<div dir="ltr">Lonnie,<div><br></div><div>I see two glaring errors:</div><div>1. no ScriptAlias directive in the userdir.conf file (see main file for use)</div><div>2. The file set up the userdir area read-only. In the cgi-bin stanza, you need:</div><div>Require all granted (in 2.4 the two lines Order Allow Deny and Allow from all became the one Require line -- it's also more flexible)</div><div>The stanza for the directory above it has Require method GET POST OPTIONS</div><div>which locks this area and subdirectories down</div><div><br></div><div>You might want to remove Indexes from your cgi-bin area. Do you really want folks to be able to get a directory listing of the cgi-bin directory? (no, you really don't)</div><div><br></div><div>With those changes and a reload, it should work.</div><div><br></div><div>Before you go production, make sure you remove the cgitb (cgi trace back) module. No sense giving the bad guys more ammo.</div><div><br></div><div>David-</div></div><div class="gmail_extra"><br><div class="gmail_quote">On Wed, Oct 8, 2014 at 2:11 PM, Lonni J Friedman <span dir="ltr"><<a href="mailto:netllama@gmail.com" target="_blank">netllama@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">That's correct, the script works just fine when in /var/www/cgi-bin.<br>
mod_cgi is explicitly loaded.<br>
<br>
I've attached my config files. userdir.conf & 01-cgi.conf are<br>
included from httpd.conf.<br>
<div class="HOEnZb"><div class="h5"><br>
On Wed, Oct 8, 2014 at 12:06 PM, David A. Bandel <<a href="mailto:david.bandel@gmail.com">david.bandel@gmail.com</a>> wrote:<br>
> Lonnie,<br>
><br>
> OK, there must be a global configuration that's preventing this script from<br>
> running. Can you post your entire config file? If you don't want to do<br>
> that, I can provide an alternate means to pass it to me. Also, you said<br>
> these run if you put them in your global cgi-bin directory, just not as a<br>
> user, correct? So mod_cgi is loaded (please confirm).<br>
><br>
> David-<br>
><br>
> On Wed, Oct 8, 2014 at 12:34 PM, Lonni J Friedman <<a href="mailto:netllama@gmail.com">netllama@gmail.com</a>><br>
> wrote:<br>
>><br>
>> I saved the script in /home/netllama/public_html/cgi-bin/m.py, made it<br>
>> executable for everyone, and ran it manually:<br>
>><br>
>> [netllama@netllama cgi-bin]$ ./m.py<br>
>> Content-Type: text/plain;charset=utf-8<br>
>><br>
>> Hello World!<br>
>><br>
>><br>
>> I then attempted to call it from firefox, and I saw another 500<br>
>> Internal Server Error:<br>
>> [Wed Oct 08 10:32:06.977104 2014] [cgi:error] [pid 26629] [client<br>
>> <a href="http://127.0.0.1:59320" target="_blank">127.0.0.1:59320</a>] End of script output before headers: m.py<br>
>><br>
>><br>
>> I've already got the SetHandler in the config:<br>
>> <Directory /home/*/public_html/cgi-bin><br>
>> AllowOverride Indexes AuthConfig<br>
>> Options ExecCGI FollowSymLinks<br>
>> SetHandler cgi-script<br>
>> AddHandler cgi-script .py<br>
>> </Directory><br>
>><br>
>> I'm using apache-2.4.10.<br>
>><br>
>><br>
>> On Tue, Oct 7, 2014 at 7:26 PM, David A. Bandel <<a href="mailto:david.bandel@gmail.com">david.bandel@gmail.com</a>><br>
>> wrote:<br>
>> > Lonnie,<br>
>> ><br>
>> > Phew -- yep, this is why I hate this error.<br>
>> ><br>
>> > Try this:<br>
>> > /----start of script----/<br>
>> > #!/usr/bin/env python<br>
>> > # -*- coding: UTF-8 -*-<br>
>> ><br>
>> > # enable debugging<br>
>> > import cgitb<br>
>> > cgitb.enable()<br>
>> ><br>
>> > print "Content-Type: text/plain;charset=utf-8"<br>
>> > print<br>
>> ><br>
>> > print "Hello World!"<br>
>> ><br>
>> > ----/end of script/----<br>
>> ><br>
>> > Your script and this one (call it test.py) should both be executable,<br>
