On Unixish systems, command prompts that begin with # indicate that you need to be logged in as the superuser (root username); if the prompt begins with %

Figure 1-1. First screen of Apache MSI install

Figure 1-2. License agreement

If your version of tar doesn't support the z option for processing zipped archives, use this command instead:

(Depending on your version of tar, you may be able to combine these operations into a single tar xjvf command.)

Then run the installation script:

Other packaging systems may provide some similar mechanism.

Table 2-1. Module support status

Add the following lines to your httpd.conf file:

Restart your server.

At the time of this writing, there is no supported means of installing mod_ssl on Windows.

The two additions were the Referer (it's spelled incorrectly in the specifications) and the User-agent. These are the URL of the page that linked to the document being requested, and the name and version of the browser or other client software making the request.

Both of these formats are widely used, and many logfile analysis tools assume log entries are made in one or the other.

To log cookie values set and sent by the server to the client:

Using the %{Set-Cookie}o format effector for debugging is not recommended if multiple cookies are (or may be) involved. Only the first one will be recorded in the logfile. See the Discussion text for an example.

Or, you can let Apache use the IP address during normal processing and let a piped logging process resolve them as part of recording the entry:

Then, in the file /usr/local/apache/bin/userdir_log, place the following code:

Table 4-1. mod_vhost_alias variables

Variable

Meaning

%%

insert a %

%p

insert the port number of the virtual host

%M.N

insert (part of) the name

Then, after rotating your logfile:

results in the file /path/to/other/directory/something.html being sent to the client.

To put all users' web directories under a central location:

If you have mod_perl installed, you can do something more advanced like this (again, added to your httpd.conf file):

You can redirect particular URLs to a secure version:

You can tailor the response by making the /cgi-bin/remap-403-to-413 script look something like this:

Table 6-1. Managing password files with htpasswd

Command

Action

% htpasswd -c user.pass waldo

Create a new password file called user.pass with this one new entry for user waldo. Will prompt for password.

% htpasswd user.pass ralph

Add an entry for user ralph in password file user.pass. Will prompt for password.

% htpasswd -b

Due to Apache's scoping rules, this blanket applies to all documents in that directory and in any subordinate subdirectories underneath it. But suppose you want to make a subdirectory, such as BoD/minutes, available without restriction?

HTTP, Browsers, and Credentials

For Apache 2.1 and later, use mod_authn_dbi:

You can block by specific backend URLs:

Or you can block according to regular expression pattern matching:

And an example protect.php that just displays the local URI of the document that was requested:

For Apache 2.0, this is slightly more complicated, as you must individually disable modules you don't want:

Note that with 2.0, as with 1.3, you may wish to enable mod_dir, mod_mime, and mod_log_config, by simply leaving them off of this listing.

For Windows systems:

Then put the following into a file named forbidden.cgi in your server's DocumentRoot:

At this point, you can either send your Certificate Signing Request (CSR) off to one of the certificate authority companies, such as Thawte or Entrust, for them to sign, or, if you prefer, you can sign the key yourself:

Then move these files to your Apache server's configuration directory, such as /www/conf/, and then add the following lines in your httpd.conf configuration file:

For Apache 2.0:

Or, with mod_rewrite:

And then, if things are still not working, look in the error log.

And, if you are running Apache on Windows, so that neither of the above options works for you, you could also try this with a batch file:

Make sure that you copy the program code exactly, with all the right punctuation, slashes, etc., so that you don't introduce additional complexity by having to troubleshoot the program itself.

Next, look at the same program in C, which uses the cgic C library:

For this example, you will also need a Makefile, which looks something like this:

Or, for Apache 2.0:

Also, suexec will be invoked for any CGI programs run out of username-type URLs for the affected virtual host.

Place this code in a file called Example.pm, in a directory Apache/Cookbook/, somewhere that Perl knows to look for it.

Figure 8-2. Sample phpinfo( ) output

404.cgi looks like the following:

Then use <Directory> sections to selectively enable .htaccess files only where needed.

Table A-1. A basic regex vocabulary

Character

Meaning

.

Matches any character. This is the wildcard character.

+

or:

in the file. Correct it if there is one there with wrong information, or add one if you don't already have one.

Also, make sure that your Windows system has DNS enabled. See the TCP/IP setup component of the Networking or Internet Options control panel.

After verifying that DNS is enabled and that you have a valid hostname in your ServerName directive, try to start the server again.

One of three things is happening: