how can i find out that my current Apache maxclient or maxperchild settings must be rised and that i have outgrown current settings?
Example httpd status output 56 requests currently being processed, 41 idle servers
My server was unstable at this month sometimes fork 700 process and apache 80 access per second and that's made server very slow . very bad browsing
when i checked log files /var/log/messages found that errors
Apr 20 04:06:28 suhosin[798]: ALERT - configured request variable value length limit exceeded - dropped variable 'message' (attacker '212.107.116.238', file '/usr/local/cpanel/cgi-sys/php4')
Apr 22 00:27:05 suhosin[15442]: ALERT - configured request variable name length limit exceeded - dropped ....
I have been trying to set ssl client authentication with Apache.I basically have a server certificate issued by a recognized CA. For the normal ssl authentication I use the following configuration (and it works fine):
View 1 Replies View RelatedIf you enable ssl in apache, you can verify a client certificate. If so apache will create a environment variable for you with the name 'SSL_CLIENT_VERIFY' with values 'NONE, SUCCESS, GENEROUS or FAILED:reason'. URL....What is the meaning of this different values?
View 1 Replies View RelatedPretty new to Apache and recently enabled teh Apache Server Status module.
A column is confusing me, after CONN/CHILD/SLOT is CLIENT, most of the addresses in this column are my own local addresses but I have a few which I don't recognise and show up on whois.net as follows;
203.188.201.201 = Yahoo Mail
199.87.232.177 = No Result
141.44.51.95 = Query terms are ambiguous
58.218.204.102 = CHINANET-JS
Why would these show on my status?
[Sun Jul 27 15:06:12 2008] [error] [client ] % Total % Received % X
[Sun Jul 27 15:06:12 2008] [error] [client ] ferd Average Speed Time Time Time Current
[Sun Jul 27 15:06:12 2008] [error] [client ] Dload Upload Total Spent Left Speed
[Sun Jul 27 15:06:12 2008] [error] [client ]
0 0 0 0 0 0 0 0 --:--:-- --:--:-- 0
0 0 0 0 0 0 0 0 --:--:-- 0
Have you ever seen error like this?
I need to accomplish the following:
1. User hits my new 2.4 reverse proxy at [URL] ....
2. I proxy the request through to my "real" app server at [URL] ....
3. I also use a re-write rule to add a querystring to the URL: ?Parameter=Foo
4. So, client's request arrives at the my app server as [URL] .....
5. When my app server responds, it is including the Parameter=Foo key/value combination. I don't want this.
6. I want my reverse proxy (somebox.com) to strip "Parameter=Foo" from the string which gets returned to the client.
I have steps 1 & 2 working nicely, but it looks like I can't handle the last bit with with mod_rewrite. I found mod_filter and mod_substitute, but it appears that this stuff is used for re-writing strings IN the document. Can these libs be used to maybe modify (I'm guessing here) the headers so that the "?Parameter=Foo" string can't be seen on the client if they're running something like fiddler?
I know that port 80 is reserved for HTTP communication to clients on the apache server,and that the client can receive the HTTP response to any port on the client machine, I think there might be more details to it than this. I am required to describe how client and server sockets are used for the client/server communication between an Apache Web server and Web client processes.
View 1 Replies View RelatedI am trying a webpage siremis whenever i try to login i am getting below error in error log of apache [client 192.168.137.7:4758] AH01630: client denied by server configuration: /opt/siremis-4.0.0/siremis/.htaccess
in httpd.conf following is the rule
Alias /siremis "/opt/siremis-4.0.0/siremis"
<Directory "/opt/siremis-4.0.0/siremis">
Options Indexes FollowSymLinks MultiViews
[code]....
i am using apache 2 and php 5.5.1 and mysql 5.6.12.
I've got a quite difficult problem which I don't know hoe to solve. We use a self created ISAPI module which is a "business server" running behind an Apache.
