Fonctionnement D'apache

Total Page:16

File Type:pdf, Size:1020Kb

Fonctionnement D'apache Denis Szalkowski Formateur consultant Support Apache - 2 / 92 - I. Introduction ............................................................................................. 9 A. Parts de marché ............................................................................................... 9 B. Caractéristiques techniques ................................................................................ 9 C. Tester le serveur http ........................................................................................ 9 D. Les en-têtes http .............................................................................................. 9 1. Côté client : les requêtes .............................................................................................................................................................. 9 2. Côté serveur : les réponses ......................................................................................................................................................... 9 E. Les codes de réponses http ................................................................................ 10 F. Les méthodes http ........................................................................................... 11 G. Connaître les failles de sécurité .......................................................................... 11 II. Installation sous Windows .......................................................................... 12 A. WAMP ........................................................................................................... 12 B. AMPPS .......................................................................................................... 12 C. XAMP ........................................................................................................... 12 III. Installation d’Apache sous Linux .................................................................. 13 A. Installation sous CentOS/Fedora/Red Hat ............................................................... 13 B. Installation sous Debian/Ubuntu .......................................................................... 13 C. Paquets installés ............................................................................................. 13 D. Désactiver SELinux (Red Hat/CentOS/Fedora) .......................................................... 13 E. Les paquets ................................................................................................... 13 F. Les fichiers de configuration .............................................................................. 13 1. Sous Debian .................................................................................................................................................................................... 13 2. Sous CentOS/Fedora ................................................................................................................................................................... 14 3. Tester la configuration ............................................................................................................................................................... 14 4. les modules partagés .................................................................................................................................................................. 14 G. Commandes spécifiques à Debian/Ubuntu .............................................................. 14 1. Activer/Désactiver les modules ............................................................................................................................................. 14 2. Activer/désactiver les sites ...................................................................................................................................................... 14 3. Activer /désactiver les fichiers deconfiguration ............................................................................................................. 14 H. Sécurité ........................................................................................................ 14 1. Les utilisateurs et groupes propriétaires ........................................................................................................................... 14 2. Gestion des droits ........................................................................................................................................................................ 14 3. Tester la sécurité .......................................................................................................................................................................... 14 I. Minimisation / Gestion des services ...................................................................... 14 1. Systemctl.......................................................................................................................................................................................... 14 2. Consoles pour minimiser les services ................................................................................................................................. 14 J. Les limites ..................................................................................................... 15 K. Programmes et utilitaires additionnels .................................................................. 15 IV. Fonctionnement d'Apache .......................................................................... 16 A. Le répertoire par défaut ................................................................................... 16 B. La gestion des droits ........................................................................................ 16 C. Fichiers de traces ............................................................................................ 16 1. Emplacement ................................................................................................................................................................................. 16 a) Sous Debian ........................................................................................................................................................................... 16 b) Sous Fedora ........................................................................................................................................................................... 16 2. Exploitation des logs ................................................................................................................................................................... 