[SOLVED] Apache 2.2.21 missing configure option

Skaperen · 12-11-2011, 01:32 AM

I'm trying to build Apache 2.2.21 from source on Ubuntu server 11.04. I have succeeded and run it, but found that suexec is failing because it's trying to open logs where it cannot. So back to the build configuration.

Document http://httpd.apache.org/docs/2.2/suexec.html describes:

Quote:

--with-suexec-logfile=FILE
This defines the filename to which all suEXEC transactions and errors are logged (useful for auditing and debugging purposes). By default the logfile is named "suexec_log" and located in your standard logfile directory (--logfiledir).

There appears to be no such configure option according to document http://httpd.apache.org/docs/2.2/pro...configure.html but I went ahead and tried it, anyway, just in case they overlooked something (has happened before). But it failed to finish the "./configure" step saying the option was not recognized.

So, how can I get the logs to be directed to the proper directory?

They are trying to go to "/opt/logs" (because --prefix=/opt) but I want the logs to go to /var/log/httpd. The access_log and error_log do go there by way of being specified in httpd.conf. However, suexec is not doing this and doesn't get this info from httpd.conf anyway (has to be compiled in for security and/or performance reasons, presumably).

gillbertiddio · 12-11-2011, 04:39 AM

http://httpd.apache.org/docs/2.2/pro...configure.html
try editing "src/Configure" instead - neither is an argument to pass to ./configure but are both options in the Configure file

bathory · 12-11-2011, 07:43 AM

Quote:

There appears to be no such configure option according to document http://httpd.apache.org/docs/2.2/pro...configure.html but I went ahead and tried it, anyway, just in case they overlooked something (has happened before). But it failed to finish the "./configure" step saying the option was not recognized.

Are you sure?
Just for testing, I compiled apache 2.2.21 using the following config.nice, without a hitch

Code:

#! /bin/sh
#
# Created by configure

"./configure" \
"--enable-so" \
"--prefix=/opt/apache" \
"--enable-mods-shared=ssl proxy proxy_http proxy_ftp proxy_connect" \
"--with-mpm=prefork" \
"--enable-vhost-alias" \
"--enable-rewrite" \
"--with-included-apr" \
"--enable-suexec" \
"--with-suexec-logfile=/var/log/httpd/suexec.log" \
"$@"

Skaperen · 12-11-2011, 03:16 PM

Quote:

Originally Posted by bathory

Are you sure?
Just for testing, I compiled apache 2.2.21 using the following config.nice, without a hitch

Code:

#! /bin/sh
#
# Created by configure

"./configure" \
"--enable-so" \
"--prefix=/opt/apache" \
"--enable-mods-shared=ssl proxy proxy_http proxy_ftp proxy_connect" \
"--with-mpm=prefork" \
"--enable-vhost-alias" \
"--enable-rewrite" \
"--with-included-apr" \
"--enable-suexec" \
"--with-suexec-logfile=/var/log/httpd/suexec.log" \
"$@"

So it accepts a full path instead of just a name? They need to update the documentation, then.

bathory · 12-11-2011, 04:23 PM

Quote:

So it accepts a full path instead of just a name? They need to update the documentation, then.

It can accept both.
From apache documentation:

Quote:

--with-suexec-logfile=FILE
This defines the filename to which all suEXEC transactions and errors are logged (useful for auditing and debugging purposes). By default the logfile is named "suexec_log" and located in your standard logfile directory (--logfiledir).

This is half-correct as it states that by default the log file "suexec_log" is created under the logfile directory (if you don't use the --with-suexec-logfile option), which is true.

But if you use "--with-suexec-logfile=FILE" omitting the absolute path to the logfile, then it will be created in the directory from where you are trying to run your scripts. I.e. for a URL like http://host/cgi-bin/foo.cgi, it will be created into the cgi-bin directory, for http://host/whatever/foo.php, that will be in /<docroot>/whatever/ and so on. And you'll end up with various suexec logs in various places!!!
That is why it's better to give the full path to the logfile.