Apache on cPanel weirdness: "combined combined combined."

[reddragdiva]

If you have this problem, where you can't get anything out of awstats and it turns out to be because your Apache logs contain nothing but the word "combined", once per line, over and over — this is because cPanel b0rked your httpd.conf and left out the LogFormat lines. Apache then presumes the word "combined" at the end of the CustomLog line is not a direction on how to log, but the actual log format. Cut'n'paste them from httpd.conf.orig and somehow beat cPanel into putting them into its RCS.

(cPanel is source-available proprietary software to make LAMP stupid. Our host is at the stage where I'm very glad I have years of expertise beating Apache around, and sudo.)

Comments

[denny]

mod_vhost_alias ?

[vampwillow]

iirc that one also suffered from the do-security-before-knowing-which-domain issue, but I might try coding it and seeing if it actually blows up or works. I've found a few things already which the manual says don't work but in practice seem to do so

[denny]

Ah, yes. Um. Isn't that a fairly hard limit until Apache 2.2? I don't remember the details, but something about the domain name being inside the encrypted stuff by design.

[reddragdiva]

The SSL virtual hosting thing is indeed new in Apache - but so little used as yet that in every interview I did this round, the "correct" answer was "you need an IP per SSL host." i.e. this stuff needs experimenting with! Does anyone big actually use virtual SSL hosting as yet?

Does anyone big actually use virtual SSL hosting as yet?

[vampwillow]

which is, en effet, what I am trying to manufacture a method to produce ;-P

[vampwillow]

http://en.wikipedia.org/wiki/Server_Name_Indication

[reddragdiva]

So that's "will never be widely supported until XP falls off teh intarweb."

[vampwillow]

"We can but hope"

[vampwillow]

it is - allegedly - a design intention that you only have one secure domain per IP address, and thus mod-rewrite can't work as at the point the instruction is reached the domain name isn't actually known! Me, I run my own servers and want to try and find a way around it other than using multiple ports (one per secure site but people need to know in advance) or a structure which use Alias to put each in a separate directory (which would be accessible by "../" etc so not secure really)