Ooh perhaps But if Im going to do everything in C is there anything that can speed up the process of execution
hurray
mmm php.ini has 1337 lines
how erhm, leet
somone here who has ever tried to upload through a http lib like libcurl to twiki ?
i use perl to upload files to http
damn open basedir restriction crap
incomplete headers (0 bytes) received from server"
I'm trying to get spyce working with FastCGI, and can't get it working
anybody have any experience with FastCGI?
hey friends
Nobody likes me. Everybody hates me. I'm going to go eat WormZ.
+1
fajita++
+1
Back off, freak.
fajita is marvin
hello
I guess i have a serious security problem, the authz_host Modul doesn't deny access to .ht* files on apache 2.2
:/
It is loaded
mod_auth_basic mod_authn_file mod_authz_default mod_authz_groupfile mod_authz_host mod_authz
you need Files section in your configuration to prevent accessing files
I have it in my apache2.conf
# grep "^Files" apache2.conf
Files ~ "^\.ht"
Order deny,allow \ Deny from all
seems does not work right
http://rafb.net/p/zqGJG782.html
as you can see i get two consecutive 302's, one from "/" to "/FSCWEB/index.html" and then from "/FSCWEB/index.html" to ""/FSCWEB/logon.do"
and are you sure this apache2.conf is your main configuration file? how does it not work, does it still serve .htaccess to browser?
i can't imagine my apache2.conf causing that second redirection
Yes, it is my main config file, because everything works like expected, excepting the .htaccess stuff.
Is serve the file to the user.
http://dpaste.com/16547/
my apache config
stripped out all comments
http://dpaste.com/16548/
And my modules
You are work yet, arreyder?
hello everybody
hi
niihau, BottomFunqus.
anyone recognize this error in the error.log?
Premature end of JPEG file
it's pretty selvexplaining, but if anyone has ever been under attack etc. that has given this kind of a sign, please give me a shout
no?
this silence gives me the creeps
not even sarcasm
this is the twilight-zone of IRC.
There's a signpost over there, and it reads "The Windows Zone"
heh
I'm doing a weekly check on all the logs and this line in error.log caught my eye
we have once got attacked trough a hack script that was implemented to a gif-image
invalid jpeg file? or is that file somehow dynamic (served with script…)?
huh?
Please state the nature of your computing emergency
most likely its just a invalid jpeg-file
the error.log is crappy because it doesn't give more specific information
Try requesting that image, and see if you can reproduce the error?
there is no information about the script, the file or anything
only that line
Does the jpeg in question exist?
no idea
as i said, there is no information about the name
Oh!
I misunderstood.
there are hundreds of scripts on that server + dozens of users
I thought you were saying it said like "premature end of $x.jpeg"
nope
men.. this sucks.
Perhaps you can get an idea by checking the access_log for the corresponding time?
that would be normal way of logging, but are talking about apache error.logs here
you might be able to locate the file by comparing timestamp to access_log, depending on the number or requests in a time
might be
I dont even know why this f*cking apache doesnt handle the .htaccess file right
could try
haha, beat ya to it.
and serve them up to the user
should it be matching? the timestamp i mean
..htaccess: Option MultiViews not allowed here
-multiviews?
ok I'm a bit puzzled as I did an apt-get install apache2 and nothing works on my http://localhost/
section in httpd.conf, or (if AllowOverride is properly set) in .htaccess files."
yeah. It seems I can't write and read simultaneously
multiviews
multiviews is http://httpd.apache.org/docs/mod/core.html#options or http://httpd.apache.org/docs/mod/mod_negotiation.html or http://httpd.apache.org/docs-2.0/content-negotiation.html
options override
Options may be used in .htaccess files if AllowOverride is set to Options
Allowoverride Options
Allowoverride Options is necesarry for Options to be allowed there.
gtfo
Well, at least in most circumstances that's not a serious limitation.
yes, but how do i set AllowOverride correctly?
Allowoverride Options
Allowoverride Options is necesarry for Options to be allowed there.
debian etch + apache is a hellcombo, there isnt even a working auth-mysql module with that combo
signed
haha
thanks
—-There is no timestamp in the error.log —
nice apache
i think apache is causing my funquz
when I type sudo /etc/init.d/apache2 restart, the output says it has stopped but nothing about starting
_
and it's not in my process list
do you know what you should do
tell me BottomFunqus
you should go to the local shop, buy some booze, shake your ass in the local bar and snatch some lady. Bang her ass the whole night and try restarting your apache again tomorrow
What does /etc/ini.d/apache2 configtest say?
sounds good but I need to do a bit of work BottomFunqus
nothing Hazard
Nothing at all?
nope
nothing
nothing is _ALWAYS_ a wrong answer/description.
everything
everything is ruined forever!
fajita fajita
i am a she.
fajita is a boy
is fajita she?
Fajita is a eunuch.
fajita is a shemale
shemale
someone has really got some freetime to build this fajita
there must be thousands of lines
IT doesn't require as much as you'd think. It's taught as it goes.
it's selflearning?
No. There are commands to tell it what associations to make.
i was just kidding
There is one that learns on it's own in ##perl, but it merely strings together random sentences.
blah, i need a super artificial intelligence
https://euphoria-workshop.dnsalias.com/
?
that would in the end take over the world and make me the king
I need superior natural intelligence.
i've got it
Looks like you just need to update the version of SSL on that server.
mensa.org
it's a xampp 1.6.3
mensa blows.
and it's latest stable release :-s
And xampp includes SSL?
the people there arent the best ones to represent the brightest people on earth
yes
And screw them and their "dues"
http://www.apachefriends.org/en/xampp.html
should the following conf statement give recursive cgiExec access?
http://www.nomorepasting.com/getpaste.php?pasteid=2434
if by recursive you mean, "all subdirectories of /var/www/html", yes
ok, weird - becuase it doesn't
if i specify a specific folder, fine
but not sub-directories
it could be overridden in some subdirectory by another configuration
ok, thanks
or by an .htaccess file
hello all
All is not in today, gui_
hello everybody ?
so i want to have coredump to child process exited
i think this is xcache that do this, but i'm not sure
i did this in httpd.conf: CoreDumpDirectory /tmp
but there is no coredump in /tmp… (apache1.3.37)
any suggestions ?
that server does not have ssl certificates enabled for port 443
how you see that ?
what can I do to enable correctly this ?
http://euphoria-workshop.dnsalias.com:443/
when I am doing that, I have some responses and some error
about an old version of SSL
so apache listen 44
443
443 is default port for ssl
did you click on the link that i just pasted?
Yes …
are there not instructions in xampp for how to correctly enable ssl?
I think there an incompatibility with virtualhost
en configuration of ssl
you need to have a virtualhost for port 443, with the ssl configuration in it.
http://apache.pastebin.ca/652423
ssl.conf file
and vhosts.conf
http://apache.pastebin.ca/652424
in ssl.conf there a virtualhost part
yes, that looks ok.
did you add listen 443 to your configuration somewhere?
in the ssl.conf
it was there already, right?
Listen *:443
yes, i see it
i was wondering if you added another one somewhere else
I am getting an error " cannot bind to ip address " when starting apache
What can be the exact remedy measure?
o.o.o.o:443
what is the exact error?
Hold on let me fetch it
Unable to manage service by websrvmng: websrvmng: Service httpd failed to start ——————————————————————————– 0: /usr/local/psa/admin/htdocs/server/restart_services.php:19 psaerror(string "Unable to make action: Unable to manage service by websrvmng: websrvmng: Service httpd failed to start")
um, from the error log, preferably
that phrase "deja vu" seems oddly familiar….
verily
indubitably
certainement
oui
ping
hrm… well that was interesting… :-/
hi
How do you configure a vhost to have "directory listings" disabled?
options -indexes
Options -Indexes turns off directory indexing. Ask me about mod_autoindex and Options for more details.
thanks
read this:
sections
section?
argh….
context?
where is that factoid…..
ok, i don't know where the 'bot went.
but what i was going to point you at is the section of the manual where it describes the order in which Options and other directives are applied
sections is http://httpd.apache.org/docs/2.2/sections.html
context is http://httpd.apache.org/docs/mod/directive-dict.html#Context http://httpd.apache.org/docs/2.0/mod/directive-dict.html#Context http://httpd.apache.org/docs/2.2/mod/directive-dict.html#Context
ah, there it is
read the first one
section? I have an OPTIONS Indexes Includes ExecCGI
just add -Indexes
remove indexes
don't mix +/- options with absolute ones
Options
Options is http://httpd.apache.org/docs/2.0/mod/core.html#options or http://httpd.apache.org/docs/1.3/mod/core.html#options or see 'Options Context' Don't mix 'relative' and 'absolute' values. See: http://www.onlamp.com/pub/a/apache/2005/09/08/apacheckbk.html
read the last link
hrm kinda limited in what I can do, since I'm using a vhosting account.
Removed Indexes but the files still show up might be cached
http://w8nyy.olympuschess.com/Files/
does that throw a Directory not listing for you?
it does
section did you edit? It has to be the right one to apply.
DIRECTORY /hsphere/local/home/olympus/w8nyy.olympuschess.com
OPTIONS Includes ExecCGI FollowSymLinks
AllowOverride All
AllowOverride All is a really bad idea, because it implies AllowOverride Options, which lets people do stuff like Options FollowSymlinks and Options ExecCGI, even though they are explicitly disabled in the main config.
/DIRECTORY
hrm
if you have another one for Files, the other one will apply
also if you have one in an .htaccess file
?
never could figure out .htaccess lol
then set allowoverride None
that will stop apache from even looking for them
speeds it up and makes things less confusing
but this site is for a friend, so wanted to set it up apache geronimo server hosting side so I wouldnt have to make manual changes each time
are you allowed to restart the vhost?
if not, you'll have to wait for a restart before your change takes effect.
no
ooh so that's why it wasn't updating
that sucks
apachectl graceful
apachectl graceful is how you restart apache without dropping any client connections. Workers in keepalive will retain old config until they time out. Be patient, or set KeepAliveTimeout lower
Well I appreciate everyones help hope you have a good day and weekend
how do you troubleshoot a child segfault in apache? the only thing causing it appears to be Horde
Hi , I wanna make a little module and i want it to return the homedir of the user that is defined ( Just a try ) . but apache segfault when i enable it. I dont really know how id do it in a apache module. right now i try doing it with the unix pw-pw_dir.
userdir
userdir is http://httpd.apache.org/docs/2.2/howto/public_html.html or http://httpd.apache.org/docs/2.2/mod/mod_userdir.html or See userdir without ~
thats not the problem
oh ok
#httpd-modules
Its just a test now because i wanna implement that in another module
#apache-modules
#apache-modules is Bmodule coders… pretty quiet though. You will have to be patient
ok
tanks
what's the factoid for niq's book?
modules book
modules book is http://www.apachetutor.org/
thanks
^^ highly recommended
aha
ill ahve a look
niq fact
What goes up and never comes down? The dumb ass that gets beard-whipped by Nick Kew.
the first step is to enable core dumps.
–enable-exception-hook
mod_whatkilledus
mod_whatkilledus is at http://people.apache.org/~trawick/ , and reports exact details of a request that caused a crash
although another approach is to just disable modules one at a time until you find the one which is segfaulting
mod_backtrace
mod_backtrace is at http://www.apache.org/~trawick/exception_hook.html and http://www.apache.org/~trawick/exception_hook_13.html
oh, right, or those useful modules
hee hee
rici++
blame php
PHP should be presumed to be at fault until conclusively proven otherwise. And even thereafter, if it's convenient.
hello
how can I certificate/ validate an SSL certification home generated ?
did you solve your other problem?
you can use openssl to view certificates. i'm not sure what you mean by validate.
you can use openssl to view certificates. i'm not sure what you mean by validate.
yes
where can i finds apache giudes
all work fine now
tell pctony
what?
heh
why
because
Can you be more specific as to what you're looking for?
It was an incompatibility between virtual host en ssl configuration
in virtualhost it was virtualhosts *
ah
hi i want to make a web site
and to work with ssl certificates I have to do Virtualhost *:80
i also want to secure mythweb
rici im pretty sure it is php, but i need to know why
So when 443 it isn't use by virtualhost
and SSL works fine
is a bad idea
enable core dumps and look at the core dump, then.
coredumpdirectory
coredumpdirectory is http://httpd.apache.org/docs-2.0/mod/mpm_common.html#coredumpdirectory or http://httpd.apache.org/docs/mod/core.html#coredumpdirectory
how do you enable the core dumps?
Those desires are sufficiently large that I'm not sure how to address them.
Are you having a specific problem that you'd like to ask about?
Or are you looking for a general-purpose howto manual of some kind?
first, you use the directive i pointed you at
then, you do whatever is necessary on your OS to allow coredumps
yess. i cant get mythweb to ask for a password… i have tried every thing. please help
I've never used mythweb. I'm not even sure what it is. Is this an Apache configuration question, or is it a mythweb configuration question.
also dose any one use backuppc
And what, specifically, have you tried?
to set up a password… so that i go to localhost/mythweb it will ask for password
what have you tried, i think was the question
You're going to need to be more specific. What, specifically, have you done? Show us your configuration file(s).
well that's what you get for thinking, isnt it?
Is this in a .htaccess file, or in the main config.
its a htacces
:-)
yeah… i keep forgetting thinking's dangerous
Show us your .htaccess file.
ok one sec
apc
Try using http://apache.pastebin.ca - It's a good pastebin, and is even set up to highlight Apache 'stuff'. or Alternative PHP Cache and does what php refuses to do: Optimize fajita's PHP code. http://pecl.php.net/package/APC
You need to provide us with data in order for us to speculate as to the cause of the problem.
today's weather forcast calls for a 99% chance of luser error
Meanwhile, I've been called to a lunch meeting. But I'm certain that there's 100+ people here who can help you with basic auth questions.
*forecast
ttfn
buen provecho
hope the meeting doesn't get in the way
any one know how to "select all" in nano ?
htacces http://pastebin.com/d7f00fdc1
Hi, is this just for the httpd, or is it also for other apache oprojects?
apache
Ambiguous! I'm looking for help with flood, the http load tester.. Somewhere lse, or here?
on irc, you get nowhere asking to ask
ask your question. if someone knows, they'll answer.
Generally you encounter large amounts of hostility asking in the wrong channels. I'm wondering if flood can use a proxy?
don't interpret "please ask in #foo" as hostile …. i thought flood could use a proxy, yes. i don't remember how to configure it.
that seems like a proxy configuration.
Excellent. I hadn't even gotten to the point of downloading yet - just doing a bit of initial research. Thanks rici.
good niht all thnaks for today
have a nice weekend
This seems crazy
LogFormat "%h %t \"%r %{SSL_PROTOCOL}x\" %{Content-Length}i %s %b %D \"%{User-Agent}i %c(%P)\" \"%{Referer}i\""
It's clear that the %{SSL_PROTOCOL}x is trying to print that env var
but http://httpd.apache.org/docs/1.3/mod/mod_log_config.html doesn't show it as being valid.
and 2.2 doesn't accept it at all.
Right now we're getting a "-" there.
is 1.3 just sloppy on this?
logformat
logformat is http://httpd.apache.org/docs-2.0/mod/mod_log_config.html#logformat
what is the directive to allow users to access their own page like… www.site.com/~user
userdir?
userdir is http://httpd.apache.org/docs/2.2/howto/public_html.html or http://httpd.apache.org/docs/2.2/mod/mod_userdir.html or See userdir without ~
ah, yes. thanks
You're welcome. Have a nice day.
I know what the docs say about the logformat
The docs don't show %{var}x as being valid, and yet it seems to work.
does any one use mod_python?
no, nobody - it's a wholly unused piece of software
in fact, its number of users is negative
huh
Please state the nature of your computing emergency
i just get a weird error from some basic demo code
adaptr++
hello
privet, maxwildcat.
anyone any dieas?
http://www.nomorepasting.com/getpaste.php?pasteid=2440
*ideas
has anyone had to handle load balancing with apache 1.3
(yea i know its a headach … but the platform only uses it)
or a least if someone has ever had to install mod_proxy_balancer on 1.3
that's telling you that there is a syntax error in /var/www/html/bizMan/incs/apps/ipAngel/dialog/python.psp
sure, ok, i moved the import statement to the top, and all's good
tho I get a big 'OK' and apache tells me the page hasn't loaded - but I'm loading at it
weird
https://gateway.phasian.com/bizMan/incs/apps/ipAngel/dialog/python.psp
does any one know why it would do that?
view source
looks like you're sending two pages, one of them an error page.
and no, i have no idea what bug causes that.
is that an apache thing?
unlikely.
Mod_python error — which part is unclear?
is there a module that can process html right before it gets sent to the client? e.g. regardless of the content being fed to apache by html, php, perl and the likes, I'd like to do profanity word filtering
mod_speling
mod_speling is http://httpd.apache.org/docs-2.0/mod/mod_speling.html or http://httpd.apache.org/docs/mod/mod_speling.html
aaargh!!! that's evil!
yep
but that does url spelling, not content filtering
probably with mod_ext_filter?
bingo
and bingo was his name-o.
hmm, I bet proxy_html could be preverted to do some filtering.
what is this?
is this is the only vhost defined
this is sparta
mod_ext_filter
mod_ext_filter is http://httpd.apache.org/docs-2.0/mod/mod_ext_filter.html or Lets you define your own Apache 2.0 filters, in whatever language amuses you.
what is this?
is this is the only vhost defined
bah
humbug
:|
mod_fcgid
mod_fcgid is like mod_fastcgi, but uses a new process management strategy, which concentrates on reducing the number of fastcgi server. or at http://fastcgi.coremail.cn/. See also http://paul.querna.org/journal/articles/2006/01/01/using-mod_fcgid-for-ruby-on-rails-applications
mmm apache 2.2
i cant find a package for apache 2.0.x any idea?
Cannot load /etc/httpd/modules/mod_fcgid.so into server: /etc/httpd/modules/mod_fcgid.so: undefined symbol: apr_shm_remove
apr
apr is a library that httpd is built on top of. Apache Portable Runtime: http://apr.apache.org/. see also http://www.regdeveloper.co.uk/2006/04/27/gift_to_c/
version mismatch, most likely
mmmm so… i will need "upgrade" to 2.2.x for use mod_fcgid?
could be
2.2.x is an upgrade from 2.0.x and lower.
what about PHP?