From time to time a client app crashes the server (the circumstances are not quite clear) - and because there is only one server process, all other clients crash as well. Here is an exemplary log of a crash:
Faulting application name: httpd.exe, version: 2.2.22.0, time stamp: 0x4f242d7a
Faulting module name: ABCServer.dll, version: 1.0.0.1, time stamp: 0x53cfffa5
Exception code: 0xc00000fd
Fault offset: 0x00004cf6
Faulting process id: 0x94c
Faulting application start time: 0x01cfc5cc18c67d57
Faulting application path: C:Program Files (x86)Apache Software FoundationApache2.2inhttpd.exe
Faulting module path: C:datawwwabcremoteABCServer.dll
Report Id: d27d5891-31da-11e4-93ff-0003ff4356f9
Faulting package full name:
Faulting package-relative application ID:
Exception code: 0xc00000fd means stack overflow as I learnt. Therefore we configured mpm_winnt_module to use a 8M ThreadStackSize but this didn't work.
A solution might be that Apache starts for every client its own server process with the module ABCServer.dll. Because it is quite small and there are not thousands of customers this sounds like the perfect solution. No other clients/customers would be affected by a crash.
Unfortunately mpm_winnt_module supports only 1 process AFAIK. Worker and Prefork MPM are not available in Apache's Windows version what I read.
How can we configure Apache to start a new module process per client?
I am setting up apache 2.4 as a service locally through localhost on a windows 2008 R2 standard server. I have set up SSL listening on port 443 and works correctly, however I am having trouble figuring out how to get apache to authenticate my CAC card.
I have downloaded the DOD certs and put them into various types of files including pem, base 64, der etc and I have yet to figure out a way to get the client certificates validated.
I have left out the information about the SSLCertificateChainFile, SSLCACertificateFile and SSLCARevocationPath as I am sure this must be where my problem is.
Is it possible to get this done through localhost. Here is the error I am getting in the error log.
[Wed Oct 29 11:37:05.675491 2014] [ssl:error] [pid xxxx:tid xxx] [client 127.0.0.1:59282] AH02039: Certificate Verification: Error (20): unable to get local issuer certificate
I am using a self created self signed server ceritficate. Here are some details from my httpd-ssl.conf file:
Code:
<VirtualHost _default_:443>
DocumentRoot "${SRVROOT}/htdocs"
ServerName localhost:443
ServerAdmin admin@example.com
ErrorLog "${SRVROOT}/logs/jtdi.log"
TransferLog "${SRVROOT}/logs/jtdi-Transfer.log"
[Code] ....
I am having a problem getting Apache to allow access to IE 6/7/8/9 users with client certificates installed to access restricted resources. I have several servers (Windows and Linux) running various versions of Apache from 2.0 through 2.4, all behave the same way. I am simply unable to get client certificates to authenticate IE users. how I built the CAchain, CRLs, etc.
Note that using the same client certs from Firefox works just fine, users can successfully authenticate to the resource and get content.
##### ssl.conf
SSLEngine on
SSLProtocol all -SSLv2
SSLCipherSuite HIGH:MEDIUM
[Code]....
I have a client who's Apache on a CPanel based VPS keep's restarting.
In the error log we recieve two of these lines
"client sent HTTP/1.1 request without hostname (see RFC2616 section 14.23): /w00tw00t.at.ISC.SANS.DFin "
Then the Apache will restart.
I have looked around and found some threads about this problem, but none explaining how to fix this.
Is it possible to verify client certificate based on username?If possible, How can we implement it in our httpd-ssl.conf file.
View 1 Replies View RelatedI've a Wordpress Blog on a Ubuntu 13.10 server with Apache 2.4.2.
For only one page on this site I've this error and can't find a solution.
I just setup an intranet wiki running apache2.2 on ubuntu 12.04. The server currently requires two-way certificate authentication (i.e. a server cert AND client certs).In <VirtualHost *:80>, Redirect permanent / https://<intranetSite>
Everything works dandy, except now that I'd like to find a way to bypass the client cert check for localhost so that I can run some maintenance scripts via cron on the server. Or perhaps it's possible to bypass SSL entirely, just for localhost?
We are getting 403 for bidden error when accessing from web clients.
Here are my config files:
httpd.conf & httpd-ssl.conf files:
1) [URL] ....
2) [URL] ....
Any changes we have to make in our configuration files.
i want to configure Apache so that it receives a client certificate, an passes it to another server.I'm using:
- apache 2.0.65 on windows
- the backend server is an apache-based solution (IBM HTTP Server)
I tried this config:
<VirtualHost *:443>ServerName apacheserver.domain.comSSLEngine onSSLProxyEngine onSSLCertificateFile "e:/Apache/Apache2/conf/server.cer"SSLCertificateKeyFile "e:/Apache/Apache2/conf/server.key"SSLCACertificateFile "e:/Apache/Apache2/conf/certca.cer"SSLVerifyClient requireSSLVerifyDepth 2ProxyPreserveHost onProxyRequests off<Proxy *>AddDefaultCharset
[code]....
