The FreeBSD Diary

The FreeBSD Diary (TM)

Providing practical examples since 1998

If you buy from Amazon USA, please support us by using this link.
[ HOME | TOPICS | INDEX | WEB RESOURCES | BOOKS | CONTRIBUTE | SEARCH | FEEDBACK | FAQ | FORUMS ]
FreeBSD Support
 New Topic  |  Go to Top  |  Go to Topic  |  Search  |  Log In   Previous Message  |  Next Message 
 Apache SSL Bug?
Author: el_kab0ng 
Date:   18-01-02 01:11

So I decided to upgrade my apache server to the Apache 1.3.22 + mod_ssl the other day.

All was fine until I tried to reinstate the ~/user web space. It appears as though you cannot specifically assign /usr/home/*/public_html as a valid directory for Apache to read. It tries to follow the symbolic link from /usr/home to /home which in turn breaks the user space. The only way I have found to fix this is to FollowSymLinks in my Options for Directory /

This seems like a VERY insecure way to run a webserver, and might be considered a bug. Has anyone else experienced this sort of nonsense?

To show you guys what sorts of configs I've tried:

Tried:
<Directory /home/*/public_html>
AllowOverride AuthConfig
Options FollowSymLinks
</Directory>

Got:
[Thu Jan 17 15:54:26 2002] [error] [client 192.168.1.1] Symbolic link not allowed: /home/

Tried:
Moving the same Directory container within the SSL VirtualHost.

Got: Same Error

Tried:
<Directory /usr/home/*/public_html>
AllowOverride AuthConfig
Options FollowSymLinks
</Directory>

Got:
Same Error

Talk about ANNOYING!!!

 Reply To This Message  |  Forum List  |  Flat View   Newer Topic  |  Older Topic 

 Topics Author  Date
 Apache SSL Bug?   new
el_kab0ng 18-01-02 01:11 
 Re: Apache SSL Bug?   new
Anaconda 18-01-02 01:26 
 Re: Apache SSL Bug?   new
el_kab0ng 18-01-02 01:38 
 Re: Apache SSL Bug?   new
el_kab0ng 18-01-02 01:40 
 Re: Apache SSL Bug?   new
Anaconda 18-01-02 01:43 
 Re: Apache SSL Bug?   new
el_kab0ng 18-01-02 01:59 
 Re: Apache SSL Bug?   new
lmb 24-06-05 07:14 
 Re: Apache SSL Bug?   new
Dan Langille 18-01-02 02:55 
 Re: Apache SSL Bug?   new
el_kab0ng 18-01-02 03:20 
 Re: Apache SSL Bug?   new
aaron 19-01-02 07:45 
 Re: Apache SSL Bug?   new
el_kab0ng 21-01-02 16:31 
 Re: Apache SSL Bug?   new
lmb 24-06-05 09:16 


 Forum List  |  Need a Login? Register Here 
 User Login
 User Name:
 Password:
 Remember my login:
   
 Forgot Your Password?
Enter your email address or user name below and a new password will be sent to the email address associated with your profile.
How to get the most out of the forum

phorum.org