Re: Apache2 is serving php files it does not own

2007-01-08 Thread Stefan Fritsch
debian-apache is not a support list, CCing to debian-user On Monday 08 January 2007 19:50, Virgil E. Alderson wrote: > After an update apache2 all of a sudden is serving php files it > does not own or have rights to read or write to. Up to this point i > have had my files owned by user: root and g

Bug#418925: apache2: mod_proxy_http / ProxyPass uses an invalid Host: header for backend requests

2007-05-06 Thread Stefan Fritsch
Hi, I can't reproduce this. Maybe you access your own server with the name "opera" and have "ProxyPreserveHost yes" somewhere in your Apache config? Cheers, Stefan -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#423002: apache: The RLimitCPU directive doesn't act

2007-05-09 Thread Stefan Fritsch
> Using the RLimitCPU directive doesn't change anything in Apache behaviour > : it doesn't limit execution time. > I used RLimitCPU 30 in the config of a virtual server in order to limit > execution time to 30 seconds, but it didn't seem to work, so I added : > php_admin_value max_execution_time 60

debian-apache@lists.debian.org

2007-05-09 Thread Stefan Fritsch
Apache behaves correctly (in principle). From RFC 2396 section 3.3: 'The path may consist of a sequence of path segments separated by a single slash "/" character. Within a path segment, the characters "/", ";", "=", and "?" are reserved.' [1] This means '&' is a reserved character only in the q

debian-apache@lists.debian.org

2007-05-09 Thread Stefan Fritsch
Hi Thibaut, On Mittwoch, 9. Mai 2007, Thibaut VARENE wrote: > On 5/9/07, Stefan Fritsch <[EMAIL PROTECTED]> wrote: > > Apache behaves correctly (in principle). From RFC 2396 section > > 3.3: > > This means '&' is a reserved character only in the query p

debian-apache@lists.debian.org

2007-05-09 Thread Stefan Fritsch
On Mittwoch, 9. Mai 2007, Thibaut VARENE wrote: > On 5/9/07, Stefan Fritsch <[EMAIL PROTECTED]> wrote: > > > and then it ought to encode '&' as well in order to > > > be RFC compliant. > > > > but this is not. Also, RFC1738 talks about UR*L*s, t

Bug#420101: mod_dav fails to open the lock database because ownership of /var/lock/apache2 fails to set properly

2007-05-12 Thread Stefan Fritsch
I think this needs to be fixed in /etc/init.d/apache2 -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#425008: apache2: handle X-FORWARDED-FOR by default

2007-05-18 Thread Stefan Fritsch
> +SetEnvIfNoCase X-Forwarded-For "." from_proxy=1 This is horribly insecure for normal setups without proxy. Any client could set X-Forwarded-For and modify the logged IP address. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#427050: apache2: New upstream: 2.2.4

2007-06-01 Thread Stefan Fritsch
I doubt that it will ever get into Debian. 2.2.5 should be out real soon now(TM). (But I don't know when the Debian Apache Maintainers will have time to package a new upstream version.) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROT

Bug#420101: /var/lock/apache2 wrong permission.

2007-06-04 Thread Stefan Fritsch
On Sonntag, 20. Mai 2007, Junichi Uekawa wrote: > Hi, > > I have two comments on this bugreport about /var/lock/apache2 > > 1. you need to keep the chown in postinst for upgrade cases. Peter's fix creates the directory with install -d -o www-data which changes the owner if the directory already e

Bug#384682: restart will not start if apache2 was not running

2007-06-05 Thread Stefan Fritsch
When apache2 is not running, "restart" does not start it. This cannot be changed unless the logrotate is changed to do "reload" instead of "restart". Otherwise apache2 would be started every night even when it was not running before. See #298689 and friends. -- To UNSUBSCRIBE, email to [EMAI

Bug#298689: use reload in logrotate script?

2007-06-05 Thread Stefan Fritsch
Using restart instead of reload causes lots of problems. 1) when the server is slow to stop, it will not come up again 2) when the certificate private keys have a password, restart will fail (not wanting unencrypted private keys in backup is a valid reason to use passwords, IMHO) 3) even if ever

Bug#410331: fixed in 2.2.4

2007-06-06 Thread Stefan Fritsch
forwarded 410331 http://issues.apache.org/bugzilla/show_bug.cgi?id=37770 thanks according to the changelog, this is fixed in 2.2.4 -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#400918: apache2 reload produces error

2007-06-06 Thread Stefan Fritsch
I can reproduce this insofar as I get the error message in the logfile. It happens also whithout php. However, my apache continues to work afterwards. This might be related to https://issues.apache.org/bugzilla/show_bug.cgi?id=37680 which is fixed in 2.2.4. -- To UNSUBSCRIBE, email to [EMA

