KDBF - error 13

jim.matthews
Posts: 19
Joined: Tue Jun 03, 2003 5:28 pm

KDBF - error 13

Post by jim.matthews »

Hi

Yes, same version of apache compiled on both systems.

I changed the perms on the files, reran the script and it worked fine, slightly different output though:

uid=50000(nsuser) gid=60001(nobody)

There's no euid. Interesting.
jim.matthews
Posts: 19
Joined: Tue Jun 03, 2003 5:28 pm

KDBF - error 13

Post by jim.matthews »

I checked the Apache docs for suexec. Then I checked my systems and neither one of them are using suexec:

% ./httpd -l
Compiled-in modules:
http_core.c
mod_env.c
mod_log_config.c
mod_mime.c
mod_negotiation.c
mod_status.c
mod_include.c
mod_autoindex.c
mod_dir.c
mod_cgi.c
mod_asis.c
mod_imap.c
mod_actions.c
mod_userdir.c
mod_alias.c
mod_access.c
mod_auth.c
mod_so.c
mod_setenvif.c
mod_ssl.c
mod_perl.c
suexec: disabled; invalid wrapper /opt/apache/bin/suexec
% ./httpd -v
Server version: Apache/1.3.22 (Unix)
Server built: Nov 19 2001 09:47:43

So am I curious as to how my production server is working correctly. The webserver runs under user nsuser, but texis runs under a completely different user, texis. It works on one system, but not the other. Strange. What else can I check out?

Thanks.
User avatar
mark
Site Admin
Posts: 5513
Joined: Tue Apr 25, 2000 6:56 pm

KDBF - error 13

Post by mark »

Apache is definitely squashing the setuid flag. Time to dive into the apache docs...
User avatar
mark
Site Admin
Posts: 5513
Joined: Tue Apr 25, 2000 6:56 pm

KDBF - error 13

Post by mark »

dunno, anyone else?
jim.matthews
Posts: 19
Joined: Tue Jun 03, 2003 5:28 pm

KDBF - error 13

Post by jim.matthews »

So are you surprised to find that everything works correctly on our production server, even though we have the cgi running as one user and the webserver running as another user? According to you guys, this shouldn't be working, correct?
User avatar
mark
Site Admin
Posts: 5513
Joined: Tue Apr 25, 2000 6:56 pm

KDBF - error 13

Post by mark »

It has been established that the production server is running CGI texis as the correct user, euid=(...)texis (see msg 7). The dev box is not (msg 11). *something* is different about that box. Are they running the same rev of the OS?
jim.matthews
Posts: 19
Joined: Tue Jun 03, 2003 5:28 pm

KDBF - error 13

Post by jim.matthews »

They are both running the same major version of the OS, but different incrementals:

dev box:
% cat /etc/release
Solaris 8 2/02 s28s_u7wos_08a SPARC
Copyright 2002 Sun Microsystems, Inc. All Rights Reserved.
Assembled 18 December 2001

prod box:
% cat /etc/release
Solaris 8 7/01 s28s_u5wos_08 SPARC
Copyright 2001 Sun Microsystems, Inc. All Rights Reserved.
Assembled 06 June 2001
jim.matthews
Posts: 19
Joined: Tue Jun 03, 2003 5:28 pm

KDBF - error 13

Post by jim.matthews »

Fixed!!! Inspiration hit me today: I forgot that I mount my filesystems nosuid. Take that bit out, remount and texis runs correctly.

Thanks again for your assistance.
User avatar
mark
Site Admin
Posts: 5513
Joined: Tue Apr 25, 2000 6:56 pm

KDBF - error 13

Post by mark »

Thanks for letting us (and everyone else) know the problem and solution. That's definitely one to remember.
Post Reply