unauthorized evaluation · accompanying class files this manual comes with accompanying class...

Apache Web Server Administration for Windows

EVALUATION COPY

Unauthorized reproduction or distribution is prohibitied

Apache Web Server Administration for Windows

(AWS101 version 1.4.0)

Copyright Information

© Copyright 2016 Webucator. All rights reserved.

The Author

Stephen Withrow

Stephen has over 30 years' experience in training, development, and consulting ina variety of technology areas including Java, C, C++, XML, JavaScript, AJAX,Tomcat, JBoss, Oracle, and DB2. His background includes design andimplementation of business solutions on client/server, Web, and enterprise platforms.Stephen is a published writer in both technical and non-technical endeavors.Stephen received an undergraduate degree in Computer Science and Physics fromFlorida State University.

EVALUATION COPY


Accompanying Class Files

This manual comes with accompanying class files, which your instructor or salesrepresentative will point out to you. Most code samples and exercise and solutionfiles found in the manual can also be found in the class files at the locations indicatedat the top of the code listings.

Due to space limitations, the code listings sometimes have line wrapping, whereno line wrapping occurs in the actual code sample. This is indicated in the manualusing three greater than signs: >>> at the beginning of each wrapped line.

In other cases, the space limitations are such that we have inserted a forced linebreak in the middle of a word. When this occurs, we append the following symbolat the end of the line before the actual break: »»

EVALUATION COPY


Table of Contents1. Apache Web Server...............................................................................1

The Apache Web Server...................................................................................1Features............................................................................................................2Download..........................................................................................................2

Windows....................................................................................................2Linux.........................................................................................................2

Multi-Processing Modules.................................................................................4Building Apache from Source...........................................................................5Exercise 1: Installing and Testing Apache.........................................................6

2. Directory Structure..............................................................................13

Apache Directories.........................................................................................13The Role of Each Directory.............................................................................14

bin...........................................................................................................14cgi-bin.....................................................................................................14conf.........................................................................................................14error........................................................................................................14htdocs.....................................................................................................14icons........................................................................................................14include.....................................................................................................14lib............................................................................................................15modules..................................................................................................15

Document Root...............................................................................................15Exercise 2: Changing the Directory for the Log Files......................................16

3. httpd.conf Configuration....................................................................19

Contents of httpd.conf.....................................................................................19Coding Directives, Containers, and Comments..............................................19

Directives................................................................................................19Containers...............................................................................................20Comments...............................................................................................20

Scope of Directives.........................................................................................21Order of Evaluation of Containers...................................................................21Making Port Assignments...............................................................................22Specifying the Document Root.......................................................................22Including Files.................................................................................................23Modularization and Organization....................................................................23

Guidelines for Modularization..................................................................23Organization............................................................................................24

Verifying the Syntax of httpd.conf...................................................................25Updating httpd.conf between Releases..........................................................25Securing httpd.conf.........................................................................................26Exercise 3: Changing the Configuration..........................................................27

iVersion: 1.4.0. Printed: 2016-03-01.

Table of Contents

EVALUATION COPY


4. Load Modules......................................................................................31

Dynamic Shared Objects................................................................................31The Core Module............................................................................................32Static Modules................................................................................................32Building Modules from Source and Installing from a Package........................32Relationship between Modules and Directives...............................................32

LoadModule Directive.............................................................................32Using a Module's Directives....................................................................33

MIME Types and mod_mime..........................................................................34Exercise 4: Activating a Module......................................................................35

5. Security................................................................................................39

Secure Socket Layer.......................................................................................39Creating a Certificate..............................................................................39Configuring Apache for SSL....................................................................40Server Setup...........................................................................................41

Access Control................................................................................................41Host and IP.............................................................................................42

Authentication.................................................................................................43Basic Authentication................................................................................43Digest Authentication..............................................................................46

How Apache Implements Authorization..........................................................46LDAP Authentication and Authorization..........................................................47Limit Directive.................................................................................................48LimitExcept Directive......................................................................................48Exercise 5: Using Digest Authentication.........................................................49

