#1738 Using Apache2 as webserver for Webmin
I somhow cannot get Webmin to run with Apache2 as
webserver
I have made the following changes to apache2.conf:
Alias /webmin /usr/libexec/webmin
<Directory "/usr/libexec/webmin">
AddHandler cgi-script .cgi
DirectoryIndex index.cgi
Options ExecCGI
SetEnv WEBMIN_CONFIG /etc/webmin
SetEnv WEBMIN_VAR /var/webmin
SetEnv SERVER_ROOT /usr/libexec/webmin
SetEnv MINISERV_CONFIG /etc/webmin/miniserv.conf
AuthType basic
AuthName webmin
AuthUserFile /etc/webmin/htusers
require valid-user
AllowOverride None
Order allow,deny
Allow from alL
</Directory>
commonapache2.conf
Alias /icons/ /var/www/localhost/icons/
Alias /doc /usr/share/doc
Alias /webmin/images /usr/libexec/webmin/mscstyle3/i
mages
Alias /webmin/unauthenticated /usr/libexec/webmin/ms
cstyle3/unauthenticated
OS:
Gentoo
kernel 2.6.7
Apache 2.0.50
PHP 4.3.8
libperl 5.8.4
webmin 1.150
I have several errors eg:
You don't have permission to access /config.cgi on this
server
When I try to change the crontab entry's
either it cannot find a file/script or it does not have the
right's to do it. When I try to modify the settings in
Apache (trough webmin) it does not have the rights to
write the conf file.
The Apache user has read and execute rights for the
webmin dir and its scripts and the root setuid is set.
regards
Robert
Logged In: YES
user_id=129364
It sounds like the Webmin CGI scripts are not being run with
root privileges, with is required. You could test this by
using the Command Shell module to create a file (with touch
/tmp/testfile) to see what ownership it has.
Perhaps Apache needs some special configuration to allow it
to run setuid scripts?
Personally, I would recommend against running Webmin this
way. Instead, let it run under it's own built-in webserver
if possible - there are far fewer problems.
Logged In: YES
user_id=733520
Thanks for your reply:
I tried what you asked:
-rw-r--r-- 1 root root 0 Aug 16 11:57 tesfile
I did try some more after I posted this message:
Alias /webmin/images /usr/libexec/webmin/mscstyle3/i
mages
Alias /webmin/unauthenticated /usr/libexec/webmin/ms
cstyle3/unauthenticated
have been removed and the contense of webmin/mscstyle3
has been copied to webmin
But some things are still not ok eg:
Go to bind and press aply changes the result is the following:
You don't have permission to
access /webmin/bind8//webmin on this server.
It seems that the root for webmin is pasted behind the URL
for the result.
The same applies to making changes to apache and saving
them.
regards
Robert
Logged In: YES
user_id=129364
Make sure you have the line
webprefix=/webmin
in /etc/webmin/config , to support running under the /webmin
URL path.
Logged In: YES
user_id=733520
I just checled again, I have.
Logged In: YES
user_id=733520
When changing the document options for the default server
the error from ssl_error_log is:
script not found or unable to
stat: /usr/libexec/webmin/apache/webminvirt_index.cgi
Logged In: YES
user_id=129364
Make sure your initial Alias line is
Alias /webmin/ /usr/libexec/webmin/
Logged In: YES
user_id=733520
The slashes behind webmin where missing but the error
remains the same after changing this and restarting apache:
You don't have permission to
access /webmin/bind8//webmin on this server
and from sss_error_log:
Symbolic link not
allowed: /usr/libexec/webmin/bind8/webmin
Logged In: YES
user_id=733520
The slashes behind webmin where missing but the error
remains the same after changing this and restarting apache:
You don't have permission to
access /webmin/bind8//webmin on this server
and from sss_error_log:
Symbolic link not
allowed: /usr/libexec/webmin/bind8/webmin
Logged In: YES
user_id=129364
That message about a 'symbolic link not being allowed'
suggests that /usr/libexec/webmin is actually a link to
somewhere else? Is this the case on your system, and if so
perhaps it should be fixed .. or the Apache configuration
updated to use the correct Webmin base directory.
Logged In: YES
user_id=733520
Could it be that there is no directory webmin underneath
/usr/libexec/webmin/bind8/
especially the bind8//webmin suggests to me that the
webprefix gets pasted behind /usr/libexec/webmin/bind8
regards
Robert
Logged In: YES
user_id=733520
I changes the allias:
Alias /webby/ /usr/libexec/webmin/
and the webprefix to:
webprefix=/webby
with result:
File does not exist: /usr/libexec/webmin/bind8/webby
Bug????
regards
Robert