Re: [users@httpd] Strange change in behavior of web page

On Wed, Oct 9, 2024 at 10:15 AM Freek de Kruijf wrote: > > Choosing the other two buttons to view those videos gives an error, > something > like "No video with supported layout and MIME type found". The buttons for > downloading work as expected. > > When I copy the index.html for this web page

Re: [users@httpd] SSL setup assistance

On Wed, Sep 18, 2024 at 2:56 PM Frank Gingras wrote: > >> You basically need to load the mod_ssl module with LoadModule, edit the > :443 vhost and add SSLEngine on, SSLCertificateFile and > SSLCertificateKeyFile. > I also recommend looking at the Mozilla SSL Configuration Generator. It will help

[users@httpd] Helpful and Friendly Mailing List Replies [WAS: Re: [users@httpd] Update Apache httpd to the latest version 2.4.62]

On Tue, Sep 3, 2024 at 12:56 AM x wrote: > On Tue, Sep 3, 2024 at 12:45 AM Kaushal Shriyan > wrote: > >> Are there any release notes where the security changes related to Apache >> HTTPD version 2.4.62 have been backported to the Apache HTTPD packages >> supplied by Ubuntu? >> >> Kaushal, > > Bes

Re: [users@httpd] Update Apache httpd to the latest version 2.4.62

On Tue, Sep 3, 2024 at 12:45 AM Kaushal Shriyan wrote: > Thanks, Yehuda, for the quick response. I really appreciate it. Are there > any release notes where the security changes related to Apache HTTPD > version 2.4.62 have been backported to the Apache HTTPD packages supplied > by Ubuntu? > You

Re: [users@httpd] Update Apache httpd to the latest version 2.4.62

On Mon, Sep 2, 2024 at 11:30 PM Kaushal Shriyan wrote: > I am running Ubuntu server version 24.04 LTS. Is there a way to update > Apache httpd to the latest version 2.4.62? > You can always download and compile HTTPD for yourself. The instructions in the documentation are pretty clear. https://h

Re: [users@httpd] Location of Web Site Pages

On Sun, Aug 25, 2024 at 8:09 PM Lawrence Taylor wrote: > Thanks Paul I have read the document, which explains all the ways you map > the URL to file system locations. What it does not say (from what I can > see) is how to check where this mapping is located. Can you help? > You have everything

Re: [users@httpd] Location of Web Site Pages

There is no way to know without actually looking at the code. Some PHP applications have a templating engine, some just have includes of different files in different places. You can search the code for the name of the javascript file. There are definitely other files that are included from a non-se

Re: [users@httpd] Location of Web Site Pages

you view the source code on the landing page does that tell you > anything? > > luxurybeach.com > > Sent from my iPhone > > On 21 Aug 2024, at 11:51 a.m., Yehuda Katz wrote: > >  > There are probably no "html" files - the website is generated dynamically &g

Re: [users@httpd] Location of Web Site Pages

red properly, and the other pages become error > pages. > > Sent from my iPhone > > On 21 Aug 2024, at 11:32 a.m., Yehuda Katz wrote: > >  > Your .htaccess is doing three things: > forwarding all secure traffic to your website to be not secure, > forwarding some reque

Re: [users@httpd] Location of Web Site Pages

Set the “ea-php56” package as the default “PHP” programming language. > > AddHandler application/x-httpd-ea-php56 .php .php5 .phtml > > # php -- END cPanel-generated handler, do not edit > > Regards > > Lawrence > > On Tue, Aug 20, 2024 at 7:02 PM Yehuda K

Re: [users@httpd] Location of Web Site Pages

s in CPanel for the web site user. >> These directories do not have html files. >> >> What do you suggest now? >> >> Regards >> >> Lawrence >> >> >> >> On Tue, Aug 20, 2024 at 2:36 PM Lawrence Taylor >> wrote: >> >>

Re: [users@httpd] Location of Web Site Pages

gt; What do you suggest now? > > Regards > > Lawrence > > > > On Tue, Aug 20, 2024 at 2:36 PM Lawrence Taylor > wrote: > >> Thanks Yahuda I will try that! >> >> Sent from my iPhone >> >> On 20 Aug 2024, at 2:28 p.m., Yehuda Katz wr

Re: [users@httpd] Location of Web Site Pages

On Tue, Aug 20, 2024 at 4:25 PM Marc wrote: > what about doing a > > find / -iname '*cse.cgi*' -ls > If anyone comes across this in the future: cse is ConfigServer Explorer, a cPanel plugin that provides a filesystem browser. It has nothing to do with HTTPD or with where the files of the website

Re: [users@httpd] Location of Web Site Pages

Based on the links you posted, it looks like your server is running cPanel. cPanel stores each website it hosts in its own user directory. You need to figure out which user your website is running as, then look at the public_html directory in the user account's home directory. If a single cPanel ac

Re: [users@httpd] Apache HTTP Server 2.4 EOL

There is no planned EOL for 2.4, but you should always be on the most recently released version - currently 2.4.59 - or possibly on a version maintained by your OS distribution to keep up with the latest security patches. On Mon, May 13, 2024 at 10:50 PM Ehmann G wrote: > i tried searching on Go

Re: [users@httpd] openssl comand(s) for https mode on apache 2.4 on windows.

I have always had issues with OpenSSL on Windows, so I gave up and started using xca (https://hohnstaedt.de/xca/). I created a root certificate that I imported into the Windows trust store and I create new certificates for each website in my dev environment. - Y On Tue, Apr 16, 2024 at 9:26 PM Ge

Re: [users@httpd] Measurements of htaccess processing penalty

The whole point of .htaccess files is that they aren't cached, it gives users who are not able to control the server the ability to make configuration changes. If you can control the server process, you should prut configuration in sections that are loaded at start time which are then cached in me

[users@httpd] Measurements of htaccess processing penalty

The HTTPD documentation says "You should avoid using .htaccess files completely if you have access to httpd main server config file. Using .htaccess files slows down your Apache http server. Any directive that you can include in a .htaccess file is better set in a Directory block, as it will have t

Re: [users@httpd] Nginx to Apache

OpenVPN port-share has nothing to do with which HTTP server is running behind it. You should have a completely working Apache configuration separate from anything connected to OpenVPN, then you can change the listening port for HTTPD and have OpenVPN forward traffic to it. The sites-enabled folder

Re: [users@httpd] site compromised and httpd log analysis

On Wed, Jul 6, 2022 at 9:08 AM KK CHN wrote: > On Wed, Jul 6, 2022 at 8:33 AM Yehuda Katz wrote: > >> Your log doesn't start early enough. Someone uploaded a web shell (or >> found an existing web shell) to your server, possibly using an upload for >> that doesn&#x

Re: [users@httpd] site compromised and httpd log analysis

Your log doesn't start early enough. Someone uploaded a web shell (or found an existing web shell) to your server, possibly using an upload for that doesn't validate the input, then used that shell to run commands on your server. I would consider your entire server to be compromised at this point s

Re: [users@httpd] How to sign up using Apache

There is no built-in module that provides user registration - that is something you would need to implement yourself. - Y On Sun, Jul 3, 2022 at 7:29 AM Ahmad Ismail wrote: > I can use `mod_auth_basic` or `mod_auth_digest` for authenticating users. > > I can sign in or sign out using mod_auth_

Re: [users@httpd] Can I serve CLI Applications using Apache

You still have a bunch of options. Some possibilities using your own code: - Your CGI script or binary called by HTTPD is a wrapper which handles the piping and output capture of the other program. - Your CGI script or binary uses the available environment variables to determine where it is runnin

Re: [users@httpd] Apache website conversion from alias to virtualhost

g this option in file >> /etc/apache2/default-server.conf within returns a >> prohibited access (403 error) page: >> >> [image: image.png] >> >> >> -- >> >> >> Thomas WILLIAMSON • Technicien Systèmes et réseaux >> >> *Tél.* 05 4

Re: [users@httpd] Apache website conversion from alias to virtualhost

You have "AllowOverride None" in your "". This means your .htaccess file and therefore your mod_rewrite configuration is not being read. The simplest option is "AllowOverride All" (you can specify specific overrides too if you want). - Y Sent from a device with a very small keyboard and hyperacti

Re: [users@httpd] Mystifying start failure

I have updated ssl certificates recently. > > JMN > > On 30 May 2022, at 7:01, Yehuda Katz wrote: > > systemd doesn't know to look in the HTTPD log file. What does that log say? > Likely located in /var/log/apache2/ > > - Y > > On Mon, May 30, 2022 at 9:58 AM

Re: [users@httpd] Mystifying start failure

systemd doesn't know to look in the HTTPD log file. What does that log say? Likely located in /var/log/apache2/ - Y On Mon, May 30, 2022 at 9:58 AM jnil...@jala.com wrote: > I recently rebooted the server and started apache only to get a failure. > Here's the diagnosis; I'm not sure what to mak

Re: [users@httpd] Re: Multi-domain with SSL - Virtualhost all need IPs?

That is not correct. That causes httpd to try to look up the matching IP address using DNS. Use only IP addresses or wildcards. - Y On Fri, May 20, 2022 at 1:06 PM Bender, Charles wrote: > Your virtual host is defined wrong. Use the names not IP addresses > > http://1.1.1.13:443/>> > Servername

Re: [users@httpd] Re: Multi-domain with SSL - Virtualhost all need IPs?

> > It will have a different set of cert files. I let it have an IP which > nothing else shares. I'm keenly aware of this IP as I've set it up in DNS as well. If you have , it will use ALL IPs - if you want to dedicate an IP for a site, you need to specify IPs for every other site too. I am not

Re: [users@httpd] Unable to connect to Apache test website on LocalHost

Besides the ServerAlias, You probably also need to add DirectoryIndex index.html and also change your document root to the actual root directory where your website is located. - Y Sent from a device with a very small keyboard and hyperactive autocorrect. On Tue, Apr 12, 2022, 5:21 PM Eric Covene

Re: [users@httpd] migrate apache httpd from 2.4.17 to 2.4.48

It depends how you installed it originally. There is no official Windows package of HTTPD, but there are a number of other people/groups who make such builds available. I personally use the package built by ApacheLounge. It has no installer - I install it by unzipping to C:\Webserv\Apache and runn

Re: [users@httpd] How to get someone to look at a Apache bug report on Red Hat's Bugzilla?

; > Thanks for thinking along! > > Jeroen Verhoeckx > > > > > *Support the independent web, use **Firefox* > <https://www.mozilla.org/en-US/firefox/new/> > > > > --- Original Message ---

Re: [users@httpd] How to get someone to look at a Apache bug report on Red Hat's Bugzilla?

-- > *Support the independent web, use **Firefox* > <https://www.mozilla.org/en-US/firefox/new/> > > > > --- Original Message --- > On Friday, February 18th, 2022 at 8:38 PM, Yehuda Katz > wrote: > > > I see two options for you going

Re: [users@httpd] How to get someone to look at a Apache bug report on Red Hat's Bugzilla?

You mention in the bug report that you are running an old version of HTTPD because you are using the version packaged by RedHat. Your bug report asks RedHat to backport the specific fixes for your issue. I see two options for you going forward: 1. Contacting RedHat: You need a subscription to do t

Re: [users@httpd] Re: Question about running apache server using WAMP

: > On 30/07/2021 18:16, Yehuda Katz wrote: > > Once we get out of the technical discussion relating to HTTPD and into > > how to access Facebook, besides for the fact that this is not on topic > > for this mailing list, I suggest reading the Facebook Terms of Service > >

Re: [users@httpd] Question about running apache server using WAMP

Once we get out of the technical discussion relating to HTTPD and into how to access Facebook, besides for the fact that this is not on topic for this mailing list, I suggest reading the Facebook Terms of Service which explicitly disallow account sharing. https://www.facebook.com/terms.php > 3. Y

Re: [users@httpd] Public viewing when it should be private

I would also recommend mod_auth_cas if your SSO supports it - very easy to set up. - Y Sent from a device with a very small keyboard and hyperactive autocorrect. On Thu, May 20, 2021, 2:41 AM Michael Wechner wrote: > Hi Michael > > I think it depends on your SSO app, more specifically what sta

Re: [users@httpd] Replays from Internet

It is likely that the user still has the browser tab open and it refreshes for some reason, or their browser crashed and reopened, or they use a session restore tool when they reopen the browser - all of these could cause an exact duplicate request. You might want to look into the Post-Redirect-Get

Re: [users@httpd] Alternative to Let's Encrypt?