16 Denis Szalkowski Formateur Consultant https://www.dsfc.net Rev 2.0 - 09/04/2021 Support Apache - 3 / 92 - 3. Pid ....................................................................................................................................................................................................... 16 4. Gestion des erreurs ..................................................................................................................................................................... 16 a) ErrorLog .................................................................................................................................................................................. 16 b) LogLevel .................................................................................................................................................................................. 16 c) Visualiser les erreurs de configuration ...................................................................................................................... 17 d) Centraliser les logs .............................................................................................................................................................. 17 5. Historique des accès au site ..................................................................................................................................................... 17 6. Format de log du fichier access.log ....................................................................................................................................... 17 7. Fichier de log personnalisé ...................................................................................................................................................... 17 8. Renvoyer vers le syslog ............................................................................................................................................................. 17 9. logrotate ........................................................................................................................................................................................... 18 10. Alléger les logs .......................................................................................................................................................................... 18 11. mod_logio .................................................................................................................................................................................... 18 12. Exploitation des logs .............................................................................................................................................................. 18 13. Vers une base de données .................................................................................................................................................... 18
Recommended publications
  • How to Establish a Security and Governance Framework Without Getting in the Way of Innovation
    How To Establish a Security and Governance Framework Without Getting in the Way of Innovation © 2018 Cloud Technology Partners, a Hewlett Packard Enterprise company / Confidential 1 Accelerating Business Outcomes with Hybrid Cloud Cloud Technology Partners is the premier, born-in-the-cloud services and software company. Our unmatched intellectual property, cloud expertise and people are helping F500 clients transform their business at every stage of the cloud journey. Thought Leadership Execution Experience Transforming enterprises in the cloud since 2010 Client 600+ enterprise engagements across AWS, Experience Google Cloud and Azure platforms 800+ free Doppler articles, podcasts and papers 40+ F500 cloud transformation clients Industry’s most trusted source for cloud best practices and expert advice 20+ years average delivery experience © 2018 Cloud Technology Partners, a Hewlett Packard Enterprise company / Confidential 2 The future belongs to the fast © 2018 Cloud Technology Partners, a Hewlett Packard Enterprise company / Confidential 3 Barriers to Speed in a Cloud-Enabled World Managing costs Alignment Funding transformation Cloud skills gap The full value of cloud is yet to be realized Maturity Laws and regulations Cloud security Scarcity of talent Legacy debt Proprietary concerns Complexity © 2018 Cloud Technology Partners, a Hewlett Packard Enterprise company / Confidential 4 Setting Context - 2 things to remember Please Protect: Your Deployment Pipeline Your Environments Dev QA Prod Development Production Testing Environment Environment Environment © 2018 Cloud Technology Partners, a Hewlett Packard Enterprise company / Confidential 5 Cloud Security is still Security © 2018 Cloud Technology Partners, a Hewlett Packard Enterprise company / Confidential 6 Cloud Governance is still Governance ..but at speed which can lead to unforeseen issues.
    [Show full text]
  • Mozilla Firefox / Google Chrome Les Extensions Pour Naviguer Efficacement
    … Les extensions pour naviguer EFFICACEMENT Mozilla Firefox / Google Chrome Support 2015 Urfist de Paris 17, rue des Bernardins – 75005 PARIS Animation Corinne Habarou – Urfist de Paris Plan de la formation 1. Présentation des principaux navigateurs a. Historique b. État actuel des lieux c. Capacités à la personnalisation 2. Configurer son navigateur a. Les préférences générales b. Les options de recherche c. Vie privée et sécurité 3. A la découverte de l’écosystème des extensions au navigateur a. Que sont les extensions ? b. Bookmarklet vs extension c. Comment les trouver ? d. Comment les installer ? e. Comment les identifier sur l’interface utilisateur ? f. Comment les gérer facilement ? g. Quels sont leurs principaux domaines d’application ? h. Une sélection par domaine 2 Crédit photo sur Flickr – Galerie TomPouce : https://tinyurl.com/m6xpuuy (Licence CC ) Plan de la formation (2) 4. Optimiser ses recherches d’information en utilisant plusieurs moteurs de recherche 5. Optimiser la gestion des onglets 6. Mettre des sites sous surveillance a. Gestion des flux de syndication (RSS/Atom) b. Extensions pour gérer les flux de syndication (RSS/Atom) c. Alternatives pour les pages sans flux de syndication 7. Synchroniser et sauvegarder sa configuration a. En quoi consiste la synchronisation ? b. En quoi consiste la sauvegarde ? c. Quelles sont les différentes méthodes de synchronisation ? d. Qu’est-ce qu’un « profil » ? e. Comment sauvegarder son « profil » ? 8. Aller plus loin … a. La gestion multi-profils b. Accéder aux fonctionnalités de débogage de votre navigateur 3 Crédit photo sur Flickr – Galerie TomPouce : https://tinyurl.com/m6xpuuy (Licence CC ) 1. PRESENTAtion des PRINCIPAUX navigateurs a.Historique b.État actuel des lieux c.
    [Show full text]
  • Why Do I Need a News Reader? Which Should I Choose?
