46, Marion & Christophe JAILLET wrote: Le 28/03/2019 à 15:37, anthony a écrit : Hello, I am new on this mailing list and I hope to find an answer on my apache2 configuration problem. My OS : Linux openSUSE 15.2 64 bit Apache : apache2 2.4.33 stan

[users@httpd] Re: mod_echo configuration

Le 28/03/2019 à 15:37, anthony a écrit : Hello, I am new on this mailing list and I hope to find an answer on my apache2 configuration problem. My OS : Linux openSUSE 15.2 64 bit Apache : apache2 2.4.33 standard install    browser url : local host --> It works! I try to use apache as a echo

[users@httpd] Re: Help configure a Reverse proxy with Substitute

Le 15/03/2019 à 10:47, Flaviu Radulescu a écrit : Dear community, I need an advice on how to configure a reverse proxy in which I need to replace the tag from the response html with an ENV variable defined previously. How do you recommend me to do this? I tried with substitute, but unfortu

[users@httpd] Re: Rotate Logs | Number of Files | File Size

Hi, The doc should be more explicit, but based on reading the source code, it is likely that you get a:     "Cannot use -n with % in filename" You can not use -n and logfile name with '%' formatting character(s). CJ Le 01/03/2019 à 04:05, Khandelwal, Ankit a écrit : Hello Rainer, I tried

[users@httpd] Re: HTTP Method Patch

Le 20/02/2019 à 14:58, Hajo Locke a écrit : Hello list, this is Apache 2.4.34 I was asked if Apache is supporting HTTP Request Methode PATCH. To be honest i did not really found something useful in the web. Is Apache supporting this method and is an additionally modul required? Iam not aware of

[users@httpd] Re: Can I use If condition against custom header name that my request is passing in Apache 2.4

Le 25/01/2019 à 00:00, Naveen Nandyala a écrit : We are using Apache 2.4.12, I’m working to set a host in header based on header value passed in my request, was wondering if I can use IF statement to get the same, Request hitting my Apache server is having a header with header name “X-Proxy”

[users@httpd] Re: Enhancement Request

Le 24/08/2018 à 21:59, Campbell, Lance a écrit : Apache MPM Workers REQUEST: Please change your worker parameter naming convention in regards to MAX. Example: Parameter1 MaxParameter1 Parameter2 MaxParameter2 Why?  I completely misunderstood the difference between ThreadLimit and Threa

[users@httpd] Re: Buffer in apache

Le 21/08/2018 à 13:50, Hemant Chaudhary a écrit : Hi All, I want to use buffer of 512B in apache . I am using mod_proxy_http to send request to tomcat and have set ProxyIOBufferSize 512. But it is sending message to tomcat with size greater than 512B. How should I control apache in proxy so

[users@httpd] Re: Special characters in password for mod_dbd

Mimiko a écrit : Thank you I was looking for such info and didn't found. Why so much chars left for params split? Should I fire a request or this will not be changed in future by concept? On 20.08.2018 22:14, Christophe JAILLET wrote: This seems to be mysql APR driver specific. Fo

[users@httpd] Re: Special characters in password for mod_dbd

Hi, This seems to be mysql APR driver specific. For some reasons, in APR, in function dbd_mysql_open(), fields are split according to delimiters in:     static const char *const delims = " \r\n\t;|,"; See Remarks about MySQL at: http://apr.apache.org/docs/apr-util/1.6/group___a_p_r___util___d

[users@httpd] Re: Test Functionality of Apache web server

Le 09/07/2018 à 08:40, Hemant Chaudhary a écrit : Any update on this ? Thanks Hemant On Fri, Jul 6, 2018 at 2:44 PM, Hemant Chaudhary > wrote: Hi All, Do we have any test suite for unit testing of apache source code?? I have taken open sou

[users@httpd] Re: brotli module loaded but doesn't work

Le 22/06/2018 à 09:52, Michael A. Peters a écrit : > On 06/22/2018 12:35 AM, Michael A. Peters wrote: > *snip* > > Okay looks like a difference between what is actually in Apache and what > websites idicate. > > Seems with the code in Apache, for the filter BROTLI_COMPRESS is correct > - not BROTL

[users@httpd] Re: (rewritten) In directory pages, how to show file dates in a specific timezone?

