At 17:26 03/10/00 +0200, Peter Bieringer wrote:
>At 14:19 03.10.2000, Sam Varshavchik wrote:
>
>Lou Hevly writes:
>
>
> > I'm using qmail and vpopmail in a virtual subhosting environment.
>Apache's suexec wrapper is necessary for us because it provides our users
>the ability to run CGI and SSI programs under their own user IDs, not that
>of the webserver. So if a user's CGI program writes to some sort of
>database, this database doesn't have to be world writable. (I really don't
>think flexible virtual subhosting can be done without suexec, though I'd be
>happy to hear others' opinions.)
> >
> > Unfortunately, one of the conditions suexec stipulates is that the CGI
>program NOT setuid or setgid.
>
>There's something wrong with your configuration. sqwebmail is not some
>user's CGI program. It is a system CGI, so any user-related CGI
>restrictions are not applicable.
OK, my mistake was trying to set it up as a user's program, so that different users
could run different separate sqwebmail programs. My users wanted the location bar to
read:
www.theirdomain.com/cgi-bin/sqwebmail
I now see the error of my ways.
>You are able to make a turnaround in such scenario. I have for security
>reason similar apache configuration.
>
>My scenario:
>vpopmail & sqwebmail, sqwebmail is running as user vpopmail.vchkpw
>I've placed the cgi into the "vpopmail" home directory
>/home/vpopmail/public_html/cgi-bin/sqwebmail
>
>Now vpopmail user has also its public directory which can be reached with
> http://server/~vpopmail/cgi-bin/sqwebmail
>
>suexec executes the cgi correctly without problems
>
Thanks to both of you for the advice. Your solution is what I will do.
--
All the best (Ad�u-siau),
Lou Hevly
[EMAIL PROTECTED]
http://www.visca.com