Bug#412580: Clarification for solution

2007-06-11 Thread Stefan Fritsch
Hi, On Montag, 11. Juni 2007, Bob Kline wrote: > I can't tell for sure whether Stefan's comment (posted today) means > the intent is that the patch posted by Tim on the 28th will be > applied, or if the latest version of Apache will really be used. I > want to assume the latter, based on the phra

Bug#298689: , apache2 restart problem during logrotate

2007-06-11 Thread Stefan Fritsch
Hi, there are three possible solutions to this problem. 1) Use "reload" (i.e. graceful restart) instead of "restart" in the logrotate script. Unfortunately, there have been problems with graceful restart in the past, and there are some upstream bugreports about it. 2) Use "graceful-stop" inst

Bug#425248: apache2 restart problems

2007-06-11 Thread Stefan Fritsch
Hi Franck, thanks for your remark. On Montag, 11. Juni 2007, Franck Hamelin wrote: > As merged bugs like #334824 or #398223 explains, when using SSL > certificate with a pass phrase the logrotate cannot restart the > server. Therefore the "option 2" & "option 3" are not compatible > with that co

Bug#298689: Another solution

2007-06-13 Thread Stefan Fritsch
On Dienstag, 12. Juni 2007, Dietmar Maurer wrote: > The correct fix is to wait until the server really stops: Yes, I think that is what I will do in 2.2.3-4+etch1. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#427508: Can't load mod_proxy_http.so: undefined symbol: ap_proxy_location_reverse_map

2007-06-13 Thread Stefan Fritsch
On Montag, 4. Juni 2007, Dialecti Valsamou wrote: > # apache2 > apache2: Syntax error on line 185 of /etc/apache2/apache2.conf: > Syntax error on line 2 of > /etc/apache2/mods-enabled/proxy_http.load: Cannot load > /usr/lib/apache2/modules/mod_proxy_http.so into server: > /usr/lib/apache2/modules/m

Bug#429320: sid - apache2 segmentation fault (negotiation.load)

2007-06-17 Thread Stefan Fritsch
Hi, On Sun, 17 Jun 2007, Antano Solar wrote: The module negotiation.load is causing segmentation fault in apache2. child pid 4660 exit signal Segmentation fault (11) I can't reproduce that. Can you give some more information? Does the segfault go away if you disable negotiation? Does apache

Bug#429516: #429516 could reload be used instead of restart

2007-06-18 Thread Stefan Fritsch
We might do that in lenny, but it will not be changed in sarge or etch. By the way, your mail arrived at the BTS quite garbled, see http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=429516 -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PRO

Bug#429401: apache2: Doesn't execute PHP scripts

2007-06-19 Thread Stefan Fritsch
Hi, On Sun, 17 Jun 2007, Tony Houghton wrote: The current version of apache2 won't run PHP files. It just sends the source to the browser instead. I've checked all the config that I know how to check. The php5.load and php5.conf files are correctly symlinked from mods-available to mods-enabled a

Bug#409970: apache2: ignoring "sites-enabled"

2007-06-19 Thread Stefan Fritsch
Maybe you created /etc/apache2/sites-enabled/ssl or copied something there before doing a2ensite? In this case a2ensite will report that the site is already enabled, and not enable the site. a2dissite ssl a2ensite ssl should work (but look at /etc/apache2/sites-enabled/ssl first, as this will

Bug#429320: sid - apache2 segmentation fault (negotiation.load)

2007-06-19 Thread Stefan Fritsch
On Tue, 19 Jun 2007, Antano Solar wrote: Yes it goes away when i move negotiation module outside the mods_enabled dir.It happens on every request . The web page shows internal error. I am using x86 on athlon 64 machine. The OS was an upgrade from etch(testing) - lenny - sid. What kind of page a

Re: Timeline for Apache 1.3 removal?

2007-06-21 Thread Stefan Fritsch
Hi, On Wed, 20 Jun 2007, James Bromberger wrote: Does any one know the timeline for dumping Apache 1.3 from the archive? Can someone direct me as to what I have to do for libapache-mod-backhand to dump it as well? Apache 1.3 has been removed from unstable already and will be removed from tes

Bug#294648: still in 2.2.3

2007-06-21 Thread Stefan Fritsch
this still happens with 2.2.3-4 -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#291841: Wrong/unnecessary directory/file permissions /var/log/apache2

2007-06-22 Thread Stefan Fritsch
On Fri, 22 Jun 2007, Olaf van der Spek wrote: How about "The o+rx on the directory isn't necessary and should thus be dropped."? I missed that (being not really important). But it will be changed in the next upload. Stefan -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "u

Bug#375369: apache2-mpm-prefork: consumes all available CPU on start after a crash

2007-06-22 Thread Stefan Fritsch
I am not sure that deleting the session cache on start is a good idea, because this would probably hurt a running apache if start is called by accident. OTOH, we already delete the session cache in some cases. Probably the best fix would be to use shm instead of dbm for the session cache. -

Bug#430386: Bashizm in /etc/init.d/apache2

2007-06-25 Thread Stefan Fritsch
Thanks for the report. Unfortunately it is a bit too late to fix this in Debian etch r1, but it will be fixed in r2. signature.asc Description: This is a digitally signed message part.

