As both Mark Bixby and Gavin Scott pointed out, neither Apache nor Samba
should be effected by changes in NSCONTROL services since they rely on just
basic TCP/IP. Which makes sense. And, sure enough, when I try it again today
all seems fine with both Apache and Samba. So, maybe I had a bad burrito day
two months ago? Hmmm.

-----Original Message-----
From: HP-3000 Systems Discussion [mailto:[log in to unmask]]On
Behalf Of John Burke
Sent: Monday, May 17, 1999 1:19 PM
To: [log in to unmask]
Subject: Re: What NS services to Apache/iX and Samba/iX use?


It just stopped talking to me - wouldn't serve up any pages. But I see your
point. It has been several months since I last tried this. I'll try it with
Apache/iX again.

-----Original Message-----
From: Mark Bixby [mailto:[log in to unmask]]
Sent: Monday, May 17, 1999 1:15 PM
To: [log in to unmask]
Cc: [log in to unmask]
Subject: Re: What NS services to Apache/iX and Samba/iX use?


John Burke writes:
> NSCONTROL STOP=HCS,PTOPL,PTOP,RFAL,RFA,NFTL,RPML,VTRL,VTR,VTL is
sufficient
> to achieve the level of isolation I desire, but also disables both Apache
> and Samba. So a more narrowly defined version of my question is: which of
> these services is required by each of Apache/iX and Samba/iX?

Disables Apache/iX how, exactly?  What error messages (if any) do you see in
the
Apache access log and error log?

Since Apache comes from the POSIX/Unix world, it shouldn't even be aware of
any
of those services that you've stopped.

The only outbound service that Apache might want to use is DNS to do inverse
lookups on the client's IP address, and that's just basic TCP/IP, not a
special NS service.
--
Mark Bixby                      E-mail: [log in to unmask]
Coast Community College Dist.   Web: http://www.cccd.edu/~markb/
District Information Services   1370 Adams Ave, Costa Mesa, CA, USA
92626-5429
Technical Support               Voice: +1 714 438-4647
"You can tune a file system, but you can't tune a fish." - tunefs(1M)