Access Denied.......problem #4

[Myfanwy Hawley]

Hi,

Scene so far: setting up freeside with mysql, everything compiled and seemed
ok. So we went to our Freeside web page to start doing stuff and came to a
screeching halt.

well after getting over the .htaccess problem we are now getting when trying
to put in a New customer:
Forbidden
You don't have permission to access /edit/cust_main.cgi on this server.
(Similar error for all other cgi scripts)

Now firstly it seemed to be a cgi problem as we are running script aliases
in Apache for this, so I put in the folloing lines in srm.conf:
ScriptAlias /cgi-bin/ /usr/local/etc/httpd/cgi-bin/
ScriptAlias /freeside-browse-cgi-bin/ /usr/local/etc/httpd/htdocs/browse/
ScriptAlias /freeside-edit-cgi-bin/ /usr/local/etc/httpd/htdocs/edit/
ScriptAlias /freeside-misc-cgi-bin/ /usr/local/etc/httpd/htdocs/misc/
ScriptAlias /freeside-search-cgi-bin/ /usr/local/etc/httpd/htdocs/search/
ScriptAlias /freeside-view-cgi-bin/ /usr/local/etc/httpd/htdocs/view/

But I was still getting the above error. So I tried running the .cgi from a
command line and got "You haven't disabled setID scripts in kernel yet. Fix
this or c wrap" (that's not quite what it said but its the gist).
So...stumped again and not wanting to upset the kernel (if it aint broke
don't touch it!!)....so I set about and created a chmod 755 cust_main.cgi
then created a 4755 cust_main.sh and:
#! /bin/sh
/usr/local/etc/httpd/htdocs/edit/cust_main.cgi
This got around the setID problem. Now this allowed me to run one of the
other cgi scripts at command line, so I really wanted to test with cust_main
and when I tried to then run it from the command line it runs but.....can't
find Creditcard.pm. It tells me where it can't find the file but its
there!!!!!!

So can any give light to
A. What is causing the forbidden error
B. Whay can't cust_main.cgi find CreditCard.pm
C. Is there an easy fix for the SetID problem.

Myfanwy Hawley
Internet Services Engineer

For Comswest Internet HelpDesk call 1800 647 716
----------------------------------------------------------------------
Comswest Internet Services
(Services formerly provided by AlphaWest)
http://www.alphawest.net.au
----------------------------------------------------------------------