Re: [EMAIL PROTECTED] suEXEC question

2005-10-26 Thread Joshua Slive
On 10/26/05, Gordon Thagard <[EMAIL PROTECTED]> wrote: > I see your point regarding sudo. This opens up a can of security-related > worms. Could anyone suggest a safe, reliable way to authenticate users > via Apache and then execute code as the user to do things like: > > * change passwords > * tur

Re: [EMAIL PROTECTED] suEXEC question

2005-10-26 Thread Gordon Thagard
I see your point regarding sudo. This opens up a can of security-related worms. Could anyone suggest a safe, reliable way to authenticate users via Apache and then execute code as the user to do things like: * change passwords * turn off/on vacation Regards, Joshua Slive wrote: On 10/25/05,

Re: [EMAIL PROTECTED] suEXEC question

2005-10-25 Thread Joshua Slive
On 10/25/05, Gordon Thagard <[EMAIL PROTECTED]> wrote: > After reading the security checks list it seems somewhat clear that only > the apache (perhaps the "nobody" user, as that's how I've set mine) user > can execute cgi or PHP code. I want users to be able to authenticate and > then be able to:

[EMAIL PROTECTED] suEXEC question

2005-10-25 Thread Gordon Thagard
Hello All, I'm unclear as to how one part of suEXEC works. Specifically, I'm refering to the documentation located at http://httpd.apache.org/docs/1.3/suexec.html#usage: *User directories:* The suEXEC wrapper can also be used to execute CGI programs as the user to which the request is being