Re: [EMAIL PROTECTED] finding the cause of a hung apache with 500+ child processes

2008-09-15 Thread Markus Mayer
On Monday 15 September 2008, 21:36 André Warnier wrote: > Markus Mayer wrote: >Through my experimenting, I also found > > > the solaris command pfiles. This is much slower, but lists all files > > that a process has open at the time of calling. > > Did you check

Re: [EMAIL PROTECTED] finding the cause of a hung apache with 500+ child processes

2008-09-15 Thread Markus Mayer
On Monday 08 September 2008, 13:13 Eric Covener wrote: > On Mon, Sep 8, 2008 at 7:00 AM, Markus Mayer <[EMAIL PROTECTED]> wrote: > > Does anyone have any suggestions as to how I can pinpoint this problem? > > Is there any way I can log requests before they are fully served b

[EMAIL PROTECTED] finding the cause of a hung apache with 500+ child processes

2008-09-08 Thread Markus Mayer
Hi, I have an apache 2.0.61 with PHP 5.2.6 and the sunosin patches on Solaris 10, Sun V440 with 4 x 1.6GHz CPU's, 16Gb ram and 16Gb swap. once or twice a year it hangs with hundreds of child processes. The serverlimit is set to 512, and all the child processes are busy with some request that

[EMAIL PROTECTED] SSLCipherSuite and problems with Firefox, Mozilla

2007-01-11 Thread Markus Mayer
Hi All, I've been trying to configure an apache server with some SSL restrictions, in particular to disallow weak encryprion methods. I've follwed the instructions on the apache site for this, http://httpd.apache.org/docs/2.0/ssl/ssl_howto.html and also looked at the O'Reilly book Apache Secu

[EMAIL PROTECTED] Limiting users possibilities in .htaccess files

2006-09-14 Thread Markus Mayer
Hi all, I have some users on my server who insist on writing .htaccess files and defining proxies in them. This is something I don't like or want, they also run against our firewall which causes some security related messages to be generated. I have tried different restrictions with AllowOver

[EMAIL PROTECTED] Meaning of "exec failed. errno=2."

2006-04-04 Thread Markus Mayer
Hi All, Lately I've been getting the error "exec failed. errno=2." in my general error log. I've searched for information but have only found some information that I'm not sure is correct or relevant. The message comes maybe becuause someone is trying to execute a cgi using something like o

Re: [EMAIL PROTECTED] Httpd 2.2.0 on solaris 10 gives "incorrect Message Authentication Code"

2006-03-28 Thread Markus Mayer
7;t try compiling > it. > > I'll see whether I can get things working with an older openssl release > > thanks > > Nico > > On Fri, 2006-03-24 at 15:53 +0100, Markus Mayer wrote: > > And just one question since you are compiling on Solaris with Stuio 11 - > >

Re: [EMAIL PROTECTED] Httpd 2.2.0 on solaris 10 gives "incorrect Message Authentication Code"

2006-03-24 Thread Markus Mayer
And just one question since you are compiling on Solaris with Stuio 11 - have you been able to build a PHP which works? I'm trying with Studio 10/Solaris 10 on a V440 but am not having much success at the moment. Thanks Markus On Friday 24 March 2006 14:54, Nico De Ranter wrote: > Hi, > > I'

Re: [EMAIL PROTECTED] Httpd 2.2.0 on solaris 10 gives "incorrect Message Authentication Code"

2006-03-24 Thread Markus Mayer
I had this problem in 2002. I solved it by going back to a previous version of openssl. Maybe that will work for you too now. Markus On Friday 24 March 2006 14:54, Nico De Ranter wrote: > Hi, > > I'm setting up a webserver on Solaris 10 using httpd 2.2.0 with ssl > encryption. When I try to c

Re: [EMAIL PROTECTED] Retry: HostnameLookups timeout?

2006-03-24 Thread Markus Mayer
On Thursday 23 March 2006 19:05, Sean Conner wrote: > And there exists the possiblity of setting the timeout to infinity and > *still* have the reverse lookup fail, since there are plenty of ISPs that > don't bother with setting up PTR records for all their IP addresses. Correct, but this partic

Re: [EMAIL PROTECTED] Retry: HostnameLookups timeout?

2006-03-23 Thread Markus Mayer
. Thanks Markus On Wednesday 22 March 2006 16:58, Boyle Owen wrote: > > -Original Message- > > From: Markus Mayer [mailto:[EMAIL PROTECTED] > > Sent: Mittwoch, 22. März 2006 16:15 > > To: users@httpd.apache.org > > Subject: [EMAIL PROTECTED]

Re: [EMAIL PROTECTED] Retry: HostnameLookups timeout?

2006-03-22 Thread Markus Mayer
routine > outside of apache (or mod_perl, perl, phython, php, etc?) > > Thanks, > Boysenberry > > boysenberrys.com | habitatlife.com | selfgnosis.com > > On Mar 22, 2006, at 9:14 AM, Markus Mayer wrote: > > Hi All, > > > > I posted this one Thursday last week b

[EMAIL PROTECTED] Retry: HostnameLookups timeout?

