Re: [Mailman-Users] Internal Server Error

2009-11-10 Thread Mark Sapiro
Carl Parsons wrote:

I rebuilt suexec so docroot is

-bash-3.2# suexec -V
 -D AP_DOC_ROOT=/home
 -D AP_GID_MIN=100
 -D AP_HTTPD_USER=apache
 -D AP_LOG_EXEC=/var/log/httpd/suexec.log
 -D AP_SAFE_PATH=/usr/local/bin:/usr/bin:/bin
 -D AP_UID_MIN=500
 -D AP_USERDIR_SUFFIX=public_html

created a directory /home/mailman to put the cgi-bin files copying from 
/usr/lib/mailman/cgi-bin to
/home/mailman/cgi-bin


You didn't have to do that.

See my reply at
http://mail.python.org/pipermail/mailman-users/2009-October/067490.html.
The important part of that reply is


First a big caveat. Mailman's security model is not compatible with
suexec. You can make it work if you only host a single domain, but
beyond that, it's a pain or impossible. Maybe your recompilation will
help. I don't know.

[...]
suexec.log
[2009-10-21 10:32:43]: uid: (505/mysite.com) gid: (505/mysite) cmd: listinfo
[2009-10-21 10:32:43]: target uid/gid (505/505) mismatch with directory 
(0/41) or program (0/41)

When http is at mysite.com it executes as user mysite.


Apache is trying to run the wrapper as suExec uid and gid
uid: (505/mysite.com) gid: (505/mysite)

Your wrappers and the directory containing them are owned by root and
group 41 whatever that is. This is a violation of items 14 and 16 at
http://httpd.apache.org/docs/2.2/suexec.html.

Note that the wrapper also can't be SETGID (to any group), so
everything will run as user/group 505/505 which in turn means that all
mailman code must be readable by that user/group and all existing an
future mutable data must be writable by that user/group.

For practical purposes this means that Mailman must be
configured/installed with GID 505.

-- 
Mark Sapiro m...@msapiro.netThe highway is for gamblers,
San Francisco Bay Area, Californiabetter use your sense - B. Dylan

--
Mailman-Users mailing list Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org


Re: [Mailman-Users] Internal Server Error

2009-11-09 Thread Carl Parsons

hi

I rebuilt suexec so docroot is

-bash-3.2# suexec -V
-D AP_DOC_ROOT=/home
-D AP_GID_MIN=100
-D AP_HTTPD_USER=apache
-D AP_LOG_EXEC=/var/log/httpd/suexec.log
-D AP_SAFE_PATH=/usr/local/bin:/usr/bin:/bin
-D AP_UID_MIN=500
-D AP_USERDIR_SUFFIX=public_html

created a directory /home/mailman to put the cgi-bin files copying from 
/usr/lib/mailman/cgi-bin to

/home/mailman/cgi-bin

#
#  httpd configuration settings for use with mailman.
#

#ScriptAlias /mailman/ /usr/lib/mailman/cgi-bin/
ScriptAlias /mailman/ /home/mailman/cgi-bin/
Directory /home/mailman/cgi-bin/
   AllowOverride None
   Options ExecCGI
   Order allow,deny
   Allow from all
/Directory


Alias /pipermail/ /var/lib/mailman/archives/public/
Directory /var/lib/mailman/archives/public
   Options Indexes MultiViews FollowSymLinks
   AllowOverride None
   Order allow,deny
   Allow from all
/Directory

# Uncomment the following line, replacing www.example.com with your server's
# name, to redirect queries to /mailman to the listinfo page (recommended).

RedirectMatch ^/mailman[/]*$ http://www.mysite.com/mailman/listinfo

error log
[Wed Oct 21 10:39:42 2009] [error] [client 81.178.1.21] suexec policy 
violation: see suexec log for more details
[Wed Oct 21 10:39:42 2009] [error] [client 81.178.1.21] Premature end of 
script headers: listinfo



suexec.log
[2009-10-21 10:32:43]: uid: (505/mysite.com) gid: (505/mysite) cmd: listinfo
[2009-10-21 10:32:43]: target uid/gid (505/505) mismatch with directory 
(0/41) or program (0/41)


When http is at mysite.com it executes as user mysite.

Just realised I was looking at the wrong apache error file errors are in 
per site file mysite_error.log


I have tried to put the suexec back to Fedora 10 version but it still fails

Carl


PS error


 Internal Server Error

The server encountered an internal error or misconfiguration and was 
unable to complete your request.


Please contact the server administrator, r...@localhost and inform them 
of the time the error occurred, and anything you might have done that 
may have caused the error.


More information about this error may be available in the server error log.



Adam McGreggor wrote:

On Sun, Oct 11, 2009 at 11:09:30AM +0100, Carl Parsons wrote:
  

Hi

We have been trying to get mailman working on a fedora 10 installation
I can get it working on a internal server but my external server gives 
the following error.
I use webmin which places virtual servers in /home so I had to recompile 
suexec to work in a different root



I'd not be using webmin, for a start.

