Apache Web Server Community

.htaccess works in http, not in https

2008-10-07T08:25:47Z

Hi everybody,
first time poster.

This has me a little perplexed.
I don't have shell access to this machine so i can't check logs and such to see what is actually going on, but my .htaccess script works fine under http, but it fails to accept the same password with https accesss.

my thought is that perhaps there is some form of authentication difference, or perhaps i need to rebuild my .htpasswd file again.

however this is my .htaccess file

AuthUserFile /full/os/path/to/file/.htpasswd
AuthType Basic
AuthName "Admin Folder"
Require valid-user

any ideas?

triggering mod_rewrite rule via auth failure?

2008-09-19T22:19:16Z

Hi,

I'm looking for a way to construct a RewriteCond that returns true only when a URL is requested without proper HTTP authentication. (The rewrite rule will generate a 301 redirect forcing the request through a proxy, where proper HTTP auth will allow direct access). So far, The Googles have not been helpful; anyone here have an idea?

Effectively, I want

http://user:pass@example.com/path/to/object

to return the object directly, but

http://user:badpass@example.com/path/to/object
or
http://example.com/path/to/object

will return a 301 to:

http://proxy.example.com/path/to/object

(The proxy will use the proper u/p to access the server, so we won't have a redirect loop...)

Reserved word in apache?

2008-06-25T15:40:13Z

While I do have RewriteRules in my htaccess, I'm not employing them currently. And I do not see this as a PHP issue, so here I am. I have a fuseaction based LAMP site, and one of the links in particular isn't working right.

Clicking Link:

http://foo.com/index.php?page=client_sign_in&subpage=file_upload

Returns URI as:

http://foo.com/index.php?page=$redirect_page

Upon further inspection, I noticed that if I change the text from 'file_upload' to 'file_upload1', or any other variation, it works. Is this a reserved word in apache?

Confirming TRACE is off

2008-06-25T14:30:54Z

Is there a non-telnet method of confirming whether TRACE is turned off? I've added TraceEnable off to my conf file but want to make sure everything is OK. Telnet is disabled on my server.

Configuring SVN and Apache

2008-06-24T22:17:33Z

svn came installed on my RHEL5 box and I am working on configuring the system for use with Apache.

I am using the following tutorial: http://www.howtoforge.com/apache_subversion_repository_p2

Everything seemed OK (no errors) until the section "Setting up the initial repository layout:". When issuing the third command:

svn import /tmp/subversion-layout/ http://127.0.0.1/subversion/

The system returned the following error:

[user@myserver directory]# svn import -m /tmp/svnmessage /tmp/subversion-layout/ http://127.0.0.1/subversion/
svn: PROPFIND request failed on '/subversion'
svn: PROPFIND of '/subversion': 405 Method Not Allowed (http://127.0.0.1)

I did not restart apache before issing the svn import command - is that necessary? Also, I created all of the directories as root. Would that cause this problem?

Sporadic network timeouts

2008-04-17T11:45:15Z

So, three sites are hosted on a single RHEL5 box, with Apache 2x serving pages. Apache is using IP based virtual hosts.

Every once in a blue moon I try to access one of the sites and receive network timeout errors (doesn't matter if I access via IP or domain name). The other two sites are still up and serving pages quickly - no slowdown or timeouts.

After several minutes the network timeouts go away on their own.

Any ideas?

Apache serving non-php files as php?

2008-04-03T20:38:09Z

My server seems to think the following is PHP and serve it as such:

http://www.perturb.org/tmp/test.php.foo.bar

However... the same file (symlinked)

http://www.perturb.org/tmp/test.php.txt

Is served as text. In fact it appears that apache servers the content as whatever the "last recognizable" extension. Shouldn't apache only server files that END in .php as php files?

The configuration is very simple:

AddType application/x-httpd-php .php
AddType application/x-httpd-php-source .phps

Apache SSL, removing passphrase prompt

2008-03-05T14:25:44Z

When my system reboots Apache needs the passphrase to start. I'd like to remove this prompt so the server can start without human intervention. So, according to the docs I can do this:

openssl rsa -in server.key.current -out server.key.new

But I wasn't prompted to enter my passphrase when issuing this command. The resulting outfile is identical to server.key.current.
Suggestions?

apache @ 2008-03-05T11:50:00

2008-03-05T09:50:30Z

Good day,
Can I somehow set specific virtualhost for resolving of unregistered in our system domains?

Thanks

IE7 cert mismatch errors

2008-03-03T19:43:21Z

Some of our IE7 users receive security certificate mismatch warnings with every secure page view on subdomain.domain.net. The cert was originally issued to www.domain.net.

Is it possible to add aliases to existing certificates (my hunch is no, but I'm not well versed on them)?

How do I specify the server's document root?