2006-03-22 Thread Markus Mayer
Hi All, I posted this one Thursday last week but so far got no answer, so I'll try again today. I have a small problem with some reverse lookups for which I hope somebody here might be able to help me with. Generally reverse lookups work well, but for some IP addresses the reverse lookup time

Re: [EMAIL PROTECTED] Are multiple ok with wildcard cert ?

2006-03-17 Thread Markus Mayer
gt; The wildcard certificate is valid for both virtual hosts so this > scenario will work > > On 16-Mar-06, at 7:48 AM, Markus Mayer wrote: > > Hi, > > > > OK, I didn't make my point very well actually. Yes it works even > > when you > > have multiple ssl

Re: [EMAIL PROTECTED] Re: Are multiple ok with wildcard cert ?

2006-03-16 Thread Markus Mayer
Hi, OK, I didn't make my point very well actually. Yes it works even when you have multiple ssl hosts on the same IP. The problem is only one certificate is valid, and the browser will put up a message saying something like the certificate is valid but not issued for this host. This is the t

Re: [EMAIL PROTECTED] Are multiple ok with wildcard cert ?

2006-03-16 Thread Markus Mayer
Hi, Actually, having multiple HTTPS virtual hosts on the same IP address is not possible becasue of limitations in SSL itself. The correct and only way to handle this is to use a different IP address for each host for which you want an HTTPS. That means setting up your servers net interface

[EMAIL PROTECTED] HostnameLookups timeout?

2006-03-16 Thread Markus Mayer
Hi All, I have a small problem with some reverse lookups for which I hope somebody here might be able to help me with. Generally reverse lookups work well, but for some IP addresses the reverse lookup times out. With the help of our network admins, I was able to identify the problem. It is a

Re: [EMAIL PROTECTED] file security for apache/ftp users

2005-07-26 Thread Markus Mayer
as already solved this problem and can tell me how they did it. regards Markus On Monday 25 July 2005 20:09, Sean Conner wrote: > It was thus said that the Great Markus Mayer once stated: > > Hi all, > > > > I have a problem at the moment which has certainly been solved else

[EMAIL PROTECTED] file security for apache/ftp users

2005-07-25 Thread Markus Mayer
Hi all, I have a problem at the moment which has certainly been solved elsewhere, however I don't find an answer using google. We have an apache server running on a Unix system (AIX now, Solaris soon) where users upload their web data using ftp. Our problem is that our current scheme on the f

Re: [users@httpd] Apache + AWSTATS = Vulnerability????

2005-07-15 Thread Markus Mayer
On Thursday 14 July 2005 23:24, Anderson Miranda wrote: > Heck, gonna have to get a full reinstall over a new machine (my infected > system is still running... slowly, but running... I can't just take the > whole system down and make a fresh install... Gotta do it in a new box > and restore my file

Re: [users@httpd] Fwd:

2005-07-13 Thread Markus Mayer
Doing a chown should make no difference when the permissions have read for everyone set, although there may be something in sles I don't know about. Most probably your apache is running as another user, maybe nobody or apache or something like that. Check the httpd.conf file to find out. You c

Re: [users@httpd] Fwd:

2005-07-13 Thread Markus Mayer
y both have been chmoded 755 and one will work one > will not. Both files have the same owner but one was > added about a week after another. > > --- Markus Mayer <[EMAIL PROTECTED]> wrote: > > Most likely you're looking at a permissions problem. > > Look at the fil

Re: [users@httpd] Fwd:

2005-07-13 Thread Markus Mayer
Most likely you're looking at a permissions problem. Look at the file permissions for the files in the directory to be sure the apache process can access them. Markus On Wednesday 13 July 2005 14:59, None Blank wrote: > Hi Im having the following 403 forbidden error > "[Wed Jul 13 08:39:38

Re: [users@httpd] Rewrites in .htaccess work with http but not https?

2005-07-11 Thread Markus Mayer
Hi, Thanks for the answer. I looked through and there is no AllowOverride directive that would override the all for that directory. Any other ideas anybody? Markus On Monday 11 July 2005 02:11, Joshua Slive wrote: > On 7/8/05, Markus Mayer <[EMAIL PROTECTED]> wrote: > >

[users@httpd] Rewrites in .htaccess work with http but not https?

2005-07-08 Thread Markus Mayer
Hallo Everybody! :-) I have a really strange problem for which I can't find a solution. I have a .htaccess file with a simple rewrite rule in it which right now just rewrites from one non existent file to an existing file (see below). These rules work fine when I call up the pages through a ht

Re: [users@httpd] weird httpd processes

2005-06-07 Thread Markus Mayer
Hi, This looks like a script that is running out of control. We've had similar things here, except that our problem was the script writer failed to close the mysql connections. The user was waiting for data which never came, hit cancel, then tried again. The scripts used pconnect calls. Thi