Fedora directory users - Dec 2006 - New install with Admin Server issues

Hey all,

I''m having some troubles with the Admin Server (web). First, some  
details:

* This is my first experience with FDS
* I''m running Debian and followed the install instructions here:
   http://directory.fedora.redhat.com/wiki/Howto:DebianUbuntu
* I created/installed the debian package from fedora- 
ds-1.0.4-1.RHEL3.i386.opt.rpm
* I can run the java console application, login, create entries, etc.
* I''m a python coder, not a java one, so I have no idea about the  
java stuff.

Here are the issues I am seeing:
1) clicking on the "help" buttons on the java console results in a  
download dialog with the following message:
      The file "help" is of type application/octect-stream...
2) Clicking the "Restart" button (admin tasks) on the java console  
results in a 404
3) Attempting to visit the url http://myhost:62332/ results in a  
download dialog
4) If I download the file, open it and read it, it''s a binary file.  
The file begins with the following:
      ELF,Ü484  
(44Ä4ć‡ÅÅ 
ÄÄËËêê@D 
êê»»((Å(Å   
QÂtd/lib/ld-linux.so. 
2GNU
    And then later in the file, there is this:
      Error: %s
      NETSITE_ROOT%s%cdsgwNETSITE_ROOT not found%s%cdist%c% 
suxmccntmccwinmcc%s:%sHTTP_ACCEPT_LANGUAGE,r, Content-type:  
text/html
<download_menu_block><dsgw_menu_block></download_menu_block></
dsgw_menu_block><download_menu_options><option
value=''%s''>%s
start-console.html not foundenUnable to open NETSITE_ROOT/ 
dist..%cjava%chtml%c%c%c%cstart-console.html..%cjava%chtml% 
cstart-console.html‡ê 
ÙÑ
¸çHÅ8ÉËÅ
...
5) I saw the following rewrite rule in /opt/fedora-ds/admin-serv/ 
config/admserv.conf:
      RewriteRule ^/$ /dist/download [R,L,QSA]
    I commented it out, restarted the server, and now I get a 403  
(Forbidden) when I access http://myhost:62332/
6) I set the admin server''s log level to debug, and I started seeing  
these messages:
[Sun Dec 31 03:00:57 2006] [debug] mod_admserv.c(1759): [client  
72.51.42.180] admserv_check_authz: uri [tasks/operation/StatusPing]  
did not begin with [commands/] - not a command
[Sun Dec 31 03:00:57 2006] [debug] mod_admserv.c(1808): [client  
72.51.42.180] admserv_check_authz: execute CGI [/opt/fedora-ds/bin/ 
admin/admin/bin/statusping] args [(null)]

That''s all I can think of for now. Does anyone have any clue as to  
what could be going on? Is this a java app server dealie? I tried  
searching through the docs and the FDS pages for anything that might  
clue me in, and came up empty-handed...

Other than this, though, it looks like a killer LDAP server. Looking  
forward to getting this rolled out here, and providing folks with the  
web admin link to manage their info...

Thanks!

d

On Jan 2, 2007, at 2:01 PM, Richard Megginson wrote:
> Duncan McGreggor wrote:
>> Hey all,
>>
>> I''m having some troubles with the Admin Server (web). First,
some
>> details:
>>
>> * This is my first experience with FDS
>> * I''m running Debian and followed the install instructions
here:
>>   http://directory.fedora.redhat.com/wiki/Howto:DebianUbuntu
>> * I created/installed the debian package from fedora- 
>> ds-1.0.4-1.RHEL3.i386.opt.rpm
>> * I can run the java console application, login, create entries, etc.
>> * I''m a python coder, not a java one, so I have no idea about
the
>> java stuff.
> What version of Apache are you using? e.g. /usr/sbin/httpd.worker -V
Here''s the output:

# /usr/sbin/httpd -V
Server version: Apache/2.0.54
Server built:   Jul 28 2006 08:55:39
Server''s Module Magic Number: 20020903:9
Architecture:   32-bit
Server compiled with....
-D APACHE_MPM_DIR="server/mpm/worker"
-D APR_HAS_SENDFILE
-D APR_HAS_MMAP
-D APR_HAVE_IPV6 (IPv4-mapped addresses enabled)
-D APR_USE_SYSVSEM_SERIALIZE
-D APR_USE_PTHREAD_SERIALIZE
-D SINGLE_LISTEN_UNSERIALIZED_ACCEPT
-D APR_HAS_OTHER_CHILD
-D AP_HAVE_RELIABLE_PIPED_LOGS
-D HTTPD_ROOT=""
-D SUEXEC_BIN="/usr/lib/apache2/suexec2"
-D DEFAULT_SCOREBOARD="logs/apache_runtime_status"
-D DEFAULT_ERRORLOG="logs/error_log"
-D AP_TYPES_CONFIG_FILE="/etc/apache2/mime.types"
-D SERVER_CONFIG_FILE="/etc/apache2/apache2.conf"

Duncan McGreggor wrote:
>
> On Jan 2, 2007, at 2:01 PM, Richard Megginson wrote:
>
>> Duncan McGreggor wrote:
>>> Hey all,
>>>
>>> I''m having some troubles with the Admin Server (web).
First, some
>>> details:
>>>
>>> * This is my first experience with FDS
>>> * I''m running Debian and followed the install instructions
here:
>>>   http://directory.fedora.redhat.com/wiki/Howto:DebianUbuntu
>>> * I created/installed the debian package from 
>>> fedora-ds-1.0.4-1.RHEL3.i386.opt.rpm
>>> * I can run the java console application, login, create entries,
etc.
>>> * I''m a python coder, not a java one, so I have no idea
about the
>>> java stuff.
>> What version of Apache are you using? e.g. /usr/sbin/httpd.worker -V
>
> Here''s the output:
>
> # /usr/sbin/httpd -V
> Server version: Apache/2.0.54
> Server built:   Jul 28 2006 08:55:39
> Server''s Module Magic Number: 20020903:9
> Architecture:   32-bit
> Server compiled with....
> -D APACHE_MPM_DIR="server/mpm/worker"
> -D APR_HAS_SENDFILE
> -D APR_HAS_MMAP
> -D APR_HAVE_IPV6 (IPv4-mapped addresses enabled)
> -D APR_USE_SYSVSEM_SERIALIZE
> -D APR_USE_PTHREAD_SERIALIZE
> -D SINGLE_LISTEN_UNSERIALIZED_ACCEPT
> -D APR_HAS_OTHER_CHILD
> -D AP_HAVE_RELIABLE_PIPED_LOGS
> -D HTTPD_ROOT=""
> -D SUEXEC_BIN="/usr/lib/apache2/suexec2"
> -D DEFAULT_SCOREBOARD="logs/apache_runtime_status"
> -D DEFAULT_ERRORLOG="logs/error_log"
> -D AP_TYPES_CONFIG_FILE="/etc/apache2/mime.types"
> -D SERVER_CONFIG_FILE="/etc/apache2/apache2.conf"
Anything in the admin-serv/logs/access or error?  You might try using 
the debug log level - edit admin-serv/config/httpd.conf and set LogLevel 
to debug, then restart the admin server.
>
>
>
> -- 
> Fedora-directory-users mailing list
> Fedora-directory-users@redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-directory-users

On Dec 30, 2006, at 8:11 PM, Duncan McGreggor wrote:
>> 5) I saw the following rewrite rule in /opt/fedora-ds/admin-serv/ 
>> config/admserv.conf:
>>      RewriteRule ^/$ /dist/download [R,L,QSA]
>>    I commented it out, restarted the server, and now I get a 403  
>> (Forbidden) when I access http://myhost:62332/
>> 6) I set the admin server''s log level to debug, and I started
>> seeing these messages:
>> [Sun Dec 31 03:00:57 2006] [debug] mod_admserv.c(1759): [client  
>> 72.51.42.180] admserv_check_authz: uri [tasks/operation/ 
>> StatusPing] did not begin with [commands/] - not a command
>> [Sun Dec 31 03:00:57 2006] [debug] mod_admserv.c(1808): [client  
>> 72.51.42.180] admserv_check_authz: execute CGI [/opt/fedora-ds/bin/ 
>> admin/admin/bin/statusping] args [(null)]
>
> Anything in the admin-serv/logs/access or error?  You might try  
> using the debug log level - edit admin-serv/config/httpd.conf and  
> set LogLevel to debug, then restart the admin server.
The above is all that''s all that''s in the log file...

Duncan McGreggor wrote:
>
> On Dec 30, 2006, at 8:11 PM, Duncan McGreggor wrote:
>
>>> 5) I saw the following rewrite rule in 
>>> /opt/fedora-ds/admin-serv/config/admserv.conf:
>>>      RewriteRule ^/$ /dist/download [R,L,QSA]
>>>    I commented it out, restarted the server, and now I get a 403 
>>> (Forbidden) when I access http://myhost:62332/
>>> 6) I set the admin server''s log level to debug, and I
started seeing
>>> these messages:
>>> [Sun Dec 31 03:00:57 2006] [debug] mod_admserv.c(1759): [client 
>>> 72.51.42.180] admserv_check_authz: uri [tasks/operation/StatusPing]
>>> did not begin with [commands/] - not a command
>>> [Sun Dec 31 03:00:57 2006] [debug] mod_admserv.c(1808): [client 
>>> 72.51.42.180] admserv_check_authz: execute CGI 
>>> [/opt/fedora-ds/bin/admin/admin/bin/statusping] args [(null)]
>>
>
>
>> Anything in the admin-serv/logs/access or error?  You might try using 
>> the debug log level - edit admin-serv/config/httpd.conf and set 
>> LogLevel to debug, then restart the admin server.
>
> The above is all that''s all that''s in the log file...
Even using the debug log level?
>
> -- 
> Fedora-directory-users mailing list
> Fedora-directory-users@redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-directory-users

On Jan 2, 2007, at 7:46 PM, Richard Megginson wrote:
>>>> 5) I saw the following rewrite rule in
/opt/fedora-ds/admin-serv/
>>>> config/admserv.conf:
>>>>      RewriteRule ^/$ /dist/download [R,L,QSA]
>>>>    I commented it out, restarted the server, and now I get a
403
>>>> (Forbidden) when I access http://myhost:62332/
>>>> 6) I set the admin server''s log level to debug, and I
started
>>>> seeing these messages:
>>>> [Sun Dec 31 03:00:57 2006] [debug] mod_admserv.c(1759): [client
>>>> 72.51.42.180] admserv_check_authz: uri [tasks/operation/ 
>>>> StatusPing] did not begin with [commands/] - not a command
>>>> [Sun Dec 31 03:00:57 2006] [debug] mod_admserv.c(1808): [client
>>>> 72.51.42.180] admserv_check_authz: execute CGI [/opt/fedora-ds/
>>>> bin/admin/admin/bin/statusping] args [(null)]
>>>
>>
>>
>>> Anything in the admin-serv/logs/access or error?  You might try  
>>> using the debug log level - edit admin-serv/config/httpd.conf and  
>>> set LogLevel to debug, then restart the admin server.
>>
>> The above is all that''s all that''s in the log file...
> Even using the debug log level?
Yup, that''s with LogLevel set to "debug".

