On Wed, 2008-07-30 at 18:12 -0400, Gene Heskett wrote: > Wanting to see who might have visited my simple web page, I installed > awstats from the fedora repo today. > > The awstats selinux helper seems to be an empty file, yumex win't dl it or > install it even when checked. > > >From the yumex screen: > > 7:59:02 : Package Queue: > 17:59:02 : Packages to install > 17:59:02 : ---> awstats-selinux-6.7-1.fc8.noarch > 17:59:02 : Preparing for install/remove/update > 17:59:02 : --> Preparing for install > 17:59:02 : Package awstats-selinux is obsoleted by awstats, trying to > install awstats-6.8-1.fc8.noarch instead > 17:59:02 : Package awstats-6.8-1.fc8.noarch already installed and latest > version > 17:59:06 : Error in Dependency Resolution > 17:59:06 : Success - empty transaction > > which is self-explanatory. > > But on attempting to look at my page at localhost, I get connection > refused. > > So I as root, do:service httpd restart > Stopping httpd: [FAILED] > Starting httpd: (13)Permission denied: httpd: could not open error log > file /etc/httpd/logs/error_log. > Unable to open logs > [FAILED] Sounds more like Apache problems, not AWStats, this is Apache failing to start. AWStats just reads the logs, *separately*. As a regular cron job, as I recall. Though it can be fired up on demand.

NB: /etc/httpd/logs/ is a symlink to /var/log/httpd

> And an selinux denial that says I can fix it with this: > #> setsebool -P httpd_unified=1 > > But I've now executed that line several times without success. > > I've also gone through the httpd stuff and made much of it 0644 and owned > by apache:apache. Why and what? Configuration and log files should be owned by root, files to be served out of the website should be owned by the author.

Are you still using your computer as root, and messing up file and directory ownerships as you go along?

Tim: >> NB: I've done this with a spinning headache, so you ought to be able to >> manage this as well, without my headache. Gene Heskett: > ouch, like my aching back, thats not good at all, mine is from 70+ years > of abuse & 25 extra pounds, does your's have a reason? Dunno if my headache's from the cold I've got, or the medication for it. I do know why my back aches - getting stuck, many years ago, hauling something heavy out of the back of a car... >> I mention an alternative stats program > > I see that is installed, but finding a viewer for it seems to be purely by > accident, it opened ELinks, whatever that is, when I clicked on its july > report from within midnight commander. How did you access it? Elinks is a text-only web browser, rather like Lynx, but also supports some rudimentary tables or frames layout. > Grumble... Question for the webalizer folks then? Why is there not a > link to the viewer in the k-menu's? Well, actually, one doesn't usually access such things through the system menus, but through your web browser. What would be needed is preloading the bookmarks on any browser that's on your system, with <http://localhost/usage>;. But then we don't do anything similar for all the cgi-scripts that might be included with a web browser. It's another of those read the manual / read the configuration file / look at its scripts, things. It used to be that such things as statistic analysers were programs that you'd install by hand, because you wanted it, and would already have known about it. > Having it installed, but effectively unavailable doesn't make a lot of > sense to me. If there had been such a menu entry, its likely I would have > used it rather than doing a freshmeat search for the newest, highly rated > such tool & then went hunting in yumex for a suitable rpm. Over the years I'd used webalizer, finding it's simple one page summary rather useful. But more recently, preferred AWStats features. I'd left it alone, before, as being rather convoluted. But when I changed webhosts, they gave me with a poorly configured webalizer, and a fairly well configured AWStats. And since I can't really reconfigure them, thanks to how the host runs, I just went with the flow. One thing that annoys me about them both, is the referrer stats. The links for who referred to you is sanitised, somewhat. So you do have to manually check your logs to find exactly what pages have referred to you. You just know, when your stats have suddenly increased for one month, that you've become the address on one of those random "exit this porn site" buttons. ;-) > ls -l /etc/awstats/: > -rw-r--r-- 1 root root 62137 2008-07-30 17:28 > awstats.coyote.coyote.den.conf -rw-r--r-- 1 root root 62130 2008-07-21 > 17:17 awstats.localhost.localdomain.conf -rw-r--r-- 1 root root 62130 > 2008-07-21 17:17 awstats.model.conf > > And I haven't touched what the rpm installed. To cut down on workload, and avoid meaningless data/traffic, I'd remove all but one, and customise it to suit your needs. Else, once an hour, all three configuration files will be used to read your stats. > Since I'm running an oddball port # to the outside world, I was rather > surprised to see the googlebot was there every day this last month. I can think of a few things: Faked user-agent string, hoping that the googlebot might be allowed in where ordinary clients might shooed away. And if you've ever mentioned the address for your server somewhere in public, it'll have been indexed. Big brother is watching you, and I don't mean that crappy TV show... ;-)

>>>> Are you still using your computer as root... > > Some of this started when I tried to build OpenMovieEditor, and F8 > apparently doesn't have enough GLX stuff to build it, 8 OpenGL > functions seem to have been stripped from the library by RedHat. > Reason? Damned if I know.

