setuid ing perl?

2002-04-16 Thread Henk-Jan 

I used " perl -MCPAN -e shell" 
to install new perl modules. 
I now also have perl 5.6.1 (I had 5.6.0)

But I am afraid that my perl does not support setuid anymore.
How can I simply reinstall perl, but then with setuid support using CPAN?

Henk




-- 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: setuid ing perl?

2002-04-16 Thread Henk-Jan 

> On Tue, Apr 16, 2002 at 11:27:50PM +0200, Henk-Jan wrote:
> > I used " perl -MCPAN -e shell"
> > to install new perl modules.
> > I now also have perl 5.6.1 (I had 5.6.0)
>
> This was a bug with older versions of the CPAN shell.  What version of the
> shell are you running?  I'd suggest upgrading it, so that module upgrades
> don't try to upgrade perl.
It is too late now
>
>
> > But I am afraid that my perl does not support setuid anymore.
> > How can I simply reinstall perl, but then with setuid support using
CPAN?
>
> You must be mistaken, 5.6.1 supports setuid.  How did you go about
> determining it doesn't?
>
I want to install a scipt called "openwebmail".
If I run it as root, it works allright (I see html code coming)
If I run it as a user I get: "./openwebmail/pl' must be setuid to root"

This is what is says in the faq:
http://turtle.ee.ncku.edu.tw/openwebmail/doc/faq.txt

Q: I got "Internal server error" when running Open WebMail?
   I got "can not do setuid" error?
   I got "Software error: Can't locate etc/openwebmail.conf in @INC" error?
A: There are many possible answers...

   1. Please check you have installed a complete set of perl 5.005 or above.
  And You uncompress the openwebmail-1.xx.tgz with proper parameter.
  It should be "tar -zxvBpf openwebmail-1.xx.tgz"

   2. Your openwebmail scripts may have wrong owner or mode.
  The permission of

  openwebmail.pl, openwebmail-main.pl,
  openwebmail-read.pl, openwebmail-viewatt.pl,
  openwebmail-send.pl, openwebmail-spell.pl,
  openwebmail-prefs.pl, openwebmail-folder.pl and checkmail.pl

  should be

  mode=4555
  owner=root
  group=mail

   3. Your perl may be compiled with suid ability disabled.
  a. check if you have a executable of suidperl,
 then 'chmod 4555 suidperl'
 and change #!/usr/bin/perl to the path of this suidperl

  b. Or recompile your perl with suid enabled
 Here are the steps:
 1. grab the perl source tar ball
 2. sh Configure -de (de means default perl config)
 3. edit config.sh and set this :
d_dosuid='define'
d_suidsafe='undef'
 4. then make, make install (make suidperl if needed)
 (thanks to Nemo Kaiser, [EMAIL PROTECTED])

  c. Or use uty/suidwrap.pl to generate C wrappers for all suid scripts.
 Here are the steps:
 1. cd cgi-bin/openwebmail
 2. perl uty/wrapsuid.pl /fullpath/cgi-bin/openwebmail

 All suid scripts will be renamed to .scriptname.pl and
 the C wrapper will be generated and named as script.pl
 (thanks to Chris Heegard, [EMAIL PROTECTED])



-- 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: setuid ing perl?

2002-04-17 Thread Henk-Jan 

I want to go for the "recompile" option...
The thing is: It was automagically installed by CPAN.

So how can I "get" perl 5.6.1 using CPAN?
And then I would kow what to do..




> On Wed, Apr 17, 2002 at 09:50:17AM -0800, Michael Fowler wrote:
> > On Wed, Apr 17, 2002 at 06:04:49AM +0200, Henk-Jan wrote:
> > >3. Your perl may be compiled with suid ability disabled.
> >
> > Did you compile Perl yourself, or install from a vendor-provided
package?
> > If the latter, does the vendor provide a package for setuid perl?
>
> Sorry, I forgot for a moment how you came to this predicament.  Assuming
the
> permssions on the openwebmail files are correct, you should probably
> reinstall the perl provided by your vendor, assuming you have that sort of
> OS.  Otherwise, you'll have to recompile perl, or follow 3c.


-- 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]