Im trying to add ssl to my Ubuntu apache2 server it wants me to enter this command openssl x509 -req -days 365

lol, ok

you should only chmod the directory where it needs to write to.

but.. I don’t think the apache user is part of wheel, which means I would have to 777 it otherwise.. unless it is part of wheel

in that case, 777 would be required, yes
ONLY on that directory
also, best make sure that directory is not accessible from the documentroot
for obvious reasons.

security isn’t that big a deal in this case – the server is ran inside a vmware client on my windoze laptop. I am setting this up so I can develop while I travel

security should never ve neglected.

heh. I have my firewall setup so that no incoming traffic can access port 80 on any IPs from my machine – so I do have some security

suit yourself

what do you mean by the directory is not accessible from the dicumentroot?

it’s not a subdirectory.

oh, of public persay ?

if it is, consider putting Deny directives
not a subdirectory of %DOCUMENTROOT

this is a great idea…..

what is?

has this and or that permissions per default.

I don’t see where you’re going.

and give default permissions you want to have, and then in the Vhost context you don’t have to define it explicitly for each vhost.

oh.
mildly useful, I guess.

Yeah.. probably.
Well.. it was my first try for today.

teehee
jMCg++

^_-
I’ll go play some more with mod_proxy_fcgi and lua…

Yay! no more errors in my apache log – but… that doesn’t mean my ruby is working =(

you’re getting there

cgi? fcgi? mod_ruby? webrick? someothersuck?
[or the soon to be mod_proxy_fcgi ;]

fcgi
and ror

mod_fcgid

mod_fcgid is like mod_fastcgi, but uses a new process management strategy, which concentrates on reducing the number of fastcgi server. or at http://fastcgi.coremail.cn/. See also http://paul.querna.org/journal/articles/2006/01/01/using-mod_fcgid-for-ruby-on-rails-applications

change this error message for exceptions thrown outside of an action (like in Dispatcher setups or broken Ruby code) in public/500.html

you read the last link thingy?

I’m sorry -I’m using fastcgi – I thought fcgi was a short hand for it

fcgi

fcgi is resident like mod_php

fastcgi

fastcgi is http://www.fastcgi.com/ or see mod_fcgid, which is more up-to-date

some one here with apache,access to access.log,nc,perl and can send this http://cxg.de/?id=xgJDbHrWqOCPstX by using “perl script.pl | nc webserver port” and say me the access log entry?
nevermind, ive access to the access.log

wow

I had figured that if I accessed the machine in my lan from its DNS name, it’d be treated as an incoming connection from the internet

change this error message for exceptions thrown outside of an action (like in Dispatcher setups or broken Ruby code) in public/500.html
anyideas about this?

is it impossible to make a negated/inverted LocationMatch?
I want to match all urls NOT containing some regex

nope

this error message is really unhelpful, and apache log says everything is a-ok

well, how do I do what I need then?

you can’t do it with any of the *Match directives. the only thing is with mod_rewrite
and do some kind of rewritecond
most likely against the %{REQUEST_URI} variable
rewritecond

rewritecond is http://httpd.apache.org/docs/2.0/mod/mod_rewrite.html#rewritecond

rewriteguide

http://httpd.apache.org/docs-2.0/misc/rewriteguide.html http://httpd.apache.org/docs/misc/rewriteguide.html http://www.engelschall.com/pw/apache/rewriteguide/ http://httpd.apache.org/docs/2.2/rewrite/rewrite_guide.html http://rewrite.drbacchus.com/ http://httpd.apache.org/docs/1.3/misc/rewriteguide.html

well ok, thanks

could this be my problem? [warn] (22)Invalid argument: Failed to enable the ‘httpready’ Accept Filter

hm, why likes apache the NUL string inside the request header?
°character
hm, someone running the lastest apache release and can test a request please?
(lastest = development branch)

could this be my problem? [warn] (22)Invalid argument: Failed to enable the ‘httpready’ Accept Filter

RewriteRule ^/ao/(\d+)/([^.]+)\.(.*)$ /ao/rk$1.php?nick=$2
Is that RewriteRule incorrect?

hi, is it possible to redirect to another url only if the original request url matches a certain pattern and is missing (404)?

errordocument 404 in location container
LocationMatch that is (for the pattern part)

ah, thank you.

When I try /etc/init.d/apache2 start it returns this error: “apache2: Could not determine the server’s fully qualified domain name, using 127.0.0.1 for ServerName”

fqdn

fqdn is http://wiki.apache.org/httpd/CouldNotDetermineServerName

^^
this is a warning. Apache will still start.

what?
and that didn’t change anything
same warning

then you did not understand the factoid.
read it again.

apache2 starts with no errors now but telnet 127.0.0.1 80 and telnet localhost 80 returns nothing

what does netstat and lsof tell you , then?
lsof

lsof is your friend! lsof -i:80 to see what’s using port 80. You may need to run lsof as root on some platforms

netstat

netstat prints network connections, routing tables, interface statistics, masquerade connections, and multicast memberships. Use netstat -an grep -w 80 to check if port 80 is in use. (On linux, you can use netstat -pan to see which program uses the port, or -ltpn.) (For Windows use -ano to show the state, PID, and connection in IP not name format, or -abn).

2650 localhost:http
that seems like the pertinent line

no, you need LISTENING lines.
pastebin the last 30 lines from your error log
apc

Try using http://apache.pastebin.ca – It’s a good pastebin, and is even set up to highlight Apache ’stuff’.

http://apache.pastebin.com/mf3c875f

so it seems to be running
what port are you using, exactly?

i believe i am using port 80 and port 443
i set those two up to forward

and find your Listen line, please
paste your Listen ilnes here.

i dont think there is a listen line in linux

no in the httpd config files, dummy
Listen

Listen tells apache what IP address and port to listen to. See http://httpd.apache.org/docs/2.2/mod/mpm_common.html#listen or see binding.

lol
Listen 80
listen localhost:80?
would that be better?

no, Listen 80 is correct.
are those logs recent?

yes

if so, try opening up your page with http://localhost

doesnt load
i tried telnet localhost 80 too and that returned nothing

is there any error message on the command line when you start apache manually with apachectl start?

no

try to stop it, then start it again, please

done
didnt change anything

and of course, there is a corresponding entry in the error log?
ok, pastebin your config file.

http://apache.pastebin.com/m6cb79ea5

Include /etc/apache2/vhosts.d/*.conf
setting the servername outside your vhosts is a bad idea.
let’s see the output of httpd -S

where do i run httpd -S

in a terminal.
where else?

lol
i know that
command not fouund

you might need to specify the full path
default layout

Pop along to http://wiki.apache.org/httpd/DistrosDefaultLayout for an idea on where the main distros place Apache files.

gentoo isnt in that list

you’re right
I have no idea where gentoo places the apache binary files

whats weird
is i had this working when this computer was hooked up to the SAME router except on a wired connection

oh you’re the wireless guy?

haha
yes

*shrug*
sounds like a networking problem to me.

hmmmmmmm

fajita be frank

be frank is )letting your frustrations out all at once

YES

be niq

mmm, tea

:P
heh, evening friends

aw…

Yeah,… isn’t it a bit past your bedtime… :p

HEADSHOT!
boom!

HEADSHOT!

heh

be chipig

I hate character sets. Bane of my existance.

heh

still are.
unicode–

jibba jabba

aww

everything-else–

quit yo jibba-jabbin, foo!
chipig :[
im in ur locale, changin ur charsetz ;p
im in ur pad, cleanin ur digz ;p

:o
heh

you messy slob
haha, yeah
you know you like :p

i do.

dirty boy!

servertokens cia.vc

Couldn't get a useful value for http://cia.vc

figures

can someone tell me what the error - rootpath/.htaccess: order not allowed here means?

order context

directory, .htaccess

order override

Order may be used in .htaccess files if AllowOverride is set to Limit

^^

so does that mean I'm most likely getting this error because AllowOverride isn't set to Limit?

that's very likely.

thanks, that does seem to be the issue. However, AllowOverride All works while AllowOverride FileInfo Limit doesn't seem to do it
but I read that AllowOverride All is a securitiy issue

another directive might be blocked. Check your error log.

the error log doesn't say anything about another directive being blocked. However, I have the AllowOverride directive in both within the context of my web path and within the web path within Virtual Host tags. Could that be causing a conflict?

context

I believe it's in the proper context - directory web-root. However, AllowOverride All works while AllowOverride FileInfo Limit doesn't. I'd be fine with that if that's secure, but I'm not sure if it is

Howdy all

oh no

Glad to see you too, thumbs
:P

with AllowOverride FileInfo Limit, what does the error log say?

it says rootpath/.htaccess: order not allowed here

allowoverride

AllowOverride tells Apache what things you wish to permit in .htaccess files. See http://httpd.apache.org/docs/2.2/mod/core.html#allowoverride

will take a look. thanks

help please, i'm having a devil of a time with apach2 and htaccess

Whoops! That's not the name of a module.

