Frontpage *ahem* woes

[Sean Winn]

On Fri, 9 May 2003 09:31 am, Troy Settle wrote:
> I should have been more clear...
>
> I did get the apache/ssl/fp combo to work, but what I ran into, was that
> every FP web had to run as the same user, which is/was not desirable.
>
> It all comes down to getting suexec/fpexec/etc to all play nice
> together, and I was unable to come up with the magic formula to get it
> done.
>

Which mod_frontpage module were you trying?


/usr/ports/www/mod_frontpage has 

        ap_cleanup_for_exec ();
        suexec_saved_val = ap_suexec_enabled;
        ap_suexec_enabled = FALSE;
        child_pid = ap_call_exec (r, pinfo, argv0, env, 0);
        ap_suexec_enabled = suexec_saved_val;

Which explicitly disabled suexec for the frontpage helper execution, so it 
works fine with suexec.

/usr/ports/www/apache13-fp has a mod_frontpage.c that looks like it fudges the 
normal CGI call path, so that it just does a normal CGI run of the frontpage 
helper.... that doesn't give an opportunity to disable suexec, so probably 
won't work with it.

/usr/ports/www/mod_frontpage is too trusting of environment variables though, 
and if there's any other ways of running a binary as the web server, it's a 
security problem as it's written...even the Makefile says as much.



> --
>   Troy Settle
>   Pulaski Networks
>   http://www.psknet.com
>   540.994.4254 ~ 866.477.5638
>   Pulaski Chamber 2002 Small Business Of The Year
>
> > -----Original Message-----
> > From: Nielsen [mailto:nielsen at memberwebs.com]
> > Sent: None
> > To: Troy Settle; 'Jeremy Springer'; freebsd-isp at freebsd.org
> > Subject: Re: Frontpage *ahem* woes
> >
> >
> > Here's something I came up with:
> >
> > http://memberwebs.com/nielsen/unix/docs/frontpage.html
> >
> >
> > ----- Original Message -----
> > From: "Troy Settle" <troy at psknet.com>
> > To: "'Jeremy Springer'" <jeremys at oregontrail.net>;
> > <freebsd-isp at freebsd.org>
> > Sent: Thursday, May 08, 2003 12:48
> > Subject: RE: Frontpage *ahem* woes
> >
> >
> >
> > After weeks and months of putzing around with that same combo, I
> > finally
> > gave up.  Since I had no sites requireing SSL, I simply pulled support
> > for it.
> >
> > The problem, as near as I can tell, is a conflict between suexec and
> > fpexec.  It's something I've not been able to resolve (even after
> > pouring over patches used in the apache13-fp port).
> >
> > I still maintain that it would be nice to have a SINGLE apache port
> > with
> > options for whatever the user wants (similar to how the PHP port let's
> > you select which modules to add support for).
> >
> > --
> >   Troy Settle
> >   Pulaski Networks
> >   http://www.psknet.com
> >   540.994.4254 - 866.477.5638
> >
> > > -----Original Message-----
> > > From: owner-freebsd-isp at freebsd.org
> > > [mailto:owner-freebsd-isp at freebsd.org] On Behalf Of Jeremy Springer
> > > Sent: Thursday, May 08, 2003 2:46 PM
> > > To: freebsd-isp at freebsd.org
> > > Subject: Frontpage *ahem* woes
> > >
> > >
> > > Greetings,
> > >
> > > I am having a real booger of a time getting FrontPage 2002
> > > extensions re-installed from ports after upgrading my server
> > > to FreeBSD 4.8.   I am trying for something like
> > > Apache+mod_ssl+mod_php4+mysql+frontpage2002 and can't seem to
> > > find any how-to...   Has anyone had any reproducible
> > > experience/luck in this department?   Can someone point me to
> > > a good recent FAQ or tutorial?
> > >
> > > Thanks team :)
> > >
> > > Jeremy Springer
> > > Webmaster
> > > http://www.fantasylords.com
> > > _______________________________________________
> > > freebsd-isp at freebsd.org mailing list
> > > http://lists.freebsd.org/mailman/listinfo/freebsd-isp
> > > To unsubscribe, send any mail to
> >
> > "freebsd-isp-unsubscribe at freebsd.org"
> >
> >
> > _______________________________________________
> > freebsd-isp at freebsd.org mailing list
> > http://lists.freebsd.org/mailman/listinfo/freebsd-isp
> > To unsubscribe, send any mail to "freebsd-isp-unsubscribe at freebsd.org"
>
> _______________________________________________
> freebsd-isp at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-isp
> To unsubscribe, send any mail to "freebsd-isp-unsubscribe at freebsd.org"