From owner-freebsd-questions Tue May 8 16:18:35 2001 Delivered-To: freebsd-questions@freebsd.org Received: from earth.wnm.net (earth.wnm.net [208.246.240.243]) by hub.freebsd.org (Postfix) with ESMTP id F395737B422 for ; Tue, 8 May 2001 16:18:32 -0700 (PDT) (envelope-from alex@wnm.net) Received: from localhost (alex@localhost) by earth.wnm.net (8.11.0/8.11.0) with ESMTP id f48NMxI43520; Tue, 8 May 2001 18:22:59 -0500 (CDT) Date: Tue, 8 May 2001 18:22:59 -0500 (CDT) From: Alex Charalabidis To: Drew Tomlinson Cc: "FreeBSD Questions (E-mail)" Subject: Re: Webmin 0.85_4 Running on Apache With SUEXEC Enabled? In-Reply-To: Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Tue, 8 May 2001, Drew Tomlinson wrote: > I installed Webmin from the ports on a 4.3 system a few weeks ago. It > worked fine. Then I tried to move it from its included miniserv.pl to a > virtual host on Apache per the instructions at > http://www.webmin.com/webmin/apache.html. > > Well this didn't work at all. When I attempted to connect to Webmin once it > was running on Apache, I received a 500 - Internal Server Error. The error > log indicated that Apache couldn't setuid. So I searched Google for some > answers and found that setuid and suexec contradict each other so I removed > the setuid bit from all of the webmin files as I enabled suexec when I > compiled Apache. > > Now when I connect to webmin, I get the normal header and no errors. > However instead of seeing various icons on the screen, there is the message > "You do not have access to any Webmin modules.". I've tried looking in the > suexec log but there are no entries. Now I'm stuck. > I think you're just giving yourself unnecessary pain. Webmin as a standalone application, with its built-in SSL support, own access controls, user lists and authentication system, is more than welcome to the extra resources its rudimentary HTTP server eats as far as I'm concerned. I recommend you use it the way it was intended. I find the reduced functionality of running it as setuid CGI and the idea of running Apache as root equally unappealing. Between losing functionality and losing security, I'll take the third option... Never mind the risk of misconfiguring Apache and losing both Apache *and* Webmin when it fails to restart... Plus, as you said yourself, it works fine. :) hth -ac -- =================================================================== Alex Charalabidis Worldspice Technologies 5050 Poplar Ave. Memphis, TN, USA +1 901 432 6000 Opinions expressed are mine alone but may be yours for a small fee. =================================================================== To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message