Re: [gentoo-user] Can anyone tell me where I've loused-up this apache config?
Steve [Gentoo] wrote: What's wrong? If you are using the default config that comes with apache, there should be a file in /etc/apache2/modules.d/ that contains a correctly setup SSL host. You may need to add -D SSL to APACHE2_OPTS in /etc/conf.d/apache2 to enable it. You shouldn't need to add SSL stuff to the normal vhosts in the vhosts.d directory. If you no longer have the default config files, you can find them here: http://sources.gentoo.org/viewcvs.py/apache/trunk/dist/2.0/conf/ -- Michael Stewart [EMAIL PROTECTED] Gentoo Developerhttp://dev.gentoo.org/~vericgar GnuPG Key ID 0x08614788 available on http://pgp.mit.edu -- signature.asc Description: OpenPGP digital signature
Re: [gentoo-user] Simplified apache2
Michael Crute wrote: Hmm... I seem to remember some problem with PHP only compiling if threads was set to on. Maybe not, will have to test it to see if there is any good reason that I still have that in my package.use. Thanks for the tip. -Mike PHP and apache are not the same software. If you have USE=threads for PHP, then you have to use a threaded MPM for apache (mpm-worker would be the suggested one). If you do not have USE=threads for PHP then you have to use a non-threaded MPM for apache (mpm-prefork). -- Michael Stewart [EMAIL PROTECTED] Gentoo Developerhttp://dev.gentoo.org/~vericgar GnuPG Key ID 0x08614788 available on http://pgp.mit.edu -- signature.asc Description: OpenPGP digital signature
Re: [gentoo-user] Simplified apache2
Michael Crute wrote: net-www/apache mpm-prefork threads As a side note from the Apache maintainer: This USE-flag combination is pointless. The threads USE-flag is only used if you don't specify a MPM USE-flag, and caused the mpm to be mpm-worker. (If threads is not set, the MPM defaults to mpm-prefork) -- Michael Stewart [EMAIL PROTECTED] Gentoo Developerhttp://dev.gentoo.org/~vericgar GnuPG Key ID 0x08614788 available on http://pgp.mit.edu -- signature.asc Description: OpenPGP digital signature
Re: [gentoo-user] apache2 and suEXEC errors
[EMAIL PROTECTED] wrote: Running: single user machine for experimentation I have apache setup to allow user public_html and allow cgi execution anywhere inside public_html. The rub is that another cgi script causes a server error (posted further along) I have apache2 set to loglevel debug, I have ran the problem cgi manually from cmdline and received no errors. It appears somethign isn't configured to allow suExec but I can't tell what. I've made all settings that appeared to be related. The cgi is chmod 755. The log output seems too skimpy to see how to further debug this: From /var/log/apache2/error_log [Tue Jun 06 23:23:49 2006] [error] [client 127.0.0.1] (13)Permission denied: exec of '/usr/sbin/suexec2' failed [Tue Jun 06 23:23:49 2006] [error] [client 127.0.0.1] Premature end of script headers: index.cgi The details of the error should be in /var/log/apache2/suexec_log Also, the permission denied error for suexec2 itself is strange. What are the permissions on suexec? They should be: -rws--x--- 1 root apache 15107 Jun 6 16:51 /usr/sbin/suexec2 -- Michael Stewart [EMAIL PROTECTED] Gentoo Developerhttp://dev.gentoo.org/~vericgar GnuPG Key ID 0x08614788 available on http://pgp.mit.edu -- signature.asc Description: OpenPGP digital signature
Re: [gentoo-user] Webapp-config trouble
Mrugesh Karnik wrote: * Apache2 has detected a syntax error in your configuration files: Usage: /usr/sbin/apache2 [-D name] [-d directory] [-f file] [-C directive] [-c directive] [-k start|restart|graceful|stop] [-v] [-V] [-h] [-l] [-L] [-t] [-S] I doubt this error message is related to your recent webapp-config install (it's probably just now that you noticed it). Generally when this message comes up, there is a problem with your APACHE2_OPTS in /etc/conf.d/apache2, usually a forgotten -D somewhere. Make sure every item in APACHE2_OPTS has a -D before it. Example (from my apache 2.2 configuration): APACHE2_OPTS=-D DEFAULT_VHOST -D INFO -D LANGUAGE -D SSL -D SSL_DEFAULT_VHOST -D SUEXEC -D PHP4 -D MACRO -D USERDIR -D ERRORDOCS -D AUTH_PAM -- Michael Stewart [EMAIL PROTECTED] Gentoo Developerhttp://dev.gentoo.org/~vericgar GnuPG Key ID 0x08614788 available on http://pgp.mit.edu -- signature.asc Description: OpenPGP digital signature
Re: [gentoo-user] apache 2.2.0-r2 building woes
kashani wrote: Anyone actually get Apache 2.2 to compile cleanly? Mine repeated craps out at this point. [snip] /usr/lib/libapr-1.so: undefined reference to `find_if_index' [snip] kashani Known issue upstream http://issues.apache.org/bugzilla/show_bug.cgi?id=39199 By adding USE=ipv6 it should work. Note that these versions (apache 2.2.x, apr/apr-util 1.2.x) are still hard-masked because they still have issues. -- Michael Stewart [EMAIL PROTECTED] Gentoo Developerhttp://dev.gentoo.org/~vericgar GnuPG Key ID 0x08614788 available on http://pgp.mit.edu -- signature.asc Description: OpenPGP digital signature
Re: [gentoo-user] apache2 without DNS?
