On Fri 01 Mar 2002 13:48, Cormac McClean wrote:
> Doing a Linux Web Administration project with a class of 40 students,
> split into 10 teams of 4, each team having access to their own Linux
You want two things:
* Firstly you need Apache's suEXEC mechanism enabled. This allows
each user's CGI scripts to be executed as that user. The procedure
for enabling suEXEC varies with each distribution, but basically it
requires the program "suexec" to be placed in apache's library
directory (/usr/lib/apache, possibly) with the appropriate
permissions (u=rwxs,go=rx). Restart apache with this in place; if
it's set up properly, the apache startup logs will contain a line
[notice] suEXEC mechanism enabled (wrapper: /usr/lib/apache/suexec)
In addition, the users' public_html directories need to have
permissions u=rwx and go=rx or less. CGI scripts within the users'
public_html directories must *not* be seteuid/setegid scripts, and
must not be writeable by anyone other than the user in question.
See http://httpd.apache.org/docs/suexec.html for more information on
the security checks performed by suEXEC.
* Secondly, you need to enable the users for CGI. In your httpd.conf,
look for the section specifying the public_html permissions (should
be something like "<Directory /home/*/public_html>", and add
"ExecCGI" to the Options line for this section. You'll also need
the line "AddHandler cgi-script .cgi" in httpd.conf as you mention.
Restart apache and see how you get on.
Colm Buckley : Systems Architect at NewWorldIQ
Personal : colm at tuatha.org | +353 87 2469146 | www.colm.buckley.name
Business : colm at newworldiq.com | +353 1 4334334 | www.newworldiq.com
Should intra-uterine devices be called "Love springs internal"?
Maintained by the ILUG website team. The aim of Linux.ie is to
support and help commercial and private users of Linux in Ireland. You can
display ILUG news in your own webpages, read backend
information to find out how. Networking services kindly provided by HEAnet, server kindly donated by
Dell. Linux is a trademark of Linus Torvalds,
used with permission. No penguins were harmed in the production or maintenance
of this highly praised website. Looking for the
Indian Linux Users' Group? Try here. If you've read all this and aren't a lawyer: you should be!