The mailing list for listmasters using Sympa

[Russ Kepler <address@concealed>]

On Friday 22 July 2005 08:02 pm, Russ Kepler wrote:
> A new install of 4.1.2 is failing in the wwsympa do_sendpasswd, the message
> logs have:
>
> Jul 22 19:47:50 main wwsympa[6366]: [robot main.kepler-eng.com] [client
> 69.207.157.240] do_sendpasswd(address@concealed) Jul 22 19:47:50 main
> wwsympa[6366]: [robot main.kepler-eng.com] [client 69.207.157.240]
> do_loginrequest Jul 22 19:47:52 main sympa[6497]: Cannot open message file
> /address@concealed : Permission
> denied Jul 22 19:47:53 main sympa[6497]: Unable to create Message object
> /address@concealed Jul 22
> 19:47:53 main sympa[6497]: Moving bad file
> address@concealed to bad/
>
> The file is created appropriately, so I don't really know where the
> "Permission denied" is coming from.  The wwsympa is being started as a fcgi
> from an Apache2 server using the following in commonhttpd.conf:
>
>         FastCgiServer /var/www/fcgi-bin/wwsympa.fcgi -user sympa -group
> sympa -processes 2 <Location /lists>
>           SetHandler fastcgi-script
>         </Location>
>
>         ScriptAlias /lists /var/www/fcgi-bin/wwsympa.fcgi
>
> Do I have a permission screwed up somewhere?

Bad form to reply to my own mail, but in digging around I found that I'd  
neglected the "FastCgiWrapper On" argument.  Once that was in place the 
server was being started with the user/group arguments, and I am now getting:

[2005-07-22 20:48:13]: uid: (sympa/sympa) gid: (sympa/sympa) cmd: wwsympa.fcgi
[2005-07-22 20:48:13]: cannot run as forbidden uid (77/wwsympa.fcgi)

in the suexec_log file.  Apparently the suexec code in Apache2 is placing a 
minimum uid and gid on the executable, 500 and 100 respectively.  This is 
annoying.

I'm starting to chase my tail here - what is the suggested solution to 
running 
the fcgi server as user sympa under Apache2?