Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:22007
Return-Path: <ckevinj@gmail.com>
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Delivered-To: mailing list internals@lists.php.net
Received: (qmail 65937 invoked by uid 1010); 24 Feb 2006 17:25:55 -0000
Delivered-To: ezmlm-scan-internals@lists.php.net
Delivered-To: ezmlm-internals@lists.php.net
Received: (qmail 65922 invoked from network); 24 Feb 2006 17:25:55 -0000
Received: from unknown (HELO lists.php.net) (127.0.0.1)
  by localhost with SMTP; 24 Feb 2006 17:25:55 -0000
X-Host-Fingerprint: 64.233.166.179 pproxy.gmail.com Linux 2.4/2.6
Received: from ([64.233.166.179:59512] helo=pproxy.gmail.com)
	by pb1.pair.com (ecelerity 2.0 beta r(6323M)) with SMTP
	id 2F/6D-30574-3A14FF34 for <internals@lists.php.net>; Fri, 24 Feb 2006 12:25:55 -0500
Received: by pproxy.gmail.com with SMTP id z59so429230pyg
	for <internals@lists.php.net>; Fri, 24 Feb 2006 09:25:51 -0800 (PST)
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
	s=beta; d=gmail.com;
	h=received:message-id:date:from:to:subject:mime-version:content-type;
	b=gIqz04L7ReeEwwKLvCs2q0Cr0ASB6DOaXIMHyJytZAGT8A46bP5OnqmzUw8c293PkJpKIg2IfJdBaQ9U61spR9wmMqtgKejJDoP5lt4x7DSW93eYMyENtnl2o/OJA95lW/bOfitYk44C5MPlqsrIR6Uh13ZYv0UkELiRmgh+Wz4=
Received: by 10.35.78.13 with SMTP id f13mr457603pyl;
	Fri, 24 Feb 2006 09:25:51 -0800 (PST)
Received: by 10.35.134.4 with HTTP; Fri, 24 Feb 2006 09:25:51 -0800 (PST)
Message-ID: <8b6fdd1d0602240925l47c3a4c0wb6cc7140746ad467@mail.gmail.com>
Date: Fri, 24 Feb 2006 11:25:51 -0600
To: internals@lists.php.net
MIME-Version: 1.0
Content-Type: multipart/alternative; 
	boundary="----=_Part_30301_28011541.1140801951631"
Subject: php5 posix gid, solaris 10, apache2, ldapclient
From: ckevinj@gmail.com (kjc)

------=_Part_30301_28011541.1140801951631
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline

I posted this yesterday to the install group, but I think maybe it should b=
e
internals group.
I am wondering if there is a problem with the getgid, getegid or set
versions. How can I test this to find the problem?

----
I've got a funny issue, and it has been narrowed down to something with PHP=
5
on my Solaris10 boxes.

the S10 boxes are running as LDAP clients (using LDAP instead of NIS) in th=
e
proxy configuration, pam_unix.
With the PHP5 module loaded the Apache daemon user does not know of his
secondary groups from the LDAP, only his primary group (as defined in the
httpd.conf, not necessarily as handed by the LDAP) plus any local groups in
/etc/group if there are any. Which I don't want there to be, because that's
the purpose of using the LDAP.

I took the Apache supplied printenv perl script in cgi-bin and added this
info to demonstrate the problem:
print "Data about the running process:<BR>
  <pre>
  Real user id       : $<
  Effective user id  : $>
  Real group id      : $(
  Effective group id : $)
  </pre><br>\n";

The output with PHP5 module loaded, where 99 is a local group and 42 is the
default group (and in ldap):

  Real user id       : 10
  Effective user id  : 10
  Real group id      : 42 99 42
  Effective group id : 42 99 42

The output without PHP5 loaded:

  Real user id       : 10
  Effective user id  : 10
  Real group id      : 42 7000 775 124 60010 602 60009 125 216 60008 42
  Effective group id : 42 7000 775 124 60010 602 60009 125 216 60008 42

I've tried recompiling PHP with and without LDAP libraries, --enable-yp...
I played with the safe_mod and safe_mode_gid settings, setting them 0,1,
1,1, 0,0 and had no change.

I am running both Apache and PHP with full 64bit binaries. That was no smal=
l
feat.

Any ideas or help?

--
-Kevin

------=_Part_30301_28011541.1140801951631--