Topic
  • 9 replies
  • Latest Post - ‏2017-01-14T14:24:42Z by Eric Covener
Ebrahim_kh63
Ebrahim_kh63
3 Posts

Pinned topic custom IHS installaton

‏2012-02-08T08:26:59Z |
How can I compile and install IHS 7 or later using custom external libraries such as pcre 7.9 and APR 1.4. pcre and APR version of default installation of IHS 7 is low and some third-party modules could not work with these libraries.
Updated on 2012-02-13T12:08:17Z at 2012-02-13T12:08:17Z by SystemAdmin
  • SystemAdmin
    SystemAdmin
    3903 Posts

    Re: custom IHS installaton

    ‏2012-02-08T11:09:26Z  
    You cn build apr/pcre/expat and list them in the shared library path envvar in bin/envvars above the lib/ directory, but providing your own is not something tested or recommended.

    What modules require a later pcre or APR?
  • Ebrahim_kh63
    Ebrahim_kh63
    3 Posts

    Re: custom IHS installaton

    ‏2012-02-12T18:23:15Z  
    You cn build apr/pcre/expat and list them in the shared library path envvar in bin/envvars above the lib/ directory, but providing your own is not something tested or recommended.

    What modules require a later pcre or APR?
    mod_security performance depends on pcre performance. I compiled mod_security with pcre 7.9 and installed it on IHS 7 that is compiled with pcre 5. After 1 week My web server crashed. I checked http access and error logs. The only valuable logs that i could find are as below:

    notice ModSecurity: APR compiled version="1.3.8"; loaded version="1.2.12"
    warn ModSecurity: Loaded APR do not match with compiled!
    notice ModSecurity: PCRE compiled version="7.9"; loaded version="5.0 13-Sep-2004"
    warn ModSecurity: Loaded PCRE do not match with compiled!

    I have two choices: 1)compile mod_security with pcre 5 and APR 1.2.12. 2) compile IHS 7 with pcre 7.9 and APR 1.3.8. Compiling mod_security with pcre 5 is not a good choice(because of its impact on performance). I decided to compile IHS 7 with pcre 7.9 and APR 1.3.8. Is it a better choice?
  • SystemAdmin
    SystemAdmin
    3903 Posts

    Re: custom IHS installaton

    ‏2012-02-12T19:12:27Z  
    mod_security performance depends on pcre performance. I compiled mod_security with pcre 7.9 and installed it on IHS 7 that is compiled with pcre 5. After 1 week My web server crashed. I checked http access and error logs. The only valuable logs that i could find are as below:

    notice ModSecurity: APR compiled version="1.3.8"; loaded version="1.2.12"
    warn ModSecurity: Loaded APR do not match with compiled!
    notice ModSecurity: PCRE compiled version="7.9"; loaded version="5.0 13-Sep-2004"
    warn ModSecurity: Loaded PCRE do not match with compiled!

    I have two choices: 1)compile mod_security with pcre 5 and APR 1.2.12. 2) compile IHS 7 with pcre 7.9 and APR 1.3.8. Compiling mod_security with pcre 5 is not a good choice(because of its impact on performance). I decided to compile IHS 7 with pcre 7.9 and APR 1.3.8. Is it a better choice?
    > Ebrahim_kh63 wrote:
    > mod_security performance depends on pcre performance. I compiled mod_security with pcre 7.9 and installed it on IHS 7 that is compiled with pcre 5. After 1 week My web server crashed. I checked http access and error logs. The only valuable logs that i could find are as below:
    >
    > notice ModSecurity: APR compiled version="1.3.8"; loaded version="1.2.12"
    > warn ModSecurity: Loaded APR do not match with compiled!
    > notice ModSecurity: PCRE compiled version="7.9"; loaded version="5.0 13-Sep-2004"
    > warn ModSecurity: Loaded PCRE do not match with compiled!

    There's no sign that this message is related to your crash.

    >
    > I have two choices: 1)compile mod_security with pcre 5 and APR 1.2.12. 2) compile IHS 7 with pcre 7.9 and APR 1.3.8. Compiling mod_security with pcre 5 is not a good choice(because of its impact on performance). I decided to compile IHS 7 with pcre 7.9 and APR 1.3.8. Is it a better choice?