how about you ask your question?

i have googled, man paged, and attempted for 1 week to set up .htaccess for directory control to no avail
how do I appropriately set up .htaccess in apache1
sorry apache 2

it depends on what you want to do in your htaccess file.

i created the .htaccess file
it's simple

it depends on what you want to do in your htaccess file.

just require valid-user

Hey guys - I'm a bit stuf with apache 2.2. I want to use mod_rewrite, but it doesn't appear to be in the modules direectory. Nothing is! :/

AuthType basic

auth

Take a look at http://httpd.apache.org/docs/2.2/howto/auth.html or http://wiki.apache.org/httpd/PasswordBasicAuth for some basic examples!

AuthName "Section Name"
AuthType Basic
AuthUserFile /full/path/to/.htpasswd
Require valid-user
sorry

You will be!!

Do you have "AllowOverride auth" set in httpd.conf for the directory that contains your .htaccess?

yes
i'm using virtual hosting also

so install it.

what does 'apachectl configtest' say?

Erm...
Since when?

Since when is 'Include' a syntax error?

what distribution are you using?

.... I run FreeBSD

since when what?
in order to load/use a module, you need to install it first. Or compile it statically.

Since when did it come separately, I could have sworn it was 'just there' previously

well is the module present in your modules directory?

It is "just there" in my distro. However, I run Fedora 7. Maybe you should check the documentation for FreeBSD, or a FreeBSD help channel for assistance with FreeBSD packages?

Packages can suck my dong.

i don't have apachectl installed

OK, if I've got to install it, where the hell do I get it? Is it in the httpd tarball?

You're obviously attempting to use them, since you expect files to 'just be there'
You compile host it, and it will be one of the compiled files.
make install may even put it in the right place for you.

double checking my configuration files

meow!

meow is a small Cat's BIG roarrrrr

I passed --enable-rewrite when I compiled it :/

meow, megaspaz.
beware of lion cubs.

:o
..
perhaps that means it's compiled in statically.... if you didn't do --enable-so that is...
in which case you wouldn't use LoadModule... you'd just do rewrite directives...

Well, when I try to start it, it says RewriteEngine isn't valid in the conf file...

ah hrm...

That's why I went to enable the mod

so you're compiling apache right?

Yup

./configure --prefix=/usr/local/Apache2.2.X --enable-so --enable-mods-shared=all --enable-ssl --enable-proxy --enable-proxy-connect --enable-proxy-ftp --enable-proxy-http --enable-proxy-ajp --enable-proxy-balancer --enable-ldap --enable-authnz-ldap --with-ssl --with-ldap --with-mysql --with-mpm=prefork --enable-exception-hook
that enables most modules...
as DSOs

Blimey

change the prefix and get rid of the extra enables if you don't want to use them
i get pretty explicit
but rewrite is handled in the --enable-mods-shared=all line
anyhoo... it's at least a guide...
oh unless you're planning on downloading the mod_dbd mysql driver, definately dump the --with-mysql

:o

wtf? mysql support in apache? What for?!

just because
*shrugs*

Yeah, but what /for/ ?

allows apache to talk directly to mysql
no php
needed
for example

because it's awesome?
why not!?

or for using some things like db driven dynamic vhosts

fajita karma mysql

mysql has karma of -5

wtf

bucket to identify that AuthName is allowed in /home/*/public_html?

megaspaz, yeah it works well
for my 2000+ vhosts

but there's a whole bunch of db drivers that mod_dbd supports
*shrugs*

Eurgh, nah. Think I'll leave database stuff out of my web java server hosting :/

fajita ricer

what?

heh
that link that used to be there has changed content as well
it was funny... always put a smile on my face...
:/

yeah
I miss funroll-loops
I should remirror
FOR TEH INTARNET!

+1

\o/

purr

o.O

Poke!

what the fuck!?

! is the "not" or excitement

megaspaz http://www.ilovemeow.com/img/mc10188.jpg
fucking intarnet

haha

that's a fat cat :p

jabba the fat :p

hehe

haha omg
this is so wrong...
.... and yet I can't stop catting!

