On Wed, 2006-06-07 at 19:44 +0200, Nils Breunese (Lemonbit Internet)
wrote:
> > I don't know enough about plesk to help much. Does it run a
> > separate httpd instance with a different uid for each virtual
> > server?
>
> No, all httpd processes run as user apache.
>
> > I think you'd get a permission error logged if it is a permission
> > error. Check your ScriptAlias in the httpd.conf for the vhost to
> > see what happens to /cgi-bin requests.
>
> The httpd.include file for the vhost aliases /cgi-bin/ to /var/www/
> vhosts/<domain>/cgi-bin/, which is where configure.pl put
> BackupPC_Admin.
>
> >> I believe however that if I change the ownership on the cgi-bin
> >> directory I can't execute any scripts at all.
> >
> > The cgi-bin directory (and all above) must have read and execute
> > permission for the httpd server user. The BackupPC_Admin file
> > must be owned by the backuppc user and have the setuid bit set.
>
> Well, that sounds just like I have it setup. Here's a walk from / to
> the BackupPC_Admin file:
>
> drwxr-xr-x 24 root root 4096 Mar 26 16:00 var
> drwxr-xr-x 9 root root 4096 Jan 5 19:34 www
> drwxr-xr-x 10 root root 4096 Jun 7 10:35 vhosts
> drwxr-xr-x 14 root root 4096 Jun 7 10:35 backup.lemonbit.nl
> drwxr-x--- 2 lemonbitbackup psaserv 4096 Jun 7 15:42 cgi-bin
> -rwsr-x--- 1 backuppc apache 3912 Jun 7 11:48 BackupPC_Admin
^^^^^^
Does the running httpd retain the apache group? Maybe you
need to change the group to psaserv. If you aren't in the right
group you can't execute this.
> The apache user is a member of the psaserv group. I can execute
> BackupPC_Admin on the command line as user apache, but user backuppc
> cannot cd into the final directory, the cgi-bin directory. I believe
> this is the problem. I don't really see how to fix this cleanly though.
I don't think that is necessary. You could test it by giving rx
permission to 'other'. I'd turn off all 'w' access too.
--
Les Mikesell
[EMAIL PROTECTED]
_______________________________________________
BackupPC-users mailing list
BackupPC-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/backuppc-users
http://backuppc.sourceforge.net/
