Re: CGI differences in apache 2.0 and 2.2

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



> Just having suexec loaded shouldn't make any difference because(AFAIK)
> it isn't actually used unless you explicitly request its use.

Good point.
Okay, in a perl cgi script run by version 2.2 the command system("ls") returns an error code (256, as I recall which corresponds to actual exitcode 1) which I can print after the system("ls") call.

Using apache 2.0 the perl statement system("ls") returns 0 as it should.

Using a nonsense command system("foo"); produces an error code of -1 with both 2.0 and 2.2

An additional bit of info that suggests there's a path/permissions problem is that perl cgi scripts run with the apache 2.2 report an error with a require("/home/pelikan/test.txt"); (can't find file) but can do require("/var/www/cgi-bin/test.txt"); As if whoever's running the script can see cgi-bin but not /home/pelikan (though the /home/pelikan is set to let anyone read and execute)

The file test.txt exists in both places.



Apache runs as user 'apache' and there's no login allowed for that user so I don't know how to run a program or view the path for user apache. I'll read up on how to do cron and see if I turn that into a test.

THanks!

Steve P

Steve Swift wrote:


Putting a "print" statement before the call to system(ls) doesn't tell us anything about whether or not the running program can *find* the ls command in order to execute it, it only proves that you are about to try (and probably fail, perhaps for one of the reasons I've mentioned). It may well be that the error you are geting is "command ls not found".

On 11/02/07, *Steve Pelikan* <pelikan@xxxxxxxxxxx <mailto:pelikan@xxxxxxxxxxx>> wrote:


    Thanks. It is finding and executing the scripts. (Can put in a print
    statement before the system() command and see the results on a web
    browser calling the script.

    Both the 2.0 and 2.2 apaches are using mod_cgi. In 2.0 it is built in
    and in 2.2 there's a LoadModule statement for it in httpd.conf.

    But: mod_suexec is loaded in 2.2 and not loaded or built in in 2.0.

    This is a difference I hadn't thought about or even known about. I
    don't
    really know about suexec or how it should be configured, but it looks
    like it could be close to my problems. Thanks for the pointer.

    Steve P

    Steve Swift wrote:
     > Being in the same directory as the program that is running is no
     > guarantee that the command will be found, unless you either have
    "." in
     > the PATH, or the language your command is written is explicitly
    looks in
     > the same directory as the running program when resolving commands.
     >
     > On 11/02/07, *William A. Rowe, Jr.* <wrowe@xxxxxxxxxxxxx
    <mailto:wrowe@xxxxxxxxxxxxx>
     > <mailto:wrowe@xxxxxxxxxxxxx <mailto:wrowe@xxxxxxxxxxxxx>>> wrote:
     >
     >     Steve Pelikan wrote:
     >      > We have several perl cgi scripts that run fine with apache 2.0
     >     but fail
     >      > with 2.2. This is using 2.2 that is part of recent Fedora
    and 2.0.59
     >      > that I just built and installed on the same machine.
     >      >
     >      > The problem seems to be with system() calls in perl.
     >      >
     >      > What am I'm missing?
     >
     >     httpd -l to compare which MPM's you built with?  Are you
    running mod_cgi
     >     or mod_cgid?  Did you build with suexec?
     >
> ---------------------------------------------------------------------
     >     The official User-To-User support forum of the Apache HTTP Server
     >     Project.
     >     See <URL:http://httpd.apache.org/userslist.html
     >     < http://httpd.apache.org/userslist.html>> for more info.
     >     To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
    <mailto:users-unsubscribe@xxxxxxxxxxxxxxxx>
     >     <mailto:users-unsubscribe@xxxxxxxxxxxxxxxx
    <mailto:users-unsubscribe@xxxxxxxxxxxxxxxx>>
     >        "   from the digest:
    users-digest-unsubscribe@xxxxxxxxxxxxxxxx
    <mailto:users-digest-unsubscribe@xxxxxxxxxxxxxxxx>
     >     <mailto:users-digest-unsubscribe@xxxxxxxxxxxxxxxx
    <mailto:users-digest-unsubscribe@xxxxxxxxxxxxxxxx>>
     >     For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
    <mailto:users-help@xxxxxxxxxxxxxxxx>
     >     <mailto:users-help@xxxxxxxxxxxxxxxx
    <mailto:users-help@xxxxxxxxxxxxxxxx>>
     >
     >
     >
     >
     > --
     > Steve Swift
     > http://www.swiftys.org.uk
     >
     >
     >
    ------------------------------------------------------------------------
     >
     > No virus found in this incoming message.
     > Checked by AVG Free Edition.
     > Version: 7.5.441 / Virus Database: 268.17.35/680 - Release Date:
    2/10/2007 9:15 PM


    ---------------------------------------------------------------------
    The official User-To-User support forum of the Apache HTTP Server
    Project.
    See <URL:http://httpd.apache.org/userslist.html> for more info.
    To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
    <mailto:users-unsubscribe@xxxxxxxxxxxxxxxx>
       "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
    <mailto:users-digest-unsubscribe@xxxxxxxxxxxxxxxx>
    For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
    <mailto:users-help@xxxxxxxxxxxxxxxx>




--
Steve Swift
http://www.swiftys.org.uk


------------------------------------------------------------------------

No virus found in this incoming message.
Checked by AVG Free Edition.
Version: 7.5.441 / Virus Database: 268.17.35/680 - Release Date: 2/10/2007 9:15 PM


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
  "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx


[Index of Archives]     [Open SSH Users]     [Linux ACPI]     [Linux Kernel]     [Linux Laptop]     [Kernel Newbies]     [Security]     [Netfilter]     [Bugtraq]     [Squid]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Samba]     [Video 4 Linux]     [Device Mapper]

  Powered by Linux