<br><br><div class="gmail_quote">On Mon, May 14, 2012 at 11:27 AM, Cantor, Scott <span dir="ltr"><<a href="mailto:cantor.2@osu.edu" target="_blank">cantor.2@osu.edu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div class="im">On 5/14/12 11:24 AM, "Bai Shen" <<a href="mailto:baishen.lists@gmail.com">baishen.lists@gmail.com</a>> wrote:<br>
><br>
>I know how to set permissions. I'm just not sure what they should be set<br>
>to. All of my log files are owned by root:root. These were automaticlly<br>
>created when I started the shibd and httpd services.<br>
<br>
</div>The log directory is owned by root, the module runs as non-root, ergo, you<br>
get no log file.<br>
<br></blockquote><div><br>If the module runs under httpd, which runs as root, why does it run as non-root?<br> <br></div><blockquote class="gmail_quote" style="margin:0pt 0pt 0pt 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
I finally have a workaround for that, but in the meantime, that's the<br>
situation, as it has been for years and is documented in the wiki.<br>
<div class="im"><br></div></blockquote><div><br>-nods- I'm not trying to cause problems. Just still learning how it all works.<br> <br></div><blockquote class="gmail_quote" style="margin:0pt 0pt 0pt 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div class="im">
>However, I don't have a native.log file. According to<br>
><a href="https://helpdesk.wisc.edu/ams/page.php?id=20454" target="_blank">https://helpdesk.wisc.edu/ams/page.php?id=20454</a><br>
><<a href="https://helpdesk.wisc.edu/ams/page.php?id=20454" target="_blank">https://helpdesk.wisc.edu/ams/page.php?id=20454</a>> I should create a<br>
>native.log file and set it's ownership to apache:apache.<br>
<br>
</div>That doesn't fix anything when the directory itself is owned and locked by<br>
root. My advice is to ignore the issue unless you need the file.<br>
<div class="im"><br></div></blockquote><div><br>I was only trying to get the file because the ACL errors were supposed to be in it.<br> <br></div><blockquote class="gmail_quote" style="margin:0pt 0pt 0pt 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div class="im">
>As for the ACL, it's not letting me connect even though I've set it to my<br>
>ip range of<br>
</div>><a href="http://192.168.1.0/24" target="_blank">192.168.1.0/24</a> <<a href="http://192.168.1.0/24" target="_blank">http://192.168.1.0/24</a>>.<br>
<br>
There is no support for ranges until 2.5, which is clearly stated in the<br>
documentation.<br>
<div class="HOEnZb"><div class="h5"><br></div></div></blockquote><div><br>I didn't realize that 2.5 wasn't out yet.<br><br>Since ranges are not supported, how do I change the ACL to allow all? The documentation says that it's supposed to default to that, but when I installed Shibboleth, it was set to 127.0.0.1.<br>
<br></div></div>Thanks.<br>