Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
apache2 errors on start up [solved]
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Other Things Gentoo
View previous topic :: View next topic  
Author Message
DaggyStyle
Watchman
Watchman


Joined: 22 Mar 2006
Posts: 5909

PostPosted: Fri Apr 15, 2016 7:16 am    Post subject: apache2 errors on start up [solved] Reply with quote

Greetings,

Code:
[Fri Apr 15 10:07:15.045271 2016] [unixd:alert] [pid 17117] (1)Operation not permitted: AH02156: setgid: unable to set group id to Group 81
[Fri Apr 15 10:07:16.001796 2016] [unixd:alert] [pid 17158] (1)Operation not permitted: AH02156: setgid: unable to set group id to Group 81
[Fri Apr 15 10:07:16.002725 2016] [mpm_prefork:notice] [pid 17115] AH00163: Apache/2.4.20 (Unix) OpenSSL/1.0.2g mpm-itk/2.4.7-04 mod_perl/2.0.10-dev Perl/v5.20.2 configured -- resuming normal operations
[Fri Apr 15 10:07:16.002807 2016] [core:notice] [pid 17115] AH00094: Command line: '/usr/sbin/apache2 -D DEFAULT_VHOST -D INFO -D SSL -D SSL_DEFAULT_VHOST -D LANGUAGE -D BACKUPPC -D PERL -D MPM_ITK -d /usr/lib64/apache2 -f /etc/apache2/httpd.conf'
[Fri Apr 15 10:07:16.002919 2016] [unixd:alert] [pid 17162] (1)Operation not permitted: AH02156: setgid: unable to set group id to Group 81
[Fri Apr 15 10:07:16.002919 2016] [unixd:alert] [pid 17161] (1)Operation not permitted: AH02156: setgid: unable to set group id to Group 81
[Fri Apr 15 10:07:16.002920 2016] [unixd:alert] [pid 17160] (1)Operation not permitted: AH02156: setgid: unable to set group id to Group 81
[Fri Apr 15 10:07:16.002971 2016] [unixd:alert] [pid 17159] (1)Operation not permitted: AH02156: setgid: unable to set group id to Group 81
[Fri Apr 15 10:07:44.658972 2016] [mpm_itk:warn] [pid 18512] (itkmpm: pid=18512 uid=0, gid=0) itk_post_perdir_config(): setgid(81): Operation not permitted
[Fri Apr 15 10:07:44.659007 2016] [mpm_itk:notice] [pid 18512] This is most likely due to the current LimitGIDRange setting.
[Fri Apr 15 10:07:44.975255 2016] [mpm_itk:warn] [pid 18529] (itkmpm: pid=18529 uid=0, gid=0) itk_post_perdir_config(): setgid(81): Operation not permitted
[Fri Apr 15 10:07:44.975286 2016] [mpm_itk:notice] [pid 18529] This is most likely due to the current LimitGIDRange setting.
[Fri Apr 15 10:07:45.090622 2016] [mpm_itk:warn] [pid 18530] (itkmpm: pid=18530 uid=0, gid=0) itk_post_perdir_config(): setgid(81): Operation not permitted
[Fri Apr 15 10:07:45.090656 2016] [mpm_itk:notice] [pid 18530] This is most likely due to the current LimitGIDRange setting.


when I startup my apache2 server, I see these errors, any ideas how can I fix them?
_________________
Only two things are infinite, the universe and human stupidity and I'm not sure about the former - Albert Einstein


Last edited by DaggyStyle on Sun Apr 17, 2016 6:33 pm; edited 1 time in total
Back to top
View user's profile Send private message
steveL
Watchman
Watchman


Joined: 13 Sep 2006
Posts: 5153
Location: The Peanut Gallery

PostPosted: Fri Apr 15, 2016 8:06 am    Post subject: Reply with quote

What is "the current LimitGIDRange setting"?
Back to top
View user's profile Send private message
DaggyStyle
Watchman
Watchman


Joined: 22 Mar 2006
Posts: 5909

PostPosted: Fri Apr 15, 2016 9:36 am    Post subject: Reply with quote

LimitGIDRange 1000 2000

shouldn't I be more worry about "Operation not permitted: AH02156: setgid: unable to set group id to Group 1" issue?
_________________
Only two things are infinite, the universe and human stupidity and I'm not sure about the former - Albert Einstein
Back to top
View user's profile Send private message
steveL
Watchman
Watchman


Joined: 13 Sep 2006
Posts: 5153
Location: The Peanut Gallery

PostPosted: Fri Apr 15, 2016 2:11 pm    Post subject: Reply with quote

DaggyStyle wrote:
LimitGIDRange 1000 2000

shouldn't I be more worry about "Operation not permitted: AH02156: setgid: unable to set group id to Group 1" issue?