:P
I cannot plausibly deny that I do not use it, as cacti still teh bombz0rz
I think you got lost in the maze of negations there
we run over 100 windows boxen, and even if we did not need *nix for mail and DNS, we would use it to run cacti alone…
I think you may or may not be mistakenly correct
cacti does not happen to have requirements such as: http://www.jffnms.org/jffnms/INSTALL [take a look at the php.ini settings and the LimitRequestLine]
well, this register_globals = On is mildly annoying, but allow_url_fopen = On ouch…
btw, has cacti gotten better at bulk graph management? when I last checked it, oh, 5 years or so ago, you had to click-create every darn graph, which is fine for one monitored box, but doesn't even scale to 10
if I got that right, that's PHP default anyways….
url_fopen is the single biggest security monster php host has to offer
jMCg not anymore it isn't
Guy- cacti 0.86i (or whatever it is now) lets you template host (device) types and create everything for them in one go - or at most two
Guy- it also allows you to re-template graphs in bulk
sounds good
We have one template for an HP DL320, which has a dual CPU we have a graph template for, but it doesn't fill it with the correct sources
so create a dozen DL320 hosts, select the cpu on all, and select "change graph template" - done
it's mighty fast, and since version .86 or so also lets you choose a time period from the overview screen - change it from last day to one hour, or a month, or a year, or 12-3-07 to 26-4-07, whatever suits you
I hardly ever open the full graphs anymore
maybe I'll give it a try again
you really should - there's tons of templates for anything that does SNMP
even at home, I have it graphing network, apache, mysql, postfix, storage and DNS statistics
I ended up using munin for most such things
I looked at it for 5 minutes, found it horrible in the extreme, and dumped it
once you've set up cacti (takes about an hour) everything else is clickety click
I don't necessarily consider that to be an advantage
I do remember the older cactii, where you had to do quite a lot of hand-configuring
that's all gorn now!
that depends on the service, really - for cacti, which you can configure upwards of a million different ways, having to hand-edit stuff would be torture
well, you can script-edit a textfile
but sure, that's possible with cacti to some extent as it stores its configuration in a database, iirc
all of it, yes
of course, scripting is somewhat more difficult because you have to worry about referential integrity
try it out soon, and see if you still think you would like to edit that stuff by hand
hey guys, is there a quick way I can use SuppressLastModified for all files EXCEPT those under a particular directory? I'd appreciate any help on this.
with munin, almost everything is automatic, btw
I did not find it to be of any use AT ALL
IndexOptions can be set per directory. Set it globally, and then set it for that directory.
also, isn't that meant to monitor stuff ? cacti does graphing, period
not meant to monitor availability, although it can based on thresholds for the data it retrieves
alas, that doesn't work very well though
anyway, I think we're blatantly off-topic
depends on the data.
I use nagios though
for monitoring that is.
my problem was that munin often thought it had read a value of zero, when in fact it didn't
it was OK in the graph, but the threshold component complained
hmm
hello all
All is not in today, DARKGirl
ok, apache is unable to create a secure connection
using https:
do any of you know how to make it secure compatible?
is it listening to the correct port?
What exactly do you mean?
What, exactly, does the error log say?
what is error_log message, what is your configuration?
moment, ill have to track down the error log
ssl?
ssl is *Secure Sockets Layer. Ask me about mod_ssl or ssl vhosts see also http://httpd.apache.org/docs/2.2/ssl/
7 2007] [error] [client 66.25.169.25] Invalid method in request
thats the latest error
you're tryint to connect to a http port with https [or vice versa]
That means that an https request is … what jMCg said.
well I am using a non standard port to connect to my server
because my isp blocks 80
so I use 8080
DARKGirl you still have to tell your browser how to connect, if it's https, do https://foobar.tld:8080/
right right, but then safari tells me this:
Safari can?t open the page ?https://mywebhopserver.c0denamemercury.com:8080/phpmyadmin/scripts/setup.php? because it couldn?t establish a secure connection to the server ?mywebhopserver.c0denamemercury.com?.
Do you have SSLEngine On for the 8080 virtual host?
so im guessing that i dont have something turned on
Please show us your VirtualHost block for the 8080 virtualhost.
un momento
hey, any ubuntu users here? I'm using Feisty Fawn, apt-installed Apache and Awstats. However, when I attempt to goto http://localhost/cgi-bin apache tries to resolve /var/www/cgi-bin rather than /usr/lib/cgi-bin. Any ideas?
Greetings
greetings user
I see not a trace of SSL configuration anywhere in there, so it would certainly seem that you're experiencing the expected behavior.
solution?
Don't do that.
he nice
ssl example
ssl example is http://people.apache.org/~rbowen/presentations/slide83.html
fajita has a sarcastic mode
sorry…
nope.. she's always like that
There's an ssl example configuration. If you don't have at least that in a vhost, it's not going to answer to SSL.
aye, the person that helped me install apache 2 told me i wouldnt need ssl unless the site was ecommerce
Whether or not one "needs" ssl hosting is a matter of opinion.
so.. try this: http://mywebhopserver.c0denamemercury.com:8080/phpmyadmin/scripts/setup.php
without the S
just http://
it works
Damn right it does
but it gives me a warning
which one?
And that warning is .. ?
You are not using secure connection, all data (including sensitive, like passwords) are transfered unencrypted! If your server is also configured to accept HTTPS request follow this link to use secure connection.
so far so good, then
interesting.. phpmyadmin it nerver show me that before
wow
[ foo] thumbs: Could a segfault cause apache to prompt the user to download a php file instead of view it?
or i dont remember
a certificate file? O_o
and a CA
a ca is certificate authority
try this: http://www.vanemery.com/Linux/Apache/apache-SSL.html
That warning message is expected, right?
If you don't feel you need https, then don't use https.
I'm unclear why this is a problem.
Do you feel that you need https?
well I would like it to be secure…I would feel safer with the data that is put on this server
ok.
Well, there you go, then.
ssl howto
ssl howto is http://httpd.apache.org/docs-2.0/ssl/
looks like i need to install OpenSSL hmm
so then maybe is also a good idea use client certificates
OpenSSL
OpenSSL is da set of cryptographic libraries. mod_ssl uses those libraries to implement https handling in apache
uOpenSSL is da set of cryptographic libraries. mod_ssl uses those libraries to implement https handling in apache/u
why not?
If you're on any modern Unix, openssl is already there. You need to add mod_ssl to your server.
