[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: [cobalt-users] admin & su - fixed.



<snip>
> How could "admin" not be permitted to execute a script? I think I have
not
> resolved all of my issues with the rights and other group attributes
of my
> admin user. Can someone shed some light on what else I might have to
do to
> restore my admin user to be the Admin account for the server. Thank
you once
> again.
> 
> Octavio Heredia
> oheredia AT csedge DOT com
> 


Taken from http://users.iol.it/hpstr/ . Take a look here as it contains
lots of good info.

You should upload the file as a site admin or a site user, NOT as admin
or even root (you can`t ftp in as root by default, and there are good
reasons for that).
cgiwrap runs the script, as described above, as a site user. Under
certain circumstances it cannot be run as admin anymore (as admin can
belong to max. 32 groups, and each site has it`s own group). And, it`s a
security issue : the admin password is transmitted in plain text via
ftp; it can be easily sniffed... 

Regards,
Curtis