My server has been accessible in and out all day.
During these periods of inaccessibility, ping/traceroutes from multiple physical locations around the world show 50-100% packet loss.
During times when the server is accessible, ping times are anywhere from 100ms-700ms and the server does not remain accessible for very long.
I gave my provider traceroutes and pings for those times when it was inaccessible and accessible and they stated it was not on their side. It was on a hop in the middle between me (and apparently everyone else, since multiple locations around the world were used) and my server. They say it is not in their control and they cannot do anything about it.
I am reasonably sure this isn't just me or my VPS. I am on the phoenix node of PrimaryVPS.
The latest traceroute I did showed something new - a router advertisement claiming the TTL was exceeded....
Now I'm looking at our last cpu_exceeded_logs file and there is long list point to "/ramdisk/bin/php5" which I don't know much about it or don't know how to deal with that. would you please tell what exactly it means and what should I do to avoid it?
Example of my last cpu_exceeded_logs file:
Quote:
Mon Jul 6 00:34:50 2009: used 0.77 seconds of cpu time for /ramdisk/bin/php5
Mon Jul 6 00:34:50 2009: used 0.50 seconds of cpu time for /ramdisk/bin/php5
Mon Jul 6 00:34:50 2009: used 0.80 seconds of cpu time for /ramdisk/bin/php5
Mon Jul 6 00:34:50 2009: used 0.55 seconds of cpu time for /ramdisk/bin/php5
I can't find the cause of problem when look at /ramdisk/bin/php5.
Bandwidth Limit Exceeded
The server is temporarily unable to service your request due to the site owner reaching his/her bandwidth limit. Please try again later.
Apache/2.2.11 (Unix) mod_ssl/2.2.11 OpenSSL/0.9.8e-fips-rhel5 mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 Server at confidentchemicals.com Port 80
Bandwidth limit gets reset every first of month but what to do when users reached to this limit between 1 to 10 days?
we don't want to upgrade users packages or bandwidth limit rather than allocated.
why can't we reduce bandwidth limit?
__________________
How can I do this on my server to prevent people from abusing
[url]
Has anyone ever run into this before? We are running into issues with one of our hosting servers, it claims that the /tmp folder has exceeded the disk quota but when you actually go to the /tmp folder it's not at all.
Here are the outputs:
# df -h
Filesystem Size Used Avail Use% Mounted on
/dev/simfs 60G 2.4G 58G 4% /
# df -i
Filesystem Inodes IUsed IFree IUse% Mounted on
/dev/simfs 1500000 80589 1419411 6% /
# du -hs /tmp
8.2M /tmp
# echo 11111111 > /tmp/testfile
# cat /tmp/testfile
11111111
But it still gives a PHP error saying /tmp disk quota exceeded until I completely empty the folder and then it works for a few hours and does the same thing.
I have seen some hosting provider limit the number of process per user id. Usually its shows an Internal Server error with the error message saying "Process Limit Exceeded For UID ******", how can i do this in my vps?
View 2 Replies View Relatedmy costumer's web site often started to give "This Account Has Exceeded Its CPU Quota" error
his/her logs following.
