Re: access denied

[azeem ahmad]

> From: [e-mail]
> To: azeem ahmad 
> Subject: Re: access denied
> Date: Wed, 22 Feb 2006 01:19:37 +0000
> > > From: [e-mail]
> > > To: azeem ahmad 
> > > Subject: Re: access denied
> > > Date: Wed, 22 Feb 2006 00:19:20 +0000
> > > > > > > >
> > > > > > > >> From: [e-mail]
> > > > > > > >> To: azeem ahmad 
> > > > > > > >> Subject: Re: access denied
> > > > > > > >> Date: Tue, 21 Feb 2006 23:24:06 +0000
> > > > > > > >>
> > > > > > > >> your cgi-bin should contain *scripts*, not html files. apache
> > > > > > > >> won't parse an html file that's in the cgi-bin directory.
>
> [what
> > > > > > > >> are the
> > > > >
> > > > > top
> > > > > > > >> 2-3 lines of "dgate.html"?
> > > > > > > >>
> > > > > > > >> assuming that apache isn't running as the user that owns the
> > > > > > > >> files/directory (there are security implications if it is),
> > > > > > > >> then the directory/files in the cgi-bin need to be
> > > > > > > >> executable/readable by "others".
> > > > > > > >>
> > > > > > > >>
> > > > > > > >> ------------ Original Message ------------
> > > > > > > >> > Date: Tuesday, February 21, 2006 10:17:48 PM +0000
> > > > > > > >> > From: azeem ahmad 
> > > > > > > >> > To: [e-mail], [e-mail]
> > > > > > > >> > Subject: access denied
> > > > > > > >> >
> > > > > > > >> > hi list, my server is denying access to cgi-bin, i m trying
> > > > > > > >> > on it for a while, before that it was even saying that
> > > > > > > >> > premature end of script, but now after some modifications
> > > > > > > >> > (adding cgi-bin directory to virtual host) it says access
> > > > > > > >> > denied
> > > > > > > >> > following is the config
> > > > > > > >> > ------------------------------------------------------------
> > > > > > > >> > --- --- --- --- -----------------
> > > > > > > >> > <VirtualHost 1.2.3.4>
> > > > > > > >> > ServerAlias mine.com
> > > > > > > >> > ServerAdmin [e-mail]
> > > > > > > >> > DocumentRoot /home/mine/public_html
> > > > > > > >> > BytesLog domlogs/mine.com-bytes_log
> > > > > > > >> > ServerName www.mine.com
> > > > > > > >> >
> > > > > > > >> > User mine
> > > > > > > >> > Group mine
> > > > > > > >> > CustomLog /usr/local/apache/domlogs/mine.com combined
> > > > > > > >> > ScriptAlias /cgi-bin/ /home/mine/public_html/cgi-bin/
> > > > > > > >> >
> > > > > > > >> > <Directory /home/mine/public_html/cgi-bin/>
> > > > > > > >> > Options +Indexes +ExecCGI
> > > > > > > >> > Order allow,deny
> > > > > > > >> > DirectoryIndex index.cgi
> > > > > > > >> > AllowOverride None
> > > > > > > >> > </Directory>
> > > > > > > >> > </VirtualHost>
> > > > > > > >> > ------------------------------------------------------------
> > > > > > > >> > --- --- --- --- ---------
> > > > > > > >> >
> > > > > > > >> > the error it gives is
> > > > > > > >> > [Tue Feb 21 14:15:48 2006] [error] [client 80.231.220.2]
> > > > > > > >> > client
> > > > > > > denied
> > > > > > > >> > by server configuration:
> > > > > > > >> > /home/mine/public_html/cgi-bin/dgate.html
> > > > > > > >> >
> > > > > > > >> > whats is the error in fact
> > > > > > > >> > Regards
> > > > > > > >> > Azeem
> > > > > > > >> >
> > > > > > > >
> > > > > > > > i created a new script named helo.pl, its working well when i
> > > > > > > > execute it. now i moved suexec from apche path, so apche cant
> > > > > > > > access suexec
> > > > >
> > > > > as
> > > > > > > > well
> > > > > > > > but when i access helo.pl in browesr, it is now saying
> > > > > > > > No such file or directory
> > > > > > > > while file is on exact path and its executable as i have chmod
> > > > > > > > it to 777 Regards
> > > > > > > > Azeem
> > > > > > > >
> > > > > > >
> > > > > > > is the first line of your "helo.pl" script:
> > > > > > >
> > > > > > >   # !/usr/local/bin/perl
> > > > > > >
> > > > > > > (or whatever the path is to your perl binary)?
> > > > > > >
> > > > > > yes, and i tried both, as
> > > > > > /usr/bin/perl
> > > > > > and
> > > > > > /usr/local/bin/perl
> > > > > > both r working fine if i run program on shell
> > > > > > Regards
> > > > > > Azeem
> > > > >
> > > > > if you put an html file under your document root:
> > > > >
> > > > > DocumentRoot /home/mine/public_html
> > > > >
> > > > > can you open it with your browser (via  http://...)?
> > > > >
> > > > > [note, normally you don't put your cgi-bin under your document root.
> > > > > rather you put it parallel to it (or elsewhere).]
> > > > >
> > > > > could you send the error_log line where you're getting the "no such
> > >
> > > file
> > > > > or directory" error.
> > > >
> > > > and about .html is that server is working already hosting my website,
> > > > so normal html is working fine
> > > > below is error log
> > > >
> > > > [Tue Feb 21 15:54:08 2006] [error] (2)No such file or directory: exec
> > > > of /home/mine/public_html/cgi-bin/helo.pl failed
> > > > [Tue Feb 21 15:54:08 2006] [error] [client 80.231.220.2] Premature
>
> end
> > > > of script headers: /home/mine/public_html/cgi-bin/helo.pl
> > > >
> > > > not that the "No such file or directory" come only if i disable
> > > > suexec, otherwise only the second line appears
> > > > Regards
> > > > Azeem
> > >
> > > could you send your helo.pl script -- some aspect of it appears to be
> > > the problem.
> > its simply
> >
> > # !/usr/bin/perl
> > print "Content-type: text/html\n\n";
> > print "Hello";
> >
> > Regards
> > Azeem
>
> is your cgi-bin directory permitted as exec (it doesn't need read, only
> exec) to the user that is running your web server?
>
> i assume you're running apache 2.x -- are you aware that "user" and
> "group" directives aren't supported in the cgi-bin directive set in that
> version. see:
>
> http://httpd.apache.org/docs/2.2/mod/mod_suexec.html#suexecusergroup
>
> for details.

i changed the dir and files to rwx ie
chmod -R 777 cgi-bin

even then its saying premature end of script

Regards
Azeem