RE: [users@httpd] How to execute cgi on a proxied host ?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



In Apache 1.3 the order in which the modules are executed depends on the order in which they are added by AddModule. 
 
What you need to do is change the ordering of the AddModule directives so that mod_cgi is executed after mod_proxy. To achieve this I believe that the AddModule concerning mod_proxy must appear AFTER the one concerning mod_cgi. Modules are executed in the reverse order of that in which they are added.
 
Cordialement, 
-ascs

________________________________

From: Annie Dumont [mailto:annie.dumont@xxxxxxxxxxxxxxx] 
Sent: Wednesday, January 25, 2006 11:54 AM
To: users@xxxxxxxxxxxxxxxx
Subject: Re: [users@httpd] How to execute cgi on a proxied host ?


Hi Axel-Stéphane,

Sorry, i forget to give the apache version : 1.3.31 :-(
I don't know if this answer your question, but when i put in a browser http://10.10.10.10/cgi-bin/subrep/file.cgi (host where the cgi-script i want to execute are) it works.
When i put http://distant.machine.univ-reunion.fr/cgi-bin/subrep/file.cgi (so the same machine behind a reverse proxy), i get :


Forbidden

You don't have permission to access /cgi-bin/PBE/list_superfamily.cgi on this server.
Apache/1.3.31 Server at [distant.machine].univ-reunion.fr Port 80

Am i false if i think that reverse-proxy does not know where to find the cgi-script on the 10.10.10.10 machine, or is it something else ?

i try to put a Directory directive in the virtual host :
<Directory /usr/lib/cgi-bin/>
    AllowOverride none
    Options ExecCGI
    Order allow,deny
    Allow from all
</Directory>

where /usr/lib/cgi-bin/ is the absolute path to cgi folder on 10.10.10.10 
It doesn't work either,and perhaps was it a nut thing to do. 

So if you have an idea ...
Thanks for help.
cordialement. annie

Axel-Stéphane SMORGRAV a écrit : 

	 Annie,
	
	You do not specify what version of Apache you are using.
	
	My understanding is that there is a content server somewhere that also hosts cgi-scripts, and you have put a reverse proxy in front of that server. You do NOT want CGI scripts to be executed on the reverse proxy.
	
	Have you tested against the configuration you outline below and actually found that paths prefixed with /cgi-bin are actually interpreted as CGI-scripts by the reverse proxy?
	
	Tests I made with Apache 2.0.54 show that it works just fine. The CGI script is NOT executed on the reverse proxy. A quick look at the code of mod_proxy and mod_cgi seems to confirm this since the mod_proxy handler registers all its hooks before mod_cgi (except post_config).
	
	I suggest you test your configuration below. If you actually do observe that the CGI scripts are executed on the reverse proxy, please report back and we'll look into it again.
	
	Cordialement,
	-ascs 
	
	-----Original Message-----
	From: Annie Dumont [mailto:annie.dumont@xxxxxxxxxxxxxxx] 
	Sent: Wednesday, January 25, 2006 7:17 AM
	To: users@xxxxxxxxxxxxxxxx
	Subject: [users@httpd] How to execute cgi on a proxied host ?
	
	Hi everybody,
	
	One of our scientist has develop a website with cgi-script, on host with a private adress.
	He needs to be readable throught the internet next month.
	Is it possible, throught a virtualHost and proxying to execute the cgi scripts hosted on his machine ?
	
	On our apache server we have written in the vhost.conf :
	(assuming for the example that our apache serveur ip adress is
	123.12.12.12 our distant host private ip adress 10.10.10.10 and the name it becomes to bee seen through the internet
	distant.machine.univ-reunion.fr) :
	
	<VirtualHost 123.12.12.12:80>
	    Servername distant.machine.univ-reunion.fr
	    ProxyPass             /        http://10.10.10.10
	    ProxypassReverse /        http://10.10.10.10
	</VirtualHost>
	
	How do i tell apache that cgi scripts i want to execute are not those on the apache server but those on the 10.10.10.10 ? Is it just possible ?
	
	regards, annie
	
	---------------------------------------------------------------------
	The official User-To-User support forum of the Apache HTTP Server Project.
	See <URL:http://httpd.apache.org/userslist.html> <http://httpd.apache.org/userslist.html>  for more info.
	To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
	   "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
	For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
	
	
	
	  



---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
   "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx



[Index of Archives]     [Open SSH Users]     [Linux ACPI]     [Linux Kernel]     [Linux Laptop]     [Kernel Newbies]     [Security]     [Netfilter]     [Bugtraq]     [Squid]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Samba]     [Video 4 Linux]     [Device Mapper]

  Powered by Linux