Bug 44046

Summary: Monitor does not present UAC authentication dialog for start/stop/restart service
Product: Apache httpd-2 Reporter: Stevo Slavic <sslavic>
Component: Win32 MSI InstallerAssignee: Apache HTTPD Bugs Mailing List <bugs>
Status: RESOLVED FIXED    
Severity: enhancement    
Priority: P2    
Version: 2.2.6   
Target Milestone: ---   
Hardware: PC   
OS: Windows Vista   

Description Stevo Slavic 2007-12-10 07:29:33 UTC
Under Vista 64bit (Business) edition I started installation of
apache_2.2.6-win32-x86-openssl-0.9.8e.msi by running it as Administrator,
everything goes well, Apache service is started, Monitor is started but no menu
item is created in start menu for Monitor. While not restarted yet, Monitor is
usable, stopping and starting service works. After Vista 64 is manually
restarted Apache service is started with the system but not the Monitor, and
when Monitor is started manually one can not Stop service using it - clicking on
it results in simply nothing. Some solutions I've found on web recommended
running Monitor in Windows XP SP2 compatibility mode, but it didn't work for my
Vista 64-bit.
Comment 1 William A. Rowe Jr. 2007-12-23 10:24:47 UTC
This is twofold;

there was an installation error that failed to create the icon, this is now
resolved for the future 2.2.7 package.

you must have stop/start/restart rights as a user to control apache services,
which I'm suspecting your account does not have.

So half fixed/half not an issue.
Comment 2 Stevo Slavic 2007-12-23 14:03:55 UTC
If I understood well, issue of Apache Monitor shortcut not being available in
Start menu under Vista is fixed and will be available in 2.2.7 - thank you for
resolving this.

When Apache installer is run under Vista it would be nice to have Apache Monitor
added to Start Up folder by the Apache installer. It would be even nicer to have
this as option in installer so user can choose whether one does or doesn't want
Apache installer to configure Apache Monitor to be started up together with
Vista. Currently, one has to add Apache Monitor manually to Start Up folder,
which isn't that bad but isn't nice either. I think it is an issue that should
be fixed in installer.

Comparing Vista to previous Windows operating systems, as I see it,
"Administrator" user has gained status similar to one that "root" user has under
Linux distributions - if this was in Windows before now it is more tangible.
Under Vista non "Administrator" user can have administrator rights but, with
User Access Control (UAC) enabled, for actions like (un)installing application
or stop/start/restart service "Administrator" has to give permission to that
action - in such situation under Linux user is asked to enter "root" user
password, while in Vista user just has to click on Continue button on UAC screen.

Currently to have Apache Monitor functional under Vista, one has to start Apache
Monitor as "Administrator". Unless Apache Monitor is started as "Administrator"
one can not stop/start/restart Apache service under Vista. It can be set
manually that Apache Monitor has to be started as "Administrator" but it is not
good solution - if one also adds Apache Monitor to Start Up folder, each time
Vista is run one will be presented with UAC screen even though Apache Monitor is
not used to stop/start/restart Apache service. This issue should be resolved by
making Apache Monitor compatible with new security features in Vista. To
accomplish this maybe "Windows Vista Application Development Requirements for
User Access Control Compatibility" document provided by Microsoft and currently
available at
http://download.microsoft.com/download/5/6/a/56a0ed11-e073-42f9-932b-38acd478f46d/WindowsVistaUACDevReqs.doc
might be useful - many blogs and similar web sites cover this topic too, just
search for e.g. Vista manifest file.

In my opinion Apache Monitor GUI shouldn't require "Administrator" permission to
be started (like it doesn't do now), but clicking on "Start", "Stop", "Restart",
and "Services" buttons within Apache Monitor GUI, which to be functional require
"Administrator" permission, should signal this to Vista so it can activate UAC
screen (and not just silently ignore privileges requirement like it does now).
Comment 3 William A. Rowe Jr. 2007-12-30 22:18:39 UTC
"When Apache installer is run under Vista it would be nice to have Apache Monitor
added to Start Up folder by the Apache installer."

Corrected for 2.2.7, yes.

"It would be even nicer to have this as option in installer so user can choose
whether one does or doesn't want Apache installer to configure Apache Monitor to
be started up together with Vista."

Corrected - in that the ApacheMonitor app is now entirely optional, "custom"
install allows the user to refuse it, and therefore neither a Startup group nor
Apache HTTP Server group shortcut are added.

"This issue should be resolved by making Apache Monitor compatible with new
security features in Vista. To accomplish this maybe "Windows Vista Application
Development Requirements for User Access Control Compatibility" document ..."

Patches to present the UAC dialog are welcomed.  Retitling this as such.
Comment 4 William A. Rowe Jr. 2008-06-05 14:09:31 UTC
In the next release, it does.