From owner-freebsd-apache@FreeBSD.ORG Sun Jul 24 10:45:09 2011 Return-Path: Delivered-To: freebsd-apache@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 1BF1C1065675 for ; Sun, 24 Jul 2011 10:45:09 +0000 (UTC) (envelope-from basarevych@gmail.com) Received: from mail-qy0-f175.google.com (mail-qy0-f175.google.com [209.85.216.175]) by mx1.freebsd.org (Postfix) with ESMTP id D0C218FC0A for ; Sun, 24 Jul 2011 10:45:07 +0000 (UTC) Received: by qyk30 with SMTP id 30so467081qyk.13 for ; Sun, 24 Jul 2011 03:45:07 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=mime-version:date:message-id:subject:from:to:content-type; bh=zd3MnLTMgtM9OmXOllshFBHAQVc+c1O46qQXEn7PT38=; b=ppvNHxxviWoEar17q4tYKL1/pE7TPPswkkpGAq830NDDYJmsaHRTn6mQp0D7QNqth+ deUFAGOdlTDWuqVaQq4HkCCPEaipJdKTrZi0SHdXpy/36HuSilNDB7z7Ubh6x3MaJrtt +0y2wzvTLOB+NDQbDk+wr1M68cp+ZAg+LhcMc= MIME-Version: 1.0 Received: by 10.229.43.95 with SMTP id v31mr2568388qce.120.1311502529770; Sun, 24 Jul 2011 03:15:29 -0700 (PDT) Received: by 10.229.13.6 with HTTP; Sun, 24 Jul 2011 03:15:29 -0700 (PDT) Date: Sun, 24 Jul 2011 13:15:29 +0300 Message-ID: From: Ross To: freebsd-apache@freebsd.org Content-Type: text/plain; charset=UTF-8 Subject: Strange errors X-BeenThere: freebsd-apache@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Support of apache-related ports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 24 Jul 2011 10:45:09 -0000 Hi, list. I see many: kvm_open: kvm_nlist: No such file or directory in my error-log what is that? I searched this list and also googled but wasn't able to find anything on this matter. I am running site on Pimcore. Every time the site is accessed new lines are added to error.log. From owner-freebsd-apache@FreeBSD.ORG Sun Jul 24 11:51:44 2011 Return-Path: Delivered-To: freebsd-apache@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id C38D1106566C for ; Sun, 24 Jul 2011 11:51:44 +0000 (UTC) (envelope-from jdc@koitsu.dyndns.org) Received: from qmta08.westchester.pa.mail.comcast.net (qmta08.westchester.pa.mail.comcast.net [76.96.62.80]) by mx1.freebsd.org (Postfix) with ESMTP id 869078FC15 for ; Sun, 24 Jul 2011 11:51:44 +0000 (UTC) Received: from omta08.westchester.pa.mail.comcast.net ([76.96.62.12]) by qmta08.westchester.pa.mail.comcast.net with comcast id Bnd91h0010Fqzac58neVlN; Sun, 24 Jul 2011 11:38:29 +0000 Received: from koitsu.dyndns.org ([67.180.84.87]) by omta08.westchester.pa.mail.comcast.net with comcast id BneS1h00B1t3BNj3UneUjk; Sun, 24 Jul 2011 11:38:29 +0000 Received: by icarus.home.lan (Postfix, from userid 1000) id C96B3102C36; Sun, 24 Jul 2011 04:38:23 -0700 (PDT) Date: Sun, 24 Jul 2011 04:38:23 -0700 From: Jeremy Chadwick To: Ross Message-ID: <20110724113823.GA39165@icarus.home.lan> References: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.5.21 (2010-09-15) Cc: freebsd-apache@freebsd.org Subject: Re: Strange errors X-BeenThere: freebsd-apache@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Support of apache-related ports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 24 Jul 2011 11:51:44 -0000 On Sun, Jul 24, 2011 at 01:15:29PM +0300, Ross wrote: > I see many: > kvm_open: kvm_nlist: No such file or directory > in my error-log > > what is that? I searched this list and also googled but wasn't able to > find anything on this matter. > > I am running site on Pimcore. Every time the site is accessed new > lines are added to error.log. Have you recently rebuilt world/kernel on the system, or rebuild kernel but not world? If so, there may have been changes to the KVM structure within libkvm or the kernel that could be manifesting themselves by showing anomalies of this sort in userland applications. Most commonly this shows up in utilities like "ps" or "top", both of which use libkvm. I'm not familiar with "Pimcore". If this software links to libkvm, you may need to rebuild the software to keep in sync with any KVM or kernel changes. -- | Jeremy Chadwick jdc at parodius.com | | Parodius Networking http://www.parodius.com/ | | UNIX Systems Administrator Mountain View, CA, US | | Making life hard for others since 1977. PGP 4BD6C0CB | From owner-freebsd-apache@FreeBSD.ORG Mon Jul 25 03:10:33 2011 Return-Path: Delivered-To: freebsd-apache@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 8A04C106566B for ; Mon, 25 Jul 2011 03:10:33 +0000 (UTC) (envelope-from basarevych@gmail.com) Received: from mail-qy0-f175.google.com (mail-qy0-f175.google.com [209.85.216.175]) by mx1.freebsd.org (Postfix) with ESMTP id 46D338FC08 for ; Mon, 25 Jul 2011 03:10:32 +0000 (UTC) Received: by qyk30 with SMTP id 30so697169qyk.13 for ; Sun, 24 Jul 2011 20:10:32 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type:content-transfer-encoding; bh=gksWDvT1rKVPLDUn7C+7PBMivbb7Y8h6Dwpbk/vZJ/U=; b=aaTYvEXaUoXRI9sX9gSnYqqlUOYZ2PD5S9OGqbv8lKjLXj1oFQDf37y8y4g68PATge 3CTEBK5uACH2gO/w6P0er3mCVeB/arENL2wXXoWde7ftJR4AeSrwbORUYaDPDbFcZdV+ uHjgJH7xHZJpRtMTevVns4rmnFLAIlkc//nWo= MIME-Version: 1.0 Received: by 10.229.42.68 with SMTP id r4mr1645214qce.44.1311563432444; Sun, 24 Jul 2011 20:10:32 -0700 (PDT) Received: by 10.229.13.6 with HTTP; Sun, 24 Jul 2011 20:10:32 -0700 (PDT) In-Reply-To: <20110724113823.GA39165@icarus.home.lan> References: <20110724113823.GA39165@icarus.home.lan> Date: Mon, 25 Jul 2011 06:10:32 +0300 Message-ID: From: Ross To: Jeremy Chadwick Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Cc: freebsd-apache@freebsd.org Subject: Re: Strange errors X-BeenThere: freebsd-apache@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Support of apache-related ports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 25 Jul 2011 03:10:33 -0000 On Sun, Jul 24, 2011 at 2:38 PM, Jeremy Chadwick wrote: > On Sun, Jul 24, 2011 at 01:15:29PM +0300, Ross wrote: >> I see many: >> kvm_open: kvm_nlist: No such file or directory >> in my error-log >> >> what is that? I searched this list and also googled but wasn't able to >> find anything on this matter. >> >> I am running site on Pimcore. Every time the site is accessed new >> lines are added to error.log. > > Have you recently rebuilt world/kernel on the system, or rebuild kernel > but not world? I always rebuild the world along with the kernel. Just in case. And I did recently. This system is running 8.2-STABLE by the way. > > If so, there may have been changes to the KVM structure within libkvm or > the kernel that could be manifesting themselves by showing anomalies of > this sort in userland applications. =C2=A0Most commonly this shows up in > utilities like "ps" or "top", both of which use libkvm. Both top and ps work as expected. > > I'm not familiar with "Pimcore". =C2=A0If this software links to libkvm, = you > may need to rebuild the software to keep in sync with any KVM or kernel > changes. This is just a CMS built on Zend Framework. Another question: how can I catch who is writing this lines? I set LogLevel to debug and apache flags to "-e debug" but it did not help. > > -- > | Jeremy Chadwick =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0= =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0jdc at parodius.com= | > | Parodius Networking =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 http://www.parodius.com/ | > | UNIX Systems Administrator =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 Mountain View, CA, US | > | Making life hard for others since 1977. =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 PGP 4BD6C0CB | > > From owner-freebsd-apache@FreeBSD.ORG Mon Jul 25 03:38:04 2011 Return-Path: Delivered-To: freebsd-apache@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 607B21065670 for ; Mon, 25 Jul 2011 03:38:04 +0000 (UTC) (envelope-from jdc@koitsu.dyndns.org) Received: from qmta02.emeryville.ca.mail.comcast.net (qmta02.emeryville.ca.mail.comcast.net [76.96.30.24]) by mx1.freebsd.org (Postfix) with ESMTP id 47CF98FC19 for ; Mon, 25 Jul 2011 03:38:04 +0000 (UTC) Received: from omta19.emeryville.ca.mail.comcast.net ([76.96.30.76]) by qmta02.emeryville.ca.mail.comcast.net with comcast id C3D91h0051eYJf8A23QrpL; Mon, 25 Jul 2011 03:24:51 +0000 Received: from koitsu.dyndns.org ([67.180.84.87]) by omta19.emeryville.ca.mail.comcast.net with comcast id C3RF1h00A1t3BNj013RFr2; Mon, 25 Jul 2011 03:25:17 +0000 Received: by icarus.home.lan (Postfix, from userid 1000) id CE348102C36; Sun, 24 Jul 2011 20:24:46 -0700 (PDT) Date: Sun, 24 Jul 2011 20:24:46 -0700 From: Jeremy Chadwick To: Ross Message-ID: <20110725032446.GA54055@icarus.home.lan> References: <20110724113823.GA39165@icarus.home.lan> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.5.21 (2010-09-15) Cc: freebsd-apache@freebsd.org Subject: Re: Strange errors X-BeenThere: freebsd-apache@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Support of apache-related ports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 25 Jul 2011 03:38:04 -0000 On Mon, Jul 25, 2011 at 06:10:32AM +0300, Ross wrote: > On Sun, Jul 24, 2011 at 2:38 PM, Jeremy Chadwick > wrote: > > On Sun, Jul 24, 2011 at 01:15:29PM +0300, Ross wrote: > >> I see many: > >> kvm_open: kvm_nlist: No such file or directory > >> in my error-log > >> > >> what is that? I searched this list and also googled but wasn't able to > >> find anything on this matter. > >> > >> I am running site on Pimcore. Every time the site is accessed new > >> lines are added to error.log. > > > > Have you recently rebuilt world/kernel on the system, or rebuild kernel > > but not world? > > I always rebuild the world along with the kernel. Just in case. And I > did recently. This system is running 8.2-STABLE by the way. Okay, then chances are there is some software (a port, etc.) on your machine which links to libkvm that needs to be rebuilt to pick up the underlying libkvm API/ABI changes. > > If so, there may have been changes to the KVM structure within libkvm or > > the kernel that could be manifesting themselves by showing anomalies of > > this sort in userland applications. ??Most commonly this shows up in > > utilities like "ps" or "top", both of which use libkvm. > > Both top and ps work as expected. Sorry -- I wasn't saying "if there's a problem top/ps will confirm it", I was saying that when libkvm changes and kernel/world are out of sync, usually top/ps are the first things to show kvm_nvlist issues. > > I'm not familiar with "Pimcore". ??If this software links to libkvm, you > > may need to rebuild the software to keep in sync with any KVM or kernel > > changes. > > This is just a CMS built on Zend Framework. Are you using anything like ZendOptimizer or eAccelerator? Keep reading for why I ask that. > Another question: how can I catch who is writing this lines? I set > LogLevel to debug and apache flags to "-e debug" but it did not help. Do you have any web-oriented software on