Because that's a level of complexity beyond what we're likely to accomplish today.
ahh ok ok..well yeah.. agreed
was just an idea
ok, LoadModule ssl_module modules/mod_ssl.so is there
called my brother and he told me I dont need SSL
and to disregard that message
but I still dont know how to set this up properly
have a quick question about log rotation on apache2.2
CustomLog "|/usr/local/apache/bin/rotatelogs /var/log/access_log 86400" common
i understand that this means it will rotate every 86,400 seconds
but what im curious about is what happens if the server is bounced
does it say every 86,400 seconds from the time the server starts, or from teh first time the log was written to?
yes
yes to the first time the log was written to?
yes
:P
cool
actually, not sure
it might be when the apache server first starts… well, it does write to the error log when the server starts
so *shrugs*
it may be an irrelevent distinction
well, here is a possibility…i start the server, 5 hours later, it gets restarted….so at that point its logged for 5 hours…then if it takes another 24 hours before it rotates, its going to mess up a script that i have that fetches the logs and pushes to a webalizer box
and i guess the log.1, log.2, log.3, etc is not possible anymore with rotatelogs…correct?
never was
rotatelogs is it's own thing
you could always roll your own log rotation and put it on a set cronjob
ya, migrating from apache 1.3 to apache 2.2
na, i'll just rewrite my fetch script
*shrugs* either way
will just have it grab "yesterdays" file
not a biggie, just wanting to figure it out before i start making config changes and re-writing a script
I like to generate stats from tomorrow's log file. Helps me plan.
haha
You around?
yep
Feel up to figuring out why I'm still getting the dialog box?
sure
*cheer*
you have a domain member machine handy for testing?
I'm finally getting some tasks I'm comfortable doing, so I want to get this off my plate.
I am on one now.
url defined in IE intarnet settings as trusted?
I'm opening IE now to check.
ok
It is.
kerbtray installed?
or klist available?
klist is available, aparently.
It gave me quite a list actually.
good, lets tail the error_log while we do this as wel
with loglevel set to debug
-f is the switch to kep tail running, right?
yep
thx for the help guys
have a great weekend
once you have all that in place give it a try and lets look at the debug output in error_log
Ok. LogLevel changed, apache restarted, tailing log.
we dont want to see user (null)
Im multisking quite a bit here, so pardon if I'm not always prompt with replies.
Hi megaspaz ^_^
No worries at all. http://www.compassroseeac.com/tail.txt
hello
it seems like my apache2 doesnt obey the .htaccess files
allowoverride none
AllowOverride None means "Please ignore my htaccess files." and is the default setting. or See http://www.onlamp.com/pub/a/apache/2003/12/04/apacheckbk.html
that was fast
thx
Allow Daveman
Order deny,allow
Order deny,allow is The Deny directives are evaluated before the Allow directives. Access is allowed by default. Any client which does not match a Deny directive or does match an Allow directive will be allowed access to the server
Deny from all
Deny from all is Denies access to the resource. See also Order, Allow, and Satisfy.
STFU, please.
huh?
The first attempt you see there is me forgetting to uncheck "enable integreated authentication" the second is after unchecking that.
This fajita bot is really pissing me off.
we like her, so I guess you'll have ot manage
In retrospec I am fairly certain we need it checked
Make up my mind!
ty nopaste ;-o
sorry
*try
I was trying to give Daveman a humorous reply, but no–the f***ing bot had to give automated replies.
Ok. I set it back now, but both ways are in that log.
Yes. That's what she does.
It's part of her charm.
And it's part of why those bots aren't popular.
They aren't?
Popularity wasn't a design specification.
Not very, no.
She answers at least half the questions here. That's sufficient for me.
It seems like every channel i FREQUENT HAS ONE.
Oops.
oops is right…
THat's not the shift key.
;p
heehee
could you put up the apache config for the kerberzied vhost please?
What is the answer to life, the universe and everything?
Your mom throws eggs at Hazard
the answer to life, the universe and everything is 45. Douglas Adams got it wrong.
excuse me?
Hey Doc B
You going to any conferences?
Not this month. Next one is ApacheCon, November, Atlanta.
See /topic
The vhost portion is at the very bottom of that.
jippi, works fine
why is allowoverride not mentioned in any mod_rewrite tutorial?
Ah, okay
because it's mentioned in htaccess tuts?
Well, back to the botcode
link?
and rewrites aren't htaccess specific?
Well, by that reasoning, AllowOverride would need to be mentioned on every page of the entire Apache documentation.
I PM'd it.
I didnt get it
Oops. I forgot to auth.
i'm not talking about the apache doc, im talking about pages like modrewrite.de which describe how to install/use this mod
bi'm not talking about the apache doc, im talking about pages like modrewrite.de which describe how to install/use this mod/b
You get it that time?
which happens to have a de translation
I'm not familiar with modrewrite.de, but it's not part of the official Apache documentation, and, therefore, completely outside of my control.
while we're testing if you get the pop up dont log in via it. Adds extra info to log that just gtes in my way
ok!
ok is running now but it still gives me that error
i don't blame you
i was just wondering
But, in general, the answer is the same - rewrite rules are not .htaccess specific, and so any description of them need not include instructions for using .htaccess files.
happen to have firefox in this machine?
The official mod_rewrite docs, on the other hand, do mention what AllowOverride settings are required.
I do.
pull it up please and do a about:config
Open.
open is n. Abbreviation for `open (or left) parenthesis' — used when necessary to eliminate oral ambiguity. To read aloud the LISP form (DEFUN FOO (X) (PLUS X 1)) one might say "Open defun foo, open eks close, open, plus eks one, close close."
status
2 2007, there have been 1725 modifications and 2007 questions. I have been awake for 8 days, 10 hours, 31 minutes, 47 seconds this session, and currently reference 176626 factoids. Addressing is in optional
but to use rewrite your webserver has to evaluate the .htaccess files…and if you setup your webserver for mod_rewrite, you have to set it up for .htaccess evaluation. or am i wrong?
you're wrong
you do not need to use htaccess to use mod_rewrite
put this in the search box : network.negotiate-auth.trusted-uris
did it get a match?
but where do i place the rules then?
Yes.
default TYpe: string
it's called your httpd.conf
if so, set the value to http://
No, that's incorrect.
the sites http right? no ssl yet?
Like any other Apache configuration directive, it can (and should) go in the main server configuration file.
whoever told you you have to use htaccess to use mod_rewrite needs to get shot
Correct.
What is correct depends entirely on what you're trying to do
And done.
It is, of course, completely possible to run any server/site without having any .htaccess files. It is also recommended.
hm, i should refer to trustfuller sources
8 * megaspaz wonders why you don't just use the official apache
http://httpd.apache.org/docs/trunk/rewrite
i thought it'd be faster to follow a step by step tutorial
and how was the time savings for you?
did you save a whole boatload of time?
all in all
no
like saving a boatload of money switching to geico?
ok, try the site with firefox please
The official docs are a bit of a work in progress, but we're working on them, bit by bit.
pop-up
hmm, i dont know if im seeing the latest line int he errro log or not
it still thinks you are trying ntlm if so.
