Re: [users@httpd] SuexecUserGroup command not in docroot

[Jehan PROCACCIA <Jehan.Procaccia@xxxxxxxxxxx>]

Joshua Slive wrote:

> On 3/8/06, Jehan PROCACCIA <Jehan.Procaccia@xxxxxxxxxxx> wrote:
>
>  
>
> > When I go to http://jehan-procaccia.int-evry.fr/cgi/printenv.cgi I get
> > "500 Internal server Error", apache logs says "Premature end of script
> > headers: printenv.cgi" and suexec logs:
> > [2006-03-08 19:05:26]: uid: (14503/procacci) gid: (145/145) cmd:
> > printenv.cgi
> > [2006-03-08 19:05:26]: command not in docroot
> > (/mci/mci/procacci/public_html/cgi/printenv.cgi)
> >    
>
> All requests that are handled by suexec must be for resources under
> the compiled-in AP_DOC_ROOT.  (The only exception is for requests
> handled by mod_userdir, which may be under the AP_USERDIR_SUFIX
> directory of a user's home directory.)
>
> So to fix this problem you must either recompile suexec with an
> AP_DOC_ROOT that is a parent of /mci/mci/procacci/public_html/cgi/ or
> you must move your cgi script under /var/www.
>
> Joshua.
>  
great that was it, I rebuilt apache rpm with |--with-suexec-docroot=/mci 
and it works fine :-)//|
$ suexec -V
-D AP_DOC_ROOT="/mci"

http://jehan-procaccia.int-evry.fr/cgi/whoami.cgi

Thu Mar  9 10:56:42 CET 2006
J'execute en tant que : procacci
je suis reel : 
je suis effectif : uid=14503(procacci) gid=145(mci) groups=145(mci)

Thanks !

On an other subject (maybe I should open an other thread ...?) 
Now the virtual host logs grab all logs :-(,  and not only the access/error for that virtual hosts.
logs configuration in my virtual-host "jehan-procaccia.conf"
<VirtualHost jehan-procaccia.int-evry.fr:80>
   ErrorLog /mci/mci/procacci/public_html/logs/jehan-procaccia.int-evry.fr-error_log
   CustomLog /mci/mci/procacci/public_html/logs/jehan-procaccia.int-evry.fr-access_log common
</VirtualHost>

In DNS I just put a second record to point to the main server IP (157.159.10.52 = main server www-public.int-evry.fr)
jehan-procaccia.int-evry.fr. 172800 IN  A       157.159.10.52

http://jehan-procaccia.int-evry.fr/logs/jehan-procaccia.int-evry.fr-access_log show all log access even access for the main server config user_dir (~logins)  

Global apache settings contains:
ErrorLog logs/error_log
LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined
LogFormat "%h %l %u %t \"%r\" %>s %b" common
CustomLog logs/access_log combined

What I am doing wrong ? what is the best way to give access to their own personnal logs to users ?

thanks again .



---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
  "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx