Bug#606334: apache2: fails to start with dependency based boot if DNS is required by configuration
Package: apache2.2-common Version: 2.2.16-4 Severity: important -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 After converting a previously working lenny installation to squeeze and dependency based boot, I got: server:/etc/init.d$ ls -l /etc/*.d/*{apache2,bind9} - -rwxr-xr-x 1 root root 7490 Dec 8 15:06 ../init.d/apache2 - -rwxr-xr-x 1 root root 3215 Mar 17 2010 ../init.d/bind9 - -rw-r--r-- 1 root root 53 May 20 2008 ../logrotate.d/apache2 lrwxrwxrwx 1 root root 17 Nov 16 10:46 ../rc0.d/K01apache2 -> ../init.d/apache2 lrwxrwxrwx 1 root root 15 Nov 16 10:46 ../rc0.d/K02bind9 -> ../init.d/bind9 lrwxrwxrwx 1 root root 17 Nov 16 10:46 ../rc1.d/K01apache2 -> ../init.d/apache2 lrwxrwxrwx 1 root root 15 Nov 16 10:46 ../rc1.d/K02bind9 -> ../init.d/bind9 lrwxrwxrwx 1 root root 17 Nov 16 10:46 ../rc2.d/S02apache2 -> ../init.d/apache2 lrwxrwxrwx 1 root root 15 Nov 16 10:46 ../rc2.d/S03bind9 -> ../init.d/bind9 lrwxrwxrwx 1 root root 17 Nov 16 10:46 ../rc3.d/S02apache2 -> ../init.d/apache2 lrwxrwxrwx 1 root root 15 Nov 16 10:46 ../rc3.d/S03bind9 -> ../init.d/bind9 lrwxrwxrwx 1 root root 17 Nov 16 10:46 ../rc4.d/S02apache2 -> ../init.d/apache2 lrwxrwxrwx 1 root root 15 Nov 16 10:46 ../rc4.d/S03bind9 -> ../init.d/bind9 lrwxrwxrwx 1 root root 17 Nov 16 10:46 ../rc5.d/S02apache2 -> ../init.d/apache2 lrwxrwxrwx 1 root root 15 Nov 16 10:46 ../rc5.d/S03bind9 -> ../init.d/bind9 lrwxrwxrwx 1 root root 17 Nov 16 10:46 ../rc6.d/K01apache2 -> ../init.d/apache2 lrwxrwxrwx 1 root root 15 Nov 16 10:46 ../rc6.d/K02bind9 -> ../init.d/bind9 And the resulting boot failure due to DNS being unavailable at the time apache is started: Starting web server: apache2[Fri Nov 26 18:52:35 2010] [crit] (EAI 2)Name or service not known: alloc_listener: failed to set up sockaddr for www.mork.no Syntax error on line 3 of /etc/apache2/ports.conf: Listen setup failed Action 'start' failed. The Apache error log may have more information. failed! [..] Starting domain name service...: bind9. This could easily be resolved by adding # Should-Start: $named to the apache2 init script. Please fix for squeeze. Thanks. Bjørn - -- Package-specific info: List of /etc/apache2/mods-enabled/*.load: actions alias auth_basic auth_radius authn_file authz_default authz_groupfile authz_host authz_user autoindex cgi cgid dir env expires fcgid include jk mime mime_magic negotiation perl proxy proxy_http reqtimeout rewrite setenvif ssl status userdir - -- System Information: Debian Release: squeeze/sid APT prefers testing APT policy: (990, 'testing'), (600, 'unstable'), (1, 'experimental') Architecture: amd64 (x86_64) Kernel: Linux 2.6.32-5-amd64 (SMP w/4 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/bash Versions of packages apache2 depends on: ii apache2-mpm-worker2.2.16-4 Apache HTTP Server - high speed th ii apache2.2-common 2.2.16-4 Apache HTTP Server common files apache2 recommends no packages. apache2 suggests no packages. Versions of packages apache2.2-common depends on: ii apache2-utils 2.2.16-4 utility programs for webservers ii apache2.2-bin 2.2.16-4 Apache HTTP Server common binary f ii libmagic1 5.04-5 File type determination library us ii lsb-base 3.2-23.1 Linux Standard Base 3.2 init scrip ii mime-support 3.48-1 MIME files 'mime.types' & 'mailcap ii perl 5.10.1-16 Larry Wall's Practical Extraction ii procps1:3.2.8-9 /proc file system utilities - -- no debconf information -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.10 (GNU/Linux) iEYEARECAAYFAkz/k+UACgkQ10rqkowbIskauQCfVZNYEzj7YsPB5hMv6LRLwTlE U60An0Y3VU1VNlGtYJDLNiVHt8GZFEOY =P1J/ -END PGP SIGNATURE- -- To UNSUBSCRIBE, email to debian-apache-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20101208141919.26675.1410.report...@canardo.mork.no
Bug#292122: /etc/apache-ssl/httpd.conf is modified without questions on upgrade
Fabio Massimo Di Nitto <[EMAIL PROTECTED]> writes: > Bjørn Mork wrote: > > | Anything else I should check? > > If you can efford to do a "test break" it would be great if you can rever the > changes > to the old config and do: > > dpkg-reconfigure apache-ssl > > and see if for some reason it happens again. No, that didn't provoke it. I got the questions I already had answered but /etc/apache-ssl/httpd.conf was not changed. That includes the "Include /etc/apache-ssl/conf.d" which was not added either this time. Then I tried downgrading to 1.3.33-2 and upgrading again, but that didn't change the config either. Hmm, seems I can't reproduce the error so it should probably be archived as a bogus report. Please feel free to do so if you like. I am still wondering how the file got changed, though... Bjørn