Possibly; it's group 'bin' here, so lord knows why it's trying to do that.

Though it makes sense, given the range, that the operation would fail.

If you can use multiple stanzas, maybe allow a specific one (like w/e gid 'daemon' is; 2 here) with the same number in both.

Slightly off-topic, I don't like the way 'daemon' is in 'adm'.
Back to top
View user's profile Send private message
DaggyStyle
Watchman
Watchman


Joined: 22 Mar 2006
Posts: 5909

PostPosted: Fri Apr 15, 2016 4:44 pm    Post subject: Reply with quote

steveL wrote:
DaggyStyle wrote:
LimitGIDRange 1000 2000

shouldn't I be more worry about "Operation not permitted: AH02156: setgid: unable to set group id to Group 1" issue?

Possibly; it's group 'bin' here, so lord knows why it's trying to do that.

Though it makes sense, given the range, that the operation would fail.

If you can use multiple stanzas, maybe allow a specific one (like w/e gid 'daemon' is; 2 here) with the same number in both.

Slightly off-topic, I don't like the way 'daemon' is in 'adm'.


it's my server and I only use it to run backuppc which is broken now (that is what I'm trying to fix).
so whatever you suggest, I can do.

so what should I add to the file?
_________________
Only two things are infinite, the universe and human stupidity and I'm not sure about the former - Albert Einstein
Back to top
View user's profile Send private message
steveL
Watchman
Watchman


Joined: 13 Sep 2006
Posts: 5153
Location: The Peanut Gallery

PostPosted: Fri Apr 15, 2016 5:16 pm    Post subject: Reply with quote

Well I was thinking adding:
Code:
LimitGIDRange 1 2
for bin and daemon, but looking at the mpm-itk docs, it doesn't sound like it does more than one.

Honestly, I am out of my depth (I don't even use apache any more.)

Can I suggest you ask in #httpd (on IRC: chat.freenode.net or .org)?
(It used to be #apache which redirects there now.)

If you can configure what group it uses, that would be your best option. It may only be a compile-time setting.

It's better if you're in touch with them directly, for all concerned, ime.
Back to top
View user's profile Send private message
acmondor
n00b
n00b


Joined: 08 Aug 2014
Posts: 59
Location: Canadian Prairies

PostPosted: Sun Apr 17, 2016 3:53 pm    Post subject: Reply with quote

The problem is due to a config error. The default config file ( /etc/apache2/modules.d/00_mpm_itk.conf ) has these values:

Code:
LimitUIDRange 1000 2000
LimitGIDRange 1000 2000


Which won't work on gentoo because apache2 is run as the apache user which has a uid of 81 and gid of 81. Changing the config to this should get things working (at least it did for me):

Code:
LimitUIDRange 81 2000
LimitGIDRange 81 2000


Note the comment earlier regarding Group 1 (ie "Operation not permitted: AH02156: setgid: unable to set group id to Group 1") must have been typo because the original log says Group 81.
Back to top
View user's profile Send private message
steveL
Watchman
Watchman


Joined: 13 Sep 2006
Posts: 5153
Location: The Peanut Gallery

PostPosted: Sun Apr 17, 2016 5:53 pm    Post subject: Reply with quote

Ah nice one, acmondor.
Back to top
View user's profile Send private message
DaggyStyle
Watchman
Watchman


Joined: 22 Mar 2006
Posts: 5909

PostPosted: Sun Apr 17, 2016 6:31 pm    Post subject: Reply with quote

that was indeed the issue.
I have backuppc's webgui working again
_________________
Only two things are infinite, the universe and human stupidity and I'm not sure about the former - Albert Einstein
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Other Things Gentoo All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum