Apache Web Server Administration for Windows

Transcription

1 or tri N s di IO n tio AT uc od pr re U ed AL riz ho ut na EV U is i ib d tie PY oh pr O n C io t bu Apache Web Server Administration for Windows

2 Apache Web Server Administration for Windows (AWS101 version 1.4.0) Copyright Information Copyright 2016 Webucator. All rights reserved. The Author Stephen Withrow Stephen has over 30 years' experience in training, development, and consulting in a variety of technology areas including Java, C, C++, XML, JavaScript, AJAX, Tomcat, JBoss, Oracle, and DB2. His background includes design and implementation of business solutions on client/server, Web, and enterprise platforms. Stephen is a published writer in both technical and non-technical endeavors. Stephen received an undergraduate degree in Computer Science and Physics from Florida State University.

3 Accompanying Class Files This manual comes with accompanying class files, which your instructor or sales representative will point out to you. Most code samples and exercise and solution files found in the manual can also be found in the class files at the locations indicated at the top of the code listings. Due to space limitations, the code listings sometimes have line wrapping, where no line wrapping occurs in the actual code sample. This is indicated in the manual using three greater than signs: >>> at the beginning of each wrapped line. In other cases, the space limitations are such that we have inserted a forced line break in the middle of a word. When this occurs, we append the following symbol at the end of the line before the actual break:»»

4 Table of Contents Table of Contents 1. Apache Web Server...1 The Apache Web Server...1 Features...2 Download...2 Windows...2 Linux...2 Multi-Processing Modules...4 Building Apache from Source...5 Exercise 1: Installing and Testing Apache Directory Structure...13 Apache Directories...13 The Role of Each Directory...14 bin...14 cgi-bin...14 conf...14 error...14 htdocs...14 icons...14 include...14 lib...15 modules...15 Document Root...15 Exercise 2: Changing the Directory for the Log Files httpd.conf Configuration...19 Contents of httpd.conf...19 Coding Directives, Containers, and Comments...19 Directives...19 Containers...20 Comments...20 Scope of Directives...21 Order of Evaluation of Containers...21 Making Port Assignments...22 Specifying the Document Root...22 Including Files...23 Modularization and Organization...23 Guidelines for Modularization...23 Organization...24 Verifying the Syntax of httpd.conf...25 Updating httpd.conf between Releases...25 Securing httpd.conf...26 Exercise 3: Changing the Configuration...27 Version: Printed: i

5 Table of Contents 4. Load Modules...31 Dynamic Shared Objects...31 The Core Module...32 Static Modules...32 Building Modules from Source and Installing from a Package...32 Relationship between Modules and Directives...32 LoadModule Directive...32 Using a Module's Directives...33 MIME Types and mod_mime...34 Exercise 4: Activating a Module Security...39 Secure Socket Layer...39 Creating a Certificate...39 Configuring Apache for SSL...40 Server Setup...41 Access Control...41 Host and IP...42 Authentication...43 Basic Authentication...43 Digest Authentication...46 How Apache Implements Authorization...46 LDAP Authentication and Authorization...47 Limit Directive...48 LimitExcept Directive...48 Exercise 5: Using Digest Authentication Logging...53 Logging Overview...53 The Error Log...53 Setting the Log Level...53 The Access, Agent, and Referer Logs...54 CustomLog...55 Formatting the Log Record with LogFormat...56 Log Rotation...56 Exercise 6: Generating Multiple Logs...59 ii Copyright 2016 Webucator. All rights reserved.

6 Table of Contents 7. Configuring Directories...65 Directory Containers in httpd.conf...65 The Options Directive...67 Directory Indexing...68 IndexOptions...68 DirectoryIndex...70 Excluding Files with IndexIgnore...70 DirectoryMatch...71.htaccess...71 Handling HTTP Status Codes with Error Documents...72 Location Containers...73 Exercise 7: Configuring a Directory and a Subdirectory Virtual Hosts...79 Virtual Host Container...79 Setting Up the Virtual Host...79 IP-based...79 Name-based...80 Port-based...80 Exercise 8: Defining Name-based Virtual Hosts Using Aliases and Redirecting...87 Configuring an Alias for a URL...87 Redirect...88 Using mod_rewrite...89 Exercise 9: Using Alias, Redirect and mod_rewrite for different Virtual Hosts Performance Considerations...95 Adjusting httpd.conf...95 DNS Name Lookup...95 Logging I/O...95 Web Applications...96 Network Issues...97 Exercise 10: Tuning the Access Log Customizing Request/Response Processing Handlers and Requests Built-in Handlers Handler Directives Location Directive Files Directive SetHandler AddHandler RemoveHandler Filters Exercise 11: Using the type-map Handler Version: Printed: iii

7 Table of Contents 12. PHP PHP Download and Installation Windows Linux Apache Configuration Writing a Basic PHP Web Page Using MySQL with Apache and PHP WordPress Exercise 12: Installing a PHP/MySQL Website Mod Proxy and Mod Proxy Balancer Apache as a Proxy Server Installing and Enabling Required Modules Using mod_proxy Forward vs. Reverse Proxy mod_proxy_balancer Exercise 13: Testing mod_proxy and mod_proxy_balancer iv Copyright 2016 Webucator. All rights reserved.

8 Apache Web Server 1. Apache Web Server In this lesson, you will learn About the Apache Web Server. 2. About the functionality of the Web Server. 3. How to download Apache. 4. How to install the Web Server on Windows and Linux. 5. About testing the installation. The Apache Web Server is the one of the oldest and most popular web servers. According to various estimates, more than one-half of all websites on the World Wide Web are hosted by the Apache Web Server. The Apache Web Server is often referred to as simply Apache. The popularity of Apache is due to the web server's functionality and speed. The web server offers a broad range of capability including virtual hosting, MIME type specification, directory mapping, securing web resources, and logging configuration. The speed of Apache is due in part to the fact that it is written in C and can be assembled from modules. 1.1 The Apache Web Server Apache was initially developed by Rob McCool at the NCSA (National Center for Supercomputing Applications) in early By the end of the year, a group of engineers led by Brian Behlendorf and Cliff Skolnick created the first "official" release of Apache. The group had assembled the web server from "patches" and the server became known as "a patchy" web server. Eventually, the word "Apache" was used as the server's official name. By 1999, the Apache Software Foundation was formed and the Apache Web Server became generally available as the foundation's first open-source product. Version: Printed: Page 1 of 128

9 Apache Web Server 1.2 Features Apache offers a broad range of features including virtual hosting, server-side language support, authentication and authorization, SSL support, and configurable error messages. The functional capability is delivered through modules that can be either compiled into the server software or configured as dynamic objects. This modular design allows administrators to adapt the web server to the needs of an organization. 1.3 Download This part of the lesson will guide you in downloading the Apache Web Server for Windows and Linux. You will install the server in the lesson exercise for Windows. The Linux installation will be included in this topic. Windows Apache is available for download from a number of websites, including This course is written for Apache 2.4. In this lesson, we will focus on downloading Apache 2.4. Apache 2.4. downloads for 32-bit and 64-bit Windows platforms are available at as zip files. Download the 32-bit distribution for compatibility with the PHP DLL offered by Apache Lounge. After downloading the zip file, extract the zip to c:/apache24. Page 2 of 128 Copyright 2016 Webucator. All rights reserved.

10 Linux Distributions of Linux such as Redhat's Fedora are shipped with Apache. In addition, most Linux distribution vendors provide a pre-built RPM for Apache. If your distribution of Linux does not include Apache 2.4, then you can download the source tar file from The name of the file is httpd tar.bz2. The source file can be converted into an RPM file using the following command: rpmbuild -tb httpd tar.bz2 Several RPMs will be generated including the httpd RPM (httpd i686.rpm). Install the httpd RPM using the following command: rpmbuild -U httpd i686.rpm Start the server: Apache Web Server Version: Printed: Page 3 of 128

11 Apache Web Server service httpd start Point your browser to You should see the welcome page: 1.4 Multi-Processing Modules A Multi-Processing Module (MPM) enables Apache to work efficiently with the operating system. The MPM handles binding to network ports, handling requests and dispatching child processes to handle the requests. Apache is shipped with an MPM compiled into the server. The following table indicates the default MPM for each OS: MPM mpm_netware mpmt_os2 prefork, worker or event mpm_winnt Operating System Netware OS/2 UNIX/Linux Windows Page 4 of 128 Copyright 2016 Webucator. All rights reserved.

12 Apache Web Server The mpm_winnt MPM is compiled from mpm_winnt.c. This module uses a single control process that creates a child process to create threads to handle requests. The prefork MPM is compiled from prefork.c. This module uses a single control process that creates child processes that listen for requests. The requests are serviced by a child process. Several idle, or spare, processes are maintained by Apache so that a new process does not need to be forked to service a client request. The maximum number of child processes ("workers") can be set using the MaxRequestWorkers directive. The worker MPM is compiled from worker.c. This module uses a multi-process multi-threaded server to create threads to serve requests. A parent process launches child processes and each child process creates a fixed number of threads to handle requests in addition to a listener thread to listen for requests. The maximum number of threads ("workers") that can be created is set using the MaxRequestWorkers directive. The maximum number of threads a child process can create is set using the ThreadsPerChild directive. The settings for each MPM are located in APACHE_HOME/conf/extra/httpdmpm.conf. 1.5 Building Apache from Source For Linux and UNIX environments, Apache can be compiled from the C source files. This presents the opportunity to statically compile modules into the Apache binary. The procedure for compiling Apache consists of the following steps: 1. Download the Apache server. 2. Extract the source from the Apache server tarball. 3. Configure the Apache source tree. 4. Perform the compile. 5. Install the package. 6. Customize the configuration. 7. Test by starting the Apache server. For detail on these steps go to Version: Printed: Page 5 of 128

13 Apache Web Server Exercise 1 15 to 25 minutes Installing and Testing Apache In this exercise, you will install and test the Apache Web Server on Windows. 1. Follow the instructions in the text to download the Apache installation zip file. 2. Extract the zip file to c:/apache Open c:/apache24/conf/httpd.conf for edit in Notepad or similar text editor. Locate the line that starts with ServerName. Edit this line as shown below: ServerName localhost This line is commented in the file. It is optional but you uncomment it. 4. Save the file. 5. Next, you will update the path environment variable to contain a reference to the binary folder under Apache. In the Control Panel, select System and then select Advanced system settings. Page 6 of 128 Copyright 2016 Webucator. All rights reserved.

14 Apache Web Server 6. The System Properties panel will be displayed. Click the Advanced tab: 7. Click Environment Variables... The environment variables will be displayed: Version: Printed: Page 7 of 128

15 Apache Web Server 8. Select the Path variable from the System Variables and then click the Edit... button. 9. Scroll to the beginning of the Variable value: and enter the following text: c:/apache24/bin; Page 8 of 128 Copyright 2016 Webucator. All rights reserved.

16 Apache Web Server 10. Compare your result with the following: 11. Click OK. Click OK on the Environment Variables panel. 12. Start a command prompt by right-clicking on the icon and selecting "Run as Administrator". To install Apache as a Windows service, type the following command: httpd -k install You can run all commands to Apache in this command shell. 13. Apache is now installed as a service with the name Apache Start the web server with the following command: httpd -k start Version: Printed: Page 9 of 128

17 Apache Web Server 15. Point your browser to You should see the welcome page: 16. You can stop the web server with this command: httpd -k stop Page 10 of 128 Copyright 2016 Webucator. All rights reserved.

18 1.6 Conclusion In this lesson, you have learned: About the Apache Web Server. About the Functional Purpose of the Web Server. How to download Apache. How to install the Web Server on Windows and Linux. About testing the installation. Apache Web Server Version: Printed: Page 11 of 128

19 Virtual Hosts 8. Virtual Hosts In this lesson, you will learn About the Virtual Host container. 2. How to set up an IP-based virtual host. 3. How to set up an name-based virtual host. 4. How to set up a port-based virtual host. A web host is essentially a container for web pages. Additional containers can be established on one Apache Web Server as "virtual hosts." A virtual host does not reside on a dedicated server, hence the adjective "virtual." A virtual host is defined in a Virtual Host container. The document root for the host is specified within the container as well as logging destinations and other host-specific items. A given virtual host must be identified by a unique IP, name, or port number. 8.1 Virtual Host Container A virtual host is defined using a Virtual Host container. The VirtualHost directive defines this container. The VirtualHost directive specifies the address of the host and can be an IP address, domain name, a wildcard character ("*") or _default_ (alias for the wildcard character). The _default_ identifies the host container that Apache selects if the incoming host address does not match any other container. 8.2 Setting Up the Virtual Host IP-based An IP-based virtual host is identified by an IP address on the VirtualHost directive. Consider the following example: Version: Printed: Page 79 of 128

