On Wed, Jul 14, 1999, Saker, Tim wrote:
> [...]
> If you look into httpd_error_log, you will notice the problem with the
> session-cache. And I think "Hier liegt der Hund begraben" (english: this
> seems to be the problem).
>
> The session cache exists but has wrong access rights:
>
> -rw------- 2 root root 12288 Jul 13 14:47
> /var/run/httpd_ssl_scache.dir
> -rw------- 2 root root 12288 Jul 13 14:47
> /var/run/httpd_ssl_scache.pag
>
> Apache (or mod_ssl) somehow forgot to chown to httpd.root (apache ist
> running as user "httpd").
>
> When I delete these files and restart they are created with the correct
> access-rights (owner httpd.root; mode 0600). But somehow they become
> root.root.
>
> I will send httpd_ssl_engine_log to rse only, because it's 36k
> (SSLLogLevel was "debug").
Hmmm... there is no chown() in Apache or mod_ssl which _reverses_ the owner
again, of course. And when the above is true, the server usually have to
complain with "Cannot open SSLSessionCache DBM file `%s' for writing (store)"
or "Cannot open SSLSessionCache DBM file `%s' for reading (fetch)" - which it
doesn't for you. Very confusing...
Ralf S. Engelschall
[EMAIL PROTECTED]
www.engelschall.com
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]