your machine that is compiled (not scripts, but actual compiled software) that hasn't been rebuilt since you rebuilt world/kernel? If so, this software will need to be rebuilt. You will have to try and correlate HTTP requests in your access_log to the errors you see in your error_log, and then trace things backwards from there. error_log contains output that goes to stderr, and the above error message is probably going to stderr hence it shows up in your logs. There is a way to find out what links to libkvm on the machine. This won't be 100% accurate -- libkvm comes in two types, a static library (libkvm.a) and a shared library (libkvm.so.X). If something links to the shared, ldd can find it. If something links (thus pulls in statically) it becomes even more difficult to determine what software it is. For the ldd stuff: find -X /usr/local -type f -print0 | xargs -0 ldd 2>/dev/null 1> output.txt Then open up output.txt in an editor (vi, etc.) and search for libkvm. Once you find an entry, scroll backwards/up a little bit until you find the correlating binary that links to it (e.g. /usr/local/bin/binary:). Finding statically-linked stuff that was built with libkvm.a is going to be much more painful. None of this looks for things like, say, executables in users' home directories that could have been built from source code (e.g. /home/user/public_html/mybinary.cgi) and linked to libkvm. If you don't want to deal with any of this, then the solution should be quite simple for system software: rebuild all of your ports. If the problem continues after that, then it's very likely you're using some 3rd-party software that's binary-only (please contact your vendor to resolve this), or it's some software somewhere other than in /usr/local. -- | Jeremy Chadwick jdc at parodius.com | | Parodius Networking http://www.parodius.com/ | | UNIX Systems Administrator Mountain View, CA, US | | Making life hard for others since 1977. PGP 4BD6C0CB | From owner-freebsd-apache@FreeBSD.ORG Mon Jul 25 04:20:57 2011 Return-Path: Delivered-To: freebsd-apache@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id DC2101065670 for ; Mon, 25 Jul 2011 04:20:57 +0000 (UTC) (envelope-from basarevych@gmail.com) Received: from mail-qy0-f182.google.com (mail-qy0-f182.google.com [209.85.216.182]) by mx1.freebsd.org (Postfix) with ESMTP id 9787B8FC0A for ; Mon, 25 Jul 2011 04:20:57 +0000 (UTC) Received: by qyk38 with SMTP id 38so2567055qyk.13 for ; Sun, 24 Jul 2011 21:20:56 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type:content-transfer-encoding; bh=4YQRWAujgXC2OZb36EUXimDmIv5wS3u+4kRpv2IYXg4=; b=tALZ3fff7vVQTXfI7CLgcVl6g0SzbTKZdoyrhKxn68DwuozmcA92QFxlZYnaiVmxsg zWi4VsMs75cSce2ve+h3YzsOWbAOpdgnIFI7Nku0igdKR8/W+gQS68iSPPUVu31K9u78 atXSughIC9x460oLVvKQ/su5hU18GufEA4Hjg= MIME-Version: 1.0 Received: by 10.229.182.84 with SMTP id cb20mr3032584qcb.6.1311567656600; Sun, 24 Jul 2011 21:20:56 -0700 (PDT) Received: by 10.229.13.6 with HTTP; Sun, 24 Jul 2011 21:20:56 -0700 (PDT) In-Reply-To: <20110725032446.GA54055@icarus.home.lan> References: <20110724113823.GA39165@icarus.home.lan> <20110725032446.GA54055@icarus.home.lan> Date: Mon, 25 Jul 2011 07:20:56 +0300 Message-ID: From: Ross To: freebsd-apache@freebsd.org Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Subject: Re: Strange errors X-BeenThere: freebsd-apache@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Support of apache-related ports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 25 Jul 2011 04:20:57 -0000 Thank you very much. It turns out that one of the scripts has been calling sysutils/muse which is linked against libkvm and gives this errors. Adding "2>/dev/null" fixed the issue for now. As recompiling the port didn't make the error go away. On Mon, Jul 25, 2011 at 6:24 AM, Jeremy Chadwick wrote: > On Mon, Jul 25, 2011 at 06:10:32AM +0300, Ross wrote: >> On Sun, Jul 24, 2011 at 2:38 PM, Jeremy Chadwick >> wrote: >> > On Sun, Jul 24, 2011 at 01:15:29PM +0300, Ross wrote: >> >> I see many: >> >> kvm_open: kvm_nlist: No such file or directory >> >> in my error-log >> >> >> >> what is that? I searched this list and also googled but wasn't able t= o >> >> find anything on this matter. >> >> >> >> I am running site on Pimcore. Every time the site is accessed new >> >> lines are added to error.log. >> > >> > Have you recently rebuilt world/kernel on the system, or rebuild kerne= l >> > but not world? >> >> I always rebuild the world along with the kernel. Just in case. And I >> did recently. This system is running 8.2-STABLE by the way. > > Okay, then chances are there is some software (a port, etc.) on your > machine which links to libkvm that needs to be rebuilt to pick up the > underlying libkvm API/ABI changes. > >> > If so, there may have been changes to the KVM structure within libkvm = or >> > the kernel that could be manifesting themselves by showing anomalies o= f >> > this sort in userland applications. ??Most commonly this shows up in >> > utilities like "ps" or "top", both of which use libkvm. >> >> Both top and ps work as expected. > > Sorry -- I wasn't saying "if there's a problem top/ps will confirm it", > I was saying that when libkvm changes and kernel/world are out of sync, > usually top/ps are the first things to show kvm_nvlist issues. > >> > I'm not familiar with "Pimcore". ??If this software links to libkvm, y= ou >> > may need to rebuild the software to keep in sync with any KVM or kerne= l >> > changes. >> >> This is just a CMS built on Zend Framework. > > Are you using anything like ZendOptimizer or eAccelerator? =C2=A0Keep rea= ding > for why I ask that. > >> Another question: how can I catch who is writing this lines? I set >> LogLevel to debug and apache flags to "-e debug" but it did not help. > > Do you have any web-oriented software on your machine that is compiled > (not scripts, but actual compiled software) that hasn't been rebuilt > since you rebuilt world/kernel? =C2=A0If so, this software will need to b= e > rebuilt. > > You will have to try and correlate HTTP requests in your access_log to > the errors you see in your error_log, and then trace things backwards > from there. =C2=A0error_log contains output that goes to stderr, and the > above error message is probably going to stderr hence it shows up in > your logs. > > There is a way to find out what links to libkvm on the machine. =C2=A0Thi= s > won't be 100% accurate -- libkvm comes in two types, a static library > (libkvm.a) and a shared library (libkvm.so.X). =C2=A0If something links t= o > the shared, ldd can find it. =C2=A0If something links (thus pulls in > statically) it becomes even more difficult to determine what software > it is. =C2=A0For the ldd stuff: > > find -X /usr/local -type f -print0 | xargs -0 ldd 2>/dev/null 1> output.t= xt > > Then open up output.txt in an editor (vi, etc.) and search for libkvm. > Once you find an entry, scroll backwards/up a little bit until you find > the correlating binary that links to it (e.g. /usr/local/bin/binary:). > > Finding statically-linked stuff that was built with libkvm.a is going to > be much more painful. > > None of this looks for things like, say, executables in users' home > directories that could have been built from source code (e.g. > /home/user/public_html/mybinary.cgi) and linked to libkvm. > > If you don't want to deal with any of this, then the solution should be > quite simple for system software: rebuild all of your ports. =C2=A0If the > problem continues after that, then it's very likely you're using some > 3rd-party software that's binary-only (please contact your vendor to > resolve this), or it's some software somewhere other than in /usr/local. > > -- > | Jeremy Chadwick =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0= =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0jdc at parodius.com= | > | Parodius Networking =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 http://www.parodius.com/ | > | UNIX Systems Administrator =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 Mountain View, CA, US | > | Making life hard for others since 1977. =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 PGP 4BD6C0CB | > > From owner-freebsd-apache@FreeBSD.ORG Mon Jul 25 11:06:18 2011 Return-Path: Delivered-To: apache@FreeBSD.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 30F9C1065674 for ; Mon, 25 Jul 2011 11:06:18 +0000 (UTC) (envelope-from owner-bugmaster@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id 205938FC16 for ; Mon, 25 Jul 2011 11:06:18 +0000 (UTC) Received: from freefall.freebsd.org (localhost [127.0.0.1]) by freefall.freebsd.org (8.14.4/8.14.4) with ESMTP id p6PB6IbU045693 for ; Mon, 25 Jul 2011 11:06:18 GMT (envelope-from owner-bugmaster@FreeBSD.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.14.4/8.14.4/Submit) id p6PB6H5B045691 for apache@FreeBSD.org; Mon, 25 Jul 2011 11:06:17 GMT (envelope-from owner-bugmaster@FreeBSD.org) Date: Mon, 25 Jul 2011 11:06:17 GMT Message-Id: <201107251106.p6PB6H5B045691@freefall.freebsd.org> X-Authentication-Warning: freefall.freebsd.org: gnats set sender to owner-bugmaster@FreeBSD.org using -f From: FreeBSD bugmaster To: apache@FreeBSD.org Cc: Subject: Current problem reports assigned to apache@FreeBSD.org X-BeenThere: freebsd-apache@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Support of apache-related ports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 25 Jul 2011 11:06:18 -0000 Note: to view an individual PR, use: http://www.freebsd.org/cgi/query-pr.cgi?pr=(number). The following is a listing of current problems submitted by FreeBSD users. These represent problem reports covering all versions including experimental development code and obsolete releases. S Tracker Resp. Description -------------------------------------------------------------------------------- o ports/158709 apache [NEW PORT] www/mod_setenvifplus: Allows setting enviro o ports/158565 apache www/apache22: Add rlimits based on login class for mpm f ports/158544 apache Port www/mod_perl2 fails to build o ports/157554 apache www/apache22: Apache RLimitNPROC does not work as inte o ports/156987 apache www/apache22: Harden SSL cipher suites strength and SS o ports/156787 apache www/mod_auth_kerb2 fails on undefined symbol with base f ports/156719 apache ab: apr_socket_recv: Connection reset by peer (54) o ports/156251 apache [PATCH] Enable module by default for www/mod_fastcgi o ports/153406 apache www/apache22's SUEXEC_RSRCLIMIT option does not take e o ports/153264 apache www/apache22 and apache13-modssl -- rc.d script improv o ports/147806 apache [PATCH] www/apache20: httpd doesn't start with WITH_LD o ports/147282 apache errors when starting www/apache22 after installation o o ports/146199 apache www/apache20: port does not use make config o ports/144010 apache devel/apr1 tries to use SYSVIPC even in jails o ports/130479 apache www/apache20 and www/apache22 configure_args busted o ports/125183 apache www/apache22 wrong SUEXEC_DOCROOT o ports/124375 apache security/heimdal: www/mod_auth_kerb doesn't compile ag s ports/108169 apache www/apache20 wrong AP_SAFE_PATH for suEXEC 18 problems total. From owner-freebsd-apache@FreeBSD.ORG Tue Jul 26 09:57:16 2011 Return-Path: Delivered-To: freebsd-apache@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id D10451065675 for ; Tue, 26 Jul 2011 09:57:16 +0000 (UTC) (envelope-from jrhett@netconsonance.com) Received: from mail.netconsonance.com (mail.netconsonance.com [198.207.204.4]) by mx1.freebsd.org (Postfix) with ESMTP id AC2B78FC15 for ; Tue, 26 Jul 2011 09:57:16 +0000 (UTC) Received: from megaraptor.home.netconsonance.com (99-124-207-89.uvs.sntcca.sbcglobal.net [99.124.207.89]) (authenticated bits=0) by mail.netconsonance.com (8.14.5/8.14.5) with ESMTP id p6Q9ZVl2037844 for ; Tue, 26 Jul 2011 02:35:32 -0700 (PDT) (envelope-from jrhett@netconsonance.com) X-Virus-Scanned: amavisd-new at netconsonance.com X-Spam-Flag: NO X-Spam-Score: -11 X-Spam-Level: X-Spam-Status: No, score=-11 tagged_above=-999 required=3.5 tests=[ALL_TRUSTED=-1, LOCAL_AUTH_RCVD=-10] autolearn=disabled From: Jo Rhett Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable Date: Tue, 26 Jul 2011 02:35:31 -0700 Message-Id: To: freebsd-apache@freebsd.org Mime-Version: 1.0 (Apple Message framework v1084) X-Mailer: Apple Mail (2.1084) Subject: problems with db185 authentication for apr 1.4.5 and apache 2.2.19 ? X-BeenThere: freebsd-apache@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Support of apache-related ports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 26 Jul 2011 09:57:16 -0000 I have a 6.3 system which I just upgraded to 8.2, and obviously = recompiled all ports from scratch. I cleared out the ports DB entirely, = cleared out /usr/local entirely except for etc/config files. Every = other port on the system recompiled fine, except for apache. It works = for everything except reading authentication files. I'd deeply = appreciate any assistance you can give to solving this. For some reason I can't figure out, BDB authentication using the = built-in db 1.85 no longer works. dbmmanage /path/to/file view/adduser/delete/etc works fine file /path/to/file /path/to/file: Berkeley DB 1.85 (Hash, version 2, native = byte-order) Accessing from the web server always returns a 500 error with the = following in the error log: (2)No such file or directory: could not open dbm (type default) = auth file: /path/to/passwd.dat I've recompiled apr and apache with a variety of different options, and = nothing works. apr without any databases doesn't work. apr with BDB = doesn't work, etc. My options for apache have remained the same: APACHE_PORT=3Dwww/apache22 WITH_DBM=3Dbdb WITH_BDB_BASE=3Dyes =09 apr1$ make showconfig =3D=3D=3D> The following configuration options are available for = apr-ipv6-devrandom-db48-1.4.5.1.3.12: THREADS=3Don "Enable Threads in apr" IPV6=3Don "Enable IPV6 Support in apr" BDB=3Doff "Enable Berkley BDB support in apr-util" GDBM=3Doff "Enable GNU dbm support in apr-util" LDAP=3Doff "Enable LDAP support in apr-util" MYSQL=3Doff "Enable MySQL suport in apr-util" NDBM=3Doff "Enable NDBM support in apr-util" PGSQL=3Doff "Enable Postgresql suport in apr-util" SQLITE=3Doff "Enable SQLite3 support in apr-util" DEVRANDOM=3Don "Use /dev/random or compatible in apr" =3D=3D=3D> Use 'make config' to modify these settings apache22$ make showconfig =3D=3D=3D> The following configuration options are available for = apache-2.2.19: THREADS=3Doff "Enable threads support in APR" MYSQL=3Doff "Enable MySQL support for apr-dbd" PGSQL=3Doff "Enable PostgreSQL support for apr-dbd" SQLITE=3Doff "Enable SQLite support for apr-dbd" IPV6=3Don "Enable IPv6 support" BDB=3Don "Enable BerkeleyDB dbm" AUTH_BASIC=3Don "Enable mod_auth_basic" AUTH_DIGEST=3Don "Enable mod_auth_digest" AUTHN_FILE=3Don "Enable mod_authn_file" AUTHN_DBD=3Doff "Enable mod_authn_dbd" AUTHN_DBM=3Don "Enable mod_authn_dbm" AUTHN_ANON=3Don "Enable mod_authn_anon" AUTHN_DEFAULT=3Don "Enable mod_authn_default" AUTHN_ALIAS=3Don "Enable mod_authn_alias" AUTHZ_HOST=3Don "Enable mod_authz_host" AUTHZ_GROUPFILE=3Don "Enable mod_authz_groupfile" AUTHZ_USER=3Don "Enable mod_authz_user" AUTHZ_DBM=3Don "Enable mod_authz_dbm" AUTHZ_OWNER=3Don "Enable mod_authz_owner" AUTHZ_DEFAULT=3Don "Enable mod_authz_default" CACHE=3Don "Enable mod_cache" DISK_CACHE=3Don "Enable mod_disk_cache" FILE_CACHE=3Don "Enable mod_file_cache" MEM_CACHE=3Doff "Enable mod_mem_cache" DAV=3Don "Enable mod_dav" DAV_FS=3Don "Enable mod_dav_fs" BUCKETEER=3Doff "Enable mod_bucketeer" CASE_FILTER=3Doff "Enable mod_case_filter" CASE_FILTER_IN=3Doff "Enable mod_case_filter_in" EXT_FILTER=3Doff "Enable mod_ext_filter" LOG_FORENSIC=3Doff "Enable mod_log_forensic" OPTIONAL_HOOK_EXPORT=3Doff "Enable mod_optional_hook_export" OPTIONAL_HOOK_IMPORT=3Doff "Enable mod_optional_hook_import" OPTIONAL_FN_IMPORT=3Doff "Enable mod_optional_fn_import" OPTIONAL_FN_EXPORT=3Doff "Enable mod_optional_fn_export" LDAP=3Doff "Enable mod_ldap" AUTHNZ_LDAP=3Doff "Enable mod_authnz_ldap" ACTIONS=3Don "Enable mod_actions" ALIAS=3Don "Enable mod_alias" ASIS=3Don "Enable mod_asis" AUTOINDEX=3Don "Enable mod_autoindex" CERN_META=3Don "Enable mod_cern_meta" CGI=3Don "Enable mod_cgi" CHARSET_LITE=3Don "Enable mod_charset_lite" DBD=3Doff "Enable mod_dbd" DEFLATE=3Don "Enable mod_deflate" DIR=3Don "Enable mod_dir" DUMPIO=3Don "Enable mod_dumpio" ENV=3Don "Enable mod_env" EXPIRES=3Don "Enable mod_expires" HEADERS=3Don "Enable mod_headers" IMAGEMAP=3Don "Enable mod_imagemap" INCLUDE=3Don "Enable mod_include" INFO=3Don "Enable mod_info" LOG_CONFIG=3Don "Enable mod_log_config" LOGIO=3Don "Enable mod_logio" MIME=3Don "Enable mod_mime" MIME_MAGIC=3Don "Enable mod_mime_magic" NEGOTIATION=3Don "Enable mod_negotiation" REWRITE=3Don "Enable mod_rewrite" SETENVIF=3Don "Enable mod_setenvif" SPELING=3Don "Enable mod_speling" STATUS=3Don "Enable mod_status" UNIQUE_ID=3Don "Enable mod_unique_id" USERDIR=3Don "Enable mod_userdir" USERTRACK=3Don "Enable mod_usertrack" VHOST_ALIAS=3Don "Enable mod_vhost_alias" FILTER=3Don "Enable mod_filter" SUBSTITUTE=3Doff "Enable mod_substitute" VERSION=3Don "Enable mod_version" PROXY=3Doff "Enable mod_proxy" PROXY_CONNECT=3Doff "Enable mod_proxy_connect" PATCH_PROXY_CONNECT=3Doff "Patch proxy_connect SSL support" PROXY_FTP=3Doff "Enable mod_proxy_ftp" PROXY_HTTP=3Doff "Enable mod_proxy_http" PROXY_AJP=3Doff "Enable mod_proxy_ajp" PROXY_BALANCER=3Doff "Enable mod_proxy_balancer" PROXY_SCGI=3Doff "Enable mod_proxy_scgi" SSL=3Don "Enable mod_ssl" SUEXEC=3Doff "Enable mod_suexec" SUEXEC_RSRCLIMIT=3Doff "SuEXEC rlimits based on login class" REQTIMEOUT=3Don "Enable mod_reqtimeout" CGID=3Doff "Enable mod_cgid" =3D=3D=3D> Use 'make config' to modify these settings As said above, I appreciate any assistance you can give. --=20 Jo Rhett Net Consonance : consonant endings by net philanthropy, open source and = other randomness From owner-freebsd-apache@FreeBSD.ORG Tue Jul 26 22:19:33 2011 Return-Path: Delivered-To: freebsd-apache@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 2C6DB106566C for ; Tue, 26 Jul 2011 22:19:33 +0000 (UTC) (envelope-from pgollucci@p6m7g8.com) Received: from EXHUB015-3.exch015.msoutlookonline.net (exhub015-3.exch015.msoutlookonline.net [207.5.72.95]) by mx1.freebsd.org (Postfix) with ESMTP id 175478FC1D for ; Tue, 26 Jul 2011 22:19:32 +0000 (UTC) Received: from philip.hq.rws (174.79.184.239) by smtpx15.msoutlookonline.net (207.5.72.103) with Microsoft SMTP Server (TLS) id 8.2.254.0; Tue, 26 Jul 2011 15:09:27 -0700 Message-ID: <4E2F3B16.7060204@p6m7g8.com> Date: Tue, 26 Jul 2011 22:09:26 +0000 From: "Philip M. Gollucci" Organization: P6M7G8 Inc. User-Agent: Mozilla/5.0 (X11; U; FreeBSD amd64; en-US; rv:1.9.1.16) Gecko/20110507 Thunderbird/3.0.11 MIME-Version: 1.0 To: Jo Rhett References: In-Reply-To: X-Enigmail-Version: 1.0.1 Content-Type: text/plain; charset="ISO-8859-1" Content-Transfer-Encoding: 7bit Cc: freebsd-apache@freebsd.org Subject: Re: problems with db185 authentication for apr 1.4.5 and apache 2.2.19 ? X-BeenThere: freebsd-apache@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Support of apache-related ports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 26 Jul 2011 22:19:33 -0000 run httpd -X and then use ktrace -i / kdump then grep for NAMI and the name of your file On 07/26/11 09:35, Jo Rhett wrote: > I have a 6.3 system which I just upgraded to 8.2, and obviously recompiled all ports from scratch. I cleared out the ports DB entirely, cleared out /usr/local entirely except for etc/config files. Every other port on the system recompiled fine, except for apache. It works for everything except reading authentication files. I'd deeply appreciate any assistance you can give to solving this. > > For some reason I can't figure out, BDB authentication using the built-in db 1.85 no longer works. > > dbmmanage /path/to/file view/adduser/delete/etc works fine > file /path/to/file > /path/to/file: Berkeley DB 1.85 (Hash, version 2, native byte-order) > > Accessing from the web server always returns a 500 error with the following in the error log: > (2)No such file or directory: could not open dbm (type default) auth file: /path/to/passwd.dat > > I've recompiled apr and apache with a variety of different options, and nothing works. apr without any databases doesn't work. apr with BDB doesn't work, etc. My options for apache have remained the same: > APACHE_PORT=www/apache22 > WITH_DBM=bdb > WITH_BDB_BASE=yes > > apr1$ make showconfig > ===> The following configuration options are available for apr-ipv6-devrandom-db48-1.4.5.1.3.12: > THREADS=on "Enable Threads in apr" > IPV6=on "Enable IPV6 Support in apr" > BDB=off "Enable Berkley BDB support in apr-util" > GDBM=off "Enable GNU dbm support in apr-util" > LDAP=off "Enable LDAP support in apr-util" > MYSQL=off "Enable MySQL suport in apr-util" > NDBM=off "Enable NDBM support in apr-util" > PGSQL=off "Enable Postgresql suport in apr-util" > SQLITE=off "Enable SQLite3 support in apr-util" > DEVRANDOM=on "Use /dev/random or compatible in apr" > ===> Use 'make config' to modify these settings > > apache22$ make showconfig > ===> The following configuration options are available for apache-2.2.19: > THREADS=off "Enable threads support in APR" > MYSQL=off "Enable MySQL support for apr-dbd" > PGSQL=off "Enable PostgreSQL support for apr-dbd" > SQLITE=off "Enable SQLite support for apr-dbd" > IPV6=on "Enable IPv6 support" > BDB=on "Enable BerkeleyDB dbm" > AUTH_BASIC=on "Enable