Documentation for the Apache web server can be found on the Apache website, and is broken into two versions:

Transcription

1

2 APACHE ESSENTIALS This appendix contains many resources that will help you on your way toward becoming an Apache superstar. Refer to the friends of ED website ( for updates to this list. Apache documentation There's a lot of documentation out there for Apache-so much, in fact, that it's hard to decide where to begin. The following are links to some of the most useful Apache resources on the Web. Official Apache documentation Documentation for the Apache web server can be found on the Apache website, and is broken into two versions: Apache 1.3 documentation: apache. org/ docs/ Apache 2.0 Documentation: For more information you can go to Apache's frequently asked questions Apache's FAQ file ( apache. org/ docs/misc/faq. html) holds answers to many, many potential problems that you might experience when configuring Apache. Apache's tutorials Apache also hosts a series of tutorials on their site ( misc/tutorials. html), covering all the major areas of configuration. Documentation for Mac OS X Apple has provided some basic documentation on using Apache with Mac OS X (go to apple. com/internet/macosx/intro. html). It outlines basic information on Apache configuration and security issues. Administering your server If life were easy, you'd only have to worry about maintaining your Apache configuration. Unfortunately, you also have to learn to configure your operating system as well. The following sites will help you: 148

3 RESOURCES Linux Network Administrator's Guide The Linux Network Administrator's Guide (NAG) is a community-supported handbook. The NAG covers several different aspects of Linux networking, such as network and DNS configuration. The NAG can be found online at Mac OS X Server documentation Apple maintains some great user documentation on their website. The documentation covers several aspects of Mac OS X configuration, including mail, web, and network services. Apple's Mac OS X Server documentation can be found online at server/documentation/. Windows 2000 documentation Microsoft has supplied online documentation for its Windows 2000 operating system. This documentation can be viewed at default. asp. Windows XP documentation Microsoft has supplied online documentation for its Windows XP Professional operating system. This documentation can be viewed at default. asp. Programming languages and databases PHP Perl The next logical step to running your own web server is to start programming scripts on it. Here are some links to get you started. PHP is an extremely useful and easy-to-learn web-programming language. Visit for more information. Perl is the most commonly used web-programming language, and you can find it on virtually any UNIX-based operating system. Visit for more information. Windows users can find a Perl installation at 149

4 APACH E ESSENTIALS SSI SSI is a simple scripting language that's used to include files and set variables within HTML documents. Apache's SSI tutorial can be found at: apache. orgl docsl howto/ssi. html. MySQL MySQL is an open-source database based on the SQL database engine. It's an extremely popular choice of database, because of its licensing terms and performance. Go to for more information. PostgreSQL PostgreSQL ( is an alternative choice for open-source SQL database engines. Although it isn't as popular or easy to configure, or as user friendly as MySQL, it's every bit as powerful (if not a little more powerful). OpenSSL OpenSSL ( is a free implementation of the SSL protocol and is used in Secure Web. An implementation of OpenSSL for Windows can be found at In order to use OpenSSL in Apache, you need the mod_ssl module, which can be found at Logging Apache's logging is quite robust-the following links will help you get the best out of your Apache logs. Configuring logs For more information on Apache LogLevels, go to core.html#loglevel. For more information on LogRotate, go to 10grotate.8.html. 150

5 RESOURCES Log analysis tools Analog Webalizer WebTrends Virtual hosts Apache's virtual host documentation can be found online at docs/vhosts/. Kasia's Geek Notes has an excellent virtual host sample configuration. It can be found online at General tools Here are several tools you can use once you're more comfortable with Apache and its inner workings. cpanel cpanel & WebHost Manager (WHM) ( is a commercial-hosting controlpanel system, which allows you to graphically configure your linux server. It's extremely user friendly, but does cost a little money to purchase. This utility helps make Apache easier to configure and maintain. Instead of opening a shell on the Apache server, editing the configuration files manually, and restarting Apache, you can make changes in an easy-to-use graphical setting. The problem with this, of course, is that it's web based. This opens you up to a potential breach of security should someone get ahold of your cpanel password, or exploit it in some unforeseen way. It's also possible to misconfigure Apache using the web interface, possibly even blocking your access to fix the problem! 151

