- Community Home
- >
- Servers and Operating Systems
- >
- Operating Systems
- >
- Operating System - OpenVMS
- >
- Re: CGI problem between nodes
Categories
Company
Local Language
Forums
Discussions
Forums
- Data Protection and Retention
- Entry Storage Systems
- Legacy
- Midrange and Enterprise Storage
- Storage Networking
- HPE Nimble Storage
Discussions
Discussions
Discussions
Forums
Forums
Discussions
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
- BladeSystem Infrastructure and Application Solutions
- Appliance Servers
- Alpha Servers
- BackOffice Products
- Internet Products
- HPE 9000 and HPE e3000 Servers
- Networking
- Netservers
- Secure OS Software for Linux
- Server Management (Insight Manager 7)
- Windows Server 2003
- Operating System - Tru64 Unix
- ProLiant Deployment and Provisioning
- Linux-Based Community / Regional
- Microsoft System Center Integration
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Community
Resources
Forums
Blogs
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО06-11-2009 06:23 AM
тАО06-11-2009 06:23 AM
CGI problem between nodes
A CGI procedure will start another procedure under a different UIC, wait for it's output, next types the output to SYS$OUTPUT, deletes the file and exits.
On node1: no problem.
On Node2: The working script is created and contaisn the right protection. However, procedure starts but fails before creating an output file.
The CGI-script has been minimized to the bare function: Setup and execute. This is run interactively (by the requesting user) and succeeds without a problem.
File- and directory protecftions have been checked; logicals as set in CGI-environment seem fine.
Details in attached file.
OpenVMS Developer & System Manager
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО06-11-2009 06:53 AM
тАО06-11-2009 06:53 AM
Re: CGI problem between nodes
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО06-11-2009 10:38 PM
тАО06-11-2009 10:38 PM
Re: CGI problem between nodes
A collegue (more a system manager than I am) suggested usage of
$ SET AUDIT/ALARM/ENABLE=FILE=FAIL
$ REPLY/ENABLE
to locate the problem. It turned out that the login directory of the remote_user could not be read by APACHE$WWW. Which is weird, since the file contains an ACE that allows the webserver to read the directory ((ID=APACHE$WWW, ACCESS=READ+EXECUTE))
The direcgtory is procected by an ACE for an identifier which has READ+WRITE_EXECUTE access. Granting this identifier to APACHE$WWW (and restarting the server) solved the issue, but should be avoided when possible.
So I added WRITE access to the ACE for APACHE$WWW, (and revoked the identifier); but the directory remained inaccessable: same problem as before, even when the identifier was granted to REMOTE_USER.
OpenVMS Developer & System Manager
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО06-11-2009 11:44 PM
тАО06-11-2009 11:44 PM
Re: CGI problem between nodes
The problem must be triggered by the script executed under UIC of REMOTE_USER: the directory that cannot be accessed has nothing to do with the user, but the script accesses files in directories contained within this directory.
OpenVMS Developer & System Manager
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО06-12-2009 12:48 AM
тАО06-12-2009 12:48 AM
Re: CGI problem between nodes
The procedure to be executed by Loginout.exe resides under this directory, but the wole path - and the file itself, is accessable by APACHE$WWW based on ACE. REMOTE_USER however has no access to the directories, but can read and execute the file. Hoever, granting the required identifier makes no difference for the CGI procedure.
OpenVMS Developer & System Manager
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО06-12-2009 01:51 AM
тАО06-12-2009 01:51 AM
Re: CGI problem between nodes
Have you checked the directory privileges as well as the file privs?
Rob.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО06-12-2009 03:47 AM
тАО06-12-2009 03:47 AM
Re: CGI problem between nodes
$! { This proceduere is created on appl_subtmp }
$! { It will basically contain the following code }
$! Login into application and subsystem
$!
$! { @CGI_APPL_LOGIN }
$ define/trans=conc appl_progroot dev:[progpath.]
$ define/trans=conc appl_dataroot dev:[datapath.]
$ define appl_database appl_daatroot:[database]db.rdb
$! { @CGI_APPL_SUB }
$ define appl_subcom appl_progroot:[sub.com]
$ define appl_subexe appl_progroot:[sub.exe]
$ define appl_subdb appl_dataroot:[sub.db]
$ define appl_subtmp appl_dataroot:[sub.tmp]
$ define appl_sublog appl_dataroot:[sub.log]
$ define appl_subdatabase applsubdb:dbsub.rdb
$!
$! Output name defined by CGI.COM
$!
$ define sys$output appl_subtmp applsub_tmp:''uniq'.OUT
$!
$! Data passed by Apache to CGI.COM
$!
$ remote_user = "REMOTE_USER" ! authentication data: VMS username
$!
$ request_uri = "/appl_cgi_path/CGI/environment/query?data"
$!
$! process Extract data from database
$!
$ run applsub_exe:retrievedata.exe
$!
$ exit
where you appear to be setting up symbols that will be used by retrievedata.exe. One is "request_uri" - should this be "request_url" and might it be the source of your failures?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО06-14-2009 06:48 AM
тАО06-14-2009 06:48 AM
Re: CGI problem between nodes
Jim: might be a typo in the description om ITRC, but the CGI scripts is the same on both nodes so that is not the problem. See conclusion.
OpenVMS Developer & System Manager
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО06-14-2009 06:58 AM
тАО06-14-2009 06:58 AM
Re: CGI problem between nodes
_disk:[rootdir]
this is required since the procedure to be executed resides in
_disk:[rootdir.CGI.TMP]
This root directory has protection by ACL:
(ID=env_user,ACCESS=READ+WRITE+EXECUTE)
(ID=env_user,DEFAULT_PROTECTION=READ+WRITE+EXECUTE+DELETE)
(ID=APACHE$WWW,ACCESS=EXECUTE)
I added READ access to APACHE$WWW but that didn't make a difference.
Granting identifier ENV_USER to APACHE$WWW solved the problem!
I don't like the idea of APACHE$WWW having access to ALL files of this environment. READ+EXECUTE on all directories, or even EXECUTE only, should do the trick as well.
OpenVMS Developer & System Manager