mod_auth_basic" > AUTH_DIGEST=on "Enable mod_auth_digest" > AUTHN_FILE=on "Enable mod_authn_file" > AUTHN_DBD=off "Enable mod_authn_dbd" > AUTHN_DBM=on "Enable mod_authn_dbm" > AUTHN_ANON=on "Enable mod_authn_anon" > AUTHN_DEFAULT=on "Enable mod_authn_default" > AUTHN_ALIAS=on "Enable mod_authn_alias" > AUTHZ_HOST=on "Enable mod_authz_host" > AUTHZ_GROUPFILE=on "Enable mod_authz_groupfile" > AUTHZ_USER=on "Enable mod_authz_user" > AUTHZ_DBM=on "Enable mod_authz_dbm" > AUTHZ_OWNER=on "Enable mod_authz_owner" > AUTHZ_DEFAULT=on "Enable mod_authz_default" > CACHE=on "Enable mod_cache" > DISK_CACHE=on "Enable mod_disk_cache" > FILE_CACHE=on "Enable mod_file_cache" > MEM_CACHE=off "Enable mod_mem_cache" > DAV=on "Enable mod_dav" > DAV_FS=on "Enable mod_dav_fs" > BUCKETEER=off "Enable mod_bucketeer" > CASE_FILTER=off "Enable mod_case_filter" > CASE_FILTER_IN=off "Enable mod_case_filter_in" > EXT_FILTER=off "Enable mod_ext_filter" > LOG_FORENSIC=off "Enable mod_log_forensic" > OPTIONAL_HOOK_EXPORT=off "Enable mod_optional_hook_export" > OPTIONAL_HOOK_IMPORT=off "Enable mod_optional_hook_import" > OPTIONAL_FN_IMPORT=off "Enable mod_optional_fn_import" > OPTIONAL_FN_EXPORT=off "Enable mod_optional_fn_export" > LDAP=off "Enable mod_ldap" > AUTHNZ_LDAP=off "Enable mod_authnz_ldap" > ACTIONS=on "Enable mod_actions" > ALIAS=on "Enable mod_alias" > ASIS=on "Enable mod_asis" > AUTOINDEX=on "Enable mod_autoindex" > CERN_META=on "Enable mod_cern_meta" > CGI=on "Enable mod_cgi" > CHARSET_LITE=on "Enable mod_charset_lite" > DBD=off "Enable mod_dbd" > DEFLATE=on "Enable mod_deflate" > DIR=on "Enable mod_dir" > DUMPIO=on "Enable mod_dumpio" > ENV=on "Enable mod_env" > EXPIRES=on "Enable mod_expires" > HEADERS=on "Enable mod_headers" > IMAGEMAP=on "Enable mod_imagemap" > INCLUDE=on "Enable mod_include" > INFO=on "Enable mod_info" > LOG_CONFIG=on "Enable mod_log_config" > LOGIO=on "Enable mod_logio" > MIME=on "Enable mod_mime" > MIME_MAGIC=on "Enable mod_mime_magic" > NEGOTIATION=on "Enable mod_negotiation" > REWRITE=on "Enable mod_rewrite" > SETENVIF=on "Enable mod_setenvif" > SPELING=on "Enable mod_speling" > STATUS=on "Enable mod_status" > UNIQUE_ID=on "Enable mod_unique_id" > USERDIR=on "Enable mod_userdir" > USERTRACK=on "Enable mod_usertrack" > VHOST_ALIAS=on "Enable mod_vhost_alias" > FILTER=on "Enable mod_filter" > SUBSTITUTE=off "Enable mod_substitute" > VERSION=on "Enable mod_version" > PROXY=off "Enable mod_proxy" > PROXY_CONNECT=off "Enable mod_proxy_connect" > PATCH_PROXY_CONNECT=off "Patch proxy_connect SSL support" > PROXY_FTP=off "Enable mod_proxy_ftp" > PROXY_HTTP=off "Enable mod_proxy_http" > PROXY_AJP=off "Enable mod_proxy_ajp" > PROXY_BALANCER=off "Enable mod_proxy_balancer" > PROXY_SCGI=off "Enable mod_proxy_scgi" > SSL=on "Enable mod_ssl" > SUEXEC=off "Enable mod_suexec" > SUEXEC_RSRCLIMIT=off "SuEXEC rlimits based on login class" > REQTIMEOUT=on "Enable mod_reqtimeout" > CGID=off "Enable mod_cgid" > ===> Use 'make config' to modify these settings > > > As said above, I appreciate any assistance you can give. > -- ------------------------------------------------------------------------ 1024D/DB9B8C1C B90B FBC3 A3A1 C71A 8E70 3F8C 75B8 8FFB DB9B 8C1C Philip M. Gollucci (pgollucci@p6m7g8.com) c: 703.336.9354 VP Infrastructure, Apache Software Foundation Committer, FreeBSD Foundation Consultant, P6M7G8 Inc. Sr. System Admin, Ridecharge Inc. Work like you don't need the money, love like you'll never get hurt, and dance like nobody's watching. From owner-freebsd-apache@FreeBSD.ORG Wed Jul 27 07:31:50 2011 Return-Path: Delivered-To: freebsd-apache@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 741191065670 for ; Wed, 27 Jul 2011 07:31:50 +0000 (UTC) (envelope-from jrhett@netconsonance.com) Received: from mail.netconsonance.com (mail.netconsonance.com [198.207.204.4]) by mx1.freebsd.org (Postfix) with ESMTP id 579E48FC14 for ; Wed, 27 Jul 2011 07:31:50 +0000 (UTC) Received: from megaraptor.home.netconsonance.com (99-124-207-89.uvs.sntcca.sbcglobal.net [99.124.207.89]) (authenticated bits=0) by mail.netconsonance.com (8.14.5/8.14.5) with ESMTP id p6R7Vj41003104; Wed, 27 Jul 2011 00:31:45 -0700 (PDT) (envelope-from jrhett@netconsonance.com) X-Virus-Scanned: amavisd-new at netconsonance.com X-Spam-Flag: NO X-Spam-Score: -11 X-Spam-Level: X-Spam-Status: No, score=-11 tagged_above=-999 required=3.5 tests=[ALL_TRUSTED=-1, LOCAL_AUTH_RCVD=-10] autolearn=disabled Mime-Version: 1.0 (Apple Message framework v1084) Content-Type: text/plain; charset=us-ascii From: Jo Rhett In-Reply-To: <4E2F3B16.7060204@p6m7g8.com> Date: Wed, 27 Jul 2011 00:31:45 -0700 Content-Transfer-Encoding: quoted-printable Message-Id: References: <4E2F3B16.7060204@p6m7g8.com> To: "Philip M. Gollucci" X-Mailer: Apple Mail (2.1084) Cc: freebsd-apache@freebsd.org Subject: Re: problems with db185 authentication for apr 1.4.5 and apache 2.2.19 ? X-BeenThere: freebsd-apache@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Support of apache-related ports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 27 Jul 2011 07:31:50 -0000 On Jul 26, 2011, at 3:09 PM, Philip M. Gollucci wrote: > run httpd -X > and then use ktrace -i / kdump > then grep for NAMI and the name of your file Okay, well this makes sense at least - it's looking for a .dir file = which of course doesn't exist. What I don't understand here is that I = don't have gdbm or sdbm enabled. In fact, I don't even have them = compiled on the platform. # kdump |grep /passwd 724 httpd NAMI "/path/to/passwd.dat.dir" And more to the point, I explicitly told apache not to use anything = except BDB 185. You can see this in the configure line built by the = port: $ head -10 /usr/ports/www/apache22/work/httpd-2.2.19/config.log This file contains any messages produced by compilers while running configure, to aid debugging if configure makes a mistake. It was created by configure, which was generated by GNU Autoconf 2.68. Invocation command line was $ ./configure --prefix=3D/usr/local --enable-layout=3DFreeBSD = --with-perl=3D/usr/local/bin/perl5.14.1 --with-port=3D80 = --with-expat=3D/usr/local --with-iconv=3D/usr/local --enable-http = --with-pcre=3D/usr/local --with-apr=3D/usr/local/bin/apr-1-config = --with-apr-util=3D/usr/local/bin/apu-1-config --disable-authn-file = --disable-authn-default --disable-authz-host --disable-authz-groupfile = --disable-authz-user --disable-authz-default --disable-auth-basic = --disable-charset-lite --disable-include --disable-log-config = --disable-env --disable-setenvif --disable-mime --disable-status = --disable-autoindex --disable-asis --disable-cgid --disable-cgi = --disable-negotiation --disable-dir --disable-imagemap --disable-actions = --disable-userdir --disable-alias --disable-filter --disable-substitute = --disable-proxy --disable-proxy-connect --disable-proxy-ftp = --disable-proxy-http --disable-proxy-ajp --disable-proxy-balancer = --disable-proxy-scgi --disable-reqtimeout --enable-so = --enable-mods-shared=3Dauth_basic auth_digest authn_file authn_dbm = authn_anon authn_default authn_alias authz_host authz_groupfile = authz_user authz_dbm authz_owner authz_default cache disk_cache = file_cache dav dav_fs actions alias asis autoindex cern_meta cgi = charset_lite deflate dir dumpio env expires headers imagemap include = info log_config logio mime mime_magic negotiation rewrite setenvif = speling status unique_id userdir usertrack vhost_alias filter version = reqtimeout ssl --with-dbm=3Ddb185 --with-berkeley-db=3D/usr = --with-ssl=3D/usr --enable-v4-mapped --with-devrandom --with-mpm=3Dprefork= --prefix=3D/usr/local --mandir=3D/usr/local/man = --infodir=3D/usr/local/info/ --build=3Di386-portbld-freebsd8.2 > On 07/26/11 09:35, Jo Rhett wrote: >> I have a 6.3 system which I just upgraded to 8.2, and obviously = recompiled all ports from scratch. I cleared out the ports DB entirely, = cleared out /usr/local entirely except for etc/config files. Every = other port on the system recompiled fine, except for apache. It works = for everything except reading authentication files. I'd deeply = appreciate any assistance you can give to solving this. >>=20 >> For some reason I can't figure out, BDB authentication using the = built-in db 1.85 no longer works. >>=20 >> dbmmanage /path/to/file view/adduser/delete/etc works fine >> file /path/to/file >> /path/to/file: Berkeley DB 1.85 (Hash, version 2, native = byte-order) >>=20 >> Accessing from the web server always returns a 500 error with the = following in the error log: >> (2)No such file or directory: could not open dbm (type default) = auth file: /path/to/passwd.dat >>=20 >> I've recompiled apr and apache with a variety of different options, = and nothing works. apr without any databases doesn't work. apr with BDB = doesn't work, etc. My options for apache have remained the same: >> APACHE_PORT=3Dwww/apache22 >> WITH_DBM=3Dbdb >> WITH_BDB_BASE=3Dyes >> =09 >> apr1$ make showconfig >> =3D=3D=3D> The following configuration options are available for = apr-ipv6-devrandom-db48-1.4.5.1.3.12: >> THREADS=3Don "Enable Threads in apr" >> IPV6=3Don "Enable IPV6 Support in apr" >> BDB=3Doff "Enable Berkley BDB support in apr-util" >> GDBM=3Doff "Enable GNU dbm support in apr-util" >> LDAP=3Doff "Enable LDAP support in apr-util" >> MYSQL=3Doff "Enable MySQL suport in apr-util" >> NDBM=3Doff "Enable NDBM support in apr-util" >> PGSQL=3Doff "Enable Postgresql suport in apr-util" >> SQLITE=3Doff "Enable SQLite3 support in apr-util" >> DEVRANDOM=3Don "Use /dev/random or compatible in apr" >> =3D=3D=3D> Use 'make config' to modify these settings >>=20 >> apache22$ make showconfig >> =3D=3D=3D> The following configuration options are available for = apache-2.2.19: >> THREADS=3Doff "Enable threads support in APR" >> MYSQL=3Doff "Enable MySQL support for apr-dbd" >> PGSQL=3Doff "Enable PostgreSQL support for apr-dbd" >> SQLITE=3Doff "Enable SQLite support for apr-dbd" >> IPV6=3Don "Enable IPv6 support" >> BDB=3Don "Enable BerkeleyDB dbm" >> AUTH_BASIC=3Don "Enable mod_auth_basic" >> AUTH_DIGEST=3Don "Enable mod_auth_digest" >> AUTHN_FILE=3Don "Enable mod_authn_file" >> AUTHN_DBD=3Doff "Enable mod_authn_dbd" >> AUTHN_DBM=3Don "Enable mod_authn_dbm" >> AUTHN_ANON=3Don "Enable mod_authn_anon" >> AUTHN_DEFAULT=3Don "Enable mod_authn_default" >> AUTHN_ALIAS=3Don "Enable mod_authn_alias" >> AUTHZ_HOST=3Don "Enable mod_authz_host" >> AUTHZ_GROUPFILE=3Don "Enable mod_authz_groupfile" >> AUTHZ_USER=3Don "Enable mod_authz_user" >> AUTHZ_DBM=3Don "Enable mod_authz_dbm" >> AUTHZ_OWNER=3Don "Enable mod_authz_owner" >> AUTHZ_DEFAULT=3Don "Enable mod_authz_default" >> CACHE=3Don "Enable mod_cache" >> DISK_CACHE=3Don "Enable mod_disk_cache" >> FILE_CACHE=3Don "Enable mod_file_cache" >> MEM_CACHE=3Doff "Enable mod_mem_cache" >> DAV=3Don "Enable mod_dav" >> DAV_FS=3Don "Enable mod_dav_fs" >> BUCKETEER=3Doff "Enable mod_bucketeer" >> CASE_FILTER=3Doff "Enable mod_case_filter" >> CASE_FILTER_IN=3Doff "Enable mod_case_filter_in" >> EXT_FILTER=3Doff "Enable mod_ext_filter" >> LOG_FORENSIC=3Doff "Enable mod_log_forensic" >> OPTIONAL_HOOK_EXPORT=3Doff "Enable mod_optional_hook_export" >> OPTIONAL_HOOK_IMPORT=3Doff "Enable mod_optional_hook_import" >> OPTIONAL_FN_IMPORT=3Doff "Enable mod_optional_fn_import" >> OPTIONAL_FN_EXPORT=3Doff "Enable mod_optional_fn_export" >> LDAP=3Doff "Enable mod_ldap" >> AUTHNZ_LDAP=3Doff "Enable mod_authnz_ldap" >> ACTIONS=3Don "Enable mod_actions" >> ALIAS=3Don "Enable mod_alias" >> ASIS=3Don "Enable mod_asis" >> AUTOINDEX=3Don "Enable mod_autoindex" >> CERN_META=3Don "Enable mod_cern_meta" >> CGI=3Don "Enable mod_cgi" >> CHARSET_LITE=3Don "Enable mod_charset_lite" >> DBD=3Doff "Enable mod_dbd" >> DEFLATE=3Don "Enable mod_deflate" >> DIR=3Don "Enable mod_dir" >> DUMPIO=3Don "Enable mod_dumpio" >> ENV=3Don "Enable mod_env" >> EXPIRES=3Don "Enable mod_expires" >> HEADERS=3Don "Enable mod_headers" >> IMAGEMAP=3Don "Enable mod_imagemap" >> INCLUDE=3Don "Enable mod_include" >> INFO=3Don "Enable mod_info" >> LOG_CONFIG=3Don "Enable mod_log_config" >> LOGIO=3Don "Enable mod_logio" >> MIME=3Don "Enable mod_mime" >> MIME_MAGIC=3Don "Enable mod_mime_magic" >> NEGOTIATION=3Don "Enable mod_negotiation" >> REWRITE=3Don "Enable mod_rewrite" >> SETENVIF=3Don "Enable mod_setenvif" >> SPELING=3Don "Enable mod_speling" >> STATUS=3Don "Enable mod_status" >> UNIQUE_ID=3Don "Enable mod_unique_id" >> USERDIR=3Don "Enable mod_userdir" >> USERTRACK=3Don "Enable mod_usertrack" >> VHOST_ALIAS=3Don "Enable mod_vhost_alias" >> FILTER=3Don "Enable mod_filter" >> SUBSTITUTE=3Doff "Enable mod_substitute" >> VERSION=3Don "Enable mod_version" >> PROXY=3Doff "Enable mod_proxy" >> PROXY_CONNECT=3Doff "Enable mod_proxy_connect" >> PATCH_PROXY_CONNECT=3Doff "Patch proxy_connect SSL support" >> PROXY_FTP=3Doff "Enable mod_proxy_ftp" >> PROXY_HTTP=3Doff "Enable mod_proxy_http" >> PROXY_AJP=3Doff "Enable mod_proxy_ajp" >> PROXY_BALANCER=3Doff "Enable mod_proxy_balancer" >> PROXY_SCGI=3Doff "Enable mod_proxy_scgi" >> SSL=3Don "Enable mod_ssl" >> SUEXEC=3Doff "Enable mod_suexec" >> SUEXEC_RSRCLIMIT=3Doff "SuEXEC rlimits based on login class" >> REQTIMEOUT=3Don "Enable mod_reqtimeout" >> CGID=3Doff "Enable mod_cgid" >> =3D=3D=3D> Use 'make config' to modify these settings >>=20 >>=20 >> As said above, I appreciate any assistance you can give. >>=20 >=20 >=20 > --=20 > = ------------------------------------------------------------------------ > 1024D/DB9B8C1C B90B FBC3 A3A1 C71A 8E70 3F8C 75B8 8FFB DB9B 8C1C > Philip M. Gollucci (pgollucci@p6m7g8.com) c: 703.336.9354 > VP Infrastructure, Apache Software Foundation > Committer, FreeBSD Foundation > Consultant, P6M7G8 Inc. > Sr. System Admin, Ridecharge Inc. >=20 > Work like you don't need the money, > love like you'll never get hurt, > and dance like nobody's watching. --=20 Jo Rhett Net Consonance : consonant endings by net philanthropy, open source and = other randomness From owner-freebsd-apache@FreeBSD.ORG Wed Jul 27 08:31:26 2011 Return-Path: Delivered-To: freebsd-apache@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 7E85C106564A for ; Wed, 27 Jul 2011 08:31:26 +0000 (UTC) (envelope-from jrhett@netconsonance.com) Received: from mail.netconsonance.com (mail.netconsonance.com [198.207.204.4]) by mx1.freebsd.org (Postfix) with ESMTP id 60D1A8FC15 for ; Wed, 27 Jul 2011 08:31:26 +0000 (UTC) Received: from megaraptor.home.netconsonance.com (99-124-207-89.uvs.sntcca.sbcglobal.net [99.124.207.89]) (authenticated bits=0) by mail.netconsonance.com (8.14.5/8.14.5) with ESMTP id p6R8VLVY049747; Wed, 27 Jul 2011 01:31:21 -0700 (PDT) (envelope-from jrhett@netconsonance.com) X-Virus-Scanned: amavisd-new at netconsonance.com X-Spam-Flag: NO X-Spam-Score: -11 X-Spam-Level: X-Spam-Status: No, score=-11 tagged_above=-999 required=3.5 tests=[ALL_TRUSTED=-1, LOCAL_AUTH_RCVD=-10] autolearn=disabled Mime-Version: 1.0 (Apple Message framework v1084) Content-Type: text/plain; charset=us-ascii From: Jo Rhett In-Reply-To: Date: Wed, 27 Jul 2011 01:31:21 -0700 Content-Transfer-Encoding: quoted-printable Message-Id: References: <4E2F3B16.7060204@p6m7g8.com> To: "Philip M. Gollucci" X-Mailer: Apple Mail (2.1084) Cc: freebsd-apache@freebsd.org Subject: Re: problems with db185 authentication for apr 1.4.5 and apache 2.2.19 ? X-BeenThere: freebsd-apache@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Support of apache-related ports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 27 Jul 2011 08:31:26 -0000 More interesting. I explicitly set AuthDBMType to DB and that problem = disappeared, but the error remained. Looking at kdump this seems to be = the problem: 3928 httpd NAMI "/usr/local/lib/apr-util-1/apr_dbm_db-1.so" "[Wed Jul 27 01:06:25 2011] [error] [client 99.124.207.89] = (20019)DSO load failed: could not open dbm (type DB) auth file: = /path/to/passwd.dat # ls -la /usr/local/lib/apr* -rw-r--r-- 1 root wheel 7164 Jul 26 02:36 /usr/local/lib/apr.exp -rw-r--r-- 1 root wheel 4412 Jul 26 02:36 /usr/local/lib/aprutil.exp This doesn't seem to be a problem of reading the file so much as trying = to load a DS0 that doesn't exist? I've rebuilt apr1 a few times now, and those files simply aren't = installed. On Jul 27, 2011, at 12:31 AM, Jo Rhett wrote: > On Jul 26, 2011, at 3:09 PM, Philip M. Gollucci wrote: >> run httpd -X >> and then use ktrace -i / kdump >> then grep for NAMI and the name of your file >=20 > Okay, well this makes sense at least - it's looking for a .dir file = which of course doesn't exist. What I don't understand here is that I = don't have gdbm or sdbm enabled. In fact, I don't even have them = compiled on the platform. >=20 > # kdump |grep /passwd > 724 httpd NAMI "/path/to/passwd.dat.dir" >=20 > And more to the point, I explicitly told apache not to use anything = except BDB 185. You can see this in the configure line built by the = port: >=20 > $ head -10 /usr/ports/www/apache22/work/httpd-2.2.19/config.log > This file contains any messages produced by compilers while > running configure, to aid debugging if configure makes a mistake. >=20 > It was created by configure, which was > generated by GNU Autoconf 2.68. Invocation command line was >=20 > $ ./configure --prefix=3D/usr/local --enable-layout=3DFreeBSD = --with-perl=3D/usr/local/bin/perl5.14.1 --with-port=3D80 = --with-expat=3D/usr/local --with-iconv=3D/usr/local --enable-http = --with-pcre=3D/usr/local --with-apr=3D/usr/local/bin/apr-1-config = --with-apr-util=3D/usr/local/bin/apu-1-config --disable-authn-file = --disable-authn-default --disable-authz-host --disable-authz-groupfile = --disable-authz-user --disable-authz-default --disable-auth-basic = --disable-charset-lite --disable-include --disable-log-config = --disable-env --disable-setenvif --disable-mime --disable-status = --disable-autoindex --disable-asis --disable-cgid --disable-cgi = --disable-negotiation --disable-dir --disable-imagemap --disable-actions = --disable-userdir --disable-alias --disable-filter --disable-substitute = --disable-proxy --disable-proxy-connect --disable-proxy-ftp = --disable-proxy-http --disable-proxy-ajp --disable-proxy-balancer = --disable-proxy-scgi --disable-reqtimeout --enable-so = --enable-mods-shared=3Dauth_basic auth_digest authn_file authn_dbm = authn_anon authn_default authn_alias authz_host authz_groupfile = authz_user authz_dbm authz_owner authz_default cache disk_cache = file_cache dav dav_fs actions alias asis autoindex cern_meta cgi = charset_lite deflate dir dumpio env expires headers imagemap include = info log_config logio mime mime_magic negotiation rewrite setenvif = speling status unique_id userdir usertrack vhost_alias filter version = reqtimeout ssl --with-dbm=3Ddb185 --with-berkeley-db=3D/usr = --with-ssl=3D/usr --enable-v4-mapped --with-devrandom --with-mpm=3Dprefork= --prefix=3D/usr/local --mandir=3D/usr/local/man = --infodir=3D/usr/local/info/ --build=3Di386-portbld-freebsd8.2 >=20 >=20 >> On 07/26/11 09:35, Jo Rhett wrote: >>> I have a 6.3 system which I just upgraded to 8.2, and obviously = recompiled all ports from scratch. I cleared out the ports DB entirely, = cleared out /usr/local entirely except for etc/config files. Every = other port on the system recompiled fine, except for apache. It works = for everything except reading authentication files. I'd deeply = appreciate any assistance you can give to solving this. >>>=20 >>> For some reason I can't figure out, BDB authentication using the = built-in db 1.85 no longer works. >>>=20 >>> dbmmanage /path/to/file view/adduser/delete/etc works fine >>> file /path/to/file >>> /path/to/file: Berkeley DB 1.85 (Hash, version 2, native = byte-order) >>>=20 >>> Accessing from the web server always returns a 500 error with the = following in the error log: >>> (2)No such file or directory: could not open dbm (type default) = auth file: /path/to/passwd.dat >>>=20 >>> I've recompiled apr and apache with a variety of different options, = and nothing works. apr without any databases doesn't work. apr with BDB = doesn't work, etc. My options for apache have remained the same: >>> APACHE_PORT=3Dwww/apache22 >>> WITH_DBM=3Dbdb >>> WITH_BDB_BASE=3Dyes >>> =09 >>> apr1$ make showconfig >>> =3D=3D=3D> The following configuration options are available for = apr-ipv6-devrandom-db48-1.4.5.1.3.12: >>> THREADS=3Don "Enable Threads in apr" >>> IPV6=3Don "Enable IPV6 Support in apr" >>> BDB=3Doff "Enable Berkley BDB support in apr-util" >>> GDBM=3Doff "Enable GNU dbm support in apr-util" >>> LDAP=3Doff "Enable LDAP support in apr-util" >>> MYSQL=3Doff "Enable MySQL suport in apr-util" >>> NDBM=3Doff "Enable NDBM support in apr-util" >>> PGSQL=3Doff "Enable Postgresql suport in apr-util" >>> SQLITE=3Doff "Enable SQLite3 support in apr-util" >>> DEVRANDOM=3Don "Use /dev/random or compatible in apr" >>> =3D=3D=3D> Use 'make config' to modify these settings >>>=20 >>> apache22$ make showconfig >>> =3D=3D=3D> The following configuration options are available for = apache-2.2.19: >>> THREADS=3Doff "Enable threads support in APR" >>> MYSQL=3Doff "Enable MySQL support for apr-dbd" >>> PGSQL=3Doff "Enable PostgreSQL support for apr-dbd" >>> SQLITE=3Doff "Enable SQLite support for apr-dbd" >>> IPV6=3Don "Enable IPv6 support" >>> BDB=3Don "Enable BerkeleyDB dbm" >>> AUTH_BASIC=3Don "Enable mod_auth_basic" >>> AUTH_DIGEST=3Don "Enable mod_auth_digest" >>> AUTHN_FILE=3Don "Enable mod_authn_file" >>> AUTHN_DBD=3Doff "Enable mod_authn_dbd" >>> AUTHN_DBM=3Don "Enable mod_authn_dbm" >>> AUTHN_ANON=3Don "Enable mod_authn_anon" >>> AUTHN_DEFAULT=3Don "Enable mod_authn_default" >>> AUTHN_ALIAS=3Don "Enable mod_authn_alias" >>> AUTHZ_HOST=3Don "Enable mod_authz_host" >>> AUTHZ_GROUPFILE=3Don "Enable mod_authz_groupfile" >>> AUTHZ_USER=3Don "Enable mod_authz_user" >>> AUTHZ_DBM=3Don "Enable mod_authz_dbm" >>> AUTHZ_OWNER=3Don "Enable mod_authz_owner" >>> AUTHZ_DEFAULT=3Don "Enable mod_authz_default" >>> CACHE=3Don "Enable mod_cache" >>> DISK_CACHE=3Don "Enable mod_disk_cache" >>> FILE_CACHE=3Don "Enable mod_file_cache" >>> MEM_CACHE=3Doff "Enable mod_mem_cache" >>> DAV=3Don "Enable mod_dav" >>> DAV_FS=3Don "Enable mod_dav_fs" >>> BUCKETEER=3Doff "Enable mod_bucketeer" >>> CASE_FILTER=3Doff "Enable mod_case_filter" >>> CASE_FILTER_IN=3Doff "Enable mod_case_filter_in" >>> EXT_FILTER=3Doff "Enable mod_ext_filter" >>> LOG_FORENSIC=3Doff "Enable mod_log_forensic" >>> OPTIONAL_HOOK_EXPORT=3Doff "Enable mod_optional_hook_export" >>> OPTIONAL_HOOK_IMPORT=3Doff "Enable mod_optional_hook_import" >>> OPTIONAL_FN_IMPORT=3Doff "Enable mod_optional_fn_import" >>> OPTIONAL_FN_EXPORT=3Doff "Enable mod_optional_fn_export" >>> LDAP=3Doff "Enable mod_ldap" >>> AUTHNZ_LDAP=3Doff "Enable mod_authnz_ldap" >>> ACTIONS=3Don "Enable mod_actions" >>> ALIAS=3Don "Enable mod_alias" >>> ASIS=3Don "Enable mod_asis" >>> AUTOINDEX=3Don "Enable mod_autoindex" >>> CERN_META=3Don "Enable mod_cern_meta" >>> CGI=3Don "Enable mod_cgi" >>> CHARSET_LITE=3Don "Enable mod_charset_lite" >>> DBD=3Doff "Enable mod_dbd" >>> DEFLATE=3Don "Enable mod_deflate" >>> DIR=3Don "Enable mod_dir" >>> DUMPIO=3Don "Enable mod_dumpio" >>> ENV=3Don "Enable mod_env" >>> EXPIRES=3Don "Enable mod_expires" >>> HEADERS=3Don "Enable mod_headers" >>> IMAGEMAP=3Don "Enable mod_imagemap" >>> INCLUDE=3Don "Enable mod_include" >>> INFO=3Don "Enable mod_info" >>> LOG_CONFIG=3Don "Enable mod_log_config" >>> LOGIO=3Don "Enable mod_logio" >>> MIME=3Don "Enable mod_mime" >>> MIME_MAGIC=3Don "Enable mod_mime_magic" >>> NEGOTIATION=3Don "Enable mod_negotiation" >>> REWRITE=3Don "Enable mod_rewrite" >>> SETENVIF=3Don "Enable mod_setenvif" >>> SPELING=3Don "Enable mod_speling" >>> STATUS=3Don "Enable mod_status" >>> UNIQUE_ID=3Don "Enable mod_unique_id" >>> USERDIR=3Don "Enable mod_userdir" >>> USERTRACK=3Don "Enable mod_usertrack" >>> VHOST_ALIAS=3Don "Enable mod_vhost_alias" >>> FILTER=3Don "Enable mod_filter" >>> SUBSTITUTE=3Doff "Enable mod_substitute" >>> VERSION=3Don "Enable mod_version" >>> PROXY=3Doff "Enable mod_proxy" >>> PROXY_CONNECT=3Doff "Enable mod_proxy_connect" >>> PATCH_PROXY_CONNECT=3Doff "Patch proxy_connect SSL support" >>> PROXY_FTP=3Doff "Enable mod_proxy_ftp" >>> PROXY_HTTP=3Doff "Enable mod_proxy_http" >>> PROXY_AJP=3Doff "Enable mod_proxy_ajp" >>> PROXY_BALANCER=3Doff "Enable mod_proxy_balancer" >>> PROXY_SCGI=3Doff "Enable mod_proxy_scgi" >>> SSL=3Don "Enable mod_ssl" >>> SUEXEC=3Doff "Enable mod_suexec" >>> SUEXEC_RSRCLIMIT=3Doff "SuEXEC rlimits based on login class" >>> REQTIMEOUT=3Don "Enable mod_reqtimeout" >>> CGID=3Doff "Enable mod_cgid" >>> =3D=3D=3D> Use 'make config' to modify these settings >>>=20 >>>=20 >>> As said above, I appreciate any assistance you can give. >>>=20 >>=20 >>=20 >> --=20 >> = ------------------------------------------------------------------------ >> 1024D/DB9B8C1C B90B FBC3 A3A1 C71A 8E70 3F8C 75B8 8FFB DB9B 8C1C >> Philip M. Gollucci (pgollucci@p6m7g8.com) c: 703.336.9354 >> VP Infrastructure, Apache Software Foundation >> Committer, FreeBSD Foundation >> Consultant, P6M7G8 Inc. >> Sr. System Admin, Ridecharge Inc. >>=20 >> Work like you don't need the money, >> love like you'll never get hurt, >> and dance like nobody's watching. >=20 > --=20 > Jo Rhett > Net Consonance : consonant endings by net philanthropy, open source = and other randomness >=20 --=20 Jo Rhett Net Consonance : consonant endings by net philanthropy, open source and = other randomness From owner-freebsd-apache@FreeBSD.ORG Wed Jul 27 08:50:41 2011 Return-Path: Delivered-To: freebsd-apache@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 814701065672 for ; Wed, 27 Jul 2011 08:50:41 +0000 (UTC) (envelope-from jrhett@netconsonance.com) Received: from mail.netconsonance.com (mail.netconsonance.com [198.207.204.4]) by mx1.freebsd.org (Postfix) with ESMTP id 671C48FC14 for ; Wed, 27 Jul 2011 08:50:41 +0000 (UTC) Received: from megaraptor.home.netconsonance.com (99-124-207-89.uvs.sntcca.sbcglobal.net [99.124.207.89]) (authenticated bits=0) by mail.netconsonance.com (8.14.5/8.14.5) with ESMTP id p6R8oZdX054631; Wed, 27 Jul 2011 01:50:35 -0700 (PDT) (envelope-from jrhett@netconsonance.com) X-Virus-Scanned: amavisd-new at netconsonance.com X-Spam-Flag: NO X-Spam-Score: -11 X-Spam-Level: X-Spam-Status: No, score=-11 tagged_above=-999 required=3.5 tests=[ALL_TRUSTED=-1, LOCAL_AUTH_RCVD=-10] autolearn=disabled Mime-Version: 1.0 (Apple Message framework v1084) Content-Type: text/plain; charset=us-ascii From: Jo Rhett In-Reply-To: Date: Wed, 27 Jul 2011 01:50:35 -0700 Content-Transfer-Encoding: quoted-printable Message-Id: References: <4E2F3B16.7060204@p6m7g8.com> To: "Philip M. Gollucci" X-Mailer: Apple Mail (2.1084) Cc: freebsd-apache@freebsd.org Subject: Re: problems with db185 authentication for apr 1.4.5 and apache 2.2.19 ? X-BeenThere: freebsd-apache@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Support of apache-related ports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 27 Jul 2011 08:50:41 -0000 Okay, by compiling apr with BDB support (db48 since that's what I have = installed) I got that .so file to exist, but apr can't read the file. = It would appear that the root of this problem is that I can compile = apache with db185 support, but there's no way I have found to compile = apr with support for db185? 54579 initial thread NAMI "/path/to/passwd.dat" 54579 initial thread STRU struct stat {dev=3D94, ino=3D14790906, = mode=3D-rw-r----- , nlink=3D1, uid=3D1001, gid=3D80, rdev=3D59123456, = atime=3D1311756287, stime=3D117346 0427, ctime=3D1173460427, birthtime=3D1173460427, size=3D16384, = blksize=3D16384, blocks=3D32, flags=3D0x0 } 54579 initial thread RET stat 0 54579 initial thread CALL open(0x884b1100,O_RDONLY,0) 54579 initial thread NAMI "/path/to/passwd.dat" 54579 initial thread RET open 13/0xd 54579 initial thread CALL fcntl(0xd,F_GETFD,0) 54579 initial thread RET fcntl 0 54579 initial thread CALL fcntl(0xd,F_SETFD,FD_CLOEXEC) 54579 initial thread RET fcntl 0 54579 initial thread CALL read(0xd,0xbfbfe484,0x200) 54579 initial thread GIO fd 13 read 512 bytes 54579 initial thread RET read 512/0x200 54579 initial thread CALL write(0x2,0xbfbfda50,0x5b) 54579 initial thread GIO fd 2 wrote 91 bytes "__db_meta_setup: /path/to/passwd.dat: unexpected file type or = format" 54579 initial thread RET write 91/0x5b 54579 initial thread CALL write(0x2,0x883847f3,0x1) 54579 initial thread GIO fd 2 wrote 1 byte 54579 initial thread RET write 1 54579 initial thread CALL close(0xd) 54579 initial thread RET close 0 54579 initial thread CALL gettimeofday(0xbfbfa7c4,0) 54579 initial thread RET gettimeofday 0 54579 initial thread CALL write(0x6,0xbfbfc81c,0xbe) 54579 initial thread GIO fd 6 wrote 190 bytes "[Wed Jul 27 01:44:49 2011] [error] [client 99.124.207.89] = (120022)APR does not understand this error code: could not open dbm = (type DB) auth file: /path/to/passwd.dat " On Jul 27, 2011, at 1:31 AM, Jo Rhett wrote: > More interesting. I explicitly set AuthDBMType to DB and that problem = disappeared, but the error remained. Looking at kdump this seems to be = the problem: >=20 > 3928 httpd NAMI "/usr/local/lib/apr-util-1/apr_dbm_db-1.so" > "[Wed Jul 27 01:06:25 2011] [error] [client 99.124.207.89] = (20019)DSO load failed: could not open dbm (type DB) auth file: = /path/to/passwd.dat >=20 > # ls -la /usr/local/lib/apr* > -rw-r--r-- 1 root wheel 7164 Jul 26 02:36 /usr/local/lib/apr.exp > -rw-r--r-- 1 root wheel 4412 Jul 26 02:36 = /usr/local/lib/aprutil.exp >=20 > This doesn't seem to be a problem of reading the file so much as = trying to load a DS0 that doesn't exist? >=20 > I've rebuilt apr1 a few times now, and those files simply aren't = installed. >=20 > On Jul 27, 2011, at 12:31 AM, Jo Rhett wrote: >> On Jul 26, 2011, at 3:09 PM, Philip M. Gollucci wrote: >>> run httpd -X >>> and then use ktrace -i / kdump >>> then grep for NAMI and the name of your file >>=20 >> Okay, well this makes sense at least - it's looking for a .dir file = which of course doesn't exist. What I don't understand here is that I = don't have gdbm or sdbm enabled. In fact, I don't even have them = compiled on the platform. >>=20 >> # kdump |grep /passwd >> 724 httpd NAMI "/path/to/passwd.dat.dir" >>=20 >> And more to the point, I explicitly told apache not to use anything = except BDB 185. You can see this in the configure line built by the = port: >>=20 >> $ head -10 /usr/ports/www/apache22/work/httpd-2.2.19/config.log >> This file contains any messages produced by compilers while >> running configure, to aid debugging if configure makes a mistake. >>=20 >> It was created by configure, which was >> generated by GNU Autoconf 2.68. Invocation command line was >>=20 >> $ ./configure --prefix=3D/usr/local --enable-layout=3DFreeBSD = --with-perl=3D/usr/local/bin/perl5.14.1 --with-port=3D80 = --with-expat=3D/usr/local --with-iconv=3D/usr/local --enable-http = --with-pcre=3D/usr/local --with-apr=3D/usr/local/bin/apr-1-config = --with-apr-util=3D/usr/local/bin/apu-1-config --disable-authn-file = --disable-authn-default --disable-authz-host --disable-authz-groupfile = --disable-authz-user --disable-authz-default --disable-auth-basic = --disable-charset-lite --disable-include --disable-log-config = --disable-env --disable-setenvif --disable-mime --disable-status = --disable-autoindex --disable-asis --disable-cgid --disable-cgi = --disable-negotiation --disable-dir --disable-imagemap --disable-actions = --disable-userdir --disable-alias --disable-filter --disable-substitute = --disable-proxy --disable-proxy-connect --disable-proxy-ftp = --disable-proxy-http --disable-proxy-ajp --disable-proxy-balancer = --disable-proxy-scgi --disable-reqtimeout --enable-so = --enable-mods-shared=3Dauth_basic auth_digest authn_file authn_dbm = authn_anon authn_default authn_alias authz_host authz_groupfile = authz_user authz_dbm authz_owner authz_default cache disk_cache = file_cache dav dav_fs actions alias asis autoindex cern_meta cgi = charset_lite deflate dir dumpio env expires headers imagemap include = info log_config logio mime mime_magic negotiation rewrite setenvif = speling status unique_id userdir usertrack vhost_alias filter version = reqtimeout ssl --with-dbm=3Ddb185 --with-berkeley-db=3D/usr = --with-ssl=3D/usr --enable-v4-mapped --with-devrandom --with-mpm=3Dprefork= --prefix=3D/usr/local --mandir=3D/usr/local/man = --infodir=3D/usr/local/info/ --build=3Di386-portbld-freebsd8.2 >>=20 >>=20 >>> On 07/26/11 09:35, Jo Rhett wrote: >>>> I have a 6.3 system which I just upgraded to 8.2, and obviously = recompiled all ports from scratch. I cleared out the ports DB entirely, = cleared out /usr/local entirely except for etc/config files. Every = other port on the system recompiled fine, except for apache. It works = for everything except reading authentication files. I'd deeply = appreciate any assistance you can give to solving this. >>>>=20 >>>> For some reason I can't figure out, BDB authentication using the = built-in db 1.85 no longer works. >>>>=20 >>>> dbmmanage /path/to/file view/adduser/delete/etc works fine >>>> file /path/to/file >>>> /path/to/file: Berkeley DB 1.85 (Hash, version 2, native = byte-order) >>>>=20 >>>> Accessing from the web server always returns a 500 error with the = following in the error log: >>>> (2)No such file or directory: could not open dbm (type default) = auth file: /path/to/passwd.dat >>>>=20 >>>> I've recompiled apr and apache with a variety of different options, = and nothing works. apr without any databases doesn't work. apr with BDB = doesn't work, etc. My options for apache have remained the same: >>>> APACHE_PORT=3Dwww/apache22 >>>> WITH_DBM=3Dbdb >>>> WITH_BDB_BASE=3Dyes >>>> =09 >>>> apr1$ make showconfig >>>> =3D=3D=3D> The following configuration options are available for = apr-ipv6-devrandom-db48-1.4.5.1.3.12: >>>> THREADS=3Don "Enable Threads in apr" >>>> IPV6=3Don "Enable IPV6 Support in apr" >>>> BDB=3Doff "Enable Berkley BDB support in apr-util" >>>> GDBM=3Doff "Enable GNU dbm support in apr-util" >>>> LDAP=3Doff "Enable LDAP support in apr-util" >>>> MYSQL=3Doff "Enable MySQL suport in apr-util" >>>> NDBM=3Doff "Enable NDBM support in apr-util" >>>> PGSQL=3Doff "Enable Postgresql suport in apr-util" >>>> SQLITE=3Doff "Enable SQLite3 support in apr-util" >>>> DEVRANDOM=3Don "Use /dev/random or compatible in apr" >>>> =3D=3D=3D> Use 'make config' to modify these settings >>>>=20 >>>> apache22$ make showconfig >>>> =3D=3D=3D> The following configuration options are available for = apache-2.2.19: >>>> THREADS=3Doff "Enable threads support in APR" >>>> MYSQL=3Doff "Enable MySQL support for apr-dbd" >>>> PGSQL=3Doff "Enable PostgreSQL support for apr-dbd" >>>> SQLITE=3Doff "Enable SQLite support for apr-dbd" >>>> IPV6=3Don "Enable IPv6 support" >>>> BDB=3Don "Enable BerkeleyDB dbm" >>>> AUTH_BASIC=3Don "Enable mod_auth_basic" >>>> AUTH_DIGEST=3Don "Enable mod_auth_digest" >>>> AUTHN_FILE=3Don "Enable mod_authn_file" >>>> AUTHN_DBD=3Doff "Enable mod_authn_dbd" >>>> AUTHN_DBM=3Don "Enable mod_authn_dbm" >>>> AUTHN_ANON=3Don "Enable mod_authn_anon" >>>> AUTHN_DEFAULT=3Don "Enable mod_authn_default" >>>> AUTHN_ALIAS=3Don "Enable mod_authn_alias" >>>> AUTHZ_HOST=3Don "Enable mod_authz_host" >>>> AUTHZ_GROUPFILE=3Don "Enable mod_authz_groupfile" >>>> AUTHZ_USER=3Don "Enable mod_authz_user" >>>> AUTHZ_DBM=3Don "Enable mod_authz_dbm" >>>> AUTHZ_OWNER=3Don "Enable mod_authz_owner" >>>> AUTHZ_DEFAULT=3Don "Enable mod_authz_default" >>>> CACHE=3Don "Enable mod_cache" >>>> DISK_CACHE=3Don "Enable mod_disk_cache" >>>> FILE_CACHE=3Don "Enable mod_file_cache" >>>> MEM_CACHE=3Doff "Enable mod_mem_cache" >>>> DAV=3Don "Enable mod_dav" >>>> DAV_FS=3Don "Enable mod_dav_fs" >>>> BUCKETEER=3Doff "Enable mod_bucketeer" >>>> CASE_FILTER=3Doff "Enable mod_case_filter" >>>> CASE_FILTER_IN=3Doff "Enable mod_case_filter_in" >>>> EXT_FILTER=3Doff "Enable mod_ext_filter" >>>> LOG_FORENSIC=3Doff "Enable mod_log_forensic" >>>> OPTIONAL_HOOK_EXPORT=3Doff "Enable mod_optional_hook_export" >>>> OPTIONAL_HOOK_IMPORT=3Doff "Enable mod_optional_hook_import" >>>> OPTIONAL_FN_IMPORT=3Doff "Enable mod_optional_fn_import" >>>> OPTIONAL_FN_EXPORT=3Doff "Enable mod_optional_fn_export" >>>> LDAP=3Doff "Enable mod_ldap" >>>> AUTHNZ_LDAP=3Doff "Enable mod_authnz_ldap" >>>> ACTIONS=3Don "Enable mod_actions" >>>> ALIAS=3Don "Enable mod_alias" >>>> ASIS=3Don "Enable mod_asis" >>>> AUTOINDEX=3Don "Enable mod_autoindex" >>>> CERN_META=3Don "Enable mod_cern_meta" >>>> CGI=3Don "Enable mod_cgi" >>>> CHARSET_LITE=3Don "Enable mod_charset_lite" >>>> DBD=3Doff "Enable mod_dbd" >>>> DEFLATE=3Don "Enable mod_deflate" >>>> DIR=3Don "Enable mod_dir" >>>> DUMPIO=3Don "Enable mod_dumpio" >>>> ENV=3Don "Enable mod_env" >>>> EXPIRES=3Don "Enable mod_expires" >>>> HEADERS=3Don "Enable mod_headers" >>>> IMAGEMAP=3Don "Enable mod_imagemap" >>>> INCLUDE=3Don "Enable mod_include" >>>> INFO=3Don "Enable mod_info" >>>> LOG_CONFIG=3Don "Enable mod_log_config" >>>> LOGIO=3Don "Enable mod_logio" >>>> MIME=3Don "Enable mod_mime" >>>> MIME_MAGIC=3Don "Enable mod_mime_magic" >>>> NEGOTIATION=3Don "Enable mod_negotiation" >>>> REWRITE=3Don "Enable mod_rewrite" >>>> SETENVIF=3Don "Enable mod_setenvif" >>>> SPELING=3Don "Enable mod_speling" >>>> STATUS=3Don "Enable mod_status" >>>> UNIQUE_ID=3Don "Enable mod_unique_id" >>>> USERDIR=3Don "Enable mod_userdir" >>>> USERTRACK=3Don "Enable mod_usertrack" >>>> VHOST_ALIAS=3Don "Enable mod_vhost_alias" >>>> FILTER=3Don "Enable mod_filter" >>>> SUBSTITUTE=3Doff "Enable mod_substitute" >>>> VERSION=3Don "Enable mod_version" >>>> PROXY=3Doff "Enable mod_proxy" >>>> PROXY_CONNECT=3Doff "Enable mod_proxy_connect" >>>> PATCH_PROXY_CONNECT=3Doff "Patch proxy_connect SSL support" >>>> PROXY_FTP=3Doff "Enable mod_proxy_ftp" >>>> PROXY_HTTP=3Doff "Enable mod_proxy_http" >>>> PROXY_AJP=3Doff "Enable mod_proxy_ajp" >>>> PROXY_BALANCER=3Doff "Enable mod_proxy_balancer" >>>> PROXY_SCGI=3Doff "Enable mod_proxy_scgi" >>>> SSL=3Don "Enable mod_ssl" >>>> SUEXEC=3Doff "Enable mod_suexec" >>>> SUEXEC_RSRCLIMIT=3Doff "SuEXEC rlimits based on login class" >>>> REQTIMEOUT=3Don "Enable mod_reqtimeout" >>>> CGID=3Doff "Enable mod_cgid" >>>> =3D=3D=3D> Use 'make config' to modify these settings >>>>=20 >>>>=20 >>>> As said above, I appreciate any assistance you can give. >>>>=20 >>>=20 >>>=20 >>> --=20 >>> = ------------------------------------------------------------------------ >>> 1024D/DB9B8C1C B90B FBC3 A3A1 C71A 8E70 3F8C 75B8 8FFB DB9B 8C1C >>> Philip M. Gollucci (pgollucci@p6m7g8.com) c: 703.336.9354 >>> VP Infrastructure, Apache Software Foundation >>> Committer, FreeBSD Foundation >>> Consultant, P6M7G8 Inc. >>> Sr. System Admin, Ridecharge Inc. >>>=20 >>> Work like you don't need the money, >>> love like you'll never get hurt, >>> and dance like nobody's watching. >>=20 >> --=20 >> Jo Rhett >> Net Consonance : consonant endings by net philanthropy, open source = and other randomness >>=20 >=20 > --=20 > Jo Rhett > Net Consonance : consonant endings by net philanthropy, open source = and other randomness >=20 > _______________________________________________ > freebsd-apache@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-apache > To unsubscribe, send any mail to = "freebsd-apache-unsubscribe@freebsd.org" --=20 Jo Rhett Net Consonance : consonant endings by net philanthropy, open source and = other randomness From owner-freebsd-apache@FreeBSD.ORG Fri Jul 29 02:19:20 2011 Return-Path: Delivered-To: freebsd-apache@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 39F8B106566C for ; Fri, 29 Jul 2011 02:19:20 +0000 (UTC) (envelope-from jrhett@netconsonance.com) Received: from mail.netconsonance.com (mail.netconsonance.com [198.207.204.4]) by mx1.freebsd.org (Postfix) with ESMTP id 1EE5E8FC0A for ; Fri, 29 Jul 2011 02:19:19 +0000 (UTC) Received: from [192.168.1.70] (99-92-89-15.lightspeed.sntcca.sbcglobal.net [99.92.89.15]) (authenticated bits=0) by mail.netconsonance.com (8.14.5/8.14.5) with ESMTP id p6T2JAu7078460 for ; Thu, 28 Jul 2011 19:19:12 -0700 (PDT) (envelope-from jrhett@netconsonance.com) X-Virus-Scanned: amavisd-new at netconsonance.com X-Spam-Flag: NO X-Spam-Score: -11 X-Spam-Level: X-Spam-Status: No, score=-11 tagged_above=-999 required=3.5 tests=[ALL_TRUSTED=-1, LOCAL_AUTH_RCVD=-10] autolearn=disabled Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Apple Message framework v1084) From: Jo Rhett In-Reply-To: Date: Thu, 28 Jul 2011 19:19:09 -0700 Content-Transfer-Encoding: quoted-printable Message-Id: <91FCB5C7-D791-438E-84A6-C2831B41D42F@netconsonance.com> References: <4E2F3B16.7060204@p6m7g8.com> To: freebsd-apache@freebsd.org X-Mailer: Apple Mail (2.1084) Subject: How to compile apr1 with bdb 1.85 support? X-BeenThere: freebsd-apache@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Support of apache-related ports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 29 Jul 2011 02:19:20 -0000 Does anyone know how to compile devel/apr1 with support for Berkeley DB = 1.85 from the OS distribution? On Jul 27, 2011, at 1:50 AM, Jo Rhett wrote: > Okay, by compiling apr with BDB support (db48 since that's what I have = installed) I got that .so file to exist, but apr can't read the file. = It would appear that the root of this problem is that I can compile = apache with db185 support, but there's no way I have found to compile = apr with support for db185? >=20 > 54579 initial thread NAMI "/path/to/passwd.dat" > 54579 initial thread STRU struct stat {dev=3D94, ino=3D14790906, = mode=3D-rw-r----- , nlink=3D1, uid=3D1001, gid=3D80, rdev=3D59123456, = atime=3D1311756287, stime=3D117346 > 0427, ctime=3D1173460427, birthtime=3D1173460427, size=3D16384, = blksize=3D16384, blocks=3D32, flags=3D0x0 } > 54579 initial thread RET stat 0 > 54579 initial thread CALL open(0x884b1100,O_RDONLY,0) > 54579 initial thread NAMI "/path/to/passwd.dat" > 54579 initial thread RET open 13/0xd > 54579 initial thread CALL fcntl(0xd,F_GETFD,0) > 54579 initial thread RET fcntl 0 > 54579 initial thread CALL fcntl(0xd,F_SETFD,FD_CLOEXEC) > 54579 initial thread RET fcntl 0 > 54579 initial thread CALL read(0xd,0xbfbfe484,0x200) > 54579 initial thread GIO fd 13 read 512 bytes > 54579 initial thread RET read 512/0x200 > 54579 initial thread CALL write(0x2,0xbfbfda50,0x5b) > 54579 initial thread GIO fd 2 wrote 91 bytes > "__db_meta_setup: /path/to/passwd.dat: unexpected file type or = format" > 54579 initial thread RET write 91/0x5b > 54579 initial thread CALL write(0x2,0x883847f3,0x1) > 54579 initial thread GIO fd 2 wrote 1 byte > 54579 initial thread RET write 1 > 54579 initial thread CALL close(0xd) > 54579 initial thread RET close 0 > 54579 initial thread CALL gettimeofday(0xbfbfa7c4,0) > 54579 initial thread RET gettimeofday 0 > 54579 initial thread CALL write(0x6,0xbfbfc81c,0xbe) > 54579 initial thread GIO fd 6 wrote 190 bytes > "[Wed Jul 27 01:44:49 2011] [error] [client 99.124.207.89] = (120022)APR does not understand this error code: could not open dbm = (type DB) auth file: /path/to/passwd.dat > " >=20 > On Jul 27, 2011, at 1:31 AM, Jo Rhett wrote: >=20 >> More interesting. I