ports/131856: Virtualmin adds new users to www group - overwhelms apache

[Sean M. Collins]

>Number:         131856
>Category:       ports
>Synopsis:       Virtualmin adds new users to www group - overwhelms apache
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    freebsd-ports-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Wed Feb 18 21:40:01 UTC 2009
>Closed-Date:
>Last-Modified:
>Originator:     Sean M. Collins
>Release:        CURRENT
>Organization:
>Environment:
FreeBSD vulture.coreitpro.com 8.0-CURRENT FreeBSD 8.0-CURRENT #1: Mon Jan  5 03:46:10 EST 2009     scollins at scollins.homeip.net:/usr/obj/usr/src/sys/GENERIC  i386

>Description:
When creating new virtual servers in Virtualmin, new users are added to the www group. When too many are added, Apache will have trouble starting up - complaining about not being able to set the group and user IDs.

Tue Feb 17 07:50:53 2009] [alert] (22)Invalid argument: initgroups: unable to set groups for User www and Group 80
[Tue Feb 17 07:50:53 2009] [alert] (22)Invalid argument: initgroups: unable to set groups for User www and Group 80
[Tue Feb 17 07:50:53 2009] [alert] (22)Invalid argument: initgroups: unable to set groups for User www and Group 80
[Tue Feb 17 07:50:54 2009] [alert] Child 10883 returned a Fatal error... Apache is exiting!

>How-To-Repeat:
Install Virtualmin, create new domains with user accounts. The problem appears after you create 10 or so
>Fix:
Change the following defaults for virtualmin:

DO NOT add the new users to the www group
Create public_html directories with ownership mode 755

Remove previous accounts that were created from the www group in the /etc/group file.

I can create a diff of the settings file for virtualmin if required.

>Release-Note:
>Audit-Trail:
>Unformatted: