DeveloperSide.NET Forums
July 05, 2020, 12:26:54 PM *
Welcome, Guest. Please login or register.

Login with username, password and session length
News:
 
   Home   Help Search Login Register  
Pages: [1] 2
  Print  
Author Topic: Released Web-Server v1.16 w/ Tomcat, mod_jk, mod_security...  (Read 24223 times)
0 Members and 1 Guest are viewing this topic.
admin
Administrator
Master of All Subjects
*****
Posts: 3272


View Profile WWW Email
« on: January 29, 2006, 11:09:54 AM »

DeveloperSide.NET v1.16 Web-Server Suite with...

Apache 2.0.55 with...
mod_security 1.9.2
mod_jk 1.2.15
mod_perl 2.02
mod_deflate

Tomcat 5.5.15

MySQL 5.0.18

PHP 5.1.2

OpenSSL 0.9.8a

Perl 5.8.7
   
phpMyAdmin 2.7.0-pl2

analog 6.0

...should be released within the next 24 hours (lacking a major disaster like a HD crash).  I have everything ready, working, and debuged, but still need some time to edit the docs and create all the packages (it's 6am here and I need to get some sleep). Maybe I'll also add filezilla and mod_dav functionality.

The biggest changes are the inclusion of Tomcat 5.5, mod_jk 1.2, and mod_security (with rulesets).

Soon, some of our competitors will see the Tomcat 5.5 w/mod_jk Guide and incorporate it into their packages.  Just like they did when we first released the win32 Tomcat 5.0 w/ mod_jk Guide about a year or two ago.  Back then and now, most, if not all, of the Windows Apache w/ Tomcat w/ mod_jk Guides did not work, were incomplete, or completely out of date.  It's a bit better right now, but still not enough to do it right.  First they took our minimized and modularized httpd.conf, then everything else they were missing.  Personally, I do not mind at all, but a little credit would do.
Logged

DeveloperSide.NET
Advanced PHP and MySQL Solutions for your Web Design and Development needs with Web.Developer Server Suite.
admin
Administrator
Master of All Subjects
*****
Posts: 3272


View Profile WWW Email
« Reply #1 on: January 30, 2006, 01:32:02 AM »

I think I'm going to leave out mod_dav and filezilla.  For this one I just want a basic build.  The above two can be easily added via instructions.

WebDav Clients...

MS Web Folders
http://support.microsoft.com/?kbid=195851

DataFreeway
http://www.enginsite.com/ssh-webdav-ftp-sftp-client.htm

WebDrive -- $50.00
http://www.webdrive.com/
Logged

DeveloperSide.NET
Advanced PHP and MySQL Solutions for your Web Design and Development needs with Web.Developer Server Suite.
admin
Administrator
Master of All Subjects
*****
Posts: 3272


View Profile WWW Email
« Reply #2 on: January 30, 2006, 07:03:00 AM »

Here are the rar and exe files of the manual install packages (install via the included readme1st.txt)...
http://www.devside.net/download/std/www-1.16.exe
http://www.devside.net/download/std/www-1.16.rar

I still have to create the auto-install package and edit the online Manuals to reflect changes.

If anyone want to give some feedback on the Tomcat5/mod_jk part...
Logged

DeveloperSide.NET
Advanced PHP and MySQL Solutions for your Web Design and Development needs with Web.Developer Server Suite.
admin
Administrator
Master of All Subjects
*****
Posts: 3272


View Profile WWW Email
« Reply #3 on: January 30, 2006, 09:23:19 AM »

January 30, 2006
The links are up on the official pages.  Now I just need to update the Manuals to reflect some changes.  Before that happens, I would strongly recommend reading the readme1st.txt file that comes with the download.

If you want to run Tomcat, you will need to download the Java JDK -- everything is explained.

Also, PHP4 is included if you want to downgrade -- which is also explained step-by-step.
Logged

DeveloperSide.NET
Advanced PHP and MySQL Solutions for your Web Design and Development needs with Web.Developer Server Suite.
admin
Administrator
Master of All Subjects
*****
Posts: 3272


View Profile WWW Email
« Reply #4 on: January 31, 2006, 12:10:53 AM »

Also...

.htaccess and directory indexes have been turned on -- since lots of people have come here asking about this functionality.  The proper notes have been made under httpd.conf for anyone that wants to turn this off.

PHP extensions php_mysql, php_mysqli, gd2, mbstrings have been uncommented.

