[cgiwrap-users] cgi-wrap beginners woes

[Gary W. <gw...@pl...>]

Hi all,

Downloaded and installed cgi-wrap for the first time yesterday, using
some sensible compile options, but something odd is happening when I 
try to use it:

"CGIWrap was unable to find the user 'cgi-bin' in the password file on
this server."

Which is confusing me, as cgi-wrap was compiled to be executed by user
"nobody", as per the apache process, and it doesn't matter who owns 
the script I try - the same error happens whether I run the script 
owned by nobody, test1, test2 etc - none of the files are owned by 
"cgi-bin", and indeed, as this error explains, there is not a user 
cgi-bin on the system, so I don't see where cgi-wrap is getting this 
info from.

Here is the full message displayed when trying to run a script (some 
IP and hostname stuff obscured):

*start quote*
CGIWrap Error: User not found

________________________________________________________________________

CGIWrap was unable to find the user 'cgi-bin' in the password file on
this server.

Check the URL and try again.


________________________________________________________________________

Local Information and Documentation: 

        CGIWrap Docs: /usr/doc/cgi 
        
Server Data: 

        Server Administrator/Contact: yo...@ex...
        Server Name: removed
        Server Port: 80
        Server Protocol: HTTP/1.1
        Virtual Host: removed

Request Data: 

        User Agent/Browser: Mozilla/5.0 (X11; U; Linux i686; en-US;
        rv:1.7.5) Gecko/20050110 Firefox/1.0 (Debian package 1.0
        +dfsg.1-2)
        Request Method: GET
        Remote Address: removed
        Remote Port: 51404
        Extra Path Info: /cgi-bin/hwgt1.sh

** End quote **


Here is my configure line:

./configure --with-perl=/usr/bin/perl --with-local-doc-url=/usr/doc/cgi
--with-install-dir=/local/apache/cgi-bin/ --with-httpd-user=nobody
--with-minimum-uid=100 --with-minimum-gid=100
--with-logging-file=/local/apache/logs/cgiwrap.log
--with-setenv-path=/bin:/usr/bin:/usr/local/bin -with-rlimit-cpu=120
--with-rlimit-fsize=536870912
--with-allow-file=/local/apache/conf/cgiwrap.allow
--with-deny-file=/local/apache/conf/cgiwrap.deny

Here are my added httpd.conf lines:

AddHandler cgi-wrapper .php
AddHandler cgi-wrapper .cgi
AddHandler cgi-wrapper .sh
Action cgi-wrapper /cgi-bin/cgiwrap

<Directory "/usr/apache/cgi-bin">
        AllowOverride None
        Options None
        Order allow,deny
        AddHandler cgi-script .cgi
        Allow from all
</Directory>

<Location /cgi-bin>
      Options ExecCGI
      AllowOverride FileInfo
</Location>


<Location /cgi-bin/*>
    Options ExecCGI
    AllowOverride FileInfo
</Location>


Notes: 
- Neither the .allow or .deny files exist at the moment
- The log file cgiwrap.log got created but has no content
- User nobody's UID and GID is 65534
- The CGI script ran fine under the standard Apache user before CGI wrap
was installed
- I am using Apache 2.0.53 under Linux kernel 2.6.11 with GRSec
installed


Many thanks for your help with this.