Akopia Akopia Services

[Date Prev][Date Next][Thread Prev][Thread Next][Minivend by date ][Minivend by thread ]

Re: [mv] SECURE SERVER PROBLEM!!!! HELP



******    message to minivend-users from "Paul Burden" <paul_burden@tribalinternet.co.uk>     ******

I went and recreated the problem.

CREATED TEST.PL in www/cgi-bin/test.pl
CREATED TEXT.TXT in /home/langdale/catalogs/test/pages/test.txt

--CGI TEST PROGRAM--------
print "Content-type: text/plain\n\n";
print "HELLO WORLD";

if (!open (FILE, "../../catalogs/test/pages/test.txt")) {
 print "\n<BR>Error:$!";
} else {
 while (<FILE>) { print $_; }
 close(FILE);
}
exit;
--CGI TEST PROGRAM--------

Ran the pl program using the secure link, the error pop up permission
denied.  "https://langdalemodels.com/cgi-bin/test.pl";

I checked the file.
[langdale@host catalogs]$ cd /home/langdale/catalogs/test/pages
[langdale@host pages]$ ls test.txt -all
-rw-r--r--   1 langdale langdale       12 Apr  4 09:11 test.txt


I believe this is what is wrong.  Does this mean apache may need
reconfiguring?  What is that to get test.txt visible to the test.pl program.

--
Regards

Paul Burden
(Tribal Internet)

----------
>From: jojo@buchonline.net
>To: minivend-users@minivend.com
>Subject: Re: [mv] SECURE SERVER PROBLEM!!!! HELP
>Date: Tue, Apr 4, 2000, 11:47 am
>

> ******    message to minivend-users from jojo@buchonline.net     ******
>
> On  4 Apr, Paul Burden wrote:
>> ******    message to minivend-users from "Paul Burden"
> <paul_burden@tribalinternet.co.uk>     ******
>>
>> What are those aliase's
>>
>> I know the cgi-bin has been setup.  Before, they missed out the the / in the
>> cgi-bin script alias in httpd.conf.
>>
>> I know the cgi-bin script alias is fine as before the cgi program was not
>> being found.
>>
>> Once they fixed that script alias the minivend came up but with
>> "unavailable..etc" message.
>>
>> Is there any others??
>
> Paul,
>
> if the setting of the normal cgi is right for any access _without_ SSL,
> there are any wrong setting with cgi _and_ SSL in apache.conf of _your_
> ISP. There are _two_ part of setting for each domain. One _without_ SLL
> _and_ one _with_ SSL like
>
> ----snipp---------
> #
> # Port: The port to which the standalone server listens. For
> # ports < 1023, you will need httpd to be run as root initially.
> #
> Port 80
>
> ##
> ##  SSL Support
> ##
> ##  When we also provide SSL we have to listen to the
> ##  standard HTTP port (see above) and to the HTTPS port
> ##
> <IfDefine SSL>
> Listen 80
> Listen 443
> </IfDefine>
>
> ### This is a setting my domain _without_ SSL
> <VirtualHost 192.168.1.10:80>
>   ServerAdmin jojo@buchonline.org
>   ServerName www.buchonline.org
> [DEL]
>
>   ScriptAlias /cgi-bin/ "/www/buchonline.org/cgi-bin/"
>     <Directory /www/buchonline.org/cgi-bin>
>       AllowOverride None
>       Options None
>       Order allow,deny
>       Allow from all
>       <Limit PUT DELETE PATCH PROPPATCH MKCOL COPY MOVE LOCK UNLOCK>
>         Order deny,allow
>         Deny from all
>       </Limit>
>       Options ExecCGI
>       AddHandler cgi-script .pl
> #      SetHandler cgi-script
>     </Directory>
> [DEL]
> </VirtualHost>
>
> ### This is a setting my domain _with_ SSL
> <VirtualHost 192.168.1.10:443>
>
> #  General setup for the virtual host
> DocumentRoot /home/www
> ServerName server.intrabol.local
> ServerAdmin jojo@local
> [DEL]
>
>   DocumentRoot "/home/www/buchonline.org/html"
>     <Directory /home/www/buchonline.org/html>
>       Options Indexes FollowSymLinks
>       AllowOverride AuthConfig
>       Order allow,deny
>       Allow from all
>       <Limit PUT DELETE PATCH PROPPATCH MKCOL COPY MOVE LOCK UNLOCK>
>         Order deny,allow
>         Deny from all
>       </Limit>
>     </Directory>
> [DEL]
>   ScriptAlias /cgi-bin/ "/home/www/buchonline.org/cgi-bin/"
>     <Directory /home/www/buchonline.org/cgi-bin>
>       AllowOverride None
>       Options None
>       Order allow,deny
>       Order allow,deny
>       Allow from all
>       <Limit PUT DELETE PATCH PROPPATCH MKCOL COPY MOVE LOCK UNLOCK>
>         Order deny,allow
>         Deny from all
>       </Limit>
>       Options ExecCGI
>       AddHandler cgi-script .pl
> #      SetHandler cgi-script
>     </Directory>
> [DEL]
>
> SSLEngine on
> [DEL]
>
> </VirtualHost>
>
> ----snipp---------
>
> HINT: A SSL/https access to the static page or cgi script isnīt the
> same!
>
> Did you tell your ISP about your problem?
>
> Regards,
>
>  Joachim
>
>
> --
> Hans-Joachim Leidinger
> buch online                 jojo@buchonline.net
> Munscheidstr. 14            FAX: +49 209 1671449
> 45886 Gelsenkirchen         FAX: 0209 1671449
>
> -
> To unsubscribe from the list, DO NOT REPLY to this message.  Instead, send
> email with 'UNSUBSCRIBE minivend-users' in the body to Majordomo@minivend.com.
> Archive of past messages: http://www.minivend.com/minivend/minivend-list
> 
-
To unsubscribe from the list, DO NOT REPLY to this message.  Instead, send
email with 'UNSUBSCRIBE minivend-users' in the body to Majordomo@minivend.com.
Archive of past messages: http://www.minivend.com/minivend/minivend-list


Search for: Match: Format: Sort by: