Re: [BackupPC-users] Re: CGI-error on Debian Sarge Install ( Premature end of script headers: index.cgi)
Sorry for responding so late. I finally got around to doing wht you suggested, and thought it was worth sending it to the mailing list, if only for the record. > > Basically, /usr/bin/perl, /usr/bin/perl5.8.X, and /usr/bin/suidperl are all > > hardlinks to the same thing, and /usr/bin/sperl5.8.X is a different > > executable, the one whose suid bit should be changed if necessary, instead > > of /usr/bin/suidperl. > So if you try to run it with perl, does it end up running sperl5.8.x and > working? Yes, it works! Setup: -- SuSE 9.3, BackupPC 2.1.0 with patch 1. -- Both the daemon (/opt/backuppc/bin/BackupPC) and the CGI script (/srv/www/cgi-bin/backuppc/BackupPC_Admin) have plain perl in their she-bang lines, and are owned by the backuppc user. -- The CGI script is set suid to the Backuppc user, and none of the scripts in /opt/backuppc/bin/, included the daemon, are (I used to have that to make things work). Tests: -- Without doing anything, the CGI doesn't work, but the daemon does. -- If I chmod u+s /usr/bin/suidperl (and nothing else), the CGI script works, but the daemon doesn't -- If I chmod u+s /usr/bin/sperl5.8.6 (and nothing else), both the CGI script and the daemon work. Bernardo Rechea --- This SF.net email is sponsored by: Splunk Inc. Do you grep through log files for problems? Stop! Download the new AJAX search engine that makes searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click ___ BackupPC-users mailing list BackupPC-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/backuppc-users http://backuppc.sourceforge.net/
Re: [Fwd: Re: [BackupPC-users] Re: CGI-error on Debian Sarge Install ( Premature end of script headers: index.cgi)]
On Thu, 2005-11-17 at 18:25 +0100, Rutger wrote: > > On Thu, 2005-11-17 at 05:48 +0100, Rutger wrote: > >> BTW: > >> > >> This was my output... no Remote-user. On the commandline it works, at > >> the > >> browser it doesn't. > > What messages are listed in the apache error log? > > On my system that is /var/log/apache2/error.log > > As said before: Premature end of script headers: test.cgi So, to recap, you can't even run test.cgi from the browser, just from the command line. Perhaps it is some kind of permission problem? http://sial.org/howto/debug/unix/parsepath What is the output of parsepath /usr/share/backuppc/cgi-bin/test.cgi --- This SF.Net email is sponsored by the JBoss Inc. Get Certified Today Register for a JBoss Training Course. Free Certification Exam for All Training Attendees Through End of 2005. For more info visit: http://ads.osdn.com/?ad_id=7628&alloc_id=16845&op=click ___ BackupPC-users mailing list BackupPC-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/backuppc-users http://backuppc.sourceforge.net/
Re: [Fwd: Re: [BackupPC-users] Re: CGI-error on Debian Sarge Install ( Premature end of script headers: index.cgi)]
On Thu, 2005-11-17 at 05:48 +0100, Rutger wrote: > BTW: > > This was my output... no Remote-user. On the commandline it works, at the > browser it doesn't. What messages are listed in the apache error log? On my system that is /var/log/apache2/error.log --- This SF.Net email is sponsored by the JBoss Inc. Get Certified Today Register for a JBoss Training Course. Free Certification Exam for All Training Attendees Through End of 2005. For more info visit: http://ads.osdn.com/?ad_id=7628&alloc_id=16845&op=click ___ BackupPC-users mailing list BackupPC-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/backuppc-users http://backuppc.sourceforge.net/
Re: [Fwd: Re: [BackupPC-users] Re: CGI-error on Debian Sarge Install ( Premature end of script headers: index.cgi)]
On Thu, 2005-11-17 at 11:25, Rutger wrote: > > On Thu, 2005-11-17 at 05:48 +0100, Rutger wrote: > >> BTW: > >> > >> This was my output... no Remote-user. On the commandline it works, at > >> the > >> browser it doesn't. > > What messages are listed in the apache error log? > > On my system that is /var/log/apache2/error.log > > As said before: Premature end of script headers: test.cgi Do you have other things on the machine you need to keep or would you be better off starting over with ubuntu? It would be easier for others to help if you had some fresh, known setup. -- Les Mikesell [EMAIL PROTECTED] --- This SF.Net email is sponsored by the JBoss Inc. Get Certified Today Register for a JBoss Training Course. Free Certification Exam for All Training Attendees Through End of 2005. For more info visit: http://ads.osdn.com/?ad_id=7628&alloc_id=16845&op=click ___ BackupPC-users mailing list BackupPC-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/backuppc-users http://backuppc.sourceforge.net/
Re: [Fwd: Re: [BackupPC-users] Re: CGI-error on Debian Sarge Install ( Premature end of script headers: index.cgi)]
> On Thu, 2005-11-17 at 05:48 +0100, Rutger wrote: >> BTW: >> >> This was my output... no Remote-user. On the commandline it works, at >> the >> browser it doesn't. > What messages are listed in the apache error log? > On my system that is /var/log/apache2/error.log As said before: Premature end of script headers: test.cgi > > > > --- This SF.Net email is sponsored by the JBoss Inc. Get Certified Today Register for a JBoss Training Course. Free Certification Exam for All Training Attendees Through End of 2005. For more info visit: http://ads.osdn.com/?ad_id=7628&alloc_id=16845&op=click ___ BackupPC-users mailing list BackupPC-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/backuppc-users http://backuppc.sourceforge.net/
Re: [Fwd: Re: [BackupPC-users] Re: CGI-error on Debian Sarge Install ( Premature end of script headers: index.cgi)]
BTW: This was my output... no Remote-user. On the commandline it works, at the browser it doesn't. server-01:/usr/share/backuppc/cgi-bin# /usr/bin/perl test.cgi content-type: text/plain Real user id: 0 Effective user id: 110 Real Group id: 0 0 Effective Group id: 0 0 REMOTE_USER: server-01:/usr/share/backuppc/cgi-bin# su backuppc server-01:/usr/share/backuppc/cgi-bin$ /usr/bin/perl test.cgi content-type: text/plain Real user id: 110 Effective user id: 110 Real Group id: 105 105 Effective Group id: 105 105 REMOTE_USER: server-01:/usr/share/backuppc/cgi-bin$ >> On Wed, 2005-11-16 at 10:38 +0100, Rutger wrote: >>> OK, but what's the solution at this moment ? Suid-perl is installed >>> here, >>> Debain automaticly gets what it needs so it was installed. >>> >> AFAICT, the backuppc interface still needs suid perl. What was the >> outcome of the script I asked you to run? > > I get the same error on the test.cgi, I think I have a real problem with > my install. But nothing strange has been done on it... > >>> Is this fixable or isn't it at the moment ? >> You have an installation issue. It's working very well here, and in >> many other places. > > I really believe it, that was why I couldn't find the error that good. > >>> Or should I install the >>> testing-verion ? >> I think the stable version would be a better idea for now. > > OK, I will get stuck with it. > >> Regards, >> Rich >> >> >> >> >> --- >> This SF.Net email is sponsored by the JBoss Inc. Get Certified Today >> Register for a JBoss Training Course. Free Certification Exam >> for All Training Attendees Through End of 2005. For more info visit: >> http://ads.osdn.com/?ad_id=7628&alloc_id=16845&op=click >> ___ >> BackupPC-users mailing list >> BackupPC-users@lists.sourceforge.net >> https://lists.sourceforge.net/lists/listinfo/backuppc-users >> http://backuppc.sourceforge.net/ >> > > > > > > --- > This SF.Net email is sponsored by the JBoss Inc. Get Certified Today > Register for a JBoss Training Course. Free Certification Exam > for All Training Attendees Through End of 2005. For more info visit: > http://ads.osdn.com/?ad_id=7628&alloc_id=16845&op=click > ___ > BackupPC-users mailing list > BackupPC-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/backuppc-users > http://backuppc.sourceforge.net/ > --- This SF.Net email is sponsored by the JBoss Inc. Get Certified Today Register for a JBoss Training Course. Free Certification Exam for All Training Attendees Through End of 2005. For more info visit: http://ads.osdn.com/?ad_id=7628&alloc_id=16845&op=click ___ BackupPC-users mailing list BackupPC-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/backuppc-users http://backuppc.sourceforge.net/
[Fwd: Re: [BackupPC-users] Re: CGI-error on Debian Sarge Install ( Premature end of script headers: index.cgi)]
> On Wed, 2005-11-16 at 10:38 +0100, Rutger wrote: >> OK, but what's the solution at this moment ? Suid-perl is installed >> here, >> Debain automaticly gets what it needs so it was installed. >> > AFAICT, the backuppc interface still needs suid perl. What was the > outcome of the script I asked you to run? I get the same error on the test.cgi, I think I have a real problem with my install. But nothing strange has been done on it... >> Is this fixable or isn't it at the moment ? > You have an installation issue. It's working very well here, and in > many other places. I really believe it, that was why I couldn't find the error that good. >> Or should I install the >> testing-verion ? > I think the stable version would be a better idea for now. OK, I will get stuck with it. > Regards, > Rich > > > > > --- > This SF.Net email is sponsored by the JBoss Inc. Get Certified Today > Register for a JBoss Training Course. Free Certification Exam > for All Training Attendees Through End of 2005. For more info visit: > http://ads.osdn.com/?ad_id=7628&alloc_id=16845&op=click > ___ > BackupPC-users mailing list > BackupPC-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/backuppc-users > http://backuppc.sourceforge.net/ > --- This SF.Net email is sponsored by the JBoss Inc. Get Certified Today Register for a JBoss Training Course. Free Certification Exam for All Training Attendees Through End of 2005. For more info visit: http://ads.osdn.com/?ad_id=7628&alloc_id=16845&op=click ___ BackupPC-users mailing list BackupPC-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/backuppc-users http://backuppc.sourceforge.net/
Re: [BackupPC-users] Re: CGI-error on Debian Sarge Install ( Premature end of script headers: index.cgi)
> On Wed, 2005-11-16 at 10:38 +0100, Rutger wrote: >> OK, but what's the solution at this moment ? Suid-perl is installed >> here, >> Debain automaticly gets what it needs so it was installed. >> > AFAICT, the backuppc interface still needs suid perl. What was the > outcome of the script I asked you to run? I get the same error on the test.cgi, I think I have a real problem with my install. But nothing strange has been done on it... >> Is this fixable or isn't it at the moment ? > You have an installation issue. It's working very well here, and in > many other places. I really believe it, that was why I couldn't find the error that good. >> Or should I install the >> testing-verion ? > I think the stable version would be a better idea for now. OK, I will get stuck with it. > Regards, > Rich > > > > > --- > This SF.Net email is sponsored by the JBoss Inc. Get Certified Today > Register for a JBoss Training Course. Free Certification Exam > for All Training Attendees Through End of 2005. For more info visit: > http://ads.osdn.com/?ad_id=7628&alloc_id=16845&op=click > ___ > BackupPC-users mailing list > BackupPC-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/backuppc-users > http://backuppc.sourceforge.net/ > --- This SF.Net email is sponsored by the JBoss Inc. Get Certified Today Register for a JBoss Training Course. Free Certification Exam for All Training Attendees Through End of 2005. For more info visit: http://ads.osdn.com/?ad_id=7628&alloc_id=16845&op=click ___ BackupPC-users mailing list BackupPC-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/backuppc-users http://backuppc.sourceforge.net/
Re: [BackupPC-users] Re: CGI-error on Debian Sarge Install ( Premature end of script headers: index.cgi)
On Wed, 2005-11-16 at 14:30, [EMAIL PROTECTED] wrote: > > Suidperl should be owned by root and suid, perl should not. The point > > of the separate suid binary is that it does some additional checking > > and works around the usual race conditions when kernels do the > > suid handling for scripts. > > OK, that clarifies things, thanks a lot, Les. Then I should be doing the > opposite of what I was doing: > > # chmod u+s /usr/bin/suidperl > > And running the script with that... On a normal system, perl notices the suid bit on a script itself and invokes suidperl if it is installed. > http://www.novell.com/linux/security/advisories/2004_43_cyrus_imapd.html > says in point 5: > > - suidperl > SUSE LINUX 9.2 follows the new upstream policy to install > /usr/bin/suidperl as hardlink to /usr/bin/perl. In previous perl > versions it used to be a hardlink to /usr/bin/sperl*. Therefore one > must not set a setuid bit on /usr/bin/suidperl as suggested in the > RPM package description of perl. Set the bit on /usr/bin/sperl5.8.5 > instead if you really need the suid feature. This is too weird for me. I don't have any idea how it is supposed to work > Basically, /usr/bin/perl, /usr/bin/perl5.8.X, and /usr/bin/suidperl are all > hardlinks to the same thing, and /usr/bin/sperl5.8.X is a different > executable, the one whose suid bit should be changed if necessary, instead > of /usr/bin/suidperl. So if you try to run it with perl, does it end up running sperl5.8.x and working? -- Les Mikesell [EMAIL PROTECTED] --- This SF.Net email is sponsored by the JBoss Inc. Get Certified Today Register for a JBoss Training Course. Free Certification Exam for All Training Attendees Through End of 2005. For more info visit: http://ads.osdn.com/?ad_id=7628&alloc_id=16845&op=click ___ BackupPC-users mailing list BackupPC-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/backuppc-users http://backuppc.sourceforge.net/
Re: [BackupPC-users] Re: CGI-error on Debian Sarge Install ( Premature end of script headers: index.cgi)
> Suidperl should be owned by root and suid, perl should not. The point > of the separate suid binary is that it does some additional checking > and works around the usual race conditions when kernels do the > suid handling for scripts. OK, that clarifies things, thanks a lot, Les. Then I should be doing the opposite of what I was doing: # chmod u+s /usr/bin/suidperl And running the script with that... I wonder why SuSE doesn´t set the suid bit on suidperl... OK, so I just did the search I should have done a long time ago (I probably got too frustrated to go to the bottom of the problem at that point and stopped investigating when I got things to work): http://www.novell.com/linux/security/advisories/2004_43_cyrus_imapd.html says in point 5: - suidperl SUSE LINUX 9.2 follows the new upstream policy to install /usr/bin/suidperl as hardlink to /usr/bin/perl. In previous perl versions it used to be a hardlink to /usr/bin/sperl*. Therefore one must not set a setuid bit on /usr/bin/suidperl as suggested in the RPM package description of perl. Set the bit on /usr/bin/sperl5.8.5 instead if you really need the suid feature. Also check your /etc/permissions.local file for references of /usr/bin/suidperl if you where upgrading from previous SUSE LINUX releases. SUSE Linux is not affected by this problem in the default installation, only if the administrator added the s-bit to suidperl. And it seems that SuSE 9.3, and 10.0 (and Debian too, I read) do the same thing. Basically, /usr/bin/perl, /usr/bin/perl5.8.X, and /usr/bin/suidperl are all hardlinks to the same thing, and /usr/bin/sperl5.8.X is a different executable, the one whose suid bit should be changed if necessary, instead of /usr/bin/suidperl. Bernardo Rechea --- This SF.Net email is sponsored by the JBoss Inc. Get Certified Today Register for a JBoss Training Course. Free Certification Exam for All Training Attendees Through End of 2005. For more info visit: http://ads.osdn.com/?ad_idv28&alloc_id845&op=click ___ BackupPC-users mailing list BackupPC-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/backuppc-users http://backuppc.sourceforge.net/
Re: [BackupPC-users] Re: CGI-error on Debian Sarge Install ( Premature end of script headers: index.cgi)
On Wed, 2005-11-16 at 12:15, [EMAIL PROTECTED] wrote: > > Furthermore, the only way I could make the CGI script run was to > > > # chmod u+s /usr/bin/perl > > > Running the script with /usr/bin/suidperl, rather than /usr/bin/perl didn't > make any difference (it might work if chmod'ing it to suid, but then what's > the point?). Suidperl should be owned by root and suid, perl should not. The point of the separate suid binary is that it does some additional checking and works around the usual race conditions when kernels do the suid handling for scripts. -- Les Mikesell [EMAIL PROTECTED] --- This SF.Net email is sponsored by the JBoss Inc. Get Certified Today Register for a JBoss Training Course. Free Certification Exam for All Training Attendees Through End of 2005. For more info visit: http://ads.osdn.com/?ad_id=7628&alloc_id=16845&op=click ___ BackupPC-users mailing list BackupPC-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/backuppc-users http://backuppc.sourceforge.net/
Re: [BackupPC-users] Re: CGI-error on Debian Sarge Install ( Premature end of script headers: index.cgi)
On Wed, 2005-11-16 at 10:38 +0100, Rutger wrote: > OK, but what's the solution at this moment ? Suid-perl is installed here, > Debain automaticly gets what it needs so it was installed. > AFAICT, the backuppc interface still needs suid perl. What was the outcome of the script I asked you to run? > Is this fixable or isn't it at the moment ? You have an installation issue. It's working very well here, and in many other places. > Or should I install the > testing-verion ? I think the stable version would be a better idea for now. Regards, Rich --- This SF.Net email is sponsored by the JBoss Inc. Get Certified Today Register for a JBoss Training Course. Free Certification Exam for All Training Attendees Through End of 2005. For more info visit: http://ads.osdn.com/?ad_id=7628&alloc_id=16845&op=click ___ BackupPC-users mailing list BackupPC-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/backuppc-users http://backuppc.sourceforge.net/
Re: [BackupPC-users] Re: CGI-error on Debian Sarge Install ( Premature end of script headers: index.cgi)
The most difficult part of my BackupPC install was indeed dealing with the
suid stuff (followed by reading up on KeyChain and installing that to do
automated logins).
