Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
Received-SPF: pass (nike.apache.org: domain of redalert.commander@gmail.com
 designates 209.85.219.46 as permitted sender)
MIME-Version: 1.0
In-Reply-To: <20130410141724.Horde.AFNBKKyTtWz5caOp0j4cSg1@www3.nde.ag>
References: 
 <CAMDu+mMZPev980W3vkR9O-BOkmLQd8bhm47dbkp6DiCMRtbcGg@mail.gmail.com>
	<20130410124817.Horde.yM_rlhG0hRzSVQWZF_iYbA7@www3.nde.ag>
	<CAMDu+mMmd6RTaZ6GtGwq3T632_aTjgOZ0VUSQZ4tWd1rQNgPoA@mail.gmail.com>
	<20130410141724.Horde.AFNBKKyTtWz5caOp0j4cSg1@www3.nde.ag>
Date: Wed, 10 Apr 2013 15:48:18 +0200
Message-ID: 
 <CAMDu+mO5+hAruW-HH8fJvYw2Qga9iYShJCoKNKhYyQueGoXd=A@mail.gmail.com>
From: Redalert Commander <redalert.commander@gmail.com>
To: users@httpd.apache.org
Content-Type: text/plain; charset=ISO-8859-1
Subject: Re: [users@httpd] Failure to start 2.4.4

On Wed, April 10, 2013 14:17, Jens-U. Mozdzen wrote:
> Hi Steven,
>
> Zitat von Redalert Commander <redalert.commander@gmail.com>:
>> Hi Jens, thanks for having a look.
>>
>> 2013/4/10 Jens-U. Mozdzen <jmozdzen@nde.ag>:
>>> Hi Steve,
>>>
[...]
>>>
>>> I believe you have no or a wrong path set for the shared memory
>>> location...
>>> it shouldn't point to "/etc/httpd/logs/authdigest_shm.23908", but more
>>> probably to "/var/log/httpd/..." or even better to "/var/run/httpd/..."
>>> (or
>>> similar)?
>>
>> /etc/httpd/logs is a symlink to /var/log/httpd.
>
> ah, I should have thought of that.
>
> In your original message you wrote that httpd is running as user (and
> group) "apache", and that /var/log/httpd is owned by root:root with
> 700 permission.
>
> Judging from that and the error message, httpd attempts to open the
> shm file as user "apache" (not "root") and thus fails. Is there any
> specific reason /var/log/httpd is not owned by your httpd user?

This is how it is done in both Fedora and RHEL releases (also for 2.4), my
guess is that this is done so that a compromised instance would be unable
to delete the logs since they are written with elevated permissions. (I
believe Debian does this as well).

>
>> Although /var/run/httpd does look like a better location for such a
>> file, so where would I configure this?
>> Is it a configure option when compiling or a directive in httpd.conf?
>> I couldn't find a reference to it on a quick search.
>
> Me neither - might be you'd have to look at the documentation written
> in that other language (I'm talking about the module's source code ;)
> ) to see if it is configurable. The online man page at least lists *no
> hint at all* that you may influence the location. Sorry for putting
> you on that wrong track.

I found something in configure that looks like an option, 'runtimedir',
but that is not actually a valid option.
Something is definately wrong here, I see other people having the
authdigest_shm files in /var/run/httpd by default, without extra configure
arguments.

[...]

Regards,
Steven

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org