>> > owned<br>
>> > by the same user, and in the user's cgi-bin directory.<br>
>> ><br>
>> > Ensure you can run both from the command line, then try to run them in<br>
>> > apache by connecting with a browser.<br>
>> ><br>
>> > If test.py works, but your foo.py script doesn't, the problem is in your<br>
>> > foo.py script. Make sure your script is outputting a content-type line<br>
>> > (see<br>
>> > above).<br>
>> ><br>
>> > If the test.py does not work, we have a configuration issue.<br>
>> ><br>
>> > Could also add a "SetHandler: cgi-script" to your cgi-directory stanza.<br>
>> ><br>
>> > BTW: which version of apache? 2.2 or 2.4 (some declarations changed<br>
>> > between<br>
>> > these two version numbers)<br>
>> ><br>
>> ><br>
>> > David-<br>
>> ><br>
>> ><br>
>> > On Tue, Oct 7, 2014 at 6:17 PM, Lonni J Friedman <<a href="mailto:netllama@gmail.com">netllama@gmail.com</a>><br>
>> > wrote:<br>
>> >><br>
>> >> I definitely have suexec enabled:<br>
>> >> [Mon Oct 06 16:09:31.518777 2014] [suexec:notice] [pid 20128] AH01232:<br>
>> >> suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)<br>
>> >><br>
>> >> Renaming the suexec binary, and retrying didn't really help:<br>
>> >> [Tue Oct 07 16:17:15.854011 2014] [cgi:error] [pid 26631] [client<br>
>> >> <a href="http://127.0.0.1:55657" target="_blank">127.0.0.1:55657</a>] AH01215: (2)No such file or directory: exec of<br>
>> >> '/usr/sbin/suexec' failed<br>
>> >> [Tue Oct 07 16:17:15.854671 2014] [cgi:error] [pid 26631] [client<br>
>> >> <a href="http://127.0.0.1:55657" target="_blank">127.0.0.1:55657</a>] End of script output before headers: foo.py<br>
>> >><br>
>> >> I added a handler to the "<Directory /home/*/public_html/cgi-bin>"<br>
>> >> section of my apache config, but that didn't have any impact on the<br>
>> >> problem.<br>
>> >><br>
>> >> Any other suggestions?<br>
>> >><br>
>> >><br>
>> >> On Tue, Oct 7, 2014 at 6:28 AM, David A. Bandel<br>
>> >> <<a href="mailto:david.bandel@gmail.com">david.bandel@gmail.com</a>><br>
>> >> wrote:<br>
>> >> > Lonnie,<br>
>> >> ><br>
>> >> > With or without suexec, you will need a handler line:<br>
>> >> > AddHandler cgi-script .cgi .py<br>
>> >> > (make sure the above line has the pertinent extension, like .py and<br>
>> >> > your<br>
>> >> > python script ends in .py)<br>
>> >> ><br>
>> >> > If using suexec, you should see a line in your error_log:<br>
>> >> > suEXEC mechanism enabled<br>
>> >> ><br>
>> >> > Your script must be runable by suEXEC user. You might find it<br>
>> >> > easier<br>
>> >> > to<br>
>> >> > disable suexec (unless you need it). Just rename the suexec script<br>
>> >> > and<br>
>> >> > restart apache and test. If you the script works but you need suexec<br>
>> >> > (because you're going to have lots of users that need to run CGI<br>
>> >> > scripts),<br>
>> >> > then you'll need to troubleshoot the suexec mess.<br>
>> >> ><br>
>> >> > David-<br>
>> >> ><br>
>> >> > On Mon, Oct 6, 2014 at 8:55 PM, Lonni J Friedman <<a href="mailto:netllama@gmail.com">netllama@gmail.com</a>><br>
>> >> > wrote:<br>
>> >> >><br>
>> >> >> Hi David,<br>
>> >> >> I was actually leaning towards some kind of apache configuration<br>
>> >> >> issue, but clearly i'm not the expert here, or I would have figured<br>
>> >> >> it<br>
>> >> >> out myself :)<br>
>> >> >><br>
>> >> >> To answer your questions:<br>
>> >> >> Its a python script that I'm trying to run.<br>
>> >> >> $HOME is on the same partition as / (which is the same partition as<br>
>> >> >> the apache $DOCROOT). Its all on a development system, not anything<br>
>> >> >> resembling production.<br>
>> >> >> The user's UID is greater than 1000.<br>
>> >> >> I am using suexec.<br>
>> >> >><br>
