Important linux tips ( to read )
1) If you specify both deny from all and allow from all, what will be the default action of Apache?
deny will be taken first.
order allow, deny # connection will be denied
order deny, allow # connection will be allowed
2) what does ./configure , make and make in stall do
http://www.codecoffee.com/tipsforlinux/articles/27.html
3) what are shared libaries abs ldconfig or ld.so
http://www.linux.com/archive/feature/114007
4) what is openssl
SSL stands for Secure Sockets Layer. SSL's most common job, in the real world, is to encrypt the contents of web forms. This greatly decreases the chances that your credit card number, when entered into an online store's web form, ends up in somewhere else, other than the store's database. OpenSSL is the open source version of this and is available under the Apache-style license for free commercial and non-commercial use.
Since you're installing Apache, that means that you'll be on the receiving end of sensitive information. To help OpenSSL process this information, we'll need the help of a package called 'mm'. This is available at: http://www.ossp.org/pkg/lib/mm/. We'll need to compile and install this first. Get the tarball for 'mm' and untar it in our aforementioned apache_install directory. Now we're ready to configure, compile and install it. Do the following as a normal user:
./configure --disable-shared
Then:
make
and finally, as root.
make install
This will install the 'mm' libraries that OpenSSL can use to work more efficiently. Now we'll do the same for OpenSSL. You can pick up the source for OpenSSL from http://www.openssl.org/source/ Pick up the source tarball and untar it in our apache_install directory.
5) Fine tuning my.cnf
http://www.linuxweblog.com/tune-my.cnf
6) what is stiky bit
http://osr507doc.sco.com/en/OSAdminG/ssC.stickydirs.html
6) what is server type directive in apache ?
The ServerType directive sets how the server is executed by the system. Type is one of
inetd
The server will be run from the system process inetd; the command to start the server is added to /etc/inetd.conf
standalone
The server will run as a daemon process; the command to start the server is added to the system startup scripts. (/etc/rc.local or /etc/rc3.d/....)
Inetd is the lesser used of the two options. For each http connection received, a new copy of the server is started from scratch; after the connection is complete, this program exits. There is a high price to pay per connection, but for security reasons, some admins prefer this option. Inetd mode is no longer recommended and does not always work properly. Avoid it if at all possible.
Standalone is the most common setting for ServerType since it is far more efficient. The server is started once, and services all subsequent connections. If you intend running Apache to serve a busy site, standalone will probably be your only option.
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment