Apache : the definitive guide

Half of the world's Web sites use the Apache server; a good reason to study up. Start with this expanded and updated second edition. This popular installation and configuration guide for Apache servers covers new features implemented in Apache 1.3.3. This is not a command reference or manual, but an excellent guide even for Webmasters who have never installed or configured a server before. However, you should have a basic knowledge of the Web and understand how it works to get the most benefit from this publication. Copyright 4 Table of Contents 5 Preface 9 Who Wrote Apache, and Why? 10 The Demonstration CD-ROM 12 Conventions Used in This Book 12 Organization of This Book 14 Acknowledgments 16 Chapter 1 - Getting Started 17 How Does Apache Work? 19 What to Know About TCP/IP 21 How Does Apache Use TCP/IP? 23 What the Client Does 25 What Happens at the Server End? 27 Which Unix? 28 Which Apache? 29 Making Apache Under Unix 29 Apache Under Windows 39 Apache Under BS2000/OSD and AS/400 41 Chapter 2 - Our First Web Site 42 What Is a Web Site? 42 Apache's Flags 43 site.toddle 44 Setting Up a Unix Server 45 Setting Up a Win32 Server 55 Chapter 3 - Toward a Real Web Site 59 More and Better Web Sites: site.simple 59 Butterthlies, Inc., Gets Going 62 Block Directives 65 Other Directives 68 Two Sites and Apache 74 Controlling Virtual Hosts on Unix 74 Controlling Virtual Hosts on Win32 76 Virtual Hosts 77 Two Copies of Apache 81 HTTP Response Headers 84 Options 84 Restarts 87 .htaccess 88 CERN Metafiles 88 Expirations 89 Chapter 4 - Common Gateway Interface (CGI) 91 Turning the Brochure into a Form 91 Writing and Executing Scripts 95 Script Directives 99 Useful Scripts 101 Debugging Scripts 105 Setting Environment Variables 106 suEXEC on Unix 109 Handlers 116 Actions 117 Chapter 5 - Authentication 120 Authentication Protocol 120 Authentication Directives 122 Passwords Under Unix 124 Passwords Under Win32 126 New Order Form 126 Order, Allow, and Deny 130 Digest Authentication 134 Anonymous Access 136 Experiments 139 Automatic User Information 140 Using .htaccess Files 142 Overrides 145 Chapter 6 - MIME, Content and Language Negotiation 148 MIME Types 148 Content Negotiation 150 Language Negotiation 151 Type Maps 153 Browsers and HTTP/1.1 156 Chapter 7 - Indexing 157 Making Better Indexes in Apache 157 Making Our Own Indexes 165 Imagemaps 168 Chapter 8 - Redirection 174 Rewrite 178 Speling 185 Chapter 9 - Proxy Server 186 Proxy Directives 186 Caching 189 Setup 191 Chapter 10 - Server-Side Includes 195 File Size 198 File Modification Time 199 Includes 199 Execute CGI 199 Echo 201 XBitHack 201 XSSI 201 Chapter 11 - What's Going On? 202 Status 202 Server Status 203 Server Info 204 Logging the Action 204 Chapter 12 - Extra Modules 212 Authentication 217 Blocking Access 218 Counters 218 Faster CGI Programs 218 FrontPage from Microsoft 218 Languages and Internationalization 219 Server-Side Scripting 219 Throttling Connections 219 URL Rewriting 219 Miscellaneous 219 MIME Magic 220 DSO 220 Chapter 13 - Security 221 Internal and External Users 222 Apache's Security Precautions 224 Binary Signatures, Virtual Cash 225 Firewalls 230 Legal Issues 233 Secure Sockets Layer: How to Do It 238 Apache-SSL's Directives 249 Cipher Suites 252 SSL and CGI 254 Chapter 14 - The Apache API 256 Pools 256 Per-Server Configuration 257 Per-Directory Configuration 258 Per-Request Information 259 Access to Configuration and Request Information 261 Functions 262 ap_make_sub_pool 262 ap_clear_pool 262 ap_destroy_pool 262 ap_bytes_in_pool 262 ap_bytes_in_free_blocks 262 ap_palloc 262 ap_pcalloc 262 ap_pstrdup 263 ap_pstrndup 263 ap_pstrcat 263 ap_make_array 263 ap_push_array 263 ap_array_cat 263 ap_copy_array 264 ap_copy_array_hdr 264 ap_append_arrays 264 ap_make_table 264 ap_copy_table 264 ap_table_elts 264 ap_is_empty_table 265 ap_table_set 265 ap_table_setn 265 ap_table_merge 265 ap_table_mergen 265 ap_table_add 265 ap_table_addn 266 ap_table_unset 266 ap_table_get 266 ap_table_do 266 ap_overlay_tables 266 ap_clear_table 266 ap_register_cleanup 267 ap_kill_cleanup 267 ap_cleanup_for_exec 267 ap_note_cleanups_for_fd 267 ap_kill_cleanups_for_fd 267 ap_note_cleanups_for_socket 268 ap_kill_cleanups_for_socket 268 ap_note_cleanups_for_file 268 ap_run_cleanup 268 ap_popenf 268 