>> >> >> I'd be happy to answer any other questions.<br>
>> >> >><br>
>> >> >> thanks<br>
>> >> >><br>
>> >> >><br>
>> >> >> On Mon, Oct 6, 2014 at 6:45 PM, David A. Bandel<br>
>> >> >> <<a href="mailto:david.bandel@gmail.com">david.bandel@gmail.com</a>><br>
>> >> >> wrote:<br>
>> >> >> > Lonnie,<br>
>> >> >> ><br>
>> >> >> > This is one of the most annoying, frustrating errors. All it says<br>
>> >> >> > is<br>
>> >> >> > that<br>
>> >> >> > the script didn't work. This may be permissions. It may be your<br>
>> >> >> > $HOME<br>
>> >> >> > mount is non-executable. Difficult to say. You didn't say what<br>
>> >> >> > kind<br>
>> >> >> > of<br>
>> >> >> > script it was (Perl, PHP, shell). Is the UID of the user greater<br>
>> >> >> > than<br>
>> >> >> > 1000?<br>
>> >> >> > Are you using suexec?<br>
>> >> >> ><br>
>> >> >> > I hate this error. Will be either one of the permissions issues<br>
>> >> >> > above<br>
>> >> >> > or<br>
>> >> >> > some Apache configuration issue (I'm betting on permissions).<br>
>> >> >> ><br>
>> >> >> > David-<br>
>> >> >> ><br>
>> >> >> > On Mon, Oct 6, 2014 at 5:57 PM, Lonni J Friedman<br>
>> >> >> > <<a href="mailto:netllama@gmail.com">netllama@gmail.com</a>><br>
>> >> >> > wrote:<br>
>> >> >> >><br>
>> >> >> >> Howdy folks,<br>
>> >> >> >> Any cgi/apach experts still around? I'm trying to get cgi<br>
>> >> >> >> scripts<br>
>> >> >> >> working from $USERDIR on a new Fedora system, and they all fail<br>
>> >> >> >> with<br>
>> >> >> >> internal server errors. In the apache error log, I see:<br>
>> >> >> >> [cgi:error] End of script output before headers<br>
>> >> >> >><br>
>> >> >> >> If I copy the script over to the server $DOCROOT/cgi-bin then it<br>
>> >> >> >> runs<br>
>> >> >> >> just fine. So this proves the script itself isn't the problem.<br>
>> >> >> >> Additionally, non-cgi scripts are served just fine from $USERDIR.<br>
>> >> >> >> Both the cgi-bin directory and the script itself are executable<br>
>> >> >> >> for<br>
>> >> >> >> all users (755). This is what I've got set in the apache config<br>
>> >> >> >> for<br>
>> >> >> >> the USERDIR directory structure:<br>
>> >> >> >><br>
>> >> >> >> <Directory "/home/*/public_html"><br>
>> >> >> >> AllowOverride FileInfo AuthConfig Limit Indexes<br>
>> >> >> >> Options MultiViews Indexes SymLinksIfOwnerMatch ExecCGI<br>
>> >> >> >> Require method GET POST OPTIONS<br>
>> >> >> >> </Directory><br>
>> >> >> >><br>
>> >> >> >> <Directory /home/*/public_html/cgi-bin><br>
>> >> >> >> AllowOverride Indexes AuthConfig<br>
>> >> >> >> Options ExecCGI<br>
>> >> >> >> SetHandler cgi-script<br>
>> >> >> >> </Directory><br>
>> >> >> >><br>
>> >> >> >><br>
>> >> >> >> Anyone know what I'm missing?<br>
>> >> >> >><br>
>> >> >> >> thanks<br>
>> >> >><br>
>> >> >><br>
>> >> >> --<br>
>> >> >><br>
>> >> >> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~<br>
>> >> >> L. Friedman <a href="mailto:netllama@gmail.com">netllama@gmail.com</a><br>
>> >> >> LlamaLand <a href="http://netllama.linux-sxs.org" target="_blank">http://netllama.linux-sxs.org</a><br>
>> >> >> _______________________________________________<br>
>> >> >> Linux-users mailing list<br>
>> >> >> <a href="mailto:Linux-users@linux-sxs.org">Linux-users@linux-sxs.org</a><br>
>> >> >> <a href="http://mailman.celestial.com/mailman/listinfo/linux-users" target="_blank">http://mailman.celestial.com/mailman/listinfo/linux-users</a><br>
>> >> ><br>
>> >> ><br>
>> >> ><br>
>> >> ><br>
>> >> > --<br>
>> >> > Two things are infinite: the universe and human stupidity; and I'm<br>
>> >> > not<br>
>> >> > sure<br>
>> >> > about the the universe. -- Albert Einstein<br>
>> >> > Visit my web page at: <a href="http://david.bandel.us/" target="_blank">http://david.bandel.us/</a><br>
>> >> ><br>
>> >> > _______________________________________________<br>
>> >> > Linux-users mailing list<br>
>> >> > <a href="mailto:Linux-users@linux-sxs.org">Linux-users@linux-sxs.org</a><br>
>> >> > <a href="http://mailman.celestial.com/mailman/listinfo/linux-users" target="_blank">http://mailman.celestial.com/mailman/listinfo/linux-users</a><br>
>> >> ><br>
>> >><br>
>> >><br>
>> >><br>
>> >> --<br>
>> >> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~<br>
>> >> L. Friedman <a href="mailto:netllama@gmail.com">netllama@gmail.com</a><br>
>> >> LlamaLand <a href="http://netllama.linux-sxs.org" target="_blank">http://netllama.linux-sxs.org</a><br>
>> >> _______________________________________________<br>
>> >> Linux-users mailing list<br>
>> >> <a href="mailto:Linux-users@linux-sxs.org">Linux-users@linux-sxs.org</a><br>
>> >> <a href="http://mailman.celestial.com/mailman/listinfo/linux-users" target="_blank">http://mailman.celestial.com/mailman/listinfo/linux-users</a><br>
>> ><br>
>> ><br>
>> ><br>
>> ><br>
>> > --<br>
>> > Two things are infinite: the universe and human stupidity; and I'm not<br>
>> > sure<br>
>> > about the the universe. -- Albert Einstein<br>
>> > Visit my web page at: <a href="http://david.bandel.us/" target="_blank">http://david.bandel.us/</a><br>
>> ><br>
>> > _______________________________________________<br>
>> > Linux-users mailing list<br>
>> > <a href="mailto:Linux-users@linux-sxs.org">Linux-users@linux-sxs.org</a><br>
>> > <a href="http://mailman.celestial.com/mailman/listinfo/linux-users" target="_blank">http://mailman.celestial.com/mailman/listinfo/linux-users</a><br>
>> ><br>
>><br>
>><br>
>><br>
>> --<br>
>> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~<br>
>> L. Friedman <a href="mailto:netllama@gmail.com">netllama@gmail.com</a><br>
>> LlamaLand <a href="http://netllama.linux-sxs.org" target="_blank">http://netllama.linux-sxs.org</a><br>
>> _______________________________________________<br>
>> Linux-users mailing list<br>
>> <a href="mailto:Linux-users@linux-sxs.org">Linux-users@linux-sxs.org</a><br>
>> <a href="http://mailman.celestial.com/mailman/listinfo/linux-users" target="_blank">http://mailman.celestial.com/mailman/listinfo/linux-users</a><br>
><br>
><br>
><br>
><br>
> --<br>
> Two things are infinite: the universe and human stupidity; and I'm not sure<br>
> about the the universe. -- Albert Einstein<br>
> Visit my web page at: <a href="http://david.bandel.us/" target="_blank">http://david.bandel.us/</a><br>
><br>
> _______________________________________________<br>
> Linux-users mailing list<br>
> <a href="mailto:Linux-users@linux-sxs.org">Linux-users@linux-sxs.org</a><br>
> <a href="http://mailman.celestial.com/mailman/listinfo/linux-users" target="_blank">http://mailman.celestial.com/mailman/listinfo/linux-users</a><br>
><br>
<br>
<br>
<br>
--<br>
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~<br>
L. Friedman <a href="mailto:netllama@gmail.com">netllama@gmail.com</a><br>
LlamaLand <a href="http://netllama.linux-sxs.org" target="_blank">http://netllama.linux-sxs.org</a><br>
</div></div><br>_______________________________________________<br>
Linux-users mailing list<br>
<a href="mailto:Linux-users@linux-sxs.org">Linux-users@linux-sxs.org</a><br>
<a href="http://mailman.celestial.com/mailman/listinfo/linux-users" target="_blank">http://mailman.celestial.com/mailman/listinfo/linux-users</a><br>
<br></blockquote></div><br><br clear="all"><div><br></div>-- <br>Two things are infinite: the universe and human stupidity; and I'm not sure about the the universe. -- Albert Einstein<br>Visit my web page at: <a href="http://david.bandel.us/" target="_blank">http://david.bandel.us/</a>
</div>