James wrote: http://192.168.2.9/ pops up the usually apache2 default page But I cannot get to the /var/www/localhost/htdocs/htdocs/admin/setup.php page, from a web browser running on neither the server, nor anywhere on the network. The default apache2 page does pop up on a web browser from any machine on the network, including the apache2 server. I may be misunderstanding your question, so please clarify if I have. Are you looking for the URL you need to type in your browser to get to the setup script? Assuming that you haven't changed the DocumentRoot setting, try using http://192.168.2.9/htdocs/admin/setup.php -- Michael Stewart [EMAIL PROTECTED] Gentoo Developerhttp://dev.gentoo.org/~vericgar GnuPG Key ID 0x08614788 available on http://pgp.mit.edu -- signature.asc Description: OpenPGP digital signature
Re: [gentoo-user] php4 vs php5
James wrote: Hello, I've installed php4 as needed by a package (JFFNMS). Everytime I run a 'emerge -uDp world' It wants to upgrade the php4 to either php5 or another form of php4. This gets a little confusing, so I'll try to be very clear. I do not have php5 installed, and I do not want php5 installed on this system. I've tried all sorts of machinations in the /etc/portage dir, without success. Here's what I have installed: dev-lang/php Available versions: 4.3.11-r5 4.4.1-r3 ~4.4.2 [M]5.0.5-r5 [M]5.1.2 Installed: none dev-php/mod_php Installed: 4.4.0-r9 dev-php/php Installed: 4.4.0-r4 So I've tried various entries in my /etc/portage/package.mask file to get the system happy. package.mask contains: '=dev-lang/php-5.0.5' Focusing on php, I run 'emerge -pv dev-lang/php' and here is the response. These are the packages that I would merge, in order: Calculating dependencies ...done! [blocks B ] dev-php/mod_php (is blocking dev-lang/php-4.4.2) [blocks B ] dev-php/php (is blocking dev-lang/php-4.4.2) [ebuild N] dev-lang/php-4.4.2 So the question is what do I put in /etc/portage/? file to get the system to accept the older dev-php files and not try to install 'dev-lang/php' ? I cannot just install 'dev-lang/php' as it is blocked by the (2) dev-php files that I need: dev-php/mod_php and dev-php/php. Of coarse, take what I'm saying with a grain of salt, as I'm describing the symptoms of a php problem without fully understandings what these package name/group changes really mean...(where does one read about what the developers are doing with php and why?). jffnms is the critical package here that is causing the php heartburn. Everythings works, I just want the system to quit asking to upgrade php, everytime I upgrade the rest of the system. ideas? What did I miss? James If you are going to change from the old-style PHP (dev-php/php) to the new-style PHP (dev-lang/php), then you need to follow the PHP upgrading instructions on this page: http://www.gentoo.org/proj/en/php/php-upgrading.xml I highly suggest it, as IIRC the old-style PHP is no longer supported. -- Michael Stewart [EMAIL PROTECTED] Gentoo Developerhttp://dev.gentoo.org/~vericgar GnuPG Key ID 0x08614788 available on http://pgp.mit.edu -- signature.asc Description: OpenPGP digital signature
Re: [gentoo-user] Another reason to begin USE with -*
Roy Wright wrote: This has me wondering if there is a utility to help manage the use flags. I'd like to know: * Which use flags I have set that are not used by anything I have installed. * Which use flags are deprecated. * Which use flags are new. Ideally I'd just add this to my daily.cron job. Thank you, Roy If you are using a recent portage, you can use the --newuse flag, which will show which USE flags have changed. -- Michael Stewart [EMAIL PROTECTED] Gentoo Developerhttp://dev.gentoo.org/~vericgar GnuPG Key ID 0x08614788 available on http://pgp.mit.edu -- signature.asc Description: OpenPGP digital signature
Re: [gentoo-user] Help With vhost.conf apache2
Tito Valentin wrote: Hello All, I am trying to get apache to work with a few vhost. The problem is that when I hit www.domain.com it shows the apache page rather than the actual site. In order for me to be able to view the site I have to type www.domain.dom/folder and then the site comes up. Here is what I have done so far with the vhost.conf files: A quick guess without looking in detail at your config... if parts of the virtual host are working, but the root isn't, then it makes me think it's a cache issue. Clear your browser's cache and try the page again. /etc/apache2/vhosts.d/01_my_domain_vhost.conf VirtualHost www.my_domain.com ServerAdmin [EMAIL PROTECTED] DocumentRoot /var/www/localhost/htdocs/parknorthcondos DirectoryIndex index.php index.html ServerName www.my_domain.com ErrorLog /var/log/apache2/vhosts/my_domain_error_log CustomLog /var/log/apache2/vhosts/my_domain_access_log common /VirtualHost You need to use VirtualHost *:80. The argument to a VirtualHost is the NameVirtualHost that it matches to (NameVirtualHost *:80 should be in the default config) I would also suggest, using /var/www/my_domain/htdocs instead of /var/www/localhost/htdocs/my_domain -- Michael Stewart [EMAIL PROTECTED] Gentoo Developerhttp://dev.gentoo.org/~vericgar GnuPG Key ID 0x08614788 available on http://pgp.mit.edu -- signature.asc Description: OpenPGP digital signature
[gentoo-user] Apache: old-style configuration end-of-life
This is a heads up for anyone that hasn't seen the notices placed in various places... On March 1, the old-style configuration of apache will no longer be supported, in favor of the new-style configuration which was marked stable back in October. If you haven't upgraded, now is the time to do so. Upgrading instructions are on the website at http://www.gentoo.org/doc/en/apache-upgrading.xml and you can find help on irc.freenode.net in #gentoo-apache. New-style configuration is =apache-2.0.55 for the 2.0 line and =apache-1.3.34-r10 for the 1.3 line. Note that after March 1st, there not be any more security bumps for old-style ebuilds and old-style ebuilds will begin to be removed from the tree. -- Michael Stewart [EMAIL PROTECTED] Gentoo Developerhttp://dev.gentoo.org/~vericgar GnuPG Key ID 0x08614788 available on http://pgp.mit.edu -- signature.asc Description: OpenPGP digital signature
Re: [gentoo-user] Apache mod_access FDQ problem
Ross Anderson wrote: I've tried setting up access restrictions based on name resolution. From what I've read in the apache.org docs all is configured correctly. If I use an ip address in the allow statement it works as expected. However if I use a FQDN apache forbids access. The logs show the client ip that matches the FQDN. Does anyone have suggestions on where to proceed in the this troubleshooting process. Thanks Ross VirtualHost *:80 DocumentRoot /var/www/phpmyadmin ServerName mysql.dwrnet.net ErrorLog /var/www/phpmyadmin/log/error_log CustomLog /var/www/phpmyadmin/log/access_log combined Directory / AllowOverride None Order Deny,Allow Deny from all Allow from host.example.com /Directory /VirtualHost net-www/apache-2.0.54-r31 +apache2 -debug -doc -ldap -mpm-leader -mpm-peruser -mpm-prefork -mpm-threadpool -mpm-worker -no-suexec (-selinux) +ssl -static-modules -threads 5,488 kB [Sun Dec 04 13:08:59 2005] [error] [client xx.xx.xx.xx] client denied by server configuration: /var/www/phpmyadmin/ Make sure that Apache is looking up hostnames (the default configuration does not do this as it slows things down): # # HostnameLookups: Log the names of clients or just their IP addresses # e.g., www.apache.org (on) or 204.62.129.132 (off). # The default is off because it'd be overall better for the net if people # had to knowingly turn this feature on, since enabling it means that # each client request will result in AT LEAST one lookup request to the # nameserver. # HostnameLookups On Make sure the PTR record for the IP address(es) is the name you use in the configuration. Make sure DNS works correctly on the machine (I don't know why it wouldn't, and you would have run into problems much earlier, but perhaps something got changed) I'd recommend using user authentication (google htpasswd for information) rather then IP/DNS rules. -- Michael Stewart [EMAIL PROTECTED] Gentoo Developerhttp://dev.gentoo.org/~vericgar GnuPG Key ID 0x08614788 available on http://pgp.mit.edu -- signature.asc Description: OpenPGP digital signature
Re: [gentoo-user] Full path in apache2 access_log?
