You are viewing a plain text version of this content. The canonical link for it is here.
Posted to bugs@apr.apache.org by bu...@apache.org on 2011/07/26 16:38:03 UTC

DO NOT REPLY [Bug 51560] New: apr_stat for APR_FINFO_NORM using GetEffectiveRightsFromAcl does not work in complex Active Directory forest

https://issues.apache.org/bugzilla/show_bug.cgi?id=51560

             Bug #: 51560
           Summary: apr_stat for APR_FINFO_NORM using
                    GetEffectiveRightsFromAcl does not work in complex
                    Active Directory forest
           Product: APR
           Version: HEAD
          Platform: PC
        OS/Version: Windows XP
            Status: NEW
          Severity: normal
          Priority: P2
         Component: APR
        AssignedTo: bugs@apr.apache.org
        ReportedBy: dave.apache@yougeezer.co.uk
    Classification: Unclassified


This is related to an Apache httpd mod_fcgid bug (51020).  A call to apr_stat
is returning APR_INCOMPLETE when the machine is part of a large / complex
Active Directory domain.

Cause: According to Microsoft, there are issues with using
GetEffectiveRightsFromAcl http://support.microsoft.com/kb/2018746

If permissions for any Active Directory users or groups, and any local groups
containing Active Directory users or groups are removed, a normal response
(APR_SUCCESS) is returned.

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@apr.apache.org
For additional commands, e-mail: bugs-help@apr.apache.org

DO NOT REPLY [Bug 51560] apr_stat for APR_FINFO_NORM using GetEffectiveRightsFromAcl does not work in complex Active Directory forest

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=51560

--- Comment #1 from David Boyer <da...@yougeezer.co.uk> 2011-08-01 14:17:00 UTC ---
Wanted to add that other modules may be affected.  The only one I've
experienced myself is mod_xsendfile
(https://github.com/nmaier/mod_xsendfile/issues/8).

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@apr.apache.org
For additional commands, e-mail: bugs-help@apr.apache.org

DO NOT REPLY [Bug 51560] apr_stat for APR_FINFO_NORM using GetEffectiveRightsFromAcl does not work in complex Active Directory forest

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=51560

--- Comment #3 from William A. Rowe Jr. <wr...@apache.org> 2011-12-12 23:53:07 UTC ---
We should note, patches are welcome.  It's obvious MS has no plans to support
this mechanism, moving forwards.  The larger question is; do we fail-false or
fail-true indicating access denied or access allowed by default if it cannot 
be determined?

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@apr.apache.org
For additional commands, e-mail: bugs-help@apr.apache.org

DO NOT REPLY [Bug 51560] apr_stat for APR_FINFO_NORM using GetEffectiveRightsFromAcl does not work in complex Active Directory forest

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=51560

--- Comment #2 from William A. Rowe Jr. <wr...@apache.org> 2011-12-12 21:48:03 UTC ---
Fixed in mod_fcgid trunk.  Still worthy of consideration w.r.t. apr; at least
we must retry, the error result seems like nonsense.

This bug in Windows really sucks :)

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@apr.apache.org
For additional commands, e-mail: bugs-help@apr.apache.org

DO NOT REPLY [Bug 51560] apr_stat for APR_FINFO_NORM using GetEffectiveRightsFromAcl does not work in complex Active Directory forest

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=51560

David Boyer <da...@yougeezer.co.uk> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Blocks|                            |51020
         OS/Version|                            |All

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@apr.apache.org
For additional commands, e-mail: bugs-help@apr.apache.org

DO NOT REPLY [Bug 51560] apr_stat for APR_FINFO_NORM using GetEffectiveRightsFromAcl does not work in complex Active Directory forest

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=51560

David Boyer <da...@yougeezer.co.uk> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
         OS/Version|Windows XP                  |Windows Server 2008

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@apr.apache.org
For additional commands, e-mail: bugs-help@apr.apache.org