cgiwrap-users

Re: [cgiwrap-users] how to customize cgiwrap environment?

[Adam O. S. <vo...@te...>]

There are two ways to deal with this.

I usually only use <cgiwrap> on other people's servers. On my own machines,
I run <cgwarp> another open-source wrapper that I wrote myself who's special
feature is a file in the HOME directory called ".cgi-env", which is a CGI
equivalient of ".bash_profile".

But I'm not suggesting you abandon <cgiwrap> for <cgwarp>. After all,
<cgiwrap> has been tested and scrutinized by many people, and <cgwarp>
has been tested and scrutinized by very few. So here comes suggestion
#2: I could put together a script for you that emulates <cgwarp> from
*within* <cgiwrap>. I would do this by adapting the scripts that I use
*myself* on other people's servers where <cgiwrap> or <SuExec> is the
User-ID setter.


If your <cgiwrap> CGI-bin is at the following URL:
  http://yourhost.yourdomain/cgi-bin/cgiwrap/yourid

Then the CGI-bin that emulates <cgwarp> would be:
  http://yourhost.yourdomain/cgi-bin/cgiwrap/yourid/exc

Using this emulation script, you can have the best of both worlds:
On one hand, your basis of user-ID setting is based on the more
thoroughly tested <cgiwrap>: and on the other hand, you'd have
an CGI-bin that recognizes an env-customization script (".cgi-env").




gk wrote:

> I have just installed cgiwrap-3.7.1 on linux server.
> I am trying to use it to run a script which requires a variable 
> XMLMAKE_HOME be set in the environment.
> Apparently, cgiwrap does not read $HOME/.bash_profile
> Is there any way to fix this, short of adding the environmental 
> variable to the root user's environment?
> Thanks,
>
> - Greg Keraunen
>
>
>
> -------------------------------------------------------
> This sf.net email is sponsored by:ThinkGeek
> Welcome to geek heaven.
> http://thinkgeek.com/sf
> _______________________________________________
> cgiwrap-users mailing list
> cgi...@li...
> https://lists.sourceforge.net/lists/listinfo/cgiwrap-users
>
>

Re: [cgiwrap-users] how to customize cgiwrap environment?

[Nathan N. <nn...@um...>]

CGIwrap should inherit the environment of the web server. So you could
just use apache's facilities for setting environment variables.

Alternatively, you could add a new call to CGIWRAP_SETENV() in
configure.in for cgiwrap, and add the required code in util.c. 

-- Nathan

On Fri, 2003-01-03 at 18:09, gk wrote:
> I have just installed cgiwrap-3.7.1 on linux server.
> I am trying to use it to run a script which requires a variable 
> XMLMAKE_HOME be set in the environment.
> Apparently, cgiwrap does not read $HOME/.bash_profile
> Is there any way to fix this, short of adding the environmental variable to 
> the root user's environment?
> Thanks,
> 
> - Greg Keraunen
> 
> 
> 
> -------------------------------------------------------
> This sf.net email is sponsored by:ThinkGeek
> Welcome to geek heaven.
> http://thinkgeek.com/sf
> _______________________________________________
> cgiwrap-users mailing list
> cgi...@li...
> https://lists.sourceforge.net/lists/listinfo/cgiwrap-users
-- 

------------------------------------------------------------
Nathan Neulinger                       EMail:  nn...@um...
University of Missouri - Rolla         Phone: (573) 341-4841
Computing Services                       Fax: (573) 341-4216

[cgiwrap-users] how to customize cgiwrap environment?

[gk <gk...@pr...>]

I have just installed cgiwrap-3.7.1 on linux server.
I am trying to use it to run a script which requires a variable 
XMLMAKE_HOME be set in the environment.
Apparently, cgiwrap does not read $HOME/.bash_profile
Is there any way to fix this, short of adding the environmental variable to 
the root user's environment?
Thanks,

- Greg Keraunen

RE: [cgiwrap-users] Need help with Strange Behavior

[Nathan N. <nn...@um...>]

No, that should not happen. CGIwrap only looks at the script iself, it
doesn't care in the least about any parameters/data passed to the
script.

Best place to look is the source itself. 

If Cgiwrap is the one responsible for not executing the script, you will
get an error message from cgiwrap. Anything else, it's because of the
script, or other settings on the web server. 

-- Nathan

On Sun, 2002-12-15 at 13:34, Kenny Smith wrote:
> Hi Nathan,
> 
> Do you know where I can find a list of the security checks that cgiwrap goes
> through before choosing to execute the target CGI?
> 
> Have you ever experienced a situation where cgiwrap would execute a script
> with some cgi params but not others? Like..
> 
> ".../script.cgi?user_param=utilities" would fail, but
> ".../script.cgi?user_param=stuff" would succeed?
> 
> Thanks,
> 
> Kenny Smith
> JournalScape.com
> 
> > -----Original Message-----
> > From: cgi...@li...
> > [mailto:cgi...@li...]On Behalf Of
> > Neulinger, Nathan
> > Sent: Thursday, December 12, 2002 2:45 PM
> > To: Kenny Smith; cgi...@li...
> > Subject: RE: [cgiwrap-users] Need help with Strange Behavior
> >
> >
> > Try running with cgiwrapd if they support it.
> >
> > CGIwrap doesn't generate that error, the web server does, and it usually
> > occurs when the script isn't outputting a content-type or errors similar
> > to that. Or when it outputs nothing at all.
> >
> > -- Nathan
> >
> > ------------------------------------------------------------
> > Nathan Neulinger                       EMail:  nn...@um...
> > University of Missouri - Rolla         Phone: (573) 341-4841
> > Computing Services                       Fax: (573) 341-4216
> >
> >
> > > -----Original Message-----
> > > From: Kenny Smith [mailto:ke...@jo...]
> > > Sent: Thursday, December 12, 2002 4:37 PM
> > > To: cgi...@li...
> > > Subject: [cgiwrap-users] Need help with Strange Behavior
> > >
> > >
> > > Hello all,
> > >
> > > My ISP uses cgiwrap and I'm having some strange behavior.
> > > Unfortunately,
> > > their support people don't know anything about it, so they
> > > can't/won't
> > > help me.
> > >
> > > I have a script that loads one page fine, I click on a link
> > > (which goes
> > > back to the same script with different variables) and that
> > > works fine,
> > > then I do another one and it fails with a "Premature end of Script
> > > Headers".
> > >
> > > However, if I edit the script and force the CGI variables to
> > > simulate a
> > > click on the link that caused the "Premature..." then the page loads
> > > just fine. So I know the script compiles and I know the code which
> > > should be executed works fine... but something is stopping it.
> > >
> > > Is there a FAQ (I've been unable to find one that addresses Premature
> > > End of Script Headers questions), or can someone explain to
> > > me the cases
> > > in which cgiwrap would log a "Premature.." when the script
> > > compiles and
> > > is owned by me and is chmod 755 (as are all of the
> > > directories leading
> > > to my home dir)?
> > >
> > > Thanks,
> > > Kenny Smith
> > > JournalScape.com
> > >
> > >
> > >
> > > -------------------------------------------------------
> > > This sf.net email is sponsored by:
> > > With Great Power, Comes Great Responsibility
> > > Learn to use your power at OSDN's High Performance Computing Channel
> > > http://hpc.devchannel.org/
> > > _______________________________________________
> > > cgiwrap-users mailing list
> > > cgi...@li...
> > > https://lists.sourceforge.net/lists/listinfo/cgiwrap-users
> > >
> >
> >
> > -------------------------------------------------------
> > This sf.net email is sponsored by:
> > With Great Power, Comes Great Responsibility
> > Learn to use your power at OSDN's High Performance Computing Channel
> > http://hpc.devchannel.org/
> > _______________________________________________
> > cgiwrap-users mailing list
> > cgi...@li...
> > https://lists.sourceforge.net/lists/listinfo/cgiwrap-users
-- 

------------------------------------------------------------
Nathan Neulinger                       EMail:  nn...@um...
University of Missouri - Rolla         Phone: (573) 341-4841
Computing Services                       Fax: (573) 341-4216

RE: [cgiwrap-users] Need help with Strange Behavior

[Kenny S. <ke...@jo...>]

Hi Nathan,

Do you know where I can find a list of the security checks that cgiwrap goes
through before choosing to execute the target CGI?

Have you ever experienced a situation where cgiwrap would execute a script
with some cgi params but not others? Like..

".../script.cgi?user_param=utilities" would fail, but
".../script.cgi?user_param=stuff" would succeed?

Thanks,

Kenny Smith
JournalScape.com

> -----Original Message-----
> From: cgi...@li...
> [mailto:cgi...@li...]On Behalf Of
> Neulinger, Nathan
> Sent: Thursday, December 12, 2002 2:45 PM
> To: Kenny Smith; cgi...@li...
> Subject: RE: [cgiwrap-users] Need help with Strange Behavior
>
>
> Try running with cgiwrapd if they support it.
>
> CGIwrap doesn't generate that error, the web server does, and it usually
> occurs when the script isn't outputting a content-type or errors similar
> to that. Or when it outputs nothing at all.
>
> -- Nathan
>
> ------------------------------------------------------------
> Nathan Neulinger                       EMail:  nn...@um...
> University of Missouri - Rolla         Phone: (573) 341-4841
> Computing Services                       Fax: (573) 341-4216
>
>
> > -----Original Message-----
> > From: Kenny Smith [mailto:ke...@jo...]
> > Sent: Thursday, December 12, 2002 4:37 PM
> > To: cgi...@li...
> > Subject: [cgiwrap-users] Need help with Strange Behavior
> >
> >
> > Hello all,
> >
> > My ISP uses cgiwrap and I'm having some strange behavior.
> > Unfortunately,
> > their support people don't know anything about it, so they
> > can't/won't
> > help me.
> >
> > I have a script that loads one page fine, I click on a link
> > (which goes
> > back to the same script with different variables) and that
> > works fine,
> > then I do another one and it fails with a "Premature end of Script
> > Headers".
> >
> > However, if I edit the script and force the CGI variables to
> > simulate a
> > click on the link that caused the "Premature..." then the page loads
> > just fine. So I know the script compiles and I know the code which
> > should be executed works fine... but something is stopping it.
> >
> > Is there a FAQ (I've been unable to find one that addresses Premature
> > End of Script Headers questions), or can someone explain to
> > me the cases
> > in which cgiwrap would log a "Premature.." when the script
> > compiles and
> > is owned by me and is chmod 755 (as are all of the
> > directories leading
> > to my home dir)?
> >
> > Thanks,
> > Kenny Smith
> > JournalScape.com
> >
> >
> >
> > -------------------------------------------------------
> > This sf.net email is sponsored by:
> > With Great Power, Comes Great Responsibility
> > Learn to use your power at OSDN's High Performance Computing Channel
> > http://hpc.devchannel.org/
> > _______________________________________________
> > cgiwrap-users mailing list
> > cgi...@li...
> > https://lists.sourceforge.net/lists/listinfo/cgiwrap-users
> >
>
>
> -------------------------------------------------------
> This sf.net email is sponsored by:
> With Great Power, Comes Great Responsibility
> Learn to use your power at OSDN's High Performance Computing Channel
> http://hpc.devchannel.org/
> _______________________________________________
> cgiwrap-users mailing list
> cgi...@li...
> https://lists.sourceforge.net/lists/listinfo/cgiwrap-users