Yeah. That's what I see.
Perhaps Firefox needs a restart after that config change?
about:config again and check out this key network.negotiate-auth.delegation-uris
make it http:// also
I forgot that one.
Same as the other was. No value.
Should I restart FF?
then give it a try please. sure restart to be safe I guess
you should reboot your computer
:P
heh
reboot teh tubes!
I'm a nix zealot. I avoid reboots like they have AIDS.
Same.
grrrr
But no NTLM message this time.
Still a NULL user though.
hmm logs I see still complaining about ntlm
Look at the timestamps.
I am, they are in the future
Oh. My bad.
IT came last this time.
Trying to configure mod_perl. for some reason, when I try to goto http://127.0.0.1/perl/mod_perl_rules1.pl. The browser is keep prompting to save my .pl file. Its not executing.
"When you always get a NTLM token it
According to time.gov it's you that's living in the past, not me in the future.
normally means that there is no key for this service in your kdc."
which suggests the ktpass line is not matching
Which points to my keytab again?
possibly. That where we mapthe user to the service
did you save the creation line this time? if so delete the user first, recreate it then do the ktpass
I did save it.
good man.
Hazard++
hi there
You know, it really shouldn't be this easy to delete a user.
lets review it again as well, just to make certain I didnt miss anything
i have a problem (again) with virtualhosts…
www.netwichtig.de and netwichtig.de are supposed to be the same.
What have you configured to tell it to do something other than that?
The more data you provide, the faster we can help you arrive at a solution.
very wierd, if I put PerlSendHeader On in the httpd.conf file, it works now
is there an Apache mod_C type module where the server can execute a C binary and send to the client whatever is outputted from the given C binary?
they are configured in the same virtualhost directive as servername (netwichtig.de) and serveralias (www.netwichtig.de) but netwichtig.de is the content that is configured as the 'default' virtualhost.
Ah.
(Linux, not Windows.)
ok.
someone in here helped me fix that but it seems i forgot what the problem was and how to fix it :-/
We'll need to see your virtual host configuration file(s).
You still have it as well? Or you want to see what I saved?
let's see what you saved
the domain after the @ should be all uppercase, and it matters. not sure if I stressed that last time
and apache2 -S: http://paste.debian.net/34387
om@TRUENORTH.LOCAL -mapuser TRUENORTH\HTTPAuth -crypto DES-CBC-MD5 +DesOnly -pas
i may have even forget to do it myself
ack!
s auth!kerberos2007 -ptype KRB5_NT_PRINCIPAL -out HTTP.keytab
i think thats where the problem is
Any idea about my question?
you do not hapen to be looking for mod_cgi?
mod_c
excuse me?
There's mod_cgi
change that pass
There is no 'mod_c', it was just an example of what might exist.
mod_cgi runs a binary and sends to the client whatever is outputted from the binary.
It doesn't care what language the binary is written in.
Ooh, perhaps. But if I'm going to do everything in C… is there anything that can speed up the process of execution and output that might be better than a module, or is mod_cgi sufficient?
Yeah.
Ah, neat.
Capso ;D
Actually, there is a mod_c. But I don't imagine it's what you're thinking of.
So, it's rather quick in doing so.
What's up?
pushthe keytab out and restart. lets try it again
Doc B, I think my ultimate goal will be to design a standardized configuration file, and force all package maintainers to utilize and distribute it!
only thing different about this and my installis the need you had to prefix with TRUENORTH for the –mapuser value.
possibly along with a [cli] configuration utility.
fastcgi?
One moment, I'm resetting the password, and rerunning the command.
It would be useful if you could join the existing effort, rather than starting your own, but, you know, whatever amuses you. We all acknowledge that it's a lost cause, so I suppose it doesn't matter.
any ideas?
Why would anyone use mod_cgi over mod_fastcgi?
DrBacchus
because FastCGI is a protocol of it's own. Read up on Wikipedia.
depends on your needs, as well.
Ah, okay.
yeah they're two separate animals
Thanks.
hey jmcg :p
Ah.
Feel like we've met before.
WE HAVE
Where?
Assuming you're the SAME Capso ;p
:]
Yeah, Capso's don't change.
What other virtual hosts do you have configured?
buubot :]
and pearl
Oh!!
Haha. Hey!
YES!
Good times
hey ho Daveman
quite some… you need all the configs? only one other for *.netwichtig.de though
Ok, so you have one for *.netwichtig.de ?
Does it appear before, or after, this one?
If before, then, yes, I would expect it to override this one.
command to load mod_rewrite?
uhm no, i meant one other for the domain netwichtig.de. wiki.netwichtig.de.
apache2
apache2 is a name debian based distros give to the httpd-2.0 release
DrBacchus, well if I did join the existing effort, do you think I could gain some support?
At least I think it's a just cause
i forget the command
Not sure what you mean by "support" in that context.
please help
That is, getting people to capitulate? :p
There's a mailing list. The goal would be to get all distro maintainers on it.
or that's how I'd put it
yeah
more or less
load mod_rewrite
how i do?
If we EVERY approach it as capitulate, they'll resist and say no.
I also have my bribery sac ready
RESISTANCE IS FUTILE.
hrmm
Not sure what you're actually asking.
hello pctonies
Exactly what problem are you trying to solve?
mod_rewrite
mod_rewrite is http://httpd.apache.org/docs-2.0/mod/mod_rewrite.html or http://httpd.apache.org/docs/mod/mod_rewrite.html or see http://rewrite.drbacchus.com/
Then, yes, I guess I'd need to see all your configuration.
Yes, I got that you're asking about mod_rewrite. Can you be more specific?
What exactly is happening, and in what way does it differ from what you want to be happening?
ok, that could take some time…
command to load
Well, I've got 50 minutes, and then I'm going home.
in terminal
I don't have good news.
i forget command
There is no such command.
is a command to load mod_rewrite
Unless you're one of those debian users, and you're asking about a2enmod
thx thx thx
: )
is a2enmod
Doc B
you know, I think it's doable
Well, optimism is always helpful.
yeah I see it. I'm really wondering what is causing us to need to prefix the mapuser with the domain and how that might be affecting us
I have lots of money, and some fine wines
If you approach it as "use our config file" then, no, it's not possible.
No.