The Manual notes recommend copying libmysql.dll from PHP to the %SystemRoot%\system32 dir.  The auto-installer does this now.  This is not needed for most people, but will help some.

mod_security has been activated with a very comprehensive ruleset package...
You might now notice a 'server banner' displaying "NOYB" instead of the regular "Apache version, PHP version, modules, etc..."
I'm not exactly sure what "NOYB" stands for -- "none of your business" perhaps?
Logged

DeveloperSide.NET
Advanced PHP and MySQL Solutions for your Web Design and Development needs with Web.Developer Server Suite.
Jorge
Customer, Basic Support
Guru
*****
Posts: 544

jorge_schrauwen@msn.com
View Profile WWW
« Reply #5 on: January 31, 2006, 04:23:06 PM »

Quote from: "admin"
Also...

.htaccess and directory indexes have been turned on -- since lots of people have come here asking about this functionality.  The proper notes have been made under httpd.conf for anyone that wants to turn this off.

PHP extensions php_mysql, php_mysqli, gd2, mbstrings have been uncommented.

The Manual notes recommend copying libmysql.dll from PHP to the %SystemRoot%\system32 dir.  The auto-installer does this now.  This is not needed for most people, but will help some.

mod_security has been activated with a very comprehensive ruleset package...
You might now notice a 'server banner' displaying "NOYB" instead of the regular "Apache version, PHP version, modules, etc..."
I'm not exactly sure what "NOYB" stands for -- "none of your business" perhaps?


Have you ever considers an install that allows simple changes like this to be changed on install?
Logged

admin
Administrator
Master of All Subjects
*****
Posts: 3272


View Profile WWW Email
« Reply #6 on: January 31, 2006, 10:50:08 PM »

Yes, and that is why I'm in the process of writing my own installer rather than using something like Inno or Nullsoft.  The things I want the installer to do -- all the things (I know a simple script would handle what you have quoted) -- would be too hard or impossible to do with something you have not paid $300-1000 for.  I'd rather just start with a C compiler and the win32 API.
Logged

DeveloperSide.NET
Advanced PHP and MySQL Solutions for your Web Design and Development needs with Web.Developer Server Suite.
Jorge
Customer, Basic Support
Guru
*****
Posts: 544

jorge_schrauwen@msn.com
View Profile WWW
« Reply #7 on: February 01, 2006, 11:59:11 AM »

Quote from: "admin"
Yes, and that is why I'm in the process of writing my own installer rather than using something like Inno or Nullsoft.  The things I want the installer to do -- all the things (I know a simple script would handle what you have quoted) -- would be too hard or impossible to do with something you have not paid $300-1000 for.  I'd rather just start with a C compiler and the win32 API.


Cool, good luck coding C, I never manged it :(
So i usualy go with winrar sfx with a costome vbscript or a small deplhi exe
Logged

Demoric
Jr. Member
**
Posts: 34

64788622 jaydiumsoftware
View Profile WWW
« Reply #8 on: February 01, 2006, 11:40:55 PM »

Glad to see mod_security included.
Yes, NOYB means none of your buisness, however you can change it to other things, but they are limited to 5 characters (if I remember correctly)  so you could use: Devsd, or whatver you'd like.
Logged

ttp://jaydium.servehttp.com
http://jaydium.selfhost.com
admin
Administrator
Master of All Subjects
*****
Posts: 3272


View Profile WWW Email
« Reply #9 on: February 02, 2006, 01:02:01 AM »

Since I've had a few e-mails about this...

JDK: Java Development Kit
JRE: Java Runtime Environment

The Java 1.5/5.0 JDK installs at about 190MB max.  This includes two JREs, one private (for the JDK's use), and one public, which is installed under the same base dir as the JDK...

JDK
C:\Java\jdk1.5.0_06
118MB

JDK's private JRE
C:\Java\jdk1.5.0_06\jre
77MB

Public JRE
C:\Java\jre1.5.0_06
69MB

The JDK is needed to develop programs in Java, as it contains the development tools, classes, libraries, and the java compiler(s). The JDK cannot be redistributed in its entirety, only specific parts can -- and there is a question of "who" can do this.

The JRE has no ability to compile anything and has one primary function -- to run the compiled Java-based apps.  The JRE can be redistributed.

The installer has an option of not installing the public JRE, but you need to keep it. Tomcat only requires the JDK, but still, applications should not try to use the JDK's private JRE.  "The public JRE has entries in the Registry that allow browsers and applets to use the Java Plugin that's part of the JRE.  These entries do not exist for the JDK's JRE".

Note: You might be able to get rid of the JDK by copying the lib\tools.jar file from the JDK installation to the common\lib path of the Tomcat installation or the lib\ext dir of the JRE. (Question is, would there be a need for JAVA_HOME and would it be set to the public JRE?)