Bug#292122: /etc/apache-ssl/httpd.conf is modified without questions on upgrade
Fabio Massimo Di Nitto <[EMAIL PROTECTED]> writes: > Bjørn Mork wrote: > | Package: apache-ssl > | Version: 1.3.33-3 > | Severity: important > | > | When I just upgraded apache-ssl, the postinst script did these modifications > | without asking me: > > This is sounds quite impossible because apache uses debconf via ucf to ask if > it is > allowed to modify configurations or not and the level of interaction is > decided > by the user via dpkg-reconfigure debconf. > > If you have set it to non-interactive than of course things do not get asked. I don't think I have, but I have been wrong once before ;-) Can't find any evidence of it though: canardo:/etc/apache-ssl# egrep -v ^# /etc/debconf.conf Config: configdb Templates: templatedb Name: config Driver: File Mode: 644 Reject-Type: password Filename: /var/cache/debconf/config.dat Name: passwords Driver: File Mode: 600 Backup: false Required: false Accept-Type: password Filename: /var/cache/debconf/passwords.dat Name: configdb Driver: Stack Stack: config, passwords Name: templatedb Driver: File Mode: 644 Filename: /var/cache/debconf/templates.dat canardo:/etc/apache-ssl# egrep -A5 '^Name: debconf' /var/cache/debconf/config.dat Name: debconf/frontend Template: debconf/frontend Value: Dialog Owners: debconf Flags: seen Name: debconf/priority Template: debconf/priority Value: medium Owners: debconf Flags: seen canardo:/etc/apache-ssl# echo x$DEBIAN_FRONTEND x Anything else I should check? Bjørn
Bug#292122: /etc/apache-ssl/httpd.conf is modified without questions on upgrade
Package: apache-ssl Version: 1.3.33-3 Severity: important When I just upgraded apache-ssl, the postinst script did these modifications without asking me: canardo:/etc/apache-ssl# cvs diff -u httpd.conf Index: httpd.conf === RCS file: /usr/local/cvsroot/canardo_etc/apache-ssl/httpd.conf,v retrieving revision 1.16 diff -u -r1.16 httpd.conf --- httpd.conf 5 Jan 2005 14:29:46 - 1.16 +++ httpd.conf 25 Jan 2005 08:21:01 - @@ -37,7 +37,7 @@ ### Section 2: 'Main' server configuration BindAddress www.mork.no -Port 80 +Port 443 Listen www.mork.no:443 Listen www.mork.no:80 User www-data @@ -417,3 +417,9 @@ Include /etc/cacti/apache.conf + +# Automatically added by the post-installation script +# as part of the transition to a config directory layout +# similar to apache2, and that will help users to migrate +# from apache to apache2 or revert back easily +Include /etc/apache-ssl/conf.d This is quite serious, since changing the bind port changes the configuration in a way which cannot be done safely. How would you know what the admins intentions are? Luckily, I also had a virtual server running on port 443, so I noticed an uexpected error caused by the above change. Bjørn -- System Information: Debian Release: 3.1 APT prefers testing APT policy: (650, 'testing'), (600, 'unstable') Architecture: i386 (i686) Kernel: Linux 2.6.8-2-686 Locale: LANG=en_US, LC_CTYPE=en_US (charmap=ISO-8859-1) Versions of packages apache-ssl depends on: ii apache-common 1.3.33-3 support files for all Apache webse ii debconf 1.4.30.11Debian configuration management sy ii dpkg1.10.26 Package maintenance system for Deb ii libc6 2.3.2.ds1-20 GNU C Library: Shared libraries an ii libdb4.24.2.52-17Berkeley v4.2 Database Libraries [ ii libexpat1 1.95.8-1 XML parsing C library - runtime li ii libmagic1 4.12-1 File type determination library us ii libssl0.9.7 0.9.7e-2 SSL shared libraries ii logrotate 3.7-2Log rotation utility ii mime-support3.28-1 MIME files 'mime.types' & 'mailcap ii openssl 0.9.7e-2 Secure Socket Layer (SSL) binary a ii perl5.8.4-5 Larry Wall's Practical Extraction ii ssl-cert1.0-11 Simple debconf wrapper for openssl -- debconf information: apache-ssl/server-name: www.mork.no apache-ssl/server-admin: [EMAIL PROTECTED] * apache-ssl/enable-suexec: true apache-ssl/init: true apache-ssl/document-root: /home/www/mork.no