Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
Message-ID: <40647C30.5010209@t-online.de>
Date: Fri, 26 Mar 2004 19:53:36 +0100
From: Max.Dittrich@t-online.de (Max Dittrich)
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US;
 rv:1.7b) Gecko/20040316
MIME-Version: 1.0
To: users@httpd.apache.org
References: <1080196792.3032.18.camel@joaks>  <406360EB.90809@t-online.de>
 <1080258666.3032.24.camel@joaks>
In-Reply-To: <1080258666.3032.24.camel@joaks>
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
Subject: Re: [users@httpd] apache with mod_ssl and php in a
 chrooted	environment?

Hi,

Joseph Oaks wrote:

> Thanks Max, when I did the ldd, I put everything in the same dirs as
> they were on the real system. However someone else suggested I put 
> the kerberos libs in the chroot's /lib. 

Sure, '/lib' and '/usr/lib' are the default directories searched by the 
linker ld.so. BTW setting LD_LIBRARY_PATH at execution time or 
LD_RUN_PATH at compile time to '/use/kerberos/lib' would have been 
another solution.

>                                         This worked, my only problem
> now is that the chroot is not recognizing the /etc/passwd files. I'm
> working it out though. BTW great idea about the ld.so.cache, I will 
> check that out, that may be part of my problem with the passwd file
> too.

See this HOWTO about setting up a chrooted apache installation

    http://penguin.epfl.ch/chroot.html#h3-switch

I used it as a nice starting point some years ago. It mentions the need 
for /lib/libnss_***.so (/etc/nsswitch.conf!) and /lib/libresolv.so

> Note: The libresolv library will be needed as well (This will become
> evident when PHP is installed).

.max


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org