Return-Path: Delivered-To: apmail-httpd-bugs-archive@www.apache.org Received: (qmail 63946 invoked from network); 5 Apr 2011 05:07:00 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.3) by minotaur.apache.org with SMTP; 5 Apr 2011 05:07:00 -0000 Received: (qmail 55404 invoked by uid 500); 5 Apr 2011 02:20:20 -0000 Delivered-To: apmail-httpd-bugs-archive@httpd.apache.org Received: (qmail 55359 invoked by uid 500); 5 Apr 2011 02:20:20 -0000 Mailing-List: contact bugs-help@httpd.apache.org; run by ezmlm Precedence: bulk List-Post: List-Help: List-Unsubscribe: Reply-To: "Apache HTTPD Bugs Notification List" List-Id: Delivered-To: mailing list bugs@httpd.apache.org Received: (qmail 55349 invoked by uid 99); 5 Apr 2011 02:20:20 -0000 Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 05 Apr 2011 02:20:20 +0000 X-ASF-Spam-Status: No, hits=-2000.0 required=5.0 tests=ALL_TRUSTED X-Spam-Check-By: apache.org Received: from [140.211.11.22] (HELO thor.apache.org) (140.211.11.22) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 05 Apr 2011 02:20:17 +0000 Received: from thor.apache.org (localhost [127.0.0.1]) by thor.apache.org (8.13.8+Sun/8.13.8) with ESMTP id p352JuxE021870 for ; Tue, 5 Apr 2011 02:19:56 GMT Received: (from daemon@localhost) by thor.apache.org (8.13.8+Sun/8.13.8/Submit) id p352JtcU021869; Mon, 4 Apr 2011 22:19:55 -0400 (EDT) Date: Mon, 4 Apr 2011 22:19:55 -0400 (EDT) From: bugzilla@apache.org To: bugs@httpd.apache.org Subject: DO NOT REPLY [Bug 51020] New: [PATCH] Apache/mod_fcgid.so does not start in complex Active Directory forest X-Bugzilla-Reason: AssignedTo X-Bugzilla-Type: new X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Apache httpd-2 X-Bugzilla-Component: mod_fcgid X-Bugzilla-Keywords: PatchAvailable X-Bugzilla-Severity: normal X-Bugzilla-Who: thangaraj@gmail.com X-Bugzilla-Status: NEW X-Bugzilla-Priority: P2 X-Bugzilla-Assigned-To: bugs@httpd.apache.org X-Bugzilla-Target-Milestone: --- X-Bugzilla-Changed-Fields: Message-ID: X-Bugzilla-URL: https://issues.apache.org/bugzilla/ Auto-Submitted: auto-generated Content-Type: text/plain; charset="UTF-8" MIME-Version: 1.0 X-Virus-Checked: Checked by ClamAV on apache.org https://issues.apache.org/bugzilla/show_bug.cgi?id=51020 Summary: [PATCH] Apache/mod_fcgid.so does not start in complex Active Directory forest Product: Apache httpd-2 Version: 2.2.17 Platform: PC OS/Version: Windows Server 2003 Status: NEW Keywords: PatchAvailable Severity: normal Priority: P2 Component: mod_fcgid AssignedTo: bugs@httpd.apache.org ReportedBy: thangaraj@gmail.com Created an attachment (id=26854) --> (https://issues.apache.org/bugzilla/attachment.cgi?id=26854) Patch for Apache/mod_Fcgid.so startup issue in complex Active Directory Domain environment Problem: mod_fcgid.so tries to gather CGI process filestat during startup using apr_stat () call and fails to fetch all ACLs from Active Directory Domain environment (having complex groups spanning across multiple domains) Root Cause: apr_stat() using APR_FINFO_NORM ends up calling GetEffectiveRightsFromACL Win32API to proble ACLs for cgi process file object's owner and group trustee accounts, and per MS this GetEffectiveRightsFromACL API is likely to fail in complex AD environment. MS KB: http://support.microsoft.com/kb/2018746 Solution: mod_fcgid.so apr_stat() call is made to use APR_FINFO_IDENT and thereby avoiding the unnecessary ACL lookup during Apache startup, however if there is a real ACL issue, mod_fcgid.so will return error during runtime. -- Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the assignee for the bug. --------------------------------------------------------------------- To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org For additional commands, e-mail: bugs-help@httpd.apache.org