On Thu, 27 Mar 2003, Jim Ramsay wrote:

> On Wed, Mar 26, 2003 at 12:20:08PM -0700, Jason R. Mastaler wrote:
> > TMDA 0.73 "Jet Pilot" is released.
> >
> > * tmda-cgi security improvements to system-wide mode.
>
> I'm having trouble with this now.  It worked fine in v0.72 and
> previous with my current setup.
>
> First of all (problem 1), when I compiled tmda-cgi, I get the following
> error:
>
> Compile terminated.  System-wide mode requires that you specify a
> non-privileged CGI_USER in either a configuration file or with
> the -u option.
>
> Even though my /etc/tmdarc includes the following line:
>
> CGI_USER = "www"
>
> (www is the same user that httpd runs as)
>

I ran into the same problem.  ./compile -h now states that compile looks
for one configuration file:

Pending queue manipulation tool.

Usage:  ./compile [OPTIONS]

Where:
    -c <file>
    --config-file <file>
       Specify a different configuration file other than ~/.tmda/config.

> So I compiled using the following commandline:
>
> ./compile -u www

Yes, that's what I did, too, at first.

>
> And it seemed to work fine.  But (problem 2) when I log in to
> tmda-cgi, I get the following error:
>
> Traceback (most recent call last):
>   File "tmda-cgi.py", line 62, in ?
>     PVars = Session.Session(Form)
>   File "./contrib/cgi/Session.py", line 172, in __init__
>     from TMDA import Defaults
>   File "./TMDA/Defaults.py", line 1494, in ?
> IOError: [Errno 13] Permission denied:
> '/home/lack/.tmda/crypt_key'
>

I had this same problem earlier this week.  Make sure the partition
tmda-cgi is on will allow suid calls.  For example, my OpenBSD install
automatically installs the /var partition as nosuid.

Removing nosuid from the /var line of /etc/fstab solved the problem for
me.

 > The permissions on
the file ~/.tmda/crypt_key have not changed > (400)
>
> Any ideas why either of these two problems are now suddenly occurring?
>
>
Hope that helps.
-- 
Jeff Ross
Open Vistas Networking, Inc.
http://www.openvistas.net

_____________________________________________
tmda-users mailing list ([EMAIL PROTECTED])
http://tmda.net/lists/listinfo/tmda-users

Reply via email to