From: replies-lists-redhat@xxxxxxxxxxxxxxxxxxxxx
To: azeem ahmad <azeem81@xxxxxxx>
Subject: Re: access denied
Date: Wed, 22 Feb 2006 01:19:37 +0000
>> From: replies-lists-redhat@xxxxxxxxxxxxxxxxxxxxx
>> To: azeem ahmad <azeem81@xxxxxxx>
>> Subject: Re: access denied
>> Date: Wed, 22 Feb 2006 00:19:20 +0000
>>
>>
>> >>
>> >>
>> >>
>> >> >> >
>> >> >> >> From: replies-lists-redhat@xxxxxxxxxxxxxxxxxxxxx
>> >> >> >> To: azeem ahmad <azeem81@xxxxxxx>
>> >> >> >> Subject: Re: access denied
>> >> >> >> Date: Tue, 21 Feb 2006 23:24:06 +0000
>> >> >> >>
>> >> >> >> your cgi-bin should contain *scripts*, not html files. apache
>> >> >> >> won't parse an html file that's in the cgi-bin directory.
[what
>> >> >> >> are the
>> >> top
>> >> >> >> 2-3 lines of "dgate.html"?
>> >> >> >>
>> >> >> >> assuming that apache isn't running as the user that owns the
>> >> >> >> files/directory (there are security implications if it is),
>> >> >> >> then the directory/files in the cgi-bin need to be
>> >> >> >> executable/readable by "others".
>> >> >> >>
>> >> >> >>
>> >> >> >> ------------ Original Message ------------
>> >> >> >> > Date: Tuesday, February 21, 2006 10:17:48 PM +0000
>> >> >> >> > From: azeem ahmad <azeem81@xxxxxxx>
>> >> >> >> > To: users@xxxxxxxxxxxxxxxx, fedora-list@xxxxxxxxxx
>> >> >> >> > Subject: access denied
>> >> >> >> >
>> >> >> >> > hi list, my server is denying access to cgi-bin, i m trying
>> >> >> >> > on it for a while, before that it was even saying that
>> >> >> >> > premature end of script, but now after some modifications
>> >> >> >> > (adding cgi-bin directory to virtual host) it says access
>> >> >> >> > denied
>> >> >> >> > following is the config
>> >> >> >> > ------------------------------------------------------------
>> >> >> >> > --- --- --- --- -----------------
>> >> >> >> > <VirtualHost 1.2.3.4>
>> >> >> >> > ServerAlias mine.com
>> >> >> >> > ServerAdmin webmaster@xxxxxxxx
>> >> >> >> > DocumentRoot /home/mine/public_html
>> >> >> >> > BytesLog domlogs/mine.com-bytes_log
>> >> >> >> > ServerName www.mine.com
>> >> >> >> >
>> >> >> >> > User mine
>> >> >> >> > Group mine
>> >> >> >> > CustomLog /usr/local/apache/domlogs/mine.com combined
>> >> >> >> > ScriptAlias /cgi-bin/ /home/mine/public_html/cgi-bin/
>> >> >> >> >
>> >> >> >> > <Directory /home/mine/public_html/cgi-bin/>
>> >> >> >> > Options +Indexes +ExecCGI
>> >> >> >> > Order allow,deny
>> >> >> >> > DirectoryIndex index.cgi
>> >> >> >> > AllowOverride None
>> >> >> >> > </Directory>
>> >> >> >> > </VirtualHost>
>> >> >> >> > ------------------------------------------------------------
>> >> >> >> > --- --- --- --- ---------
>> >> >> >> >
>> >> >> >> > the error it gives is
>> >> >> >> > [Tue Feb 21 14:15:48 2006] [error] [client 80.231.220.2]
>> >> >> >> > client
>> >> >> denied
>> >> >> >> > by server configuration:
>> >> >> >> > /home/mine/public_html/cgi-bin/dgate.html
>> >> >> >> >
>> >> >> >> > whats is the error in fact
>> >> >> >> > Regards
>> >> >> >> > Azeem
>> >> >> >> >
>> >> >> >
>> >> >> > i created a new script named helo.pl, its working well when i
>> >> >> > execute it. now i moved suexec from apche path, so apche cant
>> >> >> > access suexec
>> >> as
>> >> >> > well
>> >> >> > but when i access helo.pl in browesr, it is now saying
>> >> >> > No such file or directory
>> >> >> > while file is on exact path and its executable as i have chmod
>> >> >> > it to 777 Regards
>> >> >> > Azeem
>> >> >> >
>> >> >>
>> >> >> is the first line of your "helo.pl" script:
>> >> >>
>> >> >> # !/usr/local/bin/perl
>> >> >>
>> >> >> (or whatever the path is to your perl binary)?
>> >> >>
>> >> > yes, and i tried both, as
>> >> > /usr/bin/perl
>> >> > and
>> >> > /usr/local/bin/perl
>> >> > both r working fine if i run program on shell
>> >> > Regards
>> >> > Azeem
>> >> >
>> >>
>> >>
>> >> if you put an html file under your document root:
>> >>
>> >> DocumentRoot /home/mine/public_html
>> >>
>> >> can you open it with your browser (via http://...)?
>> >>
>> >> [note, normally you don't put your cgi-bin under your document root.
>> >> rather you put it parallel to it (or elsewhere).]
>> >>
>> >> could you send the error_log line where you're getting the "no such
>> file
>> >> or directory" error.
>> >>
>> >>
>> > and about .html is that server is working already hosting my website,
>> > so normal html is working fine
>> > below is error log
>> > ---------------------------------------------------------------------
>> > --- -----
>> > [Tue Feb 21 15:54:08 2006] [error] (2)No such file or directory: exec
>> > of /home/mine/public_html/cgi-bin/helo.pl failed
>> > [Tue Feb 21 15:54:08 2006] [error] [client 80.231.220.2] Premature
end
>> > of script headers: /home/mine/public_html/cgi-bin/helo.pl
>> > ---------------------------------------------------------------------
>> > --- -----
>> > not that the "No such file or directory" come only if i disable
>> > suexec, otherwise only the second line appears
>> > Regards
>> > Azeem
>> >
>>
>>
>> could you send your helo.pl script -- some aspect of it appears to be
>> the problem.
>>
>>
>
> its simply
> -----------------------------------
># !/usr/bin/perl
> print "Content-type: text/html\n\n";
> print "Hello";
> -----------------------------------
> Regards
> Azeem
>
is your cgi-bin directory permitted as exec (it doesn't need read, only
exec) to the user that is running your web server?
i assume you're running apache 2.x -- are you aware that "user" and
"group" directives aren't supported in the cgi-bin directive set in that
version. see:
<http://httpd.apache.org/docs/2.2/mod/mod_suexec.html#suexecusergroup>
for details.
i changed the dir and files to rwx ie
chmod -R 777 cgi-bin
even then its saying premature end of script
Regards
Azeem
