It is a strange permissions problem. Other ipsec commands work (eg. ipsec
--directory, ipsec showdefaults, and ipsec look). The problem only seems to
occur when the I execute ipsec with a secondary script which is being
passed a parameter (eg. ipsec auto --status). I just tried running the
entire barf script under the cgi script. Barf gets a strange error message
from whack "no right to communicate with pluto (access(var/lib/pluto.ctl))"
Pluto.ctl is an empty file. I can't figure it out. If I run the command
directly from my cgi script I get no error message at all.
If you have no ideas, don't bother yourself fooling with this problem. You
have enough to do. I'll settle for ipsec look for now, and go back to my
SNMP work.
Best Regards,
Roger McClurg
[EMAIL PROTECTED]
Charles
Steinkuehler To: Roger E McClurg/CEG/CSC@CSC
<cstein cc: [EMAIL PROTECTED],
@newtek.com> [EMAIL PROTECTED]
Subject: Re: Help WIth NEW Weblet
Function
12/13/01
09:43 AM
> I am trying to create a new Weblet function which provides the
> functionality of the ipsec barf script. I have most of this new CGI
script
> working, but I am having problems getting most of the ipsec commands to
> work. For example the command "/usr/local/sbin/ipsec auto --status"
returns
> nothing. I have tried providing the directory for the auto script and
> everything else I could think of, but no luck. The best I could get was
the
> default "you used the command improperly" message from ipsec when I
quoted
> the parms.
>
> My knowledge of writing shell scripts is minimal, and when you combine
that
> with trying to do it in a CGI script, I am way behind the curve. Can you
> give me a point in the right direction as to the command structure I need
> to use in cases like this?
My first guess is that you're running into a permissions problem. Weblet
(and the CGI scripts it spawns) typically runs as a non-root user, which
probably doesn't have permissions to extract the necessary information from
the underlying ipsec binaries.
Charles Steinkuehler
http://lrp.steinkuehler.net
http://c0wz.steinkuehler.net (lrp.c0wz.com mirror)
_______________________________________________
Leaf-devel mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-devel
