[mythtv-users] securing mythweb

[Gabe Rubin]

On Thu, Mar 3, 2011 at 7:33 PM, Bill Meek <keemllib at gmail.com> wrote:
> On Thu, 2011-03-03 at 09:21 -0800, Gabe Rubin wrote:
> ...
>> I do have mod_auth_digest, but not a2enmod auth_digest.
> ...
>
> a2enmod is just the Apache/2 command to enable a module
> (not a problem.)

That is good to know.

>
> Looking back at your posts, I noticed you had used:
>
>  <Directory "/var/www/html/mythweb"> and
>  <Directory "/var/www/mythweb">
>
> Make sure the one that reflects the actual location of
> your mythweb installation is used.
>
Not sure where I used /var/www/mythweb.  I see others have posted info
using that director, but I am not sure I have (and I double checked
/etc/httpd/conf.d/mythweb.conf to make sure).

I am pretty sure the issue is with that file and I have misconfigured
something.  I can post it again if someone is able to help.

> Just because I don't know any better, I always restart
> Apache and Firefox whenever changes are made.
>
> Don't forget the .../apache2/error.log file, it may have some
> clues.
>
Here is some relevant information from that file (this has me
concerned:  File does not exist: /var/www/html/config):

[Wed Mar 02 12:56:38 2011] [notice] caught SIGTERM, shutting down
[Wed Mar 02 12:56:48 2011] [notice] suEXEC mechanism enabled (wrapper:
/usr/sbin/suexec)
[Wed Mar 02 12:56:48 2011] [notice] SSL FIPS mode disabled
[Wed Mar 02 12:56:48 2011] [notice] Digest: generating secret for
digest authentication ...
[Wed Mar 02 12:56:48 2011] [notice] Digest: done
[Wed Mar 02 12:56:48 2011] [notice] mod_python: Creating 4 session
mutexes based on 256 max processes and 0 max threads.
[Wed Mar 02 12:56:48 2011] [notice] mod_python: using mutex_directory /tmp
[Wed Mar 02 12:56:48 2011] [notice] SSL FIPS mode disabled
[Wed Mar 02 12:56:48 2011] [notice] Apache/2.2.17 (Unix) DAV/2
PHP/5.3.5 mod_python/3.3.1 Python/2.7 mod_ssl/2.2.17
OpenSSL/1.0.0d-fips mod_perl/2.0.4 Perl/v5.12.3 configured -- resuming
normal operations
[Wed Mar 02 13:05:36 2011] [notice] caught SIGTERM, shutting down
[Wed Mar 02 13:05:37 2011] [notice] suEXEC mechanism enabled (wrapper:
/usr/sbin/suexec)
[Wed Mar 02 13:05:37 2011] [notice] SSL FIPS mode disabled
[Wed Mar 02 13:05:37 2011] [notice] Digest: generating secret for
digest authentication ...
[Wed Mar 02 13:05:37 2011] [notice] Digest: done
[Wed Mar 02 13:05:37 2011] [notice] mod_python: Creating 4 session
mutexes based on 256 max processes and 0 max threads.
[Wed Mar 02 13:05:37 2011] [notice] mod_python: using mutex_directory /tmp
[Wed Mar 02 13:05:37 2011] [notice] SSL FIPS mode disabled
[Wed Mar 02 13:05:37 2011] [notice] Apache/2.2.17 (Unix) DAV/2
PHP/5.3.5 mod_python/3.3.1 Python/2.7 mod_ssl/2.2.17
OpenSSL/1.0.0d-fips mod_perl/2.0.4 Perl/v5.12.3 configured -- resuming
normal operations
[Wed Mar 02 13:45:28 2011] [notice] caught SIGTERM, shutting down
[Wed Mar 02 13:45:28 2011] [notice] suEXEC mechanism enabled (wrapper:
/usr/sbin/suexec)
[Wed Mar 02 13:45:28 2011] [notice] SSL FIPS mode disabled
[Wed Mar 02 13:45:29 2011] [notice] Digest: generating secret for
digest authentication ...
[Wed Mar 02 13:45:29 2011] [notice] Digest: done
[Wed Mar 02 13:45:29 2011] [notice] mod_python: Creating 4 session
mutexes based on 256 max processes and 0 max threads.
[Wed Mar 02 13:45:29 2011] [notice] mod_python: using mutex_directory /tmp
[Wed Mar 02 13:45:29 2011] [notice] SSL FIPS mode disabled
[Wed Mar 02 13:45:29 2011] [notice] Apache/2.2.17 (Unix) DAV/2
PHP/5.3.5 mod_python/3.3.1 Python/2.7 mod_ssl/2.2.17
OpenSSL/1.0.0d-fips mod_perl/2.0.4 Perl/v5.12.3 configured -- resuming
normal operations
[Wed Mar 02 15:07:56 2011] [notice] caught SIGTERM, shutting down
[Wed Mar 02 15:07:57 2011] [notice] suEXEC mechanism enabled (wrapper:
/usr/sbin/suexec)
[Wed Mar 02 15:07:57 2011] [notice] SSL FIPS mode disabled
[Wed Mar 02 15:07:57 2011] [notice] Digest: generating secret for
digest authentication ...
[Wed Mar 02 15:07:57 2011] [notice] Digest: done
[Wed Mar 02 15:07:58 2011] [notice] mod_python: Creating 4 session
mutexes based on 256 max processes and 0 max threads.
[Wed Mar 02 15:07:58 2011] [notice] mod_python: using mutex_directory /tmp
[Wed Mar 02 15:07:58 2011] [notice] SSL FIPS mode disabled
[Wed Mar 02 15:07:58 2011] [notice] Apache/2.2.17 (Unix) DAV/2
PHP/5.3.5 mod_python/3.3.1 Python/2.7 mod_ssl/2.2.17
OpenSSL/1.0.0d-fips mod_perl/2.0.4 Perl/v5.12.3 configured -- resuming
normal operations
[Wed Mar 02 17:14:35 2011] [error] [client 109.230.221.182] File does
not exist: /var/www/html/fastenv
[Thu Mar 03 09:18:02 2011] [error] [client 64.81.28.202] PHP Warning:
phpinfo(): It is not safe to rely on the system's timezone settings.
You are *required* to use the date.timezone setting or the
date_default_timezone_set() function. In case you used any of those
methods and you are still getting this warning, you most likely
misspelled the timezone identifier. We selected 'America/Los_Angeles'
for 'PST/-8.0/no DST' instead in /var/www/html/testphp.php on line 1
[Thu Mar 03 09:18:04 2011] [error] [client 64.81.28.202] File does not
exist: /var/www/html/favicon.ico
[Thu Mar 03 09:18:07 2011] [error] [client 64.81.28.202] File does not
exist: /var/www/html/favicon.ico
[Thu Mar 03 09:49:40 2011] [error] [client 66.249.72.52] File does not
exist: /var/www/html/robots.txt
[Fri Mar 04 09:40:12 2011] [error] [client 109.230.251.94] File does
not exist: /var/www/html/config
[Fri Mar 04 09:58:03 2011] [error] [client 66.249.68.112] File does
not exist: /var/www/html/robots.txt