From sk at ift-mail.com Sun Dec 2 20:43:33 2007 From: sk at ift-mail.com (sk at ift-mail.com) Date: Sun, 2 Dec 2007 21:43:33 +0200 Subject: [mpm-itk] Cant make it work Message-ID: <1756680996.20071202214333@ift-mail.com> Hello, I'm trying to make mpm-itk work, but havent succeeded with it. Patch applied successfully, AssignUserID is in httpd.conf, but phpinfo() still shows that uid/gid is 0/0. I've tried apache 2.2.3, 2.2.4 and 2.2.6. PHP is compiled as module. What could be wrong with it? -- ? ?????????, sk mailto:sk at ift-mail.com From sgunderson at bigfoot.com Sun Dec 2 20:54:19 2007 From: sgunderson at bigfoot.com (Steinar H. Gunderson) Date: Sun, 2 Dec 2007 20:54:19 +0100 Subject: [mpm-itk] Cant make it work In-Reply-To: <1756680996.20071202214333@ift-mail.com> References: <1756680996.20071202214333@ift-mail.com> Message-ID: <20071202195419.GA20552@uio.no> On Sun, Dec 02, 2007 at 09:43:33PM +0200, sk at ift-mail.com wrote: > I'm trying to make mpm-itk work, but havent succeeded with it. > Patch applied successfully, AssignUserID is in httpd.conf, but phpinfo() still shows that uid/gid is > 0/0. > > I've tried apache 2.2.3, 2.2.4 and 2.2.6. > PHP is compiled as module. > > What could be wrong with it? Have you configured using the ITK MPM? See the list archives for more information. In general, you should use pre-made packages for your distribution unless you know very well what you're doing. /* Steinar */ -- Homepage: http://www.sesse.net/ From sk at ift-mail.com Mon Dec 3 09:28:06 2007 From: sk at ift-mail.com (sk at ift-mail.com) Date: Mon, 3 Dec 2007 10:28:06 +0200 Subject: [mpm-itk] Cant make it work Message-ID: <911128030.20071203102806@ift-mail.com> Hello, Sure, Apache was configured with --with-mpm=itk I want to build it from sources to test new feature for it - i'm, thinking about adding chroot() to it. But to try it, i need to make it work first. > On Sun, Dec 02, 2007 at 09:43:33PM +0200, sk at ift-mail.com wrote: >> I'm trying to make mpm-itk work, but havent succeeded with it. >> Patch applied successfully, AssignUserID is in httpd.conf, but phpinfo() still shows that uid/gid is >> 0/0. >> >> I've tried apache 2.2.3, 2.2.4 and 2.2.6. >> PHP is compiled as module. >> >> What could be wrong with it? > Have you configured using the ITK MPM? See the list archives for more > information. > In general, you should use pre-made packages for your distribution unless you > know very well what you're doing. > /* Steinar */ -- ? ?????????, sk mailto:sk at ift-mail.com From sgunderson at bigfoot.com Mon Dec 3 09:59:33 2007 From: sgunderson at bigfoot.com (Steinar H. Gunderson) Date: Mon, 3 Dec 2007 09:59:33 +0100 Subject: [mpm-itk] Cant make it work In-Reply-To: <911128030.20071203102806@ift-mail.com> References: <911128030.20071203102806@ift-mail.com> Message-ID: <20071203085933.GB24651@uio.no> On Mon, Dec 03, 2007 at 10:28:06AM +0200, sk at ift-mail.com wrote: > Sure, Apache was configured with --with-mpm=itk > > I want to build it from sources to test new feature for it - i'm, > thinking about adding chroot() to it. But to try it, i need to make it > work first. Try something else than PHP first. It generally has a habit of doing weird stuff, especially on the display side. Also, is your AssignUserID in a vhost, or globally? /* Steinar */ -- http://www.sesse.net/ From sk at ift-mail.com Mon Dec 3 10:45:27 2007 From: sk at ift-mail.com (sk at ift-mail.com) Date: Mon, 3 Dec 2007 11:45:27 +0200 Subject: [mpm-itk] Cant make it work In-Reply-To: <20071203085933.GB24651@uio.no> References: <911128030.20071203102806@ift-mail.com> <20071203085933.GB24651@uio.no> Message-ID: <1555433475.20071203114527@ift-mail.com> Damn, you're right. As i see in processlist, suid works great just phpinfo() shows that it's executed as root. Thanks for your help. > On Mon, Dec 03, 2007 at 10:28:06AM +0200, sk at ift-mail.com wrote: >> Sure, Apache was configured with --with-mpm=itk >> >> I want to build it from sources to test new feature for it - i'm, >> thinking about adding chroot() to it. But to try it, i need to make