Bug#418499: Bug in installation of apache2

2007-06-25 Thread Stefan Fritsch
This happens if NO_START=1 is set in /etc/default/apache2 (because something else was listening on port 80 during installation). Therefore a workaround is to set NO_START=0 The init script displays a warning if VERBOSE=yes in /etc/default/rcS, but this doesn't seem to be the default anymore. At

Bug#387565: No way to specify RewriteRules in /etc/apache2/conf.d/xxx

2007-06-25 Thread Stefan Fritsch
Hi, I am not sure that it would be a good idea to automatically add rewrite rules via packages, because it would be quite easy to break RewriteRules added by the user. For example, automatically added rules could not use the [L] flag. What kind of rules would you want to add. Maybe you could u

Re: r386 - in /trunk/apache2: changelog control mpms.lintian-overrides

2007-06-26 Thread Stefan Fritsch
On Dienstag, 26. Juni 2007, Peter Samuelson wrote: > [EMAIL PROTECTED] > > > - * Fix some lintian warnings. > > + * Fix some lintian warnings, add some overrides, and make the > > +package binNMU safe. > > Well, the package was already binNMU safe. ${Source-Version} and > ${binary:Version} a

Bug#415775: remove AddDefaultCharset in lenny?

2007-06-26 Thread Stefan Fritsch
I believe adding AddDefaultCharset was a bad idea. It is only to be used if one _knows_ that the files have that charset, which we definitely don't. It also overrides two out of three valid ways to specify the charset of a page: the tag and type maps (see #414429). Only the way via AddCharset

Re: r392 - in /trunk/apache2: apache2-doc.conf changelog

2007-06-26 Thread Stefan Fritsch
On Dienstag, 26. Juni 2007, Peter Samuelson wrote: > but I think for lenny > it is reasonable to remove /etc/apache2/conf.d/charset and leave > only the commented line in /etc/apache2/apache2.conf. ok. Maybe we can change that together with the change of /etc/default/apache2 to a conffile and the

Bug#421557: apache2: memory leak addendum

2007-06-27 Thread Stefan Fritsch
On Mittwoch, 27. Juni 2007, Colin Wetherbee wrote: > Since upgrading apache2 to 2.2.3-4 last week, I have had to restart > Apache numerous times because it will grow in memory size and > eventually slow my server severely. Can you please also post the complete list of enabled modules ("ls /etc/ap

Bug#421557: apache2: memory leak addendum

2007-06-27 Thread Stefan Fritsch
On Mittwoch, 27. Juni 2007, Colin Wetherbee wrote: > > As a workaround, you might want to look at MaxRequestsPerChild > > and/or MaxChilds > > These are my current settings: > >      StartServers          3 >      MinSpareServers       3 >      MaxSpareServers       7 >      MaxClients           75

Bug#431048: suexec permissions are DANGEROUS

2007-06-29 Thread Stefan Fritsch
On Freitag, 29. Juni 2007, James Le Cuirot wrote: > This allows ANYONE to run suexec as root. I can't believe this has > slipped through. As the Apache docs very clearly state over at > http://httpd.apache.org/docs/2.2/suexec.html, they should be set > with... This problem isn't very severe. suexe

Bug#387565: Bug #387565: No way to specify RewriteRules in /etc/apache2/conf.d/xxx

2007-07-04 Thread Stefan Fritsch
tags 387565 wontfix thanks further discussion among the apache maintainers gave the result that we would prefer package maintainers to include a config file snippet and ask the user to put an "include /etc/package/apache.conf" into the virtual host config file. This way updates would work witho

Bug#349716: bug #349716: please consider giving a2[en|dis][mod|site] more flexibility

2007-07-08 Thread Stefan Fritsch
I am in favour of making it easier to run several apache2 instances. However, I don't think that reusing the -available dirs is a good idea. After all the configuration in the *.conf and sites-enabled/* files will likely differ for the different instances. BTW, my original idea was to support

Bug#384485: bug #384485 Apache2 use up all memory after reloading

2007-07-14 Thread Stefan Fritsch
This is likely the same bug as #326174 and was fixed in 2.2.4-1. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#427580: bug #427580: apache2: new install failed to start

2007-07-14 Thread Stefan Fritsch
> I did a complete purge of apache/apache2 > removed all directories and reinstalled apache2 ... > no listening sockets available, shutting down This could happen when /etc/init.d/apache2 stop did not work because the apache configuration was broken (or maybe because apache was stuck somehow). I

Bug#311269: #311269 apache2-doc: should have a doc-base entry

2007-07-14 Thread Stefan Fritsch
tags 311269 wontfix thanks This does not make sense currently, because the docs in apache2-doc cannot reasonably be read directly with a browser. You have to go through apache. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

[OSRM] please review apache2 2.0.54-5sarge2

2007-07-18 Thread Stefan Fritsch
errorpage - CVE-2007-1863: mod_cache * Cross site scripting: - CVE-2005-3352: mod_imap - CVE-2006-3918: via Expect header - CVE-2006-5752: mod_status * Add check for scoreboard PID protection (CVE-2007-3304) -- Stefan Fritsch <[EMAIL PROTECTED]> Mon, 16 Jul 2007 23:12:36

Re: mod_cache head bug

2007-07-19 Thread Stefan Fritsch
> I was just wondering if you would mind integrating this patch into > mod_cache. http://issues.apache.org/bugzilla/show_bug.cgi?id=41230 OK. This will be fixed with the next upload to unstable. However, I do not think it is severe enough to be backported to stable. Cheers, Stefan -- To UNSUB

Bug#421802: apache2: ssl.conf dropped IE workarounds

2007-07-21 Thread Stefan Fritsch
The problem is that the IE workaround needs to be in the ssl virtualhost context (see #289868), but ssl.conf is global server context. Therefore, you have to add the workaround to your ssl virtualhost file. When an example ssl virtualhost is added, the IE workaround should be included there.

Bug#421802: apache2: ssl.conf dropped IE workarounds

2007-07-22 Thread Stefan Fritsch
On Sunday 22 July 2007, Chris Withers wrote: > > The problem is that the IE workaround needs to be in the ssl > > virtualhost context (see #289868), but ssl.conf is global server > > context. Therefore, you have to add the workaround to your ssl > > virtualhost file. > > > > When an example ssl vir

Bug#366124: apache2: should mark its listening socket close-on-exec

2007-07-22 Thread Stefan Fritsch
> AFAIK mod_php has no facility to change the uid, so it is no > security issue: As long as the uid stays the same, the spawned > process can ptrace the apache process and do anything it wants > anyway. FWIW, this is not true if the apache parent process runs as root. In this case the child proce

Bug#421802: apache2: ssl.conf dropped IE workarounds

2007-07-22 Thread Stefan Fritsch
On Sunday 22 July 2007, Chris Withers wrote: > > Yes it does. But it causes a different problem, namely that > > keep-alive is disabled for non-https connections as well, which > > is not necessary with MSIE. > > Fair enough. Why wasn't this made clear as part of the upgrade? Good point. Probably

Bug#366124: apache2: should mark its listening socket close-on-exec

2007-07-22 Thread Stefan Fritsch
This is also discussed at http://bugs.php.net/bug.php?id=38915 There is the argument that mod_php should use apr_proc_create instead of using exec directly. So maybe we should reassing this to mod_php -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Cont

Bug#434562: apache2.2-common: Segfaulting when using mod_authn_dbd with DBDriver pgsql

2007-07-24 Thread Stefan Fritsch
Hi, On Tuesday 24 July 2007, Anders Breindahl wrote: > Seemingly, apache2.2-common does not bundle any file > apr_dbd_pgsql.so (which I gather [0] is needed when specifying > DBDriver pgsql). This should be compiled into libaprutil-1.so > The above is guesswork on my part why my apache2.2 server

Bug#434562: apache2.2-common: Segfaulting when using mod_authn_dbd with DBDriver pgsql

2007-07-28 Thread Stefan Fritsch
On Wednesday 25 July 2007, Anders Breindahl wrote: > `gdb /usr/sbin/apache2 core` gives: > This GDB was configured as "x86_64-linux-gnu"...BFD: > /usr/sbin/apache2: don't know how to handle OS specific section > `.gnu.hash' [0x6ff6] "/usr/sbin/apache2": not in executable > format: File format n

Bug#421557: apache2: memory leak addendum

2007-08-03 Thread Stefan Fritsch
On Wednesday 27 June 2007, Colin Wetherbee wrote: > >> Since upgrading apache2 to 2.2.3-4 last week, I have had to restart > >> Apache numerous times because it will grow in memory size and > >> eventually slow my server severely. > php5 I have seen some other reports indicating that the php5 in