I'm a pragmatist.
I'm perfectly willing to compromise.
If we work towards a compromise, then, no, it's still not possible, but it opens up new opportunities for frustration and disagreement.
:-)
Yes.
hey, at least we can have NEW disagreements then, right?
at least it's something new
Well, keep us updated on your progress. It's a worthy cause.
WHo needs *new* ones? VI!
start a holy war
linux is pile of dog poo… it just stinks less than windows and costs less then apple…
Discuss amongst yourselves.
DrBacchus, thanks
DrBacchus, haha that just reminded me of something silly
what doesn't ?
I was a place recently where I observed a couple of individuals actually having a rather heated debate about cat vs zcat
I found something. the kerberos realm is missing in the log cquiring creds for HTTP/dev-icar.dhs.blah.gov@DHS.STATE.blah.US is how mine looks.
ah, the things people argue over
yours: Acquiring creds for HTTP@info.compassroseeac.com
copy of
this may be the key.
hmm…
And which vhost is it that's not working as desired?
netwichtig.de
I'm struggling with ideas on why that is happening.
At this point I'm half tempted to just force HTTPS, and call it done.
I imagine you'll have better luck if you define a ServerName in the default vhost.
dog
dog is 7too short for a password - you need a fairly secure one
blah
fajita, PIN?
wish i knew
Daveman is the ruler…
oh?
I like to think that way
No.
with regards to certain things.
it's gotta be simple. is their an alias for trunorth.local?
Slick RIck is The Ruler.
possible… but what sense would a default make with a servername?
There is all kind of bizaree stuff in /etc/hosts on that machine.
no, I mean this with regard to your AD domain.
So there are two hostnames defined in netwichtig.de vhost. I'm not able to tell which one is working as desired, and which isn't.
…. Well in his own little world anyway
In all honesty, I'd have no idea. I'm just barely becoming acquainted with AD.
www.netwichtig.de is, netwichtig.de isn't
for example our netbios name for the domain is say UTAH but the fqdn is state.ut.us
Have you restarted Apache since making this configuration change?
The only ones I ever see are TRUENORTH and TRUENORTH.LOCAL
and the fqdn is what I use in my ktpass line
yes
oh!
i think the problem is to see in apache -S output… apache takes netwichtig.de as the servername for the default
Perhaps it's supposed to be northmail.truenorth.local? That's the primary AD server.
the fqdn should resolve to the addressesof your DC's
Can mod_proxy_balance do failover?
if you do a nslookup on it.
Yes, based on the contents of /etc/hosts.
someone are using cgi or fastcgi C language ?
So if you set a ServerName in the default vhost, it probably won't do that any more.
I can nslookup several addresses and reach my AD server.
I wanna be a troll… Let me be a troll!
o.O
Poke!
well it wont take much effort to try them?
_._
Ah, it does. Nevermind.
oh yes, i changed that after someone in here solved the problem. so i probably reverted the solution…
How I use a simple example with apache + c ?
Each of the ones I can think of in the ktpass line? And delete/recreate the user each time?
windows master…. how do you determine the fqdn of the AD domain?
thats my /etc/hosts: http://paste.debian.net/34388
is it a member os said domain?
s/os/of/
Hazard ?
Hazard is on one now.
Is which a member?
everybody There is someone that use apache + c ?
ok, I didn't realiae we were talking about someones Apache box. Arreyder. Details please.
bok, I didn't realiae we were talking about someones Apache box. Arreyder. Details please./b
i think ill just get rid of the default… but its strange behaviour imho
I have an Apache box that is not part of the domain, but is trying to authenticate to it.
\o/
Put your arms down pctony the smell is making me feel sick
hahaha
fajita is on a tear today.
having some issues with correct info for the ktpass line needed to export a keytab file for kerbeos auth.
AD auth is VERY hard
no it isnt
it was a breeze
relurks?
haha
Don't listen to him. I agree it's a pain in the ass.
What?
dont massage the bot
freak!
I've just been lucky so far that arreyder was around with his infinite patience.
only a pain when you ar dealing with oddly configured AD domains.
and do not have all the info needed.
agreed
dude
I give really good massages ;p
fajita, happy ending?
i haven't a clue, daveman
:p
NTS
the condition whereby an IRC newbie feels that they have to keep talking, and talking, and talking, the entire time they are in the channel.
Thus our dilemma. I have enough control to find out whatever info, but lack the knowledge to know how.
try the longer name you mentiones and try leaving off the prefix on the -mapuser. try a different name each time with the prefix off, use the one that works
fajita ntp
ntp is network time protocol, and keeps a computer's clock accurate. Everyone should run it. But it's an operating-system thing, not an apache thing
But don't delete/recerate the user every time?
and doesnt complain about not finding the user. if this doesnt work I'm at a loss
I dont know. Try it and see.
fajita be Daveman
you forgot insulting
Hazard to have apache auth against (or to) an AD requires a LOT of tuning and config.. of LDAP, kerberos 5, and sundry dirty details
emphasis on the dirty details
I've got that much figured out.
what, precisely, are you attempting ?
I use it.
successfully even
arreyder you don't count
:P
so help him out already!
why are we even talking
:P
I have the theory of how it works, but getting Kerberos to work together with LDAP in AD mode is.. painful
Ive been helping him off and on for a few weks
do you need to find the AD name?
I must be blessed, it work in a day for me.
worked.
if you want to use apache behind an AD domain, just set up an IIS to proxy it to apache
5 minutes and you're done
please guys. dont complicate this.
or you could just use RADIUS, and IAS
you could even run it on the same machine
we're like 99.99999% done here
I believe so, yes.
just have a parameter mismatch
arreyder did you document your one day ?
yes I did
and what kind of access to you have?
all in his head
All of it.
I assume you are not a winders guy then?
Not so much, no.
please..ust try my last suggestion if that doesnt work I'll step out of this.
I am.
just
I'm working through possibliities now.
ok, the server that you are trying to auth against is it an AD GC?
cn=accountname, dc=domain, dc=tld - at its simplest, that's all you need
no account name needed.
not for this.
I don't know what GC is to answer that.
Global Catalog
we have that, it's not adding the realm to the end of the mapped USER
thats all we're missing, period.
it's the DCs local cache of Forest-wide accounts
do you know the ip of the box?
I do.
connect to it with nslookup
try 127.0.0.1
heh
When I start nslookup, my DC is the Default Server.
ok
But I don't know how to "connect to it" from there.
no, no
when you start an NSLookup
it *should* return the FQDN of the server
AH.
does it?
