Re: [gentoo-user] apache-2.4.20 update doesn't like includes directive

2016-05-22 Thread Michael Orlitzky
On 05/22/2016 04:50 AM, Mick wrote:
> 
> I tried setting APACHE2_MODULES="access_compat" in make.conf and I got this 
> conflict:

Oh, sorry, I meant that you have to add "access_compat" to the list of
modules already present in APACHE2_MODULES.

Those conflicts are saying that you need "unixd" for php itself, and
eselect-php wants "dir". This is a pretty minimal list:

  APACHE2_MODULES="alias auth_basic auth_digest authn_anon authn_core\
   authn_file authz_core authz_host authz_user dir\
   include log_config mime rewrite socache_shmcb unixd"

(Add access_compat if you want). You can narrow it down by looking
through each module's documentation:

  http://httpd.apache.org/docs/current/mod/

The directives that each one provides are listed over on the right. So
if, for example, you don't use "AuthUserFile" in your config, then it's
safe to turn off mod_authn_file.

The Drupal thing is highly annoying. Their stupid status report ignores
the fact that:

  1. You can achieve the same thing with an htaccess file that isn't
 byte-for-byte identical to the one they ship.

  2. If you run multiple sites, you can implement the restrictions in
 the vhosts and not in htaccess files.

  3. Not every web server uses htaccess files.

I've had to explain to a lot of customers that, yes, their site is
secure, that check was just written by idiots.




Re: [gentoo-user] apache-2.4.20 update doesn't like includes directive

2016-05-22 Thread Mick
On Saturday 21 May 2016 14:10:53 Michael Orlitzky wrote:
> On 05/21/2016 01:11 PM, Mick wrote:

> I had to also replace in the config all vhosts "Order deny,allow"
> 
> > directives with the new syntax.
> 
> You can keep compatibility with the old syntax (if you need to) with
> APACHE2_MODULES="access_compat". If you're installing third-party web
> apps, many of them will ship with apache-2.2 htaccess files containing
> those "Order allow,deny" lines. Without the compatibility module (and if
> you don't fix them yourself), you'll get 500 errors.

Yes, I've already experienced this with some old(er) drupal 7 websites.  
Although I've edited their .htaccess files with the new syntax, there are 
umpteen hardcoded php files in there which had the old syntax and/or run 
checks for it.

I tried setting APACHE2_MODULES="access_compat" in make.conf and I got this 
conflict:
===
WARNING: One or more updates/rebuilds have been skipped due to a dependency 
conflict:

www-servers/apache:2

  (www-servers/apache-2.4.20:2/2::gentoo, ebuild scheduled for merge) 
conflicts with
>=www-servers/apache-2.4[apache2_modules_unixd,-threads] required by (dev-
lang/php-5.5.35:5.5/5.5::gentoo, installed)
 ^  
>=www-servers/apache-2.4[apache2_modules_unixd,-threads] required by (dev-
lang/php-5.6.21:5.6/5.6::gentoo, installed)
 ^  
www-servers/apache[apache2_modules_dir] required by (app-eselect/eselect-
php-0.9.1:0/0::gentoo, installed)
   ^^^ 

Nothing to merge; quitting.
===

eselect has USE=apache2 set, but I don't really understand the difference or 
why they clash.  :-/

-- 
Regards,
Mick

signature.asc
Description: This is a digitally signed message part.


Re: [gentoo-user] apache-2.4.20 update doesn't like includes directive

2016-05-21 Thread Michael Orlitzky
On 05/21/2016 01:11 PM, Mick wrote:
> 
> I added '-D UNIXD_H' to my /etc/conf.d/apache2 and the problem seems to be 
> gone.

That part should be unnecessary. I think there's some magic where we
automatically uncomment the

  LoadModule unixd_module modules/mod_unixd.so

line in your httpd.conf, even without a -D flag.


I had to also replace in the config all vhosts "Order deny,allow"
> directives with the new syntax.

You can keep compatibility with the old syntax (if you need to) with
APACHE2_MODULES="access_compat". If you're installing third-party web
apps, many of them will ship with apache-2.2 htaccess files containing
those "Order allow,deny" lines. Without the compatibility module (and if
you don't fix them yourself), you'll get 500 errors.




Re: [gentoo-user] apache-2.4.20 update doesn't like includes directive

2016-05-21 Thread Mick
On Saturday 21 May 2016 11:32:12 Michael Orlitzky wrote:
> On 05/21/2016 11:11 AM, Mick wrote:
> > Cannot load modules/mod_php.so into server:
> > /usr/lib/apache2/modules/mod_php.so: undefined symbol: unixd_config
> 
> You need "unixd" in your APACHE2_MODULES.

Hmm ... interestingly on this old box I don't seem to have APACHE2_MODULES 
defined.  I guess it emerges the default modules each time?

# echo $APACHE2_MODULES
#

I added '-D UNIXD_H' to my /etc/conf.d/apache2 and the problem seems to be 
gone.  I had to also replace in the config all vhosts "Order deny,allow" 
directives with the new syntax.

From one Michael to another, thank you kindly for your help!  :-)

-- 
Regards,
Mick

signature.asc
Description: This is a digitally signed message part.


Re: [gentoo-user] apache-2.4.20 update doesn't like includes directive

2016-05-21 Thread Michael Orlitzky
On 05/21/2016 11:11 AM, Mick wrote:
> Cannot load modules/mod_php.so into server: 
> /usr/lib/apache2/modules/mod_php.so: undefined symbol: unixd_config

You need "unixd" in your APACHE2_MODULES.