The mailing list for listmasters using Sympa

[Miles Fidelman <address@concealed>]

Found a solution - turns out I had a typo in /etc/sudoers

But, one more question: when using the sudo wrapper: is the code being 
executed as a fcgi or a normal fcgi?

Thanks much,

Miles

Miles Fidelman wrote:
> Hello Folks,
>
> I've been trying to get a new installation up and running, and running 
> into no end of troubles getting wwwsympa to execute.
>
> On my old system, I finally gave up on trying to get suexec and fcgi to 
> play nicely together on a virtual server.  I finally set up a completely 
>  separate copy of Apache just for sympa.
>
> It's not as easy on Debian - there's no easy way to set up separate 
> Apache's short of compiling from source.  So I'm trying a virtual server 
> again.
>
> Again... getting suexec and fcgi to play nicely is proving difficult.
>
> At least temporarily, I'm trying the sudo approach, but also running 
> into problems.
>
> I think I've installed everything per the instructions, but...
>
> First time through, I got a "premature end of script error" - turns out 
> that I should have looked more carefully at the instructions, which say 
> to put:
> apache ALL = (sympa)  NOPASSWD: /home/sympa/bin/wwsympa.fcgi
> into /etc/sudoers
>
> Turns out that should be:
> www-data ALL = (sympa)  NOPASSWD: /home/sympa/bin/wwsympa.fcgi
> (Debian installs Apache under user:group www-data)
>
> Then I started getting a little further.  Still a "premature end of 
> headers error" - until I:
> /home/sympa/bin/wwsympa_sudo_wrapper.pl
> chmod u+s /home/sympa/bin /wwsympa_sudo_wrapper.pl
>
> Now I'm getting:
> Insecure $ENV{PATH} while running setuid at 
> /home/sympa/bin/wwsympa_sudo_wrapper.pl line 3
> followed by "premature end of headers."
>
> This seems to be coming from Perl's taint checks - and I'm now a bit out 
> of my depth.
>
> Any suggestions on how to fix this?
>
> Thanks very much,
>
> Miles Fidelman