Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
        s=beta; d=gmail.com;
        h=received:message-id:date:from:reply-to:to:subject:mime-version:content-type:content-transfer-encoding:content-disposition;
        b=TeMenlxsYY/s6SoYflMSzkJCXo5+5EKnUm/c0s7+f8/HbUXOXy40dwnsK8w1/OdKAL5wHOJxN5UpKf5V56FLUkVhciZYnlbVlh3+s5l70Pi9Y0pXtangeCm0ejGlxfc9vXvodzojaRpK8rKPm34hZNPb5IiJel4CKbhB54lwKRU=
Message-ID: <80f71dfb050919212968bb2d52@mail.gmail.com>
Date: Tue, 20 Sep 2005 00:29:02 -0400
From: John Duprey <john.duprey@gmail.com>
Reply-To: john.duprey@gmail.com
To: users@httpd.apache.org
Mime-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
Subject: [users@httpd] Bug: apache/mod_svn intermittently creates transaction
 dirs with incorrect permissions or ownership such that the transaction
 breaks.

I'm seeing strange behavior with an apache module (Subversion's
mod_svn).  Subversion commits through mod_svn are intermittently
failing because files and/or directories are being created with ROOT
ownership!! or permissions such that the user apache cannot write.=20
This problem happens frequenlty, but _not_always_, so I know it isn't
an outright configuration problem in apache or subversion.  Apache is
set to run as user apache.  I've posted this to the subversion mailing
lists and plan to file a bug.

It dawned on me that this might be a problem with apache and or
configuration.  I've tried a minimal config (no virtual hosts, no
extra modules like php, etc) and have not been able to find the bug.=20
Should a module get away with creating a file as root when apache is
explicitly configured not to do so?  Can you suggest anything that I
might try to fix or identify this problem?

The full details can be found below, which is my second post to the
subversion users/dev mailing list.

I sure would appreciate it if someone could help me out with this if
they can think of an apache cause for this problem.

Thanks (details below)

-John
-------------------------------
Details:
I'm about to file a subversion bug in relation to apache/mod_svn
intermittently creating transaction dirs with incorrect permissions or
ownership such that the transaction breaks.

Many times during the day commits are failing with an error message
like the following:

[Wed Aug 31 12:55:55 2005] [error] [client
192.189.224.121<http://192.189.224.121>]
  Could not create activity
  /svn/ResultsPlus/!svn/act/a24ba835-0155-2042-a734-13818c448007. [500, #0]
  [Wed Aug 31 12:55:55 2005] [error] [client
192.189.224.121<http://192.189.224.121>]
  could not begin a transaction [500, #13]
  [Wed Aug 31 12:55:55 2005] [error] [client
192.189.224.121<http://192.189.224.121>]
  Can't open file
'/svnroot/repos/ResultsPlus/db/transactions/90-1.txn/node.0.0':
  Permission denied [500, #13]

Inspection on the server side reveals one of 2 scenarios:

   1. The transaction directory (e.g.
/svnroot/repos/reposname/db/transactions/90-1.txn) has the wrong
permissions and cannot be populated by the apache user (apache) - i.e.
drw-rwSrw-
   2. The props file in the transaction directory (e.g.
/svnroot/repos/reposname/db/transactions/90-1.txn/props) is owned by
the root user and ONLY user has write permissions

If the commit is retried, it may or may not succeed.  To temporarily
fix the problem, I must restart apache, and delete the broken
transaction directories.

I am now running the latest stable apache(httpd-2.0.54) and
subversion(subversion-1.2.3) built from scratch.  (This problem was
first observed with prebuilt RPMS.)  I am running Intel RedHat
Enterprise Server 3 (rhel-3).  I have audited the system extensively
in an effort to identify any external processes that could be causing
this problem and found now.

I have a little bash script that will repeatedly modify, commit, and
sleep 1 second that tests subversion.  I can reproduce this error
within 10 - 30 commits.  I posted this problem before
(http://svn.haxx.se/users/archive-2005-09/0228.shtml).  More details
can be found in that post.  This problem was reported by another user
as well in June (http://svn.haxx.se/users/archive-2005-06/1629.shtml)
-- on Solaris.  He was able to work around the problem by using
setfacl however, rhel-3 (kernel 2.4) doesn't appear to support setfacl
completely.

If anyone can help me debug this problem further I'd appreciated it.=20
I'm willing to try almost anything - a debug version of subversion,
apache etc.  If you'd like more information, please ask me.=20
Otherwise, I'd welcome any tips for successfully logging a bug on
subversion.trigris.org.

I feel I've exhausted all configuration possibilities between
apache-subversion.  I've tried creating a test repository from scratch
- ensuring all commands out-of-apache-web-server were done as apache
(sudo -u apache svnadmin ...).  I've tried different file system
locations.  I've removed all but svn functionality from apache.  I've
used the simplest svn configuration possible..

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org