> It is a   strange permissions problem. Other ipsec commands work (eg.
ipsec
> --directory, ipsec showdefaults, and ipsec look). The problem only seems
to
> occur when the I execute ipsec with a secondary script which is being
> passed a parameter (eg. ipsec auto --status). I just tried running the
> entire barf script under the cgi script. Barf gets a strange error message
> from whack "no right to communicate with pluto
(access(var/lib/pluto.ctl))"
> Pluto.ctl is an empty file. I can't figure it out. If I run the command
> directly from my cgi script I get no error message at all.
>
> If you have no ideas, don't bother yourself fooling with this problem. You
> have enough to do. I'll settle for ipsec look for now, and go back to my
> SNMP work.

No mystery, there are just some things you have to be root to be able to do
with IPSec...you'll have to decide if the risk of either having weblet run
as root, or making some of the IPSec binaries setuid is worth being able to
access the status data remotely.

Charles Steinkuehler
http://lrp.steinkuehler.net
http://c0wz.steinkuehler.net (lrp.c0wz.com mirror)




_______________________________________________
Leaf-devel mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-devel

Reply via email to