Apache: Phrase Book: Essential Code and Commands By Daniel Lopez, Jesus Blanco Publisher: Sams Pub Date: May 25, 2006 Print ISBN-10: 0-672-32836-4 Print ISBN-13: 978-0-672-32836-7 Pages: 240 Table of Contents | Index What is the new essential for Apache developers? The Apache Phrasebook Packed with practical solutions, or "phrases," for tasks that the Apache developer much accomplish every day, the phrasebook fills the need for a short, functional, to-the-point reference for Apache The code contained in the phrasebook is flexible, so it can be easily adapted to your needs Today's problem is likely to be tomorrow's problem, so don't waste your time on lengthy tutorials Go straight to practical Apache tools that provide immediately applicable solutions for any situation with the Apache Phrasebook Apache: Phrase Book: Essential Code and Commands By Daniel Lopez, Jesus Blanco Publisher: Sams Pub Date: May 25, 2006 Print ISBN-10: 0-672-32836-4 Print ISBN-13: 978-0-672-32836-7 Pages: 240 Table of Contents | Index Copyright About the Authors Acknowledgments We Want to Hear from You! Reader Services Introduction Chapter 1 Apache Basics Discovering Apache Determining Whether Apache Is Already Installed Installing Apache 1.3 on Linux and Unix Installing Apache 2.0 on Linux and Unix Installing Apache on Windows Configuration File Basics Using Multiple Configuration Files Starting, Stopping, and Restarting Apache Changing the Address and Port Apache Uses Changing the User Apache Runs As Specifying a Server Name Providing an Icon for my Web Page Discovering the Modules Available on the Server Enabling and Disabling Individual Modules Adding Modules after Compiling Apache Without Recompiling Publishing Content Chapter 2 Troubleshooting Help! My Apache Server Does Not Work! The Error Log Logging to the System Log Daemon Controlling the Amount of Information Logged Testing the Apache Configuration for Problems Testing Apache from the Command Line Checking That Apache Is Running Alternate Ways of Stopping Apache Using Apache to Debug Apache Startup Errors Access Denied Errors Internal Server Errors Additional Error Log Files Redirections Do Not Work Troubleshooting Checklist Chapter 3 Logs and Monitoring Introduction to Logging in Apache Default Apache Log Files Creating Log Formats Creating a Custom Log File Redirecting Logs to an External Program Logging Requests Conditionally Monitoring Who Is Linking to Your Website Monitoring Apache with mod_status Monitoring Apache with SNMP Analyzing Your Logs with Open-source Tools Monitoring Your Logs in Real Time Logging Requests to a Database Rotating and Archiving Logs Controlling IP Address Resolution Processing Logged IP Addresses Restarting Apache Automatically If It Fails Merging and Splitting Log Files Keeping Separate Logs for Each Virtual Host Common Log Entries Chapter 4 URL Mapping and Dynamic Content URL Mapping Mapping URLs to Files with Alias Mapping URL Patterns to Files with AliasMatch Redirecting a Page to Another Location Redirecting to the Latest Version of a File Redirecting Failed or Unauthorized Requests Defining Content Handlers Understanding MIME Types Configuring MIME Types Basics of Running CGI Scripts Marking Resources As Executable CGIs Associating Scripts with HTTP Methods and MIME Types Troubleshooting the Execution of CGI Scripts Improving CGI Script Performance Understanding Server Side Includes Configuring Server Side Includes Setting Environment Variables Setting Environment Variables Dynamically Special Environment Variables Understanding Content Negotiation Configuring Content Negotiation Assigning Default Charsets and Language Priorities Advanced URL Mapping with mod_rewrite Understanding the "Trailing Slash" Problem Fixing Spelling Mistakes Fixing Capitalization Problems Validating Your Pages with Tidy Chapter 5 Virtual Hosting What Is Virtual Hosting? What Is IP-based Virtual Hosting? Configuring IP-based Virtual Hosting What Is Name-based Virtual Hosting? Configuring Name-based Virtual Hosting What Happens If a Request Does Not Match Any Virtual Host? Configuring a Default Name-based Virtual Host Configuring a Default IP-based Virtual Host Mixing Name-based and IP-based Virtual Hosts Debugging Virtual Host Setups Using SSL with Name-based Virtual Hosts Alternate Virtual Hosting Alternate Virtual Hosting Modules Per-directory Configuration Files Controlling the Scope of Per-directory Configuration Files Disabling Per-directory Configuration Files Chapter 6 Security and Access Control Understanding the Need for Access Control Differences Between Apache Versions Understanding Basic and Digest Authentication Introducing Apache Access Control Introducing Apache Authorization and Authentication Configuration Creating a User Database Using Require to Authorize Users and Groups Handling a Large Number of Users Allowing Access Only to Specific IP Addresses Denying Access to Specific IP Addresses Combining Access Control Methods Customizing Your Access Denied Page Putting Users in Control Denying Access to System and Sensitive Files Restricting Program Execution Preventing Abuse Disabling Directory Listings Changing the Server: Header Preventing Hotlinking to Your Images Restricting Specific HTTP Methods Restricting Access Based on the Browser Type Using Location and Directory Sections Additional Authentication Modules Apache 2.2 Keeping Up to Date with Apache Security Security Checklist Chapter 7 SSL/TLS What Is SSL? How Does SSL Work? Compiling OpenSSL Encryption Keys Creating a Key Pair Creating a Password-protected Key Pair Remove the Password from a Key Certificates Creating a Certificate Signing Request Showing the Contents of a Certificate Signing Request Creating a Self-signed Certificate Compiling SSL Support in Apache 1.3 Compiling SSL Support in Apache 2.x Minimal Apache Configuration Starting Apache with SSL Support SSLPassPhraseDialog Improving SSL Performance Forcing All Content to Be Served Using SSL SSL and Name-based SSL Virtual Hosts Using Apache Auth Modules with SSL Warning Messages When Accessing an SSL-enabled Website Creating Client Certificates Authentication Using Client Certificates Alternatives to mod_ssl Testing SSL-enabled Websites from the Command Line Working Around Buggy SSL Implementations Complex Access Control with mod_ssl Related Chapters Chapter 8 Content Publishing with DAV Content Publishing and Apache Introducing WebDAV Advantages of Using mod_dav WebDAV and the HTTP Protocol Installing mod_dav on Apache 2.0 Installing mod_dav on Apache 1.3 Basic WebDAV Configuration Securing Your WebDAV Configuration Accessing DAV Resources from Microsoft Office Accessing DAV from Microsoft Windows Accessing DAV Resources from Firefox Accessing DAV from the Command Line Dealing with Buggy Clients mod_speling and DAV Dynamic Content and DAV Enabling Per-user Pages Alternate User Directories Fixing Problems with DAVLockDB Chapter 9 Performance and Scalability Tuning Apache Understanding Performance and Scalability Tuning Your Hardware Increasing OS Limits Increasing OS Limits on Processes Increasing OS File Descriptors Controlling External Processes Improving File System Performance Handling Symbolic Links Tuning Network and Status Settings Preventing Abuse Limiting Connections and Bandwidth Dealing with Robots Reverse Proxies and Load Balancers Caching and Compression Module-specific Optimizations Alternatives to Apache Chapter 10 Apache Proxy and Caching Support Understanding the Need for Caching and Proxies Understanding Forward and Reverse Proxies Differences Between Apache 1.3, 2.0, and 2.2 Enabling mod_proxy Support Enabling Forward Proxy Support Using a Reverse Proxy to Unify Your URL Space Hiding the Backend Servers Preventing URLs from Being Reverse Proxied Improving Performance Offloading SSL Processing Passing Proxy Information in Headers Manipulating Headers Implementing a Caching Proxy Caching in Apache 2 Load Balancing Connecting to Tomcat Alternate Proxies Transparent HTTP Proxies Chapter 11 Multi Processing and Protocol Modules The Evolution of Apache's Architecture Selecting a Multi Processing Module Understanding Process-Based MPMs Configuring the Prefork MPM Understanding Threaded and Hybrid MPMs Configuring the Worker MPM Using Alternate MPMs Understanding Apache 2 Filters Using Apache As an FTP Server Using Apache As a POP3 Server Compressing Content on the Fly Index Copyright Apache Phrasebook Copyright © 2006 by Sams Publishing All rights reserved No part of this book shall be reproduced, stored in a retrieval system, or transmitted by any means, electronic, mechanical, photocopying, recording, or otherwise, without written permission from the publisher No patent liability is assumed with respect to the use of the information contained herein Although every precaution has been taken in the preparation of this book, the publisher and author assume no responsibility for errors or omissions Nor is any liability assumed for damages resulting from the use of the information contained herein Library of Congress Catalog Card Number: 2005903948 Printed in the United States of America First Printing: May 2006 09 08 07 06 4 3 2 1 Trademarks All terms mentioned in this book that are known to be trademarks or service marks have been appropriately capitalized Sams Publishing cannot