Bug#391280: apache2-mpm-prefork: doesn't bind to IPv4 socket when IPv6 enabled
On Sat, Jun 07, 2008 at 03:46:23PM +0200, Stefan Fritsch wrote: Yup, that's my case. #v+ [EMAIL PROTECTED] ~]% /sbin/sysctl net.ipv6.bindv6only net.ipv6.bindv6only = 1 #v- Maybe we should put a hint in README.Debian that our apache supports only net.ipv6.bindv6only = 0 at the moment. Please don't require reconfiguring whole system. If it's only configuration supported by apache, maybe it should setsockopt (IPV6_V6ONLY) its sockets? This way it could revert to net.ipv6.bindv6only=0 only on its sockets, without touching rest of system. if you have the time, you could try recompiling apache2 with the line 017_fix_ipv6 removed from the file debian/patches/00list and check if that fixes the problem. Yes, with the patch removed everything works fine. I have tested two configurations, one with #v+ Listen [::]:80 Listen 0.0.0.0:80 #v- and one with Listen [::]:80 only (both with net.ipv6.bindv6only = 1). Apache behaves identically in both cases and listens only on [::]:80, but accepts also IPv4 connections (so it sets IPV6_V6ONLY). Thanks for identifying cause of problem and sorry for late reply, Jarek. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#391280: apache2-mpm-prefork: doesn't bind to IPv4 socket when IPv6 enabled
Hi Jarek, Yup, that's my case. #v+ [EMAIL PROTECTED] ~]% /sbin/sysctl net.ipv6.bindv6only net.ipv6.bindv6only = 1 #v- Maybe we should put a hint in README.Debian that our apache supports only net.ipv6.bindv6only = 0 at the moment. Please don't require reconfiguring whole system. If it's only configuration supported by apache, maybe it should setsockopt (IPV6_V6ONLY) its sockets? This way it could revert to net.ipv6.bindv6only=0 only on its sockets, without touching rest of system. if you have the time, you could try recompiling apache2 with the line 017_fix_ipv6 removed from the file debian/patches/00list and check if that fixes the problem. Cheers, Stefan -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#391280: apache2-mpm-prefork: doesn't bind to IPv4 socket when IPv6 enabled
On Sat, Jun 07, 2008 at 03:46:23PM +0200, Stefan Fritsch wrote: Hi Jarek, Hi Stefan, Yup, that's my case. #v+ [EMAIL PROTECTED] ~]% /sbin/sysctl net.ipv6.bindv6only net.ipv6.bindv6only = 1 #v- Maybe we should put a hint in README.Debian that our apache supports only net.ipv6.bindv6only = 0 at the moment. Please don't require reconfiguring whole system. If it's only configuration supported by apache, maybe it should setsockopt (IPV6_V6ONLY) its sockets? This way it could revert to net.ipv6.bindv6only=0 only on its sockets, without touching rest of system. if you have the time, you could try recompiling apache2 with the line 017_fix_ipv6 removed from the file debian/patches/00list and check if that fixes the problem. Unfortunately I probably won't have much time till the end of July. I'll try that then. Thanks for the reply, Jarek. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#391280: apache2-mpm-prefork: doesn't bind to IPv4 socket when IPv6 enabled
On Sun, Mar 16, 2008 at 08:46:04PM +0100, Stefan Fritsch wrote: On Friday 14 March 2008, Michael Mende wrote: Sorry for late reply, I haven't got copy of this mails. From apache docs [1]: On the other hand, on some platforms such as Linux and Tru64 the only way to handle both IPv6 and IPv4 is to use mapped addresses. Mapping is default on Linux (in contrary to FreeBSD, NetBSD, and OpenBSD). I think the problem here is that for Apache, enable/disable-v4-mapped is a compile-time option, but for linux the behaviour can be changed at runtime by writing to /proc/sys/net/ipv6/bindv6only. Supporting both variants without recompiling apache looks like a valid feature request. It is possible that apache upstream is not aware of the /proc interface. Yup, that's my case. #v+ [EMAIL PROTECTED] ~]% /sbin/sysctl net.ipv6.bindv6only net.ipv6.bindv6only = 1 #v- Maybe we should put a hint in README.Debian that our apache supports only net.ipv6.bindv6only = 0 at the moment. Please don't require reconfiguring whole system. If it's only configuration supported by apache, maybe it should setsockopt (IPV6_V6ONLY) its sockets? This way it could revert to net.ipv6.bindv6only=0 only on its sockets, without touching rest of system. Cheers, Jarek. -- Linux jest darmowy, jeśli twój czas nie przedstawia żadnej wartości. Jeśli jest coś warty(czas), Linux jest po prostu tańszy od innych. Jarek Kamiński gg# 453620 -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#391280: apache2-mpm-prefork: doesn't bind to IPv4 socket when IPv6 enabled
On Friday 14 March 2008, Michael Mende wrote: From apache docs [1]: On the other hand, on some platforms such as Linux and Tru64 the only way to handle both IPv6 and IPv4 is to use mapped addresses. Mapping is default on Linux (in contrary to FreeBSD, NetBSD, and OpenBSD). I think the problem here is that for Apache, enable/disable-v4-mapped is a compile-time option, but for linux the behaviour can be changed at runtime by writing to /proc/sys/net/ipv6/bindv6only. Supporting both variants without recompiling apache looks like a valid feature request. It is possible that apache upstream is not aware of the /proc interface. Maybe we should put a hint in README.Debian that our apache supports only net.ipv6.bindv6only = 0 at the moment. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#391280: apache2-mpm-prefork: doesn't bind to IPv4 socket when IPv6 enabled
From apache docs [1]: On the other hand, on some platforms such as Linux and Tru64 the only way to handle both IPv6 and IPv4 is to use mapped addresses. Mapping is default on Linux (in contrary to FreeBSD, NetBSD, and OpenBSD). That's why you don't see two sockets. Here comes the test: xen2:~# grep ^Listen /etc/apache2/ports.conf Listen 0.0.0.0:80 Listen [::]:80 xen2:~# netstat -tulpen | grep apache xen2:~# netstat -ntlp| grep apache tcp60 0 :::80 :::*LISTEN 2505/apache2 xen2:~# wget -S -O /dev/null --inet6-only http://ip6-localhost/ --11:35:24-- http://ip6-localhost/ = `/dev/null' Resolving ip6-localhost... ::1 Connecting to ip6-localhost|::1|:80... connected. HTTP request sent, awaiting response... HTTP/1.1 200 OK ... xen2:~# wget -S -O /dev/null --inet4-only http://localhost/ --11:36:26-- http://localhost/ = `/dev/null' Resolving localhost... 127.0.0.1 Connecting to localhost|127.0.0.1|:80... connected. HTTP request sent, awaiting response... HTTP/1.1 200 OK ... This bug may be closed. [1] http://httpd.apache.org/docs/2.2/bind.html -- Kind Regards, Michael Mende http://www.menole.net/ signature.asc Description: Digital signature
Bug#391280: apache2-mpm-prefork: doesn't bind to IPv4 socket when IPv6 enabled
Package: apache2-mpm-prefork Version: 2.2.3-1 Severity: important I have following lines in /etc/apache2/ports.conf: #v+ #Listen 80 Listen [::]:80 Listen 0.0.0.0:80 #IfDefine SSL # Listen [::]:443 # Listen 0.0.0.0:443 #/IfDefine #v- This configuration worked fine with Apache 2.0, but not now. Actually Apache binds only to [::]:80 and doesn't accept connections on IPv4 socket (sysctl net.ipv6.bindv6only returns 1) making web server absolutely unusable (I haven't set severity to grave because AFAIR net.ipv6.bindv6only is disabled on Debian by default). Netstat output: #v+ [EMAIL PROTECTED] ~]% sudo netstat -ntlp|grep :80 tcp0 0 192.168.0.1:80800.0.0.0:* LISTEN 29161/(squid) tcp0 0 127.0.0.1:8080 0.0.0.0:* LISTEN 29161/(squid) tcp6 0 0 :::80 :::*LISTEN 2439/apache2 #v- and with [::]:80 commented: #v+ [EMAIL PROTECTED] ~]% sudo netstat -ntlp|grep :80 tcp0 0 0.0.0.0:80 0.0.0.0:* LISTEN 2656/apache2 tcp0 0 192.168.0.1:80800.0.0.0:* LISTEN 29161/(squid) tcp0 0 127.0.0.1:8080 0.0.0.0:* LISTEN 29161/(squid) #v- As a workaround I've commented 0.0.0.0 and listed all IPv4 addresses explicitly. -- System Information: Debian Release: testing/unstable APT prefers unstable APT policy: (500, 'unstable'), (1, 'experimental') Architecture: i386 (i686) Shell: /bin/sh linked to /bin/bash Kernel: Linux 2.6.16-ck11 Locale: LANG=pl_PL, LC_CTYPE=pl_PL (charmap=ISO-8859-2) Versions of packages apache2-mpm-prefork depends on: ii apache2. 2.2.3-1 Next generation, scalable, extenda ii libapr1 1.2.7-6 The Apache Portable Runtime Librar ii libaprut 1.2.7+dfsg-2The Apache Portable Runtime Utilit ii libc62.3.6.ds1-5 GNU C Library: Shared libraries ii libdb4.3 4.3.29-6Berkeley v4.3 Database Libraries [ ii libdb4.4 4.4.20-7Berkeley v4.4 Database Libraries [ ii libexpat 1.95.8-3.3 XML parsing C library - runtime li ii libldap2 2.1.30-13+b1OpenLDAP libraries ii libpcre3 6.7-1 Perl 5 Compatible Regular Expressi ii libpq4 8.1.4-7 PostgreSQL C client library ii libsqlit 3.3.7-1 SQLite 3 shared library ii libuuid1 1.39+1.40-WIP-2006.10.02+dfsg-1 universally unique id library apache2-mpm-prefork recommends no packages. -- no debconf information -- Linux jest darmowy, jeśli twój czas nie przedstawia żadnej wartości. Jeśli jest coś warty(czas), Linux jest po prostu tańszy od innych. Jarek Kamiński gg# 453620 pgpjimmrYJ3wm.pgp Description: PGP signature
