-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 08/22/2010 02:40 PM, Daniel B. Thurman wrote:
Seems there are errors spewing from httpd when starting:
/etc/httpd/logs/error_log
=======================
[Sun Aug 22 11:26:15 2010] [notice] SELinux policy enabled; httpd
running as context unconfined_u:system_r:httpd_t:s0
^ httpd is running unconfined_u?
The important part is the type field which is
correct. You must have
restarted the apache process or some process (yum/rpm) restarted it
after you ran them. When a process is started by a user it gets the
users section of the label (unconfined_u). When the process is started
by the system it gets the system user (system_u). Targeted selinux
policy ignores this field, so apache is running under the correct context.
[Sun Aug 22 11:26:15 2010] [notice] suEXEC mechanism enabled (wrapper:
/usr/sbin/suexec)
[Sun Aug 22 11:26:16 2010] [notice] SSL FIPS mode disabled
[Sun Aug 22 11:26:16 2010] [notice] ModSecurity for Apache/2.5.12
(
http://www.modsecurity.org/) configured.
[Sun Aug 22 11:26:18 2010] [notice] Digest: generating secret for digest
authentication ...
[Sun Aug 22 11:26:18 2010] [notice] Digest: done
[Sun Aug 22 11:26:19 2010] [notice] SSL FIPS mode disabled
[Sun Aug 22 11:26:19 2010] [error] python_init: Python version mismatch,
expected '2.6', found '2.6.4'.
[Sun Aug 22 11:26:19 2010] [error] python_init: Python executable found
'/usr/bin/python'.
[Sun Aug 22 11:26:19 2010] [error] python_init: Python path being used
'/usr/lib/python26.zip:/usr/lib/python2.6/:/usr/lib/python2.6/plat-linux2:/usr/l
ib/python2.6/lib-tk:/usr/lib/python2.6/lib-old:/usr/lib/python2.6/lib-dynload'.
^ Huh? Python version is slightly newer and is not accepted?
[Sun Aug 22 11:26:19 2010] [notice] mod_python: Creating 4 session
mutexes based on 256 max processes and 0 max threads.
[Sun Aug 22 11:26:19 2010] [notice] mod_python: using mutex_directory /tmp
[Sun Aug 22 11:26:20 2010] [notice] Apache/2.2.16 (Unix) DAV/2
mod_auth_kerb/5.4 mod_auth_pgsql/2.0.3 mod_ssl/2.2.16
OpenSSL/1.0.0a-fips mod_fcgid/2.3.
5 mod_nss/2.2.15 NSS/3.12.6.2 PHP/5.3.2 mod_python/3.3.1 Python/2.6.4
SVN/1.6.9 mod_apreq2-20090110/2.7.1 mod_perl/2.0.4 Perl/v5.10.1
configured -- res
uming normal operations
/etc/httpd/log/ssl_error_log :
======================
[Sun Aug 22 11:26:16 2010] [warn] RSA server certificate is a CA
certificate (BasicConstraints: CA == TRUE !?)
[Sun Aug 22 11:26:19 2010] [warn] RSA server certificate is a CA
certificate (BasicConstraints: CA == TRUE !?)
^ Not sure what this means...
Can these errors be ignored?
I don't know about the other problems.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.16 (GNU/Linux)
Comment: Using GnuPG with Fedora -
http://enigmail.mozdev.org/
iEYEARECAAYFAkxzyWkACgkQrlYvE4MpobPGcQCg5nF0smB7gYpAmGWpA7uNEy2x
b6AAn3U5pjjlOwn8iXdsssOOAvmZ31I3
=/bLw
-----END PGP SIGNATURE-----