Note: You do not need to set the System PATH for the public JRE's bin dir -- the installation process copies java.exe (and other files) to your %SystemRoot%\system32 dir, and sets the Registry so this happens...
Quote

C:\>java -verbose -version | more
[Opened C:\Java\jre1.5.0_06\lib\rt.jar]
[Opened C:\Java\jre1.5.0_06\lib\jsse.jar]
[Opened C:\Java\jre1.5.0_06\lib\jce.jar]
[Opened C:\Java\jre1.5.0_06\lib\charsets.jar]

...the java.exe under the sys32 dir knows where to look...
Quote

HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Runtime Environment...
JavaHome : C:\Java\jre1.5.0_06
RuntimeLib : C:\Java\jre1.5.0_06\bin\client\jvm.dll


http://java.sun.com/j2se/1.5.0/install-windows.html#private
Quote

Private vs. public JRE - Installing the JDK installs a private J2SE Runtime Environment (JRE) and optionally a public copy. The private JRE is required to run the tools included with the JDK. It has no registry settings and is contained entirely in a jre directory (typically at C:\Program Files\jdk1.5.0\jre) whose location is known only to the JDK. On the other hand, the public JRE can be used by other Java applications, is contained outside the JDK (typically at C:\Program Files\Java\jre1.5.0), is registered with the Windows registry (at HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft), can be removed using Add/Remove Programs, might or might not be registered with browsers, and might or might not have java.exe copied to the Windows system directory (making it the default system Java platform or not).
Logged

DeveloperSide.NET
Advanced PHP and MySQL Solutions for your Web Design and Development needs with Web.Developer Server Suite.
admin
Administrator
Master of All Subjects
*****
Posts: 3272


View Profile WWW Email
« Reply #10 on: February 02, 2006, 03:34:05 AM »

After reading the below, and a few other sites -- I think I'm going to take out that 'NOYB' and leave the banner/signature as it is...
http://httpd.apache.org/docs/1.3/misc/FAQ.html#serverheader
http://www.onlamp.com/pub/a/apache/2004/09/23/apacheckbk.html

NMAP still shows it as Apache.
Logged

DeveloperSide.NET
Advanced PHP and MySQL Solutions for your Web Design and Development needs with Web.Developer Server Suite.
admin
Administrator
Master of All Subjects
*****
Posts: 3272


View Profile WWW Email
« Reply #11 on: February 02, 2006, 06:13:14 AM »

http://java.sun.com/j2se/1.5.0/README.html#redistribution
Quote

The term "vendors" used here refers to licensees, developers, and independent software vendors (ISVs) who license and distribute the J2SE Development Kit with their programs.


Am I licensing the JDK by agreeing to the license before downloading it?  If this and the above were the same; it could take care of the extra d/l problem.  Though something tells me this vendor and license business more likely refers to companies like IBM and Microsoft and $$$. Also note all the 'and's and no 'or's in the text.  You would probably still need the other 'none redistributable' parts of the JDK for a truly complete package. And if some of this were doable, Tomcat would have already done it.
Logged

DeveloperSide.NET
Advanced PHP and MySQL Solutions for your Web Design and Development needs with Web.Developer Server Suite.
bozoka45
Member
*
Posts: 5


View Profile
« Reply #12 on: February 03, 2006, 05:22:53 AM »

For some reason apache won't install for me. I downloaded the auto installer, and that didn't work. I tried installing apache manually, that doesn't work. Any suggestions?
Logged
admin
Administrator
Master of All Subjects
*****
Posts: 3272


View Profile WWW Email
« Reply #13 on: February 03, 2006, 05:28:38 AM »

What are the error or output messages on the command line?  If you have an already installed Apache or IIS Service, Apache will not install.
Run 'netstat -an' to see if anything is listening on port 80, Run 'services.msc' to see if you have an old Apache2 Service installed or IIS.
Logged

DeveloperSide.NET
Advanced PHP and MySQL Solutions for your Web Design and Development needs with Web.Developer Server Suite.
Demoric
Jr. Member
**
Posts: 34

64788622 jaydiumsoftware
View Profile WWW
« Reply #14 on: February 04, 2006, 04:51:39 AM »

Quote
After reading the below, and a few other sites -- I think I'm going to take out that 'NOYB' and leave the banner/signature as it is...


It is a small gain in security through obscurity.  I would never recommend changing the source to accomplish the change, but as for mod_security it is done through it, and does help on persons manually searching for weaknesses, and some scripts. Plus depending on the change it may have a smaller header size.

Although in the scheme of things it's a small deal.
Logged

ttp://jaydium.servehttp.com
http://jaydium.selfhost.com
Pages: [1] 2
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.9 | SMF © 2006-2009, Simple Machines LLC Valid XHTML 1.0! Valid CSS!