[users@httpd] suEXEC stops working (for me) in 2.0.53

[Joshua Kugler <joshua.kugler@xxxxxxx>]

This is regarding Mandrake packages, but I've been round and round in their 
bug database, and haven't gotten anywhere.  You can read all the gory details 
here: http://qa.mandrakesoft.com/show_bug.cgi?id=15169 (a lot more details, 
strace, etc).

What happens is this:

I have a working configuration of Apache httpd and suEXEC up and running with 
version 2.0.50.  However, when I upgrade to 2.0.53 (and make *NO* changes to 
configuration), suddenly suEXEC is no longer recognized (no line indicating 
"enabled" in the startup messages.  My main configs are all plain vanilla.  
When I downgrade back to 2.0.50, suEXECworks again.  All the customization 
I've done is here in my custom vhosts file:

# This is the config file for the CDE hosts

NameVirtualHost *:80

<VirtualHost *:80>
        ServerAdmin joshua.kugler@xxxxxxx
        ServerName wwwdev.cde.uaf.edu
        ServerPath /
        DocumentRoot /home/cde/www/wwwroot
        <IfModule mod_suexec.c>
                SuexecUserGroup cde cde
        </IfModule>
</VirtualHost>

<IfModule COMMENT.C>
<VirtualHost *:80>
        ServerAdmin joshua.kugler@xxxxxxx
        ServerName danrd.cde.uaf.edu
        ServerPath /
        DocumentRoot /home/cde/www/danrd
        <IfModule mod_suexec.c>
                SuexecUserGroup cde cde
        </IfModule>
</VirtualHost>

<VirtualHost *:80>
        ServerAdmin joshua.kugler@xxxxxxx
        ServerName itspecialist.cde.uaf.edu
        ServerPath /
        DocumentRoot /home/cde/www/wwwroot/projects/itspecialist
        <IfModule mod_suexec.c>
                SuexecUserGroup cde cde
        </IfModule>
</VirtualHost>

<VirtualHost *:80>
        ServerAdmin joshua.kugler@xxxxxxx
        ServerName adetc.cde.uaf.edu
        ServerPath /
        DocumentRoot /home/cde/www/wwwroot/projects/adetc
        <IfModule mod_suexec.c>
                SuexecUserGroup cde cde
        </IfModule>
</VirtualHost>

</IfModule>

<Directory /home/cde/www>
  Options +All +Multiviews
  AllowOverride All
  <IfModule mod_access.c>
    Order deny,allow
    Allow from all
  </IfModule>
</Directory>

### Directives for proxying FMP WebCompanion on DBS
ProxyRequests Off

<Proxy *>
 Order deny,allow
 Allow from all
</Proxy>

ProxyPass /fmp http://dbs.cde.uaf.edu
ProxyPassReverse /fmp http://dbs.cde.uaf.edu

 
<ifmodule mod_rewrite.c>
  RewriteEngine on
  RewriteLog /var/log/httpd/rewrite_log
  RewriteLogLevel 1

  #catch reqeusts for /fmp
  RewriteRule ^/fmp$ /fmp/ [R]

</IfModule>

### User-friendly error is Apache cannot contact FMP server.
#
ErrorDocument 502 "Courses server currently down.  We will have this fixed as 
soon as possible."

This is the included file that loads suEXEC:
########################
<IfDefine HAVE_SUEXEC>
  <IfModule !mod_suexec.c>
    LoadModule suexec_module    extramodules/mod_suexec.so
  </IfModule>
</IfDefine>

<IfModule mod_suexec.c>

#    SuexecUserGroup root apache

</IfModule>
########################

The LoadModule is executed because any "garbage" placed inside   

<IfModule mod_suexec.c> ... </IfModule> throws an error.

If I do an strace in apachectl debug, it seems that /usr/sbin/apache2-suexec 
is found, but then it is not enabled.

I realize this is a vendor package, but does anyone have any idea on things I 
should be looking at?  Like I said, nothing changes in configuration, but 
when I install 2.0.53, suEXEC simply stops working.

IDEAS??

j----- k-----

-- 
Joshua Kugler
CDE System Administrator
http://distance.uaf.edu/

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
   "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx