Gentoo Forums
Gentoo Forums
Quick Search: in
suexec in apache2 does not appear to be working [SOLVED!]
View unanswered posts
View posts from last 24 hours

rackathon
 
Reply to topic    Gentoo Forums Forum Index Networking & Security
View previous topic :: View next topic  
Author Message
corey_s
Apprentice
Apprentice


Joined: 29 Jun 2003
Posts: 199

PostPosted: Wed Apr 27, 2005 1:45 pm    Post subject: suexec in apache2 does not appear to be working [SOLVED!] Reply with quote

Everything looks as though it _should_ be working:

w2 root # apache2 -V
Server version: Apache/2.0.52
Server built: Apr 4 2005 15:26:32
Server's Module Magic Number: 20020903:9
Architecture: 32-bit
Server compiled with....
-D APACHE_MPM_DIR="server/mpm/worker"
-D APR_HAS_SENDFILE
-D APR_HAS_MMAP
-D APR_USE_SYSVSEM_SERIALIZE
-D APR_USE_PTHREAD_SERIALIZE
-D SINGLE_LISTEN_UNSERIALIZED_ACCEPT
-D APR_HAS_OTHER_CHILD
-D AP_HAVE_RELIABLE_PIPED_LOGS
-D HTTPD_ROOT="/usr"
-D SUEXEC_BIN="/usr/sbin/suexec2"
-D DEFAULT_SCOREBOARD="logs/apache_runtime_status"
-D DEFAULT_ERRORLOG="logs/error_log"
-D AP_TYPES_CONFIG_FILE="/etc/apache2/conf/mime.types"
-D SERVER_CONFIG_FILE="/etc/apache2/conf/apache2.conf"


w2 root # ls -l /usr/sbin/suexec2
-rws--x--- 1 root apache 10892 Apr 4 15:29 /usr/sbin/suexec2*


w2 root # suexec2 -V
-D AP_DOC_ROOT="/var/www"
-D AP_GID_MIN=100
-D AP_HTTPD_USER="apache"
-D AP_LOG_EXEC="/var/log/apache2/suexec_log"
-D AP_SAFE_PATH="/usr/local/bin:/usr/bin:/bin"
-D AP_SUEXEC_UMASK=077
-D AP_UID_MIN=1000
-D AP_USERDIR_SUFFIX="public_html"


...however, three issues:

w2 conf # apache2 -l
Compiled in modules:
core.c
worker.c
http_core.c
mod_so.c

There's no 'suexec: enabled; valid wrapper ...' in the above.

And:

w2 root # tail /var/log/apache2/error_log
[Wed Apr 27 11:39:22 2005] [notice] Digest: generating secret for digest authentication ...
[Wed Apr 27 11:39:22 2005] [notice] Digest: done
[Wed Apr 27 11:39:23 2005] [notice] Apache/2.0.52 (Gentoo/Linux) configured -- resuming normal operations

So, you can see that there's no: '[notice] suEXEC mechanism enabled ...' in the log


Also, when I use the 'User' and 'Group' directives in my <VirtualHost> - I get the following when I start apache:

* Apache2 has detected a syntax error in your configuration files:
Syntax error on line 51 of /usr/lib/apache2/conf/vhosts/vhosts.conf:
User cannot occur within <VirtualHost> section



Any ideas what I'm doing wrong?

Many thanks!


Last edited by corey_s on Sun May 01, 2005 12:11 am; edited 1 time in total
Back to top
View user's profile Send private message
corey_s
Apprentice
Apprentice


Joined: 29 Jun 2003
Posts: 199

PostPosted: Thu Apr 28, 2005 4:33 pm    Post subject: Reply with quote

- kabumb -


Still no luck in understanding why this is not working - any clues?
Back to top
View user's profile Send private message
dmohs
n00b
n00b


Joined: 09 Dec 2002
Posts: 13
Location: Livermore, CA

PostPosted: Sun May 01, 2005 12:02 am    Post subject: Load the module Reply with quote

Load the module in your configuration file:

Code:
LoadModule suexec_module modules/mod_suexec.so


Also, I believe you want SuexecUserGroup rather than User and Group.

-Dave
Back to top
View user's profile Send private message
corey_s
Apprentice
Apprentice


Joined: 29 Jun 2003
Posts: 199

PostPosted: Sun May 01, 2005 12:12 am    Post subject: Reply with quote

Bingo - that was my problem... didn't load the module, and User/Group are deprecated.

Thanks man!
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Networking & Security All times are GMT - 5 Hours
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum