[gentoo-user] apache2 and suEXEC errors

[gentoo-user] apache2 and suEXEC errors

[reader]

Running:
single user machine for experimentation

I have apache setup to allow user public_html and allow cgi execution
anywhere inside public_html.

The rub is that another cgi script causes a server error (posted
further along)

I have apache2 set to loglevel debug, I have ran the problem cgi
manually from cmdline and received no errors. 

It appears somethign isn't configured to allow suExec but I can't tell
what.  I've made all settings that appeared to be related.  The cgi is
chmod 755.

The log output seems too skimpy to see how to further debug this:

>From /var/log/apache2/error_log
====
[Tue Jun 06 23:23:49 2006] [error] [client 127.0.0.1] (13)Permission denied: exec of '/usr/sbin/suexec2' failed
[Tue Jun 06 23:23:49 2006] [error] [client 127.0.0.1] Premature end of script headers: index.cgi


-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] apache2 and suEXEC errors

[Michael Stewart (vericgar)]

[-- Attachment #1: Type: text/plain, Size: 1386 bytes --]

reader@newsguy.com wrote:
> Running:
> single user machine for experimentation
> 
> I have apache setup to allow user public_html and allow cgi execution
> anywhere inside public_html.
> 
> The rub is that another cgi script causes a server error (posted
> further along)
> 
> I have apache2 set to loglevel debug, I have ran the problem cgi
> manually from cmdline and received no errors. 
> 
> It appears somethign isn't configured to allow suExec but I can't tell
> what.  I've made all settings that appeared to be related.  The cgi is
> chmod 755.
> 
> The log output seems too skimpy to see how to further debug this:
> 
> From /var/log/apache2/error_log
> ====
> [Tue Jun 06 23:23:49 2006] [error] [client 127.0.0.1] (13)Permission denied: exec of '/usr/sbin/suexec2' failed
> [Tue Jun 06 23:23:49 2006] [error] [client 127.0.0.1] Premature end of script headers: index.cgi
> 
> 

The details of the error should be in /var/log/apache2/suexec_log

Also, the permission denied error for suexec2 itself is strange. What
are the permissions on suexec? They should be:
-rws--x---  1 root apache 15107 Jun  6 16:51 /usr/sbin/suexec2


-- 
Michael Stewart                                     vericgar@gentoo.org
Gentoo Developer                        http://dev.gentoo.org/~vericgar

GnuPG Key ID 0x08614788 available on http://pgp.mit.edu
--


[-- Attachment #2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 254 bytes --]

[gentoo-user] Re: apache2 and suEXEC errors

[reader]

"Michael Stewart (vericgar)" <vericgar@gentoo.org> writes:

> The details of the error should be in /var/log/apache2/suexec_log

No and that was one thing that was confusing me.  Suexec doesn't log
becasue the failure happens before it runs.

> Also, the permission denied error for suexec2 itself is strange. What
> are the permissions on suexec? They should be:
> -rws--x---  1 root apache 15107 Jun  6 16:51 /usr/sbin/suexec2

Yes that was the trouble.  Emerge had that set like: root root
So suexec wouldn't fire.


-- 
gentoo-user@gentoo.org mailing list