Processed: retitle 501403 to apache2: Apache reload fails with failed nscd assertion
Processing commands for [EMAIL PROTECTED]: # Automatically generated email from bts, devscripts version 2.10.35 retitle 501403 apache2: Apache reload fails with failed nscd assertion Bug#501403: (no subject) Changed Bug title to `apache2: Apache reload fails with failed nscd assertion' from `(no subject)'. End of message, stopping processing here. Please contact me if you need assistance. Debian bug tracking system administrator (administrator, Debian Bugs database) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#501403: (no subject)
Subject: apache2: Apache reload fails with failed nscd assertion
Package: apache2
Version: 2.2.8-4byte2etch0
Severity: normal
Dear Maintainers,
We run clusters of about 15 webservers that are reloaded for new configs about
twenty times per day. This results in the following error about once
per day per cluster:
apache2: nscd_helper.c:133: __nscd_unmap: Assertion mapped-counter == 0'
failed.
/usr/sbin/apache2ctl: line 83: 30212 Aborted $HTTPD ${APACHE_ARGUMENTS} -k $ARGV
invoke-rc.d: initscript apache2, action reload failed.
Kon Apache niet herstarten: Bad file descriptor
I'm not sure what information to include in the bugreport. If you'd like more
information about the setup, I'd be happy to provide it.
Regards,
Allard Hoeve
PS: Am running a backported version of the Apache webserver from
testing on etch.
-- Package-specific info:
List of enabled modules from 'apache2 -M':
accounting actions alias auth_basic authn_file authz_default
authz_groupfile authz_host authz_user autoindex cgi dir* env
expires headers include mime negotiation php5* rewrite setenvif
status suexec userdir*
(A * means that the .conf file for that module is not enabled in
/etc/apache2/mods-enabled/)
-- System Information:
Debian Release: 4.0
APT prefers stable
APT policy: (600, 'stable')
Architecture: i386 (i686)
Shell: /bin/sh linked to /bin/bash
Kernel: Linux 2.6.25.4-fwsh-byte
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) (ignored: LC_ALL
set to en_US.UTF8)
Versions of packages apache2 depends on:
ii apache2-mpm-prefork2.2.8-4byte2etch0 Traditional model for Apache HTTPD
apache2 recommends no packages.
-- no debconf information
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#501497: apache2-utils: htpasswd may block indefinitely on /dev/random
Package: apache2-utils
Version: 2.2.9-7
Severity: minor
Greetings,
Having recently upgraded from a relatively old apache 1.3-era package I have
found
a quick script I wrote to periodically syncronise passwords had become
unreliable.
Further investigation reveals that htpasswd invoked from this script around 50
times
blocks for long periods. It previously took trivial time (very much less than
one
second). Running strace, I see:
$ strace htpasswd -c -b testfile testuser testpass
[much output]
getrlimit(RLIMIT_STACK, {rlim_cur=8192*1024, rlim_max=RLIM_INFINITY}) = 0
uname({sys=Linux, node=gamma, ...}) = 0
brk(0) = 0x804c000
brk(0x806d000) = 0x806d000
stat64(testfile, 0xbfb4f970) = -1 ENOENT (No such file or
directory)
open(testfile, O_WRONLY|O_CREAT|O_LARGEFILE, 0666) = 3
close(3)= 0
open(/dev/random, O_RDONLY) = 3
read(3,
Clearly I'm entropy-starved. However, I'd question whether a tool such as
htpasswd
cannot do with /dev/urandom. Delving into the code, it uses it to seed rand(3)
so
it clearly does not use /dev/random for any purpose where pure entropy is
required.
Previously it had used time(2) -- this change to use a blocking function in the
APR
is the source of the regression.
Cheers,
Joseph
-- System Information:
Debian Release: lenny/sid
Architecture: i386 (i686)
Kernel: Linux 2.6.18-6-686 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash
Versions of packages apache2-utils depends on:
ii libapr11.2.12-4 The Apache Portable Runtime Librar
ii libaprutil11.2.12+dfsg-8 The Apache Portable Runtime Utilit
ii libc6 2.7-13GNU C Library: Shared libraries
ii libssl0.9.80.9.8g-13 SSL shared libraries
apache2-utils recommends no packages.
apache2-utils suggests no packages.
-- no debconf information
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
reassign 501497 to libapr1, severity of 501497 is important
reassign 501497 libapr1 severity 501497 important -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Processed: reassign 501497 to libapr1, severity of 501497 is important
Processing commands for [EMAIL PROTECTED]: reassign 501497 libapr1 Bug#501497: apache2-utils: htpasswd may block indefinitely on /dev/random Bug reassigned from package `apache2-utils' to `libapr1'. severity 501497 important Bug#501497: apache2-utils: htpasswd may block indefinitely on /dev/random Severity set to `important' from `minor' End of message, stopping processing here. Please contact me if you need assistance. Debian bug tracking system administrator (administrator, Debian Bugs database) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Processing of apr_1.2.12-5_i386.changes
apr_1.2.12-5_i386.changes uploaded successfully to localhost along with the files: apr_1.2.12-5.dsc apr_1.2.12-5.diff.gz libapr1_1.2.12-5_i386.deb libapr1-dev_1.2.12-5_i386.deb libapr1-dbg_1.2.12-5_i386.deb Greetings, Your Debian queue daemon -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
apr_1.2.12-5_i386.changes ACCEPTED
Accepted: apr_1.2.12-5.diff.gz to pool/main/a/apr/apr_1.2.12-5.diff.gz apr_1.2.12-5.dsc to pool/main/a/apr/apr_1.2.12-5.dsc libapr1-dbg_1.2.12-5_i386.deb to pool/main/a/apr/libapr1-dbg_1.2.12-5_i386.deb libapr1-dev_1.2.12-5_i386.deb to pool/main/a/apr/libapr1-dev_1.2.12-5_i386.deb libapr1_1.2.12-5_i386.deb to pool/main/a/apr/libapr1_1.2.12-5_i386.deb Override entries for your package: apr_1.2.12-5.dsc - source libs libapr1-dbg_1.2.12-5_i386.deb - extra libdevel libapr1-dev_1.2.12-5_i386.deb - optional libdevel libapr1_1.2.12-5_i386.deb - optional libs Announcing to [EMAIL PROTECTED] Closing bugs: 501497 Thank you for your contribution to Debian. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#501497: marked as done (apache2-utils: htpasswd may block indefinitely on /dev/random)
Your message dated Tue, 07 Oct 2008 22:32:06 +
with message-id [EMAIL PROTECTED]
and subject line Bug#501497: fixed in apr 1.2.12-5
has caused the Debian Bug report #501497,
regarding apache2-utils: htpasswd may block indefinitely on /dev/random
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [EMAIL PROTECTED]
immediately.)