attest to the accuracy of this information Use of a term in this book should not be regarded as affecting the validity of any trademark or service mark Warning and Disclaimer Every effort has been made to make this book as complete and as accurate as possible, but no warranty or fitness is implied The information provided is on an "as is" basis The author(s) and the publisher shall have neither liability nor responsibility to any person or entity with respect to any loss or damages arising from the information contained in this book Bulk Sales Sams Publishing offers excellent discounts on this book when ordered in quantity for bulk purchases or special sales For more information, please contact U.S Corporate and Government Sales 1-800-382-3419 corpsales@pearsontechgroup.com For sales outside of the U.S., please contact International Sales international@pearsoned.com The Safari® Enabled icon on the cover of your favorite technology book means the book is available through Safari Bookshelf When you buy this book, you get free access to the online edition for 45 days Safari Bookshelf is an electronic reference library that lets you easily search thousands of technical books, find code samples, download chapters, and access technical information whenever and wherever you need it To gain 45-day Safari Enabled access to this book: Go to http://www.samspublishing.com/safarienabled requests [See also logs.] abuse, preventing Accept mechanism Require directive restarting Apache automatically after failure graceful restarts reverse proxies header manipulation hiding backend servers passing information in headers performance enhancement preventing SSL processing tuning Apache URL unification RFC 2817 specification RLimitCPU directive RLimitMem directive RLimitNProc directive Robotcop module robots, dealing with robots.txt robots.txt Not Found log entries root, running servers as rotatelogs tool rotating logs Index [SYMBOL] [A] [B] [C] [D] [E] [F] [G] [H] [I] [K] [L] [M] [N] [O] [P] [R] [S] [T] [U] [V] [W] -S option (httpd) sample scripts, removing for security Satisfy directive scalability, definition of ScanErrLog Script directive ScriptAlias directive ScriptLog directive ScriptLogBuffer directive ScriptLogLength directive scrop, per-directory configuration files sections, definition of Secure HTTP [See SSL.] Secure Sockets Layer/Transport Layer Security [See SSL.] security [See also access control; authentication; authorization.] CGI scripts, disabling unneeded scripts DAV differences in Apache versions modules, disabling unneeded modules permissions, checking proxy functionality, limiting/disabling restricting access by default sample scripts, removing updating Apache segmentation faults selecting MPMs self-signed certificates server names, specifying server side includes [See SSI.] server-generated error messages, IE and server-parsed content handler, configuring SSI Server: headers, changing for access control ServerAlias directive ServerName directive IP-based virtual hosts, configuring name-based virtual hosts server names, specifying ServerRoot directive 2nd servers ServerTokens directive SetEnv directive SetEnvIf directive 2nd SetFilter directive SetHandler directive 2nd SIGHUP, kill command and Simple Network Management Protocol [See SNMP, monitoring Apache with.] sitecopy, accessing DAV Skype, port conflicts with slashes (/), trailing slash problems SNMP, monitoring Apache with source tarballs, downloading special environment variables [See also environment variables.] spelling, fixing URL spelling mistakes splitting log files Squid proxy SSI configuring overview SSL alternatives to mod_ssl authorization modules and buggy implementations, handling certificates certificate signing requests client certificates, creating expired certificates mismatched domains overview self-signed certificates unknown CAs compiling complex access control configuring Apache encryption keys [See also SSL; certificates.] overview pairs, creating password-protected pairs, creating passwords, removing forcing universal service under name-based virtual hosts and OpenSSL, compiling overview performance, improving SSLPassPhraseDialog directive starting Apache testing from the command line installations of virtual hosts and warning messages when accessing workings of SSL processing with reverse proxies SSL/TLS [See SSL.] SSL_BASE=/usr/local/ssl/, removing SSLCACertificateFile directive SSLCertificateFile directive SSLCertificateKeyFile directives SSLEngine On directives SSLOptions directive SSLPassPhraseDialog directive SSLRequire directive SSLVerifyClient directive starting Apache automatic restarts on failure graceful restarts with SSL support troubleshooting startssl option startup errors address already in use errors cannot determine hostname errors could not bind to port errors module not compatible errors permission denied errors syntax errors status settings, tuning Apache Accept mechanism AcceptFilter directive HostnameLookups KeepAlives mod_status stopping Apache 2nd strings, regular expressions [See also regular expressions, definition of.] stunnel, SSL and Subject Distinguished Names (DNs) symbolic links, handling 2nd symlinks [See symbolic links, handling.] SymLinksIfOwnerMatch parameter 2nd symmetric cryptography syntax errors (startup errors) syslog facilities system log daemon, as error log [See also error logs.] Index [SYMBOL] [A] [B] [C] [D] [E] [F] [G] [H] [I] [K] [L] [M] [N] [O] [P] [R] [S] [T] [U] [V] [W] tail utility tar.bz2 releases telnet clients testing [See troubleshooting.] threaded MPMs thttpd Tidy, validating pages tilde (per-user pages) tilde characters in sections TimeOut directive timeouts, preventing abuse Tomcat, connecting to traceroute utility trailing slash problems Transferlog directive transparent proxies troubleshooting [See also debugging.] access denied errors access forbidden problems alternate tips for CGI scripts from command line, testing Apache configuration problems, testing connecting to Apache DAV DavLockDB directive Document not found errors error logs internal server errors 2nd redirections running Apache.exe process, testing for starting Apache startup errors stopping Apache system log daemon virtual hosts tuning Apache [See also optimization.] abuse, preventing caching compression connections/bandwidth, limiting content negotiation, configuring [See also content negotiation.] external processes, controlling file system performance, improving hardware tweaks load balancers module-specific optimizations network/status settings OS limits, increasing process limits, increasing reverse proxies robots, dealing with symbolic links, handling 2nd type maps, enabling multiviews Index [SYMBOL] [A] [B] [C] [D] [E] [F] [G] [H] [I] [K] [L] [M] [N] [O] [P] [R] [S] [T] [U] [V] [W] ulimit command unauthorized request, redirecting Unix file descriptors, increasing installations (Apache) limits, increasing process limits, increasing UnsetEnv directive updates, security and URL mapping to files with mod_rewrite redirecting URL unification with reverse proxies URLs case sensitivity, fixing problems preventing reverse proxies spelling mistakes, fixing user authentication [See authentication.] user databases, creating User directive UserDir enabled/disabled directives users Apache server running as, changing root, running servers as Index [SYMBOL] [A] [B] [C] [D] [E] [F] [G] [H] [I] [K] [L] [M] [N] [O] [P] [R] [S] [T] [U] [V] [W] /var/log/httpd variables (environment) [See environment variables.] versions (Apache) [See Apache.] virtual hosts alternate host options debugging setups IP-based virtual hosts configuring default hosts, configuring definition of logging separately mixing IP and name-based hosting name-based virtual hosts configuring default hosts, configuring overview SSL non-matching requests, troubleshooting overview SSL and VirtualDocumentRootIP directive containers 2nd [See also virtual hosts.] VirtualScriptAlias directive VirtualScriptAliasIP Visitors, log analysis vlogger tool vmstat Index [SYMBOL] [A] [B] [C] [D] [E] [F] [G] [H] [I] [K] [L] [M] [N] [O] [P] [R] [S] [T] [U] [V] [W] warn argument (LogLevel directive) warning messages, accessing SSL websites watchdog scripts web crawlers, dealing with web spiders, dealing with Webalizer WebDAV 2nd [See also DAV.] websites, Apache official site wildcards (*), configuring IP-based virtual hosts Windows DAV, accessing file descriptors, increasing limits, increasing process limits, increasing Windows PCs, installations (Apache) checking for installing Apache Windows task manager with-apxs switch with-apxs2 switch with-ssl=/usr/local/ssl/openssl with-apache option Worker MPM, configuring ... Understanding Apache 2 Filters Using Apache As an FTP Server Using Apache As a POP3 Server Compressing Content on the Fly Index Copyright Apache Phrasebook Copyright © 2006 by Sams Publishing... Chapter 1 Apache Basics Discovering Apache Determining Whether Apache Is Already Installed Installing Apache 1.3 on Linux and Unix Installing Apache 2.0 on Linux and Unix Installing Apache on Windows... Controlling the Amount of Information Logged Testing the Apache Configuration for Problems Testing Apache from the Command Line Checking That Apache Is Running Alternate Ways of Stopping Apache Using Apache to Debug Apache Startup Errors