cgiwrap-users Mailing List for CGIWrap (Page 2)
Brought to you by:
nneul
You can subscribe to this list here.
2000 |
Jan
|
Feb
|
Mar
|
Apr
|
May
|
Jun
|
Jul
|
Aug
(21) |
Sep
(23) |
Oct
(4) |
Nov
(15) |
Dec
(25) |
---|---|---|---|---|---|---|---|---|---|---|---|---|
2001 |
Jan
(5) |
Feb
(19) |
Mar
(19) |
Apr
(13) |
May
(12) |
Jun
(23) |
Jul
(6) |
Aug
(16) |
Sep
(6) |
Oct
(31) |
Nov
(23) |
Dec
(28) |
2002 |
Jan
(4) |
Feb
(9) |
Mar
(6) |
Apr
(23) |
May
(29) |
Jun
(16) |
Jul
(10) |
Aug
(41) |
Sep
(16) |
Oct
(8) |
Nov
(7) |
Dec
(7) |
2003 |
Jan
(13) |
Feb
(30) |
Mar
(6) |
Apr
(12) |
May
(23) |
Jun
(12) |
Jul
(11) |
Aug
(20) |
Sep
|
Oct
|
Nov
(10) |
Dec
(8) |
2004 |
Jan
(1) |
Feb
(11) |
Mar
(3) |
Apr
(10) |
May
(6) |
Jun
|
Jul
(3) |
Aug
(4) |
Sep
(3) |
Oct
(9) |
Nov
(2) |
Dec
|
2005 |
Jan
(7) |
Feb
|
Mar
(7) |
Apr
(1) |
May
(3) |
Jun
(2) |
Jul
(8) |
Aug
|
Sep
|
Oct
|
Nov
(2) |
Dec
(2) |
2006 |
Jan
(1) |
Feb
|
Mar
|
Apr
|
May
|
Jun
|
Jul
(2) |
Aug
(1) |
Sep
(2) |
Oct
(2) |
Nov
|
Dec
|
2007 |
Jan
|
Feb
|
Mar
|
Apr
(2) |
May
(12) |
Jun
(1) |
Jul
(1) |
Aug
|
Sep
(1) |
Oct
|
Nov
(14) |
Dec
|
2008 |
Jan
(5) |
Feb
(10) |
Mar
|
Apr
(12) |
May
(5) |
Jun
|
Jul
|
Aug
|
Sep
|
Oct
|
Nov
(6) |
Dec
|
2009 |
Jan
|
Feb
|
Mar
|
Apr
|
May
(2) |
Jun
|
Jul
|
Aug
|
Sep
(1) |
Oct
|
Nov
|
Dec
|
2010 |
Jan
|
Feb
|
Mar
(1) |
Apr
(4) |
May
|
Jun
|
Jul
|
Aug
|
Sep
|
Oct
(2) |
Nov
|
Dec
|
2011 |
Jan
|
Feb
|
Mar
|
Apr
|
May
(2) |
Jun
|
Jul
|
Aug
(5) |
Sep
|
Oct
|
Nov
|
Dec
|
2013 |
Jan
|
Feb
|
Mar
|
Apr
|
May
|
Jun
|
Jul
|
Aug
(2) |
Sep
|
Oct
|
Nov
|
Dec
(4) |
From: k.s.guleesh <k.s...@go...> - 2008-11-24 16:40:59
|
Hi , I have rolled my own cgiwrap config but I'm stumped at this point. I have configured a virtual host with ScriptAlias /cgi-bin/ /admin/public_html/cgi-bin/ and I have built the cgiwrap binary into /admin/public_html/cgi-bin/ (I only want that virtual host to have access to it). Here's my cgiwrap output - Initializing Logging Redirecting STDERR to STDOUT Setting SIGXCPU to default behaviour Environment Variables: QUERY_STRING: '' SCRIPT_NAME: '/cgi-bin/cgiwrapd' SCRIPT_FILENAME: '/admin/public_html/cgi-bin/cgiwrapd' REDIRECT_URL: '<NULL>' PATH_INFO: '/root/test.cgi' PATH_TRANSLATED: '/admin/public_html/root/test.cgi' REMOTE_USER: '<NULL>' REMOTE_HOST: '<NULL>' REMOTE_ADDR: '127.0.0.1' Trying to extract user from PATH_INFO. Retrieved User Name: 'root' User Data Retrieved: UserID: 'root' UID: '0' GID: '0' Home Dir: '/root' Checking remote host information. Checking user minimum uid. Checking user shell. Global Deny File: '/etc/cgiwrap/cgiwrap.deny' Global Allow File: '/etc/cgiwrap/cgiwrap.allow' Checking Access Files: Deny file exists: '/etc/cgiwrap/cgiwrap.deny' Allow file exists: '/etc/cgiwrap/cgiwrap.allow' Checking deny file for 'root' Checking allow file for 'root' Found 'root' Processing user directory configuration file. Using configured base directory. Script Base Directory: '/admin/public_html/cgi_bin' ***************** * CGIWrap Error * ***************** The specified user does not have a script directory set up for execution of cgi scripts, or the directory permissions prevent cgiwrap from using that directory. Now I mapped root to that folder via the cgiwrap.userdir config so I'm imagining it is perhaps to do with directory permissions which are all 755 I remember coming across some docs somewhere that explained the permission checking process but I can't seem to find it now that I need it. for completeness here are the ./configure options I used ./configure --mandir=/usr/share/man \ --infodir=/usr/share/info \ --with-install-group=www-data --with-install-user=root \ --with-local-doc-url=/doc/cgiwrap \ --with-cgi-dir=public_html/cgi-bin --with-httpd-user=www-data \ --with-minimum-uid=0 \ --with-logging-file=/var/log/cgiwrap.log \ --with-allow-file=/etc/cgiwrap/cgiwrap.allow \ --with-deny-file=/etc/cgiwrap/cgiwrap.deny \ --with-host-checking --with-check-shell \ --with-rewrite=/etc/cgiwrap/cgiwrap.userdir \ --with-quiet-errors \ --with-install-dir=/admin/public_html/cgi-bin Any ideas ? Cheers A. |
From: Neulinger, N. <nn...@ms...> - 2008-11-06 01:27:17
|
Sounds like you configured --with-rewrite to use a user directory rewrite file. That has nothing to do with mod_rewrite. I'd suggest reconfiguring without that option. -- Nathan ------------------------------------------------------------ Nathan Neulinger nn...@ms... Missouri S&T Information Technology (573) 341-6679 System Administrator - Principal KD0DMH > -----Original Message----- > From: k.s.guleesh [mailto:k.s...@go...] > Sent: Wednesday, November 05, 2008 7:24 PM > To: Neulinger, Nathan > Subject: RE: [cgiwrap-users] basic setup > > Thanks, > that has revealed some errors. > > CGIWrap encountered a system error. > When: Couldn't open user directory config file > Error Message: No such file or directory > Error Number: 2 > > what is this config file of which it speaks ? > > On Wed, 2008-11-05 at 07:01 -0600, Neulinger, Nathan wrote: > > Run with cgiwrapd, it will show how the request was parsed/etc. > > > > ------------------------------------------------------------ > > Nathan Neulinger nn...@ms... > > Missouri S&T Information Technology (573) 341-6679 > > System Administrator - Principal KD0DMH > > > > > > > -----Original Message----- > > > From: k.s.guleesh [mailto:k.s...@go...] > > > Sent: Wednesday, November 05, 2008 6:52 AM > > > To: cgi...@li... > > > Subject: [cgiwrap-users] basic setup > > > > > > I have installed the default cgiwrap package that is available with > > > ubuntu 8.04 > > > > > > I just want to see a basic setup running before trying out various > > > config options > > > > > > > > > The manual says: > > > > > > "As distributed, cgiwrap is configured to run user scripts which > are > > > located in the "~/public_html/cgi-bin/" directory." > > > > > > I have a test python script at /home/a/public_html/cgi-bin/test.cgi > > > > > > > > > when I point my browser to this url > > > http://localhost/cgi-bin/cgiwrap/a/test.cgi > > > > > > I am getting this response > > > > > > CGIWrap Error: Request Error > > > > > > nothing useful appearing in the Apache logs - any clues would be > > > appreciated. > > > > > > A. > > > > > > > > > > > --------------------------------------------------------------------- > -- > > > -- > > > This SF.Net email is sponsored by the Moblin Your Move Developer's > > > challenge > > > Build the coolest Linux based applications with Moblin SDK & win > great > > > prizes > > > Grand prize is a trip for two to an Open Source event anywhere in > the > > > world > > > http://moblin-contest.org/redirect.php?banner_id=100&url=/ > > > _______________________________________________ > > > cgiwrap-users mailing list > > > cgi...@li... > > > https://lists.sourceforge.net/lists/listinfo/cgiwrap-users |
From: Neulinger, N. <nn...@ms...> - 2008-11-05 13:02:04
|
Run with cgiwrapd, it will show how the request was parsed/etc. ------------------------------------------------------------ Nathan Neulinger nn...@ms... Missouri S&T Information Technology (573) 341-6679 System Administrator - Principal KD0DMH > -----Original Message----- > From: k.s.guleesh [mailto:k.s...@go...] > Sent: Wednesday, November 05, 2008 6:52 AM > To: cgi...@li... > Subject: [cgiwrap-users] basic setup > > I have installed the default cgiwrap package that is available with > ubuntu 8.04 > > I just want to see a basic setup running before trying out various > config options > > > The manual says: > > "As distributed, cgiwrap is configured to run user scripts which are > located in the "~/public_html/cgi-bin/" directory." > > I have a test python script at /home/a/public_html/cgi-bin/test.cgi > > > when I point my browser to this url > http://localhost/cgi-bin/cgiwrap/a/test.cgi > > I am getting this response > > CGIWrap Error: Request Error > > nothing useful appearing in the Apache logs - any clues would be > appreciated. > > A. > > > ----------------------------------------------------------------------- > -- > This SF.Net email is sponsored by the Moblin Your Move Developer's > challenge > Build the coolest Linux based applications with Moblin SDK & win great > prizes > Grand prize is a trip for two to an Open Source event anywhere in the > world > http://moblin-contest.org/redirect.php?banner_id=100&url=/ > _______________________________________________ > cgiwrap-users mailing list > cgi...@li... > https://lists.sourceforge.net/lists/listinfo/cgiwrap-users |
From: k.s.guleesh <k.s...@go...> - 2008-11-05 12:52:23
|
I have installed the default cgiwrap package that is available with ubuntu 8.04 I just want to see a basic setup running before trying out various config options The manual says: "As distributed, cgiwrap is configured to run user scripts which are located in the "~/public_html/cgi-bin/" directory." I have a test python script at /home/a/public_html/cgi-bin/test.cgi when I point my browser to this url http://localhost/cgi-bin/cgiwrap/a/test.cgi I am getting this response CGIWrap Error: Request Error nothing useful appearing in the Apache logs - any clues would be appreciated. A. |
From: Jo R. <jr...@ne...> - 2008-05-22 19:44:00
|
Out of curiosity, why bother? There is a timeout you can enable during compile-time... I prefer to have distinct timeouts for user scripts. On May 22, 2008, at 12:02 PM, Neulinger, Nathan wrote: > Would probably need to modify CGIwrap to possibly trap the signal, but > depending on how apache is doing that signaling, might be difficult. > > Depending on how cgiwrap is configured, I believe it will (going to > memory, have to look at code again) in certain cases do a full exec, > in > others will stick around so that it can report on rusage. > > -- Nathan > > ------------------------------------------------------------ > Nathan Neulinger nn...@ms... > Missouri S&T Information Technology (573) 341-6679 > System Administrator - Principal KD0DMH > > >> -----Original Message----- >> From: cgi...@li... [mailto:cgiwrap- >> use...@li...] On Behalf Of Trevor Astrope >> Sent: Thursday, May 22, 2008 1:30 PM >> To: cgi...@li... >> Subject: [cgiwrap-users] Timeout >> >> I noticed that scripts called by cgiwrap will keep running even >> after the >> apache timeout value is reached. I tested the same script without >> cgiwrap >> and it exits when the timeout value is reached. >> >> Is there any way for cgiwrap to signal scripts when the apache >> timeout is >> reached or would a timeout need to be coded into cgiwrap itself? >> >> Thanks, >> >> Trevor >> >> >> ------------------------------------------------------------------- >> ------ >> This SF.net email is sponsored by: Microsoft >> Defy all challenges. Microsoft(R) Visual Studio 2008. >> http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/ >> _______________________________________________ >> cgiwrap-users mailing list >> cgi...