Bug#438152: apache2-utils: htpasswd, htpasswd.1.gz in several packages

2007-08-15 Thread Stefan Fritsch
reassign 438152 thttpd-util found 438152 2.23beta1-7 thanks thttpd-util version 2.23beta1-5 (in etch) has thtpasswd instead of htpasswd. So this was changed to htpasswd in thttpd-util version 2.23beta1-7 (possibly by accident, it is not noted in the changelog). Reassigning to thttpd-util. --

Re: The status of libapache2-mod-perl2

2007-08-16 Thread Stefan Fritsch
> * Adam Conrad ([EMAIL PROTECTED]) wrote : >> The debian-apache group has both the necssary perl, apache, and C skills >> required to maintain this, what we're lacking at times (hey, check the >> apache changelogs for my name recently... *sigh*) is the time. >> >> I'd be happy to see it in the deb

Bug#438528: SSL: Init: Multiple RSA server certificates not allowed

2007-08-17 Thread Stefan Fritsch
On Friday 17 August 2007, Benoit Panizzon wrote: > I did try to set up IP Basel SSL on a machine with multiple IP > Addresse. Each has it's own SSL Certificate. > Still I seam to permanently get the Error: > > Init: Multiple RSA server certificates not allowed > > If I have more that one Virtualhos

Bug#438561: a2enmod enables cgid instead of cgi

2007-08-18 Thread Stefan Fritsch
On Friday 17 August 2007, Marcin Owsiany wrote: > Package: apache2.2-common > Version: 2.2.3-4+etch1 > Severity: normal > > $ sudo a2enmod cgi > Module cgid installed; run /etc/init.d/apache2 force-reload to > enable. a2enmod selects cgid if a threaded mpm is installed, as is recommended by upstr

Bug#437408: list /etc/default/apache2

2007-08-22 Thread Stefan Fritsch
On Sunday 12 August 2007, Dan Jacobson wrote: > dlocate cannot find /etc/default/apache2, unlike other files in > /etc/default/. /etc/default/apache2 is a conffile since 2.2.4-2. Starting from that version it should be found by dlocate. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a su

Bug#439375: Regressions from default configuration file in Apache 1.3

2007-08-26 Thread Stefan Fritsch
On Friday 24 August 2007, Shaya Potter wrote: > I believe, apache 1.3 had a DirectoryIndex line that included > index.htm, not just index.html That might be a good idea. > also, there's no section in apache2.conf, so > for instance .cgi's aren't added to the cgi-script handler. The mod_mime se

Bug#434562: apache2.2-common: Segfaulting when using mod_authn_dbd with DBDriver pgsql

2007-08-26 Thread Stefan Fritsch
I played a bit with mod_authn_dbd but couldn't get it to work, though it didn't segfault either (but it is i386, not amd64, that could make a difference). There seem to be some known problems with mod_dbd, some of which are fixed in apache's trunk version. See http://mail-archives.apache.org/m

[SRM] please review apache2 2.2.3-4+etch2

2007-08-27 Thread Stefan Fritsch
he package's documentation. > * Ship /usr/lib/cgi-bin (Closes: #415698) RC, breaks sqwebmail's postinst. > > -- Stefan Fritsch <[EMAIL PROTECTED]> Mon, 27 Aug 2007 22:45:02 +0200 The full debdiff output is at http://www.sfritsch.de/~stf/apache2_2.2.3-4+etch2.de

Bug#440031: apache2: fails to start with SSL enabled (ports.conf)

2007-08-29 Thread Stefan Fritsch
Hi, On Wed, 29 Aug 2007, Pascal A. Dupuis wrote: if the second 'Listen' directive is uncommented, starting apache2 (/etc/init.d/apache2 [start|reload]) fails with: (98)Address already in use: make_sock: could not bind to address 0.0.0.0:443 no listening sockets available, shutting down Unable to

Bug#434562: apache2.2-common: Segfaulting when using mod_authn_dbd with DBDriver pgsql

2007-08-31 Thread Stefan Fritsch
On Monday 27 August 2007, Anders Breindahl wrote: > However, that does not shed any new light on the dbd issue. So I'm > TODO'ing to look into it, and compare it to your mentioned bug. > > I'll need to set up a testbench setup, first. The ball's in my > court. A lot of mod_dbd changes will be in 2

Bug#434562: apache2.2-common: Segfaulting when using mod_authn_dbd with DBDriver pgsql

2007-09-07 Thread Stefan Fritsch
On Friday 31 August 2007, Stefan Fritsch wrote: > A lot of mod_dbd changes will be in 2.2.6 (hopefully released > soon). Therefore I suggest you wait for that and see whether that > works better. mod_auth_dbd with postgresql works for me with Apache 2.2.6, which I have just uploaded to

