Re: Http server with authenticated user suexec cgi's

2003-04-03 Thread Evan Webb
It's risky, but you could run apache as root (or suexec the cgi to root) and then within the script itself do a setuid and seteuid. Since apache is forking and execing the cgi itself, you should be able to use setuid (the same way login and ssh does when a user logs into the system). Within perl

Re: Http server with authenticated user suexec cgi's

2003-04-03 Thread I. Forbes
Hello Dustin On 2 Apr 2003 at 8:07, Dustin Douglas wrote: > I don't know of anything that does everything that you want, but a > good starting point might be the apache suexec docs. For apache 1.3.x > they can be found at http://httpd.apache.org/docs/suexec.html > > Implementing the desired fun

Re: Http server with authenticated user suexec cgi's

2003-04-03 Thread Evan Webb
It's risky, but you could run apache as root (or suexec the cgi to root) and then within the script itself do a setuid and seteuid. Since apache is forking and execing the cgi itself, you should be able to use setuid (the same way login and ssh does when a user logs into the system). Within perl

Re: Http server with authenticated user suexec cgi's

2003-04-03 Thread I. Forbes
Hello Dustin On 2 Apr 2003 at 8:07, Dustin Douglas wrote: > I don't know of anything that does everything that you want, but a > good starting point might be the apache suexec docs. For apache 1.3.x > they can be found at http://httpd.apache.org/docs/suexec.html > > Implementing the desired fun

Re: Http server with authenticated user suexec cgi's

2003-04-02 Thread Dustin Douglas
On Wed, 02 Apr 2003 14:57:10 +0200 "I. Forbes" <[EMAIL PROTECTED]> wrote: > Hi All > > I have been playing with scripts to implement some "intranet > functions" via a webrowser cgi interface. > > However I quicky run into a problem with all cgi scripts running > with a single uid/gid (normally

Http server with authenticated user suexec cgi's

2003-04-02 Thread I. Forbes
Hi All I have been playing with scripts to implement some "intranet functions" via a webrowser cgi interface. However I quicky run into a problem with all cgi scripts running with a single uid/gid (normally that of the apache server). To make things work, I must give the httpd server user more

Re: Http server with authenticated user suexec cgi's

2003-04-02 Thread Dustin Douglas
On Wed, 02 Apr 2003 14:57:10 +0200 "I. Forbes" <[EMAIL PROTECTED]> wrote: > Hi All > > I have been playing with scripts to implement some "intranet > functions" via a webrowser cgi interface. > > However I quicky run into a problem with all cgi scripts running > with a single uid/gid (normally

Http server with authenticated user suexec cgi's

2003-04-02 Thread I. Forbes
Hi All I have been playing with scripts to implement some "intranet functions" via a webrowser cgi interface. However I quicky run into a problem with all cgi scripts running with a single uid/gid (normally that of the apache server). To make things work, I must give the httpd server user more