Operating System - HP-UX
1748140 Members
3857 Online
108758 Solutions
New Discussion юеВ

Suexec not working on Apache 2.2

 
James Calfas
Occasional Advisor

Suexec not working on Apache 2.2

I am running a trusted system with HP-ux 11iv3 on an Itanium machine, and it appears that suexec works on Apache version 2.0.59, but not 2.2.8. I used fresh installs of both versions of Apache (32 bit), and made the minimum changes to activate suexec:

1. Uncomment SuexecUserGroup in the configuration and provide it with a valid user/group, with IDs > 100,

2. Change the ownership of cgi-bin and cgi-bin/showuser.cgi to match the SuexecUserGroup information

3. Copy suexec.hide to suexec, and give it permissions 4555.

When I access the cgi with http://x.x.x.x/cgi-bin/showuser.cgi, the cgi runs successfully with apache 2.0, but logs the following error with apache 2.2:

[2009-07-09 16:33:39]: uid: (/root) gid: (0/0) cmd: showuser.cgi
[2009-07-09 16:33:39]: cannot run as forbidden uid (0/showuser.cgi)

Has anyone else seen this problem?

Thanks,
Jim
3 REPLIES 3
Steven Schweda
Honored Contributor

Re: Suexec not working on Apache 2.2

> [...] HP-ux 11iv3 [...]

I know nothing, but you might get better
answers faster in an HP-UX forum than you
will in this Linux forum.

A Google search for the error message finds
more than nothing.
Steven Schweda
Honored Contributor

Re: Suexec not working on Apache 2.2

> [...] runs successfully with apache 2.0,
> but logs the following error with apache
> 2.2:

And all the configuration files are
identical?
Steven E. Protter
Exalted Contributor

Re: Suexec not working on Apache 2.2

Shalom,

http://docs.hp.com/en/5991-7504/ar01s09.html

http://httpd.apache.org/docs/2.2/suexec.html
Apache HTTP Server Version 2.2 ... To this end, suEXEC configuration requires of the administrator careful attention to details. After due consideration has ..

The procedure is different.

SEP
Steven E Protter
Owner of ISN Corporation
http://isnamerica.com
http://hpuxconsulting.com
Sponsor: http://hpux.ws
Twitter: http://twitter.com/hpuxlinux
Founder http://newdatacloud.com