Or doesn't it?
shut up
Shutting up.
it's the first one listed as nameserver
the dawn of understanding…
Yes. It gives me northmail.truenorth.local
there you gop
go
truenorth.local == AD domain name
Server FQDN == northmail.truenorth.local
Ok. Which is what I thought, but changing my ktpass command to reflect that throws the same error.
well if that is the server you are using for AD auth, then that is it's name, and domain
Wel crap.
and we just need the domain part for the @BLAH.COM
in caps
Yeah, but if I don't prefix the username, I'm still getting that error.
DsCrackNames returned 0×2 in the name entry for HTTPAuth.
ktpass:failed getting target domain for specified user.
is the user really created on the domain we just learned?
Yes.
look up it's OU
make sure.
Hazard you really need user@realm to auth against kerberos
he has it.
oh
we're past that
waaaaay past that
oh
Ok. I'm looking in ADUaC right now.
why dont you know the ad domain name/fqdn then
e're working on the user map and keytab export
Under TRUENORTH.LOCAL, there is TRUENROTHEVENTS, with has the user in it.
grrrr
And my typing has gone to hell.
DN=USERNAME, OU=TRUENROTHEVENTS, DC=TRUENORTH, DC=LOCAL
s/USERNAME?HTTPAuth?
err… Pretend those ? were /
s/DN/CN/
not in AD no
DN == Distinguished name
not canonical name
really ? /me never understood the distinction in AD
heh
Common name, not canonical
yes, really
try this…
AD is not 100% LDAP compliant
@TRUENROTHEVENTS.TRUENORTH.LOCAL
and no prefix.
if that were true, then you could not use LDAP with it at all.. it just fudges around the attributes a bit
Heh. Just for the record, I had typo'd that. TURENORTHEVENTS
heh
ACk! Again I typo.
teh funny
TRUENORTHEVENTS.
true
Same error.
did you remove the account first and recreate?
not that time. One moment.
Same.
what exactly is different about the php exec() function in apache from when run using "php file.php" on the command line?
Crap. I'm running out of time again.
ok, drop the events part. lets put itback the way it was
ok
I seem to get a lot of things not working in the former, even though I have suPHP, so the user should be the same
prefix it if it needs it, recopy the keytab etc…
#php
#php is thattaway. See the TOPIC for #apache!
i'm lost for ideas
Poop
You are.
you might try the kerberos list at mit.
I don't think it's a PHP issue, because php itself runs it fine
sorry bud
blame php
PHP should be presumed to be at fault until conclusively proven otherwise. And even thereafter, if it's convenient.
No worries. You tried way harder than most would.
[just in case we didn't have that yet]
Yeah, end the whole PHP and Perl and Python, etc. bullshit by just reccommending everyone who brings it up, to C.
I've got your email still if I think of something. I'm not good of letting go of unsolved problems…
(And thanks for the mod_cgi and fastcgi hint.)
this will haunt me.
I'll get back to you on Monday about creating the https workaround. So that at least I don't have my users sending plain text.
As for now. It's time to elave for Jiu Jitsu class.
Have a good weekend, everybody.
you too
bbiab
hi I have a problem with virtual hosts in apache. I want to force a iso-8859-1 for one site and utf-8 for another
you can set different "AddDefaultCharset" directives, per virtualhost
I tried it but it does not seem to work on the utf-8 site
I still get weird characters
i do it all the time. Clear your browser's cache
ok that might be the problem. Thx
are you actually sending utf-8?
thx that was my problem
Hi, I have apache on a ubuntu machine i just installed php but its not configuring well. Your apache confg is broken so we are not rerstarting
apache2ctl configtest
gryzor, It cnt find httpd.conf in /etc/apache2
debian/ubuntu uses apache2.conf
gryzor, Yes it says syntax error at 189 line of apache2.conf cant not open httpd.cong
look at line 189 of apache2.conf
exit
sed -n 189p apache2.conf
um… does httpd.conf exist?
that sounds like an error telling you that it's not there…
anyone know of a module / perl script that provides nice custom directory listings?
mod_autoindex
mod_autoindex is http://httpd.apache.org/docs-2.0/mod/mod_autoindex.html or http://httpd.apache.org/docs/mod/mod_autoindex.html
yeah, I'm using that.
i'm not following you…
I'm using that module already, but the listings are extremely simple.
I didn't realise a directory listing could be spiced up
yse
yes
you can pass the directory listing to a perl script
can't say I've even looked at a directory and wished it looked any different
Well I have business executives grabbing files from a webserver
and?
don't want it looking like web-0.1 back in 1985
have the complained yet?
*they
yes
so write an index.html
uhm
I don't have time to do that for 50,000 directories
script it
no really… didn't think of that
you might be onto something there
you think?
ya man like wow… totally didn't occur to me
lol
there are a billion things like that on a wonderful website….
if something already exists I'd rather not spend time re-inventing the wheel.
www.google.com
www.google.com is br0ken ?
you have not helped me at all
http://www.google.co.uk/search?hl=en&q=php+directory+listing
I'm having trouble with authentication. I've got three directory settings - /var/dav, /var/dav/Finance, and /var/dav/Creative, and two groups: Finance, and Creative. Finance is supposed to be read/write only by finance, creative is supposed to be read * write Creative only, and everything else is everyone.
Yet for some reason, it seems to be ignoring people's group assignments.
….
I don't think "…" means what you think it means.
Will I be shot for going off topic?
No answer is a good answer
Error log says it can't open the group file… which makes sense.
But…
But… is you rotting
I just wondered if anyone could reccomend an HTML / PHP editing program that doesn't look like UI was the lowest thing on the specification
Apache is smarter than me.
I suck at life.
I apologize for wasting your time.
I've no clue, never used webdav in my life. but why do you think it makes sense to not be able to opent he group file?
i love kdevelop
but that might not be for everyone
on mac Coda is a great option.
I'm running Windows
you don't need a GUI to write text.
kdevelop I'm guessing is KDE
windows eh
nice for a files pane
uhm
i dunno
i think E is good
i've heard some good things about it anyhow
i haven't used windows for so long.
I was reccomended "EditPlus" but a) it costs money b) it uses really horrible interface
I'll have a look
you should just install linux
pfe is only decent win32 editor app I now (pfe stands for programmer's file editor). I used it many mango seasons ago
then you get kdevelop