Invalid command 'Order', perhaps misspelled or defined by a module not included in the server configuration

http://www.ilovemeow.com/img/wizard.jpg

WTF?!

megaspaz, that's so wrong... for so many reasons... :P ~

yeah, if you're using apache2.2, there's been a change to the auth module name
mod_access

mod_access is http://httpd.apache.org/docs-2.0/mod/mod_access.html or http://httpd.apache.org/docs/mod/mod_access.html Called mod_authz_host in 2.1 and later
mod_access is a href="http://httpd.apache.org/docs-2.0/mod/mod_access.html"http://httpd.apache.org/docs-2.0/mod/mod_access.html/a or a href="http://httpd.apache.org/docs/mod/mod_access.html"http://httpd.apache.org/docs/mod/mod_access.html/a Called mod_authz_host in 2.1 and later

:o
fajita ps3?

megaspaz will never get one of those! what a looser!!

:O!
haha, so true
poor bastard

already got one :P

yeah
but what'd you have to sacrifice?

your family

your morality?

So I need to LoadModule it, megaspaz ?

yes

yeah, with the right module name alias

fajita, family?

bugger all, i dunno, daveman

haha

is it still access_module?
but a new filename?

no
look at fajita's reply

I told you to load that module two horus ago.
I assume you ignored me

There WAS no module to load!

there is.
mod_access

mod_access is http://httpd.apache.org/docs-2.0/mod/mod_access.html or http://httpd.apache.org/docs/mod/mod_access.html Called mod_authz_host in 2.1 and later

err
mod_authz_host

mod_authz_host is http://httpd.apache.org/docs/2.2/mod/mod_authz_host.html provides Order and used to be called mod_access

You're really not listening
megaspaz is helping, you are being condescending. _

spazcat :o

If I have provide Cache Control headers like Expires header or cache-control-directive = max-age for 302 redirection where in the httpd.conf do I specify them?
morning fajita.

spaz, you ever go on vacation?

yeah
went on one in may
went to .uk and met up with noodl and pctony

Anywhere nice in the UK?
I was in London today..

yeah, i stayed for like 5 days in london
i thought it was cool
wouldn't want to drive around in london though... looked pretty fscked

Driving there sucked
hah

one basic question, how are headers which needs to be returned added ?

megaspaz :o
megaspaz, would you drive in manhattan?
:P

nope
i heard the subways in ny were good enough
which is what i did in .uk
anyways

:p

manhatten traffic = teh suk

yeah well
get used to it!
:P
NOOBS
megaspaz, so was pctony as much of a jerk in real life?

no
:/

Supaplex
megaspaz, haha, disappointed, were we?
Supaplex, nasty

Daveman--

sorry :P

what the fuck?
asshole.

is this irc connected to reality?

fuck no
this is freenode :P
fajita, freenode?

freenode is usaully pretty forgiving but not with tor cloaks

%-)

could be better
needs more glines

I agree.

i have a dyndns.org accout and i want to learn how to get it to mirror to webpages that i make on my buy dedicated ip address.
is there a howTo or documentation for setting-up / configuring Apache for DNS?

dyndns just sets up the mapping of "hostname.com" to an IP address

servername

servername is http://httpd.apache.org/docs-2.0/mod/core.html#servername or http://httpd.apache.org/docs/mod/core.html#servername

oh man. is this dejavu?

he needs to learn a lot more first

set your servername to your dyndns.org hostname.
perhaps
pardon my bad mood

you need to set up a HTTP server (apache) on your local server. set up portforwarding on your router
and set dyndns to map your hostname to your IP

thanks thumbs
okay this has all been done
the 3rd step has not, by the way
however, on my DNS account, i have given it my ip, so perhaps it is setip.

yes

router

In order to access your web server behind a NAT router, you must forward the port apache is listening on to your internal IP. Then you can access your site by pointing your browser to http://your external IP here:port. If your ISP blocks port 80, see 'port 80 redirection'. Instructions on how to forward a port using most common routers can be found at http://portforward.com.

anyways, i will look into learning a lot more first
i am familiar with portforwarding and starting the apache2 server
where does a ServerName directive get specified?

in the httpd.conf

cool

vhost examples

Look at these for examples http://wiki.apache.org/httpd/ExampleVhosts : http://httpd.apache.org/docs/2.2/vhosts/examples.html

^^

cool, thanks guys
these are Virtual Hosts, i thought that is not what i want for dyndns?

yes, you can set up one virtual host.
or you can simply set the servername in the main config.

cool, that's what i want to do

however, if you have existing virtual hosts, you must alter one, or add another.

or at least try to do
i have nothing so far.

you're starting from a blank config file?

