<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META content="text/html; charset=utf-8" http-equiv=Content-Type>
<META name=qrichtext content=1>
<STYLE type=text/css>
p, li { white-space: pre-wrap; }
</STYLE>
<META name=GENERATOR content="MSHTML 8.00.6001.19046"></HEAD>
<BODY
style="FONT-STYLE: normal; FONT-FAMILY: 'Arial'; FONT-SIZE: 12pt; FONT-WEIGHT: 400">
<DIV><SPAN class=037125113-17042011><FONT face="'Arial'">I just updated my
server and cannot login through the GUI.</FONT></SPAN></DIV>
<DIV><SPAN class=037125113-17042011></SPAN> </DIV>
<DIV><SPAN class=037125113-17042011><FONT face="'Arial'">I ran the commands
below and get the following errors:</FONT></SPAN></DIV>
<DIV><SPAN class=037125113-17042011></SPAN> </DIV>
<DIV><SPAN class=037125113-17042011><FONT face="'Arial'">ind: /etc/httpd/alias:
No such file or directory</FONT></SPAN></DIV>
<DIV><SPAN class=037125113-17042011><FONT face="'Arial'">ind: /etc/httpd/alias:
No such file or directory</FONT></SPAN></DIV>
<DIV><SPAN class=037125113-17042011></SPAN> </DIV>
<DIV><SPAN class=037125113-17042011><FONT face="'Arial'">please
help.</FONT></SPAN></DIV>
<DIV><SPAN class=037125113-17042011></SPAN> </DIV>
<DIV><SPAN class=037125113-17042011><FONT
face="'Arial'">Thanks.</FONT></SPAN></DIV>
<DIV><SPAN class=037125113-17042011></SPAN> </DIV>
<DIV><SPAN class=037125113-17042011><FONT
face="'Arial'">jimmy</FONT></SPAN></DIV>
<BLOCKQUOTE style="MARGIN-RIGHT: 0px" dir=ltr>
<DIV dir=ltr class=OutlookMessageHeader align=left><FONT size=2
face=Tahoma>-----Original Message-----<BR><B>From:</B>
blueonyx-bounces@blueonyx.it [mailto:blueonyx-bounces@blueonyx.it]<B>On Behalf
Of </B>Michael Stauber<BR><B>Sent:</B> Sunday, April 10, 2011 5:45
AM<BR><B>To:</B> BlueOnyx General Mailing List<BR><B>Subject:</B>
[BlueOnyx:06956] IMPORTANT: Last nights YUM updates - official
fix<BR><BR></FONT></DIV>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0">Hi
all,</P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0; -qt-paragraph-type: empty"></P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0">As
mentioned in [BlueOnyx:06936], last nights YUM updates contained a nasty
surprise. The problem is with CentOS-5.6's mod_nss-1.0.8-3.el5 RPM.</P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0; -qt-paragraph-type: empty"></P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0">Here
is the official fix:</P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0">===============</P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0; -qt-paragraph-type: empty"></P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0">1.)
Login to the box by SSH as "admin".</P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0; -qt-paragraph-type: empty"></P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0">2.)
Type "su -" to gain root access. </P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0; -qt-paragraph-type: empty"></P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0">3.)
Run the following commands:</P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0; -qt-paragraph-type: empty"></P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0">/etc/init.d/httpd
stop</P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0">find
/etc/httpd/alias -user root -name "*.db" -exec /bin/chgrp apache {} \;</P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0">find
/etc/httpd/alias -user root -name "*.db" -exec /bin/chmod g+r {} \;</P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0">/etc/init.d/httpd
start</P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0; -qt-paragraph-type: empty"></P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0">That
should fix the issues.</P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0; -qt-paragraph-type: empty"></P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0">There
are also reports of BlueOnyx's GUI defaulting back to the initial setup wizard
after these updates, which I cannot confirm yet. If you run into that, please
perform the setup wizard again.</P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0; -qt-paragraph-type: empty"></P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0">--------------------------------------------------------------------------------------</P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0; -qt-paragraph-type: empty"></P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0">Why
it happened:</P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0">=============</P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0; -qt-paragraph-type: empty"></P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0">The
guys at RedHat (and CentOS) who rolled up the new "mod_nss" addressed some
security issues with "mod_nss", which also changed around the required
ownerships and permissions of the /etc/httpd/alias/ databases. </P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0; -qt-paragraph-type: empty"></P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0">In
the past the files in /etc/httpd/alias/ were all root owned and had these
ownerships and permissions:</P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0; -qt-paragraph-type: empty"></P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0">OLD:</P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0">====</P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0; -qt-paragraph-type: empty"></P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0">[root@derelik
alias]# ls -la /etc/httpd/alias/*.db</P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0">-rw-------
1 root root 65536 Sep 23 2010 /etc/httpd/alias/cert8.db</P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0">-rw-------
1 root root 16384 Sep 23 2010 /etc/httpd/alias/key3.db</P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0">-rw-------
1 root root 16384 Sep 23 2010 /etc/httpd/alias/secmod.db</P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0; -qt-paragraph-type: empty"></P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0">Now
they're supposed to be this way:</P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0; -qt-paragraph-type: empty"></P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0">NEW:</P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0">====</P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0; -qt-paragraph-type: empty"></P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0">[root@cbq
alias]# ls -la /etc/httpd/alias/*.db</P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0">-rw-r-----
1 root apache 65536 Sep 23 2010 /etc/httpd/alias/cert8.db</P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0">-rw-r-----
1 root apache 16384 Sep 23 2010 /etc/httpd/alias/key3.db</P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0">-rw-r-----
1 root apache 16384 Sep 23 2010 /etc/httpd/alias/secmod.db</P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0; -qt-paragraph-type: empty"></P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0">As
you can see: The group ownership got changed from "root" to "apache" and the
databases are now also group readable, which they weren't in the past.</P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0; -qt-paragraph-type: empty"></P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0">CentOS-5.6's
new mod_nss-1.0.8-3.el5 RPM (which owns these files) was supposed to fix the
ownerships and permissions, but didn't. Hence the problems.</P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0; -qt-paragraph-type: empty"></P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0">I'll
release an update to the BlueOnyx YUM repository which will automatically take
care of this problem. But first I need to fix www.blueonyx.it and the mirrors
as well. \o/</P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0; -qt-paragraph-type: empty"></P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0">Thanks
to Rodrigo and the others who helped to address the issue in the meantime!</P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0; -qt-paragraph-type: empty"></P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0">--
</P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0">With
best regards</P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0; -qt-paragraph-type: empty"></P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0">Michael
Stauber</P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0; -qt-paragraph-type: empty"></P></BLOCKQUOTE></BODY></HTML>