Thunderstone Support Forums

I checked the Apache docs for suexec. Then I checked my systems and neither one of them are using suexec:

% ./httpd -l
Compiled-in modules:
http_core.c
mod_env.c
mod_log_config.c
mod_mime.c
mod_negotiation.c
mod_status.c
mod_include.c
mod_autoindex.c
mod_dir.c
mod_cgi.c
mod_asis.c
mod_imap.c
mod_actions.c
mod_userdir.c
mod_alias.c
mod_access.c
mod_auth.c
mod_so.c
mod_setenvif.c
mod_ssl.c
mod_perl.c
suexec: disabled; invalid wrapper /opt/apache/bin/suexec
% ./httpd -v
Server version: Apache/1.3.22 (Unix)
Server built: Nov 19 2001 09:47:43

So am I curious as to how my production server is working correctly. The webserver runs under user nsuser, but texis runs under a completely different user, texis. It works on one system, but not the other. Strange. What else can I check out?

Thanks.

Apache is definitely squashing the setuid flag. Time to dive into the apache docs...

dunno, anyone else?

So are you surprised to find that everything works correctly on our production server, even though we have the cgi running as one user and the webserver running as another user? According to you guys, this shouldn't be working, correct?

It has been established that the production server is running CGI texis as the correct user, euid=(...)texis (see msg 7). The dev box is not (msg 11). *something* is different about that box. Are they running the same rev of the OS?

They are both running the same major version of the OS, but different incrementals:

dev box:
% cat /etc/release
Solaris 8 2/02 s28s_u7wos_08a SPARC
Copyright 2002 Sun Microsystems, Inc. All Rights Reserved.
Assembled 18 December 2001

prod box:
% cat /etc/release
Solaris 8 7/01 s28s_u5wos_08 SPARC
Copyright 2001 Sun Microsystems, Inc. All Rights Reserved.
Assembled 06 June 2001

Fixed!!! Inspiration hit me today: I forgot that I mount my filesystems nosuid. Take that bit out, remount and texis runs correctly.

Thanks again for your assistance.

Thanks for letting us (and everyone else) know the problem and solution. That's definitely one to remember.