We are running apache 1.3.27 freshely compiled and default
configuration on a SCO 5.0.5. Install dir= /usr/internet/apache

the "oscars" example provided by Acu has been installed as follows
a. oscars.htm in htdocs
b. oscars.acu in cgi-bin
c. header.htm, footer.htm, body.htm in cgi-bin

Apache executes the sample CGIS ok

As already mentioned in the groups and elsewhere, the .acu may not run
directly. So we created a script; oscars.sh as follows:
#!/bin/sh
runcbl oscars.acu

(runcbl is in the path / also tried runcbl -f oscars.acu ).
The scripts runs fine by itself.

The htm program calls the scripts (we added debug info in the script)

The script by itself, however, (as shonw above), gives an INTERNAL
server error. Error log does not say anything.

Needs some input:
a) is it a server config problem? If so, what should we do?
b) is it an ACU compile error?
c) anything else?

Thank you for your time.

[ Post a follow-up to this message ]

> We are running apache 1.3.27 freshely compiled and default

if it was fresh, the version would be 1.3.29 - ask your vendor for a
current version.

> configuration on a SCO 5.0.5. Install dir= /usr/internet/apache

especially SCO. maybe you should sue 'em to get non-vulnerable
versions - otoh they're probably not supporting their systems any more
as they're concentrating on their core-competency of IP blackmail...

> the "oscars" example provided by Acu has been installed as follows
> a. oscars.htm in htdocs
> b. oscars.acu in cgi-bin
> c. header.htm, footer.htm, body.htm in cgi-bin
>
> Apache executes the sample CGIS ok
>
> As already mentioned in the groups and elsewhere, the .acu may not run
> directly. So we created a script; oscars.sh as follows:
> #!/bin/sh
> runcbl oscars.acu

does it also run fine when executed as the apache user - look what the
majority of your httpd processes runs under - no, root is by no means
an acceptable answer!

> (runcbl is in the path

is it really? look at the rather short path given by the printenv
sample-cgi...

put in absolute paths for both runcbl and oscars.acu and see if it
helps. if not  there might be other interesting things like a chroot
jail...

joachim

[ Post a follow-up to this message ]

Joachim

thanks for your responses.

Tried to run cgi with permissions of a regular user. It runs ok.
However Apache processes run as nouser with is a no-login user.

It is not easy to test the script with that user (unless you know of a
trick)

Also, should the apache configured a special way to run a script like
that?
(the printenv shell scripts run fine)

thanks

jring@web.de (Joachim Ring) wrote in message news:<3ae246c1.0404261121.6973d928@posting.goog
le.com>... 
>
> if it was fresh, the version would be 1.3.29 - ask your vendor for a
> current version.
> 
>
> especially SCO. maybe you should sue 'em to get non-vulnerable
> versions - otoh they're probably not supporting their systems any more
> as they're concentrating on their core-competency of IP blackmail...
> 
>
> does it also run fine when executed as the apache user - look what the
> majority of your httpd processes runs under - no, root is by no means
> an acceptable answer!
> 
>
> is it really? look at the rather short path given by the printenv
> sample-cgi...
>
> put in absolute paths for both runcbl and oscars.acu and see if it
> helps. if not  there might be other interesting things like a chroot
> jail...
>
> joachim

[ Post a follow-up to this message ]

> thanks for your responses.
>
> Tried to run cgi with permissions of a regular user. It runs ok.
> However Apache processes run as nouser with is a no-login user.
>
> It is not easy to test the script with that user (unless you know of a
> trick)

do the following from a rootshell:

# su - nouser

> Also, should the apache configured a special way to run a script like
> that?

no

> (the printenv shell scripts run fine)

what does it print for PATH then? is runcbl in there too?
also even if runcbl is in the path, oscars.acu is probably not found,
so just use absolute paths in the shell wrapper.

joachim

[ Post a follow-up to this message ]