OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: [discuss] Problems with Security Update of Apache 1.3.31

From: Rick Phillips (rickpsuntech.net.au)
Date: Tue May 18 2004 - 14:56:07 CDT


On Wed, 2004-05-19 at 01:25, Vincent Danen wrote:
> On May 18, 2004, at 1:56 AM, Rick Phillips wrote:
>
> > I performed the update using MCC just now on MDK 9.2 and received the
> > following error on httpd restart.
> >
> >
> > [root######## root]# service httpd restart
> > Shutting down httpd: [ OK
> > ]
> > Starting httpd-perl: Syntax error on line 46 of
> > /etc/httpd/conf/httpd-perl.conf:
> > Cannot load /etc/httpd/modules/mod_digest.so into server:
> > /etc/httpd/modules/mod_digest.so: undefined symbol: ap_auth_nonce
> >
> > [FAILED]
> > Starting httpd: [ OK
> > ]
> >
> >
> > Line 46 in httpd-perl.conf is -
> >
> > LoadModule digest_module modules/mod_digest.so
> >
> > The error seems to be in mod_digest.so.
> >
> > Can anyone advise a fix please.
>
> I'm confused. Where did you get 1.3.31 from? 9.2 was updated to
> 1.3.28-3.2.92mdk. Is that the version you're using? We had no issues
> with it during testing.

This was the version of the security update (refer security update
notifications advice)
>
> Also, are you sure you're using apache 1.x or are you using apache2?
> 9.2 came with apache2 as the default.

I run Apache 1.3

>
> Oh, wait a second. This was during upgrade. Take a closer look
> above... You see it failed, then you see it started ok. Did you
> bother doing a ps after the fact? Did you try to connect to your
> server? More importantly, did it work?

Yes it works but I don't know what functionality might be broken.

>
> Apache upgrades are messy because it insists on restarting apache after
> every package, so if it tries to restart before the new apache-modules
> is installed, you'll get error messages like above, but once the
> apache-modules package is installed, it starts fine.

What you describe might be true but the message it got was AFTER a
manual restart. I always do this after an upgrade to make sure the
pacakge is running correctly.
>
> Can you double-check to make sure that apache is (or isn't) running?
> It should be running. And if you do a "service httpd restart" you
> should have no problmes.

Oh yes I do have problems - see above.

>
> Same thing for the other fellow who reported the same problem with the
> CS2.1 packages.

No, Apache has a problem in the module described.

Regards,

Rick Phillips

--
Suncoast Technical
Ph 07 5442 5423
Fx 07 5442 5712
www.suntech.net.au