    Why do I need a news reader? Which Should I Choose? “Tech Tools with Tine” Webinar Series Presents: News Readers Keep up-to-date! Manage your internet content! Tine Walczyk – November 1st, 2013 [email protected] Feed, Subscription, News, RSS? • News Reader, Feed Reader, RSS Reader ALL THE SAME • Used to: – Collect serialized internet information • Read newsgroups (yes, they still exist!) • Read subscription content • Read Blogs – Access Really Simple Syndicated content Which ones for today? Reader URL Available for: Feedly www.feedly.com iPhone, iPad, Android phone, Android tablet, Kindle Fire, Kindle, Windows 8, Windows Phone, BlackBerry, Symbian, Mac OS, Desktop (cloud) Digg www.digg.com iOS, Android, Chrome, Web Newsblur www.newsblur.com Web, iPad, iPhone, Android, Firefox The Old theoldereader.com iOS, Android, Windows Phone, Reader Web, Firefox, Chrome, Safari, Opera Let’s look at Organize Feedly List of Feeds -- Read everything: click on All or Home Read one feed: click on category Reorder with Drag&Drop Add Content – Click button Search for content or Paste in URL Click + Select category Add a New Category – Add button Personalize Drag Content to New Category box Name Category Choose your display Layout / Customize bar Title View (Traditional Reader) Magazine View Card View Up Next… Multiple Features • digg Home – Moderated content – Crowd-sourced (popular) content – “digg” your interest • digg Reader – Newsreader – Gather your feeds all in one place – Integrate with Chrome Organize your digg’s Find Content – Enter in a URL
    [Show full text]
  • Checkliste Nr. 14: Nutzung Und Einsatz Von RSS / Jürgen Plieninger
    Berufsverband Information Bibliothek e.V. Checklisten OPL-Kommission Berufsverband Information Bibliothek e.V. OPL-Kommission Checklisten Liste 14 Nutzung und Einsatz von RSS von Jürgen Plieninger und Edlef Stabenau Berufsverband Information Bibliothek e.V. Checklisten OPL-Kommission 2 Herausgegeben von der Kommission für One-Person Librarians des Berufsverbands Information Bibliothek BIB. Erscheint 2016 in der 2., aktualisierten und überarbeiteten Auflage als PDF-Dokument zum Herunterladen aus dem Netz und ist als Open Educational Resource (OER) lizensiert mit der cc-Lizenz: Namensnennung – Weitergabe unter gleichen Bedingungen CC-by-SA 3.0 http://creativecommons.org/licenses/by-sa/3.0/de/. Herunterzuladen von der Seite der Kommission für One-Person Librarians http://www.bib- info.de/kommissionen/kopl/publikationen/checklisten.html. Zitiervorschlag: Nutzung und Einsatz von RSS / Jürgen Plieninger ; Edlef Stabenau. Herausgeber: Berufsverband Information Bibliothek / Kommission für One-Person Librarians. – 2., aktualisierte und überarbeitete Auflage. – 2016. (Checklisten ; 14) Ein Hinweis: Überlegen Sie bitte, ob es notwendig ist, diese Checkliste auszudrucken. Sie behandelt die Thematik Recherche, vielleicht ist es also sinnvoller, die Vorlage als PDF-Dokument zu lesen, um die aufgeführten Links direkt zu nutzen? Der Autor arbeitet hier gerne mit zwei Bildschirmen, auf dem einen wird die Vorlage (in diesem Falle die Checkliste) angezeigt, auf dem anderen die eigenen Aktivitäten (z.B. Ausführen der Links). Probieren Sie es einmal aus! Es wäre ein kleiner Schritt zur „grünen Bibliothek“! Berufsverband Information Bibliothek e.V. Checklisten OPL-Kommission 3 Inhalt Vorwort S. 4 Was ist RSS? S. 5 Geschichte von RSS S. 8 Nutzung von RSS S. 9 Einsatz von RSS S. 15 Herstellung von RSS S.
