Tag Info

New answers tagged

1

I have not used PHP, but I've used FastCGI to accomplish a similar thing with other lanaguages, and that's the approach I'd recommend, especially since php 5.3.3 and newer has an implementation built in, PHP-FPM. You can find documentation on how to use this on the official PHP website: FastCGI Process Manager (FPM). This has many features, but the most ...


-1

You can't. Apache runs under a low-privilege account — typically called apache or httpd — on purpose. The only way Apache could be configured as you propose is if it ran as root, which would make Apache a massive security risk. You will have to use the OS's suid bit bit feature to get the effect you want. You don't say which OS you're using; it matters. ...


0

-That is if you are using IP addresses will use: HostnameLookups Off ...or if you use a domain name you will use: HostnameLookups On # Here below some sample of the definition to use... Global configuration ServerRoot "/etc/apache2" # Here the definition that's make this confusion... HostnameLookups Off # if ...


3

Checkout this bug report from RedHat : https://bugzilla.redhat.com/show_bug.cgi?id=1232360 Package mod_evasive-1.10.1-22.el7, should fix your issue, was pushed to the Fedora EPEL 7 testing repository. Update it with: su -c 'yum update --enablerepo=epel-testing mod_evasive-1.10.1-22.el7'


2

This is, at least in part, governed by the ServerTokens directive, so you could set ServerTokens Prod which will reveal only that the Server is an unspecified version of Apache, but even the manual itself suggests this is not a security measure.


1

Aside: @CodesInChaos Chrome says "outdated security settings", NOT "obsolete cryptography", for SHA1 cert past end of year. The "Your connection is not private" page you added is actually the important symptom. It isn't caused by crypto settings, it's caused if the cert cannot be validated, because it is selfsigned (which is your case with openssl req -new ...


1

If I understand you correctly, you simply don't want to run HTTP as root. Either don't have Apache listen to port 80 and use IPtables to redirect those packets to a higher port number; or tell Linux that ports < 1024 are not secure. See the excellent answer at http://unix.stackexchange.com/a/10791/105631. Also here: ...


0

First off, see the DistrosDefaultLayout - Fedora entry on the Apache Wiki Looks like you may need to add a Document Root (to override the default), and since you aren't serving files from the default root, a ServerRoot (again to override the default): Alias /calibre /mnt/Sardaukar/web/calibre/_catalog ServerRoot "/calibre" # Ensure that Apache listens on ...


1

You could have a script in your server that makes all kind of test among them if the server is alive, here's one: #!/bin/bash date; echo "uptime:" uptime echo "Currently connected:" w echo "--------------------" echo "Last logins:" last -a |head -3 echo "--------------------" echo "Disk and memory usage:" df -h | ...


1

Configure a VirtualHost as all the others and configure the ProxyPass and ProxyPassReverse for this specific domain: Servername www.somedomain.com ProxyPass / http://internal-web-server/ ProxyPassReverse / http://internal-web-server/ See http://httpd.apache.org/docs/2.2/mod/mod_proxy.html for details


1

I created a python scrript that will do the task at github: https://github.com/rubo77/vhost-split.py It splits an apache vhost file into separate files so you could use them in the Apache folders sites-available and sites-enabled. Just pass the configuration file and the script will generate a bunch of files named with the ServerName variable found in each ...


0

When you install two different versions with dpkg or apt-get, it will not break the system, unless you use the -f option to force installation. Instead it will create an additional entry in your package database. When you install the source manually, make sure to link the programs to the library. For instance link apr-1.4.6 symbolically to ...


1

Do I install packages using dpkg, instead of adding Wheezy in my sources? No. Or should I just add wheezy in my sources? No. Either via dpkg, or via apt-get, do I risk breaking "stuff" if I install two different versions of the same library? Yes. I would recommend instead, asking the maintainer of the project to use the most recent ...


0

When installed, MySQL doesn't start by default, you have to start it. service mysqld start then run the security sudo mysql_secure_installation also see : https://github.com/dnschneid/crouton/wiki/Running-servers-in-crouton


0

I encoutred the same problem in my server this morning AH00015: Unable to open logs I managed to allow all rights in security tab on the logs folder for the user who run the apache service, this resolved my problem. Good luck


0

1st solution Check also the order in which your *.conf files are processed. If a .conf for *.lumix-transporte.de is ,,run'' before forum.conf and has a sort of redirection directive, then the forum.conf will never be even processed. So you can change the order (for example by changing the name of forum.conf to 000-forum.conf) or, what is better in my ...


0

Have a look at the DirectoryIndex directive of Apache. Your forum probably does using something different than the default index.html. See http://httpd.apache.org/docs/2.4/mod/mod_dir.html for more information.


0

This can also be done with apache rewrite rules for cases when you are not forwarding tomcat as described by Lambert. RewriteCond %{HTTP_HOST} ^wp.me.com$ RewriteRule ^(.*)$ http://your.apache.wordpress.com/$1 [R=301,L]


3

Yes you can, The first VirtualHost will point to your Wordpress site, the other VirtualHosts will be setup as Reverse Proxy to your other internal devices. Example: <VirtualHost *:443> Servername fw.me.com ProxyPass / https://192.168.1.1:8443/ ProxyPassReverse / https://192.168.1.1:8443/ </VirtualHost> See ...


0

I would like to write this as a comment instead of an answer, but I can't yet so please don't ding me, community. There is nothing wrong with the pieces you have posted so far. The error logs show the normal notices from restarting apache and the 304 return codes in the access logs you posted are normal as well; they indicate that the resource being ...


0

You will also need to change the owner of the newly created folder to apache or something, depending on your distribution.


0

First (useful) thing I did was just post a simple "hello world" script in the cgi-bin: #!/usr/bin/perl # hello.pl -- my first perl script! print "Content-type: text/html\n\n"; print <<"EOF"; <HTML> <HEAD> <TITLE>Hello, world!</TITLE> </HEAD> <BODY> <H1>Hello, world!</H1> </BODY> </HTML> ...


1

[Sat Jun 06 05:53:24.412867 2015] [authz_core:error] [pid 28374:tid 140381836453632] [client 108.205.62.183:55886] AH01630: client denied by server configuration: /usr/local/apache2 That means you haven't configured authorization for your webserver. What you want to do is ensure that you have something like <Directory /usr/local/apache2/cgi-bin> ...



Top 50 recent answers are included