Apache + mod_ssl config

I'm trying to config apache + mod_ssl for a project.
The server has to only accept https connections, and validate users based on certificates.
I configured my /etc/httpd/conf/extra/httpd-ssl.conf
like this:
<VirtualHost>
DocumentRoot "/home/httpd/html"
ServerName localhost:443
ServerAdmin [email protected]
ErrorLog /var/log/httpd/error_log
TransferLog /var/log/httpd/access_log
SSLEngine on
SSLCipherSuite HIGH:MEDIUM
SSLCertificateFile /etc/httpd/conf/server.crt
SSLCertificateKeyFile /etc/httpd/conf/server.key
SSLCertificateChainFile /etc/httpd/conf/server-ca.crt
SSLCACertificateFile /etc/httpd/conf/server-ca.crt
SSLVerifyClient require
SSLVerifyDepth 2
<Location>
Options +ExecCGI
SSLRequireSSL
</Location>
<Location>
SSLRequireSSL
SSLVerifyClient require
SSLVerifyDepth 2
</Location>
</VirtualHost>
But with this config everyone can still access both these directories.
Help me....

Recent traffic on php.internals makes me think the note in
http://www.php.net/manual/en/install.apache2.php
"Do not use Apache 2.0 and PHP in a production environment
neither on Unix nor on Windows." is still valid.
-- CJ

Similar Messages

Client authentication with apache+mod_ssl+tomcat

Hello.
My question is a little bit off topic.
I try to read client certificates with request.getAttribute("javax.servlet.request.X509Certificate"), but the result is always null.
Probably it's null because I have nothing on the session. So my tomcat does not have the certificate. I use apache + mod_ssl + mod_jk + tomcat.
And here is my question: how did you configured apache and tomcat so that tomcat has the client cert ?
Thanks.

usually u generate a keystore for client, and mention that in ur SSL connector of tomcat
in apache, we need to configure things in ssl.conf

Problems with con https port on a Apache mod_ssl

I have created test certificates using the openssl command. I am having problems with using this certificate in a web browser application I have created in Java. I have no problems with http requests. The certificate is self-signed and is no expiried. Could you please help me with the steps involved with making a connection to my Apache server with https.
Thanks,
Edward

Can anyone say, what's thue problem:
openssl req -new -key key.pem -out req.pem
and i see it :((
Using configuration from /usr/local/ssl/openssl.cnf
Unable to load config info
unable to find 'distinguished_name' in config
problems making Certificate Request
740:error:0E06D06A:configuration file routines:NCONF_get_string:no conf or environment variable:.\crypto\conf\conf_lib.c:343:
740:error:0E06D06A:configuration file routines:NCONF_get_string:no conf or environment variable:.\crypto\conf\conf_lib.c:343:
740:error:0E06D06A:configuration file routines:NCONF_get_string:no conf or environment variable:.\crypto\conf\conf_lib.c:343:
740:error:0E06D06A:configuration file routines:NCONF_get_string:no conf or environment variable:.\crypto\conf\conf_lib.c:343:
740:error:0E06D06A:configuration file routines:NCONF_get_string:no conf or environment variable:.\crypto\conf\conf_lib.c:343:
740:error:0E06D06A:configuration file routines:NCONF_get_string:no conf or environment variable:.\crypto\conf\conf_lib.c:343:
740:error:0E06D06A:configuration file routines:NCONF_get_string:no conf or environment variable:.\crypto\conf\conf_lib.c:343:
740:error:0E06D06A:configuration file routines:NCONF_get_string:no conf or environment variable:.\crypto\conf\conf_lib.c:343:

Problems with Oracle, Apache, mod_ssl and firewalls - hang

Hi,
We have an Apache server as supplied by Oracle (1.3.19), serving both
static html and mod_plsql pages.
When the system is accessed via SSL and the Internet, it will tend to hang
after a relatively short time - especially if two people access at the same
time. This is seen at the browser as a page that simply fails to arrive,
there is no standard 'Page could not be found' type message.
A network sniffer seems to show that there is some continuing network
traffic, but the Apache error_log does not show activity.
If the system is accessed without SSL but still via the Internet then there
appears to be no problems and the system runs a lot faster than SSL +
Internet.
If the system is accessed with SSL but internally so avoiding the Internet
then there also appears to be no problems and the system runs faster than
SSL + Internet.
Our servers are running NT4 SP6.
Our firewall is Checkpoint NG running on Solaris (although we also
swapped in a Nokia firewall running Checkpoint 4.1 which had the same
results).
Any thoughts on what might be occurring, what we should be looking at
next?
Andy

Can anyone say, what's thue problem:
openssl req -new -key key.pem -out req.pem
and i see it :((
Using configuration from /usr/local/ssl/openssl.cnf
Unable to load config info
unable to find 'distinguished_name' in config
problems making Certificate Request
740:error:0E06D06A:configuration file routines:NCONF_get_string:no conf or environment variable:.\crypto\conf\conf_lib.c:343:
740:error:0E06D06A:configuration file routines:NCONF_get_string:no conf or environment variable:.\crypto\conf\conf_lib.c:343:
740:error:0E06D06A:configuration file routines:NCONF_get_string:no conf or environment variable:.\crypto\conf\conf_lib.c:343:
740:error:0E06D06A:configuration file routines:NCONF_get_string:no conf or environment variable:.\crypto\conf\conf_lib.c:343:
740:error:0E06D06A:configuration file routines:NCONF_get_string:no conf or environment variable:.\crypto\conf\conf_lib.c:343:
740:error:0E06D06A:configuration file routines:NCONF_get_string:no conf or environment variable:.\crypto\conf\conf_lib.c:343:
740:error:0E06D06A:configuration file routines:NCONF_get_string:no conf or environment variable:.\crypto\conf\conf_lib.c:343:
740:error:0E06D06A:configuration file routines:NCONF_get_string:no conf or environment variable:.\crypto\conf\conf_lib.c:343:

