Project

General

Profile

Actions
Copy link

Bug #10455

closed

Relay-Api does not handle different Apache versions

Added by Janos Mattyasovszky over 7 years ago. Updated over 7 years ago.

Status:
Released
Priority:
N/A
Assignee:
Benoît PECCATTE
Category:
Packaging
Target version:
4.1.0
Pull Request:
https://github.com/Normation/rudder-p...
Severity:
Critical - prevents main use of Rudder | no workaround | data loss | security
UX impact:
User visibility:
Effort required:
Priority:
0
Name check:
Fix check:
Regression:

Description

On SLES12 SP2, apache (which has a version of 2.4.23-something) is not starting after a clean installation and initialization of 4.1-rc1:

start_apache2[11305]: AH00526: Syntax error on line 97 of /opt/rudder/etc/rudder-apache-relay-common.conf:
start_apache2[11305]: Invalid command 'Allow', perhaps misspelled or defined by a module not included in the server configuration
systemd[1]: apache2.service: Control process exited, code=exited status=1

In "/opt/rudder/etc/rudder-apache-relay-common.conf" there is this section:

<Directory /opt/rudder/share/relay-api/relay_api>
  # Allow access from anybody
  Allow from all
</Directory>

This should be more like something like this:

  <IfVersion < 2.4>
    Order deny,allow
    Allow From all
  </IfVersion>
  <IfVersion >= 2.4>
    Require all granted
  </IfVersion>

This patch helped me start apache2 :

--- /opt/rudder/etc/rudder-apache-relay-common.conf.orig        2017-03-17 12:27:20.420838026 +0100
+++ /opt/rudder/etc/rudder-apache-relay-common.conf     2017-03-17 12:27:22.200821643 +0100
@@ -94,17 +94,35 @@

 <Directory /opt/rudder/share/relay-api/relay_api>
   # Allow access from anybody
-  Allow from all
+  <IfVersion < 2.4>
+    Order deny,allow
+    Allow From all
+  </IfVersion>
+  <IfVersion >= 2.4>
+    Require all granted
+  </IfVersion>
 </Directory>

 <Files /opt/rudder/share/relay-api/relay-api.wsgi>
   # Allow access from anybody
-  Allow from all
+  <IfVersion < 2.4>
+    Order deny,allow
+    Allow From all
+  </IfVersion>
+  <IfVersion >= 2.4>
+    Require all granted
+  </IfVersion>
 </Files>

 <Directory /opt/rudder/share/relay-api/flask>
   # Allow access from anybody
-  Allow from all
+  <IfVersion < 2.4>
+    Order deny,allow
+    Allow From all
+  </IfVersion>
+  <IfVersion >= 2.4>
+    Require all granted
+  </IfVersion>
 </Directory>

 # Disallow by default
Actions
Copy link

Also available in: Atom PDF