6. Logging................................................................................................53

Logging Overview...........................................................................................53The Error Log..........................................................................................53Setting the Log Level..............................................................................53The Access, Agent, and Referer Logs....................................................54

CustomLog.....................................................................................................55Formatting the Log Record with LogFormat...................................................56Log Rotation...................................................................................................56Exercise 6: Generating Multiple Logs.............................................................59

© Copyright 2016 Webucator. All rights reserved.ii

Table of Contents

EVALUATION COPY


7. Configuring Directories......................................................................65

Directory Containers in httpd.conf..................................................................65The Options Directive.....................................................................................67Directory Indexing...........................................................................................68

IndexOptions...........................................................................................68DirectoryIndex.........................................................................................70Excluding Files with IndexIgnore.............................................................70DirectoryMatch........................................................................................71

.htaccess.........................................................................................................71Handling HTTP Status Codes with Error Documents.....................................72Location Containers........................................................................................73Exercise 7: Configuring a Directory and a Subdirectory.................................74

8. Virtual Hosts........................................................................................79

Virtual Host Container....................................................................................79Setting Up the Virtual Host.............................................................................79

IP-based..................................................................................................79Name-based...........................................................................................80Port-based..............................................................................................80

Exercise 8: Defining Name-based Virtual Hosts.............................................82

9. Using Aliases and Redirecting...........................................................87

Configuring an Alias for a URL.......................................................................87Redirect..........................................................................................................88Using mod_rewrite..........................................................................................89Exercise 9: Using Alias, Redirect and mod_rewrite for different Virtual Hosts.91

10. Performance Considerations...........................................................95

Adjusting httpd.conf........................................................................................95DNS Name Lookup.........................................................................................95Logging I/O.....................................................................................................95Web Applications............................................................................................96Network Issues...............................................................................................97Exercise 10: Tuning the Access Log...............................................................98

11. Customizing Request/Response Processing...............................101

Handlers and Requests................................................................................101Built-in Handlers...........................................................................................101Handler Directives.........................................................................................102

Location Directive..................................................................................102Files Directive........................................................................................102SetHandler............................................................................................102AddHandler...........................................................................................103RemoveHandler....................................................................................103

Filters............................................................................................................104Exercise 11: Using the type-map Handler.....................................................105

iiiVersion: 1.4.0. Printed: 2016-03-01.

Table of Contents

EVALUATION COPY


12. PHP...................................................................................................109

PHP..............................................................................................................109Download and Installation.............................................................................109

Windows................................................................................................109Linux.....................................................................................................109Apache Configuration...........................................................................110

Writing a Basic PHP Web Page....................................................................111Using MySQL with Apache and PHP............................................................113WordPress....................................................................................................114Exercise 12: Installing a PHP/MySQL Website.............................................115

13. Mod Proxy and Mod Proxy Balancer.............................................121

Apache as a Proxy Server............................................................................121Installing and Enabling Required Modules............................................121Using mod_proxy..................................................................................122Forward vs. Reverse Proxy...................................................................122mod_proxy_balancer.............................................................................123

Exercise 13: Testing mod_proxy and mod_proxy_balancer..........................126

© Copyright 2016 Webucator. All rights reserved.iv

Table of Contents

EVALUATION COPY


Apache Web Server1.

In this lesson, you will learn...

1. About the Apache Web Server.2. About the functionality of the Web Server.3. How to download Apache.4. How to install the Web Server on Windows and Linux.5. About testing the installation.

The Apache Web Server is the one of the oldest and most popular web servers.According to various estimates, more than one-half of all websites on the WorldWide Web are hosted by the Apache Web Server.

The Apache Web Server is often referred to as simply Apache.

The popularity of Apache is due to the web server's functionality and speed. Theweb server offers a broad range of capability including virtual hosting, MIME typespecification, directory mapping, securing web resources, and logging configuration.The speed of Apache is due in part to the fact that it is written in C and can beassembled from modules.