WebLogic 9.2 with Apache Connector Config

Hi I am new to this forum, WebLogic, and all Oracle products for that matter. I am a college intern and I have been asked to learn how to use WebLogic 9.2. I was told that they want it to be connected to apache with the mod_wl_22.so shared module for Apache. I have placed the module in the directory and added the LoadModule line to the httpd.conf file and the module loads fine. From reading through the WebLogic documentation I now know that I need to create a <Location> block in httpd.conf for the connector. I also know that the arguments that you need to use are WebLogicHost and WebLogicPort. So in my httpd.conf I have added the following.
<Location /weblogic>
WebLogicHost 10.15.107.90/weblogic
WebLogicPort 7001
</Location>
I also tried.....
<Location /weblogic>
WebLogicHost /weblogic
WebLogicPort 7001
</Location>
and.....
<Location /weblogic>
WebLogicHost 10.15.107.90
WebLogicPort 7001
</Location>
All with no luck. When I browse to http://10.15.107.90/weblogic I get nothing. Can anybody help me out here?
Thanks
Scott

Hi,
This is a template for 'httpd.conf'. Please make it sure that you are following this:
===
# Based upon the NCSA server configuration files originally by Rob McCool.
# This is the main Apache server configuration file. It contains the
# configuration directives that give the server its instructions.
# See <URL:http://httpd.apache.org/docs-2.0/> for detailed information about
# the directives.
# Do NOT simply read the instructions in here without understanding
# what they do. They're here only as hints or reminders. If you are unsure
# consult the online docs. You have been warned.
# The configuration directives are grouped into three basic sections:
# 1. Directives that control the operation of the Apache server process as a
# whole (the 'global environment').
# 2. Directives that define the parameters of the 'main' or 'default' server,
# which responds to requests that aren't handled by a virtual host.
# These directives also provide default values for the settings
# of all virtual hosts.
# 3. Settings for virtual hosts, which allow Web requests to be sent to
# different IP addresses or hostnames and have them handled by the
# same Apache server process.
# Configuration and logfile names: If the filenames you specify for many
# of the server's control files begin with "/" (or "drive:/" for Win32), the
# server will use that explicit path. If the filenames do not begin
# with "/", the value of ServerRoot is prepended -- so "logs/foo.log"
# with ServerRoot set to "C:/Program Files/Apache Group/Apache2" will be interpreted by the
# server as "C:/Program Files/Apache Group/Apache2/logs/foo.log".
# NOTE: Where filenames are specified, you must use forward slashes
# instead of backslashes (e.g., "c:/apache" instead of "c:\apache").
# If a drive letter is omitted, the drive on which Apache.exe is located
# will be used by default. It is recommended that you always supply
# an explicit drive letter in absolute paths, however, to avoid
# confusion.
### Section 1: Global Environment
# The directives in this section affect the overall operation of Apache,
# such as the number of concurrent requests it can handle or where it
# can find its configuration files.
# ServerRoot: The top of the directory tree under which the server's
# configuration, error, and log files are kept.
# NOTE! If you intend to place this on an NFS (or otherwise network)
# mounted filesystem then please read the LockFile documentation (available
# at <URL:http://httpd.apache.org/docs-2.0/mod/mpm_common.html#lockfile>);
# you will save yourself a lot of trouble.
# Do NOT add a slash at the end of the directory path.
ServerRoot "C:/Program Files/Apache Group/Apache2"
# ScoreBoardFile: File used to store internal server process information.
# If unspecified (the default), the scoreboard will be stored in an
# anonymous shared memory segment, and will be unavailable to third-party
# applications.
# If specified, ensure that no two invocations of Apache share the same
# scoreboard file. The scoreboard file MUST BE STORED ON A LOCAL DISK.
#ScoreBoardFile logs/apache_runtime_status
# PidFile: The file in which the server should record its process
# identification number when it starts.
PidFile logs/httpd.pid
# Timeout: The number of seconds before receives and sends time out.
Timeout 300
# KeepAlive: Whether or not to allow persistent connections (more than
# one request per connection). Set to "Off" to deactivate.
KeepAlive On
# MaxKeepAliveRequests: The maximum number of requests to allow
# during a persistent connection. Set to 0 to allow an unlimited amount.
# We recommend you leave this number high, for maximum performance.
MaxKeepAliveRequests 100
# KeepAliveTimeout: Number of seconds to wait for the next request from the
# same client on the same connection.
KeepAliveTimeout 15
## Server-Pool Size Regulation (MPM specific)
# WinNT MPM
# ThreadsPerChild: constant number of worker threads in the server process
# MaxRequestsPerChild: maximum number of requests a server process serves
<IfModule mpm_winnt.c>
ThreadsPerChild 250
MaxRequestsPerChild 0
</IfModule>
# Listen: Allows you to bind Apache to specific IP addresses and/or
# ports, instead of the default. See also the <VirtualHost>
# directive.
# Change this to Listen on specific IP addresses as shown below to
# prevent Apache from glomming onto all bound IP addresses (0.0.0.0)
#Listen 12.34.56.78:80
Listen 80
# Dynamic Shared Object (DSO) Support
# To be able to use the functionality of a module which was built as a DSO you
# have to place corresponding `LoadModule' lines at this location so the
# directives contained in it are actually available before they are used.
# Statically compiled modules (those listed by `httpd -l') do not need
# to be loaded here.
# Example:
# LoadModule foo_module modules/mod_foo.so
LoadModule access_module modules/mod_access.so
LoadModule actions_module modules/mod_actions.so
LoadModule alias_module modules/mod_alias.so
LoadModule asis_module modules/mod_asis.so
LoadModule auth_module modules/mod_auth.so
#LoadModule auth_anon_module modules/mod_auth_anon.so
#LoadModule auth_dbm_module modules/mod_auth_dbm.so
#LoadModule auth_digest_module modules/mod_auth_digest.so
LoadModule autoindex_module modules/mod_autoindex.so
#LoadModule cern_meta_module modules/mod_cern_meta.so
LoadModule cgi_module modules/mod_cgi.so
#LoadModule dav_module modules/mod_dav.so
#LoadModule dav_fs_module modules/mod_dav_fs.so
LoadModule dir_module modules/mod_dir.so
LoadModule env_module modules/mod_env.so
#LoadModule expires_module modules/mod_expires.so
#LoadModule file_cache_module modules/mod_file_cache.so
#LoadModule headers_module modules/mod_headers.so
LoadModule imap_module modules/mod_imap.so
LoadModule include_module modules/mod_include.so
#LoadModule info_module modules/mod_info.so
LoadModule isapi_module modules/mod_isapi.so
LoadModule log_config_module modules/mod_log_config.so
LoadModule mime_module modules/mod_mime.so
#LoadModule mime_magic_module modules/mod_mime_magic.so
#LoadModule proxy_module modules/mod_proxy.so
#LoadModule proxy_connect_module modules/mod_proxy_connect.so
#LoadModule proxy_http_module modules/mod_proxy_http.so
#LoadModule proxy_ftp_module modules/mod_proxy_ftp.so
LoadModule negotiation_module modules/mod_negotiation.so
#LoadModule rewrite_module modules/mod_rewrite.so
LoadModule setenvif_module modules/mod_setenvif.so
#LoadModule speling_module modules/mod_speling.so
#LoadModule status_module modules/mod_status.so
#LoadModule unique_id_module modules/mod_unique_id.so
LoadModule userdir_module modules/mod_userdir.so
#LoadModule usertrack_module modules/mod_usertrack.so
#LoadModule vhost_alias_module modules/mod_vhost_alias.so
#LoadModule ssl_module modules/mod_ssl.so
LoadModule weblogic_module modules/mod_wl_20.so
# ExtendedStatus controls whether Apache will generate "full" status
# information (ExtendedStatus On) or just basic information (ExtendedStatus
# Off) when the "server-status" handler is called. The default is Off.
#ExtendedStatus On