it >> work first. > Try something else than PHP first. It generally has a habit of doing weird > stuff, especially on the display side. > Also, is your AssignUserID in a vhost, or globally? > /* Steinar */ -- ? ?????????, sk mailto:sk at ift-mail.com From sk at ift-mail.com Tue Dec 4 12:57:19 2007 From: sk at ift-mail.com (sk at ift-mail.com) Date: Tue, 4 Dec 2007 13:57:19 +0200 Subject: [mpm-itk] Strange issue Message-ID: <494820762.20071204135719@ift-mail.com> Hello, After installing this module, got strange bug. I have box running with 2 apache servers and nginx server acting as load balancer. So, with --with-mpm=itk 2 apache servers cant work together. Apaches compiled with -DBIG_SECURITY_HOLE CGLAG (to allow User/Group root/root). Any ideas what could it be? -- ? ?????????, sk mailto:sk at ift-mail.com From sgunderson at bigfoot.com Tue Dec 4 13:16:25 2007 From: sgunderson at bigfoot.com (Steinar H. Gunderson) Date: Tue, 4 Dec 2007 13:16:25 +0100 Subject: [mpm-itk] Strange issue In-Reply-To: <494820762.20071204135719@ift-mail.com> References: <494820762.20071204135719@ift-mail.com> Message-ID: <20071204121625.GB19362@uio.no> On Tue, Dec 04, 2007 at 01:57:19PM +0200, sk at ift-mail.com wrote: > After installing this module, got strange bug. > I have box running with 2 apache servers and nginx server acting as > load balancer. > > So, with --with-mpm=itk 2 apache servers cant work together. You still haven't described your issue at all. What does "can't work together" mean? What happens? How is this supposed to work in the first place? Why do you have two Apache servers on the same box? /* Steinar */ -- Homepage: http://www.sesse.net/ From sk at ift-mail.com Tue Dec 4 14:22:10 2007 From: sk at ift-mail.com (sk at ift-mail.com) Date: Tue, 4 Dec 2007 15:22:10 +0200 Subject: [mpm-itk] Strange issue In-Reply-To: <20071204120725.GA19362@uio.no> References: <494820762.20071204135719@ift-mail.com> <20071204120725.GA19362@uio.no> Message-ID: <37173765.20071204152210@ift-mail.com> Hello, Yeah, sorry for previous letter. I have apache with like 10k virtual hosts. VhostAlias isnt good for me, because i want to have separate chroot for every user. So, i have trouble with adding new hosts - with 10k vhosts apache reloads like 2 minutes. To avoid this, i have 2 apaches installed behind nginx server, which acts like proxy with failure detection. If main apache restarts, nginx transfers all requests to backup apache. After main apache gets back, it serves all requests. What do we have now: As i see at ExtendedStatus, i have problems with non-closed connections: 20.8 requests/sec - 0.8 MB/second - 37.1 kB/request 195 requests currently being processed, 17 idle workers CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC CCCCCCCCCCCCCCCCCC_CCCCCCCCCCCCCCCCCCCCCC_CC_CC_C_W_CWCW_WCC_CCC C_CCCCC_RC_C__CW____............................................ C - means Closing connection. Current Apache setup for connections: KeepAlive Off StartServers 10 MinSpareServers 20 ServerLimit 1024 MaxClients 1024 TimeOut 5 MaxRequestsPerChild 100 Another problem is that after restart (apachectl restart or apachectl graceful) apache server hangs down, and dont process any requests. P.s. even when apache goes to idle state (i mean no requests passed to it), it still handles all those connections on "Closing" state > On Tue, Dec 04, 2007 at 01:57:19PM +0200, sk at ift-mail.com wrote: >> After installing this module, got strange bug. >> I have box running with 2 apache servers and nginx server acting as >> load balancer. >> >> So, with --with-mpm=itk 2 apache servers cant work together. > You still haven't described your issue at all. What does "can't work > together" mean? What happens? How is this supposed to work in the first > place? Why do you have two Apache servers on the same box? > /* Steinar */ -- ? ?????????, sk mailto:sk at ift-mail.com From sk at ift-mail.com Tue Dec 4 15:06:07 2007 From: sk at ift-mail.com (sk at ift-mail.com) Date: Tue, 4 Dec 2007 16:06:07 +0200 Subject: [mpm-itk] Strange issue In-Reply-To: <20071204121625.GB19362@uio.no> References: <494820762.20071204135719@ift-mail.com> <20071204121625.GB19362@uio.no> Message-ID: <397313330.20071204160607@ift-mail.com> I'm totally frustrated, but after recompiling fresh apache 2.2.6 without itk patch - it doesnt closes connections too. As i see via netstat, there's no actual connections there, but apache still handles them. > On Tue, Dec 04, 2007 at 01:57:19PM +0200, sk at ift-mail.com wrote: >> After installing this module, got strange bug. >> I have box running with 2 apache servers and nginx server acting as >> load balancer. >> >> So, with --with-mpm=itk 2 apache servers cant work together. > You still haven't described your issue at all. What does "can't work > together" mean? What happens? How is this supposed to work in the first > place? Why do you have two Apache servers on the same box? > /* Steinar */ -- ? ?????????, sk mailto:sk at ift-mail.com From daniele_dll at yahoo.it Sun Dec 16 00:24:10 2007 From: daniele_dll at yahoo.it (daniele_dll) Date: Sat, 15 Dec 2007 15:24:10 -0800 (PST) Subject: [mpm-itk] mpm-itk on fedora core 8 Message-ID: <755796.49798.qm@web32402.mail.mud.yahoo.com> Hi, i'm writing a my own control panel and, to do this, i decided to use apache 2.2 with mpm-itk because i need to run php 5.2.x under specific users with vhosts. I've just a question: mpm-itk creates first the fork and manages the execution with it or it first creates the fork and when a request arrive it forwards the request to the created fork? Thanks for your support, Best Regards. Daniele ___________________________________ L'email della prossima generazione? Puoi averla con la nuova Yahoo! Mail: http://it.docs.yahoo.com/nowyoucan.html From sgunderson at bigfoot.com Sun Dec 16 00:29:54 2007 From: sgunderson at bigfoot.com (Steinar H. Gunderson) Date: Sun, 16 Dec 2007 00:29:54 +0100 Subject: [mpm-itk] mpm-itk on fedora core 8 In-Reply-To: <755796.49798.qm@web32402.mail.mud.yahoo.com> References: <755796.49798.qm@web32402.mail.mud.yahoo.com> Message-ID: <20071215232954.GA28344@uio.no> On Sat, Dec 15, 2007 at 03:24:10PM -0800, daniele_dll wrote: > I've just a question: mpm-itk creates first the fork and manages the > execution with it or it first creates the fork and when a request arrive it > forwards the request to the created fork? There's actually two layers of forks: First, the normal prefork, where servers are created in advance of need. The server then receives a request, forks again, the child setuids, processes the request and then exits. /* Steinar */ -- Homepage: http://www.sesse.net/ From daniele_dll at yahoo.it Mon Dec 17 01:39:01 2007 From: daniele_dll at yahoo.it (daniele_dll) Date: Sun, 16 Dec 2007 16:39:01 -0800 (PST) Subject: [mpm-itk] updated monolitich patch for apache 2.2.6 and httpd 2.2.6-3 spec file for FC8 Message-ID: <798196.91218.qm@web32402.mail.mud.yahoo.com> Hi, i remake the monolitich patch for apache 2.2.6 executing commands in the first patch and appling all others. It is attached to this mail. There is the updated httpd spec file for FC8 to build httpd mpm itk in a separate rpm that depends on httpd 2.2.6-3 so it can't be upgraded automatically (no problems with deps after update) :) For FC8 spec file after that you build all the httpd stuff (using rpmbuild -bb httpd.spec in /usr/src/redhat/SPEC) you need to install only httpd-mpm-itk rpm, all others are like the official rpms. Naturally remember to copy the patch into /usr/src/redhat/SOURCES after that you install httpd 2.2.6-3 source rpm Thanks for your work steiner! mpm-itk works great on my web server!!! Best Regards, Daniele ___________________________________ L'email della prossima generazione? Puoi averla con la nuova Yahoo! Mail: http://it.docs.yahoo.com/nowyoucan.html -------------- next part -------------- A non-text attachment was scrubbed... Name: httpd-2.2.6-mpm-itk.patch Type: application/octet-stream Size: 128543 bytes Desc: not available URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: httpd.spec Type: application/octet-stream Size: 25323 bytes Desc: not available URL: