Re: [cobalt-users] CGI Wrap error - who should be owner

[Hendrik Runte <cobalt@xxxxxxxxxx>]

> Hi All,
> I have deleted a webmail user and since my formail cgi has stopped working.
> I have 'chown' this cgi to my admin user. My questions are
> 
> 1. Who should be the owner of this file, the error ?
> 2. What CHMOD settings should this CGI have, 755?
> 3. Is the Cobalt apache user called 'nobody'? (Is this the default)
> 4. Why did my CGIWrap error say "the user (nobody) does not have permission
> to execute the script?
> 5.
> 
> 
> 
> regards,
> 
> Todd Kirk
> 
> 
> 
> _______________________________________________
> cobalt-users mailing list
> cobalt-users@xxxxxxxxxxxxxxx
> To Subscribe or Unsubscribe, please go to:
> http://list.cobalt.com/mailman/listinfo/cobalt-users
> 

Hi Todd,

the user of your apache can be found in your /etc/httpd/conf/httpd.conf
It probably looks like this:

# User/Group: The name (or #number) of the user/group to run httpd as.
#  On SCO (ODT 3) use User nouser and Group nogroup
#  On HPUX you may not be able to use shared memory as nobody, and the
#  suggested workaround is to create a user www and use that user.
#  NOTE that some kernels refuse to setgid(Group) or semctl(IPC_SET)
#  when the value of (unsigned)Group is above 60000;
#  don't use Group nobody on these systems!

User httpd
Group httpd

you may give your formail script the site admin's user name and the site's
group, ie chown siteadmin.sitex ./formmail.cgi and after that do chmod 755.

BTW, formail is insecure! Search the archives for 'formmail'. It can be
abused by spammers.

User nobody is not used on cobalt apaches. The error will no longer appear
if you apply these changes as told above.

HTH,



Regards,

Hendrik
--