Ok, I configured it on a development box. You can look at it at
http://www.brie.com:8080/discus/
Everything worked fairly straight forward. I set my web server so it
ran as the group www-user. This group is a group that comes default with
a debian install. That is the distro it is running on. I made the files
so they are writeable by the group. I did this with the command.
chmod 660
I did not make config files world writeable, so that is the reason the web
server runs as www-user and the files are writeable by the server. Then
I also made the directories where the files are stored so they are set
gid. I did this with.
chmod 2775 /directory/name/and/any/path
I think it would be better to run the web server with suExec compiled in. Apache
does not come with this as defalt. I was looking at the docs regarding this.
In order to change the web server to run under the group id www-user you
change the line. Make sure www-data is also in /etc/group. If you are using
Debian, it will be :)
Group www-data
in httpd.conf
You then have to restart your web server. this is best done with apachetl restart.
And of course you have to be root to do this.
I looked over the scripts and the code looks clean, but there are a couple things
that bother me that are worth noting. It does not use the -T flag and it is not
using strict. The demo I am running is running on a mod perl server, so you
may see some glithches if a bunch of people visited it all at once.
Anyway, you're welcome to check it out.
I might toy with the suExec and see if I can get that working.
brian
On Mon, Nov 01, 1999 at 02:51:17AM +0000, Hubert Littau wrote:
> Okay, I'm Mr. Desktop/Internet dialup kinda user here, (can you say wannabe?)
> and now I'm
> assigned the evaluation of a messageboard program called "Discus" on my
> localhost . Problem is when I
> run the setup.cgi from the web browser locally I don't have permission to run
> cgi scripts.
> I looked at the Apache docs and they refer to suEXEC, and describe it as
> deliberately a major
> pain to set up for security reasons. Frankly I'm not concerned about security
> on this box.
> I just want to be able to run .cgi's. Any quick n' easy way to get there from
> here?
> Oh yea: Mandrake 6.0 /Intel P I.
> Thanks.
>
> Hubert Littau
-- Brian Lavender http://www.brie.com/brian/
This archive was generated by hypermail 2b29 : Fri Feb 25 2000 - 14:29:07 PST