[Resolved] Apache question

goldbug

This doesn't directly relate to PHP, and it might fit better in another forum, but there's lots of clever people in here, thought I'd check with you folks first....

My problem: I want to mask/change the server name/version returned by Apache in the headers, at an apache-wide level.

Previously, I've simply added something like:

Header set Server "foobar"

... to httpd.conf

But since 2.0.48 came out, that no longer works.

Anyone know another way?

jayant

well i use an earlier version
just check up in the docs, since i saw in the docs only the method of changing the server name.

you can always get the source, make the change in the source and compiler the binary 🙂

goldbug

Originally posted by jayant
well i use an earlier version
just check up in the docs, since i saw in the docs only the method of changing the server name.

you can always get the source, make the change in the source and compiler the binary 🙂

Can't seem to find anything in docs. (The changelog for 2.0.48 does mention disabling the ability for modules/CGI to set 'Server' using the Header directive, for proxy reasons)
Can't seem to find any place in the source where it's defined (well, a simple 'grep -R 48 ' couldn't -- 1.3.xx was easy to find/change), but it has* to be in there somewhere, I'll look again later.

jayant

Searched using gg:-
http://webmaster.info.aol.com/apache.html
http://www.port80software.com/surveys/top1000webservers/masking

both these say that you will do
Header set Server "foobar"
but u need to have mod_header extension there installed/compiled. or you can load it dynamically using

LoadModule headers_module path/to/mod_headers.so
AddModule mod_headers.c

the same way you do for PHP.

http://httpd.apache.org/docs/mod/mod_headers.html

jayant

docs page for apache 2 is
http://httpd.apache.org/docs-2.0/mod/mod_headers.html

above one was for 1.3

goldbug

Alright, you need to read THIS:
http://www.apache.org/dist/httpd/Announcement2.html

especially the line:

Don't respect the Server header field as set by modules and CGIs. As with 1.3, for proxy requests any such field is from the origin server; otherwise it will have our server info as controlled by the ServerTokens directive. [Jeff Trawick]

I HAVE read the proper documentation many moons ago, and DO have mod_headers compiled in. What you posted above did work, until 2.0.48 came out.

Note the above quote, "...set by modules...", -- afaik, mod_headers qualifies for such restriction.

What I'm looking for is an alternative, given that the original Header set Server method no longer seems to work.

goldbug

Well, I can't seem to solve this with directives, but good ol' source hacking gets the job done.

For reference, the file to edit is: include/ap_release.h

If anybody figures another way out, please chime in, going to make it resolved in the meantime.