Mailinglist Archive: opensuse (1046 mails)
| < Previous | Next > |
Re: [opensuse] perl under apache2 downloads scripts instead of executiing
- From: Dave Howorth <dhoworth@xxxxxxxxxxxxxxxxx>
- Date: Mon, 07 Mar 2011 12:27:24 +0000
- Message-id: <4D74CF2C.4000502@mrc-lmb.cam.ac.uk>
Lucky Leavell wrote:
I think you're missing having the scripts in the right place, or
equivalently you're missing having designated the place where they are
as a right place.
Your change [1] is probably good - it depends on exactly what ownership
and permissions you've set.
Your change [2] allows scripts in the cgi-bin directory to execute, not
those elsewhere. See below.
You're correct [3] that symlinks are a bad idea and you need to have the
files wherever you want them.
You need to add an apache directive to allow script execution in the
directory where your scripts are. For security reasons, it's generally a
bad idea to allow script execution in the htdocs document tree. It is
possible, but I think you'd be better advised to move them to the
standard cgi-bin or to set up a separate tree, outside of apache's
document tree.
I don't know anything about LedgerSMB but I'd guess that security is an
important concern for a financial aplication. So I'd hope that they have
pretty explicit suggestions on how to set it up securely, and also that
their user community is likely to be the best place for detailed advice.
Cheers, Dave
--
To unsubscribe, e-mail: opensuse+unsubscribe@xxxxxxxxxxxx
For additional commands, e-mail: opensuse+help@xxxxxxxxxxxx
OS: OSE11.2 with OSE versions of PERL and Apache2.
I was trying to install LedgerSMB and got to the point of trying to
invoke the application but it downloads the PERL script instead of
executing it. I tried adding an application preference in FireFox but
nothing I've tried works.
Here is what I've tried:
1. Verified that files and directories have permissions that allow
access and execution
2. Added the following to the /etc/apache2/httpd.conf file:
Options +ExecCGI
AddHandler cgi-script .pl
3.I had intially softlinked ledgersmb to /srv/www/htdocs but removed the
link and copied the app to htdocs.
Please tell me what I am missing here.
I think you're missing having the scripts in the right place, or
equivalently you're missing having designated the place where they are
as a right place.
Your change [1] is probably good - it depends on exactly what ownership
and permissions you've set.
Your change [2] allows scripts in the cgi-bin directory to execute, not
those elsewhere. See below.
You're correct [3] that symlinks are a bad idea and you need to have the
files wherever you want them.
You need to add an apache directive to allow script execution in the
directory where your scripts are. For security reasons, it's generally a
bad idea to allow script execution in the htdocs document tree. It is
possible, but I think you'd be better advised to move them to the
standard cgi-bin or to set up a separate tree, outside of apache's
document tree.
I don't know anything about LedgerSMB but I'd guess that security is an
important concern for a financial aplication. So I'd hope that they have
pretty explicit suggestions on how to set it up securely, and also that
their user community is likely to be the best place for detailed advice.
Cheers, Dave
--
To unsubscribe, e-mail: opensuse+unsubscribe@xxxxxxxxxxxx
For additional commands, e-mail: opensuse+help@xxxxxxxxxxxx
| < Previous | Next > |