Messages in this thread | | | Date | Sat, 1 Aug 1998 16:37:26 -0400 (EDT) | From | Jeremy Hansen <> | Subject | Re: apache no longer writes to the access log. NFS RELATED |
| |
Hi. Thanks for the reply. I forgot to mention that no_root_squash is set. That's another thing I don't understand. It's like it's ignoring it. Here's an example of my line in exports
/home 206.245.158.48(rw,no_root_squash)
I believe Apache's normal behavior is to create the access logs as root, and then switch to the non privileged user.
I'm sorry if this has become kernel unrelated. I have submitted this the bugs.apache.org.
Thanks -jeremy
> And lo, Jeremy Hansen saith unto me: > > > > One thing that I'm not sure I mentioned is that if I chown the access_logs > > to the httpd user, it works fine, which is what confuses me. It's almost > > as if nfs is somehow blocking writes to root owned files. Actually I have > > no idea since I'm no where near a developer. > Sounds like you're running afoul of "root squashing" by the nfsd. When I > "man exports", I see: > > Very often, it is not desirable that the root user on a > client machine is also treated as root when accessing > files on the NFS server. To this end, uid 0 is normally > mapped to a different id: the so-called anonymous or > nobody uid. This mode of operation (called `root squash- > ing') is the default, and can be turned off with > no_root_squash. > > Now, if apache switches to nobody before opening its log files, you have > a kernel bug; if apache switches to nobody after opening its log files > as root, it's an apache "bug"...but can be gotten around by chowns as > you described, or by adding no_root_squash to the NFS server's export > line, as per "man exports"...if you can accept the weakened security of > anyone who can call themselves root being able to access any part of > those exports... > > > Keith > > -- > "The avalanche has already started; |Linux: http://www.linuxhq.com |"Zooty, > it is too late for the pebbles to |KDE: http://www.kde.org | zoot > vote." Kosh, "Believers", Babylon 5 |Keith: kwrohrer@enteract.com | zoot!" > www.midwinter.com/lurk/lurker.html |http://www.enteract.com/~kwrohrer | --Rebo > >
http://www.xxedgexx.com | jeremy@xxedgexx.com | pgp available from: | http://www.xxedgexx.com/pgp.html
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.rutgers.edu Please read the FAQ at http://www.altern.org/andrebalsa/doc/lkml-faq.html
| |