Red Hat NETWORK PROXY SERVER 3.7 - Bedienungsanleitung PDF herunterladen (Seite 29)

2.2 httpd.conf 19

Please Note:Unless you know exactly what you’re doing, don’t set

the User to root,which will create some big securityholes for your

secure web server.

The parent httpd process ﬁrst runs as root during normal opera-

tions, but is then immediately handed off to the nobody user. The

server has to start as root because it needs to bind to a port be-

low 1024 (the default port for secure web communications is port

443, the default port fornon-secure web communications is port 80).

Ports below 1024 are reserved for system use, so they can’t be used

by anyone but root. Once the server has attached itself to its port,

it hands the process off to the User before it accepts any connection

requests.

Group The Group setting is similar to the User setting. The Group sets

the group under which the server will answer requests. The default

Group is also nobody.

ServerAdmin ServerAdmin should be the email address of the secure

web server’s administrator. This emailaddresswill show upin error

messages on server-generatedweb pages, so users can reporta prob-

lem by sending email to the server administrator. ServerAdmin it

set by default to root@localhost, but you may want to change it

to your webmaster’s email address.

ErrorLog ErrorLog names the ﬁle where server errors are logged. The

error log ﬁle for your non-secure web server is located in

/etc/httpd/logs and is named error log. The error log ﬁle

for your secureweb serveris locatedinthe /var/log/httpd direc-

tory and is named error log-ssl.

Error logs are a good place to look if your web server ever generates

any errors or fails and you aren’t sure what happened.

CustomLog CustomLog is a way of deﬁning a logﬁle format. In your

secure web server’s default conﬁguration, CustomLog deﬁnes the

log ﬁle where accesses to your non-secure web server are recorded:

/etc/httpd/logs/access log. You’ll need to know the location

of this ﬁle if you want to generate any access-based server perfor-

mance statistics for your non-secure web server. Analog, which you

may install along with your secure web server, is a program which

parses the access log to generate statistics.

1 2 ... 24 25 26 27 28 29 30 31 32 33 34 ... 100 101

Keine Kommentare

Red Hat NETWORK PROXY SERVER 3.7 - Bedienungsanleitung Seite 29