### Section 2: 'Main' server configuration
# The directives in this section set up the values used by the 'main'
# server, which responds to any requests that aren't handled by a
# <VirtualHost> definition. These values also provide defaults for
# any <VirtualHost> containers you may define later in the file.
# All of these directives may appear inside <VirtualHost> containers,
# in which case these default settings will be overridden for the
# virtual host being defined.
# ServerAdmin: Your address, where problems with the server should be
# e-mailed. This address appears on some server-generated pages, such
# as error documents. e.g. [email protected]
ServerAdmin [email protected]
# ServerName gives the name and port that the server uses to identify itself.
# This can often be determined automatically, but we recommend you specify
# it explicitly to prevent problems during startup.
# If this is not set to valid DNS name for your host, server-generated
# redirections will not work. See also the UseCanonicalName directive.
# If your host doesn't have a registered DNS name, enter its IP address here.
# You will have to access it by its address anyway, and this will make
# redirections work in a sensible way.
ServerName beatest.kpit.com:80
# UseCanonicalName: Determines how Apache constructs self-referencing
# URLs and the SERVER_NAME and SERVER_PORT variables.
# When set "Off", Apache will use the Hostname and Port supplied
# by the client. When set "On", Apache will use the value of the
# ServerName directive.
UseCanonicalName Off
# DocumentRoot: The directory out of which you will serve your
# documents. By default, all requests are taken from this directory, but
# symbolic links and aliases may be used to point to other locations.
DocumentRoot "C:/Program Files/Apache Group/Apache2/htdocs"
# Each directory to which Apache has access can be configured with respect
# to which services and features are allowed and/or disabled in that
# directory (and its subdirectories).
# First, we configure the "default" to be a very restrictive set of
# features.
<Directory />
Options FollowSymLinks
AllowOverride None
</Directory>
# Note that from this point forward you must specifically allow
# particular features to be enabled - so if something's not working as
# you might expect, make sure that you have specifically enabled it
# below.
# This should be changed to whatever you set DocumentRoot to.
<Directory "C:/Program Files/Apache Group/Apache2/htdocs">
# Possible values for the Options directive are "None", "All",
# or any combination of:
# Indexes Includes FollowSymLinks SymLinksifOwnerMatch ExecCGI MultiViews
# Note that "MultiViews" must be named explicitly --- "Options All"
# doesn't give it to you.
# The Options directive is both complicated and important. Please see
# http://httpd.apache.org/docs-2.0/mod/core.html#options
# for more information.
Options Indexes FollowSymLinks
# AllowOverride controls what directives may be placed in .htaccess files.
# It can be "All", "None", or any combination of the keywords:
# Options FileInfo AuthConfig Limit
AllowOverride None
# Controls who can get stuff from this server.
Order allow,deny
Allow from all
</Directory>
# UserDir: The name of the directory that is appended onto a user's home
# directory if a ~user request is received. Be especially careful to use
# proper, forward slashes here. On Windows NT, "Personal/My Website"
# is a more appropriate choice.
UserDir "My Documents/My Website"
# Control access to UserDir directories. The following is an example
# for a site where these directories are restricted to read-only.
# You must correct the path for the root to match your system's configured
# user directory location, e.g. "C:/WinNT/profiles/*/My Documents/My Website"
# or whichever, as appropriate.
#<Directory "C:/Documents and Settings/*/My Documents/My Website">
# AllowOverride FileInfo AuthConfig Limit
# Options MultiViews Indexes SymLinksIfOwnerMatch IncludesNoExec
# <Limit GET POST OPTIONS PROPFIND>
# Order allow,deny
# Allow from all
# </Limit>
# <LimitExcept GET POST OPTIONS PROPFIND>
# Order deny,allow
# Deny from all
# </LimitExcept>
#</Directory>
# DirectoryIndex: sets the file that Apache will serve if a directory
# is requested.
# The index.html.var file (a type-map) is used to deliver content-
# negotiated documents. The MultiViews Option can be used for the
# same purpose, but it is much slower.
DirectoryIndex index.html index.html.var
# AccessFileName: The name of the file to look for in each directory
# for additional configuration directives. See also the AllowOverride
# directive.
AccessFileName .htaccess
# The following lines prevent .htaccess and .htpasswd files from being
# viewed by Web clients.
<FilesMatch "^\.ht">
Order allow,deny
Deny from all
</FilesMatch>
# TypesConfig describes where the mime.types file (or equivalent) is
# to be found.
TypesConfig conf/mime.types
# DefaultType is the default MIME type the server will use for a document
# if it cannot otherwise determine one, such as from filename extensions.
# If your server contains mostly text or HTML documents, "text/plain" is
# a good value. If most of your content is binary, such as applications
# or images, you may want to use "application/octet-stream" instead to
# keep browsers from trying to display binary files as though they are
# text.
DefaultType text/plain
# The mod_mime_magic module allows the server to use various hints from the
# contents of the file itself to determine its type. The MIMEMagicFile
# directive tells the module where the hint definitions are located.
<IfModule mod_mime_magic.c>
MIMEMagicFile conf/magic
</IfModule>
<IfModule mod_weblogic.c>
WebLogicCluster 127.0.0.1:7003,127.0.0.1:7004
WLLogFile C:/proxylog/wl-proxy.log
WLTempDir C:/temp/wl-proxy.log
MatchExpression /*
</IfModule>
<Location />
SetHandler weblogic-handler
WebLogicCluster 127.0.0.1:7003,127.0.0.1:7005
Debug ALL
WLLogFile C:/proxylog/wl-proxy.log
WLTempDir C:/temp/wl-proxy.log
DebugConfigInfo On
PathTrim /
DynamicServerList OFF
</Location>
# HostnameLookups: Log the names of clients or just their IP addresses
# e.g., www.apache.org (on) or 204.62.129.132 (off).
# The default is off because it'd be overall better for the net if people
# had to knowingly turn this feature on, since enabling it means that
# each client request will result in AT LEAST one lookup request to the
# nameserver.
HostnameLookups Off
# EnableMMAP: Control whether memory-mapping is used to deliver
# files (assuming that the underlying OS supports it).
# The default is on; turn this off if you serve from NFS-mounted
# filesystems. On some systems, turning it off (regardless of
# filesystem) can improve performance; for details, please see
# http://httpd.apache.org/docs-2.0/mod/core.html#enablemmap
#EnableMMAP off
# EnableSendfile: Control whether the sendfile kernel support is
# used to deliver files (assuming that the OS supports it).
# The default is on; turn this off if you serve from NFS-mounted
# filesystems. Please see
# http://httpd.apache.org/docs-2.0/mod/core.html#enablesendfile
#EnableSendfile off
# ErrorLog: The location of the error log file.
# If you do not specify an ErrorLog directive within a <VirtualHost>
# container, error messages relating to that virtual host will be
# logged here. If you do define an error logfile for a <VirtualHost>
# container, that host's errors will be logged there and not here.
ErrorLog logs/error.log
# LogLevel: Control the number of messages logged to the error.log.
# Possible values include: debug, info, notice, warn, error, crit,
# alert, emerg.
LogLevel warn
# The following directives define some format nicknames for use with
# a CustomLog directive (see below).
LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined
LogFormat "%h %l %u %t \"%r\" %>s %b" common
LogFormat "%{Referer}i -> %U" referer
LogFormat "%{User-agent}i" agent
# You need to enable mod_logio.c to use %I and %O
#LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\" %I %O" combinedio

