[gentoo-user] apache permssions

[gentoo-user] apache permssions

[Nick Rout]

I wanted to use mod_status so I set -D INFO in /etc/conf.d/apache2 and
my /etc/httpd.conf cotains the following:

<IfDefine INFO>
    ExtendedStatus On
    <Location /server-status>
        SetHandler server-status
        Order deny,allow
        Deny from all
        Allow from localhost
    </Location>
</IfDefine>

Looks to me as though it should allow connections from localhost, but
it doesn't, I get 403 Forbidden.

If I comment out the lines Deny from all, Allow from localhost it
works, but not as it is written i the default file as quoted above.

What am I doing wrong?

Reading the manual here makes me believe it should be working:

http://httpd.apache.org/docs/2.0/mod/mod_access.html#order





-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] apache permssions

[darren kirby]

[-- Attachment #1: Type: text/plain, Size: 1181 bytes --]

quoth the Nick Rout:
> I wanted to use mod_status so I set -D INFO in /etc/conf.d/apache2 and
> my /etc/httpd.conf cotains the following:
>
> <IfDefine INFO>
>     ExtendedStatus On
>     <Location /server-status>
>         SetHandler server-status
>         Order deny,allow
>         Deny from all
>         Allow from localhost
>     </Location>
> </IfDefine>
>
> Looks to me as though it should allow connections from localhost, but
> it doesn't, I get 403 Forbidden.

Yeah, it should be working, and in fact it is exactly the same as on my system 
where it does work. Is your system having problems resolving localhost? Does 
127.0.0.1 work?

> If I comment out the lines Deny from all, Allow from localhost it
> works, but not as it is written i the default file as quoted above.
>
> What am I doing wrong?
>
> Reading the manual here makes me believe it should be working:
>
> http://httpd.apache.org/docs/2.0/mod/mod_access.html#order

-d
-- 
darren kirby :: Part of the problem since 1976 :: http://badcomputer.org
"...the number of UNIX installations has grown to 10, with more expected..."
- Dennis Ritchie and Ken Thompson, June 1972

[-- Attachment #2: Type: application/pgp-signature, Size: 189 bytes --]

Re: [gentoo-user] apache permssions

[Nick Rout]

On Sat, 4 Feb 2006 15:58:53 -0800
darren kirby <bulliver@badcomputer.org> wrote:

> quoth the Nick Rout:
> > I wanted to use mod_status so I set -D INFO in /etc/conf.d/apache2 and
> > my /etc/httpd.conf cotains the following:
> >
> > <IfDefine INFO>
> >     ExtendedStatus On
> >     <Location /server-status>
> >         SetHandler server-status
> >         Order deny,allow
> >         Deny from all
> >         Allow from localhost
> >     </Location>
> > </IfDefine>
> >
> > Looks to me as though it should allow connections from localhost, but
> > it doesn't, I get 403 Forbidden.
> 
> Yeah, it should be working, and in fact it is exactly the same as on my system 
> where it does work. Is your system having problems resolving localhost? Does 
> 127.0.0.1 work?
> 
> > If I comment out the lines Deny from all, Allow from localhost it
> > works, but not as it is written i the default file as quoted above.
> >
> > What am I doing wrong?
> >
> > Reading the manual here makes me believe it should be working:
> >
> > http://httpd.apache.org/docs/2.0/mod/mod_access.html#order
> 
> -d

Seems to be the same if i make the request to
http://locahost/server-status

the error message in the apache log seems to be the same whether i ask
for loalhost/server-status or 127.0.0.1/server-status. 

(asked for 127.0.0.1)

[Sun Feb 05 18:18:35 2006] [error] [client 127.0.0.1] client denied by
server configuration: /var/www/localhost/htdocs/server-status

(asked for localhost)

[Sun Feb 05 18:20:59 2006] [error] [client 127.0.0.1] client denied by
server configuration: /var/www/localhost/htdocs/server-status

resolution for localhost seems to work:

nick@sf ~ $ host localhost
localhost.rout.dyndns.org has address 127.0.0.1
nick@sf ~ $ host 127.0.0.1
1.0.0.127.in-addr.arpa domain name pointer localhost.

More pointers appreciated. I don't particularly need this, it damn
annoys me that it sdoesn't work though.



> -- 
> darren kirby :: Part of the problem since 1976 :: http://badcomputer.org
> "...the number of UNIX installations has grown to 10, with more expected..."
> - Dennis Ritchie and Ken Thompson, June 1972
> 
-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] apache permssions

[Willie Wong]

On Sun, Feb 05, 2006 at 06:26:16PM +1300, Penguin Lover Nick Rout squawked:
> > > <IfDefine INFO>
> > >     ExtendedStatus On
> > >     <Location /server-status>
> > >         SetHandler server-status
> > >         Order deny,allow
> > >         Deny from all
> > >         Allow from localhost
> > >     </Location>
> > > </IfDefine>
> > >
> > > Looks to me as though it should allow connections from localhost, but
> > > it doesn't, I get 403 Forbidden.
> > 
> > Yeah, it should be working, and in fact it is exactly the same as on my system 
> > where it does work. Is your system having problems resolving localhost? Does 
> > 127.0.0.1 work?
> > 

Two really stupid observations on my part (probably doesn't matter,
but who knows?) If you try "Allow from 127.0.0.1" instead of
localhost, does it work? and does it matter that deny,allow is all in
lowercase? I recall sometimes that arguments to directives are case
sensitive, though I suspect that not to be the case (no pun intended)
here. 

Best, 

W
-- 
"Ford had his own code of ethics. It wasn't much of one, 
but it was his and he stuck by it, more or less. One rule 
he made was never to buy his own drinks. He wasn't sure if 
that counted as an ethic, but you have to go with what 
you've got. "
Sortir en Pantoufles: up 84 days, 22:50
-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] apache permssions

[Nick Rout]

On Sun, 5 Feb 2006 01:38:11 -0500
Willie Wong <wwong@Princeton.EDU> wrote:

> On Sun, Feb 05, 2006 at 06:26:16PM +1300, Penguin Lover Nick Rout squawked:
> > > > <IfDefine INFO>
> > > >     ExtendedStatus On
> > > >     <Location /server-status>
> > > >         SetHandler server-status
> > > >         Order deny,allow
> > > >         Deny from all
> > > >         Allow from localhost
> > > >     </Location>
> > > > </IfDefine>
> > > >
> > > > Looks to me as though it should allow connections from localhost, but
> > > > it doesn't, I get 403 Forbidden.
> > > 
> > > Yeah, it should be working, and in fact it is exactly the same as on my system 
> > > where it does work. Is your system having problems resolving localhost? Does 
> > > 127.0.0.1 work?
> > > 
> 
> Two really stupid observations on my part (probably doesn't matter,
> but who knows?) If you try "Allow from 127.0.0.1" instead of
> localhost, does it work? 

Yes it does! So it must be a resolution problem after all. Thank you.

> and does it matter that deny,allow is all in
> lowercase? I recall sometimes that arguments to directives are case
> sensitive, though I suspect that not to be the case (no pun intended)
> here. 
> 


Doesn't seem to matter.

> Best, 
> 
> W
> -- 
> "Ford had his own code of ethics. It wasn't much of one, 
> but it was his and he stuck by it, more or less. One rule 
> he made was never to buy his own drinks. He wasn't sure if 
> that counted as an ethic, but you have to go with what 
> you've got. "
> Sortir en Pantoufles: up 84 days, 22:50
> -- 
> gentoo-user@gentoo.org mailing list
> 
-- 
gentoo-user@gentoo.org mailing list

OT - What is mod_status? (WAS: Re: [gentoo-user] apache permssions)

[Michael Sullivan]

