Date: Sat, 10 May 2003 02:10:29 +1000 From: Sean Winn <sean@gothic.net.au> To: "Troy Settle" <troy@psknet.com>, "'Nielsen'" <nielsen@memberwebs.com>, "'Jeremy Springer'" <jeremys@oregontrail.net>, <freebsd-isp@freebsd.org> Subject: Re: Frontpage *ahem* woes Message-ID: <200305100210.29058.sean@gothic.net.au> In-Reply-To: <000601c315b9$ee795d10$aa8ffea9@abyss> References: <000601c315b9$ee795d10$aa8ffea9@abyss>
next in thread | previous in thread | raw e-mail | index | archive | help
On Fri, 9 May 2003 09:31 am, Troy Settle wrote:
> I should have been more clear...
>
> I did get the apache/ssl/fp combo to work, but what I ran into, was that
> every FP web had to run as the same user, which is/was not desirable.
>
> It all comes down to getting suexec/fpexec/etc to all play nice
> together, and I was unable to come up with the magic formula to get it
> done.
>
Which mod_frontpage module were you trying?
/usr/ports/www/mod_frontpage has
ap_cleanup_for_exec ();
suexec_saved_val = ap_suexec_enabled;
ap_suexec_enabled = FALSE;
child_pid = ap_call_exec (r, pinfo, argv0, env, 0);
ap_suexec_enabled = suexec_saved_val;
Which explicitly disabled suexec for the frontpage helper execution, so it
works fine with suexec.
/usr/ports/www/apache13-fp has a mod_frontpage.c that looks like it fudges the
normal CGI call path, so that it just does a normal CGI run of the frontpage
helper.... that doesn't give an opportunity to disable suexec, so probably
won't work with it.
/usr/ports/www/mod_frontpage is too trusting of environment variables though,
and if there's any other ways of running a binary as the web server, it's a
security problem as it's written...even the Makefile says as much.
> --
> Troy Settle
> Pulaski Networks
> http://www.psknet.com
> 540.994.4254 ~ 866.477.5638
> Pulaski Chamber 2002 Small Business Of The Year
>
> > -----Original Message-----
> > From: Nielsen [mailto:nielsen@memberwebs.com]
> > Sent: None
> > To: Troy Settle; 'Jeremy Springer'; freebsd-isp@freebsd.org
> > Subject: Re: Frontpage *ahem* woes
> >
> >
> > Here's something I came up with:
> >
> > http://memberwebs.com/nielsen/unix/docs/frontpage.html
> >
> >
> > ----- Original Message -----
> > From: "Troy Settle" <troy@psknet.com>
> > To: "'Jeremy Springer'" <jeremys@oregontrail.net>;
> > <freebsd-isp@freebsd.org>
> > Sent: Thursday, May 08, 2003 12:48
> > Subject: RE: Frontpage *ahem* woes
> >
> >
> >
> > After weeks and months of putzing around with that same combo, I
> > finally
> > gave up. Since I had no sites requireing SSL, I simply pulled support
> > for it.
> >
> > The problem, as near as I can tell, is a conflict between suexec and
> > fpexec. It's something I've not been able to resolve (even after
> > pouring over patches used in the apache13-fp port).
> >
> > I still maintain that it would be nice to have a SINGLE apache port
> > with
> > options for whatever the user wants (similar to how the PHP port let's
> > you select which modules to add support for).
> >
> > --
> > Troy Settle
> > Pulaski Networks
> > http://www.psknet.com
> > 540.994.4254 - 866.477.5638
> >
> > > -----Original Message-----
> > > From: owner-freebsd-isp@freebsd.org
> > > [mailto:owner-freebsd-isp@freebsd.org] On Behalf Of Jeremy Springer
> > > Sent: Thursday, May 08, 2003 2:46 PM
> > > To: freebsd-isp@freebsd.org
> > > Subject: Frontpage *ahem* woes
> > >
> > >
> > > Greetings,
> > >
> > > I am having a real booger of a time getting FrontPage 2002
> > > extensions re-installed from ports after upgrading my server
> > > to FreeBSD 4.8. I am trying for something like
> > > Apache+mod_ssl+mod_php4+mysql+frontpage2002 and can't seem to
> > > find any how-to... Has anyone had any reproducible
> > > experience/luck in this department? Can someone point me to
> > > a good recent FAQ or tutorial?
> > >
> > > Thanks team :)
> > >
> > > Jeremy Springer
> > > Webmaster
> > > http://www.fantasylords.com
> > > _______________________________________________
> > > freebsd-isp@freebsd.org mailing list
> > > http://lists.freebsd.org/mailman/listinfo/freebsd-isp
> > > To unsubscribe, send any mail to
> >
> > "freebsd-isp-unsubscribe@freebsd.org"
> >
> >
> > _______________________________________________
> > freebsd-isp@freebsd.org mailing list
> > http://lists.freebsd.org/mailman/listinfo/freebsd-isp
> > To unsubscribe, send any mail to "freebsd-isp-unsubscribe@freebsd.org"
>
> _______________________________________________
> freebsd-isp@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-isp
> To unsubscribe, send any mail to "freebsd-isp-unsubscribe@freebsd.org"
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200305100210.29058.sean>