[gentoo-user] [OT] How to set Apache up to serve SSIs?

[gentoo-user] [OT] How to set Apache up to serve SSIs?

[Peter Humphrey]

Hello List,

Sorry to be a nuisance, but can anyone point me to the right incantation to 
configure Apache on a local server and have it serve up server-side includes? 
I don't really want to use the production server as a test-bed - in fact I 
really don't want to.

I'm getting "don't have permission to access <blah>.jpg" errors; also the 
file that was supposed to be included isn't. It all works fine on the 
production server though (Zen Internet).

Thanks if you can help.

-- 
Rgds
Peter		Linux Counter 5290, 1994-04-23

Re: [gentoo-user] [OT] How to set Apache up to serve SSIs?

[Paul Hartman]

On Sun, Aug 7, 2011 at 11:40 AM, Peter Humphrey
<peter@humphrey.ukfsn.org> wrote:
> Hello List,
>
> Sorry to be a nuisance, but can anyone point me to the right incantation to
> configure Apache on a local server and have it serve up server-side includes?
> I don't really want to use the production server as a test-bed - in fact I
> really don't want to.
>
> I'm getting "don't have permission to access <blah>.jpg" errors; also the
> file that was supposed to be included isn't. It all works fine on the
> production server though (Zen Internet).
>
> Thanks if you can help.

There is a how-to for setting up SSIs:

http://httpd.apache.org/docs/2.2/howto/ssi.html

Re: [gentoo-user] [OT] How to set Apache up to serve SSIs?

[Peter Humphrey]

On Sunday 07 August 2011 19:07:45 Paul Hartman wrote:

> There is a how-to for setting up SSIs:
> 
> http://httpd.apache.org/docs/2.2/howto/ssi.html

Thank you, Paul. I don't know why I didn't find that, but I didn't.

-- 
Rgds
Peter		Linux Counter 5290, 1994-04-23

Re: [gentoo-user] [OT] How to set Apache up to serve SSIs?

[Peter Humphrey]

On Sunday 07 August 2011 19:07:45 Paul Hartman wrote:

> There is a how-to for setting up SSIs:
> 
> http://httpd.apache.org/docs/2.2/howto/ssi.html

Ah. Thank you Paul. I'll see if I can work out what APACHE_MODULES I need in 
make.conf.

-- 
Rgds
Peter		Linux Counter 5290, 1994-04-23

Re: [gentoo-user] [OT] How to set Apache up to serve SSIs?

[Paul Hartman]

On Mon, Aug 8, 2011 at 9:04 AM, Peter Humphrey <peter@humphrey.ukfsn.org> wrote:
> On Sunday 07 August 2011 19:07:45 Paul Hartman wrote:
>
>> There is a how-to for setting up SSIs:
>>
>> http://httpd.apache.org/docs/2.2/howto/ssi.html
>
> Ah. Thank you Paul. I'll see if I can work out what APACHE_MODULES I need in
> make.conf.

I think the "include" module is the necessary one to add.

Re: [gentoo-user] [OT] How to set Apache up to serve SSIs?

[Peter Humphrey]

On Monday 08 August 2011 17:59:35 Paul Hartman wrote:
> On Mon, Aug 8, 2011 at 9:04 AM, Peter Humphrey <peter@humphrey.ukfsn.org> 
wrote:
> > On Sunday 07 August 2011 19:07:45 Paul Hartman wrote:
> >> There is a how-to for setting up SSIs:
> >> 
> >> http://httpd.apache.org/docs/2.2/howto/ssi.html
> > 
> > Ah. Thank you Paul. I'll see if I can work out what APACHE_MODULES I
> > need in make.conf.
> 
> I think the "include" module is the necessary one to add.

The trouble with specifying Apache modules is that including the one I want 
promptly disables all the default ones, and I have to experiment to get them 
back.

-- 
Rgds
Peter		Linux Counter 5290, 1994-04-23

Re: [gentoo-user] [OT] How to set Apache up to serve SSIs?

[Paul Hartman]

On Mon, Aug 8, 2011 at 12:27 PM, Peter Humphrey
<peter@humphrey.ukfsn.org> wrote:
> On Monday 08 August 2011 17:59:35 Paul Hartman wrote:
>> On Mon, Aug 8, 2011 at 9:04 AM, Peter Humphrey <peter@humphrey.ukfsn.org>
> wrote:
>> > On Sunday 07 August 2011 19:07:45 Paul Hartman wrote:
>> >> There is a how-to for setting up SSIs:
>> >>
>> >> http://httpd.apache.org/docs/2.2/howto/ssi.html
>> >
>> > Ah. Thank you Paul. I'll see if I can work out what APACHE_MODULES I
>> > need in make.conf.
>>
>> I think the "include" module is the necessary one to add.
>
> The trouble with specifying Apache modules is that including the one I want
> promptly disables all the default ones, and I have to experiment to get them
> back.

Ahh, I see. It looks like "include" is one of the defaults. I don't
have apache2 installed and I unset the variables. It looks like these
are the default enabled modules here in case you want to paste them in
to your variable:

actions alias auth_basic authn_alias authn_anon authn_dbm
authn_default authn_file authz_dbm authz_default authz_groupfile
authz_host authz_owner authz_user autoindex cache cgi cgid dav dav_fs
dav_lock deflate dir disk_cache env expires ext_filter file_cache
filter headers include info log_config logio mem_cache mime mime_magic
negotiation rewrite setenvif speling status unique_id userdir
usertrack vhost_alias

Re: [gentoo-user] [OT] How to set Apache up to serve SSIs?

[Peter Humphrey]

On Monday 08 August 2011 19:46:35 Paul Hartman wrote:

> It looks like "include" is one of the defaults. I don't have apache2
> installed and I unset the variables. It looks like these are the default
> enabled modules here in case you want to paste them in to your variable:
> 
> actions alias auth_basic authn_alias authn_anon authn_dbm
> authn_default authn_file authz_dbm authz_default authz_groupfile
> authz_host authz_owner authz_user autoindex cache cgi cgid dav dav_fs
> dav_lock deflate dir disk_cache env expires ext_filter file_cache
> filter headers include info log_config logio mem_cache mime mime_magic
> negotiation rewrite setenvif speling status unique_id userdir
> usertrack vhost_alias

That's a great help - many thanks!

Looks like that isn't my problem then. I have another head-scratching 
opportunity...

-- 
Rgds
Peter		Linux Counter 5290, 1994-04-23

Re: [gentoo-user] [OT] How to set Apache up to serve SSIs?

[Adam Carter]

> Looks like that isn't my problem then. I have another head-scratching
> opportunity...

Quick idea without proper investigation - building the modules is a
different thing to actually loading them - they can be built but not
loaded by the config, so obviously they wont work if that's what's
happened.

Also, a secure configuration will only load the modules you're
actually using, to reduce the amount of code exposed to a potential
attacker.

Re: [gentoo-user] [OT] How to set Apache up to serve SSIs?

[Peter Humphrey]

On Tuesday 09 August 2011 01:31:25 Adam Carter wrote:
> > Looks like that isn't my problem then. I have another head-scratching
> > opportunity...
> 
> Quick idea without proper investigation - building the modules is a
> different thing to actually loading them - they can be built but not
> loaded by the config, so obviously they wont work if that's what's
> happened.

Well, I do have this:

# cat /var/www/localhost/htdocs/.htaccess
RewriteEngine on

RewriteCond %{HTTP_REFERER} !^http://tideswellmvc.co.uk/.*$      [NC]
RewriteCond %{HTTP_REFERER} !^http://tideswellmvc.co.uk$      [NC]
RewriteCond %{HTTP_REFERER} !^http://tmvc.myzen.co.uk/.*$      [NC]
RewriteCond %{HTTP_REFERER} !^http://tmvc.myzen.co.uk$      [NC]
RewriteCond %{HTTP_REFERER} !^http://www.tideswellmvc.co.uk/.*$      [NC]
RewriteCond %{HTTP_REFERER} !^http://www.tideswellmvc.co.uk$      [NC]
RewriteCond %{HTTP_REFERER} !^http://www.tmvc.myzen.co.uk/.*$      [NC]
RewriteCond %{HTTP_REFERER} !^http://www.tmvc.myzen.co.uk$      [NC]
RewriteRule .*\.(jpg|jpeg|gif|png|bmp)$ - [F,NC]

Options +Includes

I added that last line; I don't know where the rest came from, unless from 
the production server at Zen Internet. Removing them all allows me to see 
the images in the pages, which were provoking permission errors before, but 
apache still doesn't process the SSI.

The alternative place for the Options line is in /etc/apache/<somefile>, but 
which? I don't have virtual hosting set up: this is purely a development 
environment for the remote production server.

What ownership permissions should the files under ..../htdocs have? As far as 
I can see this is typical of them all at present:

-rw-r--r--  1 prh apache 8.4K Aug  8 17:36 index.shtml
drwxr-xr-x  6 prh apache 4.0K Aug  7 17:24 pages

# groups prh
adm lp wheel floppy cdrom cdrw usb users portage plugdev apache prh

-- 
Rgds
Peter		Linux Counter 5290, 1994-04-23

Re: [gentoo-user] [OT] How to set Apache up to serve SSIs?

[Adam Carter]

> Well, I do have this:

I meant the LoadModule directive, probably in httpd.conf, ie
LoadModule include_module modules/mod_include.so

> What ownership permissions should the files under ..../htdocs have?

For static content they just have to be readable by apache. If there's
a permissions problem you should see it in error.log