@li... >> https://lists.sourceforge.net/lists/listinfo/cgiwrap-users > > ------------------------------------------------------------------------- > This SF.net email is sponsored by: Microsoft > Defy all challenges. Microsoft(R) Visual Studio 2008. > http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/ > _______________________________________________ > cgiwrap-users mailing list > cgi...@li... > https://lists.sourceforge.net/lists/listinfo/cgiwrap-users -- Jo Rhett Net Consonance : consonant endings by net philanthropy, open source and other randomness |
From: Neulinger, N. <nn...@ms...> - 2008-05-22 19:02:47
|
Would probably need to modify CGIwrap to possibly trap the signal, but depending on how apache is doing that signaling, might be difficult. Depending on how cgiwrap is configured, I believe it will (going to memory, have to look at code again) in certain cases do a full exec, in others will stick around so that it can report on rusage. -- Nathan ------------------------------------------------------------ Nathan Neulinger nn...@ms... Missouri S&T Information Technology (573) 341-6679 System Administrator - Principal KD0DMH > -----Original Message----- > From: cgi...@li... [mailto:cgiwrap- > use...@li...] On Behalf Of Trevor Astrope > Sent: Thursday, May 22, 2008 1:30 PM > To: cgi...@li... > Subject: [cgiwrap-users] Timeout > > I noticed that scripts called by cgiwrap will keep running even > after the > apache timeout value is reached. I tested the same script without > cgiwrap > and it exits when the timeout value is reached. > > Is there any way for cgiwrap to signal scripts when the apache > timeout is > reached or would a timeout need to be coded into cgiwrap itself? > > Thanks, > > Trevor > > > ------------------------------------------------------------------- > ------ > This SF.net email is sponsored by: Microsoft > Defy all challenges. Microsoft(R) Visual Studio 2008. > http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/ > _______________________________________________ > cgiwrap-users mailing list > cgi...@li... > https://lists.sourceforge.net/lists/listinfo/cgiwrap-users |
From: Trevor A. <as...@ta...> - 2008-05-22 18:30:00
|
I noticed that scripts called by cgiwrap will keep running even after the apache timeout value is reached. I tested the same script without cgiwrap and it exits when the timeout value is reached. Is there any way for cgiwrap to signal scripts when the apache timeout is reached or would a timeout need to be coded into cgiwrap itself? Thanks, Trevor |
From: Neulinger, N. <nn...@ms...> - 2008-05-22 13:29:42
|
If you send a patch against current SVN, I'll be happy to look it over and apply it... it's about time I did a fresh release of the code... -- Nathan ------------------------------------------------------------ Nathan Neulinger nn...@ms... Missouri S&T Information Technology (573) 341-6679 System Administrator - Principal KD0DMH > -----Original Message----- > From: cgi...@li... [mailto:cgiwrap- > use...@li...] On Behalf Of Hans van > Kranenburg > Sent: Thursday, May 22, 2008 7:59 AM > To: cgi...@li... > Subject: [cgiwrap-users] Implementing IPv6 support > > Hi cgiwrap-folks, > > While carefully IPv6-enabling our network infrastructure, I > discovered > cgiwrap does not yet handle IPv6 addresses in configuration files > and > CGI environment variables. > > Currently cgiwrap requires a dotquad IPv4 address in REMOTE_ADDR > environment variable. So even if host-checking is not used in > cgiwrap.(deny|allow), any request over IPv6 will be refused when > cgiwrap > is compiled with --with-host-checking. > > Currently I'm using cgiwrap without --with-host-checking to work > around > this issue. > > RFC 3875 (CGI) and RFC 3513 (IPv6 Addressing Architecture) describe > the > possible content of REMOTE_ADDR cgiwrap should be able to parse. > > In configuration file parsing, support for IPv6 addressing like > 2001:888:30a9:1e7::/64 should be added. I think it would be rather > trivial to just add ipv4/prefix (like 10.0.0.0/22) support in > addition > to specifying netmasks in dotquad format. > > Although C is not a programming language I speak fluently (yet), > I'd > like to give it a shot and code IPv6 support into cgiwrap. So, if > the > cgiwrap author or another experienced C programmer could review the > changes and probably help me out a bit when needed, I'd be happy to > contribute to cgiwrap. > > Greetings, > Hans van Kranenburg > > ------------------------------------------------------------------- > ------ > This SF.net email is sponsored by: Microsoft > Defy all challenges. Microsoft(R) Visual Studio 2008. > http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/ > _______________________________________________ > cgiwrap-users mailing list > cgi...@li... > https://lists.sourceforge.net/lists/listinfo/cgiwrap-users |
From: Hans v. K. <han...@me...> - 2008-05-22 12:59:37
|
