<div dir="ltr">Lonnie,<div><br></div><div>Well, I believe you still need a "required" line in the /home/*/public_html/ directory portion, but I'm running out of ideas.</div><div><br></div><div>1. Are you using apparmor? If so, kill it.</div><div><br></div><div>Try this for your userdir.conf:</div><div><div><IfModule mod_userdir.c></div><div> UserDir public_html</div><div> UserDir disabled root</div><div><span class="" style="white-space:pre"> </span>AddHandler cgi-script .cgi .pl</div><div> <Directory /home/*/public_html></div><div> AllowOverride FileInfo AuthConfig Limit Indexes</div><div> Options Includes MultiViews Indexes SymLinksIfOwnerMatch</div><div> Require all granted</div><div></Directory><br></div><div><Directory /home/*/public_html/cgi-bin></div><div><div> AllowOverride FileInfo AuthConfig Limit Indexes</div><div> Options ExecCGI Includes MultiViews SymLinksIfOwnerMatch</div><div> Require all granted</div></div><div></IfModule></div></div><div><br></div><div>If the above doesn't work, try accessing from your browser via your hostname vice localhost (if no DNS for the hostname, just add to /etc/hosts).</div><div><br></div><div>Starting to run low on ideas ...</div><div><br></div><div>David-</div><div><br></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Thu, Oct 9, 2014 at 10:52 AM, Lonni J Friedman <span dir="ltr"><<a href="mailto:netllama@gmail.com" target="_blank">netllama@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">I made the changes that you recommended, restarted apache, but it<br>
didn't help. Still getting the same cryptic error. I've attached<br>
userdir.conf with the changes, in case I somehow screwed it up.<br>
<br>
thanks<br>
<div class="HOEnZb"><div class="h5"><br>
On Wed, Oct 8, 2014 at 7:21 PM, David A. Bandel <<a href="mailto:david.bandel@gmail.com">david.bandel@gmail.com</a>> wrote:<br>
> Lonnie,<br>
><br>
> I see two glaring errors:<br>
> 1. no ScriptAlias directive in the userdir.conf file (see main file for<br>
> use)<br>
> 2. The file set up the userdir area read-only. In the cgi-bin stanza, you<br>
> need:<br>
> Require all granted (in 2.4 the two lines Order Allow Deny and Allow from<br>
> all became the one Require line -- it's also more flexible)<br>
> The stanza for the directory above it has Require method GET POST OPTIONS<br>
> which locks this area and subdirectories down<br>
><br>
> You might want to remove Indexes from your cgi-bin area. Do you really want<br>
> folks to be able to get a directory listing of the cgi-bin directory? (no,<br>
> you really don't)<br>
><br>
> With those changes and a reload, it should work.<br>
><br>
> Before you go production, make sure you remove the cgitb (cgi trace back)<br>
> module. No sense giving the bad guys more ammo.<br>
><br>
> David-<br>
><br>
> On Wed, Oct 8, 2014 at 2:11 PM, Lonni J Friedman <<a href="mailto:netllama@gmail.com">netllama@gmail.com</a>> wrote:<br>
>><br>
>> That's correct, the script works just fine when in /var/www/cgi-bin.<br>
>> mod_cgi is explicitly loaded.<br>
>><br>
>> I've attached my config files. userdir.conf & 01-cgi.conf are<br>
>> included from httpd.conf.<br>
>><br>
>> On Wed, Oct 8, 2014 at 12:06 PM, David A. Bandel <<a href="mailto:david.bandel@gmail.com">david.bandel@gmail.com</a>><br>
>> wrote:<br>
>> > Lonnie,<br>
>> ><br>
>> > OK, there must be a global configuration that's preventing this script<br>
>> > from<br>
>> > running. Can you post your entire config file? If you don't want to do<br>
>> > that, I can provide an alternate means to pass it to me. Also, you said<br>
>> > these run if you put them in your global cgi-bin directory, just not as<br>
>> > a<br>
>> > user, correct? So mod_cgi is loaded (please confirm).<br>
>> ><br>
>> > David-<br>
>> ><br>
>> > On Wed, Oct 8, 2014 at 12:34 PM, Lonni J Friedman <<a href="mailto:netllama@gmail.com">netllama@gmail.com</a>><br>
>> > wrote:<br>
>> >><br>
>> >> I saved the script in /home/netllama/public_html/cgi-bin/m.py, made it<br>
>> >> executable for everyone, and ran it manually:<br>
>> >><br>
>> >> [netllama@netllama cgi-bin]$ ./m.py<br>
>> >> Content-Type: text/plain;charset=utf-8<br>
>> >><br>
>> >> Hello World!<br>
>> >><br>
>> >><br>
>> >> I then attempted to call it from firefox, and I saw another 500<br>
>> >> Internal Server Error:<br>
>> >> [Wed Oct 08 10:32:06.977104 2014] [cgi:error] [pid 26629] [client<br>
>> >> <a href="http://127.0.0.1:59320" target="_blank">127.0.0.1:59320</a>] End of script output before headers: m.py<br>
>> >><br>
>> >><br>
>> >> I've already got the SetHandler in the config:<br>
>> >> <Directory /home/*/public_html/cgi-bin><br>
>> >> AllowOverride Indexes AuthConfig<br>
>> >> Options ExecCGI FollowSymLinks<br>
>> >> SetHandler cgi-script<br>
>> >> AddHandler cgi-script .py<br>
>> >> </Directory><br>
>> >><br>
>> >> I'm using apache-2.4.10.<br>
>> >><br>
>> >><br>
>> >> On Tue, Oct 7, 2014 at 7:26 PM, David A. Bandel<br>
>> >> <<a href="mailto:david.bandel@gmail.com">david.bandel@gmail.com</a>><br>
>> >> wrote:<br>
>> >> > Lonnie,<br>
>> >> ><br>
>> >> > Phew -- yep, this is why I hate this error.<br>
>> >> ><br>
>> >> > Try this:<br>
>> >> > /----start of script----/<br>
>> >> > #!/usr/bin/env python<br>
>> >> > # -*- coding: UTF-8 -*-<br>
>> >> ><br>
>> >> > # enable debugging<br>
>> >> > import cgitb<br>
>> >> > cgitb.enable()<br>
>> >> ><br>
>> >> > print "Content-Type: text/plain;charset=utf-8"<br>
>> >> > print<br>
>> >> ><br>
>> >> > print "Hello World!"<br>
>> >> ><br>
>> >> > ----/end of script/----<br>
>> >> ><br>
>> >> > Your script and this one (call it test.py) should both be executable,<br>
>> >> > owned<br>
>> >> > by the same user, and in the user's cgi-bin directory.<br>
>> >> ><br>
>> >> > Ensure you can run both from the command line, then try to run them<br>
>> >> > in<br>
>> >> > apache by connecting with a browser.<br>
>> >> ><br>
>> >> > If test.py works, but your foo.py script doesn't, the problem is in<br>
>> >> > your<br>
>> >> > foo.py script. Make sure your script is outputting a content-type<br>
>> >> > line<br>
>> >> > (see<br>
>> >> > above).<br>
>> >> ><br>
>> >> > If the test.py does not work, we have a configuration issue.<br>
>> >> ><br>
>> >> > Could also add a "SetHandler: cgi-script" to your cgi-directory<br>
>> >> > stanza.<br>
>> >> ><br>
>> >> > BTW: which version of apache? 2.2 or 2.4 (some declarations changed<br>
>> >> > between<br>
>> >> > these two version numbers)<br>
>> >> ><br>
>> >> ><br>
>> >> > David-<br>
>> >> ><br>
>> >> ><br>
>> >> > On Tue, Oct 7, 2014 at 6:17 PM, Lonni J Friedman <<a href="mailto:netllama@gmail.com">netllama@gmail.com</a>><br>
>> >> > wrote:<br>
>> >> >><br>
>> >> >> I definitely have suexec enabled:<br>
>> >> >> [Mon Oct 06 16:09:31.518777 2014] [suexec:notice] [pid 20128]<br>
>> >> >> AH01232:<br>
>> >> >> suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)<br>
>> >> >><br>
