<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META content="text/html; charset=utf-8" http-equiv=Content-Type>
<META name=qrichtext content=1>
<STYLE type=text/css>P {
WHITE-SPACE: pre-wrap
}
LI {
WHITE-SPACE: pre-wrap
}
</STYLE>
<META name=GENERATOR content="MSHTML 8.00.6001.19046"></HEAD>
<BODY
style="FONT-STYLE: normal; FONT-FAMILY: 'Arial'; FONT-SIZE: 12pt; FONT-WEIGHT: 400"
bgColor=#ffffff>
<DIV><FONT size=2>Hi Jimmy</FONT></DIV>
<DIV><FONT size=2></FONT> </DIV>
<DIV><FONT size=2>A reboot fixed the problems for me... have you tried
that? It was a rather large bundle of updates and I think it
was Michael who suggest it was worth doing routinely after such an
update.</FONT></DIV>
<DIV><FONT size=2></FONT> </DIV>
<DIV><FONT size=2>Richard</FONT></DIV>
<BLOCKQUOTE
style="BORDER-LEFT: #000000 2px solid; PADDING-LEFT: 5px; PADDING-RIGHT: 0px; MARGIN-LEFT: 5px; MARGIN-RIGHT: 0px">
<DIV style="FONT: 10pt arial">----- Original Message ----- </DIV>
<DIV
style="FONT: 10pt arial; BACKGROUND: #e4e4e4; font-color: black"><B>From:</B>
<A title=grossj@constantino.net href="mailto:grossj@constantino.net">Jimmy
Gross</A> </DIV>
<DIV style="FONT: 10pt arial"><B>To:</B> <A title=blueonyx@blueonyx.it
href="mailto:blueonyx@blueonyx.it">BlueOnyx General Mailing List</A> </DIV>
<DIV style="FONT: 10pt arial"><B>Sent:</B> Sunday, April 17, 2011 3:02
PM</DIV>
<DIV style="FONT: 10pt arial"><B>Subject:</B> [BlueOnyx:07080] Re: IMPORTANT:
Last nights YUM updates - officialfix</DIV>
<DIV><BR></DIV>
<DIV><SPAN class=037125113-17042011><FONT face="'Arial'">I just updated my
server and cannot login through the GUI.</FONT></SPAN></DIV>
<DIV><SPAN class=037125113-17042011></SPAN> </DIV>
<DIV><SPAN class=037125113-17042011><FONT face="'Arial'">I ran the commands
below and get the following errors:</FONT></SPAN></DIV>
<DIV><SPAN class=037125113-17042011></SPAN> </DIV>
<DIV><SPAN class=037125113-17042011><FONT face="'Arial'">ind:
/etc/httpd/alias: No such file or directory</FONT></SPAN></DIV>
<DIV><SPAN class=037125113-17042011><FONT face="'Arial'">ind:
/etc/httpd/alias: No such file or directory</FONT></SPAN></DIV>
<DIV><SPAN class=037125113-17042011></SPAN> </DIV>
<DIV><SPAN class=037125113-17042011><FONT face="'Arial'">please
help.</FONT></SPAN></DIV>
<DIV><SPAN class=037125113-17042011></SPAN> </DIV>
<DIV><SPAN class=037125113-17042011><FONT
face="'Arial'">Thanks.</FONT></SPAN></DIV>
<DIV><SPAN class=037125113-17042011></SPAN> </DIV>
<DIV><SPAN class=037125113-17042011><FONT
face="'Arial'">jimmy</FONT></SPAN></DIV>
<BLOCKQUOTE style="MARGIN-RIGHT: 0px" dir=ltr>
<DIV dir=ltr class=OutlookMessageHeader align=left><FONT size=2
face=Tahoma>-----Original Message-----<BR><B>From:</B> <A
href="mailto:blueonyx-bounces@blueonyx.it">blueonyx-bounces@blueonyx.it</A>
[mailto:blueonyx-bounces@blueonyx.it]<B>On Behalf Of </B>Michael
Stauber<BR><B>Sent:</B> Sunday, April 10, 2011 5:45 AM<BR><B>To:</B>
BlueOnyx General Mailing List<BR><B>Subject:</B> [BlueOnyx:06956] IMPORTANT:
Last nights YUM updates - official fix<BR><BR></FONT></DIV>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0">Hi
all,</P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0; -qt-paragraph-type: empty"></P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0">As
mentioned in [BlueOnyx:06936], last nights YUM updates contained a nasty
surprise. The problem is with CentOS-5.6's mod_nss-1.0.8-3.el5 RPM.</P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0; -qt-paragraph-type: empty"></P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0">Here
is the official fix:</P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0">===============</P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0; -qt-paragraph-type: empty"></P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0">1.)
Login to the box by SSH as "admin".</P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0; -qt-paragraph-type: empty"></P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0">2.)
Type "su -" to gain root access. </P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0; -qt-paragraph-type: empty"></P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0">3.)
Run the following commands:</P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0; -qt-paragraph-type: empty"></P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0">/etc/init.d/httpd
stop</P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0">find
/etc/httpd/alias -user root -name "*.db" -exec /bin/chgrp apache {} \;</P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0">find
/etc/httpd/alias -user root -name "*.db" -exec /bin/chmod g+r {} \;</P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0">/etc/init.d/httpd
start</P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0; -qt-paragraph-type: empty"></P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0">That
should fix the issues.</P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0; -qt-paragraph-type: empty"></P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0">There
are also reports of BlueOnyx's GUI defaulting back to the initial setup
wizard after these updates, which I cannot confirm yet. If you run into
that, please perform the setup wizard again.</P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0; -qt-paragraph-type: empty"></P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0">--------------------------------------------------------------------------------------</P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0; -qt-paragraph-type: empty"></P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0">Why
it happened:</P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0">=============</P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0; -qt-paragraph-type: empty"></P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0">The
guys at RedHat (and CentOS) who rolled up the new "mod_nss" addressed some
security issues with "mod_nss", which also changed around the required
ownerships and permissions of the /etc/httpd/alias/ databases. </P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0; -qt-paragraph-type: empty"></P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0">In
the past the files in /etc/httpd/alias/ were all root owned and had these
ownerships and permissions:</P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0; -qt-paragraph-type: empty"></P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0">OLD:</P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0">====</P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0; -qt-paragraph-type: empty"></P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0">[root@derelik
alias]# ls -la /etc/httpd/alias/*.db</P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0">-rw-------
1 root root 65536 Sep 23 2010 /etc/httpd/alias/cert8.db</P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0">-rw-------
1 root root 16384 Sep 23 2010 /etc/httpd/alias/key3.db</P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0">-rw-------
1 root root 16384 Sep 23 2010 /etc/httpd/alias/secmod.db</P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0; -qt-paragraph-type: empty"></P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0">Now
they're supposed to be this way:</P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0; -qt-paragraph-type: empty"></P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0">NEW:</P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0">====</P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0; -qt-paragraph-type: empty"></P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0">[root@cbq
alias]# ls -la /etc/httpd/alias/*.db</P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0">-rw-r-----
1 root apache 65536 Sep 23 2010 /etc/httpd/alias/cert8.db</P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0">-rw-r-----
1 root apache 16384 Sep 23 2010 /etc/httpd/alias/key3.db</P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0">-rw-r-----
1 root apache 16384 Sep 23 2010 /etc/httpd/alias/secmod.db</P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0; -qt-paragraph-type: empty"></P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0">As
you can see: The group ownership got changed from "root" to "apache" and the
databases are now also group readable, which they weren't in the past.</P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0; -qt-paragraph-type: empty"></P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0">CentOS-5.6's
new mod_nss-1.0.8-3.el5 RPM (which owns these files) was supposed to fix the
ownerships and permissions, but didn't. Hence the problems.</P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0; -qt-paragraph-type: empty"></P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0">I'll
release an update to the BlueOnyx YUM repository which will automatically
take care of this problem. But first I need to fix www.blueonyx.it and the
mirrors as well. \o/</P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0; -qt-paragraph-type: empty"></P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0">Thanks
to Rodrigo and the others who helped to address the issue in the
meantime!</P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0; -qt-paragraph-type: empty"></P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0">--
</P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0">With
best regards</P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0; -qt-paragraph-type: empty"></P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0">Michael
Stauber</P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0; -qt-paragraph-type: empty"></P></BLOCKQUOTE>
<P>
<HR>
<P></P>_______________________________________________<BR>Blueonyx mailing
list<BR>Blueonyx@mail.blueonyx.it<BR>http://mail.blueonyx.it/mailman/listinfo/blueonyx<BR></BLOCKQUOTE></BODY></HTML>