    You can't choose to (re)compile IHS 7, so this is not really an option.
  • Ebrahim_kh63
    Ebrahim_kh63
    3 Posts

    Re: custom IHS installaton

    ‏2012-02-13T08:20:04Z  
    > Ebrahim_kh63 wrote:
    > mod_security performance depends on pcre performance. I compiled mod_security with pcre 7.9 and installed it on IHS 7 that is compiled with pcre 5. After 1 week My web server crashed. I checked http access and error logs. The only valuable logs that i could find are as below:
    >
    > notice ModSecurity: APR compiled version="1.3.8"; loaded version="1.2.12"
    > warn ModSecurity: Loaded APR do not match with compiled!
    > notice ModSecurity: PCRE compiled version="7.9"; loaded version="5.0 13-Sep-2004"
    > warn ModSecurity: Loaded PCRE do not match with compiled!

    There's no sign that this message is related to your crash.

    >
    > I have two choices: 1)compile mod_security with pcre 5 and APR 1.2.12. 2) compile IHS 7 with pcre 7.9 and APR 1.3.8. Compiling mod_security with pcre 5 is not a good choice(because of its impact on performance). I decided to compile IHS 7 with pcre 7.9 and APR 1.3.8. Is it a better choice?

    You can't choose to (re)compile IHS 7, so this is not really an option.
    How can i solve this problem? Why IMB doesn't update its external libraries?
  • SystemAdmin
    SystemAdmin
    3903 Posts

    Re: custom IHS installaton

    ‏2012-02-13T12:08:17Z  
    How can i solve this problem? Why IMB doesn't update its external libraries?
    I'm not aware of any compelling reasons to update PCRE, and this PCRE matches the one bundled with even the latest Apache 2.2.x source distributions. IBM doesn't flippantly change the bundled prerequisite utility libraries and impose unnecessary change on users.

    Can you quantify the mod_security performance regression with the old PCRE, or figure out your crash (or ??) when forcing the new PCRE to be loaded by IHS?
  • #root
    #root
    2 Posts

    Re: custom IHS installaton

    ‏2017-01-12T16:29:10Z  

    Hi guys i am facing the same issue.

     

     ModSecurity for Apache/2.7.3 (http://www.modsecurity.org/) configured.
     ModSecurity: APR compiled version="1.3.9"; loaded version="1.2.12"
    odSecurity: Loaded APR do not match with compiled!
     ModSecurity: PCRE compiled version="7.8 "; loaded version="5.0 13-Sep-2004"
    odSecurity: Loaded PCRE do not match with compiled!
     ModSecurity: LUA compiled version="Lua 5.1"
     ModSecurity: LIBXML compiled version="2.7.6"
     Using GSKit version 8.0.14.27
     Using config file /opt/IBM/HTTPServer/conf/httpd.conf with -D\x10\xbb\xc1s\xef\x7f -DMODSEC_2.5 -DMODSEC_2.7
     IBM_HTTP_Server/8.5.5.0 (Unix) configured -- resuming normal operations
     Core file limit is 0; core dumps will be not be written for server crashes

     

    Please update any solution, thanks

  • Eric Covener
    Eric Covener
    164 Posts

    Re: custom IHS installaton

    ‏2017-01-12T19:21:35Z  
    • #root
    • ‏2017-01-12T16:29:10Z

    Hi guys i am facing the same issue.

     

     ModSecurity for Apache/2.7.3 (http://www.modsecurity.org/) configured.
     ModSecurity: APR compiled version="1.3.9"; loaded version="1.2.12"
    odSecurity: Loaded APR do not match with compiled!
     ModSecurity: PCRE compiled version="7.8 "; loaded version="5.0 13-Sep-2004"
    odSecurity: Loaded PCRE do not match with compiled!
     ModSecurity: LUA compiled version="Lua 5.1"
     ModSecurity: LIBXML compiled version="2.7.6"
     Using GSKit version 8.0.14.27
     Using config file /opt/IBM/HTTPServer/conf/httpd.conf with -D\x10\xbb\xc1s\xef\x7f -DMODSEC_2.5 -DMODSEC_2.7
     IBM_HTTP_Server/8.5.5.0 (Unix) configured -- resuming normal operations
     Core file limit is 0; core dumps will be not be written for server crashes

     

    Please update any solution, thanks

    I'd suggest ignoring the message or re-compiling mod_security if you want to suppress it.

  • #root
    #root
    2 Posts

    Re: custom IHS installaton

    ‏2017-01-13T08:29:13Z  

    Hi Eric,

     

    what version of mod_security should i used, currently i am installing mod_security 2.7.9 rpm, please help

     

    thanks

  • Eric Covener
    Eric Covener
    164 Posts

    Re: custom IHS installaton

    ‏2017-01-14T14:24:42Z  
    • #root
    • ‏2017-01-13T08:29:13Z

    Hi Eric,

     

    what version of mod_security should i used, currently i am installing mod_security 2.7.9 rpm, please help

     

    thanks

    I don't see why you'd use anything but the latest.