The Apache Web Server1.1

Apache was initially developed by Rob McCool at the NCSA (National Center forSupercomputing Applications) in early 1995. By the end of the year, a group ofengineers led by Brian Behlendorf and Cliff Skolnick created the first "official"release of Apache. The group had assembled the web server from "patches" and theserver became known as "a patchy" web server. Eventually, the word "Apache" wasused as the server's official name.

By 1999, the Apache Software Foundation was formed and the Apache Web Serverbecame generally available as the foundation's first open-source product.

Page 1 of 128Version: 1.4.0. Printed: 2016-03-01.

Apache Web Server

EVALUATION COPY


Features1.2

Apache offers a broad range of features including virtual hosting, server-sidelanguage support, authentication and authorization, SSL support, and configurableerror messages.

The functional capability is delivered through modules that can be either compiledinto the server software or configured as dynamic objects. This modular designallows administrators to adapt the web server to the needs of an organization.

Download1.3

This part of the lesson will guide you in downloading the Apache Web Server forWindows and Linux. You will install the server in the lesson exercise for Windows.The Linux installation will be included in this topic.

Windows

Apache is available for download from a number of websites, includingwww.apache.org.

This course is written for Apache 2.4. In this lesson, we will focus on downloadingApache 2.4.

Apache 2.4. downloads for 32-bit and 64-bit Windows platforms are available atwww.apachelounge.com/download as zip files.

Download the 32-bit distribution for compatibility with the PHP DLL offered byApache Lounge.

After downloading the zip file, extract the zip to c:/apache24.

© Copyright 2016 Webucator. All rights reserved.Page 2 of 128

Apache Web Server

EVALUATION COPY


www.apache.org

www.apachelounge.com/download

Linux

Distributions of Linux such as Redhat's Fedora are shipped with Apache. In addition,most Linux distribution vendors provide a pre-built RPM for Apache.

If your distribution of Linux does not include Apache 2.4, then you can downloadthe source tar file from http://httpd.apache.org/download.cgi#apache24. The nameof the file is httpd-2.4.3.tar.bz2.

The source file can be converted into an RPM file using the following command:

rpmbuild -tb httpd-2.4.3.tar.bz2

Several RPMs will be generated including the httpd RPM (httpd-2.4.3-1.i686.rpm).

Install the httpd RPM using the following command:

rpmbuild -U httpd-2.4.3-1.i686.rpm

Start the server:


Apache Web Server

EVALUATION COPY


http://httpd.apache.org/download.cgi#apache24

service httpd start

Point your browser to http://localhost. You should see the welcome page:

Multi-Processing Modules1.4

A Multi-Processing Module (MPM) enables Apache to work efficiently with theoperating system. The MPM handles binding to network ports, handling requestsand dispatching child processes to handle the requests.

Apache is shipped with an MPM compiled into the server. The following tableindicates the default MPM for each OS:

Operating SystemMPM

Netwarempm_netware

OS/2mpmt_os2

UNIX/Linuxprefork, worker or event

Windowsmpm_winnt


Apache Web Server

EVALUATION COPY


http://localhost

The mpm_winnt MPM is compiled from mpm_winnt.c. This module uses asingle control process that creates a child process to create threads to handle requests.

The prefork MPM is compiled from prefork.c. This module uses a singlecontrol process that creates child processes that listen for requests. The requests areserviced by a child process. Several idle, or spare, processes are maintained byApache so that a new process does not need to be forked to service a client request.The maximum number of child processes ("workers") can be set using theMaxRequestWorkers directive.

The worker MPM is compiled from worker.c. This module uses a multi-processmulti-threaded server to create threads to serve requests. A parent process launcheschild processes and each child process creates a fixed number of threads to handlerequests in addition to a listener thread to listen for requests. The maximum numberof threads ("workers") that can be created is set using the MaxRequestWorkersdirective. The maximum number of threads a child process can create is set usingthe ThreadsPerChild directive.

The settings for each MPM are located in APACHE_HOME/conf/extra/httpd-mpm.conf.

Building Apache from Source1.5

For Linux and UNIX environments, Apache can be compiled from the C sourcefiles. This presents the opportunity to statically compile modules into the Apachebinary.

The procedure for compiling Apache consists of the following steps:

1. Download the Apache server.2. Extract the source from the Apache server tarball.3. Configure the Apache source tree.4. Perform the compile.5. Install the package.6. Customize the configuration.7. Test by starting the Apache server.

For detail on these steps go to http://httpd.apache.org/docs/current/install.html.


Apache Web Server

EVALUATION COPY


http://httpd.apache.org/docs/current/install.html

Installing and Testing ApacheExercise 115 to 25 minutes

In this exercise, you will install and test the Apache Web Server on Windows.

1. Follow the instructions in the text to download the Apache installation zip file.2. Extract the zip file to c:/apache24.3. Open c:/apache24/conf/httpd.conf for edit in Notepad or similar text editor.

Locate the line that starts with ServerName. Edit this line as shown below:

ServerName localhost

This line is commented in the file. It is optional but you uncomment it.4. Save the file.5. Next, you will update the path environment variable to contain a reference

to the binary folder under Apache. In the Control Panel, select System andthen select Advanced system settings.


Apache Web Server

EVALUATION COPY


6. The System Properties panel will be displayed. Click the Advanced tab:

7. Click Environment Variables.... The environment variables will be displayed:


Apache Web Server

EVALUATION COPY


8. Select the Path variable from the System Variables and then click the Edit...button.

9. Scroll to the beginning of the Variable value: and enter the following text:

c:/apache24/bin;


Apache Web Server

EVALUATION COPY


10. Compare your result with the following:

11. Click OK. Click OK on the Environment Variables panel.12. Start a command prompt by right-clicking on the icon and selecting "Run as

Administrator". To install Apache as a Windows service, type the followingcommand:

httpd -k install

You can run all commands to Apache in this command shell.13. Apache is now installed as a service with the name Apache24.14. Start the web server with the following command:

httpd -k start


Apache Web Server

EVALUATION COPY


15. Point your browser to http://localhost. You should see the welcome page:

16. You can stop the web server with this command:

httpd -k stop


Apache Web Server

EVALUATION COPY


http://localhost

Conclusion1.6In this lesson, you have learned:

• About the Apache Web Server.• About the Functional Purpose of the Web Server.• How to download Apache.• How to install the Web Server on Windows and Linux.• About testing the installation.


Apache Web Server

EVALUATION COPY


Virtual Hosts8.

In this lesson, you will learn...

1. About the Virtual Host container.2. How to set up an IP-based virtual host.3. How to set up an name-based virtual host.4. How to set up a port-based virtual host.

A web host is essentially a container for web pages. Additional containers can beestablished on one Apache Web Server as "virtual hosts." A virtual host does notreside on a dedicated server, hence the adjective "virtual."

A virtual host is defined in a Virtual Host container. The document root for the hostis specified within the container as well as logging destinations and other host-specificitems.

A given virtual host must be identified by a unique IP, name, or port number.

Virtual Host Container8.1

A virtual host is defined using a Virtual Host container. The VirtualHost directivedefines this container. The VirtualHost directive specifies the address of thehost and can be an IP address, domain name, a wildcard character ("*") or_default_ (alias for the wildcard character).

The _default_ identifies the host container that Apache selects if the incominghost address does not match any other container.

Setting Up the Virtual Host8.2

IP-based

An IP-based virtual host is identified by an IP address on the VirtualHostdirective. Consider the following example:


Virtual Hosts

EVALUATION COPY


<VirtualHost 190.1.2.3:80> ServerName www.classserver.com DocumentRoot c:/classserver/docs ErrorLog logs/ErrorLog</VirtualHost>

The IP address is "190.1.2.3" and the port is "80". If a request contains this IP andport, then Apache will apply the directives within the container to this request.

The document root is applicable to this virtual host and overrides anyDocumentRoot directive elsewhere in the configuration file. The same is true forthe other directives specified in this container.