2008-02-05T14:23:25Z

I work on a Macintosh running Apache 2.2.6 for a lot of website development projects in PHP. Up until now, when it was necessary to specify a document root I would just change the value of $_SERVER['DOCUMENT_ROOT'] ... but that's really not that functional, as I still cannot do something like link an image or link like /index.php.

I've been googling for a way to change Apache's document root based on folder structure but thus far my efforts have just caused apache to fail until I undo my changes. What I'm trying to do is set it so that when you go to say "127.0.0.1/Bob" that "Bob" and all its subsequent directories might have a doc root of /httpd/Documents/Bob" but if you go to "127.0.0.1/Mary" there would be a different document root.

Is this possible?

apache @ 2008-01-26T11:24:00

2008-01-26T11:27:34Z

I was playing with my httpd.conf and changed... something apparently, and now (possibly unrelatedly) my .htaccess file for one of my projects isn't working, though it was working perfectly before.

So, I've come to ask what kind of thing within my http.conf could break rewrite rules in my .htaccess, that I could have changed.

PS. I'll remember to back up in future.

FIXED: I just deleted a random AllowOverride statement. Everything *seems* to be working now. And I don't put this server online, so it shouldn't be unsafe.

404 for user pages

2007-12-21T17:13:41Z

I've thought of adding MediaWiki to my site just to make it super easy to add content whenever I wanted. I know I could make Apache serve the wiki user page if the ~username URL was requested, but is it possible to make it do that only if it couldn't be found in the more traditional location (like his home dir) first? Would that require some kind of handler script?

More advanced mod-rewrite

2007-11-16T09:29:29Z

I've recently been switching my site over from a bunch of static HTML pages to PHP using Smarty templating

I've decided to use mod_rewrite to make more attractive and search-engine friendly canonical URLs

I've chosen this format:

http://example.com/some-words/some-more-words/
http://example.com/some-words/
(both are valid, up to 2 such sections as shown)

Notice no ".html"/".php". This is rewritten to

index.php?page=some-words/some-more-words/

The problems:

In the meantime, while I transition to this format, I'm keeping my old static pages up, because there's a lot of inbound links to them that aren't going to get changed (little websites, various forum and blog posts, etc)

I'll eventually get my pages switched over, but in the meantime there's at least one directory I would like to exclude from rewriting. Is there a way I can omit specific URLs from rewriting? I'd like for "example.com/particular-directory/" to be exempt from being rewritten

Another possibly related problem is that I have a few other domains hosted as "add-on" domains to the same hosting package, so their contents are in a subdirectory. So, of course, the URL re-writing directive cascades down and breaks those domains completely. Of course, it only took a few seconds to fix by adding an .htaccess to each subdirectory saying "RewriteEngine Off", but what if I wanted a separate URL-rewriting scheme on those directories? Can I tell it to ignore any other rules that might be applied and start fresh?

My current rewriting rule looks like this:

RewriteEngine On
RewriteRule ^/?([a-zA-Z0-9\-]+/?[a-zA-Z0-9\-]+/?)$ index.php?page=$1 [L]

Is there a flag or other rules that could help me?

(Note: I'm on shared hosting so http.conf etc are not an option)

Apache Con

2007-11-14T18:50:45Z

Anyone here in Atlanta at ApacheCon?

Look for the guy in black with the pipe in one hand and a book in the other. That's me.

Analytics

2007-09-11T15:02:54Z

Our project is interested in buying a solid analytics application for several sites hosted on an Apache server. What are our best options?

FilesMatch

2007-08-27T18:42:12Z

I want to generate links with my code like "index_flotsam.php" and "index_jetsam.php" and have apache ignore everything but "index.php". So if the user clicks on "index_flotsam.php" it will just take them to the file "index.php" but will still display the url "index_flotsam.php". I'm using Apache 2.2.4. I have a feeling I could probably do this with the FilesMatch directive, but I'm not entirely sure how. Any ideas?

Thanks!

Problem with verisign cert

2007-06-28T14:34:23Z

We bought a certificate for a domain. I've set up a few sites with ssl before this, so I was careful to enter the FQDN in my csr request. A day later Verisign sent the cert in an email, which we copied into a sitename.crt file on the server.   I made an unecrypted version of the key so I wouldn't have to enter the passphrase every time Apache starts. (yes I entered the passphrase, which was accepted)

So - I start the server without errors. When I access the site using https://sitename, the browser returns a certificate mismatch error.   The cert details appear with localhost, localdomain, ect, which is not what I entered when creating the csr & key.

