|
Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com |
Re: [discuss] Problems with Security Update of Apache 1.3.31
From: Rick Phillips (rickp
suntech.net.au)
Date: Fri May 21 2004 - 02:08:26 CDT
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Great - fixed now since last update - thanks very much.
Regards,
Rick Phillips
On Wed, 2004-05-19 at 08:21, Vincent Danen wrote:
> On May 18, 2004, at 1:59 PM, KevinO wrote:
>
> >>> I performed the update using MCC just now on MDK 9.2 and received the
> >>> following error on httpd restart.
> >>>
> >>>
> >>> [root
######## root]# service httpd restart
> >>> Shutting down httpd: [
> >>> OK ]
> >>> Starting httpd-perl: Syntax error on line 46 of
> >>> /etc/httpd/conf/httpd-perl.conf:
> >>> Cannot load /etc/httpd/modules/mod_digest.so into server:
> >>> /etc/httpd/modules/mod_digest.so: undefined symbol: ap_auth_nonce
> >>>
> >>> [FAILED]
> >>> Starting httpd: [
> >>> OK ]
> >>>
> >>>
> >>> Line 46 in httpd-perl.conf is -
> >>>
> >>> LoadModule digest_module modules/mod_digest.so
> >>>
> >>> The error seems to be in mod_digest.so.
> >>>
> >>> Can anyone advise a fix please.
> >>
> >>
> >> I'm confused. Where did you get 1.3.31 from? 9.2 was updated to
> >> 1.3.28-3.2.92mdk. Is that the version you're using? We had no issues
> >> with it during testing.
> >>
> >> Also, are you sure you're using apache 1.x or are you using apache2?
> >> 9.2 came with apache2 as the default.
> >>
> >> Oh, wait a second. This was during upgrade. Take a closer look
> >> above... You see it failed, then you see it started ok. Did you
> >> bother
> >> doing a ps after the fact? Did you try to connect to your server?
> >> More
> >> importantly, did it work?
> >>
> >> Apache upgrades are messy because it insists on restarting apache
> >> after
> >> every package, so if it tries to restart before the new apache-modules
> >> is installed, you'll get error messages like above, but once the
> >> apache-modules package is installed, it starts fine.
> >>
> >> Can you double-check to make sure that apache is (or isn't) running?
> >> It
> >> should be running. And if you do a "service httpd restart" you should
> >> have no problmes.
> >>
> > It still throws the error, every time you restart. Httpd will start
> > and run
> > but you see the error. I ended up commenting out the two lines in
> > /etc/httpd/conf/httpd-perl.conf, as a temporary fix.
>
> Ok, found the problem. The problem is in mod_perl, not apache itself,
> which is why it looks to fail and then starts. The fail is httpd-perl
> trying to start, the pass is httpd itself. The problem here is that if
> you run any cgi scripts through the perl proxy they will not work,
> because the proxy isn't running.
>
> I've built new packages for CS2.1 and 9.2 to test this and the rebuilt
> packages work fine (tested using the test.pl script (ie. "lynx
> localhost/perl/test.pl")).
>
> If you use mod_perl for perl scripts, you can either wait for new
> packages (need to build the other plats and test them yet, so likely
> won't be available until tomorrow), or you can rebuild the
> apache-mod_perl source rpm against the updated
> apache-source/apache-devel packages (you *must* rebuild them against
> the new packages).
>
> Sorry about this, and thanks for catching it. One of the patches added
> a little something extra to mod_digest.so that mod_perl didn't know
> about, thus the crapping out. I didn't expect mod_perl to give any
> problems and since I never use it, I didn't even think to try it
> because we weren't doing anything other than patching.
--
Suncoast Technical
Ph 07 5442 5423
Fx 07 5442 5712
www.suntech.net.au
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]