topic Re: How to disable apache dependence on ace server in Operating System - HP-UX

How to disable apache dependence on ace server

Dermot Beirne — Thu, 07 Jun 2007 09:51:32 GMT

Hi
I have two hpux boxes, one is 11 the other 10.20.
The 11 box is running apache, and the 10.20 box is running an ACE securid server.
The 10.20 box is being permanently removed, however, the apache server will not start on the 11.0 box unless the ACE server is running, and I cannot find out how/where this dependency is configured so i can disable it.
We are using apache 1.3.12. If I stop the ACE server running on the 10.20 box, and do a "apachectl startssl" on the 11 box, i get the following error in the /opt/apache/adm/error_log
"[error] SecurID: could not initialize client-server communications (using VAR_ACE=/var/ace/sdconf.rec)"
and the httpd server will fail to start.
I cannot find a reference to the sdconf.rec file in my httpd.conf file, or understand where this link is made.
Can anyone help me with this? I need to keep apache running, but no longer need the ACE authentication.

Thanks,
Dermot.

Re: How to disable apache dependence on ace server

Tony Berry — Thu, 07 Jun 2007 12:05:20 GMT

Did you carefully check the LoadModule section of your httpd.conf? Are you positive the httpd.conf file is the same one that the running Apache is using? The swinstall installation sticks most of the files in /opt/apache, but most people create links to maintain some cross-compatibility with the standard Apache install method. Did you specify a separate https.conf file elsewhere? Did you check the various authentication methods being used by the system (/etc/pam.conf)?

Re: How to disable apache dependence on ace server

Steven E. Protter — Thu, 07 Jun 2007 12:39:00 GMT

Shalom,

apache will need to be reconfigured to stop using the ACE server.

Take a look at httpd.conf and you will probably see some references that you won't find the apache website.

The httpd.conf file is human readable.

SEP

Re: How to disable apache dependence on ace server

Dermot Beirne — Fri, 08 Jun 2007 02:24:27 GMT

Tony:
There are several httpd.conf files on the machine, and the one i think apache is using has no LoadModule section in use. I have googled for ages, and cannot find out how to determine the httpd.conf file that apache is using, other than the fact it is specified at compile time. Seems strange that once it's compiled, there is no way of finding out afterwards.
Can you tell me how to find out for sure which httpd.conf file is the live one.

Steven,
I have looked through all the httpd.conf files on the machine, and none of them specify the loading of the mod_securid module which from research i believe is the module in question.
I can post the httpd.conf file once I can determine for sure which one is being used.

Dermot.

Re: How to disable apache dependence on ace server

Steven Schweda — Fri, 08 Jun 2007 02:41:51 GMT

You can rename all the httpd.conf files which
you think are not being used, which will make
sure that they're not used. Just be sure
you've found them all, and remember to what
you change the name(s).

Re: How to disable apache dependence on ace server

Dermot Beirne — Fri, 08 Jun 2007 04:15:52 GMT

Steven,
Excellent point! I tried renaming the first one that i suspected was the live one, and the apache server failed to start! So now i know the correct one.
The next stage is to identify what is tying it to the ace server.
I have extracted part of my httpd.conf file here in the hope that someone can spot a dependency setting.

This section is the SSL portion, which is the only part that seems to have anything to do with security. I am now going to start researching ssl config in apache, as i don't understand it myself at the moment.

Dermot.