You can install certbot in a python virtualenv from pypi. This is technically not supported, but it does work. https://pypi.org/project/certbot/ See other alternate installation methods: https://certbot.eff.org/docs/install.html You can also use mod_md to have all the certificate generation handl

Re: [users@httpd] multiple internal websites

The best choice would be to register a real domain name. Because of the gTLD program, almost anything can now be registered on the internet, so you will keep having issues. You could use .example or .test which shouldn't ever be on the public internet, or you could use .internal which might be reg

Re: [users@httpd] IP address show Apache welcome page but domain name working!

That file is for Debian-flavor distributions. On RedHat-flavors, a similar file would be in /etc/httpd/conf.d if it exists (not in conf.modules.d though). You can check which files have the actual config for a vhost by running the command 'httpd -S'. - Y Sent from a device with a very small keybo

Re: [users@httpd] File structure for nearly identical sites

Your best option to do that might be to add a separate file with that config and call it with IncludeOptional For example: ServerName $domain ServerAlias www.$domain DocumentRoot "/var/www/vhosts/$name" ErrorLog "/var/log/httpd/$name.error_log" CustomLog "/var/log/httpd/$nam

Re: [users@httpd] How to permanently disable default config files

You can use yum-plugin-post-transaction-actions to delete the files (not currently available in CentOS 8 though): Create a file named /etc/yum/post-actions/httpd.action With the content: httpd*:update:rm -f /etc/httpd/conf.d/file_to_delete You should also be able to leave the files empty instead o

Re: [users@httpd] Authentication plugins/front end

We use mod_auth_cas. We wrote our own cas server, but there are some off the shelf options including with support for MFA, password reset, and lots more. There is also mod_auth_tkt, but I haven't used it. - Y Sent from a device with a very small keyboard and hyperactive autocorrect. On Sat, Jun

Re: [users@httpd] Small difference on error messages

Hi Kazuhiko, This change was in response to CVE-2019-10092. People who aren't upgrading httpd for some reason should still remove the path information from the error pages to prevent XSS. - Y On Thu, Jan 30, 2020 at 4:05 AM kohmoto wrote: > Hi, > > I have learned small changes in httpd would c

Re: [users@httpd] Remove Apache 2.4

Open Command Prompt as administrator and run "httpd -k uninstall" to remove the Windows service, then just delete the folder. On Wed, Nov 13, 2019 at 9:12 AM Mystic Fallout wrote: > Hello, > > I need to remove version 2.4 from my laptop as it is going to my daughter, > factory reset is not a pos

Re: [users@httpd] RE: Need some advice - thread safe php module

n_register_module > > _php_find_ps_module > > php_get_module_initialized > > php_module_startup > > php_module_shutdown_for_exec > > php_module_shutdown > > php_module_shutdown_wrapper > > php7_module > > /usr/lib64/php-zts/modules > > > &g

Re: [users@httpd] RE: Need some advice - thread safe php module

Sorry for the delay. As Rainer said, the system-wide packages include zts builds. For example (I have php-73): /usr/lib64/httpd/modules/libphp7-zts.so /usr/bin/zts-php - Y On Thu, May 23, 2019 at 11:19 AM Jeff Cauhape wrote: > Thank you! > > Jeffrey Cauhape – IT Professional III – Linux and Sol

Re: [users@httpd] RE: Need some advice - thread safe php module

We are happy with Remi's Repo: https://rpms.remirepo.net/wizard/ (Remi is a core PHP team member). You should consider newer versions of PHP (7.1+) as older version are no longer maintained, unless you use the version supplied by RedHat (since they are still updating it). - Y On Wed, May 22, 20

Re: [users@httpd] Fwd: Apache 2.4.39 update for Ubuntu 14.04

Ubuntu 14.04 is no longer supported, so the ppa you are using to install Apache is no long building new versions and Canonical is no longer releasing free security updates. If you pay for an extended support subscription, the version of Apache you will get will be maintained by Canonical and will c

Re: [users@httpd] Re: CVE-2019-0211/0215/0217

The distributions like RedHat, Debian, Ubuntu, etc. lock the version of their software packages when they release any specific version of their OS and they are responsible to backport any security or bug fixes. For example, you can see Debian's tracker here: https://security-tracker.debian.org/tra

Re: [users@httpd] Scalability: Single Server with Multiple SSL cert and keys

You could add a load balancer/proxy that does SSL termination in front of your web server (we use haproxy). If you are overloading your server, you might just need to get another one. - Y Sent from a device with a very small keyboard and hyperactive autocorrect. On Fri, Jan 25, 2019, 9:39 AM Ma