Code:
--------------------------------------------------------------------------------
CPU Exceeded Log For Thu Mar 22 11:55:12 2007
Thu Mar 22 11:52:19 2007: used 0.13 seconds of cpu time for HTTP Request: vbulletin.com : GET /external.php?type=RSS2 HTTP/1.1
Thu Mar 22 11:52:19 2007: used 0.13 seconds of cpu time for HTTP Request: vbulletin.com : GET /external.php?type=RSS2&forumids=12 HTTP/1.1
Thu Mar 22 11:53:25 2007: used 0.18 seconds of cpu time for HTTP Request: vbulletin.com : GET / HTTP/1.1
Thu Mar 22 11:52:00 2007: used 0.13 seconds of cpu time for HTTP Request: vbulletin.com : GET /external.php?type=RSS2&forumids=12 HTTP/1.1
Thu Mar 22 11:51:59 2007: used 0.20 seconds of cpu time for HTTP Request: vbulletin.com : GET /showthread.php?t=289 HTTP/1.1
Thu Mar 22 11:51:54 2007: used 0.12 seconds of cpu time for HTTP Request: vbulletin.com : GET /external.php?type=RSS2&forumids=12 HTTP/1.1
Thu Mar 22 11:53:35 2007: used 0.07 seconds of cpu time for HTTP Request: vbulletin.com : GET /clientscript/vbulletin_multi_quote.js?v=364 HTTP/1.1
Thu Mar 22 11:52:09 2007: used 0.12 seconds of cpu time for HTTP Request: vbulletin.com : GET /attachment.php?attachmentid=65&d=1168905639 HTTP/1.1
Thu Mar 22 11:52:27 2007: used 0.28 seconds of cpu time for HTTP Request: vbulletin.com : GET /forumdisplay.php?f=12&page=2&order=desc HTTP/1.1
Thu Mar 22 11:53:34 2007: used 0.19 seconds of cpu time for HTTP Request: vbulletin.com : GET /showthread.php?p=2784 HTTP/1.1
Thu Mar 22 11:52:29 2007: used 0.12 seconds of cpu time for HTTP Request: vbulletin.com : GET /external.php?type=RSS2 HTTP/1.1
Thu Mar 22 11:54:16 2007: used 0.19 seconds of cpu time for HTTP Request: vbulletin.com : GET /index.php HTTP/1.1
Thu Mar 22 11:54:16 2007: used 0.25 seconds of cpu time for HTTP Request: vbulletin.com : GET /forum/ HTTP/1.1
Thu Mar 22 11:54:00 2007: used 0.28 seconds of cpu time for HTTP Request: vbulletin.com : GET /forumdisplay.php?f=2 HTTP/1.1
Thu Mar 22 11:55:09 2007: used 0.18 seconds of cpu time for HTTP Request: vbulletin.com : GET /forum/cron.php?&rand=65617 HTTP/1.1
Thu Mar 22 11:55:08 2007: used 49.00 seconds of cpu time for [[mysql query]]
Thu Mar 22 11:52:31 2007: used 0.13 seconds of cpu time for HTTP Request: vbulletin.com : GET /external.php?type=RSS2&forumids=12 HTTP/1.1
Thu Mar 22 11:51:57 2007: used 0.12 seconds of cpu time for HTTP Request: vbulletin.com : GET /external.php?type=RSS2 HTTP/1.1
Thu Mar 22 11:52:03 2007: used 0.15 seconds of cpu time for HTTP Request: vbulletin.com : GET /external.php?type=RSS2 HTTP/1.1
--------------------------------------------------------------------------------
CPU Exceeded Log For Thu Mar 22 12:34:21 2007
Thu Mar 22 12:31:10 2007: used 0.23 seconds of cpu time for HTTP Request: vbulletin.com : GET /forum/showthread.php?p=56720 HTTP/1.0
Thu Mar 22 12:33:25 2007: used 0.04 seconds of cpu time for HTTP Request: vbulletin.com : GET /forum/images/buttons/collapse_thead.gif HTTP/1.1
Thu Mar 22 12:33:23 2007: used 0.07 seconds of cpu time for HTTP Request: vbulletin.com.com : GET /forum/images/icons/icon1.gif HTTP/1.1
Thu Mar 22 12:33:15 2007: used 0.26 seconds of cpu time for HTTP Request: vbulletin.com : GET /forum/ HTTP/1.1
Thu Mar 22 12:33:50 2007: used 2.00 seconds of cpu time for [[mysql query]]
Thu Mar 22 12:30:30 2007: used 0.22 seconds of cpu time for HTTP Request: vbulletin.com : GET /forum/showthread.php?p=62840 HTTP/1.0
Thu Mar 22 12:33:44 2007: used 0.13 seconds of cpu time for HTTP Request: vbulletin.com : GET /cron.php?&rand=790216 HTTP/1.1
Thu Mar 22 12:32:00 2007: used 0.22 seconds of cpu time for HTTP Request: vbulletin.com : GET /forum/member.php?find=lastposter&t=42694 HTTP/1.0
Thu Mar 22 12:33:12 2007: used 0.25 seconds of cpu time for HTTP Request: vbulletin.com : GET /forum/ HTTP/1.1
