Re: Shell account cgi script

2005-09-11 Thread John Kintaro Tate
I don't run my apache in a chroot. On 9/8/05, L. V. Lammert [EMAIL PROTECTED] wrote: At 10:03 PM 9/7/2005 +1000, you wrote: Hello, I want to put a cgi-script on my OpenBSD server for shell account creation. Basically that allows users to sign up accounts via the web. I however know very

Re: Shell account cgi script

2005-09-07 Thread L. V. Lammert
At 10:03 PM 9/7/2005 +1000, you wrote: Hello, I want to put a cgi-script on my OpenBSD server for shell account creation. Basically that allows users to sign up accounts via the web. I however know very little about cgi, I could probably write one if I looked into it but I thought I would ask

Re: Shell account cgi script

2005-09-07 Thread Darrin Chandler
There's always a way. You could put the info somewhere within the chroot and have a cron job check it every minute and add the user. Just one idea, and it has drawbacks in a couple of areas... L. V. Lammert wrote: At 10:03 PM 9/7/2005 +1000, you wrote: Hello, I want to put a cgi-script on

Re: Shell account cgi script

2005-09-07 Thread Bryan Irvine
[snip cut whack] I want to put a cgi-script on my OpenBSD server for shell account creation. Basically that allows users to sign up accounts via the web. [chainsaw noises cut cut] You can't add a user via cgi with a normal OBSD installation, since Apache is running chroot'd. Not directly no,

Re: Shell account cgi script

2005-09-07 Thread L. V. Lammert
At 08:16 AM 9/7/2005 -0700, Darrin Chandler wrote: There's always a way. You could put the info somewhere within the chroot and have a cron job check it every minute and add the user. Just one idea, and it has drawbacks in a couple of areas... There are always ways, .. but I would not

Re: Shell account cgi script

2005-09-07 Thread Stuart Henderson
--On 07 September 2005 10:40 -0500, L. V. Lammert wrote: There are always ways, .. but I would not consider recommending such sophisticated solutions for the basic user level of this poster. If it's necessary to ask questions of this nature, perhaps running a server automatically handing out

Re: Shell account cgi script

2005-09-07 Thread Will H. Backman
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Stuart Henderson Sent: Wednesday, September 07, 2005 12:13 PM To: Misc OpenBSD Subject: Re: Shell account cgi script --On 07 September 2005 10:40 -0500, L. V. Lammert wrote: There are always ways

Re: Shell account cgi script

2005-09-07 Thread Mike Hernandez
On 9/7/05, Will H. Backman [EMAIL PROTECTED] wrote: Perhaps the OpenBSD community can at least come up with some general hints for people who wish to use OpenBSD for hosting shell accounts. IMHO a good method of this is by setting up a chroot for user shells, whereby a user can log in and at

Re: Shell account cgi script

2005-09-07 Thread Adam
On Wed, 7 Sep 2005 13:37:45 -0400 Mike Hernandez [EMAIL PROTECTED] wrote: On 9/7/05, Will H. Backman [EMAIL PROTECTED] wrote: Perhaps the OpenBSD community can at least come up with some general hints for people who wish to use OpenBSD for hosting shell accounts. IMHO a good method of

Re: Shell account cgi script

2005-09-07 Thread Mike Hernandez
On 9/7/05, Adam [EMAIL PROTECTED] wrote: On Wed, 7 Sep 2005 13:37:45 -0400 Mike Hernandez [EMAIL PROTECTED] wrote: If someone is wanting to give people shell accounts, then they generally want people to be able to access more than just the shell itself. The whole point is to let them use the

Re: Shell account cgi script

2005-09-07 Thread Adam
Mike Hernandez [EMAIL PROTECTED] wrote: On the contrary, they can do anything that the administrator makes it possible for them to do. Many of the web hosting accounts I've signed up for came with a jailed shell that I could use to work with the files on the server but nothing more. And web

Re: Shell account cgi script

2005-09-07 Thread Will H. Backman
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mike Hernandez Sent: Wednesday, September 07, 2005 2:47 PM To: Adam; misc@openbsd.org Subject: Re: Shell account cgi script On 9/7/05, Adam [EMAIL PROTECTED] wrote: On Wed, 7 Sep 2005 13:37:45

Re: Shell account cgi script

2005-09-07 Thread Mike Hernandez
On 9/7/05, Adam [EMAIL PROTECTED] wrote: And web hosting is not shell hosting is it? What does work with mean anyways? You need all the binaries to work with, and they need all their libs to function. Sure, you could copy all the binaries and libraries of the entire OS into the chroot, but

Re: Shell account cgi script

2005-09-07 Thread Adam
Mike Hernandez [EMAIL PROTECTED] wrote: Work with means using various programs like vim or emacs or sed, etc to manipulate the files. And yes you need the binaries and their associated libraries for each program you want a jailed user to be able to run. You don't need an entire OS made

Re: Shell account cgi script

2005-09-07 Thread Mike Hernandez
On 9/7/05, Adam [EMAIL PROTECTED] wrote: It's a useful idea in some scenarios, in others it's not. Right, and providing shell accounts is in the not category. Adam OK I have to concede here. I didn't realize how powerful user classes were. After doing some research I see that all of