Received: (qmail 10208 invoked by uid 2012); 17 Dec 1998 22:09:08 -0000
Message-Id: <19981217220908.10207.qmail@hyperreal.org>
Date: 17 Dec 1998 22:09:08 -0000
From: Tricia Newbre <aphrael@cs1.bradley.edu>
Reply-To: aphrael@cs1.bradley.edu
To: apbugs@hyperreal.org
Subject: Options ExecCGI is off in this directory
X-Send-Pr-Version: 3.2

>Number:         3552
>Category:       config
>Synopsis:       Options ExecCGI is off in this directory
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    apache
>State:          closed
>Class:          sw-bug
>Submitter-Id:   apache
>Arrival-Date:   Thu Dec 17 14:10:02 PST 1998
>Last-Modified:  Thu Dec 17 14:13:39 PST 1998
>Originator:     aphrael@cs1.bradley.edu
>Organization:
>Release:        1.3.1
>Environment:
SunOS interlabs 5.6 Generic_105181-03 sun4m sparc SUNW,SPARCstation-5 
gcc v. 2.8.1
>Description:
from access.conf:
<Directory /usr/local/apache/cgi-bin/HyperNews>
AllowOverride All
Options FollowSymLinks ExecCGI
</Directory>

<Directory /usr/local/apache/cgi-bin/HyperNews/.scripts>
AllowOverride All
Options ExecCGI
</Directory>

This appears to me to enable cgi in these two directories, but I'm getting the error in the browser
You don't have permission to access /HyperNews/Admin/setup-form.cgi on this server.
I have checked the unix permissions on the cgi files, and all the relevant directories and files.  
They are set to be universally executable (-rwxr-xr-x).

Apache seems to be ignoring the directive to allow execution of cgi's in these directories.  When I check
/apache/logs/error_log it shows this:
Options ExecCGI is off in this directory: /www/htdocs/HyperNews/edit-member.pl 


>How-To-Repeat:
http://www.interlabs.org/HyperNews/
click on any of the listed scripts.
>Fix:

>Audit-Trail:
State-Changed-From-To: open-closed
State-Changed-By: marc
State-Changed-When: Thu Dec 17 14:13:38 PST 1998
State-Changed-Why:
Take a look at the paths again.  You are trying to access
a script in /www/htdocs/HyperNews/ while allowing ExecCGI
in /usr/local/apache/cgi-bin/HyperNews.
>Unformatted:
[In order for any reply to be added to the PR database, ]
[you need to include <apbugs@Apache.Org> in the Cc line ]
[and leave the subject line UNCHANGED.  This is not done]
[automatically because of the potential for mail loops. ]
[If you do not include this Cc, your reply may be ig-   ]
[nored unless you are responding to an explicit request ]
[from a developer.                                      ]
[Reply only with text; DO NOT SEND ATTACHMENTS!         ]