In case it's useful, here is what I did for SuSE 9.2 (cut-pasted from my
sysadmin notes). Also, I am getting a new backup server, and I'll be going
through the install process again soon, so I this is a good opportunity to
get any comments on my procedure: if anybody sees any big mistakes with
what I did there, I'd be grateful if they were pointed out.
=
The CGI script needs to run with the backuppc uid, because it needs access
to files in the data directory that are owned by the backuppc user. Apache
usually runs under user wwwrun, so I chose to install the script so it
would run suid to backuppc (this is the standard setup in BackupPC's
documentation; see http://backuppc.sourceforge.net/faq/debugCGI.html for
details):
# chmod u+s /srv/www/cgi-bin/backuppc/BackupPC_Admin
# chown backuppc.backuppc /srv/www/cgi-bin/backuppc/BackupPC_Admin
Furthermore, the only way I could make the CGI script run was to
# chmod u+s /usr/bin/perl
Running the script with /usr/bin/suidperl, rather than /usr/bin/perl didn't
make any difference (it might work if chmod'ing it to suid, but then what's
the point?).
Also, after upgrading to SuSE 9.2, the init script complained about wrong
user id, even though the startproc command in it says -u backuppc. I worked
around this by explicitly setting the suid bit on all scripts in
/opt/backuppc/bin:
# chmod u+s /opt/backuppc/bin/*
I think something about how suid execution is handled has changed from SuSE
9.1 to 9.2. It looks like things have been tightened, but I haven't found
info about how to go about this.
Make sure to also set correct execute permision for the main configuration
file, as well as for all directories above it: if the directories above it
don't have the right ownership/permissions, the CGI script won't be able to
read the configuration file, even if it itself has the correct permissions.
We should evaluate whether these permisions pose an acceptable security
risk or not (I think they are OK, but they are a little more lenient than
rw---).
==
That last part still bothers me though...
Bernardo Rechea
|+-->
|| "Rutger" <[EMAIL PROTECTED]>|
|| Sent by:|
|| [EMAIL PROTECTED]|
|| eforge.net |
|| |
|| |
|| 11/16/2005 04:38 AM |
|| Please respond to testacc |
|| |
|+-->
>---|
|
|
| To: backuppc-users@lists.sourceforge.net
|
| cc:
|
| bcc:
|
| Subject: Re: [BackupPC-users] Re: CGI-error on Debian Sarge
Install ( Premature end of |
| script headers: index.cgi)
|
>---|
OK, but what's the solution at this moment ? Suid-perl is installed here,
Debain automaticly gets what it needs so it was installed.
Is this fixable or isn't it at the moment ? Or should I install the
testing-verion ?
> On Tue, 2005-11-15 at 18:41 -0600, OQ wrote:
>> Package: perl-suid (5.8.4-8)
>>
>> Runs setuid Perl scripts
>>
>> suidperl is a setuid root helper program which is invoked by perl
>> when executing scripts with setuid/gid bits set on systems (like
>> linux) which don't have support setuid script execution natively in
>> the kernel.
>>
>> Usage of this program is now strongly deprecated upstream and support
>> (along with this package) will probably be removed in 5.10.
>
> The problem of gaining the correct access rights via a web server will
> remain, regardless of if this package is deprecated. Somehow, the
> problem will continue to need solving. Some kind of sudo wrapper,
> perhaps?
>
> At this time, in any case, the backuppc package for ubuntu
Re: [BackupPC-users] Re: CGI-error on Debian Sarge Install ( Premature end of script headers: index.cgi)
OK, but what's the solution at this moment ? Suid-perl is installed here, Debain automaticly gets what it needs so it was installed. Is this fixable or isn't it at the moment ? Or should I install the testing-verion ? > On Tue, 2005-11-15 at 18:41 -0600, OQ wrote: >> Package: perl-suid (5.8.4-8) >> >> Runs setuid Perl scripts >> >> suidperl is a setuid root helper program which is invoked by perl >> when executing scripts with setuid/gid bits set on systems (like >> linux) which don't have support setuid script execution natively in >> the kernel. >> >> Usage of this program is now strongly deprecated upstream and support >> (along with this package) will probably be removed in 5.10. > > The problem of gaining the correct access rights via a web server will > remain, regardless of if this package is deprecated. Somehow, the > problem will continue to need solving. Some kind of sudo wrapper, > perhaps? > > At this time, in any case, the backuppc package for ubuntu indicates > that suidperl is a required dependency, and it continues to rely on it. > Hopefully, a solution will be built into backuppc in a near term future > release. > > Thanks for the heads-up, I wasn't aware of the issue. > > Regards, > Rich > > > > --- > This SF.Net email is sponsored by the JBoss Inc. Get Certified Today > Register for a JBoss Training Course. Free Certification Exam > for All Training Attendees Through End of 2005. For more info visit: > http://ads.osdn.com/?ad_id=7628&alloc_id=16845&op=click > ___ > BackupPC-users mailing list > BackupPC-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/backuppc-users > http://backuppc.sourceforge.net/ > --- This SF.Net email is sponsored by the JBoss Inc. Get Certified Today Register for a JBoss Training Course. Free Certification Exam for All Training Attendees Through End of 2005. For more info visit: http://ads.osdn.com/?ad_id=7628&alloc_id=16845&op=click ___ BackupPC-users mailing list BackupPC-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/backuppc-users http://backuppc.sourceforge.net/
Re: [BackupPC-users] Re: CGI-error on Debian Sarge Install ( Premature end of script headers: index.cgi)
On Tue, 2005-11-15 at 18:41 -0600, OQ wrote: > Package: perl-suid (5.8.4-8) > > Runs setuid Perl scripts > > suidperl is a setuid root helper program which is invoked by perl > when executing scripts with setuid/gid bits set on systems (like > linux) which don't have support setuid script execution natively in > the kernel. > > Usage of this program is now strongly deprecated upstream and support > (along with this package) will probably be removed in 5.10. The problem of gaining the correct access rights via a web server will remain, regardless of if this package is deprecated. Somehow, the problem will continue to need solving. Some kind of sudo wrapper, perhaps? At this time, in any case, the backuppc package for ubuntu indicates that suidperl is a required dependency, and it continues to rely on it. Hopefully, a solution will be built into backuppc in a near term future release. Thanks for the heads-up, I wasn't aware of the issue. Regards, Rich --- This SF.Net email is sponsored by the JBoss Inc. Get Certified Today Register for a JBoss Training Course. Free Certification Exam for All Training Attendees Through End of 2005. For more info visit: http://ads.osdn.com/?ad_id=7628&alloc_id=16845&op=click ___ BackupPC-users mailing list BackupPC-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/backuppc-users http://backuppc.sourceforge.net/
Re: [BackupPC-users] Re: CGI-error on Debian Sarge Install ( Premature end of script headers: index.cgi)
Package: perl-suid (5.8.4-8)
Runs setuid Perl scripts
suidperl is a setuid root helper program which is invoked by perl
when executing scripts with setuid/gid bits set on systems (like
linux) which don't have support setuid script execution natively in
the kernel.
Usage of this program is now strongly deprecated upstream and support
(along with this package) will probably be removed in 5.10.
On 11/15/05, Rich Duzenbury <[EMAIL PROTECTED]> wrote:
> > > located.
> >
> > The same here, but still the problem.
> >
> Curious.
>
> I put together a short script to just list off the real and effective
> user id's.