Re: [users@httpd] Reverse proxy stalling forever

I see that I can access your config.js from my browser, so httpd is serving that vhost. What does localhost resolve to and is prosody listening on that IP address. For example, maybe it is resolving to IPv6. Check with netstat -ln to see what IP prosody is lis

Re: [users@httpd] Reverse proxy stalling forever

The configuration you sent doesn't show your server running on port 5280/5281, so we can't compare the configuration and see what might be different. My number one suspect would be your firewall. - Y On Tue, Jan 22, 2019 at 7:40 PM Alexandre Garreau wrote: > Hi, > > I’m trying to make Jitsi Mee

Re: [users@httpd] Apache Fake Story?

Check the bugzilla thread for all the details: https://bz.apache.org/bugzilla/show_bug.cgi?id=63098 The short version is that HTTPD developers found that the bug can only be reproduced under specific conditions with debugging options turned on, which is not the way people usually run the server (wi

Re: [users@httpd] Port Forwarding Help?

If your ISP blocks port 80 and port 443, there is no way for you to host the site without a port number. If you can run a server on those ports, HTTPD would listen there and reverse proxy to the internal port the app is running on (5501?). You would not want to forward 5501 through the router becau

Re: [users@httpd] Doubts in apache-2.4.37

1. Don't know, should be easy to test. 2. Pipe. 3. I think this depends on which actual proxy module you are using. (There are parameters for controlling the buffer size and when to flush) On Mon, Jan 14, 2019 at 9:51 AM Hemant Chaudhary < hemantdude.chaudh...@gmail.com> wrote: > Hi Team, > > I

Re: [users@httpd] Apache 2.4 how to exclude certain GET requests from log using SetEnvIf

You need to specify an env= (or !=) On the LogFormat line. There is nothing magic about setting dontlog. - Y Sent from a device with a very small keyboard and hyperactive autocorrect. On Thu, Nov 15, 2018, 3:30 AM UniCapitals Hello to Apache Community, > I spent time with Apache docs and Google

Re: [users@httpd] Question about linking third-party GPL plugin to httpd

You should definitely talk to your own lawyer but in general, the license applies to distribution, not to your own use. https://www.gnu.org/licenses/gpl-faq.en.html#GPLRequireSourcePostedPublic - Y Sent from a device with a very small keyboard and hyperactive autocorrect. On Mon, Oct 29, 2018,

Re: [users@httpd] How to auto-select SSL certificate by hostname

There is no built-in way to handle this. You would need to list every domain name as a server alias for HTTPD to select the correct certificate. You could look at mod_macro so you don't need to rewrite the same configuration multiple times or a configuration management tool like Puppet/Chef/etc tha

Re: [users@httpd] Odd session cookies

It looks like someone trying to guess existing cookies and retrieve session information for existing sessions. Based on the cookie format, I am guessing the sessions are actually controlled by PHP - you can add some code to log IP address and cookie combinations and see if there is a patterns. I a

Re: [users@httpd] Renaming default page example.com to Data Portal

The server doesn't set the title, the application does by sending the html tag. Check with your application developer. - Y On Thu, Aug 9, 2018 at 3:46 PM Collins O. Adoyo wrote: > Dear Users, > > I have a web portal with the title of page showing a default name > example.com. I wish to rename

Re: [users@httpd] How to start perl script using FCGID module

18 at 12:51 PM Ananya Dey wrote: > Thanks for the response Yehuda Katz :) > Also, to run python scripts we need to use the WSGI module. So how do we > implement that with mod_fcgid? > > Regards > Ananya > > On Thu, Aug 9, 2018 at 6:50 PM, Yehuda Katz wrote: > >> T

Re: [users@httpd] How to start perl script using FCGID module

The difference between FastCGI and regular CGI is that regular CGI runs the program directly and FastCGI is expected to run continuously and handle requests. If you want to use FastCGI in Perl, you might want to start with a library like PSGI or a framework like Catalyst. - Y Sent from a device w

Re: [users@httpd] Help with SSL not working on Ubuntu 14.04

Hi Travis, I see you mentioned on StackOverflow that your question is resolved (extra virtual hosts in the configuration meant you weren't reaching to correct host). One recommendation based on the config you posted there: Don't use if it is critical to you that your site is available over ssl (o