6 APACHE ESSENTIALS Webmin Webmin ( is a web-based interface for system administration for UNIX. Using any browser that supports tables and forms (and Java for the File Manager module), you can set up user accounts, Apache, DNS, file sharing, and so on. Webmin consists of a simple web server, and a number of CGI programs that directly update system files. For example, look for /etc/inetd.conf and /etc/passwd. The web server and all CGI programs are written in Perl version 5, and use no nonstandard Perl modules. Webmin offers the same features as cpanel, but is free software. The drawback to Webmin is that it's a little rougher around the edges, and not quite as easy to use. Still, it offers a graphical means of configuring your Linux system. It also supports Mac as X; as of the writing of this book, cpanel doesn't. flood flood ( tester. In layman's terms, it means that flood is capable of generating large amounts of web traffic. flood's flexibility and power arises in its configuration syntax. It's able to work well with dynamic content. flood is an excellent tool for testing your web server's performance under heavy usage. It's also useful for testing your mod_throttle policies. Additional resources Now that you have some base knowledge of Apache, you can go on and learn more. The following resources will be very helpful. Apache-tooLs.com Apache Tools ( is a compendium of many current tools and information sources for users of the Apache web server. Apache week Apache week ( is one of the longest running Apache-specific publications on the Web, and has a wealth of information for both new and advanced Apache users. 152

7 RESOURCES Linux user groups This is a mostly complete list of Linux user groups around the world (go to Linux user groups are excellent places to get one-on-one advice and help with both Linux and Apache. comp.infosystems. This newsgroup caters to all web-server software. but it's still a good place to ask questions and get advice. 153

8

9 APACHE ESSENTIALS Welcome to the end of the book. You've gone through quite the journey! You started off by breaking gently into the world of Apache configuration, through editing the httpd.conf file, then you looked at the inner workings of Apache, and even worked through some pretty complicated stuff, such as configuring 55L and virtual hosts. You can now install, configure, and maintain an Apache server for your organization without fear, and you can go on to do great things. Keep learning But your journey isn't over yet. Like with all skills, you must keep learning. Apache is as complicated and full-featured as Photoshop or Illustrator, and while you have a good base of knowledge to work from, there's still a lot to learn. The Apache documentation is a great place to start. Now that you have enough basic knowledge to find your way around, you'll better understand the more arcane configuration directives and be able to tune your Apache server to your needs. There are several other resources available to you online, through the Apache website and community websites such as Also, don't hesitate to visit Apache newsgroups, or seek out an Apache user group in your area.' Maybe you should even talk to your local propellerhead from time to time. You're now a web god-nothing can stop you! 156, Linux user groups are also a very useful place to get advice on Apache. An exhaustive list can be found at

10

11 INDEX Symbols.shtml extensions, configuring /ete/apache/ssl directory, moving server. key file to errors, tracking down 131 A access configuring, based on IP addresses 41 access.conf file 27 access.log files analyzing 126 custom scripts 130 log-analysis programs 126 formatting 111 combined logs 111 conditional log files 115 multiple log files 115 reading 116 Add Module directive adding PHP module 137 installing modules 65 mod_ssl module 97 AddType directive, installing modules 66 All directive 41 All directory option 30 Allow directive 141 AllowOverride directive 28 Analog statistics 127 Apache See also configuring Apache compared to cost 6 flexibility 6 performance 6 security 5 configuration 52 configuring for Perl 72 configuring for PHP 73 configuring configuring SSL server 101 considerations before installation 7 Linux 8 operating systems 7 Windows 10 documentation administering server 148 resources 148 history 4 installing 16 location of web files 21 obtaining 11 installing from source or binary 11 PHP support for 73 versions 11 virtual hosts 48 AuthDigestFile directive 40 authenticating configuration 39,40, 141 AuthGroupFile directive 40 AuthName directive 40, 141 AuthType directive 40 AuthUserFile directive 40 B bandwidth throttling mod_throttle module 139 basic.conf file 134 contains global directives

12 INDEX binary install, benefits 19 BIND, configuring 49 c CA (Certificate Authority) 90 becoming a CA 91 creating a public CA certificate 93 generating the CA private key 92 signing certificates 94 installing a certificate from 90 public key, installing 103 Certificate Authority. See CA certificates 88 creating 90 X chmod command, securing server.key file 91 compressed HTTP sessions, Apache configurations 143 config command 81 configuring a domain 28 basic configuration 28 directory options 29 configuring access based on IP addresses 41 configuring Apache 52 access based on IP addresses 41 restricting access to intranet directory 42 adding new file types 42 configuring mime.types 42 applying changes 43 authenticating users 39, 40, 141 basic configuration with PHP 73, 136, 137 changing the default index file 33 compressed HTTP sessions 143 configuring for Perl 72 configuring configuring 55L server 101 custom error messages 37 directory-level configuration 28 domains 28 external configuration files 43 protected intra net directory 140 rewriting URLs 34 directory level 35 server level 35 running virtual hosts 142 server-level configuration 26 5erverType directive 28 slashdotted site L module, loading 96 55L server, configuring 97 user directories 32 configuring log files 119 resources 150 rotating log files 120 configuring 121 piped logs 125 reading archived logs 125 virtual hosts 119 split-iogfile script 120 configuring 55L server 97 Apache virtual-host functionality 101 global options 97 saving log data for secure connections 99 configuring user directories mod_userdir module 32 cpanel tool, resources 151 custom error messages 37 syntax

13 INDEX Custom Log directive 56, 111 configuring log files 119 split log files 120 o databases, resources 149 Debian, obtaining SSL 88 Deny directive 141 directives 26 directory structure of website, planning 79 directory-level configuration 28 AllowOverride directive 28 Directorylndex directive changing the default index file 33 pointing to index.php 137 DNS configuration 48 Windows 2000IXP 52 DocumentRoot directive 55 domain names, history of 48 E echo command 81 encryption, methods 103 errmsg command 81 error messages, customizing 37 error.log file configuring 108 log levels 109 ErrorDocument syntax 38 ErrorLog directive 56 configuring log files 119 exec command 82 ExecCGI directory option 30 executing PHP scripts 137 external configuration files, including 43 external error documents, redirecting 39 F File Transfer Protocol (FTP) 3 file types, adding 42 flastmod command 82 Flood tool, resources 152 FolloWSymLinks directory option 30 fsize command 82 FTP (File Transfer Protocol) 3 G general tools, resources 151 global directives, basic.conf file 134 H HostNameLookups directive configuring log files 119 htpasswd utility 141 HTTP (Hypertext Transfer Protocol) 3 HTTP sessions, compressed Apache configurations 143 httpd.conf file 27 configuring virtual hosts 53 Hypertext Transfer Protocol (HTTP) 3 IfDefine section, configuring SSL server 97 IfModule section, configuring SSL server (Internet Information Server) compared to Apache 5 <img> tag 3 162

14 INDEX IncludesNOEXEC directory option 30 index.shtml files 80 Indexes directory option 31 installing Apache 16 binary install 19 configuration files editing 20 locating 21 firewall 17 location of web files 21 Mac OS X users 17 operating systems 19 requirements 16 source install 18 Windows users 16 Internet Information Server (115), compared to Apache 5 intranet directory restricting access to 42 protected Apache configurations 140 IP addresses, configuring access 41 IP-based virtual hosting 52 L Linux and server security 87 installing Apache 8 Linux Network Administrator's Guide administering server 149 LoadModule directive adding PHP module 137 installing modules 66 mod_ssl module 96 LockFile logs, configuring for Windows 134 log files 108 access.log file 111 and virtual hosts 119 configuring 119 location 119 privileges 108 trouble shooting 130 log rotation, configuring 121 log-analysis programs Analog 127 Webalizer 128 WebTrends 130 logfiles.conf file 134 contains configuration for server log files 136 LogFormat directive 111 configuring log files 119 logging, resources 150 LogLevel directive, configuring log files 119 logrotate utility, configuring log rotation 121 M Mac, using Apache 17 Mac OS X and server security 87 Mac OS X Server documentation 149 mime.types file 27 modules 60 configuring 66 finding 65 installed by default 60 installing 65 recommended modules 67 modules.conf file 134,

15 INDEX mod_access.c module. directives 64 mod_actions.c module. directives 63 mod_alias module 67 directives 35 mod_alias.c module. directives 64 mod_asis.c module. directives 63 mod_auth.c module. directives 64 mod_autoindex.c module. directives 62 mod_cglc module. directives 63 mod_dir.c module. directives 62 mod_env.c module. directives 60 modjzip_item_exclude directive configuring for compressed HTIP sessions 144 modjzip_item_include directive configuring for compressed HTIP sessions 144 mod_imap.c module. directives 63 mod_include module 63 enabling in httpd.conf configuration file mod_include.c module. directives 62 mod_isaplc module. directives 62 mod_lolconfig.c module. directives 61 mod_mime module configuring for compressed HTIP sessions 144 mod_mime.c module. directives 61 mod_negotiation.c module. directives 61 mod_rewrite module 67 alternative to 35 redirecting users 138 mod_setenvif.c module. directives 65 mod_so.c module. directives 64 mod_ssl module installing on Windows 87 loading 96 preconfigured server variables 99 setting up a secure connection 89 mod_throttle module 67 enabling bandwidth throttling 139 mod_userdir module loading and configuring 32 mod_userdir.c module. directives 63 MultiViews directory option 31 MySQL. resources 150 N name-based virtual hosting 52 NameVirtualHost directive 143 o <object> tag 3 OpenSSL creating certificates 90 obtaining 88 resources 150 sign.sh script 94 openssl utility generating the CA private key 92 req command 93 operating systems installing Apache 19 Order directive 141 p Perl 72 configuring Apache for 72 resources

16 INDEX PHP 72 configuring Apache 73, 74, 136, 137 as CGI73 resources 149 support for Apache 73 PHP scripts ExecCGI directory option 137 PidFile logs, configuring for Windows 134 piped logs 125 POP 3 PostgreSQL, resources 150 printenv command 82 private CA key, generating 92 programming languages, resources 149 protected intranet directory Apache configurations 140 public CA certificate, creating 93 R Red Hat Linux, obtaining SSL 88 Redirect directive, mod_alias module alternative to mod_rewrite module 35 RedirectMatch directive, mod_alias module 36 RedirectPermanent directive, mod_alias module 36 RedirectTemp directive, mod_alias module 36 req command, creating a public CA certificate 93 Require directive 40 resources 148 additional resources 152 Apache documentation 148 general tools 151 logging 150 programming languages and databases 149 server administration 148 RewriteBase directive URL for redirected file 139 RewriteEngine directive turning on rewriting engine 139 rewriting engine 139 rotate logs utility piped logs 125 RSA keys 92 s Satisfy directive any setting 140 ScriptAlias directive 56 scripting languages 72 benefits of 72 Perl 72 PHP 72 secure connections, setting up 89 Secure Sockets Layer. See SSL server administration, resources 148 Server Side Includes. See 551 server-level configuration access.conf file 27 httpd.conf file 27 mime.types file 27 srm.conf file 27 server. key file moving to /ete/apache/ssl directory 94 securing 91 ServerAdmin directive 54 ServerAlias directive 53, 55 running virtual hosts 142 ServerName directive 53,

17 INDEX serverroot directive configuring a domain 28 configuring for Windows 134 servertype directive 28 set command 83 sign.sh script 94 sizefmt command 81 slashdotted site, Apache configurations 138 source install, reasons for using 18 split-iogfile script 120 srm.conf file (Server Side Includes) 72 additional commands 81 benefits of 72 breaking up files 78 configuring in Apache 76 mod_include module 76 resources 50 syntax 78 ssl (Secure Sockets Layer) 86 caution on server security 87 strengths 86 obtaining 88 ssl server, configuring 97, 99, 101 sslcertificatefile directive 101 sslengine directive 101 sslmutex directive 97 sslrandomseed directive 98 configuring 98 sslv2 using 103 sslv3 using 103 symlinkslfownermatch directory option 31 T TCP ports 3 timefmt command 81 TLs using 103 TransferLog directive, options 125 u URLs for redirected files 139 redirecting to external web server 36 rewriting at directory level 35 rewriting at server level 35 User directive 40 v virtual hosts 48 Apache configurations 142 benefits 48 configuring in httpd.conf file 53 name-based 52 resources 151 sample Apache configuration 53 Custom Log directive 56 DocumentRoot directive 55 ErrorLog directive 56 scriptalias directive 56 serveradmin directive 54 serveralias directive 55 servername directive 55 VirtualHost directive 54 using separate configuration files 56 VirtualHost directive

18 INDEX w web files, location of 21 web servers, HTIP 3 Webalizer, information provided 128 Webmin tool, resources152 WebTrends 130 Windows and server security 87. binary install 19 installing Apache 10, 16 obtaining SSl 88 replacing specified paths for directives 134 Windows 2000 documentation administering server 149 Windows 2000IXP DNS configuration 52 Windows XP documentation administering server 149 x X Bit Hack 77 X. 509 certificates