Akopia Akopia Services

[Date Prev][Date Next][Thread Prev][Thread Next][Minivend by date ][Minivend by thread ]

Re: [mv] SECURE SERVER PROBLEM!!!! HELP



******    message to minivend-users from cfm@maine.com     ******

On Tue, Apr 04, 2000 at 02:20:28PM +0100, Paul Burden wrote:
> ******    message to minivend-users from "Paul Burden" <paul_burden@tribalinternet.co.uk>     ******


I don't know how much of a rush you are in.  I'd bet if you 
hired sysadmin at your ISP for evan an hour you'd be 
up and running pronto.  

> 
> I went and recreated the problem.
> 
> CREATED TEST.PL in www/cgi-bin/test.pl
> CREATED TEXT.TXT in /home/langdale/catalogs/test/pages/test.txt
> 
> --CGI TEST PROGRAM--------
> print "Content-type: text/plain\n\n";
> print "HELLO WORLD";
> 
> if (!open (FILE, "../../catalogs/test/pages/test.txt")) {
>  print "\n<BR>Error:$!";
> } else {
>  while (<FILE>) { print $_; }
>  close(FILE);
> }
> exit;
> --CGI TEST PROGRAM--------
> 
> Ran the pl program using the secure link, the error pop up permission
> denied.  "https://langdalemodels.com/cgi-bin/test.pl";
> 
> I checked the file.
> [langdale@host catalogs]$ cd /home/langdale/catalogs/test/pages
> [langdale@host pages]$ ls test.txt -all
> -rw-r--r--   1 langdale langdale       12 Apr  4 09:11 test.txt
> 
> 
> I believe this is what is wrong.  Does this mean apache may need
> reconfiguring?  What is that to get test.txt visible to the test.pl program.
> 
> --
> Regards
> 
> Paul Burden
> (Tribal Internet)
> 
> ----------
> >From: jojo@buchonline.net
> >To: minivend-users@minivend.com
> >Subject: Re: [mv] SECURE SERVER PROBLEM!!!! HELP
> >Date: Tue, Apr 4, 2000, 11:47 am
> >
> 
> > ******    message to minivend-users from jojo@buchonline.net     ******
> >
> > On  4 Apr, Paul Burden wrote:
> >> ******    message to minivend-users from "Paul Burden"
> > <paul_burden@tribalinternet.co.uk>     ******
> >>
> >> What are those aliase's
> >>
> >> I know the cgi-bin has been setup.  Before, they missed out the the / in the
> >> cgi-bin script alias in httpd.conf.
> >>
> >> I know the cgi-bin script alias is fine as before the cgi program was not
> >> being found.
> >>
> >> Once they fixed that script alias the minivend came up but with
> >> "unavailable..etc" message.
> >>
> >> Is there any others??
> >
> > Paul,
> >
> > if the setting of the normal cgi is right for any access _without_ SSL,
> > there are any wrong setting with cgi _and_ SSL in apache.conf of _your_
> > ISP. There are _two_ part of setting for each domain. One _without_ SLL
> > _and_ one _with_ SSL like
> >
> > ----snipp---------
> > #
> > # Port: The port to which the standalone server listens. For
> > # ports < 1023, you will need httpd to be run as root initially.
> > #
> > Port 80
> >
> > ##
> > ##  SSL Support
> > ##
> > ##  When we also provide SSL we have to listen to the
> > ##  standard HTTP port (see above) and to the HTTPS port
> > ##
> > <IfDefine SSL>
> > Listen 80
> > Listen 443
> > </IfDefine>
> >
> > ### This is a setting my domain _without_ SSL
> > <VirtualHost 192.168.1.10:80>
> >   ServerAdmin jojo@buchonline.org
> >   ServerName www.buchonline.org
> > [DEL]
> >
> >   ScriptAlias /cgi-bin/ "/www/buchonline.org/cgi-bin/"
> >     <Directory /www/buchonline.org/cgi-bin>
> >       AllowOverride None
> >       Options None
> >       Order allow,deny
> >       Allow from all
> >       <Limit PUT DELETE PATCH PROPPATCH MKCOL COPY MOVE LOCK UNLOCK>
> >         Order deny,allow
> >         Deny from all
> >       </Limit>
> >       Options ExecCGI
> >       AddHandler cgi-script .pl
> > #      SetHandler cgi-script
> >     </Directory>
> > [DEL]
> > </VirtualHost>
> >
> > ### This is a setting my domain _with_ SSL
> > <VirtualHost 192.168.1.10:443>
> >
> > #  General setup for the virtual host
> > DocumentRoot /home/www
> > ServerName server.intrabol.local
> > ServerAdmin jojo@local
> > [DEL]
> >
> >   DocumentRoot "/home/www/buchonline.org/html"
> >     <Directory /home/www/buchonline.org/html>
> >       Options Indexes FollowSymLinks
> >       AllowOverride AuthConfig
> >       Order allow,deny
> >       Allow from all
> >       <Limit PUT DELETE PATCH PROPPATCH MKCOL COPY MOVE LOCK UNLOCK>
> >         Order deny,allow
> >         Deny from all
> >       </Limit>
> >     </Directory>
> > [DEL]
> >   ScriptAlias /cgi-bin/ "/home/www/buchonline.org/cgi-bin/"
> >     <Directory /home/www/buchonline.org/cgi-bin>
> >       AllowOverride None
> >       Options None
> >       Order allow,deny
> >       Order allow,deny
> >       Allow from all
> >       <Limit PUT DELETE PATCH PROPPATCH MKCOL COPY MOVE LOCK UNLOCK>
> >         Order deny,allow
> >         Deny from all
> >       </Limit>
> >       Options ExecCGI
> >       AddHandler cgi-script .pl
> > #      SetHandler cgi-script
> >     </Directory>
> > [DEL]
> >
> > SSLEngine on
> > [DEL]
> >
> > </VirtualHost>
> >
> > ----snipp---------
> >
> > HINT: A SSL/https access to the static page or cgi script isnīt the
> > same!
> >
> > Did you tell your ISP about your problem?
> >
> > Regards,
> >
> >  Joachim
> >
> >
> > --
> > Hans-Joachim Leidinger
> > buch online                 jojo@buchonline.net
> > Munscheidstr. 14            FAX: +49 209 1671449
> > 45886 Gelsenkirchen         FAX: 0209 1671449
> >
> > -
> > To unsubscribe from the list, DO NOT REPLY to this message.  Instead, send
> > email with 'UNSUBSCRIBE minivend-users' in the body to Majordomo@minivend.com.
> > Archive of past messages: http://www.minivend.com/minivend/minivend-list
> > 
> -
> To unsubscribe from the list, DO NOT REPLY to this message.  Instead, send
> email with 'UNSUBSCRIBE minivend-users' in the body to Majordomo@minivend.com.
> Archive of past messages: http://www.minivend.com/minivend/minivend-list

-- 

Christopher F. Miller, Publisher                             cfm@maine.com
MaineStreet Communications, Inc         208 Portland Road, Gray, ME  04039
1.207.657.5078                                       http://www.maine.com/
Database publishing, e-commerce, office/internet integration, Debian linux.
-
To unsubscribe from the list, DO NOT REPLY to this message.  Instead, send
email with 'UNSUBSCRIBE minivend-users' in the body to Majordomo@minivend.com.
Archive of past messages: http://www.minivend.com/minivend/minivend-list


Search for: Match: Format: Sort by: