Re: disable httpd ap_directory_walk() before mpm_itk transfer

Stefan Helmert <s.helmert@xxxxxxx> · Mon, 3 Apr 2023 09:12:37 +0200

OK, thanks. I also thought, there must be a way, because proxy module do 

also suppress directory walk.

There are some other bugs in mpm_itk. I think, changing the behavior of 

mpm_itk is the best thing. I do not really know, how to write apache2 

httpd modules.

Best regards

Stefan Helmert

Am 31.03.23 um 14:27 schrieb Yann Ylavic:

Hello,

On Fri, Mar 31, 2023 at 8:18 AM Stefan Helmert <s.helmert@xxxxxxx> wrote:

in my setup, httpd runs on a specific uid and delegates transfers to
mpm_itk with AssignUserIDExpr %{reqenv:MAPPED_USER} dynamic uid.

The problem is: httpd runs ap_directory_walk() with its own uid before
delegating to mpm_itk with the dynamic uid. This fails, because httpd
doesn't have the permissions to read the directory.

How can I disable ap_directory_walk() or delegate it to mpm_itk?

I can't think of a configuration that could change this behaviour, but
if you can patch mpm_itk I'd suggest to try to make the
itk_post_perdir_config hook an itk_map_to_storage hook instead
(APR_HOOK_REALLY_FIRST still, but returning DECLINED on success so
that the next map_to_storage hooks run too).

That's from a quick look at mpm_itk code (and I know very little about
this MPM), but it looks like it could work..

Regards;
Yann.

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx

smime.p7s