At 14:19 03.10.2000, Sam Varshavchik wrote:
Lou Hevly writes:
> I'm using qmail and vpopmail in a virtual subhosting environment.
Apache's suexec wrapper is necessary for us because it provides our users
the ability to run CGI and SSI programs under their own user IDs, not that
of the webserver. So if a user's CGI program writes to some sort of
database, this database doesn't have to be world writable. (I really don't
think flexible virtual subhosting can be done without suexec, though I'd be
happy to hear others' opinions.)
>
> Unfortunately, one of the conditions suexec stipulates is that the CGI
program NOT setuid or setgid.
There's something wrong with your configuration. sqwebmail is not some
user's CGI program. It is a system CGI, so any user-related CGI
restrictions are not applicable.
You are able to make a turnaround in such scenario. I have for security
reason similar apache configuration.
My scenario:
vpopmail & sqwebmail, sqwebmail is running as user vpopmail.vchkpw
I've placed the cgi into the "vpopmail" home directory
/home/vpopmail/public_html/cgi-bin/sqwebmail
Now vpopmail user has also its public directory which can be reached with
http://server/~vpopmail/cgi-bin/sqwebmail
suexec executes the cgi correctly without problems
That's AFAIK the only solution using apache/suexec and sqwebmail (and also
qmailadmin)
Peter
