Sentora 1.0.0 patch (Centos 6.x Only)

[Me.B]

Affected OS: installer prior to 1.0.2/ Centos 6.x Only
Don't apply to Installer >1.0.2 and Ubuntu 12/7, Centos7

We noticed that CGI module was still loaded by default in centos 6.x installs for sentora and was not disabled in a clean way.

You can easily install patch by downloading patching script:

Code:

https://raw.githubusercontent.com/sentora/sentora-installers/master/centos6_cgi_patch.sh

One line command.

Code:

wget https://raw.githubusercontent.com/sentora/sentora-installers/master/centos6_cgi_patch.sh && bash centos6_cgi_patch.sh

Notice the current installer HAVE been already patched. Only previous installs require this patch.

The patch also disable webdav & some unused modules, feel free either to enable them back or not.


The key is commenting "LoadModule cgi_module modules"

Thanks for 911labs (Patrick, Steven) for bringing up CGI could cause issues.

[Active8]

Typo: P

wget https://raw.githubusercontent.com/sentor...i_patch.sh && bash centos6_cgi_patch.sh

[Me.B]

Typo: P

wget https://raw.githubusercontent.com/sentor...i_patch.sh && bash centos6_cgi_patch.sh

Thanks fixed ;-)

[Ron-e]

Notice the current installer HAVE been already patched. Only previous installs require this patch..

I reinstalled Sentora on CentOS6 30 minuts ago and the LoadModules which the patch disabled were not commented out..
So i still had to apply the patch.


Edit:

This morning i got an email that my server was down with the reason "Port open but incorrect HTTP session", so i looked at the error log from httpd and found this:

Code:

[Sun Mar 29 07:24:09 2015] [error] Module mod_ldap missing. Mod_ldap (aka. util_ldap) must be loaded in order for mod_auth_ldap to function properly Configuration Failed 

But this module was disabled by the installer and this patch..
When i enabled this module and restarted httpd it worked again.

[Me.B]

Ok will remove it commented

[Active8]

After applying this , httpd is stoppped, people dont use this patch or your sentora install will be broken
(tested with a fresh install of sentora)

Or go to /etc/httpd/conf/httpd.conf and uncomment LoadModule ldap_module modules

[Me.B]

Yep already should be patched waiting for the pull to be accepted TGates

[TGates]

Done.

[Me.B]

Thanks that would fix it.

[akong]

Hello,
I have install lasted sentora version.Could I need install this path?Or this is option path?