Apache-2.4.41

#### Beyond Linux® From Scratch (systemd Edition) - Version 9.0

### Chapter 20. Major Servers

- Prev

  Major Servers

- Next

  BIND-9.14.5

- Up
- Home

# Apache-2.4.41

## Introduction to Apache HTTPD

The Apache HTTPD package contains an open-source HTTP server. It is useful for creating local intranet web sites or running huge web serving operations.

This package is known to build and work properly using an LFS-9.0 platform.

### Package Information

- Download (HTTP): https://archive.apache.org/dist/httpd/httpd-2.4.41.tar.bz2

- Download MD5 sum: dfc674f8f454e3bc2d4ccd73ad3b5f1e

- Download size: 6.7 MB

- Estimated disk space required: 131 MB

- Estimated build time: 0.9 SBU

### Additional Downloads

- Required patch: http://www.linuxfromscratch.org/patches/blfs/9.0/httpd-2.4.41-blfs_layout-1.patch

### Apache HTTPD Dependencies

#### Required

Apr-Util-1.6.1 and PCRE-8.43

#### Optional

Berkeley DB-5.3.28, Doxygen-1.8.16, libxml2-2.9.9, Lua-5.3.5, Lynx-2.8.9rel.1 or Links-2.19 or ELinks, nghttp2-1.39.2, OpenLDAP-2.4.48 (Apr-Util-1.6.1 needs to be installed with ldap support), rsync-3.1.3, and Distcache

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/apache

## Installation of Apache HTTPD

For security reasons, running the server as an unprivileged user and group is strongly encouraged. Create the following group and user using the following commands as `root`:

    groupadd -g 25 apache &&
    useradd -c "Apache Server" -d /srv/www -g apache \
            -s /bin/false -u 25 apache

Build and install Apache HTTPD by running the following commands:

    patch -Np1 -i ../httpd-2.4.41-blfs_layout-1.patch             &&

    sed '/dir.*CFG_PREFIX/s@^@#@' -i support/apxs.in              &&

    ./configure --enable-authnz-fcgi                              \
                --enable-layout=BLFS                              \
                --enable-mods-shared="all cgi"                    \
                --enable-mpms-shared=all                          \
                --enable-suexec=shared                            \
                --with-apr=/usr/bin/apr-1-config                  \
                --with-apr-util=/usr/bin/apu-1-config             \
                --with-suexec-bin=/usr/lib/httpd/suexec           \
                --with-suexec-caller=apache                       \
                --with-suexec-docroot=/srv/www                    \
                --with-suexec-logfile=/var/log/httpd/suexec.log   \
                --with-suexec-uidmin=100                          \
                --with-suexec-userdir=public_html                 &&
    make

This package does not come with a test suite.

Now, as the `root` user:

### Note

This package does not install properly using DESTDIR techniques as an unpriviledged user.

    make install  &&

    mv -v /usr/sbin/suexec /usr/lib/httpd/suexec &&
    chgrp apache           /usr/lib/httpd/suexec &&
    chmod 4754             /usr/lib/httpd/suexec &&

    chown -v -R apache:apache /srv/www

## Command Explanations

sed '/dir.*CFG_PREFIX/s@^@#@'...: Forces the apxs utility to use absolute pathnames for modules, when instructed to do so.

`--enable-authnz-fcgi`: Build FastCGI authorizer-based authentication and authorization (mod_authnz_fcgi.so fast CGI module).

`--enable-mods-shared="all cgi"`: The modules should be compiled and used as Dynamic Shared Objects (DSOs) so they can be included and excluded from the server using the run-time configuration directives.

`--enable-mpms-shared=all`: This switch ensures that all MPM (Multi Processing Modules) are built as Dynamic Shared Objects (DSOs), so the user can choose which one to use at runtime.

`--enable-suexec`: This switch enables building of the Apache suEXEC module which can be used to allow users to run CGI and SSI scripts under user IDs different from the user ID of the calling web server.

`--with-suexec-*`: These switches control suEXEC module behavior, such as default document root, minimal UID that can be used to run the script under the suEXEC. Please note that with minimal UID 100, you can't run CGI or SSI scripts under suEXEC as the `apache` user.

... /usr/lib/httpd/suexec: These commands put suexec wrapper into proper location, since it is not meant to be run directly. They also adjust proper permissions of the binary, making it setgid `apache`.

chown -R apache:apache /srv/www: By default, the installation process installs files (documentation, error messages, default icons, etc.) with the ownership of the user that extracted the files from the tar file. If you want to change the ownership to another user, you should do so at this point. The only requirement is that the document directories need to be accessible by the httpd process with (r-x) permissions and files need to be readable (r--) by the `apache` user.

## Configuring Apache

### Config Files

`/etc/httpd/httpd.conf` and `/etc/httpd/extra/*`

### Configuration Information

See file:///usr/share/httpd/manual/configuring.html for detailed instructions on customising your Apache HTTP server configuration file.

### Systemd Unit

If you want the Apache server to start automatically when the system is booted, install the `httpd.service` unit included in the blfs-systemd-units-20180105 package.

    make install-httpd

## Contents

Installed Programs: ab, apachectl, apxs, checkgid, dbmmanage, fcgistarter, htcacheclean, htdbm, htdigest, htpasswd, httpd, httxt2dbm, logresolve, rotatelogs, and suexec
Installed Libraries: Several libraries under /usr/lib/httpd/modules/
Installed Directories: /etc/httpd, /srv/www, /usr/include/httpd, /usr/lib/httpd, /usr/share/httpd, /var/log/httpd, and /var/run/httpd

### Short Descriptions

ab | is a tool for benchmarking your Apache HTTP server.
apachectl | is a front end to the Apache HTTP server which is designed to help the administrator control the functioning of the Apache httpd daemon.
apxs | is a tool for building and installing extension modules for the Apache HTTP server.
checkgid | is a program that checks whether it can setgid to the group specified. This is to see if it is a valid group for Apache2 to use at runtime. If the user (should be run as superuser) is in that group, or can setgid to it, it will return 0.
dbmmanage | is used to create and update the DBM format files used to store usernames and passwords for basic authentication of HTTP users.
fcgistarter | is a tool to start a FastCGI program.
htcacheclean | is used to clean up the disk cache.
htdbm | is used to manipulate the DBM password databases.
htdigest | is used to create and update the flat-files used to store usernames, realms and passwords for digest authentication of HTTP users.
htpasswd | is used to create and update the flat-files used to store usernames and passwords for basic authentication of HTTP users.
httpd | is the Apache HTTP server program.
httxt2dbm | is used to generate DBM files from text, for use in RewriteMap.
logresolve | is a post-processing program to resolve IP-addresses in Apache's access log files.
rotatelogs | is a simple program for use in conjunction with Apache's piped log file feature.
suexec | allows users to run CGI and SSI applications as a different user.

Last updated on 2019-08-20 14:28:58 -0700

- Prev

  Major Servers

- Next

  BIND-9.14.5

- Up
- Home