Thu Mar 22 12:34:02 2007: used 0.14 seconds of cpu time for HTTP Request: vbulletin.com : GET /cron.php?&rand=350679 HTTP/1.1
Thu Mar 22 12:33:59 2007: used 0.25 seconds of cpu time for HTTP Request: vbulletin.com : GET /showthread.php?p=2787 HTTP/1.1
Thu Mar 22 12:33:13 2007: used 2.00 seconds of cpu time for [[mysql query]]
Thu Mar 22 12:33:54 2007: used 0.14 seconds of cpu time for HTTP Request: vbulletin.com : GET /cron.php?&rand=395167 HTTP/1.1
Thu Mar 22 12:33:35 2007: used 0.17 seconds of cpu time for HTTP Request: vbulletin.com : GET / HTTP/1.1
Thu Mar 22 12:34:19 2007: used 49.00 seconds of cpu time for [[mysql query]]
Thu Mar 22 12:34:20 2007: used 0.24 seconds of cpu time for HTTP Request: vbulletin.com : GET /forum/showthread.php?p=68933 HTTP/1.0
Thu Mar 22 12:33:52 2007: used 0.28 seconds of cpu time for HTTP Request: vbulletin.com : GET /forumdisplay.php?f=2 HTTP/1.1
Thu Mar 22 12:32:42 2007: used 0.24 seconds of cpu time for HTTP Request: vbulletin.com : GET /forum/member.php?find=lastposter&t=41435 HTTP/1.0
--------------------------------------------------------------------------------
CPU Exceeded Log For Thu Mar 22 16:16:16 2007
Thu Mar 22 16:14:00 2007: used 0.18 seconds of cpu time for HTTP Request: vbulletin.com : POST /forum/login.php HTTP/1.1
Thu Mar 22 16:13:35 2007: used 0.32 seconds of cpu time for HTTP Request: vbulletin.com.com : GET / HTTP/1.1
Thu Mar 22 16:14:21 2007: used 3.00 seconds of cpu time for [[mysql query]]
Thu Mar 22 16:14:21 2007: used 0.18 seconds of cpu time for HTTP Request: vbulletin.com : POST /forum/login.php HTTP/1.1
Thu Mar 22 16:16:15 2007: used 2.00 seconds of cpu time for [[mysql query]]
Thu Mar 22 16:16:11 2007: used 38.00 seconds of cpu time for [[mysql query]]
Thu Mar 22 16:14:03 2007: used 0.29 seconds of cpu time for HTTP Request: vbulletin.com.com : GET / HTTP/1.1
Thu Mar 22 16:15:22 2007: used 2.00 seconds of cpu time for [[mysql query]]
Thu Mar 22 16:15:24 2007: used 0.24 seconds of cpu time for HTTP Request: vbulletin.com : GET /forum/ HTTP/1.1
I am trying to restore my backup and system keep saying.
Disk quota exceeded
in whm i have used only 40% from 20 gb
my backup size is only 500mb
I am getting the error "max_user_connections exceeded" for database user "xxxx". So every time this happens I have to feed a new database admin login to my script.
There is nothing wrong with the script since it is very popular membership script. I think my host just allows low number of "max_user_connections". please advice me on a host that allows higher number of "max_user_connections"
i just moved all cpanel backup from bluehost to my new dedicated server running cpanel. i restored the backup and i am getting page showing cpu exceeded error.
View 2 Replies View RelatedDoes anyone know a script or something I can edit to fix this commonly seen error in the apache error_log:
[Wed Aug 13 22:09:25 2008] [error] [client IP] Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: [url]
I don't want to increase anything as I read from different places that , that's not good to do. Most say there is a rule written wrong somewhere or something, or a loop of some kind, but I'm not sure how or where to fix it.
Im getting this error when i try to create a package for a client. As far as i can tell, everything is set up properly. Its located inside my WHM area, but the billing software wont create the account and gives me:
Package Not Allowed or Exceeded Resource/Account Allocation
but i have no resource or account allocation settings set. everything is wide open.
My second question is, if i want to give someone unlimited bandwidth/storage, how do i do that? ive tried -1 and 0, but it keeps kicking it out as not valid. any ideas?
[url]