Re: Dynamic mass virtual hosting with suEXEC

2001-01-23 Thread Ruben Leote Mendes

Hello,

On Thu, Jan 18, 2001 at 04:43:51PM +0100, m wrote:
> 
> use mod_rewrite, I think that's best and more "happy"  :-) solution.
> It's work fine with suexec.

I never used mod_rewrite but I don't think it solves my problem. How do I
specify the User and Group for each domain in an automatic way?

-- 
Rúben Leote Mendes - [EMAIL PROTECTED]

 PGP signature


Re: Dynamic mass virtual hosting with suEXEC

2001-01-18 Thread m


hi,

use mod_rewrite, I think that's best and more "happy"  :-) solution.
It's work fine with suexec.


m.




On Tue, Jan 16, 2001 at 12:14:26AM + or thereabouts, Ruben Leote Mendes wrote:
> Hello,
> 
> I need to setup a dynamic mass virtual hosting server using apache and
> would like to allow the users to have their own CGI. To reduce security
> risks I would like to use suEXEC in this setup. While reading the suEXEC
> documentation that comes with the apache package I learned that I must
> add a User and Group directive in the VirtualHost definition.
> My problem is that I am using mod_vhost_alias like mentioned in the apache
> manual using something like this in httpd.conf:
> 
> VirtualDocumentRoot /www/hosts/%0/docs
> VirtualScriptAlias  /www/hosts/%0/cgi-bin
> 
> Is there a way to make User and Group a function of %0 (the requested host)?
> Would changing suEXEC to run as the owner of the script be a big security hole?
> Is there another way to do this without having to add every virtual host
> to my httpd.conf ?
> 
> Thanks.
> -- 
> Rúben Leote Mendes - [EMAIL PROTECTED]



-- 
--


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Dynamic mass virtual hosting with suEXEC

2001-01-15 Thread Ruben Leote Mendes

Hello,

I need to setup a dynamic mass virtual hosting server using apache and
would like to allow the users to have their own CGI. To reduce security
risks I would like to use suEXEC in this setup. While reading the suEXEC
documentation that comes with the apache package I learned that I must
add a User and Group directive in the VirtualHost definition.
My problem is that I am using mod_vhost_alias like mentioned in the apache
manual using something like this in httpd.conf:

VirtualDocumentRoot /www/hosts/%0/docs
VirtualScriptAlias  /www/hosts/%0/cgi-bin

Is there a way to make User and Group a function of %0 (the requested host)?
Would changing suEXEC to run as the owner of the script be a big security hole?
Is there another way to do this without having to add every virtual host
to my httpd.conf ?

Thanks.
-- 
Rúben Leote Mendes - [EMAIL PROTECTED]

 PGP signature