Re: [cobalt-users] UID of script userid less than configured minimum

[Jeff Bilicki <jeffb@xxxxxxxxxxxxx>]

The problem you are running into is that adm is a user.  CGI-wrapper is
trying to run the script as the adm user (UID 3).   Then cgi-wrapper
will not let it run with a uid < 100.  There is a cgi-wrapper to fix
this problem at
ftp://ftp.cobaltnet.com/pub/experimental/security/mips/cgiwrap-raq2-3.6.4.C5.mips.rpm 

But this cgi-wrapper does not correctly handle the PATH_INFO variables
passed to it.  We are currently working on a cgi-wrapper to fix both
problems and it should be available in the near future.

Jeff Bilicki
Cobalt Networks


Provincetown Design Group wrote:
> 
> Gawd, this CGIWrap is a pain in the ass! I'm trying to control access
> to certain CGI scripts by placing them in directories protected with
> .htaccess. After much struggle I actually got it to work! Now I'm
> trying to do it again with another directory and script and it
> doesn't...
> 
> The scripts are exactly the same. The .htaccess files are exactly the
> same except for the AuthUserFile line which points to a different
> .htpasswd file. When I telnet in and run ls -l I get identical info
> on both scripts. The access end is working fine (I can view HTML
> files in the appropriate directories with the appropriate
> user/password combos). When I run one script it works flawlessly, the
> other gives me a CGIWrap page saying "UID of script userid less than
> configured minimum".
> 
> Here's more specifics:
> 
> .htaccess file
> ______________
> 
> AuthName "Restricted"
> AuthType Basic
> require valid-user
> AuthPAM_Enabled off
> AuthUserFile /home/sites/www.mydomain.com/adm_users/.htpasswd
> 
> Output from ls -l for each dir
> ______________________________
> 
> -rwxrwxrwx   1 admin    site3         805 Nov 29 15:48 test1.cgi
> 
> -rwxrwxrwx   1 admin    site3         805 Nov 29 15:48 test2.cgi
> 
> Out put from ls -l for the dir that contains the dirs
> _____________________________________________________
> 
> drwxrwsr-x   2 admin    site3        1024 Nov 29 15:48 adm
> drwxrwsr-x   2 admin    site3        1024 Nov 29 15:30 edit
> 
> Does anyone see any obvious mistakes I'm making??? I was originally
> having problems because I was putting all this in a site that wasn't
> properly configured as a domain (I was using the IP), but this one
> is...
> 
> Help - before I tear out even more hair,
> doug
> 
> . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
> . Doug Anarino                        Managing Director .
> . http://Syntropo.Com/doug      http://Provincetown.Com .
> . Doug@xxxxxxxxxxxxxxxx     http://ProvincetownShop.Com .
> . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
> 
> _______________________________________________
> cobalt-users mailing list
> cobalt-users@xxxxxxxxxxxxxxx
> http://list.cobalt.com/mailman/listinfo/cobalt-users