On Mon, 2006-02-06 at 09:37 +1300, Nick Rout wrote:
> On Sun, 5 Feb 2006 01:38:11 -0500
> Willie Wong <wwong@Princeton.EDU> wrote:
> 
> > On Sun, Feb 05, 2006 at 06:26:16PM +1300, Penguin Lover Nick Rout squawked:
> > > > > <IfDefine INFO>
> > > > >     ExtendedStatus On
> > > > >     <Location /server-status>
> > > > >         SetHandler server-status
> > > > >         Order deny,allow
> > > > >         Deny from all
> > > > >         Allow from localhost
> > > > >     </Location>
> > > > > </IfDefine>
> > > > >
> > > > > Looks to me as though it should allow connections from localhost, but
> > > > > it doesn't, I get 403 Forbidden.
> > > > 
> > > > Yeah, it should be working, and in fact it is exactly the same as on my system 
> > > > where it does work. Is your system having problems resolving localhost? Does 
> > > > 127.0.0.1 work?
> > > > 
> > 
> > Two really stupid observations on my part (probably doesn't matter,
> > but who knows?) If you try "Allow from 127.0.0.1" instead of
> > localhost, does it work? 
> 
> Yes it does! So it must be a resolution problem after all. Thank you.
> 
> > and does it matter that deny,allow is all in
> > lowercase? I recall sometimes that arguments to directives are case
> > sensitive, though I suspect that not to be the case (no pun intended)
> > here. 
> > 
> 
> 
> Doesn't seem to matter.
> 
> > Best, 
> > 
> > W
> > -- 
> > "Ford had his own code of ethics. It wasn't much of one, 
> > but it was his and he stuck by it, more or less. One rule 
> > he made was never to buy his own drinks. He wasn't sure if 
> > that counted as an ethic, but you have to go with what 
> > you've got. "
> > Sortir en Pantoufles: up 84 days, 22:50
> > -- 
> > gentoo-user@gentoo.org mailing list
> > 

What is mod_status?  I assume it is something for www-apache, but I
can't find it in /usr/portage/www-apache and eix has no idea about it...

-- 
gentoo-user@gentoo.org mailing list

Re: OT - What is mod_status? (WAS: Re: [gentoo-user] apache permssions)

[kashani]

Michael Sullivan wrote:
> What is mod_status?  I assume it is something for www-apache, but I
> can't find it in /usr/portage/www-apache and eix has no idea about it...
> 

It's a default module within Apache like mod_rewrite or mod_proxy
http://webauthv3.stanford.edu/manual/mod/mod_status.html

And then you can use little scripts in Cacti to make graphs.
http://forums.cacti.net/viewtopic.php?t=9861

kashani
-- 
gentoo-user@gentoo.org mailing list

Re: OT - What is mod_status? (WAS: Re: [gentoo-user] apache permssions)

[darren kirby]

[-- Attachment #1: Type: text/plain, Size: 567 bytes --]

quoth the Michael Sullivan:

> What is mod_status?  I assume it is something for www-apache, but I
> can't find it in /usr/portage/www-apache and eix has no idea about it...

It is not a separate package, it is a built in "virtual page" analogous to 
the /proc filesystem that apache creates on the fly to give you information 
about your webserver.

-d
-- 
darren kirby :: Part of the problem since 1976 :: http://badcomputer.org
"...the number of UNIX installations has grown to 10, with more expected..."
- Dennis Ritchie and Ken Thompson, June 1972

[-- Attachment #2: Type: application/pgp-signature, Size: 189 bytes --]

Re: [gentoo-user] apache permssions

[darren kirby]

[-- Attachment #1: Type: text/plain, Size: 783 bytes --]

quoth the Nick Rout:
> > > >
> > > > Yeah, it should be working, and in fact it is exactly the same as on
> > > > my system where it does work. Is your system having problems
> > > > resolving localhost? Does 127.0.0.1 work?
> >
> > Two really stupid observations on my part (probably doesn't matter,
> > but who knows?) If you try "Allow from 127.0.0.1" instead of
> > localhost, does it work?
>
> Yes it does! So it must be a resolution problem after all. Thank you.

Sorry Nick, that is what I meant by "Does 127.0.0.1 work?". Should have been 
more clear.

-d
-- 
darren kirby :: Part of the problem since 1976 :: http://badcomputer.org
"...the number of UNIX installations has grown to 10, with more expected..."
- Dennis Ritchie and Ken Thompson, June 1972

[-- Attachment #2: Type: application/pgp-signature, Size: 189 bytes --]