    [Show full text]
  • Leroux-Lindsey News Aggregators.Pptx
    News Aggregators MARCH 24, 2015 JULIA LEROUX-LINDSEY Also Known As… ! Feed Aggregator ! Feed Reader ! News Reader ! RSS Reader ! Aggregator What is it? A software or web application that consolidates syndicated web content such as online newspapers, blogs, podcasts, and vlogs in one location for easy viewing. Image from http://www.problogger.net/archives/2007/02/14/11-ways-to-find-new-rss-subscribers-for-your-blog/ Types: News Aggregation Websites ! Uses algorithms to group similar stories together from news sources ! Examples: ! Google News ! Huffington Post ! Daily Beast ! SmartNews Screenshot from www.news.google.com Types: Feed Readers ! Users add their favorite web feed sources (blog, news, etc.) into one, single feed ! Linked to a personal account ! Examples: ! Digg ! Feedly Screenshot from www.feedly.com Types: Topic-Based News Readers ! Track and follow topics ! Aggregates related tweets, a wikipedia page, articles, etc. ! Attractive GUI ! Examples: ! Pipes Screenshot from www.pipesapp.com Evaluation: As a User Advantages Disadvantages ! Convenience ! Information Overload ! Smart Suggestions ! Up-Front Time ! Customizable Investment ! Mobile Optimization ! Social Sharing Evaluation: As a Marketing Manager Advantages Disadvantages ! Convenience for Users ! Loss of Integrity ! Smart Suggestions ! Loss of Site Traffic ! Social Media ! Loss of Individuality Connections ! Algorithms in Charge Recommendations ! As a Marketing Manager: ! Make sure your site is easily imported/subscribed via these News Aggregators " Add and prominently display ‘RSS Subscribe’ button: " Add other Social Media buttons for easy sharing: ! Make sure your blog/web site feed is compatible with News Aggregators " Requires some XML code standardization and metadata " Already set up for typical site builders like blogger, wordpress, etc.
    [Show full text]
  • Mettre En Place Une Veille Documentaire Efficace
    Mettre en place une veille documentaire efficace Céline Barbillon, Emmanuel Collier, Giada Fettini, Catherine Sluse GED – Service formation des usagers 2021 Contenu de la formation Bloc marque • Qu’est-ce que la veille documentaire ? • Rappel : principes de recherche documentaire • Les sources d’information • Alertes sur les catalogues, moteurs de recherche et bases de données • Flux RSS / Un agrégateur de flux RSS (Inoreader) • Flux RSS cachés ou enfouis • En l’absence de flux RSS Des questions ? Mettre en place une veille documentaire efficace 2 Qu’est-ce que la veille documentaire ? Bloc marque La veille documentaire est une activité de suivi et de sélection de l'information paraissant sur un sujet donné et sous toutes les formes de publication possible. Cette activité peut s'appuyer sur divers outils et logiciels (emails, agrégateurs de flux, réseaux sociaux, alertes, etc.). Objectifs de la veille : • Faciliter l’identification de ressources pertinentes • Maintenir un flux régulier d’information sur un sujet/actualiser des informations • Déceler les évolutions du domaine étudié • Continuer à être informé des nouvelles parutions pertinentes après une recherche documentaire Prérequis : connaître les principes de la recherche documentaire Mettre en place une veille documentaire efficace 3 Rappel : principes de recherche documentaire Bloc marque Définir sa problématique (qu’est-ce que je recherche ? dans quel but ?) Méthode QQQOCP : Qui Quand Quoi Où Comment Pourquoi Poser les limites : Différents aspects du sujets retenus ou non Limites
    [Show full text]
  • Content Syndication in News Aggregators. Towards Devaluation of Professional Journalistic Criterio
    Comunicar, n. 59, v. XXVII, 2019 | Media Education Research Journal | ISSN: 1134-3478; e-ISSN: 1988-3293 www.comunicarjournal.com Content syndication in news aggregators. Towards devaluation of professional journalistic criteria La sindicación de contenidos en los agregadores de noticias: Hacia la devaluación de los criterios profesionales periodísticos Dr. Concha Edo is Professor in the Department of Journalism and Global Communication at the Complutense University of Madrid (Spain) ([email protected]) (https://orcid.org/0000-0001-6960-867X) Dr. Juan Yunquera is Assistant Professor in the Department of Journalism and Audio-visual Communication at the University Carlos III of Madrid (Spain) ([email protected]) (https://orcid.org/0000-0002-4062-1659) Dr. Helder Bastos is Professor in the Department of Communication and Information Sciences at the University of Porto ([email protected]) (https://orcid.org/0000-0002-6351-4610) ABSTRACT The growing expansion of Internet access and mass-scale usage of social networking platforms and search engines have forced digital newspapers to deal with challenges, amongst which are the need to constantly update news, the increasing complexity of sources, the difficulty of exercising their function as gatekeepers in a fragmented environment in which the opinions, biases and preconceptions of pundits, their followers, Twitter users, etc. has taken on a new and decisive weight and the mounting pressure to publish certain news items simply because they sell. They must also share audiences with aggregators devoted to the business of disseminating content produced by digital news publishers, blogs and RSS feeds, which is chosen on the basis of search engine algorithms, the votes of users or the preferences of readers.
