[ic] cgiwrap, SUID, "We are out of service," and other questions...

[newsletters @mail.lineaux.com]

I am a newbie on a RAQ4. I installed the tarball of interchange. 
configure went fine.

makecat did not complain. I do have cgiwrap and answered as such, making 
note of the instructions makecat gave me:
>Moving link program to /home/sites/site3/web/cgi-bin/foundation.cgi..done.
>Since you selected the SUEXEC/CGIwrap option and are root, we aren't sure
>which user and group you intended to own the link program. We have selected
>the catalog user's UID/GID (501/501), but this may not match your
>server definition. 
My plan was to have the user interch own the program. So this sounds like 
makecat did what i needed it to, right?  (I couldn't run makecat as 
interch because it gave me a permissions error - maybe because my cgi-bin 
directory is in the site3 folder? i'm not sure)

>If you get a server error, change the ownership to its
>proper value and ensure that the SUID bit is turned off on the link
>program (/home/sites/site3/web/cgi-bin/foundation.cgi)
It does look like SUID is turned off.

-rwxr-xr-x   1 interch  interch      7568 Aug 24 15:44 foundation.cgi

wouldn't there be an "s" in the permissions if SUID was on? but cgiwrap 
brings up an error that the user is not privileged.




I have tried various things I've seen after searching the list archives 
for SUID, RAQ, cgiwrap:
1. chmod u-s foundation.cgi
and restarting interchange
/usr/local/interchange/error.log does not complain, but I get the same 
result.

2. chmod 4755 foundation.cgi
and restarting interchange
/usr/local/interchange/error.log does not complain, but I get the same 
result.


3. when I changed the owner to:
-rwxr-xr-x   1 xxxx  site3      7568 Aug 24 15:44 foundation.cgi

I get the infamous:
"We are out of service or may be experiencing" in my browser

I tried giving apache some directives (and restarting httpd):
<Directory /home/sites/site3/web/cgi-bin>
Options All ExecCgi
</Directory>
to see if that is what cgiwrap wanted from me, but to no avail.



I feel like I must be just some small step away from making the 
foundation demo work - Please Advise!

I greatly appreciate any tips you may be able to offer!


jim kreinbrink
(evil spambots please send to cannedham@lineaux.com)