Hallo,

I am trying to run Virtualmin on a Debian 4.0 Etch server, but am getting this error:

The Suexec command on your system is configured to only run scripts under /var/www, but the Virtualmin base directory is /home. CGI and PHP scripts run as domain owners will not be executed.


How do I configure Suexec, so that scripts can be run under /home ?

Thank you !

Kind regards from Germany

Mebus

Post edited by: Mebus, at: 2008/09/29 04:45

Well, that might happen if your system has the Debian Apache packages rather than the Virtualmin packages.

The Virtualmin version of suexec is compiled with support to run those in /home.

How did you install Virtualmin, out of curiosity?

In /etc/apt/sources.list, do you see an entry for the Virtualmin repositories, at software.virtualmin.com?
-Eric

I downloaded the Webmin and Virtualmin deb packages from webmin.com and installed them via dpkg -i.

Anyway I have found a solution to my problem by recompiling the module:

http://planetozh.com/blog/2007/10/rebuilding-suexec-with-different-options-on-ubuntu/

http://swelltech.com/support/virtual-servers/index.html#apache

Thanks anyway or is there a better solution ?

Mebus

Ahh, there's actually an install.sh script for installations that actually pulls in all the dependencies and such:

http://webmin.com/vinstall.html

Don't run that on a working system, that's just for future reference ;-)

In the meantime -- yes, you could recompile suexec, though if you just installed the Apache packages from the Virtualmin repository, that'd handle your issue too.

It sounds like you may be using the GPL version, so the packages for that can be found at:

http://software.virtualmin.com/gpl/

For the Pro version, just drop the "gpl" from the URL above, and enter your serial and license key numbers when prompted.
-Eric

Okay, but what's this:


server:~# /etc/init.d/apache2 restart
Forcing reload of web server (apache2)...Warning: SuexecUserGroup directive requires SUEXEC wrapper.
Warning: SuexecUserGroup directive requires SUEXEC wrapper.
Warning: SuexecUserGroup directive requires SUEXEC wrapper.
Warning: SuexecUserGroup directive requires SUEXEC wrapper.
Warning: SuexecUserGroup directive requires SUEXEC wrapper.
Warning: SuexecUserGroup directive requires SUEXEC wrapper.
Warning: SuexecUserGroup directive requires SUEXEC wrapper.
Warning: SuexecUserGroup directive requires SUEXEC wrapper.
waiting Warning: SuexecUserGroup directive requires SUEXEC wrapper.
Warning: SuexecUserGroup directive requires SUEXEC wrapper.
Warning: SuexecUserGroup directive requires SUEXEC wrapper.
Warning: SuexecUserGroup directive requires SUEXEC wrapper.
Warning: SuexecUserGroup directive requires SUEXEC wrapper.
Warning: SuexecUserGroup directive requires SUEXEC wrapper.
Warning: SuexecUserGroup directive requires SUEXEC wrapper.
Warning: SuexecUserGroup directive requires SUEXEC wrapper.
.
server:~#



Mebus

Howdy,

Sounds like Virtualmin has been configured to add in the SuexecUserGroup directives, but Apache may be missing the suexec module.

You can enable suexec support in Apache with:

a2enmod suexec

And then restart Apache.

That will only work if you're using an Suexec compiled with /home of course.
-Eric

This module is already enabled!

Mebus

Hi,

I am having the same issue but on CentOS 5.2. What packages do i need from http://software.virtualmin.com/gpl/centos/5.2/i386/?

Best regards
nic

Well, the suexec binary comes with the httpd package, so you'll at the very least need that. It changes very little, so there shouldn't be a problem in installing that in place of your current httpd package.

The catch in just downloading those is that when updates come out, you won't get them... ideally, you'd want to setup the VM repository by setting it up in /etc/yum.repos.d.

It strikes me that perhaps we need a document containing steps for fixing this particular predicament :-)
-Eric

Hey Mebus -- when you get "Warning: SuexecUserGroup directive requires SUEXEC wrapper.", are you seeing any errors in the Apache error_log?

The suexec module may be failing to load, in which case it may send it's error into the logs.
-Eric