not blank, but virtually default from the generic install

the generic 2.2.4 config has vhosts.
default layout

Pop along to http://wiki.apache.org/httpd/DistrosDefaultLayout for an idea on where the main distros place Apache files.

i'm still running version 2.0.58
i installed mine via the package with my linux distro, it's not exactly matching the default install config file locations. but i'm learning.
which example can i expect to use if i am just going to try a simple setup consisting of one site on one dyn virtual host on one ip address?

the simplest vhost instance from the factoid.

is that on the examples page that fajita posted up above?

yes
vhost examples

Look at these for examples http://wiki.apache.org/httpd/ExampleVhosts : http://httpd.apache.org/docs/2.2/vhosts/examples.html

yes, i'm looking at that page still, it's just so over my head and Greek to me. :-|
sorry, i'm too n00b for all this eh...

I'm trying to add ssl to my Ubuntu apache2 server; it wants me to enter this command, "openssl x509 -req -days 365 -in server.csr -signkey server.key -out server.crt", but then I get "server.csr: no such file or directory" .. and the guide I'm following doesn't say much in that area... can anyone point me in the right direction?
erm. Nevermind. Always helps to follow /every/ direction

yup. that's technology.

Evening. What is the best host way to allow http and https to the same website with the same settings in VirtualHost..?

you'll generally have some differences (related to ssl)

the preferred way is to make two separate vhsots.

ack
That's what I have now, but it's a pain to try and keep both up to date when I'm changing stuff all the time.

include

include is http://httpd.apache.org/docs/2.2/mod/core.html#include and can take a file, directory, or shell wildcard as an argument.

I was hoping there was a way to cascade settings.

mod_macro

mod_macro is an Apache module written by Fabien Coelho that lets you define and use macros in the Apache configuration file. or http://www.cri.ensmp.fr/~coelho/mod_macro/

I'd try include first.

that gets applied to both?

it's news to me if you can

rats
I mean seperate but overlapping virtualhosts

which makes no sense now

just use include files.

Okay.

is there anyone that is willing to give this n00b a clue :-|
would anyone be willing to put into layman terms where i could read on how to use dyndns to setup a simple webpage with apache?
or is this a situation where i should contact dyndns directly to learn how?

it's easy

i'm sure it is, but i have no idea where or how to start. i have apache installed and my dyndns account started.

ServerName foobar.dyndns.org DocumentRoot /path/to/docroot /VirtualHost

before that, you need Listen 80 and NameVirtualHost *:80

is that a script i but into my httpd.conf ?

it's not a scripr. It's a series of directives.

where do directives go?

in the config file.

so can i just copy and paste those series of directives which you just typed, and paste them into the appropriate places in the config file, and see if anything works?

sure

Thanks guys. Include tested and working.

you will need to put them on a separate line
each directive, anyway

hi, i've tried to disable apaches trace method using mod rewrite but it doesn't seem to work. anyone got any ideas? is it my configuration?

i changed Listen 8080 to Listen 80, yet i see no place for NameVirtualHost

namevirtualHost context

server config

^^

what does that mean.

what are you trying to achieve, exactly?

to disable the trace method

it means that you can only use that directive in the server config.
context

context is http://httpd.apache.org/docs/mod/directive-dict.html#Context http://httpd.apache.org/docs/2.0/mod/directive-dict.html#Context http://httpd.apache.org/docs/2.2/mod/directive-dict.html#Context

^^
trace

trace is a standard HTTP method. Also ask me about "TRACE hype" or http://schroepl.net/cgi-bin/http_trace.pl

i know its standard

um, I'm not sure then.

i want it disabled

I've never fiddled with it

anything. but specifically just have like a simple html file or whatever kind, and be able to host it on apache and redirect to it from my dyndns dave.homeip.net account.

you need to understand how vhosts work first.

i want to just start learning about making webpages, or hosting, networking, etc.
okay, so back to the en.wikipedia.org/wiki/DNS and read up on it?

http://rafb.net/p/tSFuIz25.html

the vhost examples are a good start
each vhost represents a server.
which can be reached with a servername
vhost

vhost is http://httpd.apache.org/docs-2.0/vhosts/ or http://httpd.apache.org/docs/vhosts/

which vhost example would be the most simple one to learn from
or start with

the first ones.

ah yes, and there are the series of directives which you gave me in the first example

i doubt you want a vhost anyway

thanks.

use a CNAME RR?

why not a vhost?

well im assuming you have one java server hosting only

his config has vhosts already set up, most likely.

i don't want to do anything fancy yet, i just want to learn how to use it
i am just trying to play with apache on my home desktop and make a simple webpage redirected from the dyndns name. is that a bad way to start learning?

i would configure the domains zone file to redirect via a cname resource record to the dynamic dns A pointer

his dyndns.org hostname already points to his external IP
no need to complicate his life

wow reading that gave me a headache, i'm so confused

heh :p

he needs to have apache respond to $SERVERNAME. That is it. Vhosts or not.

sorry, i am just a total n00b trying to play frisbee with an atomicbomb it seems. :-|

yes
it's the only way one learns though, keep at it

so i am just going to blindly plug the series of directives from the first example into my config file.
thanks force.
old dog trying to learn new tricks here.
anyone know the default location for a file such as www/example1 on a gentoo linux apache install?

default layout

Pop along to http://wiki.apache.org/httpd/DistrosDefaultLayout for an idea on where the main distros place Apache files.

^^

Hi

ok thanks

how can I have a directory protected with a password? please link me to a "tutorial".

auth

Take a look at http://httpd.apache.org/docs/2.2/howto/auth.html or http://wiki.apache.org/httpd/PasswordBasicAuth for some basic examples!

^^

thanks friend.

DocumentRoot [/var/www/localhost/htdocs/example1] does not exist’ and ‘apache2: Could not determine the server’s fully qualified domain name, using 127.0.0.1 for ServerName’. any tips?

create the documentroot.

i did. i can open both of them in firefox and view them just fine.
must the document root have a file extension?

its a folder?

ooohhh
right
wow cool, that worked!
what about the ‘ Could not determine the server’s fully qualified online domain registration name, using 127.00.1 for ServerName
message.?

If you want help with a message from Apache, report it exactly. Don’t paraphrase.

hey, fajita mate, chill

hi

hello

HTTP/1.1 404 Not Found
Content-Length: 1635
Content-Type: text/html
Microsoft-IIS/6.0
X-Powered-By: ASP.NET
7
close
I wanted to understand this HTTP Headers

davo put un i ServerName in the conf

davo, fajita is a bot xD

X-Powered-BY means

fqdn

fqdn is http://wiki.apache.org/httpd/CouldNotDetermineServerName

^^

close

thumbs, sorry, could you help me with htpasswd?

in my vhosts conf or the httpd.conf ?

It should be Keep-Alive

oh okay thanks
so should i put my dyndns site name there?

yes

ok cool.
ServerName is set to my dyndns URL address.

apache is trying to execute any file as CGI, and i cant figure out why.

scriptalias

scriptalias is http://httpd.apache.org/docs/2.2/mod/mod_alias.html#scriptalias or Don’t forget to load mod_cgi

^^

can i explicitly add something in .htaccess to say “everything under this directory is static”?

does the ServerName belong in the httpd.conf or the vhosts.conf?

Options -ExecCGI
in the vhost block, if you have one

the only thing in my httpd.conf that says vhosts is ‘Include /etc/apache2/vhosts.d/*.conf’

i know this should be simple, but what causes a 403 for apache?
i have cgi disabled now, and the file is o+r

rewriterule context

server config, virtual host, directory, .htaccess

rewriterule override

RewriteRule may be used in .htaccess files if AllowOverride is set to FileInfo

holy cow it worked!
thank you all sooo much!

you’re welcome

especially you thumbs and Sconk , etc
woohoo!
oh man this is awesome
i love it
okay i gotta take a break from the room before i start babbling
bye all

fill us in

Trying to transfer four domains from netsol to godaddy
turned off domain protect, gave godaddy the auth codes from netsol, etc etc
godaddy says I now have to get netsol to authorize the transfer
netsol says the auth code was supposed to do that
godaddy says netsol still has to approve it even after issuing the auth code
….argh.

ouch

Smack!!

fajita, be quiet.

shutting up

i wonder how long that lasts. :P
ouch

Smack!!

haha :P

if a file has o+r mode, why would i get 403 accessing it?

what does the error log say, exactly?

/home/ironfroggy/ironfroggy.com/projects/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable, referer: http://www.ironfroggy.com/projects/coroutines/

(13)

(13) indicates a file permissions problem. Make sure that Apache can read the file(s) and directories being accessed. See also http://wiki.apache.org/httpd//13PermissionDenied

^^

OK, so the transfer worked

but why is failing because it cant read .htaccess?

after I responded to some emails a supervisor sent me

kudos to ironfroggy for having the errorlog handy.

….for 3 out of 4 domains

i cant have an .htaccess in that directory, its a darcs repo

and of course, now godaddy is trying to sell me everything from web hosting to “private whois service”

it’s failing because it can’t read the htaccess file.

such bullshit.
I need a real domain registrar.

cheap is real enough for me

solution: make sure apache can read it, or rename the file.

there is no htaccess file.
i cant have one.

apache is saying there is
apache is not lying

it is.
im looking at the file listing right now.

ls -al

yup.

yup. is now, as always

.., .., and coroutines directories.
thats it.

what about /home/ironfroggy/ironfroggy.com/projects/ ?
is that readable?
namei

namei follows a pathname until a terminal point is found. Use namei -m /path/to/files to check the permissions of the file and the path up to it. See http://sial.org/howto/debug/unix/parsepath if your system doesn’t have namei

its readable to all

every single segment?

segment?

segment is /seg’ment/ vi. To experience a {segmentation fault}. Confusingly, this is often pronounced more like the noun `segment’ than like mainstream v. segment; this is because it is actually a noun shorthand that has been verbed.

/every/single/path/segment

yes

how are you listing the content of the directory, exactly?

it’s MUCH SIMPLER than stracing apache…

come again?

ls -la path/to/directory

strace (for this issue)

well ironfroggy is not reading the output of namei properly

forget I said anything about strace.

Supaplex, I didn’t have anything matching i said anything about strace

pastebin the output of namei

of which path? the directory apache things an htaccess is in?

no. The output of namei -m /home/ironfroggy/ironfroggy.com/projects/

Good day room, I am just trying to make a LOCAL server for testing websites on my computer. I would like to map the IP to localhost or 127.0.0.1 or a relative IP. I have been trying to do this but seem to be having problems. Am I supposed to be using virtual hosts? I did it on Linux, but I have windows now (I have a wife who ‘needs’ it) and am having problems making it work. Thanks for the help…)

vhost examples

Look at these for examples http://wiki.apache.org/httpd/ExampleVhosts : http://httpd.apache.org/docs/2.2/vhosts/examples.html

^^

Thanks!

http://deadbeefbabe.org/paste/5683

you’re missing o+r on /home/.maybelle/ironfroggy

that should be readable?

and o+x on projects
you’re missing o+r on /home/.maybelle/ironfroggy
and o+x on projects

im not used to the permissions above a file stopping me from reading the file

so chmod those accordingly

also, wouldn’t o+r on my home directory be a security issue?

if you need to serve content for apache, it needs to be done
you might as well chmod o-rwx on your private files.
do those two steps, and it will work.

i serve from my other domains without issue

ok fine, ignore me.
it won’t work
apache needs to be able to read the files
so it needs read + execute (traversal) permissions

i understand what you are saying

end of story.
then do it.

but i dont like not knowing why something works or doesnt. knowing why means i can figure out the next problem easier, instead of asking you again.
so what i am not understanding here, is why does it need to look in my home directory at all?

because without the r and x permissions, apache cannot acces that directory.
it needs to start from /
this is unix permissions 101

so you are telling me no unix host process can read directory foo/bar/ without reading foo/ ?

since apache runs as a unpriviledged user, you need to grant access to your files and directories
correct.
no
it cannot.
you NEED read and execute access to foo in order to get to bar
as a matter of fact, this is implemented to prevent traversal attacks

incorrect.

IIS is particularly suscetible to those.

i am not a unix novice. i simply dont use apache normally.
http://deadbeefbabe.org/paste/5684
can you explain what you say in context of that shell output?
i am seeing completely contradictory behavior to what you are saying.

apache implements a different restriction; It’s built as such to prevent directory traversal exploits

this is unix permissions 101

so that implied it wasnt apache specific, but a rule of all unix processes
thats what i was confused on, knowing that not to be so outside of apache.

i.e. if a parent directory does not permit listing to the apache user, then a subdirectory which does permit it will still be denied.

Cheap is nice, but not enough

ok, I am tired, and I worked all night

ok
thank you for the help
i dont need anything from them once the domain is registered.
i have the entire path +xr with the 403 still shining brightly

is the error still the same?

I suppose I don’t, but getting rid of all the spam would be worth a couple extra bucks to me

hmm… now i get “Options ExecCGI is off in this directory: /home/ironfroggy/ironfroggy.com/projects/coroutines/cosched.py, referer: http://www.ironfroggy.com/projects/coroutines/
i suppose that means it thinks it should execute the file, but it should not.