Re: [users@httpd] Where to download HTTPD

Welcome to the mailing list - please don't hijack other people's threads. There is no official binary distribution for HTTPD. I recommend the builds from ApacheLounge. https://www.apachelounge.com/download/win64/ - Y On Wed, Aug 8, 2018 at 8:05 PM Eric Ngo wrote: > Hi > Can someone point me to

Re: [users@httpd] How to configure two frontend Apache mod_proxy failover cluster with single backend webserver

Hi Kamal, You could look into keepalived. This article is a decent (although old) guide: https://backreference.org/2012/04/25/load-balancing-and-ha-for-multiple-applications-with-apache-haproxy-and-keepalived/ (You can ignore all the parts about HAProxy) - Y On Tue, Jul 31, 2018 at 8:22 AM kamal

Re: [users@httpd] access control and Apache load balancing

You can filter based on the X-Forwarded-For header or use mod_remoteip. mod_remoteip will rewrite the remote address so you can use standard filters. To use X-Forwarded-For, you can do something like this: SetEnvIF X-Forwarded-For "^192\.168\.10\.\d+$" MY_PRIVATE_NETWORK1 SetEnvIF X-Forwarded-For

Re: [users@httpd] SSLCertificateChainFile

You can use a tool like https://www.ssllabs.com/ssltest/ to check the chain (and other settings) or you can use openssl (openssl s_client -showcerts -connect www.example.com:443). As you found, putting the chain in the certificate file should work. - Y On Thu, Jul 19, 2018 at 2:47 PM wrote: > I

Re: [users@httpd] Mutiple IP/Multiple SSL

You can definitely do this. For each VirtualHost, make sure you have ServerName set to the main web site and ServerAlias set for any additional name that the SSL certificate is good for. When a request comes in, Apache compares the SNI information in the request to the ServerName/Aliases that it kn

Re: [users@httpd] download

You can definitely try it on Windows 10, it shouldn't be worse than XP. The major difference since the last time you installed might be that there are no longer Windows binaries on the httpd website. [1] I recommend the builds from ApacheLounge: https://www.apachelounge.com/download/ If you haven'

Re: [users@httpd] .php3 files recognised but .php files not

I would suggest removing "" from your configuration. It is possible mod_php7 is not actually loaded and you have some other part of your configuration that is setting the handler for .php files. If you remove " wrote: > > > On 10/06/2018 18:53, Michael A. Peters wrote: > > On 06/10/2018 06:04 AM,

Re: [users@httpd] Rotate logs in apache-2.4.29

Is rotatelogs actually located in /bin/ ? On my REHL 7 system, it is located in /usr/sbin/ On Ubuntu 16.04, it is located in /usr/bin/ - Y On Fri, Jun 8, 2018 at 5:11 AM Hemant Chaudhary < hemantdude.chaudh...@gmail.com> wrote: > Hi All, > > I am trying to use rotatelogs in my webserver, but un

Re: [users@httpd] MySQL Java 10 and XQuery

You have the wrong mailing list. On Thu, Jun 7, 2018 at 1:57 PM Ted Hickox wrote: > Can MySQL work with Java 10 and XQuery? >

Re: [users@httpd] Installation Error in Apache2

ww.linkedin.com/in/deicool > > "Plant a Tree, Go Green" > > Make In India : http://www.makeinindia.com/home > > On Mon, May 14, 2018 at 12:26 AM, Yehuda Katz wrote: > >> Each configuration directive is valid in specific parts of the >> configuration. >&g

Re: [users@httpd] Installation Error in Apache2

Each configuration directive is valid in specific parts of the configuration. Look at "Context" in the manual: https://httpd.apache.org/docs/2.4/mod/directive-dict.html#Context For this specific case, https://httpd.apache.org/docs/2.4/mod/mod_ssl.html#sslrandomseed SSLRandomSeed can only be in the

Re: [users@httpd] Newbie - Apache as internet facing proxy for Windows/IIS backend .net app server?

stem, taking > advantage of mod_secs 'continuous passive security assessment' feature, and > anything else that makes sense. > > And thanks for the responses so far! > > *Charles* > > On Mon May 07 2018 13:56:56 GMT-0400 (Eastern Standard Time), Yehuda Katz >

Re: [users@httpd] Newbie - Apache as internet facing proxy for Windows/IIS backend .net app server?

g the work, I'd just rather not go down a rabbit hole > trying to do something that can/will never work. > > Thanks again, > > *Charles* > > > On Mon May 07 2018 13:37:36 GMT-0400 (Eastern Standard Time), Yehuda Katz > wrote: > > Certainly. I would start with

Re: [users@httpd] Newbie - Apache as internet facing proxy for Windows/IIS backend .net app server?