explicitly set AuthDBMType to DB and that = problem disappeared, but the error remained. Looking at kdump this = seems to be the problem: >>=20 >> 3928 httpd NAMI "/usr/local/lib/apr-util-1/apr_dbm_db-1.so" >> "[Wed Jul 27 01:06:25 2011] [error] [client 99.124.207.89] = (20019)DSO load failed: could not open dbm (type DB) auth file: = /path/to/passwd.dat >>=20 >> # ls -la /usr/local/lib/apr* >> -rw-r--r-- 1 root wheel 7164 Jul 26 02:36 /usr/local/lib/apr.exp >> -rw-r--r-- 1 root wheel 4412 Jul 26 02:36 = /usr/local/lib/aprutil.exp >>=20 >> This doesn't seem to be a problem of reading the file so much as = trying to load a DS0 that doesn't exist? >>=20 >> I've rebuilt apr1 a few times now, and those files simply aren't = installed. >>=20 >> On Jul 27, 2011, at 12:31 AM, Jo Rhett wrote: >>> On Jul 26, 2011, at 3:09 PM, Philip M. Gollucci wrote: >>>> run httpd -X >>>> and then use ktrace -i / kdump >>>> then grep for NAMI and the name of your file >>>=20 >>> Okay, well this makes sense at least - it's looking for a .dir file = which of course doesn't exist. What I don't understand here is that I = don't have gdbm or sdbm enabled. In fact, I don't even have them = compiled on the platform. >>>=20 >>> # kdump |grep /passwd >>> 724 httpd NAMI "/path/to/passwd.dat.dir" >>>=20 >>> And more to the point, I explicitly told apache not to use anything = except BDB 185. You can see this in the configure line built by the = port: >>>=20 >>> $ head -10 /usr/ports/www/apache22/work/httpd-2.2.19/config.log >>> This file contains any messages produced by compilers while >>> running configure, to aid debugging if configure makes a mistake. >>>=20 >>> It was created by configure, which was >>> generated by GNU Autoconf 2.68. Invocation command line was >>>=20 >>> $ ./configure --prefix=3D/usr/local --enable-layout=3DFreeBSD = --with-perl=3D/usr/local/bin/perl5.14.1 --with-port=3D80 = --with-expat=3D/usr/local --with-iconv=3D/usr/local --enable-http = --with-pcre=3D/usr/local --with-apr=3D/usr/local/bin/apr-1-config = --with-apr-util=3D/usr/local/bin/apu-1-config --disable-authn-file = --disable-authn-default --disable-authz-host --disable-authz-groupfile = --disable-authz-user --disable-authz-default --disable-auth-basic = --disable-charset-lite --disable-include --disable-log-config = --disable-env --disable-setenvif --disable-mime --disable-status = --disable-autoindex --disable-asis --disable-cgid --disable-cgi = --disable-negotiation --disable-dir --disable-imagemap --disable-actions = --disable-userdir --disable-alias --disable-filter --disable-substitute = --disable-proxy --disable-proxy-connect --disable-proxy-ftp = --disable-proxy-http --disable-proxy-ajp --disable-proxy-balancer = --disable-proxy-scgi --disable-reqtimeout --enable-so = --enable-mods-shared=3Dauth_basic auth_digest authn_file authn_dbm = authn_anon authn_default authn_alias authz_host authz_groupfile = authz_user authz_dbm authz_owner authz_default cache disk_cache = file_cache dav dav_fs actions alias asis autoindex cern_meta cgi = charset_lite deflate dir dumpio env expires headers imagemap include = info log_config logio mime mime_magic negotiation rewrite setenvif = speling status unique_id userdir usertrack vhost_alias filter version = reqtimeout ssl --with-dbm=3Ddb185 --with-berkeley-db=3D/usr = --with-ssl=3D/usr --enable-v4-mapped --with-devrandom --with-mpm=3Dprefork= --prefix=3D/usr/local --mandir=3D/usr/local/man = --infodir=3D/usr/local/info/ --build=3Di386-portbld-freebsd8.2 >>>=20 >>>=20 >>>> On 07/26/11 09:35, Jo Rhett wrote: >>>>> I have a 6.3 system which I just upgraded to 8.2, and obviously = recompiled all ports from scratch. I cleared out the ports DB entirely, = cleared out /usr/local entirely except for etc/config files. Every = other port on the system recompiled fine, except for apache. It works = for everything except reading authentication files. I'd deeply = appreciate any assistance you can give to solving this. >>>>>=20 >>>>> For some reason I can't figure out, BDB authentication using the = built-in db 1.85 no longer works. >>>>>=20 >>>>> dbmmanage /path/to/file view/adduser/delete/etc works fine >>>>> file /path/to/file >>>>> /path/to/file: Berkeley DB 1.85 (Hash, version 2, native = byte-order) >>>>>=20 >>>>> Accessing from the web server always returns a 500 error with the = following in the error log: >>>>> (2)No such file or directory: could not open dbm (type default) = auth file: /path/to/passwd.dat >>>>>=20 >>>>> I've recompiled apr and apache with a variety of different = options, and nothing works. apr without any databases doesn't work. apr = with BDB doesn't work, etc. My options for apache have remained the = same: >>>>> APACHE_PORT=3Dwww/apache22 >>>>> WITH_DBM=3Dbdb >>>>> WITH_BDB_BASE=3Dyes >>>>> =09 >>>>> apr1$ make showconfig >>>>> =3D=3D=3D> The following configuration options are available for = apr-ipv6-devrandom-db48-1.4.5.1.3.12: >>>>> THREADS=3Don "Enable Threads in apr" >>>>> IPV6=3Don "Enable IPV6 Support in apr" >>>>> BDB=3Doff "Enable Berkley BDB support in apr-util" >>>>> GDBM=3Doff "Enable GNU dbm support in apr-util" >>>>> LDAP=3Doff "Enable LDAP support in apr-util" >>>>> MYSQL=3Doff "Enable MySQL suport in apr-util" >>>>> NDBM=3Doff "Enable NDBM support in apr-util" >>>>> PGSQL=3Doff "Enable Postgresql suport in apr-util" >>>>> SQLITE=3Doff "Enable SQLite3 support in apr-util" >>>>> DEVRANDOM=3Don "Use /dev/random or compatible in apr" >>>>> =3D=3D=3D> Use 'make config' to modify these settings >>>>>=20 >>>>> apache22$ make showconfig >>>>> =3D=3D=3D> The following configuration options are available for = apache-2.2.19: >>>>> THREADS=3Doff "Enable threads support in APR" >>>>> MYSQL=3Doff "Enable MySQL support for apr-dbd" >>>>> PGSQL=3Doff "Enable PostgreSQL support for apr-dbd" >>>>> SQLITE=3Doff "Enable SQLite support for apr-dbd" >>>>> IPV6=3Don "Enable IPv6 support" >>>>> BDB=3Don "Enable BerkeleyDB dbm" >>>>> AUTH_BASIC=3Don "Enable mod_auth_basic" >>>>> AUTH_DIGEST=3Don "Enable mod_auth_digest" >>>>> AUTHN_FILE=3Don "Enable mod_authn_file" >>>>> AUTHN_DBD=3Doff "Enable mod_authn_dbd" >>>>> AUTHN_DBM=3Don "Enable mod_authn_dbm" >>>>> AUTHN_ANON=3Don "Enable mod_authn_anon" >>>>> AUTHN_DEFAULT=3Don "Enable mod_authn_default" >>>>> AUTHN_ALIAS=3Don "Enable mod_authn_alias" >>>>> AUTHZ_HOST=3Don "Enable mod_authz_host" >>>>> AUTHZ_GROUPFILE=3Don "Enable mod_authz_groupfile" >>>>> AUTHZ_USER=3Don "Enable mod_authz_user" >>>>> AUTHZ_DBM=3Don "Enable mod_authz_dbm" >>>>> AUTHZ_OWNER=3Don "Enable mod_authz_owner" >>>>> AUTHZ_DEFAULT=3Don "Enable mod_authz_default" >>>>> CACHE=3Don "Enable mod_cache" >>>>> DISK_CACHE=3Don "Enable mod_disk_cache" >>>>> FILE_CACHE=3Don "Enable mod_file_cache" >>>>> MEM_CACHE=3Doff "Enable mod_mem_cache" >>>>> DAV=3Don "Enable mod_dav" >>>>> DAV_FS=3Don "Enable mod_dav_fs" >>>>> BUCKETEER=3Doff "Enable mod_bucketeer" >>>>> CASE_FILTER=3Doff "Enable mod_case_filter" >>>>> CASE_FILTER_IN=3Doff "Enable mod_case_filter_in" >>>>> EXT_FILTER=3Doff "Enable mod_ext_filter" >>>>> LOG_FORENSIC=3Doff "Enable mod_log_forensic" >>>>> OPTIONAL_HOOK_EXPORT=3Doff "Enable mod_optional_hook_export" >>>>> OPTIONAL_HOOK_IMPORT=3Doff "Enable mod_optional_hook_import" >>>>> OPTIONAL_FN_IMPORT=3Doff "Enable mod_optional_fn_import" >>>>> OPTIONAL_FN_EXPORT=3Doff "Enable mod_optional_fn_export" >>>>> LDAP=3Doff "Enable mod_ldap" >>>>> AUTHNZ_LDAP=3Doff "Enable mod_authnz_ldap" >>>>> ACTIONS=3Don "Enable mod_actions" >>>>> ALIAS=3Don "Enable mod_alias" >>>>> ASIS=3Don "Enable mod_asis" >>>>> AUTOINDEX=3Don "Enable mod_autoindex" >>>>> CERN_META=3Don "Enable mod_cern_meta" >>>>> CGI=3Don "Enable mod_cgi" >>>>> CHARSET_LITE=3Don "Enable mod_charset_lite" >>>>> DBD=3Doff "Enable mod_dbd" >>>>> DEFLATE=3Don "Enable mod_deflate" >>>>> DIR=3Don "Enable mod_dir" >>>>> DUMPIO=3Don "Enable mod_dumpio" >>>>> ENV=3Don "Enable mod_env" >>>>> EXPIRES=3Don "Enable mod_expires" >>>>> HEADERS=3Don "Enable mod_headers" >>>>> IMAGEMAP=3Don "Enable mod_imagemap" >>>>> INCLUDE=3Don "Enable mod_include" >>>>> INFO=3Don "Enable mod_info" >>>>> LOG_CONFIG=3Don "Enable mod_log_config" >>>>> LOGIO=3Don "Enable mod_logio" >>>>> MIME=3Don "Enable mod_mime" >>>>> MIME_MAGIC=3Don "Enable mod_mime_magic" >>>>> NEGOTIATION=3Don "Enable mod_negotiation" >>>>> REWRITE=3Don "Enable mod_rewrite" >>>>> SETENVIF=3Don "Enable mod_setenvif" >>>>> SPELING=3Don "Enable mod_speling" >>>>> STATUS=3Don "Enable mod_status" >>>>> UNIQUE_ID=3Don "Enable mod_unique_id" >>>>> USERDIR=3Don "Enable mod_userdir" >>>>> USERTRACK=3Don "Enable mod_usertrack" >>>>> VHOST_ALIAS=3Don "Enable mod_vhost_alias" >>>>> FILTER=3Don "Enable mod_filter" >>>>> SUBSTITUTE=3Doff "Enable mod_substitute" >>>>> VERSION=3Don "Enable mod_version" >>>>> PROXY=3Doff "Enable mod_proxy" >>>>> PROXY_CONNECT=3Doff "Enable mod_proxy_connect" >>>>> PATCH_PROXY_CONNECT=3Doff "Patch proxy_connect SSL support" >>>>> PROXY_FTP=3Doff "Enable mod_proxy_ftp" >>>>> PROXY_HTTP=3Doff "Enable mod_proxy_http" >>>>> PROXY_AJP=3Doff "Enable mod_proxy_ajp" >>>>> PROXY_BALANCER=3Doff "Enable mod_proxy_balancer" >>>>> PROXY_SCGI=3Doff "Enable mod_proxy_scgi" >>>>> SSL=3Don "Enable mod_ssl" >>>>> SUEXEC=3Doff "Enable mod_suexec" >>>>> SUEXEC_RSRCLIMIT=3Doff "SuEXEC rlimits based on login class" >>>>> REQTIMEOUT=3Don "Enable mod_reqtimeout" >>>>> CGID=3Doff "Enable mod_cgid" >>>>> =3D=3D=3D> Use 'make config' to modify these settings >>>>>=20 >>>>>=20 >>>>> As said above, I appreciate any assistance you can give. >>>>>=20 >>>>=20 >>>>=20 >>>> --=20 >>>> = ------------------------------------------------------------------------ >>>> 1024D/DB9B8C1C B90B FBC3 A3A1 C71A 8E70 3F8C 75B8 8FFB DB9B 8C1C >>>> Philip M. Gollucci (pgollucci@p6m7g8.com) c: 703.336.9354 >>>> VP Infrastructure, Apache Software Foundation >>>> Committer, FreeBSD Foundation >>>> Consultant, P6M7G8 Inc. >>>> Sr. System Admin, Ridecharge Inc. >>>>=20 >>>> Work like you don't need the money, >>>> love like you'll never get hurt, >>>> and dance like nobody's watching. >>>=20 >>> --=20 >>> Jo Rhett >>> Net Consonance : consonant endings by net philanthropy, open source = and other randomness >>>=20 >>=20 >> --=20 >> Jo Rhett >> Net Consonance : consonant endings by net philanthropy, open source = and other randomness >>=20 >> _______________________________________________ >> freebsd-apache@freebsd.org mailing list >> http://lists.freebsd.org/mailman/listinfo/freebsd-apache >> To unsubscribe, send any mail to = "freebsd-apache-unsubscribe@freebsd.org" >=20 > --=20 > Jo Rhett > Net Consonance : consonant endings by net philanthropy, open source = and other randomness >=20 --=20 Jo Rhett Net Consonance : consonant endings by net philanthropy, open source and = other randomness