• Unable to enable SSI in Apache 2.4.29 (Ubuntu)

    From zachary.j.adam@gmail.com@21:1/5 to All on Wed Jul 25 15:39:57 2018
    Hello Everyone.

    I am having quite a lot of difficulty trying to enable SSI on an apache instance running on my laptop for development purposes - it's day three - and I'm starting to feel a little slow-witted. I've already run `a2enmod includes`, restarted the service (a
    few times), and I've amended the apache2.conf file as follows:

    <Directory /var/www/>
    Options Indexes FollowSymLinks Includes
    XBitHack on
    AllowOverride None
    Require all granted
    </Directory>

    Because I'm using XBitHack, I set the xbit on my test file (at /var/www/html/index.html) with `chmod +x index.html` from within that directory. The actual symptom is that my test page will load but the SSI instruction was not parsed - no text appears
    where it should, and the SSI command code is still visible in the page code as a comment.

    That command was: <!--#echo var="DATE_LOCAL" -->

    Unfortunately I need SSI to continue my work, so I'm wedged here. I'd like to able to do this with apache as it would save me changing the production server as well.

    If this is a super obvious problem, I apologise, but unfortunately I just don't see what I've done wrong.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Zac@21:1/5 to but I believe they are there - I al on Wed Jul 25 17:49:02 2018
    Thanks for your reply!

    I've never used a2enmod, I've always done the changes myself. Have you verified that symlinks are created? Did you do a graceful restart or a
    full shutdown and start? I'd probably try the later if the former didn't work.

    It hadn't occurred to me to look for the symlinks, but I believe they are there - I also read the include.load file and verified the binary it refers to is where it says it is.

    Have you examined the logs? The comment remaining in the file is a sure
    sign of the includes module not firing. Maybe error log during start up
    is going to have something useful.

    I have, and I find nothing particularly substantial there to go on. You see sigterm kill the process, and then "Apache/2.4.29 (Ubuntu) configured -- resuming normal operations" shortly afterwards, which I suppose I would expect.

    I've done both systemctl shutdown apache2 and systemctl restart apache2 and neither seemed to produce much by way of progress. Hell, I've even done a full power cycle on the machine.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Eli the Bearded@21:1/5 to zachary.j.adam@gmail.com on Thu Jul 26 00:23:38 2018
    In comp.infosystems.www.servers.unix, <zachary.j.adam@gmail.com> wrote:
    I am having quite a lot of difficulty trying to enable SSI on an
    apache instance running on my laptop for development purposes - it's
    day three - and I'm starting to feel a little slow-witted. I've
    already run `a2enmod includes`, restarted the service (a few times),
    and I've amended the apache2.conf file as follows:

    I've never used a2enmod, I've always done the changes myself. Have you
    verified that symlinks are created? Did you do a graceful restart or a
    full shutdown and start? I'd probably try the later if the former didn't
    work.

    XBitHack on
    ...
    That command was: <!--#echo var="DATE_LOCAL" -->

    Those two work for me (on my non Ubuntu system test).

    Unfortunately I need SSI to continue my work, so I'm wedged here. I'd
    like to able to do this with apache as it would save me changing the production server as well.

    Have you examined the logs? The comment remaining in the file is a sure
    sign of the includes module not firing. Maybe error log during start up
    is going to have something useful.

    Elijah
    ------
    has only used SSI for proof-of-concept

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Eli the Bearded@21:1/5 to zachary.j.adam@gmail.com on Thu Jul 26 07:00:36 2018
    In comp.infosystems.www.servers.unix, Zac <zachary.j.adam@gmail.com> wrote:
    I have, and I find nothing particularly substantial there to go on. You
    see sigterm kill the process, and then "Apache/2.4.29 (Ubuntu)
    configured -- resuming normal operations" shortly afterwards, which I
    suppose I would expect.

    Here's the smallest complete Apache config I can come up with for
    getting SSI to work on:

    Server version: Apache/2.4.18 (Ubuntu)

    https://qaz.wtf/tmp/minimal-ssi.tgz

    In fact, the tgz is just 2001 bytes, so I'll include it as a base64
    block for posterity below. This config relies on a standard Ubuntu
    install, because it loads the modules from the Ubuntu directories.

    Edit the ADMIN_ROOT= line in env_vars_ssi.sh then start up Apache with

    sh env_vars_ssi.sh start

    The server starts on http://localhost:8000/

    Logs go to log_ssi/access.log and log_ssi/error.log
    The SSI specific config is in conf_ssi/*
    There are two test documents in htdocs_ssi/

    No Xbit:
    http://localhost:8000/test.html

    Mode 755:
    http://localhost:8000/chmod755.html

    Then you can stop the server with

    sh env_vars_ssi.sh stop

    Run as a regular user, no special permissions required.

    As you may be able to surmise from the filenames and structure in this
    example, I have a whole series of these used as PoC, and sharing a
    single bare apache-admin.conf file. I never got around to making it more general to as to run on other common distros, however.

    Elijah
    ------
    base64 encoded minimal-ssi.tgz:

    H4sIAC9tWVsAA+1ae3PbNhL3v+Wn2PoxaXOl+JAouRpZc4osP65+jaykncnlNBQJiTyThEqA fjTn734LiqKoh23lqnOuV/ySMcnFYgHsYpeLFTkJx6o9th2PaJOLaruhH5UcGg23NgMdUa1W xNWoWXrxKlCuVM0tw6wZVsUyanp1SzeqVrW2BfqGxn8WCeN2DLA1INE/bVz4U3wvtf9BsQPv 7JgALswPkxCE1f0RDGkMcRJFfjQCGxJGYpXh5iBAE67SoTqwIxcYQW7Xjh+UHbgjA2S6JXFJ Ua7Tmy6lHLY1wp1sX5nbCjL2PJ9BRIjLgFMYEJTCwY/Ef+4RINGtcp5wcg9DPyD13c+tq1b7 pNM/u2z/1D887T6CS4Z2EvA1ZV357hEKglzQ1elh/+j0rPOoKD0/JLgeKOu68hMh41bg3xK4 jJRz+z5/7pJfE8I4A6PINe1qKSeU8cgOyRmlN8mYweVwqChndHRGbkkAd3Yc4aPPOIlgH/e6 ojQO/Zg4nMYPoDUVyHA55j6NGBzRIKB31w/hmR/dsLy5JaiXqNXYdwlc0IjkTWKCKBHsIEDd RD5xlYaWj9FcU0+FWeWqOrxsdy8ve4+FaT4zj+kK/tK5J077+HTlBEexHfGlGbYchzAm7HSB moSSx+2UojQEjZ3b3PFg+x9/x4bt5vMLn3VopmY4onFo4z7c82AvgT0Ojb24CXtNBnsDvP/c JUMSk/jRb4qn92Kjt0Yk4hmhjVb1iXjYO9yG0KHhwI9wIBRtu+fUTXBr2Qn3fus7NCb9cELR EhZrgT+YbnxtQmfi2p+xlxgtynFG/loCkG+hp+vHa/VEvoWeaPq1eiLfQs8QPWCtroJxse84 7I9jgkHmZj0RM34hab0d3YljGuMOgEIMOU5DiEZEUymgI6WN0Z+Gq7kme1CwFQx/7cT+mK/u IAwjhCrX+EbhkyjIwFTO/eh6jEG2QLHv5yiWoGSR5mdcZcqVEts0itBPhGddkbjt+YErIhHG kZbrnmAUDkgsdo7K0olBCe8VJXeu08jFUOqLv+g8YZDdCqbTyAkSl0zc1g6gGKmF1plKInsQ EFdLLSheDGtqflFyrqnOL71ua6Krt5nAiQZSt+ezTKT0q/1b6Y4PlcYHP+aJHYgoC2/rIoKK ADDXi3EPW/MuAIfUSUL04fQNtBzNkGO9Gd566RwbWmESGFW+9ht7syhoXRPL7TPmaxseQyR5 tZr1VP4nsGWUy2bVrFZ1o4z5n2XqxhZYG57HSvzJ87+V9hcvisnu38gYL+T/uoE2z+2vm2h/ PAtYMv9/DbyQ+OVZXRYymfLLO5+f2M4N0GghjfvaS5H4D7DS//2JsTdVA3jR/9HnZ/5vCf+v