OK, I've done that and after a bit of fiddling with the actual source code (it
kept insisting on putting things in /home/httpd/html, I got it to re-compile
and install. Thankyou for the advice.
However, I still cannot get SuExec to think the webserver should be run by
user www instead of nobody. I've looked for and changed every instance of
"nobody" in the source code and apache.spec file that I could find. But I'm
obviously missing one somewhere.
I'm about ready to give up on SuExec, but I'm hoping that someone knows
all the places where the code has as a default the user "nobody".
In my /etc/httpd/logs/suexec_log, I keep getting the error message
[1999-08-31 10:48:09]: user mismatch (www instead of nobody)
The server is indeed running as www, and is set that way in the httpd.conf
file. That's the way I want it, not as nobody. In the apache.spec file, I've
put --suexec-caller=www as one of the options.
What I'm trying to do is get the user directories working so that when a
normal user (who has a website of the type "http://www.ad1440.net/~user")
wants to run a cgi script, it runs as their user and group id. I've got a
sample file that is owned by devnull, group staff. When I try to run it, I
get the above error in my suexec_log. When I change the webserver to run as
user nobody, I then get the following error in the suexec_log:
[1999-08-30 23:08:00]: uid: (devnull/devnull) gid: (staff/staff) cmd:
bbs_new_messages.pl
[1999-08-30 23:08:00]: cannot run as forbidden gid (20/bbs_new_messages.pl)
[1999-08-30 23:08:01]: uid: (devnull/devnull) gid: (staff/staff) cmd:
bbs_new_messages.pl
[1999-08-30 23:08:01]: cannot run as forbidden gid (20/bbs_new_messages.pl)
gid 20 is staff, which is the user devnull's default group in /etc/passwd.
Does anyone have any clue what I'm doing wrong?
-----Original Message-----
From: Steve Philp <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED] <[EMAIL PROTECTED]>
Date: Monday, August 30, 1999 9:29 PM
Subject: Re: [expert] Apache and SuExec
>[EMAIL PROTECTED] wrote:
>>
>> I've just installed a fresh installation of Linux-Mandrake 6.0,
>> and am now trying to configure the web server so that it works the same
>> way as my web server on my old machine. This has MOSTLY been accomplished
>> except for one major thing:
>>
>> I used to have SuExec configured on my old webserver. To do this,
>> I had to recompile it with the appropriate options and re-install it, etc.
>> This was using Apache 1.2 before I found RPM's and before APACI.
>>
>> It appears that the default Apache that comes with Linux-Mandrake
>> 6.0 does not have SuExec compiled in, so I need to recompile it. I have
>> unzipped the src RPM, but I cannot find in it anywhere what the original
>> options it was compiled with are.
>>
>> Does anyone know how to compile this so that it's the same as the
>> one that comes with the distribution? I can then use those options and
>> add the ones I need for SuExec.
>
>Add the options that you want to the .spec file in
>/usr/src/redhat/SPECS/ then rebuild the package with 'rpm -ba
><.spec-file>'.