lkml.org 
[lkml]   [1998]   [Aug]   [1]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectRe: apache no longer writes to the access log. NFS RELATED

Hi. Thanks for the reply. I forgot to mention that no_root_squash is
set. That's another thing I don't understand. It's like it's ignoring
it. Here's an example of my line in exports

/home 206.245.158.48(rw,no_root_squash)

I believe Apache's normal behavior is to create the access logs as root,
and then switch to the non privileged user.

I'm sorry if this has become kernel unrelated. I have submitted this the
bugs.apache.org.

Thanks
-jeremy

> And lo, Jeremy Hansen saith unto me:
> >
> > One thing that I'm not sure I mentioned is that if I chown the access_logs
> > to the httpd user, it works fine, which is what confuses me. It's almost
> > as if nfs is somehow blocking writes to root owned files. Actually I have
> > no idea since I'm no where near a developer.
> Sounds like you're running afoul of "root squashing" by the nfsd. When I
> "man exports", I see:
>
> Very often, it is not desirable that the root user on a
> client machine is also treated as root when accessing
> files on the NFS server. To this end, uid 0 is normally
> mapped to a different id: the so-called anonymous or
> nobody uid. This mode of operation (called `root squash-
> ing') is the default, and can be turned off with
> no_root_squash.
>
> Now, if apache switches to nobody before opening its log files, you have
> a kernel bug; if apache switches to nobody after opening its log files
> as root, it's an apache "bug"...but can be gotten around by chowns as
> you described, or by adding no_root_squash to the NFS server's export
> line, as per "man exports"...if you can accept the weakened security of
> anyone who can call themselves root being able to access any part of
> those exports...
>
>
> Keith
>
> --
> "The avalanche has already started; |Linux: http://www.linuxhq.com |"Zooty,
> it is too late for the pebbles to |KDE: http://www.kde.org | zoot
> vote." Kosh, "Believers", Babylon 5 |Keith: kwrohrer@enteract.com | zoot!"
> www.midwinter.com/lurk/lurker.html |http://www.enteract.com/~kwrohrer | --Rebo
>
>


http://www.xxedgexx.com | jeremy@xxedgexx.com
| pgp available from:
| http://www.xxedgexx.com/pgp.html



-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.altern.org/andrebalsa/doc/lkml-faq.html

\
 
 \ /
  Last update: 2005-03-22 13:43    [W:0.054 / U:0.024 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site