Received: (qmail 847 invoked by uid 2012); 8 Nov 1999 22:01:11 -0000 Message-Id: <19991108220111.846.qmail@hyperreal.org> Date: 8 Nov 1999 22:01:11 -0000 From: Brad Littlejohn Reply-To: tyketto@wizard.com To: apbugs@hyperreal.org Subject: initgroups() returns an error to error_log X-Send-Pr-Version: 3.2 >Number: 5271 >Category: os-linux >Synopsis: initgroups() returns an error to error_log >Confidential: no >Severity: critical >Priority: medium >Responsible: apache >State: feedback >Quarter: >Keywords: >Date-Required: >Class: sw-bug >Submitter-Id: apache >Arrival-Date: Mon Nov 8 14:10:01 PST 1999 >Closed-Date: >Last-Modified: Wed Jun 07 12:50:00 PDT 2000 >Originator: tyketto@wizard.com >Release: 1.3.6, 1.3.9 >Organization: >Environment: Linux, Slackware 4.0, Slackware 7.0, kernel 2.3.26, kernel 2.2.13, egcs-1.1.2. glibc-2.1.2, libc-5.4.46. >Description: I've compiled both apache 1.3.6, and Apache 1.3.9, on my machine, to use PHP-4.0B2 with it. Compiles clean, installs clean. When I run 'apachectl start', I get the following: [Sun Nov 7 21:17:55 1999] [notice] Apache/1.3.9 (PHP4.0B2) configured -- resuming normal operations [Sun Nov 7 21:17:55 1999] [alert] (22)Invalid argument: initgroups: unable to set groups for User nobody and Group 449967254 [Sun Nov 7 21:17:55 1999] [alert] (22)Invalid argument: initgroups: unable to set groups for User nobody and Group 449967254 [Sun Nov 7 21:17:55 1999] [alert] (22)Invalid argument: initgroups: unable to set groups for User nobody and Group 449967254 [Sun Nov 7 21:17:55 1999] [alert] (22)Invalid argument: initgroups: unable to set groups for User nobody and Group 449967254 [Sun Nov 7 21:17:55 1999] [alert] (22)Invalid argument: initgroups: unable to set groups for User nobody and Group 449967254 [Sun Nov 7 21:17:55 1999] [alert] Child 11987 returned a Fatal error... Apache is exiting! >How-To-Repeat: recompile apache, witht he same setup, as above. glibc-2.1.2 as the main library, and recompile apache, using libc-5.4.46. Same error occurs, on both. egcs-1.1.2 or probably even gcc-2.7.2.3. Either, should give the same error. >Fix: initgroups() in http_main.c, line 3018, >Release-Note: >Audit-Trail: State-Changed-From-To: open-feedback State-Changed-By: marc State-Changed-When: Mon Nov 8 14:26:10 PST 1999 State-Changed-Why: Well, did you try setting the Group directive in your config file to a group that exists? From: A Guy Called Tyketto To: marc@Apache.Org, apache-bugdb@Apache.Org Cc: apbugs@Apache.Org Subject: Re: os-linux/5271: initgroups() returns an error to error_log Date: Tue, 9 Nov 1999 11:36:40 -0800 On Mon, Nov 08, 1999 at 10:26:15PM -0000, marc@apache.org wrote: > Synopsis: initgroups() returns an error to error_log > > State-Changed-From-To: open-feedback > State-Changed-By: marc > State-Changed-When: Mon Nov 8 14:26:10 PST 1999 > State-Changed-Why: > Well, did you try setting the Group directive in your > config file to a group that exists? Yes I have. Not only that, but created new groups on the machine, all with unique ids > 0, < 65534. All failed. Here's an example: [Tue Nov 9 11:31:53 1999] [notice] Apache/1.3.9 (Unix) PHP/4.0B2 configured -- resuming normal operations [Tue Nov 9 11:31:53 1999] [alert] (22)Invalid argument: initgroups: unable to set groups for User nobody and Group 2000 [Tue Nov 9 11:31:53 1999] [alert] (22)Invalid argument: initgroups: unable to set groups for User nobody and Group 2000 [Tue Nov 9 11:31:53 1999] [alert] (22)Invalid argument: initgroups: unable to set groups for User nobody and Group 2000 [Tue Nov 9 11:31:53 1999] [alert] (22)Invalid argument: initgroups: unable to set groups for User nobody and Group 2000 [Tue Nov 9 11:31:53 1999] [alert] (22)Invalid argument: initgroups: unable to set groups for User nobody and Group 2000 [Tue Nov 9 11:31:54 1999] [alert] Child 13843 returned a Fatal error... Apache is exiting! I don't want to have to set it to be as group users (100), as that could easily cause a huge security hole. I've also tried 60001, which gave me the same error above, s/2000/60001. Any other insights into this? BL. -- Brad Littlejohn | Email: tyketto@omnilinx.net Unix Systems Administrator, | tyketto@ozemail.com.au Web + NewsMaster, BOFH.. Smeghead! :) | http://www.omnilinx.net/~tyketto PGP: 1024/E9DF4D85 67 6B 33 D0 B9 95 F4 37 4B D1 CE BD 48 B0 06 93 Comment-Added-By: coar Comment-Added-When: Wed Jun 7 12:50:00 PDT 2000 Comment-Added: [This is a standard response.] This Apache problem report has not been updated recently. Please reply to this message if you have any additional information about this issue, or if you have answers to any questions that have been posed to you. If there are no outstanding questions, please consider this a request to try to reproduce the problem with the latest software release, if one has been made since last contact. If we don't hear from you, this report will be closed. If you have information to add, BE SURE to reply to this message and include the apbugs@Apache.Org address so it will be attached to the problem report! >Unformatted: [In order for any reply to be added to the PR database, you need] [to include in the Cc line and make sure the] [subject line starts with the report component and number, with ] [or without any 'Re:' prefixes (such as "general/1098:" or ] ["Re: general/1098:"). If the subject doesn't match this ] [pattern, your message will be misfiled and ignored. The ] ["apbugs" address is not added to the Cc line of messages from ] [the database automatically because of the potential for mail ] [loops. If you do not include this Cc, your reply may be ig- ] [nored unless you are responding to an explicit request from a ] [developer. Reply only with text; DO NOT SEND ATTACHMENTS! ]