    [Show full text]
  • Maîtriser La Veille Documentaire
    Maîtriser la veille documentaire Source: Mike Lee. Newspaper RSS Feed Icon, 2009, http://bit.ly/2jxiCGJ Janvier 2017 [email protected] Définition de la veille « La veille informationnelle est l’ensemble des stratégies mises en place pour rester informé, en y consacrant le moins de temps possible en utilisant des processus de signalement automatisés. » Jean-Pierre Lardy – Urfist de Lyon Les 5 étapes d’une veille documentaire 1. Identifier et surveiller les thèmes de rechercher, spécifier les types d’informations, identifier des mots- clés. 2. Sélectionner des sources (avec une sélection plus large 5. que les thèmes à Diffuser/partager surveiller). les résultats 3. Collecter les résultats 4. Analyser les résultats Isabelle Rey, INRIA, Documentary watch on the web, November 2011 : http://www.slideshare.net/riverieux/documentary-watch-on-the-net Enjeux d’une veille ciblée Mieux connaître son environnement Anticiper les évolutions Pour : - Suivre, cibler, gagner du temps - Lutter contre l’infobésité - Aider à la prise de décision En : - Maintenant un flux régulier d’informations appropriées dans des champs d’intérêts précis - Analysant, évaluant les informations et partageant les connaissances produites Les différentes méthodes de la veille Deux méthodes : - Pull : l’utilisateur va chercher les informations (l’approche classique) • Le veilleur va tirer les informations à lui - Push : le service envoie l'information à l’utilisateur • L’information est « poussée » de manière automatique vers le chercheur, en fonction de ses préférences et de critères préétablis par celui-ci. On parle de profils. Les différents outils de la veille Les méthodes de veille classiques : - Listes de diffusion : permet un échange parmi une communauté - Newsletters : diffusion d’information (sans échange) Les différents contenus d’une veille documentaire Chaque base de données/sites web est différent ! • Selon la base/le site, on pourra faire des alertes sur : - les sommaires de revues .
    [Show full text]
  • Council Uses RSS Feeds
    Council uses RSS feeds To: Medical scheme members, employees of medical schemes, Boards of Trustees, managed care organisations, administrators and healthcare brokers The Council for Medical Schemes (CMS) has implemented RSS feeds as a method of “pushing” sharing important announcements, Circulars and Press Releases with its stakeholders. This Circular provides more information on RSS feeds, links to our RSS feeds, and instructions on how to subscribe to our feeds. What is an RSS feed? Content publishers (such as the CMS) use Really Simple Syndication (RSS) to disseminate news, blogs and other content to their website subscribers. You can view RSS content with an RSS reader such as the one built into the latest version of Microsoft Office Outlook (2007), Internet Explorer 7 web browser, or the latest versions of the Safari or Firefox web browsers. Using RSS, publishers make content and updates available for download by subscribers automatically. Not all content on websites is available as an RSS feed, but the list is growing daily. The website of the CMS is RSS- enabled. How does RSS work? RSS readers allow you to subscribe to RSS feeds and then to read content or follow links for additional information. Whenever you see a link to a feed or an RSS icon such as the one at the top of this page, just click on it. You should then be directed to an area where you can automatically subscribe to that RSS feed. Some readers can be set to synchronise with our RSS feeds according to a schedule that suits your needs. Subscribing to an RSS feed is quick and easy, and does not involve a registration process or fee.
    [Show full text]
  • RSS Readers & Customized Dashboards
    Legal Services National Technology Assistance Project www.lsntap.org RSS Readers & Customized Dashboards RSS stands for "Rich Site Summary" and it is a dialect of XML. Although the technical definition of RSS isn't the easiest to understand, don't let that scare you away from this useful timesaving tool. If you are unfamiliar with RSS, I recommend this short video: RSS in Plain English. It explains RSS simply and shows you how to subscribe to feeds by looking for this logo on your favorite blogs and websites. In addition to the orange RSS icon, look for these icons as well Once you've subscribed to several sites, you view them in your RSS reader of choice. The video recommends using Google Reader which no longer exists. Below is a list of RSS readers and dashboards to help you keep all of your RSS feeds in one convenient location. Most RSS readers allow you to subscribe to feeds directly from their website by simply typing in a URL, ie www.lsntap.org will give you the headlines for all of LSNTAP's blog posts. A lot of RSS readers have additional features which allow you to create customized dashboards with RSS feeds, email, weather, etc. There are many more RSS readers out there. If one of these isn't exactly what you are looking for, I suggest doing some more research. Here is a list of RSS readers that you might find useful. Netvibes/Bloglines (Great Free version) Both sites allows you to create multiple dashboards. You can have a dashboard for work, home, or for different projects.
    [Show full text]
  • World Wide Web Reference 2020
    World Wide Web Reference on the Internet 2021 By Marcus P. Zillman, M.S., A.M.H.A. Executive Director – Virtual Private Library [email protected] World Wide Web Reference on the Internet 2021 is a comprehensive listing of reference resources and sites about the Internet designed for webmasters and IT professionals. The below list of sources is taken from my Subject Tracer™ Information Blog titled World Wide Web Reference and is constantly updated with Subject Tracer™ bots at the following URL: http://www.WWWReference.info/ These resources and sources will help you to discover the many pathways available through the Internet to find the latest references about the world wide web. As this site is constantly updated it would be to your benefit to bookmark and return to the above URL frequently. Figure 1: World Wide Web Reference 2021 Subject Tracer™ Information Blog 1 [Updated January 9, 2021] World Wide Web Reference 2021 White Paper Link Compilation http://www.WWWReference.info/ [email protected]/ 239-206-3450 © 2007 - 2021 Marcus P. Zillman, M.S., A.M.H.A. References About the World Wide Web Resources 2021: 2021 Directory of Directories http://www.2021DirectoryOfDirectories.com/ 2021 Guide to Finding Experts by Using the Internet http://www.FindingExperts.info/ 2021 Guide to Finding People Resources and Sites http://www.FindingPeople.info/ 2021 Guide to Internet Privacy Resources and Tools http://www.2021InternetPrivacy.com/ 2021 Guide to Searching the Internet http://www.SearchingTheInternet.info/ 2021
    [Show full text]
  • Scientific Papers in One Click!
    BIBLIOTHÈQUE Midi de l’Info scientifique Customized publications monitoring 1. Objectives of customized publications monitoring Monitoring scientific publications can be defined as a continuous survey activity on a scientific environment or scientific topic. The main benefits are to gain time and to stay up-to-date on new scientific publications, over a certain period of time (weeks, months). Watch a specific scientific Subscribe to databases Why monitoring research topic over time alerts scientific Watch new articles publications? Subscribe to web pages, published by scientific editors journals pages journals or authors How to monitor Read alerts in email inbox Set up email alerts scientific publications? Read news in RSS feed Subscribe to RSS feeds aggregator When, at which Varies upon databases Daily, weekly, monthly. frequency? alerts settings In this “atelier”, we will see how to set-up alerts within the main biomedical databases. 2. Setting your RSS feeds and email alerts When starting and information watch, it is important to define precisely its limits: How to explicit the search equation? Test a search equation before setting the definitive email/RSS alert Think about acceptable alert frequency (daily, weekly, monthly) Email alert E mail alerts or notifications can be set-up directly from scientific databases and read in Outlook inbox. RSS Feed A RSS (Really Simple Syndication) feed is a XML file that automatically provides update on any new content published on a web page. By reading the feeds, users can thus see any update. A RSS feed aggregator allows to read and compile feeds in a one place. Example: Inoreader www.inoreader.com 3.
    [Show full text]