Re: [cgiwrap-users] Need help with Strange Behavior

[Kenny S. <ke...@jo...>]

Hi Nathan,

I'm talking to them now but they really seem to have their heads in a 
very dark place. I may need to come back to you soon. :)

Thanks,
Kenny

Neulinger, Nathan wrote:

> Try running with cgiwrapd if they support it.
>
> CGIwrap doesn't generate that error, the web server does, and it usually
> occurs when the script isn't outputting a content-type or errors similar
> to that. Or when it outputs nothing at all.
>
> -- Nathan
>
> ------------------------------------------------------------
> Nathan Neulinger                       EMail:  nn...@um...
> University of Missouri - Rolla         Phone: (573) 341-4841
> Computing Services                       Fax: (573) 341-4216
>
>
>
> >-----Original Message-----
> >From: Kenny Smith [mailto:ke...@jo...]
> >Sent: Thursday, December 12, 2002 4:37 PM
> >To: cgi...@li...
> >Subject: [cgiwrap-users] Need help with Strange Behavior
> >
> >
> >Hello all,
> >
> >My ISP uses cgiwrap and I'm having some strange behavior.
> >Unfortunately,
> >their support people don't know anything about it, so they
> >can't/won't
> >help me.
> >
> >I have a script that loads one page fine, I click on a link
> >(which goes
> >back to the same script with different variables) and that
> >works fine,
> >then I do another one and it fails with a "Premature end of Script
> >Headers".
> >
> >However, if I edit the script and force the CGI variables to
> >simulate a
> >click on the link that caused the "Premature..." then the page loads
> >just fine. So I know the script compiles and I know the code which
> >should be executed works fine... but something is stopping it.
> >
> >Is there a FAQ (I've been unable to find one that addresses Premature
> >End of Script Headers questions), or can someone explain to
> >me the cases
> >in which cgiwrap would log a "Premature.." when the script
> >compiles and
> >is owned by me and is chmod 755 (as are all of the
> >directories leading
> >to my home dir)?
> >
> >Thanks,
> >Kenny Smith
> >JournalScape.com
> >
> >
> >
> >-------------------------------------------------------
> >This sf.net email is sponsored by:
> >With Great Power, Comes Great Responsibility
> >Learn to use your power at OSDN's High Performance Computing Channel
> >http://hpc.devchannel.org/
> >_______________________________________________
> >cgiwrap-users mailing list
> >cgi...@li...
> >https://lists.sourceforge.net/lists/listinfo/cgiwrap-users
> >
>
>
>
> -------------------------------------------------------
> This sf.net email is sponsored by:
> With Great Power, Comes Great Responsibility
> Learn to use your power at OSDN's High Performance Computing Channel
> http://hpc.devchannel.org/
> _______________________________________________
> cgiwrap-users mailing list
> cgi...@li...
> https://lists.sourceforge.net/lists/listinfo/cgiwrap-users
>

RE: [cgiwrap-users] Need help with Strange Behavior

[Neulinger, N. <nn...@um...>]

Try running with cgiwrapd if they support it.=20

CGIwrap doesn't generate that error, the web server does, and it usually
occurs when the script isn't outputting a content-type or errors similar
to that. Or when it outputs nothing at all.

-- Nathan

------------------------------------------------------------
Nathan Neulinger                       EMail:  nn...@um...
University of Missouri - Rolla         Phone: (573) 341-4841
Computing Services                       Fax: (573) 341-4216


> -----Original Message-----
> From: Kenny Smith [mailto:ke...@jo...]=20
> Sent: Thursday, December 12, 2002 4:37 PM
> To: cgi...@li...
> Subject: [cgiwrap-users] Need help with Strange Behavior
>=20
>=20
> Hello all,
>=20
> My ISP uses cgiwrap and I'm having some strange behavior.=20
> Unfortunately,=20
> their support people don't know anything about it, so they=20
> can't/won't=20
> help me.
>=20
> I have a script that loads one page fine, I click on a link=20
> (which goes=20
> back to the same script with different variables) and that=20
> works fine,=20
> then I do another one and it fails with a "Premature end of Script=20
> Headers".
>=20
> However, if I edit the script and force the CGI variables to=20
> simulate a=20
> click on the link that caused the "Premature..." then the page loads=20
> just fine. So I know the script compiles and I know the code which=20
> should be executed works fine... but something is stopping it.
>=20
> Is there a FAQ (I've been unable to find one that addresses Premature=20
> End of Script Headers questions), or can someone explain to=20
> me the cases=20
> in which cgiwrap would log a "Premature.." when the script=20
> compiles and=20
> is owned by me and is chmod 755 (as are all of the=20
> directories leading=20
> to my home dir)?
>=20
> Thanks,
> Kenny Smith
> JournalScape.com
>=20
>=20
>=20
> -------------------------------------------------------
> This sf.net email is sponsored by:
> With Great Power, Comes Great Responsibility=20
> Learn to use your power at OSDN's High Performance Computing Channel
> http://hpc.devchannel.org/
> _______________________________________________
> cgiwrap-users mailing list
> cgi...@li...
> https://lists.sourceforge.net/lists/listinfo/cgiwrap-users
>=20

[cgiwrap-users] Need help with Strange Behavior

[Kenny S. <ke...@jo...>]

Hello all,

My ISP uses cgiwrap and I'm having some strange behavior. Unfortunately, 
their support people don't know anything about it, so they can't/won't 
help me.

