Suexec not working on Apache 2.2 (148 Views)
Reply
Regular Visitor
James Calfas
Posts: 4
Registered: ‎12-16-1996
Message 1 of 4 (148 Views)

Suexec not working on Apache 2.2

I am running a trusted system with HP-ux 11iv3 on an Itanium machine, and it appears that suexec works on Apache version 2.0.59, but not 2.2.8. I used fresh installs of both versions of Apache (32 bit), and made the minimum changes to activate suexec:

1. Uncomment SuexecUserGroup in the configuration and provide it with a valid user/group, with IDs > 100,

2. Change the ownership of cgi-bin and cgi-bin/showuser.cgi to match the SuexecUserGroup information

3. Copy suexec.hide to suexec, and give it permissions 4555.

When I access the cgi with http://x.x.x.x/cgi-bin/showuser.cgi, the cgi runs successfully with apache 2.0, but logs the following error with apache 2.2:

[2009-07-09 16:33:39]: uid: (/root) gid: (0/0) cmd: showuser.cgi
[2009-07-09 16:33:39]: cannot run as forbidden uid (0/showuser.cgi)

Has anyone else seen this problem?

Thanks,
Jim
Honored Contributor
Steven Schweda
Posts: 9,096
Registered: ‎02-23-2005
Message 2 of 4 (148 Views)

Re: Suexec not working on Apache 2.2

> [...] HP-ux 11iv3 [...]

I know nothing, but you might get better
answers faster in an HP-UX forum than you
will in this Linux forum.

A Google search for the error message finds
more than nothing.
Honored Contributor
Steven Schweda
Posts: 9,096
Registered: ‎02-23-2005
Message 3 of 4 (148 Views)

Re: Suexec not working on Apache 2.2

> [...] runs successfully with apache 2.0,
> but logs the following error with apache
> 2.2:

And all the configuration files are
identical?
Exalted Contributor
Steven E. Protter
Posts: 33,806
Registered: ‎08-15-2002
Message 4 of 4 (148 Views)

Re: Suexec not working on Apache 2.2

Shalom,

http://docs.hp.com/en/5991-7504/ar01s09.html

http://httpd.apache.org/docs/2.2/suexec.html
Apache HTTP Server Version 2.2 ... To this end, suEXEC configuration requires of the administrator careful attention to details. After due consideration has ..

The procedure is different.

SEP
Steven E Protter
Owner of ISN Corporation
http://isnamerica.com
http://hpuxconsulting.com
Sponsor: http://hpux.ws
Twitter: http://twitter.com/hpuxlinux
Founder http://newdatacloud.com
The opinions expressed above are the personal opinions of the authors, not of HP. By using this site, you accept the Terms of Use and Rules of Participation.