--
501497: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=501497
Debian Bug Tracking System
Contact [EMAIL PROTECTED] with problems
---BeginMessage---
Package: apache2-utils
Version: 2.2.9-7
Severity: minor
Greetings,
Having recently upgraded from a relatively old apache 1.3-era package I have
found
a quick script I wrote to periodically syncronise passwords had become
unreliable.
Further investigation reveals that htpasswd invoked from this script around 50
times
blocks for long periods. It previously took trivial time (very much less than
one
second). Running strace, I see:
$ strace htpasswd -c -b testfile testuser testpass
[much output]
getrlimit(RLIMIT_STACK, {rlim_cur=8192*1024, rlim_max=RLIM_INFINITY}) = 0
uname({sys=Linux, node=gamma, ...}) = 0
brk(0) = 0x804c000
brk(0x806d000) = 0x806d000
stat64(testfile, 0xbfb4f970) = -1 ENOENT (No such file or
directory)
open(testfile, O_WRONLY|O_CREAT|O_LARGEFILE, 0666) = 3
close(3)= 0
open(/dev/random, O_RDONLY) = 3
read(3,
Clearly I'm entropy-starved. However, I'd question whether a tool such as
htpasswd
cannot do with /dev/urandom. Delving into the code, it uses it to seed rand(3)
so
it clearly does not use /dev/random for any purpose where pure entropy is
required.
Previously it had used time(2) -- this change to use a blocking function in the
APR
is the source of the regression.
Cheers,
Joseph
-- System Information:
Debian Release: lenny/sid
Architecture: i386 (i686)
Kernel: Linux 2.6.18-6-686 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash
Versions of packages apache2-utils depends on:
ii libapr11.2.12-4 The Apache Portable Runtime Librar
ii libaprutil11.2.12+dfsg-8 The Apache Portable Runtime Utilit
ii libc6 2.7-13GNU C Library: Shared libraries
ii libssl0.9.80.9.8g-13 SSL shared libraries
apache2-utils recommends no packages.
apache2-utils suggests no packages.
-- no debconf information
---End Message---
---BeginMessage---
Source: apr
Source-Version: 1.2.12-5
We believe that the bug you reported is fixed in the latest version of
apr, which is due to be installed in the Debian FTP archive:
apr_1.2.12-5.diff.gz
to pool/main/a/apr/apr_1.2.12-5.diff.gz
apr_1.2.12-5.dsc
to pool/main/a/apr/apr_1.2.12-5.dsc
libapr1-dbg_1.2.12-5_i386.deb
to pool/main/a/apr/libapr1-dbg_1.2.12-5_i386.deb
libapr1-dev_1.2.12-5_i386.deb
to pool/main/a/apr/libapr1-dev_1.2.12-5_i386.deb
libapr1_1.2.12-5_i386.deb
to pool/main/a/apr/libapr1_1.2.12-5_i386.deb
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [EMAIL PROTECTED],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Stefan Fritsch [EMAIL PROTECTED] (supplier of updated apr package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [EMAIL PROTECTED])
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Format: 1.8
Date: Wed, 08 Oct 2008 00:06:56 +0200
Source: apr
Binary: libapr1 libapr1-dev libapr1-dbg
Architecture: source i386
Version: 1.2.12-5
Distribution: unstable
Urgency: low
Maintainer: Debian Apache Maintainers debian-apache@lists.debian.org
Changed-By: Stefan Fritsch [EMAIL PROTECTED]
Description:
libapr1- The Apache Portable Runtime Library
libapr1-dbg - The Apache Portable Runtime Library - Development Headers
libapr1-dev - The Apache Portable Runtime Library - Development Headers
Closes: 501497
Changes:
apr (1.2.12-5) unstable; urgency=low
.
* Actually switch to /dev/urandom instead of only adding a non-functional
patch. Closes: #501497
Checksums-Sha1:
f74c9b1fd1465bdcd0e7359c87bd78a145aeaa72 1256 apr_1.2.12-5.dsc
c00a2bff9d6879f2796643ec941a95201c5d495f 11632 apr_1.2.12-5.diff.gz
91d25c895b3a166bfd7b77ed3167f8a80f63913e 108684 libapr1_1.2.12-5_i386.deb
5e9b7f82629cb788131a47936f23482b4ff70836