ap_pclosef 268 ap_pfopen 269 ap_pfdopen 269 ap_pfclose 269 ap_psocket 269 ap_pclosesocket 269 ap_pregcomp 269 ap_pregsub 269 ap_pregfree 270 ap_os_is_path_absolute 270 ap_note_subprocess 270 ap_spawn_child 270 ap_bspawn_child 271 ap_call_exec 271 ap_can_exec 271 ap_add_cgi_vars 271 ap_add_common_vars 272 ap_scan_script_header_err 272 ap_scan_script_header_err_buff 272 ap_scan_script_header 272 ap_md5 272 ap_md5contextTo64 273 ap_md5digest 273 ap_MD5Init 273 ap_MD5Final 273 ap_MD5Update 273 ap_create_mutex 273 ap_open_mutex 274 ap_acquire_mutex 274 ap_release_mutex 274 ap_destroy_mutex 274 create_semaphore 274 acquire_semaphore 274 release_semaphore 274 destroy_semaphore 274 create_event 275 open_event 275 acquire_event 275 set_event 275 reset_event 275 destroy_event 275 create_thread 275 kill_thread 275 await_thread 276 exit_thread 276 free_thread 276 ap_get_time 276 ap_ht_time 276 ap_gm_timestr_822 276 ap_get_gmtoff 276 ap_tm2sec 277 ap_parseHTTPdate 277 ap_strcmp_match 277 ap_strcasecmp_match 277 ap_is_matchexp 277 ap_getword 277 ap_getword_white 278 ap_getword_nulls 278 ap_getword_conf 278 ap_get_token 278 ap_find_token 278 ap_find_last_token 279 ap_escape_shell_cmd 279 ap_uudecode 279 ap_escape_html 279 ap_checkmask 279 ap_str_tolower 280 ap_psprintf 280 ap_pvsprintf 280 ap_ind 280 ap_rind 280 ap_getparents 280 ap_no2slash 280 ap_make_dirstr 280 ap_make_dirstr_parent 281 ap_make_dirstr_prefix 281 ap_count_dirs 281 ap_chdir_file 281 ap_unescape_url 281 ap_construct_server 281 ap_construct_url 281 ap_escape_path_segment 281 ap_os_escape_path 282 ap_is_directory 282 ap_make_full_path 282 ap_is_url 282 ap_fnmatch 282 ap_is_fnmatch 283 ap_server_root_relative 283 ap_os_canonical_filename 283 ap_uname2id 283 ap_gname2id 283 ap_get_virthost_addr 283 ap_get_local_host 284 ap_get_remote_host 284 ap_send_fd 284 ap_send_fd_length 284 ap_send_fb 284 ap_send_fb_length 285 ap_send_mmap 285 ap_rwrite 285 ap_rputc 285 ap_rputs 285 ap_rvputs 285 ap_rprintf 285 ap_rflush 286 ap_setup_client_block 286 ap_should_client_block 286 ap_get_client_block 287 ap_send_http_header 287 ap_send_size 287 ap_sub_req_lookup_uri 287 ap_sub_req_lookup_file 287 ap_run_sub_req 287 ap_destroy_sub_req 288 ap_internal_redirect 288 ap_internal_redirect_handler 288 ap_hard_timeout 288 ap_keepalive_timeout 288 ap_soft_timeout 288 ap_reset_timeout 288 ap_kill_timeout 289 ap_block_alarms() 289 ap_unblock_alarms() 289 ap_check_alarm 289 ap_pcfg_openfile 289 ap_pcfg_open_custom 289 ap_cfg_getc 290 ap_cfg_getline 290 ap_cfg_closefile 290 ap_check_cmd_context 290 ap_set_file_slot 291 ap_set_flag_slot 291 ap_set_string_slot 291 ap_set_string_slot_lower 291 ap_allow_options 291 ap_allow_overrides 292 ap_auth_type 292 ap_auth_name 292 ap_requires 293 ap_satisfies 293 ap_get_server_built 293 ap_get_server_version 293 ap_add_version_component 294 ap_error_log2stderr 294 ap_log_error 294 ap_log_reason 295 ap_open_piped_log 295 ap_close_piped_log 295 ap_piped_log_write_fd 295 ap_bcreate 296 ap_bpushfd 296 ap_bpushh 296 ap_bsetopt 296 ap_bgetopt 297 ap_bsetflag 297 ap_bgetflag 297 ap_bonerror 297 ap_bnonblock 297 ap_bfileno 297 ap_bread 298 ap_bgetc 298 ap_bgets 298 ap_blookc 298 ap_bskiplf 298 ap_bwrite 298 ap_bputc 298 ap_bputs 299 ap_bvputs 299 ap_bprintf 299 ap_vbprintf 299 ap_bflush 299 ap_bclose 299 ap_parse_uri_components 300 ap_parse_hostinfo_components 300 ap_unparse_uri_components 300 ap_pgethostbyname 301 ap_pduphostent 301 ap_child_terminate 301 ap_default_port 301 ap_is_default_port 301 ap_default_port_for_scheme 301 ap_http_method 301 ap_default_type 302 ap_get_basic_auth_pw 302 ap_get_module_config 302 ap_get_remote_logname 302 ap_get_server_name 302 ap_get_server_port 303 ap_is_initial_req 303 ap_matches_request_vhost 303 ap_os_dso_load 303 ap_os_dso_unload 303 ap_os_dso_sym 303 ap_os_dso_error 303 ap_popendir 304 ap_pclosedir 304 ap_psignature 304 ap_vformatter 304 Chapter 15 - Writing Apache Modules 306 Overview 306 Status Codes 308 The Module Structure 309 A Complete Example 332 General Hints 345 Appendix A - Support Organizations 347 Appendix B - The echo Program 349 Appendix C - NCSA and Apache Compatibility 353 Appendix D - SSL Protocol 355 Handshake Protocol 355 Protecting Application Data 359 Final Notes 360 Appendix E - Sample Apache Log 361 Index 371 About the Authors/Colophon 387

The freeware Apache web server runs on about half of the world's existing web sites, and it is rapidly increasing in popularity. Apache: The Definitive Guide, written and reviewed by key members of the Apache Group, is the only complete guide on the market today that describes how to obtain, set up, and secure the Apache software.

Apache was originally based on code and ideas found in the most popular HTTP server of the time: NCSA httpd 1.3 (early 1995). It has since evolved into a far superior system that can rival (and probably surpass) almost any other Unix-based HTTP server in terms of functionality, efficiency, and speed. The new version now includes support for Win32 systems. This new second edition of Apache: The Definitive Guide fully describes Windows support and all the other Apache 1.3 features. Contents include:

• The history of the Apache Group
• Obtaining and compiling the server
• Configuring and running Apache on Unix and Windows, including such topics as directory structures, virtual hosts, and CGI programming
• The Apache 1.3 Module API
• Apache security
• A complete list of configuration directives

With Apache: The Definitive Guide, web administrators new to Apache can get up to speed more quickly than ever before by working through the tutorial demo. Experienced administrators and CGI programmers, and web administrators moving from Unix to Windows, will find the reference sections indispensable. Apache: The Definitive Guide is the definitive documentation for the world's most popular web server. Includes CD-ROM with Apache manuals and demo sites discussed in the book.

