>Number: 1191
>Category: general
>Synopsis: setlogin() is not called, causing problems with e.g. identd
>Confidential: no
>Severity: non-critical
>Priority: medium
>Responsible: apache (Apache HTTP Project)
>State: open
>Class: sw-bug
>Submitter-Id: apache
>Arrival-Date: Thu Oct 2 10:20:02 1997
>Originator: [EMAIL PROTECTED]
>Organization:
apache
>Release: all releases up to 1.3a1
>Environment:
FreeBSD 2.2.2-RELEASE #0
gcc version 2.7.2.1
>Description:
If you access other services via TCP/IP from within an CGI-BIN and the
other service calls identd, identd reports "root" instead of the logname
of the uid apache is running with.
>How-To-Repeat:
>Fix:
Easy, add a
setlogin((getpwuid(user_id))->pw_name);
in src/http_main.c before calling setuid(user_id)
This is around line 1699 in apache-1.2.4.
Don't know whether this is also need in the MPE code.
This problem probably also applies to the suexec.c program
>Audit-Trail:
>Unformatted:
