DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=18156>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=18156

Suexec runs as the VirtualHost user instead of the owner of the UserDir





------- Additional Comments From [EMAIL PROTECTED]  2004-04-29 14:04 -------
Here it comes ;-)


System installed on:

Debian GNU/Linux Sarge x86


Non-FQDN hostname of the system tested on: floeff3.effenberger (sometimes
mentioned in the configuration file)


Apache source code used:

http://www.artfiles.org/apache.org/httpd/httpd-2.0.49.tar.gz


Steps taken for compilation:

- apt-get install libssl-dev binfmt-support

- ./configure --enable-mods-shared=all --enable-ssl --enable-proxy
--enable-suexec --with-suexec-caller=nobody --with-suexec-docroot=/home

- make

- make install

- addgroup site1

- adduser --shell /bin/false --ingroup site1 user1

- mkdir /home/user1/public_html

- chown user1:site1 /home/user1/public_html

- adduser --shell /bin/false --ingroup site1 user2

- mkdir /home/user2/public_html

- chown user2:site1 /home/user2/public_html

- Content of /home/user1/public_html/whoami.pl and
/home/user2/public_html/whoami.pl:
  #!/usr/bin/perl
  print "Content-type: text/plain\n\n";
  system "whoami";

- chown user1:site1 /home/user1/public_html/whoami.pl

- chmod 755 /home/user1/public_html/whoami.pl

- chown user2:site1 /home/user2/public_html/whoami.pl

- chmod 755 /home/user2/public_html/whoami.pl


Open http://floeff3 => "user1" is being printed
Open http://floeff3/~user2/ => Internal Server Error with

[2004-04-29 16:01:36]: target uid/gid (1002/1004) mismatch with directory
(1003/1004) or program (1003/1004)


# id user1
uid=1002(user1) gid=1004(site1) groups=1004(site1)

# id user2
uid=1003(user2) gid=1004(site1) groups=1004(site1)


I have put the configuration changes I've made together in the attached patch
file which you should use against /usr/local/apache2/httpd.conf

Please let me know if you need anything else. Thanks for taking the time. ;-)

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to