Bug#606334: apache2: fails to start with dependency based boot if DNS is required by configuration

2010-12-08 Thread Bjørn Mork
Package: apache2.2-common
Version: 2.2.16-4
Severity: important

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

After converting a previously working lenny installation to squeeze 
and dependency based boot, I got:

server:/etc/init.d$ ls -l /etc/*.d/*{apache2,bind9}
- -rwxr-xr-x 1 root root 7490 Dec  8 15:06 ../init.d/apache2
- -rwxr-xr-x 1 root root 3215 Mar 17  2010 ../init.d/bind9
- -rw-r--r-- 1 root root   53 May 20  2008 ../logrotate.d/apache2
lrwxrwxrwx 1 root root   17 Nov 16 10:46 ../rc0.d/K01apache2 -> 
../init.d/apache2
lrwxrwxrwx 1 root root   15 Nov 16 10:46 ../rc0.d/K02bind9 -> ../init.d/bind9
lrwxrwxrwx 1 root root   17 Nov 16 10:46 ../rc1.d/K01apache2 -> 
../init.d/apache2
lrwxrwxrwx 1 root root   15 Nov 16 10:46 ../rc1.d/K02bind9 -> ../init.d/bind9
lrwxrwxrwx 1 root root   17 Nov 16 10:46 ../rc2.d/S02apache2 -> 
../init.d/apache2
lrwxrwxrwx 1 root root   15 Nov 16 10:46 ../rc2.d/S03bind9 -> ../init.d/bind9
lrwxrwxrwx 1 root root   17 Nov 16 10:46 ../rc3.d/S02apache2 -> 
../init.d/apache2
lrwxrwxrwx 1 root root   15 Nov 16 10:46 ../rc3.d/S03bind9 -> ../init.d/bind9
lrwxrwxrwx 1 root root   17 Nov 16 10:46 ../rc4.d/S02apache2 -> 
../init.d/apache2
lrwxrwxrwx 1 root root   15 Nov 16 10:46 ../rc4.d/S03bind9 -> ../init.d/bind9
lrwxrwxrwx 1 root root   17 Nov 16 10:46 ../rc5.d/S02apache2 -> 
../init.d/apache2
lrwxrwxrwx 1 root root   15 Nov 16 10:46 ../rc5.d/S03bind9 -> ../init.d/bind9
lrwxrwxrwx 1 root root   17 Nov 16 10:46 ../rc6.d/K01apache2 -> 
../init.d/apache2
lrwxrwxrwx 1 root root   15 Nov 16 10:46 ../rc6.d/K02bind9 -> ../init.d/bind9

And the resulting boot failure due to DNS being unavailable at the 
time apache is started:

Starting web server: apache2[Fri Nov 26 18:52:35 2010] [crit] (EAI 2)Name or 
service not known: alloc_listener: failed to set up sockaddr for www.mork.no
Syntax error on line 3 of /etc/apache2/ports.conf:
Listen setup failed
Action 'start' failed.
The Apache error log may have more information.
 failed!
[..]
Starting domain name service...: bind9.


This could easily be resolved by adding

# Should-Start:  $named

to the apache2 init script.  Please fix for squeeze.  Thanks.


Bjørn

- -- Package-specific info:
List of /etc/apache2/mods-enabled/*.load:
  actions alias auth_basic auth_radius authn_file authz_default
  authz_groupfile authz_host authz_user autoindex cgi cgid dir env
  expires fcgid include jk mime mime_magic negotiation perl proxy
  proxy_http reqtimeout rewrite setenvif ssl status userdir

- -- System Information:
Debian Release: squeeze/sid
  APT prefers testing
  APT policy: (990, 'testing'), (600, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Kernel: Linux 2.6.32-5-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages apache2 depends on:
ii  apache2-mpm-worker2.2.16-4   Apache HTTP Server - high speed th
ii  apache2.2-common  2.2.16-4   Apache HTTP Server common files

apache2 recommends no packages.

apache2 suggests no packages.

Versions of packages apache2.2-common depends on:
ii  apache2-utils 2.2.16-4   utility programs for webservers
ii  apache2.2-bin 2.2.16-4   Apache HTTP Server common binary f
ii  libmagic1 5.04-5 File type determination library us
ii  lsb-base  3.2-23.1   Linux Standard Base 3.2 init scrip
ii  mime-support  3.48-1 MIME files 'mime.types' & 'mailcap
ii  perl  5.10.1-16  Larry Wall's Practical Extraction 
ii  procps1:3.2.8-9  /proc file system utilities

- -- no debconf information

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.10 (GNU/Linux)

iEYEARECAAYFAkz/k+UACgkQ10rqkowbIskauQCfVZNYEzj7YsPB5hMv6LRLwTlE
U60An0Y3VU1VNlGtYJDLNiVHt8GZFEOY
=P1J/
-END PGP SIGNATURE-



--
To UNSUBSCRIBE, email to debian-apache-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/20101208141919.26675.1410.report...@canardo.mork.no



Bug#292122: /etc/apache-ssl/httpd.conf is modified without questions on upgrade

2005-01-25 Thread Bjørn Mork
Fabio Massimo Di Nitto <[EMAIL PROTECTED]> writes:
> Bjørn Mork wrote:
>
> | Anything else I should check?
>
> If you can efford to do a "test break" it would be great if you can rever the 
> changes
> to the old config and do:
>
> dpkg-reconfigure apache-ssl
>
> and see if for some reason it happens again.

No, that didn't provoke it.  I got the questions I already had
answered but /etc/apache-ssl/httpd.conf was not changed.  That
includes the

 "Include /etc/apache-ssl/conf.d"

which was not added either this time.

Then I tried downgrading to 1.3.33-2 and upgrading again, but that
didn't change the config either. 

Hmm, seems I can't reproduce the error so it should probably be
archived as a bogus report.  Please feel free to do so if you like.

I am still wondering how the file got changed, though...


Bjørn



Bug#292122: /etc/apache-ssl/httpd.conf is modified without questions on upgrade

2005-01-25 Thread Bjørn Mork
Fabio Massimo Di Nitto <[EMAIL PROTECTED]> writes:

> Bjørn Mork wrote:
> | Package: apache-ssl
> | Version: 1.3.33-3
> | Severity: important
> |
> | When I just upgraded apache-ssl, the postinst script did these modifications
> | without asking me:
>
> This is sounds quite impossible because apache uses debconf via ucf to ask if 
> it is
> allowed to modify configurations or not and the level of interaction is 
> decided
> by the user via dpkg-reconfigure debconf.
>
> If you have set it to non-interactive than of course things do not get asked.

I don't think I have, but I have been wrong once before ;-)  Can't
find any evidence of it though:

canardo:/etc/apache-ssl# egrep -v ^# /etc/debconf.conf 

Config: configdb
Templates: templatedb

Name: config
Driver: File
Mode: 644
Reject-Type: password
Filename: /var/cache/debconf/config.dat

Name: passwords
Driver: File
Mode: 600
Backup: false
Required: false
Accept-Type: password
Filename: /var/cache/debconf/passwords.dat

Name: configdb
Driver: Stack
Stack: config, passwords

Name: templatedb
Driver: File
Mode: 644
Filename: /var/cache/debconf/templates.dat


canardo:/etc/apache-ssl# egrep -A5 '^Name: debconf' 
/var/cache/debconf/config.dat
Name: debconf/frontend
Template: debconf/frontend
Value: Dialog
Owners: debconf
Flags: seen

Name: debconf/priority
Template: debconf/priority
Value: medium
Owners: debconf
Flags: seen

canardo:/etc/apache-ssl# echo x$DEBIAN_FRONTEND
x

Anything else I should check?



Bjørn



Bug#292122: /etc/apache-ssl/httpd.conf is modified without questions on upgrade

2005-01-25 Thread Bjørn Mork
Package: apache-ssl
Version: 1.3.33-3
Severity: important

When I just upgraded apache-ssl, the postinst script did these modifications
without asking me: 

canardo:/etc/apache-ssl# cvs diff -u httpd.conf 
Index: httpd.conf
===
RCS file: /usr/local/cvsroot/canardo_etc/apache-ssl/httpd.conf,v
retrieving revision 1.16
diff -u -r1.16 httpd.conf
--- httpd.conf  5 Jan 2005 14:29:46 -   1.16
+++ httpd.conf  25 Jan 2005 08:21:01 -
@@ -37,7 +37,7 @@
 
 ### Section 2: 'Main' server configuration
 BindAddress www.mork.no
-Port 80
+Port 443
 Listen www.mork.no:443
 Listen www.mork.no:80
 User www-data
@@ -417,3 +417,9 @@
 Include /etc/cacti/apache.conf
 
 
+
+# Automatically added by the post-installation script
+# as part of the transition to a config directory layout
+# similar to apache2, and that will help users to migrate
+# from apache to apache2 or revert back easily
+Include /etc/apache-ssl/conf.d


This is quite serious, since changing the bind port changes the configuration
in a way which cannot be done safely.  How would you know what the admins 
intentions are? 

Luckily, I also had a virtual server running on port 443, so I noticed an
uexpected error caused by the above change.


Bjørn

-- System Information:
Debian Release: 3.1
  APT prefers testing
  APT policy: (650, 'testing'), (600, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.6.8-2-686
Locale: LANG=en_US, LC_CTYPE=en_US (charmap=ISO-8859-1)

Versions of packages apache-ssl depends on:
ii  apache-common   1.3.33-3 support files for all Apache webse
ii  debconf 1.4.30.11Debian configuration management sy
ii  dpkg1.10.26  Package maintenance system for Deb
ii  libc6   2.3.2.ds1-20 GNU C Library: Shared libraries an
ii  libdb4.24.2.52-17Berkeley v4.2 Database Libraries [
ii  libexpat1   1.95.8-1 XML parsing C library - runtime li
ii  libmagic1   4.12-1   File type determination library us
ii  libssl0.9.7 0.9.7e-2 SSL shared libraries
ii  logrotate   3.7-2Log rotation utility
ii  mime-support3.28-1   MIME files 'mime.types' & 'mailcap
ii  openssl 0.9.7e-2 Secure Socket Layer (SSL) binary a
ii  perl5.8.4-5  Larry Wall's Practical Extraction 
ii  ssl-cert1.0-11   Simple debconf wrapper for openssl

-- debconf information:
  apache-ssl/server-name: www.mork.no
  apache-ssl/server-admin: [EMAIL PROTECTED]
* apache-ssl/enable-suexec: true
  apache-ssl/init: true
  apache-ssl/document-root: /home/www/mork.no