Duncan McGreggor wrote:
>
> On Jan 2, 2007, at 7:46 PM, Richard Megginson wrote:
>
>>>>> 5) I saw the following rewrite rule in 
>>>>> /opt/fedora-ds/admin-serv/config/admserv.conf:
>>>>>      RewriteRule ^/$ /dist/download [R,L,QSA]
>>>>>    I commented it out, restarted the server, and now I get
a 403
>>>>> (Forbidden) when I access http://myhost:62332/
>>>>> 6) I set the admin server''s log level to debug,
and I started
>>>>> seeing these messages:
>>>>> [Sun Dec 31 03:00:57 2006] [debug] mod_admserv.c(1759):
[client
>>>>> 72.51.42.180] admserv_check_authz: uri 
>>>>> [tasks/operation/StatusPing] did not begin with [commands/]
- not
>>>>> a command
>>>>> [Sun Dec 31 03:00:57 2006] [debug] mod_admserv.c(1808):
[client
>>>>> 72.51.42.180] admserv_check_authz: execute CGI 
>>>>> [/opt/fedora-ds/bin/admin/admin/bin/statusping] args
[(null)]
>>>>
>>>
>>>
>>>> Anything in the admin-serv/logs/access or error?  You might try
>>>> using the debug log level - edit admin-serv/config/httpd.conf
and
>>>> set LogLevel to debug, then restart the admin server.
>>>
>>> The above is all that''s all that''s in the log
file...
>> Even using the debug log level?
>
> Yup, that''s with LogLevel set to "debug".
Looks like mod_cgi is not working properly or is misconfigured.  It 
should be executing the help CGI and other CGI programs, not attempting 
to download them.  Does the Apache on Debian include mod_cgi?  Does 
Debian have anything like SELinux which would prevent CGI
execution?
>
> -- 
> Fedora-directory-users mailing list
> Fedora-directory-users@redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-directory-users

On Jan 2, 2007, at 7:59 PM, Richard Megginson wrote:
>>>>>> 5) I saw the following rewrite rule in
/opt/fedora-ds/admin-
>>>>>> serv/config/admserv.conf:
>>>>>>      RewriteRule ^/$ /dist/download [R,L,QSA]
>>>>>>    I commented it out, restarted the server, and now I
get a
>>>>>> 403 (Forbidden) when I access http://myhost:62332/
>>>>>> 6) I set the admin server''s log level to
debug, and I started
>>>>>> seeing these messages:
>>>>>> [Sun Dec 31 03:00:57 2006] [debug] mod_admserv.c(1759):
>>>>>> [client 72.51.42.180] admserv_check_authz: uri [tasks/ 
>>>>>> operation/StatusPing] did not begin with [commands/] -
not a
>>>>>> command
>>>>>> [Sun Dec 31 03:00:57 2006] [debug] mod_admserv.c(1808):
>>>>>> [client 72.51.42.180] admserv_check_authz: execute CGI
[/opt/
>>>>>> fedora-ds/bin/admin/admin/bin/statusping] args [(null)]
>>>>>
>>>>
>>>>
>>>>> Anything in the admin-serv/logs/access or error?  You might
try
>>>>> using the debug log level - edit
admin-serv/config/httpd.conf
>>>>> and set LogLevel to debug, then restart the admin server.
>>>>
>>>> The above is all that''s all that''s in the log
file...
>>> Even using the debug log level?
>>
>> Yup, that''s with LogLevel set to "debug".
> Looks like mod_cgi is not working properly or is misconfigured.  It  
> should be executing the help CGI and other CGI programs, not  
> attempting to download them.  Does the Apache on Debian include  
> mod_cgi?  Does Debian have anything like SELinux which would  
> prevent CGI execution?
Hmm. I created a test cgi on the server in the system Apache, and it  
executed properly.

Ah, but then I checked the module loads in the FDS admin-serv/config/ 
admserv.conf, and the cgi module was commented out -- thanks!

I can now access the web admin server from the local machine. Can''t  
get to it remotely, even though I followed the instructions described  
here:
   http://directory.fedora.redhat.com/wiki/Howto:AdminServerLDAPMgmt
But I can now see it working, and that''s more than I had before.
I''m
sure I''m just a few tweaks shy of getting remote access working.

Thanks for your help and patience!

d