Received: (qmail 17243 invoked from network); 9 Jun 1999 19:19:34 -0000
Message-Id: <375EBD41.394B854@simplenet.com>
Date: Wed, 09 Jun 1999 12:15:13 -0700
From: Tim Traver <traver@simplenet.com>
Sender: root@simplenet.com
Reply-To: traver@simplenet.com
To: apbugs@hyperreal.org
Subject: Apache RLimitNPROC in virtual hosts does not seem to work

>Number:         4551
>Category:       general
>Synopsis:       Apache RLimitNPROC in virtual hosts does not seem to work
>Confidential:   yes
>Severity:       non-critical
>Priority:       medium
>Responsible:    apache
>State:          open
>Class:          sw-bug
>Submitter-Id:   unknown
>Arrival-Date:   Wed Jun  9 12:20:01 PDT 1999
>Last-Modified:  Sun Jun 13 04:38:18 PDT 1999
>Originator:     
>Organization:
>Release:        
>Environment:
>Description:
>How-To-Repeat:
>Fix:
>Audit-Trail:
Severity-Changed-From-To: serious-non-critical
Severity-Changed-By: lars
Severity-Changed-When: Sun Jun 13 04:38:17 PDT 1999
Responsible-Changed-From-To: gnats-admin-apache
Responsible-Changed-By: lars
Responsible-Changed-When: Sun Jun 13 04:38:17 PDT 1999
Responsible-Changed-Why:


Category-Changed-From-To: pending-general
Category-Changed-By: lars
Category-Changed-When: Sun Jun 13 04:38:17 PDT 1999

>Unformatted:
Hello,

First, I want to apologize if this is not the correct place to ask these
questions, but it appears that this particular function is not working
as the documentation says it should. No one would answer my postings on
the comp.infosystems.www.servers.unix

Please let me know if there is a better place to get help with these
kind of problems and I will certainly abide by whatever rules you have.

Here is my current issue :

I have an apache server with quite a few name based virtual host
entries. The virtual hosts are able to execute cgi scripts, and I wish
to use the RLimitNPROC to limit the number they can have running at a
single time.

The script runs setuid root (I know about the security implications, but
it is a wrapper, and needs to run as root). It starts and then changes
itself to the appropriate userID and continues to completion.

 The server is not running as root, or the userID.

 The virtual host configuration I have looks like this :

 <VirtualHost 209.132.1.202>
     ServerName domain.com
     DocumentRoot /Interfaces/path/Server/Documents
     <Directory /Interfaces/path/Server/Documents>
         AllowOverride All
     </Directory>
     RLimitNPROC 4 8
 </VirtualHost>

 The normal web server works as it should, but it just doesn't appear
that the rlimit is preventing too many scripts from that user to run.

 Do I need to compile anything special into apache ?

 I am running 1.3.6 on Solaris 2.6 with all current patches, and any
help would be appreciated.

 Tim.