[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[cobalt-users] Re: Secure Server, Directory aliasing and CGI



> From: "Michael Combe" <mcombe@xxxxxxxxxxxxxxxxx>
> Subject: [cobalt-users] Secure Server, Directory aliasing and CGI

> Here's the problem:  We have a secure URL (secure.domain.com) that other
> virtual sites on our RaQ3 can use.  We have set up symbolic links in the web
> directory of the secure.domain.com directory that will go to the web
> directory of the referring site.  Site1.com can then go secure by going to
> the url secure.domain.com/site1.
> 
> We primarily did this so those e-commerce sites using Miva Merchant can use
> our secure server with their shopping carts.
> 
> The problem came when someone wanted to use a different shopping cart (not
> Miva).  One that uses CGI scripts.  Now when he tries to run his script
> securely, he gets a cgiwrap error, user not privileged.  I can understand
> the reason for this because obviously the owner of the cgi script is not
> going to be the site administrator for the secure site.  So I can see why
> this error would occur.
> 
> My question is how to get around this in this instance.  Is there a way to
> specify privileges for cgiwrapper?

Sorry for my english and if i'm late (I only read digests)

For all the clients of my ssl sites, I use:

# as root:
cd /home/sites/home/web/secure/
ln -s /home/sites/siteXX/web www.sitename.com
chown httpd.httpd www.sitename.com

and after that you can use:

https://www.yoursite.com/secure/www.sitename.com/...

it's a good solution I think without security problems (?)
and they can use all the normal site with ssl and no problems with
cgiwrapper or certificate errors

Henri Clerc
mailto:hclerc@xxxxxxxxxxxx

<><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><>
Archisoft
Ch. des Deux-Puits
1113 St-Saphorin-sur-Morges
SWITZERLAND
mailto:info@xxxxxxxxxxxx     http://www.archisoft.ch
<><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><>