OS/X Lion Apache userdir configs, and other httpd.conf oddities

There seems to have been quite some discussions around the userdir and other configs with Apache. I think I stumbled on the issue.
Most of the advanced configurations in httpd.conf is surrounded by
<IfDefined WEBSHARING_ON>
But, in the /System/Library/LaunchDaemons/org.apache.httpd.plist file, there WEBSERVICE_ON is what's defined. I added the following to the plist file:
<string>-D</string>
<string>WEBSHARING_ON</string>
right next to the WEBSERVICE_ON flag, and all worked again.
A lot of other folks just edited the heck out of the httpd.conf file, which works, but I wonder if it screws with the automagic configuration doodads in Server.app.
Anyway, thought i'd document my solution in case anyone else googles as I did...

I've tried follwoing these instructions but I have an issue with
# Create snort user. The intention is to let user snort have access only to the snort database.
$ sudo createuser -U _postgres -P snort
Password:
Enter password for new role:
Enter it again:
Shall the new role be a superuser? (y/n) n
Shall the new role be allowed to create databases? (y/n) n
Shall the new role be allowed to create more new roles? (y/n) n
It keeps telling me "could not connect to database postgres: could not connect to server: No such file or directory"
I'm running OSX Mountain Lion, and have verified using serveradmin status postgres that it is up and running.

