Bug#371074: mailman: web interface gives internal server error
On Wed, Jun 07, 2006 at 02:39:30AM -0500, Rob Ristroph wrote: I installed mailman with apt-get. It worked at least well enough to create some lists at some point. Since then the system has been apt-get upgraded several times. Did you install 2.1.8 or an older version originally? Now, when I go to any of the mailman links, such as listinfo or the admin page of a list, I get this in my browser: Internal Server Error The server encountered an internal error or misconfiguration and was unable to complete your request. Isn't your _web server_ CGI configuration fucked up? Do other CGIs work? This looks more like an Apache error message than a Mailman one to me. Among other background information you should know: -- I had to ln -s /usr/lib/cgi-bin/mailman /usr/lib/mailman/cgi-bin/ before the gforge apache configs would find mailman properly That is gforge's bug. Please file a separate bug against gforge-lists-mailman and tell them (add [EMAIL PROTECTED] to the CC list for that bug; reportbug will give you the opportunity to do that). -- The output of check_perms: = check_perms -f /var/lib/mailman/mail bad group (has: root, expected list) (fixing) /var/lib/mailman/cgi-bin bad group (has: root, expected list) (fixing) /var/lib/mailman/logs bad group (has: root, expected list) (fixing) /var/lib/mailman/Mailman bad group (has: root, expected list) (fixing) /var/lib/mailman/bin bad group (has: root, expected list) (fixing) /var/lib/mailman/icons bad group (has: root, expected list) (fixing) /var/lib/mailman/templates bad group (has: root, expected list) (fixing) /var/lib/mailman/locks bad group (has: root, expected list) (fixing) /var/lib/mailman/scripts bad group (has: root, expected list) (fixing) /var/lib/mailman/cron bad group (has: root, expected list) (fixing) These are false positives; on a Debian system, those are symlinks, and check_perms looks at the symlink and not at its target; the targets have the right group, as far as I can see. Warning: Private archive directory is other-executable (o+x). This could allow other users on your system to read private archives. Yes, but that's the only sane way to ensure that the web server can serve these files, too. Also, instead of apache running as www-data on this system, it is running as another user; What is the uid of this user, and its gid? however, it runs mailman as the user it expects via the suexec directive, The mailman in Debian, in contrast to the upstream mailman, doesn't care as what group (and user?) it runs as long as the group is 65534 or strictly less than 100. I have this in the apache conf file: SuexecUserGroup www-data www-data Are you sure this does what you think it does? It seems to me that suexec will refuse to execute the cgi's as a user/group below 100, and www-data is 33. Additionally, suexec will only work if launched by www-data, that is only of Apache is running as www-data, it seems to me. Check /var/log/apache/suexec.log and check that it is having the effect you think it has. I see no messages in the logs when the error happens, except for this in the gforge apache logs: [Wed Jun 07 02:24:31 2006] [error] [client 70.112.100.20] Premature end of script headers: admin, referer: http://gforge.mydomain.com/mail/admin/index.php?group_id=7 Hmm... Weird. -- Lionel -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#371074: mailman: web interface gives internal server error
Hi, I now have this mailman working, installed from source (2.1.8), not from the debian package. I'm not in a position to be able to replicate this bug anymore, because the server is in use, so you might want to mark this bug accordingly -- I'll answer the questions below about the setup as best I can though. I am really grateful for the responses on this bug report, even if (especially if . . .) it was just a weird configuration on my part. I am used to sending bug reports into a black hole, so it is really nice to have you guys follow up with me on it. Here is an overview of what I did to make it work from source, perhaps something here is helpful: made user/group mailman: groupadd mailman useradd -c GNU Mailman -s /no/shell -d /no/home -s mailman mailman cd /var/lib/mailman chgrp mailman . chmod a_rx,g+ws . ./configure --prefix=/usr/lib/mailman --with-var-prefix=/var/lib/mailman --with-cgi-gid=service --with-username=mailman --with-groupname=mailman --with-mail-gid=Debian-exim make clean make make install check_parms -f At this point I still got the error I mentioned in the first bug report, but I was getting helpful info from the mailman error log, which was a permissions denied message. I removed the suexec, and got a we've hit a bug! message, but nothing in the error log -- I changed the error log to be writeable by everyone, and got a message about the config.pck of one of my pre-existing lists having permission denied. I fixed that, and then had to also do chmod a+rx,g+ws /var/lib/mailman/cgi-bin/* and then it was working. If set up a backup server to this one I might be able to experiment more. However I will probably also set up that web server to run as the normal www-data in order to be simpler. A few more notes below . . . Lionel == Lionel Elie Mamane [EMAIL PROTECTED] writes: Lionel Lionel On Wed, Jun 07, 2006 at 02:39:30AM -0500, Rob Ristroph wrote: I installed mailman with apt-get. Lionel It worked at least well enough to create some lists at some point. Since then the system has been apt-get upgraded several times. Lionel Lionel Did you install 2.1.8 or an older version originally? It was 2.1.8. Now, when I go to any of the mailman links, such as listinfo or the admin page of a list, I get this in my browser: Lionel Internal Server Error Lionel The server encountered an internal error or misconfiguration and was unable to complete your request. Lionel Lionel Isn't your _web server_ CGI configuration fucked up? Do other CGIs Lionel work? Other CGI's worked at that time. This was the only one that didn't. Lionel This looks more like an Apache error message than a Mailman one to Lionel me. Yes, that is possible. In the configuration I am currently using does not use SuExec. It is possible that I was trying to SuExec to a user/group with uid/gid below 100, and that was generating the error. Among other background information you should know: Lionel -- I had to ln -s /usr/lib/cgi-bin/mailman /usr/lib/mailman/cgi-bin/ before the gforge apache configs would find mailman properly Lionel Lionel That is gforge's bug. Please file a separate bug against Lionel gforge-lists-mailman and tell them (add Lionel [EMAIL PROTECTED] to the CC list for that Lionel bug; reportbug will give you the opportunity to do that). OK, I will. -- The output of check_perms: = check_perms -f Lionel /var/lib/mailman/mail bad group (has: root, expected list) (fixing) /var/lib/mailman/cgi-bin bad group (has: root, expected list) (fixing) /var/lib/mailman/logs bad group (has: root, expected list) (fixing) /var/lib/mailman/Mailman bad group (has: root, expected list) (fixing) /var/lib/mailman/bin bad group (has: root, expected list) (fixing) /var/lib/mailman/icons bad group (has: root, expected list) (fixing) /var/lib/mailman/templates bad group (has: root, expected list) (fixing) /var/lib/mailman/locks bad group (has: root, expected list) (fixing) /var/lib/mailman/scripts bad group (has: root, expected list) (fixing) /var/lib/mailman/cron bad group (has: root, expected list) (fixing) Lionel Lionel These are false positives; on a Debian system, those are symlinks, and Lionel check_perms looks at the symlink and not at its target; the targets Lionel have the right group, as far as I can see. I eventually fixed them by hand when I re-installed from source. I don't think those errors were related to the problem. Warning: Private archive directory is other-executable (o+x). This could allow other users on your system to read private archives. Lionel Lionel Yes, but that's the only
Bug#371074: mailman: web interface gives internal server error
Joost == Joost van Baal [EMAIL PROTECTED] writes: Joost Joost On Wed, Jun 07, 2006 at 02:39:30AM -0500, Rob Ristroph wrote: Package: mailman Version: 2.1.8-1 Severity: grave Justification: renders package unusable More information about this error may be available in the server error log. == Joost snip other stuff (but not the server error log) Joost Joost What does the server error log say? Please supply this information to Joost this bugreport. Joost Joost Bye, Joost Joost Joost == Joost snip other stuff (but not the server error log) Joost Joost What does the server error log say? Please supply this information to Joost this bugreport. Joost Joost Bye, Joost Joost Joost It is empty: ls -la /var/log/mailman/ total 84 drwxrwsr-x 2 root list 4096 2006-06-07 07:54 . drwxr-xr-x 18 root root 4096 2006-06-07 07:54 .. -rw-rw-r-- 1 list list0 2006-06-04 07:58 error -rw-rw-r-- 1 list list0 2006-05-28 07:36 error.1 --Rob -- http://rgr.freeshell.org/ -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#371074: mailman: web interface gives internal server error