20 Virtual Hosts <VirtualHost :80> ServerName DocumentRoot c:/classserver/docs ErrorLog logs/errorlog </VirtualHost> The IP address is " " and the port is "80". If a request contains this IP and port, then Apache will apply the directives within the container to this request. The document root is applicable to this virtual host and overrides any DocumentRoot directive elsewhere in the configuration file. The same is true for the other directives specified in this container. Name-based A name-based virtual host is identified by the server name provided in the Virtual Host container. The the wildcard character (or _default_) is present instead of an IP address Here is an example: <VirtualHost *:80> ServerName DocumentRoot c:/classserver/docs ErrorLog logs/errorlog </VirtualHost> The IP address is not specified. The name in the request will be compared to the server name that is present within the Virtual Host section. If matched, then Apache will apply the directives within the container to this request. If a match does not occur (i.e., Apache cannot match the request with a server name in a virtual host), then Apache will select the first container. The document root is applicable to this virtual host and overrides any DocumentRoot directive elsewhere in the configuration file. The same is true for the other directives specified in this container. Port-based A port-based virtual host is identified by the port number provided prior to the Virtual Host container. Again, we consider an example: Page 80 of 128 Copyright 2016 Webucator. All rights reserved.

21 Virtual Hosts Listen 80 <VirtualHost *:80> ServerName DocumentRoot c:/classserver/docs ErrorLog logs/errorlog </VirtualHost> Listen 90 <VirtualHost *:90> ServerName DocumentRoot c:/classserver2/docs ErrorLog logs/errorlog </VirtualHost> The document root is applicable to this virtual host and overrides any DocumentRoot directive elsewhere in the configuration file. The same is true for the other directives specified in this container. Version: Printed: Page 81 of 128

22 Virtual Hosts Exercise 8 20 to 30 minutes Defining Name-based Virtual Hosts In this exercise, you will define multiple name-based virtual hosts. 1. Stop the Apache Web Server. 2. Extract virtual-hosts/exercises/apacheadmin.zip to APACHE_HOME. The extract operation will create the ApacheAdmin folder. 3. Open httpd.conf for edit. 4. Locate the Directory container for htdocs. Skip to the last line of the container. 5. Insert the following Directory container: <Directory "c:/apache24/apacheadmin*"> Require all granted </Directory> The wildcard (*) is a placeholder for 0 or more characters. Therefore, a subdirectory name of "apacheadmin2" will also be matched in this container. 6. Insert the following Virtual Host container: <VirtualHost *:80> ServerName DocumentRoot "c:/apache24/apacheadmin" </VirtualHost> 7. Save your changes. Leave the edit session open as you will be making additional changes to the configuration file. 8. A domain name of must be assigned to the loopback IP ( ) in order to test your virtual host. 9. The procedure for accomplishing this task varies depending on your operating system. For Windows, you will add the following line to c:/windows/sys tem32/drivers/etc/host. You may need to open a command prompt as Administrator by right-clicking the command prompt in order to edit this file: For Fedora (Linux), you will change the host name as follows in etc/syscon fig/network: HOSTNAME= 11. Start Apache. 12. In your browser, go to: Page 82 of 128 Copyright 2016 Webucator. All rights reserved.

23 Virtual Hosts 13. The following page will be displayed: 14. Extract virtual-hosts/exercises/apacheadmin2.zip to APACHE_HOME. The extract operation will create the ApacheAdmin2 folder. 15. Return to the edit session. 16. Insert the following Virtual Host container after the container you entered earlier in the exercise: <VirtualHost *:80> ServerName DocumentRoot "c:/apache24/apacheadmin2" </VirtualHost> 17. Save your changes. 18. You will enter a new host name. For Windows, add the following line to c:/windows/system32/drivers/etc/host: For Fedora (Linux), change the host name as follows in etc/sysconfig/network: HOSTNAME= Version: Printed: Page 83 of 128

24 Virtual Hosts 20. In your browser, go to The following page will be displayed: Page 84 of 128 Copyright 2016 Webucator. All rights reserved.

25 8.3 Conclusion In this lesson, you have learned: About the Virtual Host section. How to set up an IP-based virtual host. How to set up an name-based virtual host. How to set up a port-based virtual host. Virtual Hosts Version: Printed: Page 85 of 128

26 7400 E. Orchard Road, Suite 1450 N Greenwood Village, Colorado Ph: