Since my last post on using Nginx to cache proxied content, they have added proper cache handling via their proxy_cache* directives. These are much more suitable for use, as they capture the HTTP response headers and also use more advanced Cache-Control checks. To start, install the latest stable Nginx avaliable at http://wiki.nginx.org/NginxInstall. Next edit your [...]
Archive for the ‘Server Admin’ Category
mpm-itk on CentOS – run Apache virtual hosts as different users
Posted 5th April 2010 by Andy | 2 Commentsmpm-itk is a fork of mpm-prefork (ironically in both process and project sense), which allows you to configure individual Apache vhosts to run as specified users and groups. This makes it extremely secure if used in a shared hosting environment. I have provided a CentOS RPM for this in the Webtatic yum repository. This should [...]
Facebook XHP RPM on CentOS
Posted 11th February 2010 by Andy | No CommentsA few days ago, Facebook released XHP, a PHP extension, which allows defining XML directly in PHP blocks, allowing you to “use PHP as a stricter templating engine”. It seems a bit strange to be coding XML tags directly in PHP blocks, but it adds features such as automatic escaping, and the ability to manipuate [...]
PHP 5.3 on CentOS 5
Posted 20th June 2009 by Andy | 168 CommentsMy previous articles on installing PHP on CentOS dealt with installing PHP 5.2.6. I have found this to have some bugs that kill the process without error information. One bug I found, which was on an x86_64 server, was that converting an object to a string did this. So, I have compiled the latest PHP [...]
mod_auth_mysql digest authentication patch
Posted 31st May 2009 by Andy | 2 CommentsRecently, I wrote a mod_perl module for using a database backend for basic and digest authentication in Apache, however I found it to be much slower than mod_auth_mysql. This would be due to using mod_perl and DBI. So I have written a patch for mod_auth_mysql which performs the same, which means its as fast. The [...]
Secure digest HTTP authentication using Webtatic::AuthDBI
Posted 24th May 2009 by Andy | No CommentsThe HTTP protocol gives a standardised way to provide authentication. This is supported via two modes: Basic – transmit the username and password in a reversable base-64 encode Digest – transmits complex MD5 hash of the username, realm, password, a server generated nonce, request method and request uri Basic HTTP authentication suffers from a very [...]