Le 21/06/2018 à 20:31, Dedeco Balaco a écrit : Em 14-06-2018 14:25, Yann Ylavic escreveu: On Thu, Jun 14, 2018 at 12:08 AM, Dedeco Balaco wrote: Em 13-06-2018 17:29, Yann Ylavic escreveu: The date format used by mod_autoindex is hardcoded, and does not include the timezone (%z or %Z in st

[users@httpd] Re: Redirect outside http web-address to an internal web-address

Le 21/06/2018 à 10:52, Gust, Thorsten a écrit : Hi All, I tried to create follows configuration within our environment, but can’t find a working solution for that case, maybe some has an idea !?! We have an external company which is connected via VPN to our network. Internal we have two appl

[users@httpd] Re: Apache 2.4: Users autenthication in Active Directory

Le 22/05/2018 à 21:53, Christophe Jaillet a écrit : Le 22/05/2018 à 14:14, aguayo33 a écrit :   Hi! Thanks in advance!   I need help with Apache configuration to enable login through Active directory.   I want allow login if a user is member of a group contained in other group.   Now I have

[users@httpd] Re: Apache 2.4: Users autenthication in Active Directory

Le 22/05/2018 à 14:14, aguayo33 a écrit : Hi! Thanks in advance! I need help with Apache configuration to enable login through Active directory. I want allow login if a user is member of a group contained in other group. Now I have this: Alias /nagios /opt/nagios/share Op

[users@httpd] Re: Ubuntu 14 mod_proxy_hcheck

Hi, if working with Ubuntu 14.xx, then is has been released in 2014. Apache 2.4.21 has been released in 2016. So it is unlikely that your version of apache is recent enough and has this module included. Could you confirm the evrsion of apache running in your server? If you need this module,

[users@httpd] Re: CVE-2013-2249

Hi, CVE-2013-2249 is related to mod_session_dbd.c. AFAIK, mod_session_dbd is not part of apache 2.2.x. Best regards, CJ Le 22/09/2016 à 07:31, Bernd Eggenmüller a écrit : Hello, can someone tell me if the vulnerability CVE-2013-2249 is already fixed in the apache version 2.2.31? I can on

[users@httpd] Re: 32 bit - httpd-2.2.31 Binary distribution for linux

Hi, please have a look at : https://httpd.apache.org/docs/current/install.html and if needed: https://httpd.apache.org/docs/current/programs/configure.html Best regards, CJ Le 31/08/2016 à 07:17, Gole, Manjusha (Manjusha) a écrit : Hi chris, I can use the httpd rpm that comes with L

[users@httpd] Re: Server replication

Hi, If you are running on 2.4.x, have a look at mod_macro. Best regards, CJ Le 17/04/2016 21:09, Darryl Philip Baker a écrit : I the system administrator for HTTP servers in a higher volume environment. We have three Linux hosts serving the many virtual hosts that make up our sites. The onl

[users@httpd] Re: Safari - Apache error when connecting using safari with beast mitigation

Loglevel debug should already bring you some useful information to better understand you issue. CJ Le 30/04/2015 12:06, Or Lindner a écrit : Except "LogLevel debug", what else can be turned on? Should I enable access logs and how? -Original Message----- From: Christop

[users@httpd] Re: Safari - Apache error when connecting using safari with beast mitigation

Hi, have you looked at the server log in order to have more information? CJ Le 30/04/2015 11:07, Or Lindner a écrit : Hi, I am running apache version 2.2.0. I am trying to connect with Safari browser and having difficulties while other browsers doesn’t have any problem. It’s appear that

[users@httpd] Re: Expected release date for 2.4.11

Le 07/01/2015 14:03, Michal Kudlacak a écrit : Hello, i would like to ask if there is any probable release date for 2.4.11 (GA version). Michal Kudlacak Hi, according to mails in the dev@ list, a new release should be expected by the end of the month. Release candidate should be available by

[users@httpd] Re: Empty username causes internal server error

Hi, Could you try with ' around the %s? SELECT password FROM member WHERE CONVERT(VARCHAR(10), member_Index) = '%s' This way, if the username is empty, the request will still be valid. CJ Le 27/09/2014 22:23, Radek Pospíšil a écrit : Hello, I am using user authentication with the follow

[users@httpd] Re: YOU BROKE MY CODE!

ll still run on a brand new Intel chip: that's upward compatibility. Today I have two config files, "apache2.2.conf" and "apache2.4.conf". I hope I can use a symbolic link on each server to point to one or the other. On 05/17/2014 08:59 PM, Christophe JAILLET wrote: Le

[users@httpd] Re: YOU BROKE MY CODE!

Le 17/05/2014 05:37, Andy Canfield a écrit : You broke my code! If something got broken, then something has changed. I imagine that you have upgraded your version of apache. Your are running 2.2.22. Which version of apache was used previously? CJ -

[users@httpd] Re: Question

Le 29/04/2014 12:24, Christophe JAILLET a écrit : Le 29/04/2014 06:26, Yehuda Katz a écrit : Also, the Comments section on the Apache manual pages <http://httpd.apache.org/docs/trunk/mod/mod_session_dbd.html#comments_section> is NOT for asking questions like this. Please don't

[users@httpd] Re: Question

Le 29/04/2014 06:26, Yehuda Katz a écrit : Also, the Comments section on the Apache manual pages is NOT for asking questions like this. Please don't do it again. - Y Comment deleted dom online doc. CJ --

[users@httpd] Re: ap_run_mpm

Le 19/07/2013 02:38, Valter Nogueira a écrit : I don't know if this question belongs here. While reading over internet how apache works I learned that different threading/multi-process models are called thru ap_run_mpm inded, main.c calls ap_run_mpm, but I don't figure out where it is defin