On Wed, Jun 07, 2006 at 02:39:30AM -0500, Rob Ristroph wrote: Package: mailman Version: 2.1.8-1 Severity: grave Justification: renders package unusable I installed mailman with apt-get. It installed as a dependancy when I was installing gforge. It worked at least well enough to create some lists at some point. Since then the system has been apt-get upgraded several times. Now, when I go to any of the mailman links, such as listinfo or the admin page of a list, I get this in my browser: Internal Server Error The server encountered an internal error or misconfiguration and was unable to complete your request. Please contact the server administrator, [EMAIL PROTECTED] and inform them of the time the error occurred, and anything you might have done that may have caused the error. More information about this error may be available in the server error log. == snip other stuff (but not the server error log) What does the server error log say? Please supply this information to this bugreport. Bye, Joost signature.asc Description: Digital signature
Bug#371074: mailman: web interface gives internal server error
Package: mailman Version: 2.1.8-1 Severity: grave Justification: renders package unusable I installed mailman with apt-get. It installed as a dependancy when I was installing gforge. It worked at least well enough to create some lists at some point. Since then the system has been apt-get upgraded several times. Now, when I go to any of the mailman links, such as listinfo or the admin page of a list, I get this in my browser: Internal Server Error The server encountered an internal error or misconfiguration and was unable to complete your request. Please contact the server administrator, [EMAIL PROTECTED] and inform them of the time the error occurred, and anything you might have done that may have caused the error. More information about this error may be available in the server error log. == Among other background information you should know: -- I had to ln -s /usr/lib/cgi-bin/mailman /usr/lib/mailman/cgi-bin/ before the gforge apache configs would find mailman properly -- The output of check_perms: = check_perms -f /var/lib/mailman/mail bad group (has: root, expected list) (fixing) /var/lib/mailman/cgi-bin bad group (has: root, expected list) (fixing) /var/lib/mailman/logs bad group (has: root, expected list) (fixing) /var/lib/mailman/Mailman bad group (has: root, expected list) (fixing) /var/lib/mailman/bin bad group (has: root, expected list) (fixing) /var/lib/mailman/icons bad group (has: root, expected list) (fixing) /var/lib/mailman/templates bad group (has: root, expected list) (fixing) /var/lib/mailman/locks bad group (has: root, expected list) (fixing) /var/lib/mailman/scripts bad group (has: root, expected list) (fixing) /var/lib/mailman/cron bad group (has: root, expected list) (fixing) Warning: Private archive directory is other-executable (o+x). This could allow other users on your system to read private archives. If you're on a shared multiuser system, you should consult the installation manual on how to fix this. Problems found: 10 Re-run as list (or root) with -f flag = Also, instead of apache running as www-data on this system, it is running as another user; however, it runs mailman as the user it expects via the suexec directive, I have this in the apache conf file: SuexecUserGroup www-data www-data I see no messages in the logs when the error happens, except for this in the gforge apache logs: [Wed Jun 07 02:24:31 2006] [error] [client 70.112.100.20] Premature end of script headers: admin, referer: http://gforge.mydomain.com/mail/admin/index.php?group_id=7 I can't find a core file or anything like that. I should also mention I removed the mailman package at one point and installed the current version of mailman from source, but with the same results (I thought I was installing it wrong at the time). When I installed from source I set the gid and uid to be what the webserver was using and didn't do the suexec thing. --Rob -- System Information: Debian Release: testing/unstable APT prefers testing APT policy: (500, 'testing') Architecture: i386 (i686) Shell: /bin/sh linked to /bin/bash Kernel: Linux 2.6.12-1-386 Locale: LANG=en_US, LC_CTYPE=en_US (charmap=ISO-8859-1) Versions of packages mailman depends on: ii adduser 3.87 Add and remove users and groups ii apache2-mpm-prefork [httpd] 2.0.55-4 traditional model for Apache2 ii cron 3.0pl1-94 management of regular background p ii debconf [debconf-2.0] 1.4.72 Debian configuration management sy ii exim4 4.60-3 metapackage to ease exim MTA (v4) ii exim4-daemon-heavy [mail-tran 4.60-3 exim MTA (v4) daemon with extended ii libc6 2.3.6-7GNU C Library: Shared libraries ii logrotate 3.7.1-3Log rotation utility ii pwgen 2.05-1 Automatic Password generation ii python2.3.5-5An interactive high-level object-o ii ucf 2.009 Update Configuration File: preserv Versions of packages mailman recommends: ii base-passwd 3.5.11 Debian base system master password -- debconf information: mailman/queue_files_present: * mailman/default_server_language: en mailman/update_passwords: mailman/gate_news: false mailman/update_aliases: * mailman/site_languages: en * mailman/used_languages: en * mailman/create_site_list: -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