Half of the world's Web sites use the Apache server; a good reason to study up. Start with this expanded and updated second edition. This popular installation and configuration guide for Apache servers covers new features implemented in Apache 1.3.3. This is not a command reference or manual, but an excellent guide even for Webmasters who have never installed or configured a server before. However, you should have a basic knowledge of the Web and understand how it works to get the most benefit from this publication.

The freeware Apache Web server runs on about half of the world's existing Web sites, and it is rapidly increasing in popularity. Apache: The Definitive Guide, written and reviewed by key members of the Apache Group, describes how to obtain, set up, and secure the Apache software.

Apache was originally based on code and ideas found in the most popular HTTP server of the time: NCSA httpd 1.3 (early 1995). It has since evolved into a far superior system that can rival (and probably surpass) almost any other UNIX-based HTTP server in terms of functionality, efficiency, and speed. It has several new features (among which are highly configurable error messages, DBM-based authentication databases, and content negotiation). It also offers dramatically improved performance and fixes many bugs in the NCSA 1.3 code.

Contents include:

• The history of the Apache Group
• Obtaining and compiling the server
• Configuring and running Apache, including such topics as directory structures, virtual hosts, and CGI programming
• The Apache Module API
• Apache security
• A complete list of configuration

With Apache: The Definitive Guide, Web administrators new to Apache can come up to speed more quickly than ever before by working through the tutorial demo. Experienced administrators and CGI programmers will find the reference sections indispensable. Apache: The Definitive Guide is the definitive documentation for the world's most popular Web server. Includes CD-ROM with Apache manuals and demo sites discussed in the book.

The freeware Apache web server runs over half of the world's existing web sites and continues to dominate the web-server market. *Apache: The Definitive Guide*, written and reviewed by key members of the Apache Group, describes how to obtain, set up, and secure the Apache server, as well as commonly used extensions for building web applications. Apache has evolved over the past seven years into a powerful system that can rival (and probably surpass) almost any other HTTP server in terms of functionality, efficiency, and speed, while supporting a variety of UNIX and Windows environments. This new thir edition of *Apache: The Definitive Guide* fully describes Unix and Windows support and all the other Apache 1.3 and 2.0 features. Contents include: * Obtaining and compiling the server * Configuring and running Apache on Unix and Windows, including topics such as directory structures and virtual hosts * The Apache 1.3 and 2.0 APIs * Expanded coverage of Apache security and large-scale site management * A complete list of configuration directives * Installation and testing information for Perl CGI, mod_perl, PHP, JServ, Tomcat, and Cocoon Using *Apache: The Definitive Guide*, web administrators new to Apache can get up to speed more quickly than ever by working through the tutorial demo. Experienced web-application programmers and web administrators working in Unix and Windows will find the reference sections indispensable. *Apache: The Definitive Guide* is the definitive documentation for the world's most popular server. Now you may think that there are better books out there. And there maybe. However this book is a "five star" book. I bought this book for a beginning apache class. We were able to follow the instructions and down load the Apache server from the Internet. The only problem we had was with the NIS system that was not anticipated in this book. It was a lot more important to use this book to read the flat files and see how they were related to each other. The section on Extra Modules (chapter 12) gave a way to improve the server and go outside the scope of this book. This book covered more details than I was looking for; this ways different people can use the book to target their particular needs. You can safely say: "This book has everything you need to set up an apache server." Apache Cookbook: Solutions and Examples for Apache Administrators Gives an extensive overview of Perl language and its syntax and is a complete refernce for all Perl functions, operators and standard library modules. Provides an explanation of Perl references and complex data structures and a detailed account of Perl's object oriented features. Department. Written and reviewed by key members of the Apache group, this book is the only complete guide on the market that describes how to obtain, set up, and secure the Apache software on both UNIX and Windows systems.