Hi cgiwrap-folks, While carefully IPv6-enabling our network infrastructure, I discovered cgiwrap does not yet handle IPv6 addresses in configuration files and CGI environment variables. Currently cgiwrap requires a dotquad IPv4 address in REMOTE_ADDR environment variable. So even if host-checking is not used in cgiwrap.(deny|allow), any request over IPv6 will be refused when cgiwrap is compiled with --with-host-checking. Currently I'm using cgiwrap without --with-host-checking to work around this issue. RFC 3875 (CGI) and RFC 3513 (IPv6 Addressing Architecture) describe the possible content of REMOTE_ADDR cgiwrap should be able to parse. In configuration file parsing, support for IPv6 addressing like 2001:888:30a9:1e7::/64 should be added. I think it would be rather trivial to just add ipv4/prefix (like 10.0.0.0/22) support in addition to specifying netmasks in dotquad format. Although C is not a programming language I speak fluently (yet), I'd like to give it a shot and code IPv6 support into cgiwrap. So, if the cgiwrap author or another experienced C programmer could review the changes and probably help me out a bit when needed, I'd be happy to contribute to cgiwrap. Greetings, Hans van Kranenburg |
From: Jo R. <jr...@ne...> - 2008-04-21 18:16:36
|
On Apr 11, 2008, at 8:10 AM, Tim Gustafson wrote: > is compiled in the mode that you have to specify which user you > want to > execute the scripts as in the Apache configuration file, rather > than using > the script owner's ID, and that doesn't work for my environment. :\ Just for your knowledge, *every* time I've had to help someone figure out how their site was hacked, it was due to this particular setting: "execute by the script owner's ID" The "brilliance" of this in a shared hosting environment is simple: from virtual host A, I can make a program run as user B because they own the file. Given how badly written most programs are, it's downright simple to find something owned by someone else that will accept bad input and do something you want. I simply can't fathom a useful way to do this that doesn't open the door wide open to getting hacked to pieces. Valid ways to set user-id: hardcoded in apache config per virtual host determined based on hardcoded environment data per virtual host (ie document root) -- Jo Rhett Net Consonance : consonant endings by net philanthropy, open source and other randomness |
From: Tuc at T-B-O-H.N. <ml...@t-...> - 2008-04-11 23:51:09
|
Hi, Still not sure how your environment is set up. Are you talking "~" based users, or Virtual Hosts for each user, or just "/directorypath/"? Are these scripts in a "centralized" directory? I'm not following how the script, if it isn't in the users home directory, is supposed to know what user to run as... Thanks, Tuc > > Here's my configure script: > > ./configure --with-httpd-user=apache --with-perl=/usr/bin/perl > --with-cgi-dir=.html --with-minimum-uid=1000 --with-minimum-gid=1 > --with-logging-syslog=cgiwrap --with-php=/usr/bin/php-cgi > --with-php-interpreter --with-install-dir=/var/www/cgi-bin/ > --with-check-shell --with-rlimit-core=0 --with-rlimit-cpu=60 > --without-redirect-stderr --without-logging-file --with-wall > --with-local-contact-email=web...@so... --with-cgiwrapd > --without-nph > > And here's the configuration I'm using: > > AddHandler cgi-wrapper .php > AddHandler cgi-wrapper .cgi > AddHandler cgi-wrapper .sh > AddHandler cgi-wrapper .pl > > Action cgi-wrapper /cgi-bin/cgiwrap > > Tim Gustafson > SOE Webmaster > UC Santa Cruz > tj...@so... > (831) 459-5354 > > > -----Original Message----- > From: Tuc at T-B-O-H.NET [mailto:ml...@t-...] > Sent: Thursday, April 10, 2008 3:22 PM > To: Tim Gustafson > Cc: cgi...@li... > Subject: Re: [cgiwrap-users] CGIWrap On Non-User Directories > > > > > Hello! > > > > I'd like to use CGIWrap to execute PHP scripts as different users. The > PHP > > scripts are not located in user's home folders. When I try to run such a > > script, for example: > > > > http://www.foo.com/wiki/blah/index.php > > > > I get an error that says "Couldn't find user 'wiki'." > > > > Is there any way to make CGIWrap work in this manner? > > > How did you compile up cgiwrap, and whats the configuration in your > webserver? > > Tuc > > > ------------------------------------------------------------------------- > This SF.net email is sponsored by the 2008 JavaOne(SM) Conference > Don't miss this year's exciting event. There's still time to save $100. > Use priority code J8TL2D2. > http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone > _______________________________________________ > cgiwrap-users mailing list > cgi...@li... > https://lists.sourceforge.net/lists/listinfo/cgiwrap-users > |
From: Tim G. <tj...@so...> - 2008-04-11 16:10:35
|