Options +ExecCGI

Options +ExecCGI allows a directory to execute CGI scripts.

its not cgi
i dont want it to execute this

your script probably has a shebang line.

yes

so remove it.

you’re kidding me? apache wont let me host it without trouble?
i cant.

well

thats the file. thats what it is. its a repository of a project. without the shebang, the file is broken.

there is probably a handler for .py
you could remove the handler.
removehandler

removehandler is http://httpd.apache.org/docs-2.0/mod/mod_mime.html#removehandler or http://httpd.apache.org/docs/mod/mod_mime.html#removehandler

i dont have one. maybe the global settings do.

they most likely do.

i would think, if i say “-ExecCGI” it should just serve the file.

you could try that
Options override

Options may be used in .htaccess files if AllowOverride is set to Options

can i remove _all_ handlers for a certain directory?

have a small quick question about network masks

no, only one at a time.

is it 192.168.0.0/16 to designate all of 192.168?

are you saying i could try the -ExecCGI thing?

yes.
if the admin allowed it.

i have -ExecCGI the entire domain

do you have a scriptalias?
also, are you applying this in htaccess or the main config?

what i dont want is for other files that happen to be added to the repo to suddenly break a pull from it, because apache tries to execute them.
i only have rights to htaccess.

understood.
now, make sure your htaccess file is recognised.
garbage

try putting junk in your htaccess file. If it’s being read, you will get an Internal Server Error when accessing that resource.

if the directive is not allowed, you will get a 500.

it is. the -ExecCGI is definately seen, because without it apache does execute the file, which fails, not being cgi.
(it doesnt output anything)

ok then.

the RemoveHandler works

it usually does.

but i feel its fragile, since other handlers could break other files that slip in.
i am surprised if there is no way to just say “this directory and everything in it is static. period.”

because of the nature of CGIs, that is not possible.

i am not sure i understand why

of course, Options -ExecCGI does exactly that

since what im trying to tell apache is “i have no CGI scripts, at all.”

don’t load mod_cgi then

if it does that, then why does it still think it should execute things?
i cant control that, Roobarb

well, I was gonna say, unless that directive is ignored and the handler kicks in

and i have a cgi script or two elsewhere, but not in this directory.
the directive isn’t ignored
its what apache was complaining about when the handler tried to execute my file.

either way, the handler has precedence

so the directive was effective in that way.
understood.
can i add a handler for _all_ files and is there a handler that just servers staticly?

a handler is tied to one of many extensions.

can i say *?

as such, removing it requires specifying an extension. No, * is not valid.

ok
well, i dont imagine my project will have any other files apache would think are cgi scripts
i just dont like the idea that it _could_ break

tell the admin to fix the Options, then
tell him to remove all handlers for your directories
since he knows which ones are enabled, he can easily remove them.
that would be the safest move.

its probably global settings on all accounts

Removehandler /directory

removehandler context

virtual host, directory, .htaccess

ah, i see.

it’s a matter of him being willing to do it.

hm is a company with many, many accounts to manage. i dont know if they do specific settings like that.

try your luck.
explain the issue it creates for you, and I’m sure they’ll apreciate that.

Can anyone help? Apache is telling me that i’m forbidden to access localhost, i’m the system admin and i installed Apache.

what does the error log say, exactly?

One moment please.
client denied by server configuration: C:/Documents and Settings/User/My Documents/Apache/

client denied by server configuration

client denied by server configuration is http://wiki.apache.org/httpd/ClientDeniedByServerConfiguration

^^

hi

hello, gabber.

….

Aha! Thanks thumbs.

no problemo

how common is it that other http servers ignore the CRLF stated in the http protocol spec and use LF instead ?
sorry if this is offtopic.. I couldn’t find a #http or similar

hi. what is the root directory on an apache server running on a Mac? (MAMP)

serverroot

serverroot is http://httpd.apache.org/docs/2.2/mod/core.html#serverroot

default layout

Pop along to http://wiki.apache.org/httpd/DistrosDefaultLayout for an idea on where the main distros place Apache files.

^^

thanks

Hi

hi leo

login into new push

call to undefiend function mysql_connect() in /var/www/db.php on line 2

this is apache…check this in concern channel…
Any way restart mysql and give a try

how can i do that please
aha,ok

look at the topic dude
We’re still not ##php.. duh

else check the database and username password

*
To prove that you're not a bot, enter this code
Anti-Spam Image

Comments are closed.