Try adding %f and/or %{Host}i to the LogFormat directive. Or maybe one
of the others will give you the information you need:
http://httpd.apache.org/docs/2.0/mod/mod_log_config.html#formats
--
Michael Stewart [EMAIL PROTECTED]
Gentoo Developerhttp://dev.gentoo.org/~vericgar
GnuPG Key ID 0x08614788 available on http://pgp.mit.edu
--
signature.asc
Description: OpenPGP digital signature
Re: [gentoo-user] apache upgrade to -r31
W.Kenworthy wrote: Hi, I am looking the current apache upgrade to -r31. There are a number of MPM (Multi-Processing Module implementing a hybrid multi-threaded multi-process web server) related use flags. I have not seen any discussions on these so is there anyone willing to comment on their desirability - is this something that most apache servers (in my case low load, static html) would benefit from/be harmed by? Also, have there been any glitches with the apache -r31 major changes, or has that gone off problem free, or is everyone being like me and still waiting and for the first person to jump just in case! BillK There is documentation on the MPMs in the upgrading guide [1]. In summary though, you will probably prefork or worker. prefork is the same style that apache-1.3 uses, which forks a new process for each child (children can handle a certain number of requests). worker is a hybrid forking and threading MPM, it forks several processes, which each thread. It has better performance, but any module you use will have to be thread-safe. Note that you don't have to specify a mpm-* USE-flag - if none of them are set, sane defaults are used. As far as upgrading, if you follow the docs [1], it should be problem free - however if you've changed your default config it may take you some time to get it working the same in new-style as old-style. If you do have issues, there are several knowledgeable devs in #gentoo-apache on irc.freenode.net that are more then happy to help. [1] http://www.gentoo.org/doc/en/apache-upgrading.xml -- Michael Stewart [EMAIL PROTECTED] Gentoo Developerhttp://dev.gentoo.org/~vericgar GnuPG Key ID 0x08614788 available on http://pgp.mit.edu -- signature.asc Description: OpenPGP digital signature
Re: [gentoo-user] The new apache2
Grant wrote: Hello, I've been on the new apache2 layout for some time now via ~x86. It looks like it's now marked stable so I'd like to remove the ~x86 keyword, but after that I get this: [blocks B ] dev-libs/apr-util (is blocking net-www/apache-2.0.54-r15) [blocks B ] dev-libs/apr (is blocking net-www/apache-2.0.54-r15) Should I unmerge those packages? I thought they were important for apache? - Grant 2.0.54-r15 is still old-style. We had to use a revision higher then what the current new-style was because we had to do a security bump and were already at -r9 (new-style used to be anything -r10 and above, and was using -r10 through -r14). To fix this, we made -r15 old-style, and jumped up to -r30 for new-style. If you are running old-style, please upgrade to -r15, as it's a security bump. If you are running new-style, you should upgrade to -r30 (which also fixes the security issue). Note that new-style is still in ~arch, and will remain there until Sept 18th. -- Michael Stewart [EMAIL PROTECTED] Gentoo Developerhttp://dev.gentoo.org/~vericgar GnuPG Key ID 0x08614788 available on http://pgp.mit.edu -- signature.asc Description: OpenPGP digital signature
[gentoo-user] Stabilization of new-style Apache
The Gentoo Apache Team is pleased to announce the stabilizing of package updates that have been in the works for over a year. Some of the major changes include: - New configuration and configuration locations to more closely match upstream and reduce confusion for users coming from other distributions. - Modules now use a centralized eclass that builds, installs, and displays standard information on enabling the module. This allows easier maintenance of existing modules, and allows us to more rapidly develop ebuilds for modules that are not yet in the tree. - Expanded USE flags to let you choose which MPM is compiled. - A new gentoo-webroot that will eventually provide a gentoo-themed icon-set, error documents, and default website. This has been put in it's own package, and includes a USE-flag to not install the gentoo-webroot into /var/www/localhost - useful if you put your own website there. - And much more, including the fixing of many many bugs. These changes will stabilized on Sunday, September 18th. These changes have been throughly tested and given a thumbs up by many many users. They also allow you to use the new php (including support for php5) ebuilds when they become fully available. Because of these changes and improvements, when you upgrade to the new revision of Apache, you will need to take care of some things. These are fully documented in our Upgrading Apache document [1], but in summary, this is what you will need to do: - Merge any customizations that you have made to the Apache configuration into the new configuration at /etc/apache2/httpd.conf (The configuration file location has changed). Note that the init script for apache checks for a configuration in the old location and refuses to start if you haven't moved/removed it - this is to avoid the possibility of moving to a configuration that isn't right for your machine. - Update any modules that you used to revisions that support the new eclass. Older modules will not work due to location changes. - Restart Apache We have done our best to make it easy to migrate, but if you have problems, feel free to visit us in #gentoo-apache on irc.freenode.net or on our mailing list gentoo-web-user@gentoo.org and we'll be glad to help. Thanks, The Gentoo Apache Team [1] http://www.gentoo.org/doc/en/apache-upgrading.xml -- Michael Stewart [EMAIL PROTECTED] Gentoo Developerhttp://dev.gentoo.org/~vericgar GnuPG Key ID 0x08614788 available on http://pgp.mit.edu -- signature.asc Description: OpenPGP digital signature