Certainly. I would start with the Reverse Proxy Guide: https://httpd.apache.org/docs/2.4/howto/reverse_proxy.html Come back here if you have any questions. - Y On Mon, May 7, 2018 at 1:32 PM Charles Marcus wrote: > Hello all, > > I just want to know if this is even worth my time trying to figur

Re: [users@httpd] Re: apachectl -k graceful

We have a server farm with a load balancer, but we still announce a maintenance window when we do major MediaWiki upgrades and take the site down for five minutes. The other thing we do is use PHP-FPM instead of mod_php. That lets us not worry about HTTPD restarts. - Y On Thu, May 3, 2018 at 9:32

Re: [users@httpd] Spurious access denied errors

At first glance, something in your browser is probably requesting the page /test. Since it doesn't correspond to any of your alias statements, it hits the DocumentRoot which you have denied access to. Is there a corresponding entry in your access log? - Y Sent from a device with a very small key

Re: [users@httpd] Probably small problem with SSL config

I would agree that you should start by turning on logging. Do you get a slightly different error if you use a different browser? Firefox usually gives more detail than Internet Explorer. Better not to use in configuration you write yourself unless you need it for a specific reason. If you use it,

Re: [users@httpd] SFTP JAIL

You should try asking in an OpenSSH forum, a forum for your operating system, or ServerFault. This list is for Apache HTTPD support. - Y Sent from a device with a very small keyboard and hyperactive autocorrect. On Jan 16, 2018 8:51 AM, "Rodrigo Cunha" wrote: > Hi everyone, > I have a problem

Re: [users@httpd] SSI/website rendering errors

LiteSpeed is a commercial web server all by itself and has nothing to do with Apache HTTPD. If you are running LiteSpeed, you aren't running HTTPD and we can't do anything to help you. - Y Sent from a device with a very small keyboard and hyperactive autocorrect. On Dec 14, 2017 6:07 PM, wrote:

Re: [users@httpd] Apache2 php not responding

The two log lines you posted show different client IP addresses. Which one of them is a request that you made that you know is legitimate? For the first line: The script not found message could be someone looking for vulnerabilities on the server and just not finding them. As far as the second li

Re: [users@httpd] Problems using olingo library

This list is for Apache HTTPD. Please ask about Olingo issues on an Olingo support list: https://olingo.apache.org/support.html - Y On Wed, Oct 4, 2017 at 11:51 AM, Bogdan Filip wrote: > Hello, > after trying to send an http request using apache olingo(version 4.4.0), i > encountered some probl

Re: [users@httpd] Offtopic: Apache Struts vulnerability: how to detect Struts & will DB encryption help

Post Apache Struts questions on the Struts mailing list: http://struts.apache.org/mail.html It also happens that you are wrong about where HTTPD runs. Plenty of people have it running perfectly well on Windows. - Y Sent from a device with a very small keyboard and hyperactive autocorrect. On S

[users@httpd] Debugging Intermittent 500 Errors

We have set of three servers running Apache 2.4. (version distributed with RedHat 7) behind a Kemp LoadMaster load balancer. The configuration is managed by Puppet, so all the servers have the same configuration. I put the configuration in a Gist to keep the email simple: https://gist.github.com/ya

Re: [users@httpd] Disable Autoindex module

The server might not start because removing the module leaves an invalid configuration somewhere. If you run httpd -t or look in the error log, it should tell you where the problem is. - Y On Fri, Aug 11, 2017 at 12:01 PM, David Wright - NOAA Affiliate < david.e.wri...@noaa.gov> wrote: > Dear Ex

