RE: Permanent re-direct

2000-10-31 Thread John Markunas

Hi
I do a httpd -l and get 
compiled in modules
http_core.c
mod_so.c
suexec: disabled;invalid wrapper /usr/sbin/suexec

 Can someone tell me why I get the suexec error and what to do to
 fix it ?


I look in my httpd.conf and find mod_alias and many others on
LoadModule and AddModule directives

I do a httpd -v and get
Apache/1.3.12 (Unix) (RedHat/Linux)

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Martin Lichtin
Sent: Monday, October 30, 2000 4:24 PM
To: [EMAIL PROTECTED]
Subject: Re: Permanent re-direct


  Invalid command 'RedirectPermanent' perhaps mis-spelled or defined by a
 module not included in the server configuration.
 What am I doing wrong ?

Do you have the "mod_alias" module? It's part of the
base configuration:

http://www.apache.org/docs/mod/mod_alias.html

Run "httpd -l" to see what modules you have available.
What version of Apache are you running? ("httpd -v")
__
Apache Interface to OpenSSL (mod_ssl)   www.modssl.org
User Support Mailing List  [EMAIL PROTECTED]
Automated List Manager[EMAIL PROTECTED]

__
Apache Interface to OpenSSL (mod_ssl)   www.modssl.org
User Support Mailing List  [EMAIL PROTECTED]
Automated List Manager[EMAIL PROTECTED]



Re: Permanent re-direct

2000-10-31 Thread Dave Paris

Before blindly screaming "It's broken!", think about *why* you need
suexec first.  If you aren't going to use it, then don't bother enabling
it.  I run configurations with a heavily modified (for values, not for
additional defines or typedefs) apache_[ver]/src/include/httpd.h.  These
typically have SUEXEC_BIN linked to /dev/null as well as SHELL_PATH. 
The reasoning is pretty obvious;  if I'm not going to use it, why should
I leave even a remotely possible attack point in the server if I lose my
mind and do Something Stupid [tm]?

Apache allows for large amounts of tweaking.  There are some things
which are prudent to disable if you're not going to use them.  (where
"disable" means: "no, you *can't* change this behaviour without
rebuilding the executable").  The bulk of the folks out there will *not*
get suexec calls right, which, more often than not, will put a nice, big
security hole in the box.  I don't point SHELL_PATH to anything but
/dev/null since I don't use anything but mod_perl environments.  YMMV.

Be alert, the world needs more lerts.
--dsp


"Robert L. Yelvington" wrote:
 
 regarding 'suexec'..
 
 you must have misconfigured suEXEC when you compiled...where is your
 suexec log file .AND. what does it say .OR. what other useful suexec log
 information can you forward to the list?
 
 your configure flags would also be helpful...
 
 thanx,
 rob
 
 John Markunas wrote:
 
  Hi
  I do a httpd -l and get
  compiled in modules
  http_core.c
  mod_so.c
  suexec: disabled;invalid wrapper /usr/sbin/suexec
 
   Can someone tell me why I get the suexec error and what to do to
   fix it ?*
__
Apache Interface to OpenSSL (mod_ssl)   www.modssl.org
User Support Mailing List  [EMAIL PROTECTED]
Automated List Manager[EMAIL PROTECTED]



RE: Permanent re-direct

2000-10-31 Thread Biggs, Jody

RedirectMatch (.*) https://my-server$1

 - Jody Biggs


-Original Message-
From: John Markunas [mailto:[EMAIL PROTECTED]]
Sent: Monday, October 30, 2000 11:43 AM
To: [EMAIL PROTECTED]
Subject: Permanent re-direct


Hello
What Apache directive do I use to make 

http://my-server

always go to

https://my-server

Thank You

John Markunas
__
Apache Interface to OpenSSL (mod_ssl)   www.modssl.org
User Support Mailing List  [EMAIL PROTECTED]
Automated List Manager[EMAIL PROTECTED]
__
Apache Interface to OpenSSL (mod_ssl)   www.modssl.org
User Support Mailing List  [EMAIL PROTECTED]
Automated List Manager[EMAIL PROTECTED]



Permanent re-direct

2000-10-30 Thread John Markunas

Hello
What Apache directive do I use to make 

http://my-server

always go to

https://my-server

Thank You

John Markunas
__
Apache Interface to OpenSSL (mod_ssl)   www.modssl.org
User Support Mailing List  [EMAIL PROTECTED]
Automated List Manager[EMAIL PROTECTED]



