Custom user data being included in httpd.conf in EA4

verdon

• April 16, 2016 08:34

Hi, I 'seem' to be having an issue with custom user data includes, actually being included in the httpd.conf. Specifically, I use 'ConfigServer ModSecurity Control' for whitelisting the occasional modsec rule, for specific domains... has always worked in the past. I have verified that it is creating the files /etc/apache2/conf.d/userdata/std/2_4/username/modsec.conf /etc/apache2/conf.d/userdata/ssl/2_4/username/modsec.conf and I have verified that it is adding the line to the virtual domain container Include "/etc/apache2/conf.d/userdata/std/2_4/username/*.conf" and it seems to be restarting apache, but I don't believe the contents of /etc/apache2/conf.d/userdata/std/2_4/username/modsec.conf are actually being included. Can anyone suggest a way I can verify what's going on?

• 

  verdon

  • April 17, 2016 16:11

  I guess what I'm really asking is, is there a way to see the currently loaded httpd configuration, including the contents of all include directives?

  0
• 

  cPanelMichael

  • April 18, 2016 15:32

  Hello :) The plugin you are using lists support for EasyApache 4: Appendix A: Testing Tools - OWASP Thank you.

  0
• 

  verdon

  • April 18, 2016 18:04

  Thanks @cPanelMichael, I did find a simple test case and was able to verify that ConfigServer's wonderful tool is indeed working as expected. My client must have had something else going on, that I haven't been able to reproduce yet. That said, I'd still be interested if anyone knew a reliable means to get the complete content (including the content of all includes) from the currently loaded httpd configuration.

  0
• 

  cPanelMichael

  • May 03, 2016 20:34

  You may find the following thread on StackOverflow helpful, as it discusses this topic: How can I view the complete httpd configuration? Thank you.

  0
• 

  verdon

  • May 05, 2016 17:20

  Thanks. I'll revisit that. I took a quick glance at it before, but thought it was missing the user includes... may have been me though :-)

  0
• 

  verdon

  • May 05, 2016 18:28

  It's a good post. Unfortunately, the python script mentioned in it looks like a good idea but doesn't work. I'll have to see if I can learn enough python to figure out why ;-) ;-) It looks pretty straight fwd.

  0

Please sign in to leave a comment.