Re: [users@httpd] Unreliable Fedora 26 installation using a kickstart file

I think you might have the wrong list... Sent from a device with a very small keyboard and hyperactive autocorrect. On Aug 11, 2017 2:56 AM, "fedora" wrote: > Dear listers > I never had such an unreliable installation as the one for fedora 26. I am > a long time user of fedora (at least since 2

Re: [users@httpd] Strange WebDAV behavior on MKCOL for 1 client only

i mismatch only happens when it connects > to Apache 2.4.4/OpenSSL/1.0.1e on Windows. What would explain the > difference? > > Todd > > On Mon, Aug 7, 2017 at 11:01 PM, Yehuda Katz wrote: > >> It looks like a problem with the implementation or configuration in the >> c

Re: [users@httpd] Strange WebDAV behavior on MKCOL for 1 client only

[client yyy.yyy.yyy.yy:61411] mod_dumpio: dumpio_out > (metadata-EOS): 0 bytes > [Mon Aug 07 14:48:34.518391 2017] [dumpio:trace7] [pid 3880:tid 1132] > mod_dumpio.c(164): [client yyy.yyy.yyy.yy:61411] mod_dumpio: dumpio_out > [Mon Aug 07 14:48:34.518391 2017] [dumpio:trace7] [pid 3880:tid 1132] > mod_dumpio.c(58): [client yyy.yyy.yyy.yy:61411] mod_dumpio: dumpio_out > (metadata-EOR): 0 bytes > [Mon Aug 07 14:

Re: [users@httpd] Strange WebDAV behavior on MKCOL for 1 client only

Try mod_dumpio or a packet capture to see what else is different about the request. - Y On Mon, Aug 7, 2017 at 3:53 PM, Todd Blum wrote: > Hello, > > I have Apache mod_dav running on Windows 2012. > > When a webDAV enabled application connects and tries to MKCOL on a > directory that already ex

Re: [users@httpd] WebSockets support in transparent proxy

What you are describing sounds like a reverse proxy to me. Are you using ProxyPass and did you try the same configuration with the ws or wss protocol (in place of http/https)? Can you post a snippet of your current configuration? - Y Sent from a device with a very small keyboard and hyperactive

RE: [users@httpd] Subdomain of a virtual host ?

affect from the order of the definitions? *Darryl Baker* Sr. System Administrator Distributed Application Platform Services *Northwestern University* darryl.ba...@northwestern.edu (847) 467-6674 *From:* Yehuda Katz [mailto:yeh...@ymkatz.net] *Sent:* July 17, 2017 11:28 AM *To:* users@

Re: [users@httpd] Subdomain of a virtual host ?

You can create it exactly the same way as any other virtual host. - Y Sent from a device with a very small keyboard and hyperactive autocorrect. On Jul 17, 2017 12:10 PM, "Darryl Philip Baker" < darryl.ba...@northwestern.edu> wrote: > I have a virtual host configured for george.example.com comp

Re: [users@httpd] Apache (2.4.26) changing permissions on passwd file?

Did you compile Apache yourself or use a package from somewhere? - Y Sent from a device with a very small keyboard and hyperactive autocorrect. On Jul 11, 2017 11:53 AM, "Kevin Miles" wrote: I wonder if someone can shed some light on this. I've been running Apache 2.4.7 on Ubuntu 14.04LTS us

Re: [users@httpd] [ANNOUNCEMENT] Apache HTTP Server 2.4.27 Released

H2 is threaded and prefork is not, so the performance is poor or it doesn't work at all. There was a discussion about this on the dev list: https://lists.apache.org/thread.html/bae472cadaeeb761b88bb4569cc0b7d87bc2dcb2fbcbf472d895f32e@%3Cdev.httpd.apache.org%3E Sent from a device with a very small

Re: [users@httpd] Apache on Mac Sierra 10.12.5

What does the error log say? What user and group is the httpd process actually running as? (`ps aux` should tell you.) - Y Sent from a device with a very small keyboard and hyperactive autocorrect. On Jul 2, 2017 4:12 PM, "Manal Helal" wrote: > I followed this guide to install apache on Sierr

Re: [users@httpd] allow deny file and multiple .conf question

Allow/Deny directives apply to whatever container they are in. A single file can onl.y ever match a single block and the individual blocks do not have any connection to each other. In general, .conf files are loaded alphabetically, but in your example, it shouldn't matter. - Y On Fri, Jun 9, 2

  1   2   3   4   5   >