[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
RE: [cobalt-users] admin & su - fixed.
- Subject: RE: [cobalt-users] admin & su - fixed.
- From: "Curtis Ross" <Curtis_Ross@xxxxxx>
- Date: Tue Jan 8 14:02:03 2002
- List-id: Mailing list for users to share thoughts on Cobalt products. <cobalt-users.list.cobalt.com>
<snip>
> How could "admin" not be permitted to execute a script? I think I have
not
> resolved all of my issues with the rights and other group attributes
of my
> admin user. Can someone shed some light on what else I might have to
do to
> restore my admin user to be the Admin account for the server. Thank
you once
> again.
>
> Octavio Heredia
> oheredia AT csedge DOT com
>
Taken from http://users.iol.it/hpstr/ . Take a look here as it contains
lots of good info.
You should upload the file as a site admin or a site user, NOT as admin
or even root (you can`t ftp in as root by default, and there are good
reasons for that).
cgiwrap runs the script, as described above, as a site user. Under
certain circumstances it cannot be run as admin anymore (as admin can
belong to max. 32 groups, and each site has it`s own group). And, it`s a
security issue : the admin password is transmitted in plain text via
ftp; it can be easily sniffed...
Regards,
Curtis