The package is on rpmforge: mod_suphp.i386 0.6.2-1.el5.rf rpmforge I agree about binary packages. Before I came here, I was a FreeBSD guy and I compiled EVERYTHING through the ports tree. Tim Gustafson SOE Webmaster UC Santa Cruz tj...@so... (831) 459-5354 -----Original Message----- From: Jeremy Chadwick [mailto:cg...@jd...] Sent: Friday, April 11, 2008 8:57 AM To: Tim Gustafson Cc: cgi...@li... Subject: Re: [cgiwrap-users] CGIWrap On Non-User Directories Who maintains said packages? If a public distribution (e.g. RedHat or someone else), I'd recommend mailing the package owner and asking them to consider making builds for owner, force, and paranoid all separately. The fact someone picked paranoid as the default is truly bizarre. (I maintain the FreeBSD port for suPHP, and I specifically default to owner, for that exact reason). Of course, this is one of the problems with binary-only packages, and why building from source gives a person a lot more flexibility. :-) -- | Jeremy Chadwick jdc at parodius.com | | Parodius Networking http://www.parodius.com/ | | UNIX Systems Administrator Mountain View, CA, USA | | Making life hard for others since 1977. PGP: 4BD6C0CB | On Fri, Apr 11, 2008 at 08:10:28AM -0700, Tim Gustafson wrote: > Jeremy, > > Thanks! I've looked into suPHP. One of my directives where I work is to > only use Yum packages wherever possible, and the only Yum package for suPHP > is compiled in the mode that you have to specify which user you want to > execute the scripts as in the Apache configuration file, rather than using > the script owner's ID, and that doesn't work for my environment. :\ > > Tim Gustafson > SOE Webmaster > UC Santa Cruz > tj...@so... > (831) 459-5354 > > > -----Original Message----- > From: Jeremy Chadwick [mailto:cg...@jd...] > Sent: Thursday, April 10, 2008 5:07 PM > To: Tim Gustafson > Cc: cgi...@li... > Subject: Re: [cgiwrap-users] CGIWrap On Non-User Directories > > If you can't manage to get cgiwrap to work in the way you'd like, there > is an application called suPHP which does exactly what you desire. We > use both (cgiwrap for CGIs and suPHP for PHP) in our hosting > environment. > > -- > | Jeremy Chadwick jdc at parodius.com | > | Parodius Networking http://www.parodius.com/ | > | UNIX Systems Administrator Mountain View, CA, USA | > | Making life hard for others since 1977. PGP: 4BD6C0CB | > > On Thu, Apr 10, 2008 at 10:11:21AM -0700, Tim Gustafson wrote: > > Hello! > > > > I'd like to use CGIWrap to execute PHP scripts as different users. The > PHP > > scripts are not located in user's home folders. When I try to run such a > > script, for example: > > > > http://www.foo.com/wiki/blah/index.php > > > > I get an error that says "Couldn't find user 'wiki'." > > > > Is there any way to make CGIWrap work in this manner? > > > > Thanks! > > > > Tim Gustafson > > SOE Webmaster > > UC Santa Cruz > > tj...@so... > > (831) 459-5354 > > > > > > > > ------------------------------------------------------------------------- > > This SF.net email is sponsored by the 2008 JavaOne(SM) Conference > > Don't miss this year's exciting event. There's still time to save $100. > > Use priority code J8TL2D2. > > > http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javao > ne > > _______________________________________________ > > cgiwrap-users mailing list > > cgi...@li... > > https://lists.sourceforge.net/lists/listinfo/cgiwrap-users > > > ------------------------------------------------------------------------- > This SF.net email is sponsored by the 2008 JavaOne(SM) Conference > Don't miss this year's exciting event. There's still time to save $100. > Use priority code J8TL2D2. > http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javao ne > _______________________________________________ > cgiwrap-users mailing list > cgi...@li... > https://lists.sourceforge.net/lists/listinfo/cgiwrap-users |
From: Jeremy C. <cg...@jd...> - 2008-04-11 15:56:47
|
Who maintains said packages? If a public distribution (e.g. RedHat or someone else), I'd recommend mailing the package owner and asking them to consider making builds for owner, force, and paranoid all separately. The fact someone picked paranoid as the default is truly bizarre. (I maintain the FreeBSD port for suPHP, and I specifically default to owner, for that exact reason). Of course, this is one of the problems with binary-only packages, and why building from source gives a person a lot more flexibility. :-) -- | Jeremy Chadwick jdc at parodius.com | | Parodius Networking http://www.parodius.com/ | | UNIX Systems Administrator Mountain View, CA, USA | | Making life hard for others since 1977. PGP: 4BD6C0CB | On Fri, Apr 11, 2008 at 08:10:28AM -0700, Tim Gustafson wrote: > Jeremy, > > Thanks! I've looked into suPHP. One of my directives where I work is to > only use Yum packages wherever possible, and the only Yum package for suPHP > is compiled in the mode that you have to specify which user you want to > execute the scripts as in the Apache configuration file, rather than using > the script owner's ID, and that doesn't work for my environment. :\ > > Tim Gustafson > SOE Webmaster > UC Santa Cruz > tj...@so... > (831) 459-5354 > > > -----Original Message----- > From: Jeremy Chadwick [mailto:cg...@jd...] > Sent: Thursday, April 10, 2008 5:07 PM > To: Tim Gustafson > Cc: cgi...@li... > Subject: Re: [cgiwrap-users] CGIWrap On Non-User Directories > > If you can't manage to get cgiwrap to work in the way you'd like, there > is an application called suPHP which does exactly what you desire. We > use both (cgiwrap for CGIs and suPHP for PHP) in our hosting > environment. > > -- > | Jeremy Chadwick jdc at parodius.com | > | Parodius Networking http://www.parodius.com/ | > | UNIX Systems Administrator Mountain View, CA, USA | > | Making life hard for others since 1977. PGP: 4BD6C0CB | > > On Thu, Apr 10, 2008 at 10:11:21AM -0700, Tim Gustafson wrote: > > Hello! > > > > I'd like to use CGIWrap to execute PHP scripts as different users. The > PHP > > scripts are not located in user's home folders. When I try to run such a > > script, for example: > > > > http://www.foo.com/wiki/blah/index.php > > > > I get an error that says "Couldn't find user 'wiki'." > > > > Is there any way to make CGIWrap work in this manner? > > > > Thanks! > > > > Tim Gustafson > > SOE Webmaster > > UC Santa Cruz > > tj...@so... > > (831) 459-5354 > > > > > > > > ------------------------------------------------------------------------- > > This SF.net email is sponsored by the 2008 JavaOne(SM) Conference > > Don't miss this year's exciting event. There's still time to save $100. > > Use priority code J8TL2D2. > > > http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javao > ne > > _______________________________________________ > > cgiwrap-users mailing list > > cgi...@li... > > https://lists.sourceforge.net/lists/listinfo/cgiwrap-users > > > ------------------------------------------------------------------------- > This SF.net email is sponsored by the 2008 JavaOne(SM) Conference > Don't miss this year's exciting event. There's still time to save $100. > Use priority code J8TL2D2. > http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone > _______________________________________________ > cgiwrap-users mailing list > cgi...@li... > https://lists.sourceforge.net/lists/listinfo/cgiwrap-users |
From: Tim G. <tj...@so...> - 2008-04-11 15:14:20
|
Here's my configure script: ./configure --with-httpd-user=apache --with-perl=/usr/bin/perl --with-cgi-dir=.html --with-minimum-uid=1000 --with-minimum-gid=1 --with-logging-syslog=cgiwrap --with-php=/usr/bin/php-cgi --with-php-interpreter --with-install-dir=/var/www/cgi-bin/ --with-check-shell --with-rlimit-core=0 --with-rlimit-cpu=60 --without-redirect-stderr --without-logging-file --with-wall --with-local-contact-email=web...@so... --with-cgiwrapd --without-nph And here's the configuration I'm using: AddHandler cgi-wrapper .php AddHandler cgi-wrapper .cgi AddHandler cgi-wrapper .sh AddHandler cgi-wrapper .pl Action cgi-wrapper /cgi-bin/cgiwrap Tim Gustafson SOE Webmaster UC Santa Cruz tj...@so... (831) 459-5354 -----Original Message----- From: Tuc at T-B-O-H.NET [mailto:ml...@t-...] Sent: Thursday, April 10, 2008 3:22 PM To: Tim Gustafson Cc: cgi...@li... Subject: Re: [cgiwrap-users] CGIWrap On Non-User Directories > > Hello! > > I'd like to use CGIWrap to execute PHP scripts as different users. The PHP > scripts are not located in user's home folders. When I try to run such a > script, for example: > > http://www.foo.com/wiki/blah/index.php > > I get an error that says "Couldn't find user 'wiki'." > > Is there any way to make CGIWrap work in this manner? > How did you compile up cgiwrap, and whats the configuration in your webserver? Tuc |
From: Tim G. <tj...@so...> - 2008-04-11 15:11:24
|
Jeremy, Thanks! I've looked into suPHP. One of my directives where I work is to only use Yum packages wherever possible, and the only Yum package for suPHP is compiled in the mode that you have to specify which user you want to execute the scripts as in the Apache configuration file, rather than using the script owner's ID, and that doesn't work for my environment. :\ Tim Gustafson SOE Webmaster UC Santa Cruz tj...@so... (831) 459-5354 -----Original Message----- From: Jeremy Chadwick [mailto:cg...@jd...] Sent: Thursday, April 10, 2008 5:07 PM To: Tim Gustafson Cc: cgi...@li... Subject: Re: [cgiwrap-users] CGIWrap On Non-User Directories If you can't manage to get cgiwrap to work in the way you'd like, there is an application called suPHP which does exactly what you desire. We use both (cgiwrap for CGIs and suPHP for PHP) in our hosting environment. -- | Jeremy Chadwick jdc at parodius.com | | Parodius Networking http://www.parodius.com/ | | UNIX Systems Administrator Mountain View, CA, USA | | Making life hard for others since 1977. PGP: 4BD6C0CB | On Thu, Apr 10, 2008 at 10:11:21AM -0700, Tim Gustafson wrote: > Hello! > > I'd like to use CGIWrap to execute PHP scripts as different users. The PHP > scripts are not located in user's home folders. When I try to run such a > script, for example: > > http://www.foo.com/wiki/blah/index.php > > I get an error that says "Couldn't find user 'wiki'." > > Is there any way to make CGIWrap work in this manner? > > Thanks! > > Tim Gustafson > SOE Webmaster > UC Santa Cruz > tj...@so... > (831) 459-5354 > > > > ------------------------------------------------------------------------- > This SF.net email is sponsored by the 2008 JavaOne(SM) Conference > Don't miss this year's exciting event. There's still time to save $100. > Use priority code J8TL2D2. > http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javao ne > _______________________________________________ > cgiwrap-users mailing list > cgi...@li... > https://lists.sourceforge.net/lists/listinfo/cgiwrap-users |
From: Jeremy C. <cg...@jd...> - 2008-04-11 00:07:23
|
If you can't manage to get cgiwrap to work in the way you'd like, there is an application called suPHP which does exactly what you desire. We use both (cgiwrap for CGIs and suPHP for PHP) in our hosting environment. -- | Jeremy Chadwick jdc at parodius.com | | Parodius Networking http://www.parodius.com/ | | UNIX Systems Administrator Mountain View, CA, USA | | Making life hard for others since 1977. PGP: 4BD6C0CB | On Thu, Apr 10, 2008 at 10:11:21AM -0700, Tim Gustafson wrote: > Hello! > > I'd like to use CGIWrap to execute PHP scripts as different users. The PHP > scripts are not located in user's home folders. When I try to run such a > script, for example: > > http://www.foo.com/wiki/blah/index.php > > I get an error that says "Couldn't find user 'wiki'." > > Is there any way to make CGIWrap work in this manner? > > Thanks! > > Tim Gustafson > SOE Webmaster > UC Santa Cruz > tj...@so... > (831) 459-5354 > > > > ------------------------------------------------------------------------- > This SF.net email is sponsored by the 2008 JavaOne(SM) Conference > Don't miss this year's exciting event. There's still time to save $100. > Use priority code J8TL2D2. > http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone > _______________________________________________ > cgiwrap-users mailing list > cgi...@li... > https://lists.sourceforge.net/lists/listinfo/cgiwrap-users |
From: Tuc at T-B-O-H.N. <ml...@t-...> - 2008-04-10 22:22:21
|
> > Hello! > > I'd like to use CGIWrap to execute PHP scripts as different users. The PHP > scripts are not located in user's home folders. When I try to run such a > script, for example: > > http://www.foo.com/wiki/blah/index.php > > I get an error that says "Couldn't find user 'wiki'." > > Is there any way to make CGIWrap work in this manner? > How did you compile up cgiwrap, and whats the configuration in your webserver? Tuc |
From: Tim G. <tj...@so...> - 2008-04-10 17:11:28
|
Hello! I'd like to use CGIWrap to execute PHP scripts as different users. The PHP scripts are not located in user's home folders. When I try to run such a script, for example: http://www.foo.com/wiki/blah/index.php I get an error that says "Couldn't find user 'wiki'." Is there any way to make CGIWrap work in this manner? Thanks! Tim Gustafson SOE Webmaster UC Santa Cruz tj...@so... (831) 459-5354 |
From: Tim G. <tj...@so...> - 2008-04-01 22:00:38
|
Brilliant! That fixed the problem. Thanks! -----Original Message----- From: Jeremy Chadwick [mailto:cg...@jd...] Sent: Tuesday, April 01, 2008 2:51 PM To: Tim Gustafson Cc: cgi...@li... Subject: Re: [cgiwrap-users] PHP Problems That sounds more like you're using the CLI PHP interpreter instead of the CGI PHP interpreter: $ echo '<?php echo "hello\n"; ?>' | php hello $ echo '<?php echo "hello\n"; ?>' | php-cgi X-Powered-By: PHP/5.2.3 Content-type: text/html hello You can use the -v flag on whatever PHP you pointed cgiwrap to, to find out what interpreter type you're trying to use. -- | Jeremy Chadwick jdc at parodius.com | | Parodius Networking http://www.parodius.com/ | | UNIX Systems Administrator Mountain View, CA, USA | | Making life hard for others since 1977. PGP: 4BD6C0CB | On Tue, Apr 01, 2008 at 12:06:17PM -0700, Tim Gustafson wrote: > Hello! > > I've got cgiwrap working for my user's web scripts. Everything works > great for Perl and shell scripts, but it seems that I have to add the > following to the top of all my PHP scripts to get them to work: > > echo "Content-Type: text/html\n"; > echo "\n"; > > I'd really like to not have to have all my users (there are 1,700 of > them) modify all their PHP scripts to make this work. > > So, my question is: how do I make this work without having them > rewrite all their scripts? > > Thanks for all your help! > > Tim > > > > ---------------------------------------------------------------------- > --- Check out the new SourceForge.net Marketplace. > It's the best place to buy or sell services for just about anything > Open Source. > http://ad.doubleclick.net/clk;164216239;13503038;w?http://sf.net/marke > tplace _______________________________________________ > cgiwrap-users mailing list > cgi...@li... > https://lists.sourceforge.net/lists/listinfo/cgiwrap-users |
From: Jeremy C. <cg...@jd...> - 2008-04-01 21:51:19
|
That sounds more like you're using the CLI PHP interpreter instead of the CGI PHP interpreter: $ echo '<?php echo "hello\n"; ?>' | php hello $ echo '<?php echo "hello\n"; ?>' | php-cgi X-Powered-By: PHP/5.2.3 Content-type: text/html hello You can use the -v flag on whatever PHP you pointed cgiwrap to, to find out what interpreter type you're trying to use. -- | Jeremy Chadwick jdc at parodius.com | | Parodius Networking http://www.parodius.com/ | | UNIX Systems Administrator Mountain View, CA, USA | | Making life hard for others since 1977. PGP: 4BD6C0CB | On Tue, Apr 01, 2008 at 12:06:17PM -0700, Tim Gustafson wrote: > Hello! > > I've got cgiwrap working for my user's web scripts. Everything works great > for Perl and shell scripts, but it seems that I have to add the following to > the top of all my PHP scripts to get them to work: > > echo "Content-Type: text/html\n"; > echo "\n"; > > I'd really like to not have to have all my users (there are 1,700 of them) > modify all their PHP scripts to make this work. > > So, my question is: how do I make this work without having them rewrite all > their scripts? > > Thanks for all your help! > > Tim > > > > ------------------------------------------------------------------------- > Check out the new SourceForge.net Marketplace. > It's the best place to buy or sell services for > just about anything Open Source. > http://ad.doubleclick.net/clk;164216239;13503038;w?http://sf.net/marketplace > _______________________________________________ > cgiwrap-users mailing list > cgi...@li... > https://lists.sourceforge.net/lists/listinfo/cgiwrap-users |
From: Tim G. <tj...@so...> - 2008-04-01 19:06:21
|
Hello! I've got cgiwrap working for my user's web scripts. Everything works great for Perl and shell scripts, but it seems that I have to add the following to the top of all my PHP scripts to get them to work: echo "Content-Type: text/html\n"; echo "\n"; I'd really like to not have to have all my users (there are 1,700 of them) modify all their PHP scripts to make this work. So, my question is: how do I make this work without having them rewrite all their scripts? Thanks for all your help! Tim |
From: Swigg, T. C <sw...@ls...> - 2008-02-21 10:37:45
|
Hi all, I am about to commence a very large migration to Red Hat from a site that has been using cgiwrap for many years. Has anyone successfully implemented cgiwrap on a 64 bit Red Hat Enterprise Linux 4 or 5? I would like to maintain backwards compatibility where possible and being able to use cgiwrap is a requirement. Regards Tom -- Copyright in this email and in any attachments belongs to London South Bank University. This email, and its attachments if any, may be confidential or legally privileged and is intended to be seen only by the person to whom it is addressed. If you are not the intended recipient, please note the following: (1) You should take immediate action to notify the sender and delete the original email and all copies from your computer systems; (2) You should not read copy or use the contents of the email nor disclose it or its existence to anyone else. The views expressed herein are those of the author(s) and should not be taken as those of London South Bank University, unless this is specifically stated. London South Bank University is a company limited by guarantee registered in England and Wales. The following details apply to London South Bank University: Company number - 00986761; Registered office and trading address - 103 Borough Road London SE1 0AA; VAT number - 778 1116 17; Email address - lsb...@ls... |
From: Duncan S. <dp...@si...> - 2008-02-02 15:39:06
|
cgiwrap might be interested in my error 404 generation kit. This is an ex= tract = from a larger project, hence the mutilple header files. It assumes you us= e GNU = autoconf, put the results in config.h and have an absolute path defined i= n = config.h. FYI as you can see the code in error404.c can be used to generate other e= rrors = too. The actual page is 404.html with the % signs substituted. The 404 pa= ge in = 404.html is visually indistinguishable from the default apache one. You c= an = distinguish it because the apache one is not valid XHTML. If I replaced t= he = fpiuts_entified with fputs nasty people might be able to get evil javascr= ipt = into the resulting page. Similar logic is applied in apache. There is an error404 function in error_page.h. Eliminating the excess > i= n = 404.html is left as an exercise as removing attatchments easily is not a = feature of my email client. Feel free is use either under either the GPL or cgiwrap licence, if this = is = different. If you want the files under some other licence then please con= tact = me privately. |
From: Tobia C. <tob...@re...> - 2008-02-01 17:21:53
|
sorry, sed -e "s/any/empty/" Tobia Caneschi ha scritto: > I'm sorry, you have absolutely right, but the same concept that i > explained was correct for binaries executed by cgiwrap. > if php or perl scripts executed returns any http headers apache return > 500 http code, in other case the 200 ok. But If cgiwrap > return 404 http code, the error was returned correctly to browser. > > T. > > Jeremy Chadwick ha scritto: > >> I think you need to look at the code more closely. :-) That printf() >> is never reached unless you're using the nph-specific cgiwrap binaries, >> specifically binaries that start with "nph-". >> >> Again: solving this problem is not as easy as you state it is. >> >> >> > > > ------------------------------------------------------------------------- > This SF.net email is sponsored by: Microsoft > Defy all challenges. Microsoft(R) Visual Studio 2008. > http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/ > _______________________________________________ > cgiwrap-users mailing list > cgi...@li... > https://lists.sourceforge.net/lists/listinfo/cgiwrap-users > > |
From: Tobia C. <tob...@re...> - 2008-02-01 17:19:11
|
I'm sorry, you have absolutely right, but the same concept that i explained was correct for binaries executed by cgiwrap. if php or perl scripts executed returns any http headers apache return 500 http code, in other case the 200 ok. But If cgiwrap return 404 http code, the error was returned correctly to browser. T. Jeremy Chadwick ha scritto: > I think you need to look at the code more closely. :-) That printf() > is never reached unless you're using the nph-specific cgiwrap binaries, > specifically binaries that start with "nph-". > > Again: solving this problem is not as easy as you state it is. > > |