[Bug 839390] Re: Apache+Kerberos not working anymore since update today
Thomas, thanks for the update. I'll close the bug then as Fix Released. ** Changed in: apache2 (Ubuntu) Status: Incomplete = Fix Released -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to apache2 in Ubuntu. https://bugs.launchpad.net/bugs/839390 Title: Apache+Kerberos not working anymore since update today To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apache2/+bug/839390/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 839390] Re: Apache+Kerberos not working anymore since update today
With new installs and updated packages this bug seems gone. Kerberos Apache work out of the box again. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to apache2 in Ubuntu. https://bugs.launchpad.net/bugs/839390 Title: Apache+Kerberos not working anymore since update today To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apache2/+bug/839390/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 839390] Re: Apache+Kerberos not working anymore since update today
Found that too. After setting LDAPVerifyServerCert off everything seemed fine again. Since we're working with self signed certificates this isn't tragic. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to apache2 in Ubuntu. https://bugs.launchpad.net/bugs/839390 Title: Apache+Kerberos not working anymore since update today To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apache2/+bug/839390/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 839390] Re: Apache+Kerberos not working anymore since update today
On a test system I was able to revert back to the older apache-package. Error gone. True a regression. But since on a third server I am working with apache2 compiled from sources and this apache2 doesn't show the error --- but it might quite be it had it, but it is already fixed upstream. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to apache2 in Ubuntu. https://bugs.launchpad.net/bugs/839390 Title: Apache+Kerberos not working anymore since update today To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apache2/+bug/839390/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 839390] Re: Apache+Kerberos not working anymore since update today
SSL regression appears to be when used for ldap communication to active directory servers, not for serving http. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to apache2 in Ubuntu. https://bugs.launchpad.net/bugs/839390 Title: Apache+Kerberos not working anymore since update today To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apache2/+bug/839390/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 839390] Re: Apache+Kerberos not working anymore since update today
@Michael You mentioned SSL. How does that fit in here? You can add bug data from an afflicted, internet-connected, system by running this: $ apport-collect 839390 Otherwise, there are ways to save bug data to file, transfer it to another machine, and then upload it to this bug. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to apache2 in Ubuntu. https://bugs.launchpad.net/bugs/839390 Title: Apache+Kerberos not working anymore since update today To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apache2/+bug/839390/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 839390] Re: Apache+Kerberos not working anymore since update today
I'm also seeing intermittent LDAP failures to bind for users with this version of the apache2 package. I think a regression in ssl support for ldap has occured with this version of apache2. I've put one of my two misbehaving servers back to 2.2.14-5ubuntu8.4 to see if the problems go away. A server that has not upgraded from 2.2.14-5ubuntu8.4 has been fine during the periods the 2.2.14-5ubuntu8.6 servers show problems. Any update, or any other information needed to resolve this that I can provide? -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to apache2 in Ubuntu. https://bugs.launchpad.net/bugs/839390 Title: Apache+Kerberos not working anymore since update today To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apache2/+bug/839390/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 839390] Re: Apache+Kerberos not working anymore since update today
I've worked around this bug at this time by adding: LDAPVerifyServerCert off to the server config to get around the problem at this time. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to apache2 in Ubuntu. https://bugs.launchpad.net/bugs/839390 Title: Apache+Kerberos not working anymore since update today To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apache2/+bug/839390/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 839390] Re: Apache+Kerberos not working anymore since update today
It is currently believed that this was introduced by? apache2 (2.2.14-5ubuntu8.6) lucid-security; urgency=low * SECURITY UPDATE: Range header DoS vulnerability - debian/patches/207_CVE-2011-3192.dpatch: filter out large byte ranges and improve memory efficiency in handling buckets. (thanks to Debian and upstream) - CVE-2011-3192 * Include fix for regressions introduced by above patch: - debian/patches/208_CVE-2011-3192_regression.dpatch: return 206 and 416 response codes where appropriate (see deban bug 639825) -- Steve Beattie sbeat...@ubuntu.com (sbeattie: 3910)Thu, 01 Sep 2011 01:52:17 -0700 ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2011-3192 ** Changed in: apache2 (Ubuntu) Status: New = Incomplete -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to apache2 in Ubuntu. https://bugs.launchpad.net/bugs/839390 Title: Apache+Kerberos not working anymore since update today To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apache2/+bug/839390/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 839390] Re: Apache+Kerberos not working anymore since update today
@Thomas, if you are able - and willing to, are you able to try reverting back to apache2 2.2.14-5ubuntu8.5 - to check it is functional, then upgrade back to *8.6 to prove this introduced the regression? Thanks. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to apache2 in Ubuntu. https://bugs.launchpad.net/bugs/839390 Title: Apache+Kerberos not working anymore since update today To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apache2/+bug/839390/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 839390] Re: Apache+Kerberos not working anymore since update today
-- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to apache2 in Ubuntu. https://bugs.launchpad.net/bugs/839390 Title: Apache+Kerberos not working anymore since update today To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apache2/+bug/839390/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 839390] Re: Apache+Kerberos not working anymore since update today
The configfile for Nagios3 working before the update: !ScriptAlias /cgi-bin/nagios3 /usr/lib/cgi-bin/nagios3 !ScriptAlias /nagios3/cgi-bin /usr/lib/cgi-bin/nagios3 !Alias /nagios3/stylesheets /etc/nagios3/stylesheets !Alias /nagios3 /usr/share/nagios3/htdocs ! !DirectoryMatch (/usr/share/nagios3/htdocs|/usr/lib/cgi-bin/nagios3|/etc/nagios3/stylesheets) !SSLRequireSSL !Options FollowSymLinks ! !DirectoryIndex index.php index.html ! !AllowOverride AuthConfig !Order Allow,Deny !Allow From All ! ! AuthType Kerberos !AuthName Kerberos Login !KrbMethodNegotiate On !KrbMethodK5Passwd On !KrbServiceName HTTP !KrbAuthRealms XN.DE !Krb5KeyTab /etc/apache2/krb5.http ! !AuthLDAPURL ldap://ks1.xompu.de/dc=xn,dc=de?userPrincipalName?sub; NONE !require ldap-group CN=Nagios Users,OU=Users,DC=xn,DC=de !/DirectoryMatch -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to apache2 in Ubuntu. https://bugs.launchpad.net/bugs/839390 Title: Apache+Kerberos not working anymore since update today To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apache2/+bug/839390/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 839390] Re: Apache+Kerberos not working anymore since update today
** Tags added: regression-update ** Changed in: apache2 (Ubuntu) Importance: Undecided = High -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to apache2 in Ubuntu. https://bugs.launchpad.net/bugs/839390 Title: Apache+Kerberos not working anymore since update today To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apache2/+bug/839390/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