Name-based

A name-based virtual host is identified by the server name provided in the VirtualHost container. The the wildcard character (or _default_) is present instead ofan IP address

Here is an example:

<VirtualHost *:80> ServerName www.classserver.com DocumentRoot c:/classserver/docs ErrorLog logs/ErrorLog</VirtualHost>

The IP address is not specified. The name in the request will be compared to theserver name that is present within the Virtual Host section. If matched, then Apachewill apply the directives within the container to this request.

If a match does not occur (i.e., Apache cannot match the request with a server namein a virtual host), then Apache will select the first container.


Port-based

A port-based virtual host is identified by the port number provided prior to theVirtual Host container. Again, we consider an example:


Virtual Hosts

EVALUATION COPY


Listen 80<VirtualHost *:80> ServerName www.classserver.com DocumentRoot c:/classserver/docs ErrorLog logs/ErrorLog</VirtualHost>Listen 90<VirtualHost *:90> ServerName www.classserver.com DocumentRoot c:/classserver2/docs ErrorLog logs/ErrorLog</VirtualHost>



Virtual Hosts

EVALUATION COPY


Defining Name-based Virtual HostsExercise 820 to 30 minutes

In this exercise, you will define multiple name-based virtual hosts.

1. Stop the Apache Web Server.2. Extract virtual-hosts/Exercises/apacheadmin.zip to APACHE_HOME. The

extract operation will create the ApacheAdmin folder.3. Open httpd.conf for edit.4. Locate the Directory container for htdocs. Skip to the last line of the container.5. Insert the following Directory container:

<Directory "c:/Apache24/apacheadmin*"> Require all granted</Directory>

The wildcard (*) is a placeholder for 0 or more characters. Therefore, asubdirectory name of "apacheadmin2" will also be matched in this container.

6. Insert the following Virtual Host container:

<VirtualHost *:80> ServerName www.ApacheAdmin.com DocumentRoot "c:/Apache24/apacheadmin"</VirtualHost>

7. Save your changes. Leave the edit session open as you will be making additionalchanges to the configuration file.

8. A domain name of www.ApacheAdmin.com must be assigned to theloopback IP (127.0.0.1) in order to test your virtual host.

9. The procedure for accomplishing this task varies depending on your operatingsystem. For Windows, you will add the following line to c:/Windows/System32/drivers/etc/host. You may need to open a command prompt asAdministrator by right-clicking the command prompt in order to edit this file:

127.0.0.1 www.ApacheAdmin.com

10. For Fedora (Linux), you will change the host name as follows in etc/sysconfig/network:

HOSTNAME=www.ApacheAdmin.com

11. Start Apache.12. In your browser, go to: http://www.ApacheAdmin.com


Virtual Hosts

EVALUATION COPY


http://www.ApacheAdmin.com

13. The following page will be displayed:

14. Extract virtual-hosts/Exercises/apacheadmin2.zip to APACHE_HOME. Theextract operation will create the ApacheAdmin2 folder.

15. Return to the edit session.16. Insert the following Virtual Host container after the container you entered

earlier in the exercise:

<VirtualHost *:80> ServerName www.ApacheAdmin2.com DocumentRoot "c:/Apache24/apacheadmin2"</VirtualHost>

17. Save your changes.18. You will enter a new host name. For Windows, add the following line to

c:/Windows/System32/drivers/etc/host:

127.0.0.1 www.ApacheAdmin2.com

19. For Fedora (Linux), change the host name as follows in etc/sysconfig/network:

HOSTNAME=www.ApacheAdmin2.com


Virtual Hosts

EVALUATION COPY


20. In your browser, go to http://www.ApacheAdmin2.com21. The following page will be displayed:


Virtual Hosts

EVALUATION COPY


http://www.ApacheAdmin2.com

Conclusion8.3In this lesson, you have learned:

• About the Virtual Host section.• How to set up an IP-based virtual host.• How to set up an name-based virtual host.• How to set up a port-based virtual host.


Virtual Hosts

EVALUATION COPY


7400 E. Orchard Road, Suite 1450 NGreenwood Village, Colorado 80111

Ph: 303-302-5280www.ITCourseware.com

9-38-00175-000-05-15-18

EVALUATION COPY