>> >> >> Renaming the suexec binary, and retrying didn't really help:<br>
>> >> >> [Tue Oct 07 16:17:15.854011 2014] [cgi:error] [pid 26631] [client<br>
>> >> >> <a href="http://127.0.0.1:55657" target="_blank">127.0.0.1:55657</a>] AH01215: (2)No such file or directory: exec of<br>
>> >> >> '/usr/sbin/suexec' failed<br>
>> >> >> [Tue Oct 07 16:17:15.854671 2014] [cgi:error] [pid 26631] [client<br>
>> >> >> <a href="http://127.0.0.1:55657" target="_blank">127.0.0.1:55657</a>] End of script output before headers: foo.py<br>
>> >> >><br>
>> >> >> I added a handler to the "<Directory /home/*/public_html/cgi-bin>"<br>
>> >> >> section of my apache config, but that didn't have any impact on the<br>
>> >> >> problem.<br>
>> >> >><br>
>> >> >> Any other suggestions?<br>
>> >> >><br>
>> >> >><br>
>> >> >> On Tue, Oct 7, 2014 at 6:28 AM, David A. Bandel<br>
>> >> >> <<a href="mailto:david.bandel@gmail.com">david.bandel@gmail.com</a>><br>
>> >> >> wrote:<br>
>> >> >> > Lonnie,<br>
>> >> >> ><br>
>> >> >> > With or without suexec, you will need a handler line:<br>
>> >> >> > AddHandler cgi-script .cgi .py<br>
>> >> >> > (make sure the above line has the pertinent extension, like .py<br>
>> >> >> > and<br>
>> >> >> > your<br>
>> >> >> > python script ends in .py)<br>
>> >> >> ><br>
>> >> >> > If using suexec, you should see a line in your error_log:<br>
>> >> >> > suEXEC mechanism enabled<br>
>> >> >> ><br>
>> >> >> > Your script must be runable by suEXEC user. You might find it<br>
>> >> >> > easier<br>
>> >> >> > to<br>
>> >> >> > disable suexec (unless you need it). Just rename the suexec<br>
>> >> >> > script<br>
>> >> >> > and<br>
>> >> >> > restart apache and test. If you the script works but you need<br>
>> >> >> > suexec<br>
>> >> >> > (because you're going to have lots of users that need to run CGI<br>
>> >> >> > scripts),<br>
>> >> >> > then you'll need to troubleshoot the suexec mess.<br>
>> >> >> ><br>
>> >> >> > David-<br>
>> >> >> ><br>
>> >> >> > On Mon, Oct 6, 2014 at 8:55 PM, Lonni J Friedman<br>
>> >> >> > <<a href="mailto:netllama@gmail.com">netllama@gmail.com</a>><br>
>> >> >> > wrote:<br>
>> >> >> >><br>
>> >> >> >> Hi David,<br>
>> >> >> >> I was actually leaning towards some kind of apache configuration<br>
>> >> >> >> issue, but clearly i'm not the expert here, or I would have<br>
>> >> >> >> figured<br>
>> >> >> >> it<br>
>> >> >> >> out myself :)<br>
>> >> >> >><br>
>> >> >> >> To answer your questions:<br>
>> >> >> >> Its a python script that I'm trying to run.<br>
>> >> >> >> $HOME is on the same partition as / (which is the same partition<br>
>> >> >> >> as<br>
>> >> >> >> the apache $DOCROOT). Its all on a development system, not<br>
>> >> >> >> anything<br>
>> >> >> >> resembling production.<br>
>> >> >> >> The user's UID is greater than 1000.<br>
>> >> >> >> I am using suexec.<br>
>> >> >> >><br>
>> >> >> >> I'd be happy to answer any other questions.<br>
>> >> >> >><br>
>> >> >> >> thanks<br>
>> >> >> >><br>
>> >> >> >><br>
>> >> >> >> On Mon, Oct 6, 2014 at 6:45 PM, David A. Bandel<br>
>> >> >> >> <<a href="mailto:david.bandel@gmail.com">david.bandel@gmail.com</a>><br>
>> >> >> >> wrote:<br>
>> >> >> >> > Lonnie,<br>
>> >> >> >> ><br>
>> >> >> >> > This is one of the most annoying, frustrating errors. All it<br>
>> >> >> >> > says<br>
>> >> >> >> > is<br>
>> >> >> >> > that<br>
>> >> >> >> > the script didn't work. This may be permissions. It may be<br>
>> >> >> >> > your<br>
>> >> >> >> > $HOME<br>
>> >> >> >> > mount is non-executable. Difficult to say. You didn't say<br>
>> >> >> >> > what<br>
>> >> >> >> > kind<br>
>> >> >> >> > of<br>
>> >> >> >> > script it was (Perl, PHP, shell). Is the UID of the user<br>
>> >> >> >> > greater<br>
>> >> >> >> > than<br>
>> >> >> >> > 1000?<br>
>> >> >> >> > Are you using suexec?<br>
>> >> >> >> ><br>
>> >> >> >> > I hate this error. Will be either one of the permissions<br>
>> >> >> >> > issues<br>
>> >> >> >> > above<br>
>> >> >> >> > or<br>
>> >> >> >> > some Apache configuration issue (I'm betting on permissions).<br>
>> >> >> >> ><br>
>> >> >> >> > David-<br>
>> >> >> >> ><br>
>> >> >> >> > On Mon, Oct 6, 2014 at 5:57 PM, Lonni J Friedman<br>
>> >> >> >> > <<a href="mailto:netllama@gmail.com">netllama@gmail.com</a>><br>
>> >> >> >> > wrote:<br>
>> >> >> >> >><br>
>> >> >> >> >> Howdy folks,<br>
>> >> >> >> >> Any cgi/apach experts still around? I'm trying to get cgi<br>
>> >> >> >> >> scripts<br>
>> >> >> >> >> working from $USERDIR on a new Fedora system, and they all<br>
>> >> >> >> >> fail<br>
>> >> >> >> >> with<br>
>> >> >> >> >> internal server errors. In the apache error log, I see:<br>
>> >> >> >> >> [cgi:error] End of script output before headers<br>
>> >> >> >> >><br>
>> >> >> >> >> If I copy the script over to the server $DOCROOT/cgi-bin then<br>
>> >> >> >> >> it<br>
>> >> >> >> >> runs<br>
>> >> >> >> >> just fine. So this proves the script itself isn't the<br>
>> >> >> >> >> problem.<br>
>> >> >> >> >> Additionally, non-cgi scripts are served just fine from<br>
>> >> >> >> >> $USERDIR.<br>
>> >> >> >> >> Both the cgi-bin directory and the script itself are<br>
>> >> >> >> >> executable<br>
>> >> >> >> >> for<br>
>> >> >> >> >> all users (755). This is what I've got set in the apache<br>
>> >> >> >> >> config<br>
>> >> >> >> >> for<br>
>> >> >> >> >> the USERDIR directory structure:<br>
>> >> >> >> >><br>
>> >> >> >> >> <Directory "/home/*/public_html"><br>
>> >> >> >> >> AllowOverride FileInfo AuthConfig Limit Indexes<br>
>> >> >> >> >> Options MultiViews Indexes SymLinksIfOwnerMatch ExecCGI<br>
>> >> >> >> >> Require method GET POST OPTIONS<br>
>> >> >> >> >> </Directory><br>
>> >> >> >> >><br>
>> >> >> >> >> <Directory /home/*/public_html/cgi-bin><br>
>> >> >> >> >> AllowOverride Indexes AuthConfig<br>
>> >> >> >> >> Options ExecCGI<br>
>> >> >> >> >> SetHandler cgi-script<br>
>> >> >> >> >> </Directory><br>
>> >> >> >> >><br>
>> >> >> >> >><br>
>> >> >> >> >> Anyone know what I'm missing?<br>
>> >> >> >> >><br>
>> >> >> >> >> thanks<br>
>> >> >> >><br>
<br>
<br>
--<br>
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~<br>
L. Friedman <a href="mailto:netllama@gmail.com">netllama@gmail.com</a><br>
LlamaLand <a href="http://netllama.linux-sxs.org" target="_blank">http://netllama.linux-sxs.org</a><br>
</div></div><br>_______________________________________________<br>
Linux-users mailing list<br>
<a href="mailto:Linux-users@linux-sxs.org">Linux-users@linux-sxs.org</a><br>
<a href="http://mailman.celestial.com/mailman/listinfo/linux-users" target="_blank">http://mailman.celestial.com/mailman/listinfo/linux-users</a><br>
<br></blockquote></div><br><br clear="all"><div><br></div>-- <br>Two things are infinite: the universe and human stupidity; and I'm not sure about the the universe. -- Albert Einstein<br>Visit my web page at: <a href="http://david.bandel.us/" target="_blank">http://david.bandel.us/</a>
</div>