Okay.
I copied a fresh default-server.conf into /etc/apache2. It has the
DocumentRoot and <Directory> stanzas. I added NameVirtualHost
aaa.xxx.yyy.zzz:80 to it.
Here is a fresh copy of the VirtualHost configuration. I turned
CanonicalNames on and removed the Options and AllowOverride lines from
the <Directory> statments. Here's what the revised VirualHost config
looks like.
<VirtualHost aaa.xxx.yyy.zzz80>
ServerAdmin rharri@xxxxxxxxxx
ServerName www.domain.com
ServerAlias domain.com
DocumentRoot "/usr/local/tomcat/webapps5/ROOT"
ErrorLog "/var/log/apache2/-error_log"
CustomLog "/var/log/apache2/access_log" combined
HostnameLookups Off
UseCanonicalName On
ServerSignature On
<Directory "/usr/local/tomcat/webapps5/ROOT">
Order allow,deny
Allow from all
</Directory>
</VirtualHost>
The sites using Tomcat are on different IPs (not NamedVirtualHost)
and have the following added to their configuration:
<Location "/WEB-INF/">
AllowOverride None
Order deny,allow
deny from all
</Location>
apachectl -S is without error and recognizes the NamedVirtualHosts
(what does the ":2" at the end of "conf" indicate?).
:
Yet, when any of the sites are accessed, the DocumentRoot used is
"/srv/www/htdocs" (from default-server.conf).
Any suggestions? Is this an Apache problem?
Bob
On Fri, Oct 30, 2009 at 3:30 AM, André Warnier <aw@xxxxxxxxxx> wrote:
> Igor Cicimov wrote:
>>
>> "
>> <Directory /usr/local/tomcat/webapps5/ROOT>
>
> Which is usually a Bad Idea.
> Tomcat knows that it should not serve, e.g., the contents of a WEB-INF
> directory.
> Apache httpd does not know that.
> So unless you proxy *everything* to Tomcat (which would then raise the
> question of why you have Apache), Apache will happily serve your
> WEB-INF/web.xml for instance (and anything else in there you thought was
> private).
>
>
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
> " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
> For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
>
>
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
" from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
|