<VirtualHost 1.2.3.4:443>
    ServerName sitename.department.domain.ext
    ServerAdmin abc@123.def
    DocumentRoot /www/virtualhosts/sitename
    ErrorLog /var/log/httpd/sitename-error_log
    CustomLog /var/log/httpd/sitename-access_log common
    SSLEngine On
    SSLCertificateFile /usr/local/ssl/crt/sitename.crt
    SSLCertificateKeyFile /usr/local/ssl/crt/sitename_unencrypted.key
    SSLCACertificateFile /usr/local/ssl/crt/intermediate.crt
</VirtualHost>

Is there a way to print out the details listed in a crt file, from command line?   Can I do the same with the original csr file?

apache @ 2007-06-26T22:47:00

2007-06-26T21:53:57Z

~~So, I'm lazy...~~ So, I figured the main point of computers (and therefore programming languages) is so we don't have to repeat stuff; we just write a short application to do it for us. Because of that, I'm getting a bit bored with typing include_once ('header.php'); at the top and include_once (footer.php); at the bottom of all my scripts. Is there a way to get Apache to just automatically includes those files at the right place (the top and bottom of the script), so I don't have to write it? Obviously, I need to restrict it to just one directory of my file system.

Failing that, I'll just make a macro in Notepad++...

Thanks.

Apache 2.2.4 and Vista

2007-06-21T00:30:39Z

I guess lots of people (including me) are having problems getting Apache to work on Vista. I don't know if anyone's already posted this solution, but I pieced it together from a few different sites that each offered their own little tidbit. I hope this helps someone:

1) if you have already been trying to make this work, make sure you completely remove and detele all evidence of apache 2.2.4 from your computer: program files, registry, etc. if you haven't had a failed install attempt and you're starting fresh, go on to step 2.
2) turn off User Access Control
2) run cmd.exe as an administrator. you can do this by right-clicking on the link in the start menu program list.
3) from the command line, go to the directory your apache msi file is in. enter: "msiexec /i .msi" (without the quotes obviously)
5) let the program run, check off everything as you see fit. when the program has finished running, it will most likely display an error popup. close this.
6) back on the command line (still running as administrator), go to \bin and enter: "httpd -k install"
7) now apache should show up as a service. but you're not done yet! go to the apache monitor/control thingy in your start menu. right-click it and go to properties->compatibility. set the compatibility mode to winxp sp2.
8) that's it! you may want to start your apache control, but it will run now without that.

Virtual hosting - testing

2007-06-12T14:15:03Z

I created two name-based virtual hosts

NameVirtualHost *:80

<VirtualHost *:80>
ServerName siteone.subX.subY.com
ServerAdmin me@me.com
DocumentRoot /www/virtualhosts/siteone
ErrorLog /var/log/httpd/siteone-error_log
CustomLog /var/log/httpd/siteone-access_log common
</VirtualHost>

<VirtualHost *:80>
ServerName sitetwo.subX.subY.com
ServerAdmin me@me.com
DocumentRoot /www/virtualhosts/sitetwo
ErrorLog /var/log/httpd/sitetwo-error_log
CustomLog /var/log/httpd/sitetwo-access_log common
</VirtualHost>

Shouldn't I be able to test them by adding entries in my local hosts file, and accessing via http://sitetwo.subX.subY.com? Well, when I do that, the site that displays is actually siteone.subX.subY.com. So it's always displaying the default VH, no matter what domain I use.

Seperate instances of Apache under one box

2007-06-11T19:28:22Z

Can Apache run under different instances, so that we can direct traffic to each Virtual Host under a different instance. Would doing so offer better security than simply using virtual hosting? One of our sites is internal, the others are public. We want to keep the internal site locked down extremely tight.

In that same light, is it possible to have different SSL certs for different Virtual Hosts running on the same physical box (under one IP)?

Thanks for suggestions/pointers.

apache @ 2007-05-11T02:59:00

2007-05-11T02:06:58Z

Suppose I had various servers for different types of content sitting behing an Apache server. Firstly, am I right in thinking I can configure Apache to connect to the relevant computer when everything's static? Secondly, what if things moved dynamicaly, for example if I maintained a dynamic cache, either on the same or a different machine to the one running Apache. Where Apache should look for a given resource would be specified by an external program. Can I do this? I'd need to be able to pass the external program not just the http request but also and session variables.

Cheers

"You don't have permission to access.."

2007-04-25T13:50:46Z

I'm running Apache 2.2 from wamp (so I have PHP5 and MySQL 5, though I don't think it has anything to do with them) on Windows XP. Anyway.

I can access everything fine using "localhost", and a friend told me that I could access my server by just using my computer's name. So I named my computer "nemo-serv" (all my electrical devices are named after characters from Finding Nemo, my laptop is Nemo,) and then could use nemo-serv fine, just like localhost.

Then I changed something, and I just get a "You don't have permission to access this directory" when using nemo-serv, though localhost is still fine. I really have no idea what I changed that could have done this, but I was hoping you guys would be able to point me in the right direction.

Thanks ^^