Page 2 of 2

KDBF - error 13

Posted: Tue Jun 10, 2003 2:12 pm
by jim.matthews
Hi

Yes, same version of apache compiled on both systems.

I changed the perms on the files, reran the script and it worked fine, slightly different output though:

uid=50000(nsuser) gid=60001(nobody)

There's no euid. Interesting.

KDBF - error 13

Posted: Tue Jun 10, 2003 3:14 pm
by jim.matthews
I checked the Apache docs for suexec. Then I checked my systems and neither one of them are using suexec:

% ./httpd -l
Compiled-in modules:
http_core.c
mod_env.c
mod_log_config.c
mod_mime.c
mod_negotiation.c
mod_status.c
mod_include.c
mod_autoindex.c
mod_dir.c
mod_cgi.c
mod_asis.c
mod_imap.c
mod_actions.c
mod_userdir.c
mod_alias.c
mod_access.c
mod_auth.c
mod_so.c
mod_setenvif.c
mod_ssl.c
mod_perl.c
suexec: disabled; invalid wrapper /opt/apache/bin/suexec
% ./httpd -v
Server version: Apache/1.3.22 (Unix)
Server built: Nov 19 2001 09:47:43

So am I curious as to how my production server is working correctly. The webserver runs under user nsuser, but texis runs under a completely different user, texis. It works on one system, but not the other. Strange. What else can I check out?

Thanks.

KDBF - error 13

Posted: Tue Jun 10, 2003 3:15 pm
by mark
Apache is definitely squashing the setuid flag. Time to dive into the apache docs...

KDBF - error 13

Posted: Tue Jun 10, 2003 3:17 pm
by mark
dunno, anyone else?

KDBF - error 13

Posted: Tue Jun 10, 2003 3:21 pm
by jim.matthews
So are you surprised to find that everything works correctly on our production server, even though we have the cgi running as one user and the webserver running as another user? According to you guys, this shouldn't be working, correct?

KDBF - error 13

Posted: Tue Jun 10, 2003 10:21 pm
by mark
It has been established that the production server is running CGI texis as the correct user, euid=(...)texis (see msg 7). The dev box is not (msg 11). *something* is different about that box. Are they running the same rev of the OS?

KDBF - error 13

Posted: Wed Jun 11, 2003 11:32 am
by jim.matthews
They are both running the same major version of the OS, but different incrementals:

dev box:
% cat /etc/release
Solaris 8 2/02 s28s_u7wos_08a SPARC
Copyright 2002 Sun Microsystems, Inc. All Rights Reserved.
Assembled 18 December 2001

prod box:
% cat /etc/release
Solaris 8 7/01 s28s_u5wos_08 SPARC
Copyright 2001 Sun Microsystems, Inc. All Rights Reserved.
Assembled 06 June 2001

KDBF - error 13

Posted: Thu Jun 12, 2003 4:06 pm
by jim.matthews
Fixed!!! Inspiration hit me today: I forgot that I mount my filesystems nosuid. Take that bit out, remount and texis runs correctly.

Thanks again for your assistance.

KDBF - error 13

Posted: Thu Jun 12, 2003 4:52 pm
by mark
Thanks for letting us (and everyone else) know the problem and solution. That's definitely one to remember.