Bug#429959: apache2: using auth_ldap make child segfault or hang silently

2007-09-07 Thread Stefan Fritsch
On Thursday 21 June 2007, Guillaume wrote: > Package: apache2 > Version: 2.0.54-5sarge1 Apache2 in sarge will only get security updates. This bug will not be fixed there. > We are using for a few days the auth_ldap module in our apache2 > conf. The first morning, we observed a hang on the server

Bug#400918: apache2 reload produces error

2007-09-07 Thread Stefan Fritsch
https://issues.apache.org/bugzilla/show_bug.cgi?id=37680 is now fixed, but the error message "Bad file descriptor: apr_socket_accept: (client socket)" still occurs in 2.2.6. There is another upstream bug report that is maybe related to this error message: http://issues.apache.org/bugzilla/show_

Bug#342141: apache2: Apache2 weird forks (owned by root)

2007-09-07 Thread Stefan Fritsch
Has somebody seen this with 2.2.x? If not, I will close this bug report. TIA, Stefan -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#290458: mod_ssl preventing apache2 from starting (segfault)

2007-09-07 Thread Stefan Fritsch
> Apache2 ends with sigsegv or sigbus when starting with about 500 > virtualhosts with ssl using mod_macro. Can you still reproduce this with 2.2.3 or later? -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#308788: apache2-common: userdir doesn't work for ldap based entries ?

2007-09-07 Thread Stefan Fritsch
From looking at the source, apache (2.2.x) should do the right thing. I don't have LDAP to test ist, do you still encounter this problem with 2.2.x? Cheers, Stefan

Bug#342141: apache2: Apache2 weird forks (owned by root)

2007-09-08 Thread Stefan Fritsch
On Saturday 08 September 2007, Josip Rodin wrote: > On Fri, Sep 07, 2007 at 10:11:57PM +0200, Stefan Fritsch wrote: > > Has somebody seen this with 2.2.x? If not, I will close this bug > > report. > > I'm hoping to upgrade the machine experiencing it to etch soon, and

Bug#397338: apache2.2-common: 2.0->2.2 upgrade fails with custom jk module

2007-09-08 Thread Stefan Fritsch
Version: 2.2.3-4+etch2 A warning is in the etch release notes and has now been added in 2.2.3-4+etch2 which will be in the next etch point release. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#419771: Segfaults with mod_auth_dbd and "DBDriver pgsql"

2007-09-08 Thread Stefan Fritsch
This could also be a problem in apache2. If you are using unstable, you could try again with apache 2.2.6-1, which had quite a few mod_dbd fixes. Cheers, Stefan -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#441447: apache: Add directives in httpd.conf

2007-09-10 Thread Stefan Fritsch
On Sunday 09 September 2007, Gregory Colpart wrote: > Package: apache > Severity: wishlist Apache 1 has been removed from unstable and will be removed from testing soon. It is still in stable and oldstable, but will get only updates for critical security issues. You should consider upgrading to

Bug#431632: DBD sub-modules not included in Apache2's APR packages

2007-09-10 Thread Stefan Fritsch
On Wednesday 04 July 2007, Aigars Mahinovs wrote: > apr-util package builds, but fails to include in the .deb's > anything from the dbd/ subdirectory of the sources thus rendering > DBD modue of Apach2 completely useless as that subdirectory > contains SQLite and PGSQL backend drivers. Those are l

Bug#441845: Subject: apache2: Remote user can crash Apache if reverse proxy is enabled.

2007-09-11 Thread Stefan Fritsch
Hi, On Tuesday 11 September 2007, Ramon Garcia Fernandez wrote: > Although it is disclosed as a denial of service, it seems > to involve a buffer overflow, and thus allow remote code > execution under the apache account. I can confim, from > attacks in systems of a customer, that this is actually

Bug#441845: Subject: apache2: Remote user can crash Apache if reverse proxy is enabled.

2007-09-11 Thread Stefan Fritsch
On Tuesday 11 September 2007, Stefan Fritsch wrote: > On Tuesday 11 September 2007, Ramon Garcia Fernandez wrote: > > Although it is disclosed as a denial of service, it seems > > to involve a buffer overflow, and thus allow remote code > > execution under the apache accoun

Bug#442266: CacheEnable disk http:// does not work

2007-09-14 Thread Stefan Fritsch
On Friday 14 September 2007, William Thompson wrote: > Nothing shows up in /var/cache/apache2/mod_disk_cache when a > request comes in.  If I change CacheEnable disk http:// to > CacheEnable disk / it works, however I only want http:// requests > cached I am not sure I understand your problem. Are