I'd still stick with using your computer as yourself, just use another terminal as root for configuration issues. Especially if you're opening your computer up to the world as a webserver. You do want as much protection as you can manage, in that situation.

Around here, we have neighbours who like playing with power tools all week and weekend long, lawn mowers, chainsaws, angle grinders, and other things that I haven't figured out. Compare that to me - the other week I pruned several trees, and removed a whole one, using nothing other than a hand saw, branch clippers, and brute force. The only noise I subjected my neighbours to was the occasional swear word.

Greetings; Wanting to see who might have visited my simple web page, I installed awstats from the fedora repo today. The awstats selinux helper seems to be an empty file, yumex win't dl it or install it even when checked. >From the yumex screen: 7:59:02 : Package Queue: 17:59:02 : Packages to install 17:59:02 : ---> awstats-selinux-6.7-1.fc8.noarch 17:59:02 : Preparing for install/remove/update 17:59:02 : --> Preparing for install 17:59:02 : Package awstats-selinux is obsoleted by awstats, trying to install awstats-6.8-1.fc8.noarch instead 17:59:02 : Package awstats-6.8-1.fc8.noarch already installed and latest version 17:59:06 : Error in Dependency Resolution 17:59:06 : Success - empty transaction which is self-explanatory. But on attempting to look at my page at localhost, I get connection refused. So I as root, do:service httpd restart Stopping httpd: [FAILED] Starting httpd: (13)Permission denied: httpd: could not open error log file /etc/httpd/logs/error_log. Unable to open logs [FAILED] And an selinux denial that says I can fix it with this: #> setsebool -P httpd_unified=1 But I've now executed that line several times without success. I've also gone through the httpd stuff and made much of it 0644 and owned by apache:apache. Obviously I'm suffering from the local heat and missing the flashing red light here, so what is next folks? It was all working AFAIK before I installed awstats, when running kernel 2.6.26 just yesterday, but now booted to 2.6.27-rc1. Dunno which is the culprit. Help!

-----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org iEYEARECAAYFAkiXV2cACgkQrlYvE4MpobPtJwCffwXWURuSA3W9wWFap8rEQUnn iIMAoJ2/yI5CEcn5KBipFgRCSF92gqLQ =OIdW -----END PGP SIGNATURE-----

On Thu, 2008-07-31 at 14:58 +0930, Tim wrote: > I've got it running, and with no errors. Though I had to tweak > two settings in a /etc/awstats/awstats.localhost.conf configuration > file to suit my website (localhost, for this test - setting the > sitedomain directive to localhost, and for it to *NOT* skip results > from 127.0.0.1, by putting some other bogus IP in the skiphosts > directive). You *might* want to add the following tweak, *if* you don't want viewing the stats to be counted as part of the website stats. Find the SkipFiles directive (in the site awstats config file), and include the following: REGEX[^\/awstats] Mine looks like the following, since I've not skipped anything else: SkipFiles="REGEX[^\/awstats]"^M

I haven't removed any of the MS-DOS style line endings (the trailing ^M characters), as it seems to work fine as it is.

I've got it running, and with no errors. Though I had to tweak two settings in a /etc/awstats/awstats.localhost.conf configuration file to suit my website (localhost, for this test - setting the sitedomain directive to localhost, and for it to *NOT* skip results from 127.0.0.1, by putting some other bogus IP in the skiphosts directive).

Wanting to see who might have visited my simple web page, I installed awstats from the fedora repo today. The awstats selinux helper seems to be an empty file, yumex win't dl it or install it even when checked. >From the yumex screen: 7:59:02 : Package Queue: 17:59:02 : Packages to install 17:59:02 : ---> awstats-selinux-6.7-1.fc8.noarch 17:59:02 : Preparing for install/remove/update 17:59:02 : --> Preparing for install 17:59:02 : Package awstats-selinux is obsoleted by awstats, trying to install awstats-6.8-1.fc8.noarch instead 17:59:02 : Package awstats-6.8-1.fc8.noarch already installed and latest version 17:59:06 : Error in Dependency Resolution 17:59:06 : Success - empty transaction which is self-explanatory. But on attempting to look at my page at localhost, I get connection refused. So I as root, do:service httpd restart Stopping httpd: [FAILED] Starting httpd: (13)Permission denied: httpd: could not open error log file /etc/httpd/logs/error_log. Unable to open logs [FAILED]

And an selinux denial that says I can fix it with this: #> setsebool -P httpd_unified=1 But I've now executed that line several times without success. I've also gone through the httpd stuff and made much of it 0644 and owned by apache:apache.