I have a script that loads one page fine, I click on a link (which goes 
back to the same script with different variables) and that works fine, 
then I do another one and it fails with a "Premature end of Script 
Headers".

However, if I edit the script and force the CGI variables to simulate a 
click on the link that caused the "Premature..." then the page loads 
just fine. So I know the script compiles and I know the code which 
should be executed works fine... but something is stopping it.

Is there a FAQ (I've been unable to find one that addresses Premature 
End of Script Headers questions), or can someone explain to me the cases 
in which cgiwrap would log a "Premature.." when the script compiles and 
is owned by me and is chmod 755 (as are all of the directories leading 
to my home dir)?

Thanks,
Kenny Smith
JournalScape.com

[cgiwrap-users] RE: CGIWrap

[Neulinger, N. <nn...@um...>]

You should have said this was a cobalt. I refuse to provide any bug
handling or support of cobalt installations, as they are running a
heavily customized/changed version of cgiwrap that does not behave
anything like a standard install of cgiwrap.=20
=20
Normal install of cgiwrap most definately does not include that
"/cgi-bin/..." stuff in the PATH_INFO. I use PATH_INFO all the time. As
for PATH_TRANSLATED, I believe the current behavior of the cvs version
of cgiwrap is the most correct so far.=20
=20
-- Nathan

------------------------------------------------------------
Nathan Neulinger                       EMail:  nn...@um...
University of Missouri - Rolla         Phone: (573) 341-4841
Computing Services                       Fax: (573) 341-4216


	-----Original Message-----
	From: Richard J. Hughes [mailto:rh...@li...]=20
	Sent: Friday, December 06, 2002 11:24 AM
	To: Neulinger, Nathan
	Subject: Re: CGIWrap
=09
=09
	Hi Nathan,
=09
	Thanks for replying.
=09
	I.
	Here's a site not running CGIWrap
	http://www.lilikoi.com/cgi-bin/testcgi.cgi/forums/general/?P0
	PATH_INFO=20
	                             /forums/general/
	PATH_TRANSLATED=20
=09
/home/sites/site153/web/forums/general
=09
	II.
	Here's a site running an old version of CGIWrap
	http://www.naznet.com/cgi-bin/testcgi.cgi/fellowship/forum1/?P0
	PATH_INFO=20
=09
/cgi-bin/testcgi.cgi/fellowship/forum1/
	PATH_TRANSLATED=20
=09
/home/sites/site32/web/cgi-bin/testcgi.cgi
=09
	III.
	Here's a site running some new version of CGIWrap.
=09
http://www.alvinnazarene.org/cgi-bin/testcgi.cgi/forums/general/?P0
=09
	PATH_INFO=20
=09
/cgi-bin/testcgi.cgi/forums/general/
	PATH_TRANSLATED=20
=09
/home/sites/site175/web/cgi-bin/testcgi.cgi/forums/general/
=09
=09
	As you can see, CGIWrap has never given the correct PATH_INFO
and PATH_TRANSLATED.  I compensated for this with your earlier version,
but it's now become a moving target.
=09
	It should either be right or consistently wrong :-)
=09
	I don't know which versions of CGIWrap these sites are running.
I've been getting all this information 2nd hand.  I can try to find out,
though, if that would be helpful.
=09
	Cheers,
=09
	Richard
=09
	Dr. Richard J. Hughes                     Tel: +1 (619) 405-4247
	Lilikoi Software, Inc.                        Fax: +1 (858)
487-0451
=09
rh...@li...

	  For communication on the World Wide Web
	     ... Ceilidh!

	  http://www.lilikoi.com <http://www.lilikoi.com/>=20

[cgiwrap-users] Re: CGIWrap

[Nathan N. <nn...@um...>]

Please send the URL, cgiwrapd output, and description of what you
believe the output should be. Also, what specific version are they
running?

No one will ever give me concrete information as to what those variables
are supposed to contain. I have set them as close to what the specs say
as I can with the information I have. 

-- Nathan

On Fri, 2002-12-06 at 00:34, Richard J. Hughes wrote:
> Dear Nathan,
> 
> Your new (?) version of CGIWrap appends the cgi-bin path as well as
> the CGI script/program name to the end of both PATH_INFO and
> PATH_TRANSLATED.
> 
> ===
> Here is the final word from our ISP: 
> 
>         Dear customer, this environment variable is differing from
>         that on the 
>         other servers because 216.40.198.11 has been upgraded and is
>         using a newer 
>         version of cgiwrap. You will need to modify your script to
>         compensate for 
>         this change. cgiwrap is executing properly on all the servers
> ===
> 
> This particular ISP doesn't seem to understand that CGIWrap is
> malfunctioning.  
> 
> I can modify Ceilidh to work around this problem, but do you have any
> plan to fix CGIWrap in the near future?
> 
> Thanks,
> 
> Richard
> 
> Dr. Richard J. Hughes                     Tel: +1 (619) 405-4247
> Lilikoi Software, Inc.                        Fax: +1 (858) 487-0451
>                                                     
> rh...@li...
>   For communication on the World Wide Web
>      ... Ceilidh!
>   http://www.lilikoi.com
-- 

------------------------------------------------------------
Nathan Neulinger                       EMail:  nn...@um...
University of Missouri - Rolla         Phone: (573) 341-4841
Computing Services                       Fax: (573) 341-4216

Re: [cgiwrap-users] Authentication without .htaccess

[Nathan N. <nn...@um...>]

> > Without the central DB, your best bet would probably be to front-end the
> > twiki scripts with a cgi (that doesn't read it's STDIN) that uses
> > cookies for authentication. Or find a cookie-auth plugin for twiki if
> > something like that exists.
> 
> Yes, and that's what I'm really looking for. I just haven't been able to
> find either. There's a plugin for TWiki that enables the use of cookies
> for sessions but it doesn't affect the authentication in any way. Most
> authentication cgi scripts use .htaccess and those which don't, usually
> are more complex than what I need.
> 
> If anyone knows of a script that could serve as a "front-end" for the
> TWiki scripts, please let me know. I'm kind of in a hurry here, the
> site's supposed go public in a couple of days...
> 

I'm not aware of anything pre-written, but it looks like it wouldn't
be too difficult to write a small front-end script to do it.

Do you have your twiki install in htdocs/ and running the stuff in the 
bin/ dir via cgiwrap? So you can take care of the .htaccess stuff for
all of the files other than the scripts?

-- Nathan

------------------------------------------------------------
Nathan Neulinger                       EMail:  nn...@um...
University of Missouri - Rolla         Phone: (573) 341-4841
Computing Services                       Fax: (573) 341-4216

Re: [cgiwrap-users] Authentication without .htaccess

[Eetu H. <eh...@ik...>]

On la, 2002-11-30 at 01:52, Nathan Neulinger wrote:
> I've actually looked at this a bit recently, but not thoroughly. The
> approach I take with cgiwrap and authentication is to have all or
> nothing authentication w/ one database.
> 
> Problem is - there is no way to trigger/require authentication from a
> cgi script without help from the web server. Apache does not export the
> HTTP_AUTHORIZATION value to scripts (for good reason). So, you pretty
> much have to have a central db for authentication.

I understand this and I'm not complaining about it. It's just that the
computing facilities administration of the university isn't too helpful,
to say the least.

> Without the central DB, your best bet would probably be to front-end the
> twiki scripts with a cgi (that doesn't read it's STDIN) that uses
> cookies for authentication. Or find a cookie-auth plugin for twiki if
> something like that exists.

Yes, and that's what I'm really looking for. I just haven't been able to
find either. There's a plugin for TWiki that enables the use of cookies
for sessions but it doesn't affect the authentication in any way. Most
authentication cgi scripts use .htaccess and those which don't, usually
are more complex than what I need.

If anyone knows of a script that could serve as a "front-end" for the
TWiki scripts, please let me know. I'm kind of in a hurry here, the
site's supposed go public in a couple of days...

--
Eetu Huisman <eh...@ik...>

> On Fri, 2002-11-29 at 12:49, Eetu Huisman wrote:
> > I'm trying to set up TWiki for the site of my students' organization.
> > The site is hosted by the university and the environment is best
> > described as paranoid. After a long search I finally found a content
> > management system which is at least somehow compatible with cgiwrap, but
> > now I'm in trouble...
> > 
> > I've read all the discussions in the archive regarding cgiwrap's problem
> > with .htaccess and tried to get the administration of the server to help
> > me, but it wasn't possible because the excact server doesn't have a
> > centralized user database and using one from a remote server would force
> > the use of ssl, which isn't available.
> > 
> > I guess many people have solved this problem before me and now I'm
> > begging for advice. I'm in no way a professional/experienced perl or cgi
> > (let alone http (yes, I do mean the protocol)) programmer, so I'd prefer
> > a readymade authentication library/script which could be used to replace
> > .htaccess and .htpasswd in cgi scripts.
> > 
> > TWiki's registration uses .htpasswd, so I would prefer this alternative
> > authentication method to use it as well, but this is of course not
> > obligatory.

Re: [cgiwrap-users] Authentication without .htaccess

[Nathan N. <nn...@um...>]

I've actually looked at this a bit recently, but not thoroughly. The
approach I take with cgiwrap and authentication is to have all or
nothing authentication w/ one database.

Problem is - there is no way to trigger/require authentication from a
cgi script without help from the web server. Apache does not export the
HTTP_AUTHORIZATION value to scripts (for good reason). So, you pretty
much have to have a central db for authentication.

Without the central DB, your best bet would probably be to front-end the
twiki scripts with a cgi (that doesn't read it's STDIN) that uses
cookies for authentication. Or find a cookie-auth plugin for twiki if
something like that exists.