Bug#442375: libapr1-dev: update --includedir path, apr-1 not apr-1.0

2007-09-16 Thread Stefan Fritsch
severity 442375 wishlist thanks On Saturday 15 September 2007, [EMAIL PROTECTED] wrote: > The header files are installed into /usr/include/apr-1.0 but as the > version is 1.2.7 I think it is just a hangover from a previous > version of apr as the package conflicts with libapr1.0-dev which is > an

Bug#405773: mysql support in apr-util

2007-09-17 Thread Stefan Fritsch
Before mysql support can be added to apr-util, either 1) php must link against libmysqlclient_r.so instead of libmysqlclient.so or 2) libmysqlclient_r.so and libmysqlclient.so must be changed so that they use differently versioned symbols After talking with seanius on #debian-devel, it is pos

Bug#405773: Bug#395959: mysql support in apr-util

2007-09-17 Thread Stefan Fritsch
On Monday 17 September 2007, Peter Samuelson wrote: > Well, or 3) we build apr-util with the modular db backend thing, > where backends are loaded only when needed, by dlopen. However, > this only hides the problem, it doesn't really solve it. This would be an option. But AFAICS the "build DBD dr

Bug#442266: CacheEnable disk http:// does not work

2007-09-18 Thread Stefan Fritsch
On Monday 17 September 2007, William Thompson wrote: > > > Nothing shows up in /var/cache/apache2/mod_disk_cache when a > > > request comes in. ?If I change CacheEnable disk http:// to > > > CacheEnable disk / it works, however I only want http:// > > > requests cached > > Or are you using it as f

Bug#385588: I get this on each restart

2007-09-24 Thread Stefan Fritsch
On Monday 24 September 2007, Ferenc Wagner wrote: > Hi, > > my Apache (stock Etch) seems to produce this on each restart. I'd > be glad to gather further information (like a backtrace) given some > pointers on how to do it. > -- > Regards, > Feri. A list of all modules you have loaded would be us

Bug#385588: I get this on each restart

2007-09-24 Thread Stefan Fritsch
On Monday 24 September 2007, Wagner Ferenc wrote: > #19 0xb781d85b in shib_exit () from > /usr/lib/apache2/modules/mod_shib_22.so This really looks like a mod_shib bug. Probably you should file a bug there (or add your information to the existing report). Cheers, Stefan -- To UNSUBSCRIBE, e

Bug#444048: apache2: CGI scripts entirely broken

2007-09-25 Thread Stefan Fritsch
On Tuesday 25 September 2007, Nick Price wrote: > I have a perl script that is simply > print "Content-type: text/html\n\n"; > > When run from the commandline it executes perfectly, > when run through apache2's CGI handler it gives a 500 > through a browser, and the following message in the > error

Bug#444048: apache2: CGI scripts entirely broken

2007-09-25 Thread Stefan Fritsch
On Tuesday 25 September 2007, Nick Price wrote: > I've tried with several known-good scripts as well, and with > \r\n\r\n and still nothing. The permissions are correct on the > script and I am not using suexec. > > Any ideas? Give more information, e.g. what exactly are the permissions of the s

Bug#444048: apache2: CGI scripts entirely broken

2007-09-25 Thread Stefan Fritsch
On Tuesday 25 September 2007, Nick Price wrote: > I had 755 set, but I tried 777 as well on the scripts. > As for the directory, it is physically located under my public_html > directory in my ~, and I use .htaccess with addhandler cgi-script > .pl As user www-data i can execute the script. Try st

Bug#444048: apache2: CGI scripts entirely broken

2007-09-25 Thread Stefan Fritsch
On Tuesday 25 September 2007, Ralf Mattes wrote: > Ok, I had a closer look at your script - as others already > mentioned: HTTP headers end with Carriage-Return,Newline. They are CGI headers, not HTTP headers. AFAIK the CGI spec allows simple \n as line endings. > If I test > locally with your

Bug#296493: apache2ctl -t should warn about non-initial #

2007-09-27 Thread Stefan Fritsch
> I wanted to modify the default DirectoryIndex line in apache2.conf, > so I attempted to comment out just the last couple entries: > > DirectoryIndex index.html index.shtml index.cgi index.pl #index.php > index.xhtml > > This is an error, because apparently the config file doesn't expect > to have

Bug#281697: Problems with apt-cacher and apache2?

2007-10-06 Thread Stefan Fritsch
Hi, does anyone still experience problems with apt-cacher and apache 2.2.x? Note that you need to use mod_cgid instead of mod_cgi if you don't use mpm-prefork. TIA. Cheers, Stefan -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTE

Bug#445946: [apache2.2-common] /etc/init.d/apache2 restart gives an error when /bin/sh points to dash

2007-10-09 Thread Stefan Fritsch
Thanks for the report. This is fixed in the version of apache2 that will be include in Debian etch r2. Cheers, Stefan -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#399776: apache2: Apache 2.2 spawns lots of processes and freeze the box

2007-10-25 Thread Stefan Fritsch
Hi, I suspect this might be a php bug. Is there anyone who can reproduce this bug who does _not_ use php5? Thanks for your help. Cheers, Stefan -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#448754: /usr/bin/htpasswd: please give batchable option

2007-10-31 Thread Stefan Fritsch
htpasswd is missing a feature there to get the password from a file descriptor. What the manpage means is probably that one should use -b only when necessary. From a shell script the use of -b might be acceptable because the password will not be put into .bash_history and htpasswd runs only fo

Bug#449027: vserver: [notice] child pid 27907 exit signal Segmentation fault (11)

2007-11-02 Thread Stefan Fritsch
On Friday 02 November 2007, Gerhard Gaußling wrote: > Is there any way to get this problem solved? I'm not a programmer, > and therefore I'm not sure how to debug apache, to get the picture > of what's going on. It't not easy to determine what causes the segfaults, especially if many modules are

Bug#449027: vserver: [notice] child pid 27907 exit signal Segmentation fault (11)

2007-11-03 Thread Stefan Fritsch
On Friday 02 November 2007, Gerhard Gaußling wrote: > Did I forget something to enable these debug symbols, or does it > suffice to simply install the packages? Oops. Sorry, apache-dbg does not contain detached debugging symbols as I assumed, but separate binaries with debugging symbols. You hav

Bug#449109: apache2.2-common: AliasMatch regexen broken if number of path elements differ

2007-11-03 Thread Stefan Fritsch
On Saturday 03 November 2007, Simon Raven wrote: > this works (better): > AliasMatch ^/user/([a-zA-Z0-9]+)/?(.*) /home/$1/public_html/$2 > > but when i do: > AliasMatch ^/user/([a-zA-Z0-9]+)/?(.*) /home/$1/public_html/pub/$2 The second line works here, too. > i get that funky /htdocs error from a

Bug#449109: apache2.2-common: AliasMatch regexen broken if number of path elements differ

2007-11-09 Thread Stefan Fritsch
On Friday 09 November 2007, Simon Raven wrote: > > > i get that funky /htdocs error from another bug (#317460). > > > > That likely means that the DocumentRoot is not defined for the > > VirtualHost Apache is trying to serve. It could also mean that > > Apache does not find a VirtualHost for the re

Bug#449027: vserver: [notice] child pid 27907 exit signal Segmentation fault (11)

2007-11-09 Thread Stefan Fritsch
On Saturday 03 November 2007, Gerhard Gaußling wrote: > You're using a 32-bit installation with a 64-bit kernel, right? > > GDB doesn't work in this configuration.  It's a kernel bug; the > ptrace 32-bit emulation does not handle some operations that normal > i386 ptrace handles. If that's the pro

Bug#441404: apache2.2-common: SSLCertificateChainFile in virtual host context

2007-11-09 Thread Stefan Fritsch
On Sunday 09 September 2007, Jeroen Dekkers wrote: > According to the documentation, SSLCertificateChainFile should also > work in a virtual host context, but it doesn't really have any > effect there. Apache only sends the certificate chain when I > specify the chain with SSLCertificateChainFile i

Bug#447264: apache2.2-common: icons do not work on virtualhost with mod_rewrite on

2007-11-09 Thread Stefan Fritsch
[icons do not work on virtualhost with mod_rewrite on] It works for me. What exactly are you trying to do? Putting a .htaccess in /usr/share/apache2/icons? Or what are your rewrite rules and in which config section are they located? On Friday 19 October 2007, Richard van den Berg wrote: > I bel

Bug#447264: apache2.2-common: icons do not work on virtualhost with mod_rewrite on

2007-11-09 Thread Stefan Fritsch
On Friday 09 November 2007, Richard van den Berg wrote: > All I have for rewrite rules are like the following, stripping www > from the site name. They are in > /etc/apache2/sites-available/default > > RewriteCond %{HTTP_HOST} www.rob.roukens.org [NC] > RewriteRule ^.*$ http://rob.roukens.o

Bug#447264: apache2.2-common: icons do not work on virtualhost with mod_rewrite on

2007-11-10 Thread Stefan Fritsch
On Saturday 10 November 2007, Richard van den Berg wrote: > Stefan Fritsch wrote: > > Maybe you got confused by the browser cache and the problem was > > actually something else? Can you reproduce it again if you remove > > the SymLinksIfOwnerMatch from /usr/share/apache2/ic

  1   2   3   4   5   6   7   8   9   >