VKX/vwoKaXlm9bVS8ukOwXT8a69A4veg6P/iNHhrx0zEgBLzNjbGC/5vGubM/01TvP+rlbIp /f81sPOthidbjXl4tkuYPZrUBNJd8N1F67zzPW4E+Ah4TB7Dv0DoiuN1FNsOGSYBfFJ2sGNK 1lKeyVaCO597wCge0Jz0iJ2e09LqIrITZFk1jGcz8PkbBvQuSut/7AcYJDyt8CSMiIHEkc/L Sm6gwZjGvL50BkzPicj9zTdqEyeBmUrwIMqZeEPA5nhxiDjLiirnrl4HzcOJaqLKKcRqK13C LqUqQuCyg3T4A1jRimBZa465VlhqVZSpyIPdz/rOzlvtUWHZ47QFqf1HJSOmjXt7pbePikIc j8IRLkToFnZT4bsG0u+FbqZlu8Pz04u+yOkOnl7rqi7vWtedg91Zd23GlOWK7cuLIzwvT5lE hynP4pm6yDPJNdLp5iIXKrRz7GPfndki7VZC0tJsuu8vlkYqoeUXx5iWk+cZA+rcLInMyjtz WgjoaH7uGW+re/z+vHPRuz7YVtEYBdlLP61sLw2UZd1zA3ncpU62YEUJb/BgBuoYJc8pX2gn p2UqyJ+nSy0Qjuees3Hz59xeyqIhLz58aHWvDwSdOJP8gIngkSUIDg9g968yH/hDoRjsst22 8QrQF9R/LLOW1n+sSk3Wf14DT9jf8TDLr1lWWjX+vWOk9reesX+tvGD/Wq1myPzvNdAQBm42 BtR9aCqNb1V1J80o8D17sH3Y6qXvj9bZNqgqNmspW0NL+8hA//+AJ/xfpNQb8X2Bl+o/Rf/X Bd2oVXRZ/3kVSP//c6Po/+JY81/4+e+Lfv8rmxWR/+kVU+Z/r4FV9p99+bCZMV6s/2NumNf/ y+nvf7pelvH/NWCYtZKO/wxQ4aNpaX9LAs3Ujf26Wa6Xa3WjAqqO1vgEjeNOD+bPBXDS611p RklvgqnrUK1AQ21CI7gbq/HkYxZsLO83U7JVNeUb438Pq/w//z5qQ2O85P/Vgv9P4n+1plek /78GPv5MXECnB9OCzOV19FlTr5og4sAn+Fj4/K4eUe47BImi5Gga+xXzE7RO0J7Vch1ak21k liolYx++ez9IIp58n31TnMQ4kKpCTFgSiu+KI/FpZgB0TGI7/chAeWouZs2YzkV8N/nkJPQf K3Vo0zAUXycHfkTq8GapSgmq+1zBH9Thc83Lhdw3K6ZdQRXotUrF+DIV/lgHx05GHofr0+Ne p3v+AzAv4Vxoy6V3kYyfEhISEhISEhISEhISEhISEhISEhISEhISEhISEhISEqvwb1XZk9IA
    UAAA

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Zac@21:1/5 to All on Thu Jul 26 10:09:18 2018
    Thanks for your help, Eli. I used your test config as instructed and things worked fine. I identified a few minor differences to my own config, and the situation did not resolve.

    However, I did some experimenting and realized that there was a slight difference between what you'd done and what I'd done, and it was this.

    I used `chmod +x`
    You used `chmod 755`

    I since went through and re-chmodded my own test pages and it turns out that this resolved the issue - my original configuration and your new configuration both correctly tell apache to parse my files.

    This is particularly concerning as chmod +x is the method stated in the documentation to set a file to be parsed by xbithack.

    This response more or less for anyone who follows on after me with a similar issue.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)