Freeside installation problem

[News Subsystem]

On Thu, 26 Mar 1998, Ivan Kohler wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> 
> Hello,
> 
> Your system needs to support executing the cgi's as the freeside user.
> 
> Your system might support (safe) setuid scripts.  At least Solaris and
> Linux do, and SunOS doesn't.  I'm not sure about others.  If your system
> doesn't support setuid scripts (by ignoring the setuid bit), Perl should
> emulate this behavior.  This is a compile time option, and I _think_ you
> might have to turn it on explicitly.  On my devlopment machine (Debian
> pre-2.0), the `perl-suid' package is part of the standard installation.
> 
> You have chmod'ed the files 4755, correct?
> 
> You may also want to take a look at the suExec feature of Apache, which
> appears to provide similar functionality - it executes scripts as the
> owner of the script (thus the setuid bit would not be needed).  I haven't
> tried this myself.
> 
I believe that it is necessary to have apache running as root in order to 
use the suExec feature.  This is a major security problem, much worse 
that setting the suid bit on a users files.

> On Wed, 25 Mar 1998, {/// Don Spence \} wrote:
> 
> > 
> > Hello Sir,
> > 	   I am very excited about your freeside project. I plan to contribute
> > were I can. But I am having a problem installing. The documentation is not
> > clear on a few points. I finally realized there was a list of CPAN module
> > to install and did that fine. But at this point, whenever I try to run any
> > of the cgi's, I get the following message in my browser:
> > 
> > -----
> > 	Software error:
> > 
> > Not running setuid freeside! at
> > /var/lib/httpd/htdocs/staff/freeside/edit/cust_main.cgi line 45 
> > 
> > Please send mail to this site's webmaster for help. 
> > -----
> > 
> > 
> > I realized that the cgi's have to be executed by freeside and I have set
> > the permissions on the files and set up the account, but I don't know what
> > I missed. Any assistance would be appreciated.
> > 
> > 
> > Thank you for your time,
> > Don Spence
> > 
> > 
> > --
> > ,·°`´°·,¸¸,·°`´°·,¸¸,·°`´°·,¸¸,·°`´°·,¸¸,·°`´°·,¸¸,·°`´°·,¸¸,·°`´°·,
> > :               ////////////  Don Spence \\\\\\\\\\\\              :
> > :                       sirnod at cloudfactory.org                    :
> > :Work:   408'759'2875      don at ultimanet.com    Pager: 408'641'4381:
> > :              Alpha Page: pagesirnod at cloudfactory.org             :
> > :              \\\\\\\\\\\\(80 chars max)////////////              :
> > °·,¸¸,·°`´°·,¸¸,·°`´°·,¸¸,·°`´°·,¸¸,·°`´°·,¸¸,·°`´°·,¸¸,·°`´°·,¸¸,·° 
> > 
> 
> - -- 
> Ivan Kohler <ivan at sisd.com> - finger for PGP key
> Silicon Interactive Software Design - http://www.sisd.com/
> "I want to go on a mountain-top / with a radio and good batteries
>  play a joyous tune / and free the whole human race from suffering" -Bjork
> 
> -----BEGIN PGP SIGNATURE-----
> Version: 2.6.2
> 
> iQCVAwUBNRnsKL7OPBeQJv09AQEqrQP/eZhwSP9US50aJONrh1Wxe052BQbf552x
> 4Gwe7hfAn6s3V0zTdde22m7WYvSZ+24F0FWx6vojllqg8Tqna6lqMVBqtIxrt7vz
> KfUn4ulHwCnGArIdXc5oP18NSVOuMWg53QYgKkF7cuy9qG5sPs1okoeGsaIeXhHN
> U0AKpcf3XeU=
> =DeJW
> -----END PGP SIGNATURE-----
>