>
> /usr/share/backuppc/cgi-bin/test.cgi
>
> #!/usr/bin/perl
> print "content-type: text/plain\n\n",
> "Real user id: $<\n",
> "Effective user id: $>\n",
> "Real Group id: $(\n",
> "Effective Group id: $)\n\n",
> "REMOTE_USER: ", $ENV{REMOTE_USER}, "\n";
>
> chown backuppc.backuppc test.cgi
> chmod 4755 test.cgi
>
> On my system, I get the following output (be sure to call it from the
> browser):
> Real user id: 33
> Effective user id: 33
> Real Group id: 33 33
> Effective Group id: 33 33
>
> REMOTE_USER: backuppc
>
> What happens on your end?
>
> Regards,
> Rich
>
>
>
> ---
> This SF.Net email is sponsored by the JBoss Inc. Get Certified Today
> Register for a JBoss Training Course. Free Certification Exam
> for All Training Attendees Through End of 2005. For more info visit:
> http://ads.osdn.com/?ad_id=7628&alloc_id=16845&op=click
> ___
> BackupPC-users mailing list
> BackupPC-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/backuppc-users
> http://backuppc.sourceforge.net/
>
---
This SF.Net email is sponsored by the JBoss Inc. Get Certified Today
Register for a JBoss Training Course. Free Certification Exam
for All Training Attendees Through End of 2005. For more info visit:
http://ads.osdn.com/?ad_idv28&alloc_id845&op=click
___
BackupPC-users mailing list
BackupPC-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/backuppc-users
http://backuppc.sourceforge.net/
Re: [BackupPC-users] Re: CGI-error on Debian Sarge Install ( Premature end of script headers: index.cgi)
> > located.
>
> The same here, but still the problem.
>
Curious.
I put together a short script to just list off the real and effective
user id's.
/usr/share/backuppc/cgi-bin/test.cgi
#!/usr/bin/perl
print "content-type: text/plain\n\n",
"Real user id: $<\n",
"Effective user id: $>\n",
"Real Group id: $(\n",
"Effective Group id: $)\n\n",
"REMOTE_USER: ", $ENV{REMOTE_USER}, "\n";
chown backuppc.backuppc test.cgi
chmod 4755 test.cgi
On my system, I get the following output (be sure to call it from the browser):
Real user id: 33
Effective user id: 33
Real Group id: 33 33
Effective Group id: 33 33
REMOTE_USER: backuppc
What happens on your end?
Regards,
Rich
---
This SF.Net email is sponsored by the JBoss Inc. Get Certified Today
Register for a JBoss Training Course. Free Certification Exam
for All Training Attendees Through End of 2005. For more info visit:
http://ads.osdn.com/?ad_id=7628&alloc_id=16845&op=click
___
BackupPC-users mailing list
BackupPC-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/backuppc-users
http://backuppc.sourceforge.net/
Re: [BackupPC-users] Re: CGI-error on Debian Sarge Install ( Premature end of script headers: index.cgi)
On Tue, 2005-11-15 at 17:05, Rutger wrote: > >> When installing with apt-get install backuppc this wonderfull program > >> onto > >> a Debian Sarge box, everything goes great. > >> > >> After installing and trying to login into backuppc I get this error in > >> my > >> apache-logs after entering my username and password: > >> > >> Premature end of script headers: index.cgi > > > > > > -rwsr-xr-x backuppc backuppc index.cgi > > > I'm using apache2, and thus I have a symlink > > from /etc/apache2/conf.d/backuppc to /etc/backuppc/apache.conf, which > > has the directives that tell apache where the user credentials are > > located. > > The same here, but still the problem. > I think the problem is that Apache want to call index.cgi as www-data and > that's not what backuppc is going to like. BackupPC want to have it run as > BackupPc and www-data is not having the rights for it ? You are missing the suidperl program or it isn't being found. On fedora/centos you would 'yum install perl-suidperl' but I don't know what the package would be debian. -- Les Mikesell [EMAIL PROTECTED] --- This SF.Net email is sponsored by the JBoss Inc. Get Certified Today Register for a JBoss Training Course. Free Certification Exam for All Training Attendees Through End of 2005. For more info visit: http://ads.osdn.com/?ad_id=7628&alloc_id=16845&op=click ___ BackupPC-users mailing list BackupPC-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/backuppc-users http://backuppc.sourceforge.net/