  
I suspect this is the problem but do not understand suexec configuration 
enough to fix the error


Internal Server Error

The server encountered an internal error or misconfiguration and was 
unable to complete your request.


Please contact the server administrator, r...@localhost and inform them 
of the time the error occurred, and anything you might have done that 
may have caused the error.


More information about this error may be available in the server error log.



So, what's in the Apache Error Log?

  



--
Carl Parsons

Director
PinGNU Systems Ltd
A company registered in England and Wales
Registered office: 6 Flackdale Road, Hilton, Cambs, PE28 9NY
Registered company number: 4176338
Landline: 01480 831607
Mobile  07709 935666
Email: carl.pars...@pingnu.com
___

http://www.pingnu.co.uk/ Home Office IT Support

--
Mailman-Users mailing list Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org


Re: [Mailman-Users] Internal Server Error

2009-10-21 Thread Adam McGreggor
On Sun, Oct 11, 2009 at 11:09:30AM +0100, Carl Parsons wrote:
 Hi
 
 We have been trying to get mailman working on a fedora 10 installation
 I can get it working on a internal server but my external server gives 
 the following error.
 I use webmin which places virtual servers in /home so I had to recompile 
 suexec to work in a different root

I'd not be using webmin, for a start.

 I suspect this is the problem but do not understand suexec configuration 
 enough to fix the error
 
 Internal Server Error
 
 The server encountered an internal error or misconfiguration and was 
 unable to complete your request.
 
 Please contact the server administrator, r...@localhost and inform them 
 of the time the error occurred, and anything you might have done that 
 may have caused the error.
 
 More information about this error may be available in the server error log.

So, what's in the Apache Error Log?

-- 
``Every problem in the world can be fixed with either flowers,
  or duct tape, or both.'' (David Millington)
--
Mailman-Users mailing list Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org


Re: [Mailman-Users] Internal Server Error

2009-10-21 Thread Mark Sapiro
Carl Parsons wrote:

We have been trying to get mailman working on a fedora 10 installation
I can get it working on a internal server but my external server gives 
the following error.
I use webmin which places virtual servers in /home so I had to recompile 
suexec to work in a different root
I suspect this is the problem but do not understand suexec configuration 
enough to fix the error


First a big caveat. Mailman's security model is not compatible with
suexec. You can make it work if you only host a single domain, but
beyond that, it's a pain or impossible. Maybe your recompilation will
help. I don't know.

Internal Server Error

The server encountered an internal error or misconfiguration and was 
unable to complete your request.

Please contact the server administrator, r...@localhost and inform them 
of the time the error occurred, and anything you might have done that 
may have caused the error.

More information about this error may be available in the server error log.


Suexec errors are not logged in apache's error_log. They are logged in
a special suexec_log (or whatever name was configured in suexec).

Find the error.

Read the documentation at
http://httpd.apache.org/docs/2.2/suexec.html (or whatever is
appropriate for your version) and good luck!

-- 
Mark Sapiro m...@msapiro.netThe highway is for gamblers,
San Francisco Bay Area, Californiabetter use your sense - B. Dylan

--
Mailman-Users mailing list Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org


Re: [Mailman-Users] Internal Server Error after installation

2004-07-27 Thread Brad Knowles
At 9:27 PM +0200 2004-07-27, Simon Weil wrote:
 Can anybody help me and tell me what I have to do?
	See 
http://www.python.org/cgi-bin/faqw-mm.py?req=showfile=faq01.022.htp, 
http://www.python.org/cgi-bin/faqw-mm.py?req=showfile=faq01.004.htp, 
and 
http://www.python.org/cgi-bin/faqw-mm.py?req=showfile=faq01.020.htp.

--
Brad Knowles, [EMAIL PROTECTED]
Those who would give up essential Liberty, to purchase a little
temporary Safety, deserve neither Liberty nor Safety.
-- Benjamin Franklin (1706-1790), reply of the Pennsylvania
Assembly to the Governor, November 11, 1755
  SAGE member since 1995.  See http://www.sage.org/ for more info.
--
Mailman-Users mailing list
[EMAIL PROTECTED]
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/


Re: [Mailman-Users] Internal Server Error for Administrative Page

2004-03-14 Thread Jon Carnes
On Thu, 2004-03-11 at 10:01, Andy Malato wrote:
 Hi,
 
 
 I have a working mailman installation and everything has pretty much
 worked as it should.  The other day I noticed that when trying to login
 to the administration page of one particular list I get an Internal
 Server Error.  This is not the case with my other lists, all other lists
 work without a problem.  I tried running check_db and list_members -i on
 this list, but those tests came up clean.  

Nice!

 Does anyone have any
 suggestions or ideas as to what could be causing the admin page of this
 list not to work?

Does the error have any detail in it?  Do the Mailman logs reveal any
details?  Have you run check_perms on the install?

Good luck - Jon Carnes


--
Mailman-Users mailing list
[EMAIL PROTECTED]
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/


Re: [Mailman-Users] Internal Server Error

2002-09-03 Thread marina

At 11:51 AM -0400 2/9/02 [dmy], [EMAIL PROTECTED] (Barry A. Warsaw) 
wrote about [Subject] Re: [Mailman-Users] Internal Server Error:
   marina ==   [EMAIL PROTECTED] writes:
  
  marina I was wondering whether there's any information available
  marina on possible reasons for 500 Internal Server Errors, apart
  marina from mailman's locks.
  
  Internal Server Errors come from the web server, so you should check
  its logs for clues.
  
  -Barry



Thank you, I know that. Sorry if I didn't make my question clear 
enough. What I would like to know is if there's any clues on what 
might cause 500 server errors when a list administrator tries to 
update the admindb queue.

I maintain the list, but have no access to the web server logs, and 
the sie administrator hasn't been able to find out what causes these 
random errors. I don't know, and I'm only guessing here, but I would 
think that if the log had an explanation of what happened, fixing the 
error wouldn't be a problem for the site administrator.

Am I wrong in assuming that the error in the Web server is caused by 
something mailman does, and could therefore be avoided if we knew 
(and could fix) what mailman is doing wrong?

Thanks in advance for any suggestions,

marina
Co-ListMum, Soap Naturally mailing list
http://www.soapnaturally.org/

--
Mailman-Users mailing list
[EMAIL PROTECTED]
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/



RE: [Mailman-Users] Internal Server Error

2002-09-03 Thread John Handelaar

% -Original Message-
% From: [EMAIL PROTECTED]
% [mailto:[EMAIL PROTECTED]]On Behalf Of marina
% Sent: 04 September 2002 01:29
% To: [EMAIL PROTECTED]
% Subject: Re: [Mailman-Users] Internal Server Error
% 
% 
% At 11:51 AM -0400 2/9/02 [dmy], [EMAIL PROTECTED] (Barry A. Warsaw) 
% wrote about [Subject] Re: [Mailman-Users] Internal Server Error:
%   Internal Server Errors come from the web server, so you should check
%   its logs for clues.
%   
%   -Barry
% 
% Thank you, I know that. Sorry if I didn't make my question clear 
% enough. What I would like to know is if there's any clues on what 
% might cause 500 server errors when a list administrator tries to 
% update the admindb queue.

Can't speak for your particular case (it will be in the apache
error log), but in my experience nearly all such errors are caused
by a permissions problem.

--
John Handelaar

T +44 20 8933 1494   M +44 7930 681789
F +44 870 169 7657   E [EMAIL PROTECTED]
-- 

--
Mailman-Users mailing list
[EMAIL PROTECTED]
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/



Re: [Mailman-Users] Internal Server Error

2002-09-03 Thread Barry A. Warsaw


 marina ==   [EMAIL PROTECTED] writes:

marina Thank you, I know that. Sorry if I didn't make my question
marina clear enough. What I would like to know is if there's any
marina clues on what might cause 500 server errors when a list
marina administrator tries to update the admindb queue.

marina I maintain the list, but have no access to the web server
marina logs, and the sie administrator hasn't been able to find
marina out what causes these random errors. I don't know, and I'm
marina only guessing here, but I would think that if the log had
marina an explanation of what happened, fixing the error wouldn't
marina be a problem for the site administrator.

marina Am I wrong in assuming that the error in the Web server is
marina caused by something mailman does, and could therefore be
marina avoided if we knew (and could fix) what mailman is doing
marina wrong?

It's possible, but it may not be a problem with Mailman.  Mailman only
needs to get a little ways into its driver script for it to be able to
give you better error reporting.  It's possible that it's a gid
problem, and for that, the web server logs should make that
immediately clear.  But if it only happens for the admindb pages and
not the other cgi's, I don't think that's it.

Without more detailed tracebacks or error messages, we'll just be
shooting in the dark.

-Barry

--
Mailman-Users mailing list
[EMAIL PROTECTED]
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/



Re: [Mailman-Users] Internal Server Error

2002-09-03 Thread Jon Carnes

On Tue, 2002-09-03 at 21:45, Barry A. Warsaw wrote:

 Without more detailed tracebacks or error messages, we'll just be
 shooting in the dark.
 
 -Barry
 
If I were going to shoot in the dark on this one, then I would look at
the server memory while you were doing your Admindb work. Is your
database very large?  Also, what size are the partitions on this
server?  Any of them feeling the pinch on space?

Then for a real shot in the dark, ask about the servers use of NFS and
if any of its volumes are mounted remotely. There is nothing quite like
trying to lock an application via an NFS mounted drive!

Good Luck,

Jon Carnes


--
Mailman-Users mailing list
[EMAIL PROTECTED]
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/



Re: [Mailman-Users] Internal Server Error

2002-09-02 Thread Barry A. Warsaw


 marina ==   [EMAIL PROTECTED] writes:

marina I was wondering whether there's any information available
marina on possible reasons for 500 Internal Server Errors, apart
marina from mailman's locks.

Internal Server Errors come from the web server, so you should check
its logs for clues.

-Barry

--
Mailman-Users mailing list
[EMAIL PROTECTED]
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/