I need suggestions on how to troubleshoot a permissions problem with an Apache server. The following are some details to my issue:

I'm in process of building a LAMP server that also includes an Oracle client. The intent is to put together a "test" server that is identicle to an existing web server. The server is running RHN AS 4.0 Linux, Apache 2.0.52(rpm), MySQL 3.23.58, PHP 4.4.4 (source), Oracle
9.0.4. The intention is to update the PHP to 5.2.5 for testing prior to updating the production server.

Currently, I get the following errors when checking the status and starting apachectl respectively:

apachectl status

ERROR at dump.c:188: Connection refused

apachectl start

Syntax error on line 192 of

/etc/httpd/conf/httpd.conf:
Cannot load /usr/lib/httpd/modules/libphp4.so into server: libclntsh.so.9.0: cannot open shared object file: Permission denied

Apache starts if line 192 is commented out.

Permissions on libphp4 are:
-rwxr-xr-x 1 root root 7586237 Feb 13 14:28

libphp4.so

Permissions on libclntsh.so.9.0 are:
-rwxrwxr-x 1 oracle dba 11527745 Mar 12 16:24

libclntsh.so.9.0

Are there other files that I should check the permissions on?

Any help would be greatly appreciated. Thank you in advance.

Charles

Check the whole path to the library. Also, i'd try to su to the apache user and try to access the library to see if it works.

PATH variable has to set in that shell for all libraries.
set or export or add it in the .profile before running the exe.

Fedora Development

I was able to get Apache to run without error. Here's what did it:

vi /etc/selinux/config
and disabled selinux.

The production server that is running now also has the "selinux" disabled. So I think I'm good to go.

Answers to your suggestions...

"Check the whole path to the library. Also, i'd try to su to the apache user and try to access the library to see if it works."

The permissions were ok the entire path. Running apache from apache did not work. Looks like I may still have a problem. If I try to run apache as apache I get this:

su apache
This account is currently not available.

There is an "apache" account. It is also in the httpd.conf file. Any suggestions?

"PATH variable has to set in that shell for all libraries.
set or export or add it in the .profile before running the exe."

Sorry, I'm not sure exactly how to do that. How do I access the .profile?

Thank you.

Instead look for SELinux warnings in syslog and audit.log, run them through audit2allow and add to your local policy. If unsure post some different warning messages between BB code tags here.