Hope you have created a group called nobody. You can try ltrace and
try to see what is going wrong.

JB

On 8/10/05, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote:
> Try:
> 
>  Group nobody
> 
> Of course, you need to have the nobody group on your system (many
> already do). Another popular choice for User/Group is apache (again, it
> must be present, don't mess with this until you understand the
> implications of creating a special user for Apache).
> 
> again, thanks very much for the response.
> 
> I believe it is unix/solaris system. The unix admin compiled apache.
> Is there a way to check users and groups?  Are these groups and
> users unix accounts, or accounts under apache? Before trying to
> implement ssl (when there was no ssl.conf and a smaller version of
> httpd.conf was used, the apache server worked correctly (using apachectl 
> start not startssl - is apachectl startssl the correct way to start the 
> server?). Since then,
> an upgrade was performed from apache 1.3 to apache2 - some libraries
> were missing, and they were patched, but there may still be missing
> libraries.
> 
> The Group was changed to nobody, and the error_log still produced:
> 
> 207401 [Wed Aug 10 11:11:10 2005] [notice] Digest: generating secret for 
> digest authentication ...
>  207402 [Wed Aug 10 11:11:10 2005] [notice] Digest: done
>  207403 [Wed Aug 10 11:11:13 2005] [warn] pid file /var/run/httpd.pid 
> overwritten -- Unclean shutdown of previous Apache run?
>  207404 [Wed Aug 10 11:11:13 2005] [alert] (22)Invalid argument: setgid: 
> unable to set group id to Group 4294967295
>  207405 [Wed Aug 10 11:11:13 2005] [alert] (22)Invalid argument: setgid: 
> unable to set group id to Group 4294967295
>  207406 [Wed Aug 10 11:11:13 2005] [alert] (22)Invalid argument: setgid: 
> unable to set group id to Group 4294967295
>  207407 [Wed Aug 10 11:11:13 2005] [alert] (22)Invalid argument: setgid: 
> unable to set group id to Group 4294967295
>  207408 [Wed Aug 10 11:11:13 2005] [notice] Apache/2.0.54 (Unix) 
> mod_ssl/2.0.54 OpenSSL/0.9.7d DAV/2 configured -- resuming normal operations
>  207409 [Wed Aug 10 11:11:13 2005] [alert] Child 22341 returned a Fatal 
> error... Apache is exiting!
>  207410 [Wed Aug 10 11:11:13 2005] [alert] (22)Invalid argument: setgid: 
> unable to set group id to Group 4294967295
> 
> 
> tia,
> dk
> 
> 
> 
> 
> -----Original Message-----
> From: Jorey Bump <[EMAIL PROTECTED]>
> Sent: Aug 10, 2005 11:07 AM
> To: openssl-users@openssl.org
> Subject: Re: Can SSL work with IP Address instead of FQDN?
> 
> [EMAIL PROTECTED] wrote:
> >>also looking into  (22)Invalid argument: setgid: unable to set group id to
> >
> > Group 4294967295
> >
> > This is your real problem. Check your Group setting in your apache
> > configuration. You probably just need to get your permissions and
> > ownerships correct.
> >
> > Thanks very much for your response. Any idea what the Group setting needs to
> > be in httpd.conf?
> 
> In theory, only you know this. :)
> 
> What's your platform? The de facto standard varies, and it's anyone's
> guess if you compiled apache yourself.
> 
> > this is how it looks now
> >
> >  User nobody
> >  Group #-1
> 
> Try:
> 
>  Group nobody
> 
> Of course, you need to have the nobody group on your system (many
> already do). Another popular choice for User/Group is apache (again, it
> must be present, don't mess with this until you understand the
> implications of creating a special user for Apache).
> 
> ______________________________________________________________________
> OpenSSL Project                                 http://www.openssl.org
> User Support Mailing List                    openssl-users@openssl.org
> Automated List Manager                           [EMAIL PROTECTED]
> 
> ______________________________________________________________________
> OpenSSL Project                                 http://www.openssl.org
> User Support Mailing List                    openssl-users@openssl.org
> Automated List Manager                           [EMAIL PROTECTED]
>
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to