Re: [users@httpd] DocumentRoot doesn't exist (but it's giving the wrong name)

2018-09-07 Thread Osman Zakir
So it's in the vhosts.conf file?


By the way, I sent another email earlier that hasn't had a reply yet -- did I 
ask a stupid or maybe a too-simple question and that's why no one's replied 
yet?  I don't mean to whine, I'm just asking.


From: angel Hall-Coulston 
Sent: Saturday, September 8, 2018 4:55:14 AM
To: users@httpd.apache.org
Subject: Re: [users@httpd] DocumentRoot doesn't exist (but it's giving the 
wrong name)

Hi,
‘Dummy-host.example.com’ is in your Virtual Host 
Conf as a default example and apache is trying to find it and of course can’t 
so won’t run. You can either change, comment out or don’t include virtual hosts.

Regards,
Angel

On 7 Sep 2018, at 22:33, Osman Zakir 
mailto:osmanzaki...@hotmail.com>> wrote:

I downloaded Apache 2.4.33 (I had 2.4.29 until now, so I just upgraded) and 
tried to start it, but I got a warning saying: 
"DocumentRoot[C:/Apache24/docs/dummy-host.example.com]
 does not exist". But in my httpd.conf file, DocumentRoot is set to 
ServerRoot/htdocs.  And when I try to go to localhost, I get a 403 Forbidden 
error.  I have attached my configuration file here.


Re: [users@httpd] DocumentRoot doesn't exist (but it's giving the wrong name)

2018-09-07 Thread angel Hall-Coulston
Hi,‘Dummy-host.example.com’ is in your Virtual Host Conf as a default example and apache is trying to find it and of course can’t so won’t run. You can either change, comment out or don’t include virtual hosts.Regards,Angel On 7 Sep 2018, at 22:33, Osman Zakir  wrote:I downloaded Apache 2.4.33 (I had 2.4.29 until now, so I just upgraded) and tried to start it, but I got a warning saying: "DocumentRoot[C:/Apache24/docs/dummy-host.example.com] does not exist". But in my httpd.conf file, DocumentRoot is set to ServerRoot/htdocs.  And when I try to go to localhost, I get a 403 Forbidden error.  I have attached my configuration file here.

httpd.conf
Description: Binary data
-To unsubscribe, e-mail: users-unsubscr...@httpd.apache.orgFor additional commands, e-mail: users-h...@httpd.apache.org

smime.p7s
Description: S/MIME cryptographic signature


[users@httpd] DocumentRoot doesn't exist (but it's giving the wrong name)

2018-09-07 Thread Osman Zakir
I downloaded Apache 2.4.33 (I had 2.4.29 until now, so I just upgraded) and 
tried to start it, but I got a warning saying: 
"DocumentRoot[C:/Apache24/docs/dummy-host.example.com] does not exist". But in 
my httpd.conf file, DocumentRoot is set to ServerRoot/htdocs.  And when I try 
to go to localhost, I get a 403 Forbidden error.  I have attached my 
configuration file here.


httpd.conf
Description: httpd.conf

-
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org

Re: [users@httpd] Odd session cookies

2018-09-07 Thread Yehuda Katz
It looks like someone trying to guess existing cookies and retrieve session
information for existing sessions. Based on the cookie format, I am
guessing the sessions are actually controlled by PHP - you can add some
code to log IP address and cookie combinations and see if there is a
patterns.

I am pretty sure sess_rfc1867-tests-post is a cookie name from the PHP test
suite. The other examples you gave look like what might happen if you set a
custom session handler and didn't add a unique value for each session.

If you are worried about actual session hijacking, store the client IP
address in the session and don't let other IPs use it and/or consider an
application firewall that can detect these things (no specific
recommendation).

- Y

Sent from a device with a very small keyboard and hyperactive autocorrect.

On Fri, Sep 7, 2018, 1:17 AM John  wrote:

> Beginning last Sunday (2 September) I have been finding several oddly named
> session cookies each day on my server.  The normal Apache session cookies
> have
> names like "sess_d50280ded90f1dbd48fcfd5fc77baa77".  These new ones have
> names
> like:
>
> sess_mycustomsession
> sess_sessionidhere
>
>
> The content seems strange too, although so far I haven't found anything
> important in one of the.  The owner name is often mine, although some have
> "php-fpm" as the file owner.
>
> Here is an example:
>
> cookie name:  sess_rfc1867-tests-post
>
> cookie content:
>
>
> upload_progress_rfc1867_sid_only_cookie_2.php|a:5:{s:10:"start_time";i:153591608
>
> 5;s:14:"content_length";i:603;s:15:"bytes_processed";i:603;s:4:"done";b:1;s:5:"f
>
> iles";a:2:{i:0;a:7:{s:10:"field_name";s:5:"file1";s:4:"name";s:9:"file1.txt";s:8
>
> :"tmp_name";s:14:"/tmp/phpQWrbXC";s:5:"error";i:0;s:4:"done";b:1;s:10:"start_tim
>
> e";i:1535916085;s:15:"bytes_processed";i:1;}i:1;a:7:{s:10:"field_name";s:5:"file
>
> 2";s:4:"name";s:9:"file2.txt";s:8:"tmp_name";s:14:"/tmp/phpSoCWFv";s:5:"error";i
>
> :0;s:4:"done";b:1;s:10:"start_time";i:1535916085;s:15:"bytes_processed";i:1;}}}
>
> Does anyone have any idea what these are and if I have some sort of a
> compromise
> to the server going on?
>
> Thanks in advance.
>
> John
>
>
>
> -
> To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
> For additional commands, e-mail: users-h...@httpd.apache.org
>
>


[users@httpd] Settup httpd cluster.

2018-09-07 Thread Rodrigo Cunha
Hi, i need build a cluster.2 hosts in front-end and 2 hosts in back-end.
where i get a good documentation about this?

[image: image.png]
-- 
Atenciosamente,
Rodrigo da Silva Cunha
São Gonçalo, RJ - Brasil