WebLogic 10.3.5 with Apache Connector Config

Hi,
I have multiple apache/OHS running on the same HP-UX machine and am running into following issue in deploying SOA Processes on the second server.
deploy/sca_AIAErrorTaskAdministrationProcess_rev1.0.jar
[deployComposite] INFO: Creating HTTPS connection to host:soaa.eprod.com, port:443
[deployComposite] INFO: Received HTTP response from the server, response code=500
[deployComposite] SEVERE: Invalid logging line: <HTML>
[deployComposite] SEVERE: Invalid logging line: <HEAD>
[deployComposite] SEVERE: Invalid logging line: <TITLE>Weblogic Bridge Message
[deployComposite] SEVERE: Invalid logging line: </TITLE>
[deployComposite] SEVERE: Invalid logging line: </HEAD>
[deployComposite] SEVERE: Invalid logging line: <BODY>
[deployComposite] SEVERE: Invalid logging line: <H2>Failure of server APACHE bridge:</H2><P>
[deployComposite] SEVERE: Invalid logging line: <hr>Cannot open TEMP post file '/tmp/_wl_proxy/_post_17020_6' for POST of 72775 bytes
[deployComposite] SEVERE: Invalid logging line: <hr> </BODY>
[deployComposite] SEVERE: Invalid logging line: </HTML>
[deployComposite] SEVERE: Invalid logging line: <HTML>
[deployComposite] SEVERE: Invalid logging line: <HEAD>
[deployComposite] SEVERE: Invalid logging line: <TITLE>Weblogic Bridge Message
[deployComposite] SEVERE: Invalid logging line: </TITLE>
[deployComposite] SEVERE: Invalid logging line: </HEAD>
[deployComposite] SEVERE: Invalid logging line: <BODY>
[deployComposite] SEVERE: Invalid logging line: <H2>Failure of server APACHE bridge:</H2><P>
[deployComposite] SEVERE: Invalid logging line: <hr><PRE>Internal Server failure, APACHE plugin. Cannot continue.</PRE>
[deployComposite] SEVERE: Invalid logging line: <hr> </BODY>
[deployComposite] SEVERE: Invalid logging line: </HTML>
[deployComposite] ---->response code=500, error:nullI read on this post "http://www.techpaste.com/2012/04/open-temp-post-file-tmp_wl_proxy_post_21626_12548-apache/" to define the WLTempDir directive on each Apache / OHS installation to point to different directories so they do not conflict.
As it's a clustered environment so wanted to find out where should I put the below properties
WLLogFile
WLTempDir
I have configuration file in which the virtual host and other URLs are configured and then have included this file in httpd.conf. Want to find out where to enter the above 2 values in the below snippet
<VirtualHost *:8888>
        ServerName ebs.uat.com
        RewriteEngine On
        RewriteOptions inherit
<IfModule ossl_module>
   AddCertHeader HTTPS
   SimulateHttps On
</IfModule>
        <Location /weblogic>
                SetHandler weblogic-handler
                WebLogicHost ebscon.uat.com
    # Admin Server's port
                WeblogicPort 7007
        </Location>
        <Location /console>
                SetHandler weblogic-handler
                WebLogicHost ebscon.uat.com
                WeblogicPort 7007
        </Location>
        <Location /consolehelp>
                SetHandler weblogic-handler
                WebLogicHost ebscon.uat.com
                WeblogicPort 7007
        </Location>
        <Location /em>
                SetHandler weblogic-handler
                WebLogicHost ebscon.uat.com
                WeblogicPort 7007
        </Location>
        <Location /wsm-pm>
                SetHandler weblogic-handler
                WebLogicCluster ebscon1.uat.com:7017,ebscon2.uat.com:7017
        </Location>
# SOA Suite
        <Location /soa-infra>
                SetHandler weblogic-handler
                WebLogicCluster ebscon1.uat.com:8007,ebscon2.uat.com:8007
        </Location>
        <Location /integration/>
                SetHandler weblogic-handler
                WebLogicCluster ebscon1.uat.com:8007,ebscon2.uat.com:8007
        </Location>
        <Location /b2bconsole>
                SetHandler weblogic-handler
                WebLogicCluster ebscon1.uat.com:8007,ebscon2.uat.com:8007
        </Location>
        <Location /soa/composer>
                SetHandler weblogic-handler
                WebLogicCluster ebscon1.uat.com:8007,ebscon2.uat.com:8007
        </Location>
# BAM
<Location /OracleBAM>
                SetHandler weblogic-handler
    # WebLogicCluster PREFIXbam-web1.eprod.com:WLS_BAM1 port,host 2 from environment table:WLS_BAM2 port
                WebLogicCluster ebscon1.uat.com:9007,ebscon2.uat.com:9007
        </Location>
# BPM
<Location /bpm/composer>
      SetHandler weblogic-handler
      WebLogicCluster ebscon1.uat.com:8007,ebscon2.uat.com:8007
</Location>
<Location /bpm/workspace>
      SetHandler weblogic-handler
      WebLogicCluster ebscon1.uat.com:8007,ebscon2.uat.com:8007
</Location>
# OSB
<Location /sbinspection.wsil*>
   SetHandler weblogic-handler
   WebLogicCluster ebscon1.uat.com:4017,ebscon2.uat.com:4017
</Location>
<Location /sbresource*>
   SetHandler weblogic-handler
   WebLogicCluster ebscon1.uat.com:4017,ebscon2.uat.com:4017
</Location>
<Location /sbconsole>
   SetHandler weblogic-handler
   WebLogicHost ebscon.uat.com
                 WeblogicPort 7007
</Location>
# AIA
<Location /AIA>
    SetHandler weblogic-handler
    WebLogicCluster ebscon1.uat.com:8007,ebscon2.uat.com:8007
</Location>
</VirtualHost>Do I need to enter WLTempDir and WLLogFile values under each <Location tag i.e.
<Location /AIA>
    SetHandler weblogic-handler
    WebLogicCluster ebscon1.uat.com:8007,ebscon2.uat.com:8007
    WLLogFile /tmp/server1
    WLTempDir /tmp/server1
</Location>Any help is appreciated.
Thanks

If you want to have only one log file for all the virtual hosts configured in your environment, you can achieve it using global properties. Instead of specifying the same Debug, WLLogFile and WLTempDir properties in each virtual host you can specify them just once in the <IfModule> tag
Sample httpd.conf file:
<IfModule mod_weblogic.c>
WebLogicCluster johndoe02:8005,johndoe:8006
Debug           ON
WLLogFile c:/tmp/global_proxy.log
WLTempDir "c:/myTemp"
DebugConfigInfo On
KeepAliveEnabled ON
KeepAliveSecs 15
</IfModule>
Please refer to the below link for more information:-
http://docs.oracle.com/cd/E15051_01/wls/docs103/plugins/apache.html
-Sandeep

Apache FOP config Question

Hi all,
I have APEX version 3.0.1 and I use F&R Services version 10.1.2.0.2. I wanted to use Apache Fop in order to have PDF Printing facilities.
However in http://www.oracle.com/technology/products/database/application_express/html/configure_printing.html#05
I saw that the OC4j version needed should be a minimum of 10.1.3.2 version. So I decided to use the OC4j from JDev 10.1.3.3.
Step 1 from the document above went ok, then when I try to configure FOP in APEX I cannot find "Instance Settings", under Manage Service, even though I am logged in as ADMIN.
Has anybody any suggestions on this?
Kind Regards,
Ana-Maria

Hi all,
found the problem. I needed to connect as admin to APEX in order to do this: http://hostname:portno/pls/apex/apex_admin.
Thank you,
Ana-Maria

Apache/Jserv Config Problem with JSP

Problem: Any JSP that contains a bean reference is not being loaded correctly.
The first thing I did was to create a softlink from the ".../Apache/Apache/htdocs" directory to
the directory which contains my *.html and *.jsp files (as instructed in the httpd.conf file).
Then, I followed the instructions on page A-9 of "OracleJSP Developer's Guide and
Reference, Release 1.1.0.0.0". They instruct you to add a wrapper.classpath entry into
jserv.properties that points at your directory that contains the .class files for your bean
classes. I did this too.
I then attempted to load my JSP file from the browser URL entry line. If my JSP does not contain
a reference to a bean, then the page loads fine. If it contains a reference to a bean, then I
get the following message:
Request URI:/webdocs/vps/hellouser/hellouser.jsp
Exception:
oracle.jsp.parse.JspParseException: Line # 4, Error: Unable to find class for bean: myBean defined
by tag with class: hello.NameHandler
I cannot for the life of me get Apache to look in one directory for the .jsp file and another for
the .class file(s). Any suggestions would be greatly appreciated!
MORE BACKGROUND:
If it matters..... My first venture was servlets and I've managed to workt that just fine: I
successfully modified "jserv.conf" to add a mount point (ApJServMount) for my new servlet zone
which I have specified in "jserv.properties". I have also created an associated properties file
for my new servlet zone. I've tested this configuration and all works fine for servlets, just not
JSP.
Once again, thanks in advance for any help regarding a solution to this problem!!!
Dave

Problem: Any JSP that contains a bean reference is not being loaded correctly.
The first thing I did was to create a softlink from the ".../Apache/Apache/htdocs" directory to
the directory which contains my *.html and *.jsp files (as instructed in the httpd.conf file).
Then, I followed the instructions on page A-9 of "OracleJSP Developer's Guide and
Reference, Release 1.1.0.0.0". They instruct you to add a wrapper.classpath entry into
jserv.properties that points at your directory that contains the .class files for your bean
classes. I did this too.
I then attempted to load my JSP file from the browser URL entry line. If my JSP does not contain
a reference to a bean, then the page loads fine. If it contains a reference to a bean, then I
get the following message:
Request URI:/webdocs/vps/hellouser/hellouser.jsp
Exception:
oracle.jsp.parse.JspParseException: Line # 4, Error: Unable to find class for bean: myBean defined
by tag with class: hello.NameHandler
I cannot for the life of me get Apache to look in one directory for the .jsp file and another for
the .class file(s). Any suggestions would be greatly appreciated!
MORE BACKGROUND:
If it matters..... My first venture was servlets and I've managed to workt that just fine: I
successfully modified "jserv.conf" to add a mount point (ApJServMount) for my new servlet zone
which I have specified in "jserv.properties". I have also created an associated properties file
for my new servlet zone. I've tested this configuration and all works fine for servlets, just not
JSP.
Once again, thanks in advance for any help regarding a solution to this problem!!!
Dave

Apache/SSL Tomcat config weirdness...

I thought I read a post related to this recently, but I can't find it (the forum search is flaky lately), so I'm making my own post...
We have Apache 1.3 with mod_ssl for SSL, Tomcat 4.1.24 and mod_jk set up. Things work fine for most of this setup, except this weird thing happening with our pushlet servlet. The pushlet is a servlet that never closes and we push data to an applet client in the browser.
The JSP and other servlets (one that creates a chart image, for example) work fine. The weird thing is the pushlet servlet, on the other hand, will not work fine. It has multiple output modes: Javascript, Serialized Object and XML, and we use the Serialized Object mode with the client applet, but for some reason it is disregarding what mode we ask for only when using SSL. When we connect to Tomcat directly (we have port 8080 open for testing) without SSL, the pushlet stuff works fine as well. It seems that when we connect to the pushlet (testing by typing the URL in the browser) with SSL, it defaults to the Javascript mode no matter what we put in the query string of the URL, and Javascript not being serialized objects, the client barfs. (XML mode doesn't work either.)
It's made more weird because the debug statements we put in the doGet method of the pushlet servlet don't get written either in SSL mode, but they do in non-SSL mode. Very strange, cuz basically we figured the pushlet servlet is somehow not getting the parameters of the query string in the request (which is what I thought I saw a thread about that I mentioned before).
So clearly the obvious answer is that something isn't configured correctly between Apache and Tomcat. But I can't seem to figure out what. Any ideas?

I wouldn't say most... you've been pretty busy yourself...
One possible conclusion we've come up with is: We are using RedHat Linux 9, and I rebuilt Apache, mod_ssl and mod_jk myself on that system. But someone else installed it, and I recall (vaguely, and the someone else no longer around) that he had some issue running them with the mod_jk I built for RH9, so he ended up using the one we had from a RH7.2 installation (which the whole thing on a RH7.2 system works fine, SSL or not). He had said it was working with the RH7.2 mod_jk, but maybe he didn't check the right things, and I didn't follow up on it at the time cuz it wasn't important at the time.
So the thought is that maybe it's the mod_jk that's really causing a problem for some reason. Some incompatability in the builds for the OS versions. Why it's only during SSL connections, I don't know, but the rest of the config seems to be correct.
As for the SSL How-To, yes, I've looked thru it again (as I said, though, we have the same thing on an RH7.2 system is working fine, and in both cases I built Apache, mod_ssl and mod_jk from source for both systems). I'm considering setting up stand-alone SSL on Tomcat and taking Apache out of the loop to see if it works that way.
We have, however, pretty much ruled out the pushlet servlet (it's 3rd party code) as the problem. We have the source, and it's too simple in what it does to be messed up, and debug statements we put in don't seem to indicate any problem.
Well, more investigations tomorrow.

WL8.1 Apache plug-in on RH ES4.2 httpd-2.0.52 mod_ssl

Hi,
I am using the above config and was facing some wierd issues. My setup requires my apache to serves HTTPS request via mod_ssl to visitors, and using mod_wl_20.so for dynamic page. However, when a request comes in under https, the content is not loading BUT under http, the content loads.
Did a trace on the bea logs, at it only logs request for http request to apache but not https request to apache. Do i have to use mod_wl_ssl.so ? How does this really matter when SSL request should be handled via the apache mod_ssl server?
Would really appreciate any help on this.
Regards
. zerod

please use mod_wl_ssl_128.so file
http://www.nahusha.com
http://forums.nahusha.com
thanks
Rajesh

Compiling Apache 1.3.9 & PHP 3.0.12 to use Oracle 8.1.5 on SuSe 6.2

Hi!
I am trying to compile the above packets but am running into massive problems.
PHP3 compiles well, if i try to use the "normal" static module for Apache, but the Apache configure script says that it needs an ANSI C compiler and stops.
I am using GCC 2.7.2.3 with the bugfixes from SuSe.
Since that did not work I tried the configuration as a Dynamic Module. The Apache "Readme.config" explains two ways to do so, but the first has the same problem with GCC and the second (via APXS) compiles Apache without problems, but PHP3 wont compile since it does not find a library. The exact error is: "/usr/i486-linux/bin/ld: cannot open -lclntsh: No such file or directory"
I found a libclntsh.so.8.0 in the oracle/lib directory, but since i fumbled around with this library (i tried ln -s libclntsh.so.8.0 libclntsh.so) sqlplus says libclntsh.so.8.0: cannot find file data: no such file or directory (even now that the link is deleted again).
And PHP still wont compile. Any ideas would be welcome.
P.S.: Is it normal that Oracle has to be told NOT to create a database during install, TO create a database???
We worked for 3 days on the Oracle installation and that was the only way to install Oracle without errors.
thx
Uwe Schurig

