[Pkg-awstats-devel] Suggestion for moving awstats to apache2 as default config.

[Andreas Henriksson]

tags 229285 + pending
tags 257832 + pending
thanks

On tor, 2008-05-22 at 08:38 +0200, Jonas Smedegaard wrote:
[...]
> I am fine with changing the default, as long as it is kept overrideable.  
> That is, setups favouring eg. lighttpd should work too.

Thanks for acknowledging. Nothing really changes except we default to
apache2 instead of apache. Lighttpd and other should work the same as
before.


[...]
> Apache 1.3 used to use different access rights for logfiles than apache 
> 2.x.  Some instructions and/or setup might need an update now (but it is 
> quite some time ago I looked into it, so I may be wrong).

$ ls -l /var/log/apache2/{access,error}.log
-rw-r----- 1 root adm 56574 24 maj 10.47 /var/log/apache2/access.log
-rw-r----- 1 root adm 48722 23 maj 20.41 /var/log/apache2/error.log

Awstats cronjob runs as www-data -> no read permission. :(



> 
> Apart from that your changes look sane to me.
> 
> Please go ahead (and we'll fix it together if things should break).

I've commited the patch anyway, since pointing at non-existant logfiles
isn't any better then pointing at those you don't have permission to
read.

We'll have to figure out how to solve the permissions problem. Running
the cronjob as root would be quick and dirty, but I really want to avoid
that. Using debconf to ask the user and configure logfiles to be
world-readable could be an option, but I'd want to avoid that too as
it's kind of like asking "would you want awstats to actually work?"
which is kind of a dumb question. Adding an awstats user which is member
of group adm seems best, but I'll have to read up on exactly what being
an adm member gives you access to and I guess this would break the
(default disabled?) config option of being able to trigger an "update
now" from the web. I guess we should ask the apache2 team what they
think is the best way. 

OTOH, it might be better to just ship now. We're not worse off then
before, and it would be nice to have that RC bug closed.


-- 
Regards,
Andreas Henriksson