File: apache.sgml

package info (click to toggle)
linuxconf 1.26r4-2
  • links: PTS
  • area: main
  • in suites: woody
  • size: 56,432 kB
  • ctags: 27,217
  • sloc: cpp: 158,803; perl: 7,484; sh: 4,134; java: 3,105; ansic: 2,492; makefile: 2,216; python: 109
file content (207 lines) | stat: -rw-r--r-- 7,200 bytes parent folder | download
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
<!doctype linuxdoc system>
<article>
<title>Apache Web Server

<abstract>
	This is the main configuration menu for the WWW-server
	Apache.  Apache provides many configuration options and is
	extendable with third-party modules.  As a result
	<em/Linuxconf/ can only control some of Apache's
	functionality -- the most important parts.

	In this window, you control the server-wide configuration.  You can also
	set default values, which can be overridden, for specific parts of the
	Web server contents.
</abstract>

<sect>Administrator email
<p>
	This address will be included in error messages to Web clients
	(browsers), for example, when pages can't be found.  This email address
	is usually webmaster@domain.

<sect>Domain IP address
<p>
      If you want to let several virtual domains share a single IP address, you
	must enter that address here.

<sect>Server name
<p>
	The name of the Web server.  If name resolving works (using DNS or
	<TT>/etc/hosts</TT>) you should not have to enter anything here.
	However, if Apache is unable to determine the hostname at startup, or if
	the hostname is not the same as the official name of the Web server, you
	need to provide it yourself.

<sect>Server aliases
<p>
	Alias names for the Web server.  Names <em/must not/ be provided
	here in the main configuration; this is only for virtual domains.

<sect>Document root
<p>
	The directory (in the real filesystem) from which your Web server will
	be serving most of its Web pages.

	For example: If you  set the document root to
	<tt>/home/httpd/html</tt>, then accesses to
	<tt>http://your.webserver.com/index.html</tt> would return the file
	<tt>/home/httpd/html/index.html</tt>.  An access to
	<tt>http://your.webserver.com/foo/gazonk.gif</tt> would
	return <tt>/home/httpd/html/foo/gazonk.gif</tt>.

<sect>Error log
<p>
	The path to the log file for error messages.  Usually, it is
	<tt>logs/error_log</tt>, which is relative to the ServerRoot.  Often the
	directory <TT>logs</TT> in ServerRoot is a symbolic link to
	<tt>/var/log/httpd</tt>.  Then the log path above would result in error
	messages being logged to <tt>/var/log/httpd/error_log</tt>.

	You should monitor this log after reconfiguring, since most
	configuration errors are logged here (Linuxconf, sadly, catches
	only a few of them.)  Additionally, any failed accesses by
	clients (non-existent pages, failed authorization and so on)
	are also logged here.

<sect>Transfer log
<p>
	All accesses to the Web server will be logged in this file.  Usually, it
	is <tt>logs/access_log</tt>.  Every access is logged on a single line in
	the Common Log Format (most Web logfile analyzers understand this format).

<sect>Agent log
<p>
	The browsers used to access the Web server are logged in this
	file.

<sect>Referer log
<p>
	If an access was the result of a user following a link from
	some page to the accessed page, then the other, referring
	page is logged in this file.

<sect>Script Alias
<p>
	Provides the location for CGI programs.  This should be two paths,
	separated by whitespace.  The first path is the path used in URL that
	triggers execution of a CGI program; the second path is where those CGI
	programs are stored in the real filesystem.

	For example, if the script alias is <tt>/cgi-bin/home/httpd/cgi</tt>
	then a request for
	<tt>http://your.webserver.com/cgi-bin/feedback.py</tt> would execute and
	return the output of <tt>/home/httpd/cgi/feedback.py</tt>.


<sect>User
<p>
	The user the web server should run as.  This means that the Web server
	can only read and write those files which that a user has rights to read
	or write, respectively.  Therefore, this should be set to a user with
	very low privileges, for example, nobody.

	An even better idea is to create a user specifically for the Web server.
	This is very important, if you want to let the Web server write files in
	some directory, since the user "nobody" should not have privileges to
	write files anywhere except in <tt>/tmp</tt>.

<sect>Group
<p>
	The group the Web server should run as.  See the discussion
	of User above, but apply it to groups instead of users.


<sect>Tuning
<p>

<sect1>Listen on port
<p>
	The TCP port on which the Web server should listen for HTTP requests.
	The standard port for HTTP is 80, so if you use another port you need to
	include it in the URL.  For example, if you let your Web server listen
	on port 8000, then the URL to your server would be
	<tt>http://your.webserver.com:8000/</tt>.

<sect1>Pid file
<p>
	The Web server stores the PID of its main process in this file.  You
	will probably not need to modify this.

<sect1>Time out
<p>
	How many seconds the Web server will wait for a request to be sent after
	a client has connected to the server.  If a client connects but doesn't
	send any request, it will be disconnected after this amount of time.

<sect1>Host name lookups
<p>
	Whether the Web server should attempt to find out the host
	names of connecting clients.  If this is disabled, only the IP
	address of the client will be logged.  If you enable it, the
	host name will be logged instead, if it is possible to resolve
	the IP address to a name.

	There are two disadvantages of enabling host name lookups.  Every access
	results in network traffic to resolve the address, and the accessed page
	can't be returned until after the address is resolved, so your Web
	server will be slowed down.  If you're interested in seeing the host
	names of machines accessing your Web server, a better idea is to let a
	log file analyzer resolve the addresses as it processes the log files.


<sect>Features
<p>
	This controls various features beyond simply returning the
	contents of a file.  In most cases this is controlled by the
	sub-directory specs instead.

<sect1>Server side includes
<p>
	If enabled, files with the extension .shtml are processed
	to expand server side includes tags before the results are
	returned to the client.

<sect1>IncludesNOEXEC
<p>
	Also enables server side includes, but the SSI tag
	#exec and #include:ing CGI-scripts are disabled.

<sect1>May execute CGI
<p>
	Allow CGI scripts.  Usually only enabled in the sub-directory
	spec for the CGI directory.

<sect1>Indexes
<p>
	When accessing an URL ending in a directory the file index.html in that
	directory is returned.  If that file doesn't exist, and this option is
	enabled, a directory listing is returned.  If this option is disabled, a
	404 Not found is returned instead.

<sect1>May follow symlinks
<p>
	If an accessed directory or file is a symbolic link, the
	access will only be allowed if this feature is enabled.

<sect1>Follow symlink if owner matches
<p>
	As above, but additionally, the owner of the symbolic link and
	its target file must be the same.  This allows users to have
	symbolic links to their own files, but not to sensitive system
	files like /etc/passwd.

<sect1>Multiviews
<p>
	Multiviews allows the client browser and the Web server to negotiate the
	format and language in which data should be returned. To make the Web
	server capable of doing this, you can store the various languages and
	data formats in files with certain extensions and then enable
	multiviews.

</article>