[ILUG] Apache CGI configuration for personal web space?

[Colm Buckley]

On Fri 01 Mar 2002 13:48, Cormac McClean wrote:

> Doing a Linux Web Administration project with a class of 40 students,
> split into 10 teams of 4, each team having access to their own Linux
> server.

You want two things:

* Firstly you need Apache's suEXEC mechanism enabled.  This allows
  each user's CGI scripts to be executed as that user.  The procedure
  for enabling suEXEC varies with each distribution, but basically it
  requires the program "suexec" to be placed in apache's library
  directory (/usr/lib/apache, possibly) with the appropriate
  permissions (u=rwxs,go=rx).  Restart apache with this in place; if
  it's set up properly, the apache startup logs will contain a line
  like:

[notice] suEXEC mechanism enabled (wrapper: /usr/lib/apache/suexec)

  In addition, the users' public_html directories need to have
  permissions u=rwx and go=rx or less.  CGI scripts within the users'
  public_html directories must *not* be seteuid/setegid scripts, and
  must not be writeable by anyone other than the user in question.
  See http://httpd.apache.org/docs/suexec.html for more information on
  the security checks performed by suEXEC.

* Secondly, you need to enable the users for CGI.  In your httpd.conf,
  look for the section specifying the public_html permissions (should
  be something like "<Directory /home/*/public_html>", and add
  "ExecCGI" to the Options line for this section.  You'll also need
  the line "AddHandler cgi-script .cgi" in httpd.conf as you mention.

Restart apache and see how you get on.

          Colm

-- 
Colm Buckley : Systems Architect at NewWorldIQ
Personal : colm at tuatha.org | +353 87 2469146 | www.colm.buckley.name
Business : colm at newworldiq.com | +353 1 4334334 | www.newworldiq.com
Should intra-uterine devices be called "Love springs internal"?