ISPCP, suexec, and server side includes (SSI)

[bl968]

I am using debian 4.0 on a clean install.

I use a lot of SSI scripts to display information in web pages. Due to the required use of suexec in ISPCP this does not work in the default installation configuration..

The reason is with the layout of ISPCP vs the configuration of suexec...

/usr/lib/apache2/suexec -V
-D AP_DOC_ROOT="/var/www"
-D AP_GID_MIN=100
-D AP_HTTPD_USER="www-data"
-D AP_LOG_EXEC="/var/log/apache2/suexec.log"
-D AP_SAFE_PATH="/usr/local/bin:/usr/bin:/bin"
-D AP_UID_MIN=100
-D AP_USERDIR_SUFFIX="public_html"


Suexec requires that the calling pages be located in

/var/www/username/public_html

ISPCP's format is a bit different.

/var/www/virtual/username/htdocs

If suexec is enabled ISPCP works but server side includes do not. If I disable suexec ISPCP does not work, but server side includes do.

So what do we need to do to fix this, because if we can't I have to keep looking for another hosting control panel. I sadly can't wait more than a day for a fix or workaround.

[ephigenie]

SSI should work with suexec - just fine.

See the suexec conditions :
http://httpd.apache.org/docs/2.0/suexec.html
If your SSI scripts matches these conditions it will work with ispCP

[bl968]

ephigenie Wrote:SSI should work with suexec - just fine.

See the suexec conditions :
http://httpd.apache.org/docs/2.0/suexec.html
If your SSI scripts matches these conditions it will work with ispCP

Oh really?

less /var/log/apache2/error.log

suexec policy violation: see suexec log for more details
suexec policy violation: see suexec log for more details
suexec policy violation: see suexec log for more details
suexec policy violation: see suexec log for more details

less /var/log/apache2/suexec.log

[2008-04-29 10:57:55]: uid: (2002/vu2002) gid: (2002/2002) cmd: bible.cgi
[2008-04-29 10:57:55]: cannot stat program: (bible.cgi)
[2008-04-29 10:57:55]: uid: (2002/vu2002) gid: (2002/2002) cmd: whatsnew.cgi
[2008-04-29 10:57:55]: cannot stat program: (whatsnew.cgi)
[2008-04-29 10:57:55]: uid: (2002/vu2002) gid: (2002/2002) cmd: getweather.cgi
[2008-04-29 10:57:55]: cannot stat program: (getweather.cgi)

ls -l /var/www/virtual/somedomain.com/cgi-bin/

-rwxr-xr-x 1 vu2002 vu2002 395 2008-04-28 20:40 bible.cgi
-rwxr-xr-x 1 vu2002 vu2002 8805 2008-04-28 19:57 getweather.cgi
-rwxr-xr-x 1 vu2002 vu2002 3366 2008-04-28 20:00 whatsnew.cgi

/var/www/virtual/somedomain.com/htdocs# grep "exec cmd" index.htm
<!--#exec cmd="/var/www/virtual/somedomain.com/cgi-bin/bible.cgi"-->
<!--#exec cmd="/var/www/virtual/somedomain.com/cgi-bin/whatsnew.cgi"-->
<!--#exec cmd="/var/www/virtual/somedomain.com/cgi-bin/getweather.cgi"-->

I have tried full paths, partial paths (virtual/somedomain.com/cgi-bin/getweather.cgi), and even just (/cgi-bin/getweather.cgi) none of them worked. Disabling suexec worked every time.

Everything looks proper to me. Come on I checked and double checked all this before I posted.

[ephigenie]

who's the owner of the scripts ?
pls post a "ls -la" of /cgi-bin/ of that domain.

[bl968]

ephigenie Wrote:who's the owner of the scripts ?
pls post a "ls -la" of /cgi-bin/ of that domain.

/var/www/virtual/somedomain.com# ls -la

drwxr-xr-x 3 vu2002 vu2002 4096 2008-04-28 20:40 cgi-bin

here's an ls -la of the scripts from the cgi-bin...

-rwxr-xr-x 1 vu2002 vu2002 395 2008-04-28 20:40 bible.cgi
-rwxr-xr-x 1 vu2002 vu2002 8805 2008-04-28 19:57 getweather.cgi
-rwxr-xr-x 1 vu2002 vu2002 3366 2008-04-28 20:00 whatsnew.cgi

[ephigenie]

I'll check this out today on one of my own servers.
If i can reproduce or find a failure - i'll post here.