The mailing list for listmasters using Sympa

[Tarmo Kähr <address@concealed>]

Hello again!

06.09.2012 18:50, Allison Jones kirjutas:
> Were you able to get this resolved with the info I sent to the sympa 
> listserv?

Not yet:-(

I tried this (idea from you):

> chmod ug+s /usr/lib/cgi-bin/sympa/wwsympa-wrapper.fcgi


and this (idea from Russ Kepler):

> If I remember correctly these are the result of internal Perl checking and you
> can disable it at the start of the wwsympa.fcgi script by adding "-U" and/or
> "-X" (mine has both):
>
> #!/usr/bin/perl -U -X

No positive result, on the web interface is still "Premature end of 
script headers".

I found a few more lines in Apache error.log:

> Insecure $ENV{PATH} while running setuid at 
> /usr/share/sympa/lib/Conf.pm line 136, <IN> line 67.
> Insecure EXEC while running setuid at /usr/share/sympa/lib/Conf.pm 
> line 136, <IN> line 67.


These lines in file /usr/share/sympa/lib/Conf.pm are:

>      65 my %old_params = (
>      66     trusted_ca_options     => 'capath,cafile',
>      67     msgcat                 => 'localedir',
>      68     queueexpire            => '',
>      69     clean_delay_queueother => '',
>      70     web_recode_to          => 'filesystem_encoding',

and

> 134                 ## Special case: `command`
>     135                 if ($value =~ /^\`(.*)\`$/) {
>     136                     $value = qx/$1/;
>     137                     chomp($value);
>     138                 }

And some more errors from Apache error.log:

> [Sun Aug 26 08:05:16 2012] [warn] [client 66.249.72.87] 
> (104)Connection reset by peer: mod_fcgid: error reading data from 
> FastCGI server
> [Sun Aug 26 08:05:16 2012] [error] [client 66.249.72.87] Premature end 
> of script headers: wwsympa-wrapper.fcgi
> [Sun Aug 26 08:05:21 2012] [error] mod_fcgid: process 
> /usr/lib/cgi-bin/sympa/wwsympa-wrapper.fcgi(12024) exit(communication 
> error), get unexpected signal 11

Ownership of wwsympa.fcgi and wwsympa-wrapper.fcgi:

> -rwsr-sr-x 1 sympa sympa 611480 sept   1 16:20 wwsympa.fcgi
> -rwsr-sr-x 1 sympa sympa   5508 dets  16  2011 wwsympa-wrapper.fcgi

What I should do to get Sympa web interface working?

Looking for solution
Tarmo@Estonia

> Allison
> On 08/30/2012 05:35 PM, Tarmo Kähr wrote:
> > Hello!
> >
> > I have read this:
> > https://listes.renater.fr/sympa/arc/sympa-users/2011-02/msg00036.html
> >
> > My problem seems to be similar. Both scripts  - 
> > /usr/lib/cgi-bin/sympa/wwsympa.fcgi and 
> > /usr/lib/cgi-bin/sympa/wwsympa-wrapper.fcgi - are producing correct 
> > html page. But when I try to open Sympa web interface, I get 
> > "Premature end of script headers: wwsympa-wrapper.fcgi".
> >
> > /etc/sympa/wwsympa.conf is "use_fast_cgi 1"
> >
> > In apache log I see:
> > > mod_fcgid: stderr: Insecure dependency in open while running setuid 
> > > at /usr/share/sympa/lib/Lock.pm line 253.
> > > mod_fcgid: stderr: Insecure dependency in open while running setuid 
> > > at /usr/share/sympa/lib/Lock.pm line 253.
> > > mod_fcgid: stderr: Insecure dependency in open while running setuid 
> > > at /usr/share/sympa/lib/Lock.pm line 253.
> > > mod_fcgid: stderr: Insecure dependency in open while running setuid 
> > > at /usr/share/sympa/lib/List.pm line 9703.
> >
> > There are lots of lines like these.
> >
> > I have Sympa 6.1.7~dfsg-2 on Ubuntu 12.04
> >
> > Where is my problem?
> >
> > Tarmo Kähr@Estonia