Lee Bennett (guest) wrote:
:Hi
:I have successfully installed Oracle 8.1.5 Enterprise edition
on
:Suse 6.2 and applied the 8.1.5.0.1 patch set,
NO!
SuSe 6.2 have a patch file for Oracle made from their developers.
Never use Oracle 8.1.5.0.1 patch file that doesn't work because
us bugged.
Use SuSe 6.2 Oracle patch set.
(don't remember the web page where you can download it but a
search with word "oracle" from SuSe homepage will lead you to
it)
-Stefano
null

After upgrade System Apache can't start

Hi i work with php5, apache (default) and mysql on my MacBook Pro...
This weekend i have installed the last upgrade of system, but now my server apache don't start..
If i try to start/stop/restart apache from terminal i get this error:
cbmac:~ cbmac$ apachectl start
launchctl: CFURLWriteDataAndPropertiesToResource(/System/Library/LaunchDaemons/org.apache. httpd.plist) failed: -10
org.apache.httpd: Already loaded
cbmac:~ cbmac$ apachectl restart
launchctl: CFURLWriteDataAndPropertiesToResource(/System/Library/LaunchDaemons/org.apache. httpd.plist) failed: -10
cbmac:~ cbmac$ apachectl stop
launchctl: CFURLWriteDataAndPropertiesToResource(/System/Library/LaunchDaemons/org.apache. httpd.plist) failed: -10
the content of the file org.apache.httpd.plist is :
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Disabled</key>
<true/>
<key>Label</key>
<string>org.apache.httpd</string>
<key>OnDemand</key>
<false/>
<key>ProgramArguments</key>
<array>
<string>/usr/sbin/httpd</string>
<string>-D</string>
<string>FOREGROUND</string>
</array>
<key>SHAuthorizationRight</key>
<string>system.preferences</string>
</dict>
</plist>
I have already repaired the files permissions with Disk Utility, but without resolving the problem.
I don't know what to do, someone have idea?
Thanks in advance
Manza

I also have the same error:
http://discussions.apple.com/thread.jspa?messageID=9125362&#9125362
But may have found a solution here in this thread ( Comment by 'parndt' ):
http://discussions.apple.com/thread.jspa?messageID=8689266&#8689266
I havnt tried it yet, As I spent half of yesterday, formatting, then trying to compile Apache, php, mysql, openssl on on a seperate partition, but changing the Apache LAYOUT config, yet the mac wouldn't listen to my changes and kept trying to use the original broken version.
I am formatting now, and going to try on a clean install, so will let you know.
This is a good reference site:
http://diymacserver.com/

Apache in testing dosen't work

i install apache mysql and php in testing repo.
but apache dosen't work.
$ sudo /etc/rc.d/httpd start
:: Starting HTTP Daemon [FAIL]
$ sudo /usr/sbin/apachectl start
httpd: Syntax error on line 232 of /etc/httpd/conf/httpd.conf: Cannot load /usr/lib/apache/mod_access.so into server: /usr/lib/apache/mod_access.so: cannot open shared object file: No such file or directory
there is not mod_access.so. hwo to run appache daemon?
$ pacman -Ql apache | grep /usr/lib/apache/mod
apache /usr/lib/apache/mod_actions.so
apache /usr/lib/apache/mod_alias.so
apache /usr/lib/apache/mod_asis.so
apache /usr/lib/apache/mod_auth_basic.so
apache /usr/lib/apache/mod_auth_digest.so
apache /usr/lib/apache/mod_authn_anon.so
apache /usr/lib/apache/mod_authn_dbd.so
apache /usr/lib/apache/mod_authn_dbm.so
apache /usr/lib/apache/mod_authn_default.so
apache /usr/lib/apache/mod_authn_file.so
apache /usr/lib/apache/mod_authz_dbm.so
apache /usr/lib/apache/mod_authz_default.so
apache /usr/lib/apache/mod_authz_groupfile.so
apache /usr/lib/apache/mod_authz_host.so
apache /usr/lib/apache/mod_authz_owner.so
apache /usr/lib/apache/mod_authz_user.so
apache /usr/lib/apache/mod_autoindex.so
apache /usr/lib/apache/mod_cern_meta.so
apache /usr/lib/apache/mod_cgi.so
apache /usr/lib/apache/mod_dav.so
apache /usr/lib/apache/mod_dav_fs.so
apache /usr/lib/apache/mod_dbd.so
apache /usr/lib/apache/mod_deflate.so
apache /usr/lib/apache/mod_dir.so
apache /usr/lib/apache/mod_dumpio.so
apache /usr/lib/apache/mod_env.so
apache /usr/lib/apache/mod_expires.so
apache /usr/lib/apache/mod_ext_filter.so
apache /usr/lib/apache/mod_filter.so
apache /usr/lib/apache/mod_headers.so
apache /usr/lib/apache/mod_ident.so
apache /usr/lib/apache/mod_imagemap.so
apache /usr/lib/apache/mod_include.so
apache /usr/lib/apache/mod_info.so
apache /usr/lib/apache/mod_log_config.so
apache /usr/lib/apache/mod_log_forensic.so
apache /usr/lib/apache/mod_logio.so
apache /usr/lib/apache/mod_mime.so
apache /usr/lib/apache/mod_mime_magic.so
apache /usr/lib/apache/mod_negotiation.so
apache /usr/lib/apache/mod_proxy.so
apache /usr/lib/apache/mod_proxy_ajp.so
apache /usr/lib/apache/mod_proxy_balancer.so
apache /usr/lib/apache/mod_proxy_connect.so
apache /usr/lib/apache/mod_proxy_ftp.so
apache /usr/lib/apache/mod_proxy_http.so
apache /usr/lib/apache/mod_rewrite.so
apache /usr/lib/apache/mod_setenvif.so
apache /usr/lib/apache/mod_speling.so
apache /usr/lib/apache/mod_ssl.so
apache /usr/lib/apache/mod_status.so
apache /usr/lib/apache/mod_suexec.so
apache /usr/lib/apache/mod_unique_id.so
apache /usr/lib/apache/mod_userdir.so
apache /usr/lib/apache/mod_usertrack.so
apache /usr/lib/apache/mod_version.so
apache /usr/lib/apache/mod_vhost_alias.so

A bunch of modules have changed for apache 2.2 and got new names etc, therefore you have to edit httpd.conf, take look at http://httpd.apache.org/docs/2.2/new_features_2_2.html. For example, mod_access is now called mod_authz_host (with the new identifier authz_host_module, instead of access_module)

Container org.apache.catalina.core.ContainerBase has not been started

Hi I'm integrated Tomcat 5 with Apache 2.0 using mod_jk on Fedora core 7 server. My problem is
i cannot deploy my web application residing on /var/www/webapps/scienceph folder
which has my index.jsp file.
here is my code:
<%@ page contentType="text/html; charset=iso-8859-1" language="java" errorPage="" %>
<html>
<head>
<title>science.ph</title>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
</head>
<body>
<%java.util.Date today = new java.util.Date();
out.println("Today's date is: "+today);
%>
scienceph ..
</body>
</html>when i started tomcat i got the following exceptions in my log file..
Apr 23, 2008 5:28:03 PM org.apache.catalina.core.StandardContext start
SEVERE: Error in resourceStart()
Apr 23, 2008 5:28:03 PM org.apache.catalina.core.StandardContext start
SEVERE: Error getConfigured
Apr 23, 2008 5:28:03 PM org.apache.catalina.core.StandardContext start
SEVERE: Context [/conf] startup failed due to previous errors
Apr 23, 2008 5:28:03 PM org.apache.catalina.core.StandardContext stop
INFO: Container org.apache.catalina.core.ContainerBase.[Integration].[www.science.ph].[/conf] has not been started
Apr 23, 2008 5:28:03 PM org.apache.commons.modeler.Registry registerComponent
SEVERE: Error registering Integration:type=Cache,host=www.science.ph,path=/server
sun.misc.InvalidJarIndexException: Invalid index
        at sun.misc.URLClassPath$JarLoader.getResource(URLClassPath.java:854)
        at sun.misc.URLClassPath$JarLoader.getResource(URLClassPath.java:762)
        at sun.misc.URLClassPath$JarLoader.findResource(URLClassPath.java:732)
        at sun.misc.URLClassPath.findResource(URLClassPath.java:145)
        at java.net.URLClassLoader$2.run(URLClassLoader.java:362)
        at java.security.AccessController.doPrivileged(Native Method)
        at java.net.URLClassLoader.findResource(URLClassLoader.java:359)
        at java.lang.ClassLoader.getResource(ClassLoader.java:977)
        at org.apache.commons.modeler.Registry.loadDescriptors(Registry.java:867)
        at org.apache.commons.modeler.Registry.findDescriptor(Registry.java:960)
        at org.apache.commons.modeler.Registry.findManagedBean(Registry.java:665)
        at org.apache.commons.modeler.Registry.findManagedBean(Registry.java:1014)
        at org.apache.commons.modeler.Registry.registerComponent(Registry.java:831)
        at org.apache.catalina.core.StandardContext.resourcesStart(StandardContext.java:3869)
        at org.apache.catalina.core.StandardContext.start(StandardContext.java:4024)
        at org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:760)
        at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:740)
        at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:544)
        at org.apache.catalina.startup.HostConfig.deployDirectory(HostConfig.java:920)
        at org.apache.catalina.startup.HostConfig.deployDirectories(HostConfig.java:883)
        at org.apache.catalina.startup.HostConfig.deployApps(HostConfig.java:492)
        at org.apache.catalina.startup.HostConfig.start(HostConfig.java:1138)
        at org.apache.catalina.startup.HostConfig.lifecycleEvent(HostConfig.java:311)
        at org.apache.catalina.util.LifecycleSupport.fireLifecycleEvent(LifecycleSupport.java:120)
        at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1022)
        at org.apache.catalina.core.StandardHost.start(StandardHost.java:736)
        at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1014)
        at org.apache.catalina.core.StandardEngine.start(StandardEngine.java:443)
        at org.apache.catalina.core.StandardService.start(StandardService.java:448)
        at org.apache.catalina.core.StandardServer.start(StandardServer.java:700)
        at org.apache.catalina.startup.Catalina.start(Catalina.java:552)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)here is my server.xml
<Server port="8005" shutdown="" debug="0">
<Listener className="org.apache.jk.config.ApacheConfig" modJk="/etc/httpd/modules/mod_jk.so"/>
   <Service name="Tomcat-Apache">
     <Connector className="org.apache.ajp.tomcat4.Ajp13Connector"
        address="www.science.ph" port="8009" minProcessors="5" maxProcessors="75"
        enableLookups="false" protocol="AJP/1.3" acceptCount="10" debug="0" maxPostSize="4097152"/>
     <Engine name="Integration" debug="0" defaultHost="www.science.ph">

        <Host name="www.science.ph" debug="0" unpackWARS="true" appBase="" autodeploy="true"
                xmlValidation="false" xmlNameSpaceAware="false">
     <Listener className="org.apache.jk.config.ApacheConfig" append="true" forwardAll="false" modJk="/etc/httpd/modules/mod_jk.so"/>
            <Context path="" docBase="/var/www/webapps/scienceph" debug="0" reloadable="true">

               </Context>
        </Host>
    </Engine>
</Service>
</Server>how can i solve this problem.. I'm not seeing my application in the browser.. please help me.. thanks in advance for your help..

I already solved this problem.. for others who might also encounter this problem..
just uninstall tomcat from FC7 and install a fresh copy from tomcat website
tomcat version 5.0.26 works for me. hope this help..
God bless..
<img class="emoticon" src="images/emoticons/wink.gif" border="0" alt="" />

Apache + mod_ssl config

Similar Messages

Maybe you are looking for