Re: Permanent re-direct

2000-10-30 Thread Martin A. Marques

On Lun 30 Oct 2000 16:42, you wrote:
 Hello
   What Apache directive do I use to make

   http://my-server

   always go to

   https://my-server

I'm not sure how you could prepend this to all your http files... Other wise 
add these lines to all your pages:

SCRIPT language="JavaScript"
!--
if (window.location.protocol != 'https:') {
window.location.protocol = 'https:'
}
// --
/SCRIPT

Saludos... :-)

-- 
"And I'm happy, because you make me feel good, about me." - Melvin Udall
-
Martín Marqués  email:  [EMAIL PROTECTED]
Santa Fe - Argentinahttp://math.unl.edu.ar/~martin/
Administrador de sistemas en math.unl.edu.ar
-
__
Apache Interface to OpenSSL (mod_ssl)   www.modssl.org
User Support Mailing List  [EMAIL PROTECTED]
Automated List Manager[EMAIL PROTECTED]



Re: Permanent re-direct

2000-10-30 Thread Martin Lichtin

 What Apache directive do I use to make
 http://my-server
 always go to
 https://my-server

This should work:

VirtualHost _default_:80
RedirectPermanent / https://my-server/
/VirtualHost
__
Apache Interface to OpenSSL (mod_ssl)   www.modssl.org
User Support Mailing List  [EMAIL PROTECTED]
Automated List Manager[EMAIL PROTECTED]



RE: Permanent re-direct

2000-10-30 Thread John Markunas

Hello
The suggested use of VirtualHost as shown below yields the following
error upon httpd(Apache) start up

 Invalid command 'RedirectPermanent' perhaps mis-spelled or defined by a
module not included in the server configuration.

What am I doing wrong ?

Sincerely

John Markunas

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Martin Lichtin
Sent: Monday, October 30, 2000 2:50 PM
To: [EMAIL PROTECTED]
Subject: Re: Permanent re-direct


 What Apache directive do I use to make
 http://my-server
 always go to
 https://my-server

This should work:

VirtualHost _default_:80
RedirectPermanent / https://my-server/
/VirtualHost
__
Apache Interface to OpenSSL (mod_ssl)   www.modssl.org
User Support Mailing List  [EMAIL PROTECTED]
Automated List Manager[EMAIL PROTECTED]

__
Apache Interface to OpenSSL (mod_ssl)   www.modssl.org
User Support Mailing List  [EMAIL PROTECTED]
Automated List Manager[EMAIL PROTECTED]



Re: Permanent re-direct

2000-10-30 Thread Martin Lichtin

  Invalid command 'RedirectPermanent' perhaps mis-spelled or defined by a
 module not included in the server configuration.
 What am I doing wrong ?

Do you have the "mod_alias" module? It's part of the
base configuration:

http://www.apache.org/docs/mod/mod_alias.html

Run "httpd -l" to see what modules you have available.
What version of Apache are you running? ("httpd -v")
__
Apache Interface to OpenSSL (mod_ssl)   www.modssl.org
User Support Mailing List  [EMAIL PROTECTED]
Automated List Manager[EMAIL PROTECTED]



RE: Permanent re-direct

2000-10-30 Thread Kirk Benson

RedirectPermanent is implemented by mod_alias, so you need to activate
mod_alias.

 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED]]On Behalf Of John Markunas
 Sent: Monday, October 30, 2000 4:15 PM
 To: [EMAIL PROTECTED]
 Subject: RE: Permanent re-direct


 Hello
   The suggested use of VirtualHost as shown below yields the following
 error upon httpd(Apache) start up

  Invalid command 'RedirectPermanent' perhaps mis-spelled or defined by a
 module not included in the server configuration.

 What am I doing wrong ?

 Sincerely

 John Markunas

 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED]]On Behalf Of Martin Lichtin
 Sent: Monday, October 30, 2000 2:50 PM
 To: [EMAIL PROTECTED]
 Subject: Re: Permanent re-direct


  What Apache directive do I use to make
  http://my-server
  always go to
  https://my-server

 This should work:

 VirtualHost _default_:80
 RedirectPermanent / https://my-server/
 /VirtualHost
 __
 Apache Interface to OpenSSL (mod_ssl)   www.modssl.org
 User Support Mailing List  [EMAIL PROTECTED]
 Automated List Manager[EMAIL PROTECTED]

 __
 Apache Interface to OpenSSL (mod_ssl)   www.modssl.org
 User Support Mailing List  [EMAIL PROTECTED]
 Automated List Manager[EMAIL PROTECTED]


__
Apache Interface to OpenSSL (mod_ssl)   www.modssl.org
User Support Mailing List  [EMAIL PROTECTED]
Automated List Manager[EMAIL PROTECTED]