-- Nathan

On Fri, 2002-11-29 at 12:49, Eetu Huisman wrote:
> I'm trying to set up TWiki for the site of my students' organization.
> The site is hosted by the university and the environment is best
> described as paranoid. After a long search I finally found a content
> management system which is at least somehow compatible with cgiwrap, but
> now I'm in trouble...
> 
> I've read all the discussions in the archive regarding cgiwrap's problem
> with .htaccess and tried to get the administration of the server to help
> me, but it wasn't possible because the excact server doesn't have a
> centralized user database and using one from a remote server would force
> the use of ssl, which isn't available.
> 
> I guess many people have solved this problem before me and now I'm
> begging for advice. I'm in no way a professional/experienced perl or cgi
> (let alone http (yes, I do mean the protocol)) programmer, so I'd prefer
> a readymade authentication library/script which could be used to replace
> .htaccess and .htpasswd in cgi scripts.
> 
> TWiki's registration uses .htpasswd, so I would prefer this alternative
> authentication method to use it as well, but this is of course not
> obligatory.
-- 

------------------------------------------------------------
Nathan Neulinger                       EMail:  nn...@um...
University of Missouri - Rolla         Phone: (573) 341-4841
Computing Services                       Fax: (573) 341-4216

[cgiwrap-users] Authentication without .htaccess

[Eetu H. <eh...@ik...>]

I'm trying to set up TWiki for the site of my students' organization.
The site is hosted by the university and the environment is best
described as paranoid. After a long search I finally found a content
management system which is at least somehow compatible with cgiwrap, but
now I'm in trouble...

I've read all the discussions in the archive regarding cgiwrap's problem
with .htaccess and tried to get the administration of the server to help
me, but it wasn't possible because the excact server doesn't have a
centralized user database and using one from a remote server would force
the use of ssl, which isn't available.

I guess many people have solved this problem before me and now I'm
begging for advice. I'm in no way a professional/experienced perl or cgi
(let alone http (yes, I do mean the protocol)) programmer, so I'd prefer
a readymade authentication library/script which could be used to replace
.htaccess and .htpasswd in cgi scripts.

TWiki's registration uses .htpasswd, so I would prefer this alternative
authentication method to use it as well, but this is of course not
obligatory.

-- 
"You know how people always say that thing about artists making work 
with political content? That they're "preaching to the converted"? 
Well, we're totally into that." -Johanna Fateman, Le Tigre, 
http://www.laweekly.com/ink/01/19/music-davis.php

[cgiwrap-users] (no subject)

[Tom C. <tom...@op...>]

I have a cobalt raq 4 server which is has cgiwrap built in. My machine was
hacked not long ago and I had to reformat it and rebuild from scratch. Now
none of the cgi scripts work on my server. Everything else seems fine
though.

I have tested all the scripts from command line and they are all fine. I
have mailed the cobalt list and got about 20 replies about check
permissions, check for ^M in the files, check for ownership etc, etc and
nothing is helping.

For testing purposes I build a simple script like this:

  #!/bin/sh
  echo Content-type: text/plain
  echo
  printenv

it works fine from command line but when I run it through cgiwrapd it
returns me:

"""
Initializing Logging
Redirecting STDERR to STDOUT

Cobalt RaQ virtual site CGI wrapper

Setting SIGXCPU to default behaviour

Environment Variables:
     QUERY_STRING: ''
      SCRIPT_NAME: '/cgiwrapDir/cgiwrapd'
  SCRIPT_FILENAME: '/usr/cgiwrap/cgiwrapd'
"""

Which tells me nothing at all.

My question is how do I debug cgiwrap? obviously cgiwrap is not executing
the script, but why?

I assume that the script violates some rule set in cgiwrap, but how do I
find out which one? are there any logs? or is this just a trial and error
guessing process? Because cgiwrap is precompiled in the raq os install I
dont know how it was configured, so I dont even know what rules are set, so
how do I interrogate cgiwrap to see how it was copiled?

I have spent 3 days on this one script so far and I really dont feel like
more guessing.

Any help appreciated,
Tom

[cgiwrap-users] cgiwrap and php

[Isabelle M. <Isa...@ci...>]

Bonjour,

I have installed php v 4.2.3 on a solaris 2.8 machine.

Then, I configure cgiwrap with the following options:

./configure --with-php-interpreter --with-php=/usr/local/bin/php --with-local-contact-email=web...@un... --with-inst
all-dir=/data/cgi-bin --with-cgi-dir=scripts  --with-httpd-user=wwwdem  --without-check-owner --without-check-group-writ
able

While cgiwrap is running perfectly for some other scripts (shell or perl) , when I try to

access a php page located in scripts directory of user imoullet via the URL:

http://myserver/cgi-bin/cgiwrap/imoullet/test.php,

I get an internal server error . The message in the web server error logfile is:

[Mon Nov 18 17:11:57 2002] [error] [client 130.223.8.50] Premature end of script headers: cgiwrap

My test.php file has 644 privilege.

Here is the output I get from cgiwrapd:

*******************************************************

Initializing Logging
Redirecting STDERR to STDOUT

Setting SIGXCPU to default behaviour

Environment Variables:
     QUERY_STRING: ''
      SCRIPT_NAME: '/cgi-bin/cgiwrapd'
  SCRIPT_FILENAME: '/usr/local/apache2/cgi-bin/cgiwrapd'
     REDIRECT_URL: '<NULL>'
        PATH_INFO: '/imoullet/test.php'
  PATH_TRANSLATED: '/usr/local/bscw/imoullet/test.php'
      REMOTE_USER: '<NULL>'
      REMOTE_HOST: '<NULL>'
      REMOTE_ADDR: '130.223.8.50'

Trying to extract user from PATH_INFO.
Retrieved User Name:  'imoullet'

User Data Retrieved:
     UserID: 'imoullet'
        UID: '12247'
        GID: '10010'
   Home Dir: '/usr/local/home/imoullet'

Script Base Directory:  '/usr/local/home/imoullet/scripts'
        Fetching script string

Trying to extract script from PATH_INFO
Extracted PATH_INFO 'test.php'
        Building script path

        Condensing slashes.

        Script Relative Path:  'test.php'
        Script Absolute Path:  '/usr/local/home/imoullet/scripts/test.php'
        Checking for special interpreted script (php).
        Interpreter Path:  '/usr/local/bin/php'

Fixing Environment Variables.

Environment Variables:
     QUERY_STRING: ''
      SCRIPT_NAME: '/cgi-bin/cgiwrapd/imoullet/test.php'
  SCRIPT_FILENAME: '/usr/local/home/imoullet/scripts/test.php'
     REDIRECT_URL: '<NULL>'
        PATH_INFO: ''
  PATH_TRANSLATED: '/usr/local/bscw'
      REMOTE_USER: '<NULL>'
      REMOTE_HOST: '<NULL>'
      REMOTE_ADDR: '130.223.8.50'

UIDs/GIDs Changed To:
   RUID: '12247'
   EUID: '12247'
   RGID: '10010'
   EGID: '10010'

Changing current directory to '/usr/local/home/imoullet/scripts'

Output of script follows:
=====================================================

*******************************************************

My test.php file has 644 privilege. The message in the web server error logfile is:

[Mon Nov 18 17:11:57 2002] [error] [client 130.223.8.50] Premature end of script headers: cgiwrap
~

Any idea ?

Thnaks for your reply

--
Isabelle Moullet
Centre Informatique
Universite de Lausanne
email: isa...@ci...

[cgiwrap-users] cgiwrap gives 'permission denied' when".cgi" omitted from URL

[Neil B. <ne...@fn...>]

   I have had a rummage around various mailing list archives & docs., 
and I don't pretend to completely follow the various configs. that are 
in place;  also, I ought to point out that this is running on a Cobalt 
RaQ where my site is hosted (i.e., not my box).


   Essentially, I wanted to set up Apache's "MultiViews" so that I could 
omit ".cgi" from script URLs, and make use of the PATH_INFO data.

   However, if I run my script normally (and, as configured by the RaQ 
somehow, through cgiwrap), it works.  As soon as I omit the ".cgi", I 
get "permission denied" from cgiwrap.  Multiviews is working OK for 
other (non-CGI) files.

   I'm intrigued by the following from cgiwrapd:

<http://my.site/cgiwrapDir/cgiwrapd/cgi-bin/script.cgi>

	Script Relative Path:  'cgi-bin/env.cgi'
	Script Absolute Path:  '/home/sites/site37/web/cgi-bin/env.cgi'


   But:
<http://my.site/cgiwrapDir/cgiwrapd/cgi-bin/script>

	Script Relative Path:  'cgi-bin'
	Script Absolute Path:  '/home/sites/site37/web/cgi-bin'

   The script filename's gone?  Seems to me cgiwrap is then trying to 
'run' the cgi-bin directory -> 'permission denied' (as opposed to the 
no-such-file error I get if I give a diff. script name).


   It looks like the cgiwrap running on the box is a Cobalt-modified 3.7 
(cgiwrap-3.7-C1.src.rpm - but I can no longer find this on the Net).


   On a similar note, is it right that I get "/cgi-bin/script/" on the 
front of my script's PATH_INFO?  I saw a hint in a '97 posting that that 
was expected (as it's the correct PATH_INFO for cgiwrap itself) but it 
seems a but odd, esp. as cgiwrapd purports to be doing a 'Fixing 
Environment Variables' step, and it meansd that mt CGIs need to be aware 
that they're being run from cgiwrap.

-- 
[neil@fnx ~]# rm -f .signature
[neil@fnx ~]# ls -l .signature
ls: .signature: No such file or directory
[neil@fnx ~]# exit

Re: [cgiwrap-users] Basic cgiwrap problems

[Daniel L. <ml-...@lo...>]

hi,

> Should I attempt to remove and recompile? Or can I reconfigure it?

Well, reconfiguring would require you to recompile/replace it. Please
don't blame me if something goes wrong -- I have never dealt with RAQ
servers before.

-daniel

Re: [cgiwrap-users] Basic cgiwrap problems

[Huw J. <huw...@so...>]

Thanks for your swift response. The cgiwrap is ready installed on a Raq3.
Should I attempt to remove and recompile? Or can I reconfigure it?

That link is a great help btw.

Thanks again

Huw

> From: Daniel Lorch <ml-...@lo...>
> Date: Tue, 29 Oct 2002 15:08:22 +0100
> To: cgi...@li...
> Subject: Re: [cgiwrap-users] Basic cgiwrap problems
> 
> hi,
> 
>> CGIWrap Error: Execution of this script not permitted
>> 
>> Execution of (root) is not permitted for the following reason:
>> 
>> User not Privileged.
> 
> Did you compile with
> 
> --with-minimum-uid
> 
> http://cgiwrap.unixtools.org/install.html
> 
> ?
> 
> -daniel
> 
> 
> -------------------------------------------------------
> This sf.net email is sponsored by:ThinkGeek
> Welcome to geek heaven.
> http://thinkgeek.com/sf
> _______________________________________________
> cgiwrap-users mailing list
> cgi...@li...
> https://lists.sourceforge.net/lists/listinfo/cgiwrap-users

Re: [cgiwrap-users] Basic cgiwrap problems

[Daniel L. <ml-...@lo...>]

hi,

> CGIWrap Error: Execution of this script not permitted
> 
> Execution of (root) is not permitted for the following reason:
> 
> User not Privileged.

Did you compile with

  --with-minimum-uid

  http://cgiwrap.unixtools.org/install.html

?

-daniel

[cgiwrap-users] Basic cgiwrap problems

[Huw J. <huw...@so...>]

Hi there,
    I'm having some problems getting a cgiwrap working with the correct
privs. I'm using a Cobalt raq3i and have a formmail script sat in the web
directory. When I try to call the script in I get:

CGIWrap Error: Execution of this script not permitted

Execution of (root) is not permitted for the following reason:

User not Privileged.

I understand that the cgiwrap needs to be configured with the same userid as
the httpd.conf (which is httpd). I can't seem to find where to do this.

Also where should the cgiwrap live? At the moment I've got it in
/usr/cgiwrap and also in the cgi-bin of the users site. Where should it go
and how is it referenced?

I really don't know much about cgi and all the documentation available seems
to be a little vague unless you have some working knowledge of cgi, which I
do not.

Thanks in advance for you help.

Kind regards

Huw Jenkins
Freedom255

[cgiwrap-users] ScriptAliasMatch - So close, too far

[Tuc <tu...@tt...>]

Hi,

	We were very encouraged by Jon Miles ScriptAliasMatch as mentioned
in http://groups.yahoo.com/group/cgiwrap/message/1407 . We just put it into
production today after a week or two of testing, and it seems to work 
perfectly!

		SEEMS!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

	We just found the flaw..... .htaccess'es aren't abided by at all!

	I could use some help, otherwise I'll fall back to the way we've
been doing it previously.

		Thanks, Tuc/TTSG Internet Services, Inc.

Re: [cgiwrap-users] Error "Cannot change to user's CGI directory via chdir()!"

[Nathan N. <nn...@um...>]

I have it set up on one of my servers with this wrapper script:

#!/umr/bin/perl

if ( $ENV{PATH_INFO} eq "" )
{
        $ENV{PATH_INFO} = "/";
        $ENV{SCRIPT_NAME} = "/auth-cgi-bin/cgiwrap/viewcvs/viewcvs";
}

exec "/umr/s/viewcvs/install/cgi/viewcvs.cgi"

I haven't accessed it in a while, but that worked fine at one point.

-- Nathan


On Thu, 2002-10-03 at 05:39, Piotr Klaban wrote:
> On Thu, Oct 03, 2002 at 11:51:41AM +0300, Simo Salminen wrote:
> > 2. cgiwrap executes it OK, but viewcvs detects its missing trailing
> >  backslash, so it sends redirect to 
> > "www.foo.com/cgi-bin/run/~user/viewcvs.cgi/"
> 
> What version do you use?
> Last weeks there was something changed in this area.
> Try to use CVS version of cgiwrap.
> 
> Besr regards,
> 
> -- 
> Piotr Klaban
> 
> 
> -------------------------------------------------------
> This sf.net email is sponsored by:ThinkGeek
> Welcome to geek heaven.
> http://thinkgeek.com/sf
> _______________________________________________
> cgiwrap-users mailing list
> cgi...@li...
> https://lists.sourceforge.net/lists/listinfo/cgiwrap-users
-- 

------------------------------------------------------------
Nathan Neulinger                       EMail:  nn...@um...
University of Missouri - Rolla         Phone: (573) 341-4841
Computing Services                       Fax: (573) 341-4216

Re: [cgiwrap-users] Error "Cannot change to user's CGI directory via chdir()!"

[Piotr K. <ma...@ma...>]

On Thu, Oct 03, 2002 at 11:51:41AM +0300, Simo Salminen wrote:
> 2. cgiwrap executes it OK, but viewcvs detects its missing trailing
>  backslash, so it sends redirect to 
> "www.foo.com/cgi-bin/run/~user/viewcvs.cgi/"

What version do you use?
Last weeks there was something changed in this area.
Try to use CVS version of cgiwrap.

Besr regards,

-- 
Piotr Klaban

[cgiwrap-users] Error "Cannot change to user's CGI directory via chdir()!"

[Simo S. <sim...@ik...>]

I'm trying to run ViewCVS(viewcvs.sf.net) under cgiwrap, but I'm having
problems with trailing backslash in cgi-script filename. This is how it goes
wrong:

1. I point my browser to "www.foo.com/cgi-bin/run/~user/viewcvs.cgi"

2. cgiwrap executes it OK, but viewcvs detects its missing trailing
 backslash, so it sends redirect to 
"www.foo.com/cgi-bin/run/~user/viewcvs.cgi/"

3. At this point, if this is ran under suEXEC, the script is ran OK and
 the trailing backslash goes to PATH_INFO. But, the cgiwrap tries to change
 to viewcvs.cgi directory, which results "Cannot change to user's CGI
directory via chdir()!" error message.


-- 
simo <dot> salminen <at> iki <dot> fi