[BlueOnyx:04242] Re: cgi-bin error: access control - points to GUI error

[Jim Dory]

On 4/13/2010 3:26 PM, Larry Smith wrote:
> On Tue April 13 2010 17:24, Jim Dory wrote:
>    
>> On 4/13/2010 11:54 AM, Ken Marcus - Precision Web Hosting, Inc wrote:
>>      
>>>> I've had a calendar (calendarscript) running on our website for years
>>>> and it just stopped working (within last month or so - it was just
>>>> pointed out to me) with a:
>>>>
>>>> "CGIWrap Error: Access Control
>>>> Supplementary GID of script userid less than configured minimum"
>>>> eld speed is invalid. Please check
>>>> your input and try again."
>>>>          
>>> Jim
>>>
>>> Check the group ownership and make sure it is sitexx  and not   "users"
>>>        
>> Thanks Ken!
>>
>> I have the the cgi-bin directory owned by root and group as site3, which
>> is the site with the web presence.
>> The calendar scripts and directory are owned by site3admin and group
>> site3. I did try it with cgi-bin owned by site3admin but made no
>> difference. In the vhosts conf file for site3, the ServerAdmin was set
>> as admin. I thought that might be the problem (though it all worked
>> before) so set it as site3admin and restarted httpd. But it made no
>> difference in this problem.
>>
>> I'm able to manage the website as user site3admin, which is set in the
>> GUI as the site's admin. I'm not getting any errors in the
>> /var/log/httpd/error.log file when trying to access that calendar.
>>
>> cheers, Jim
>>      
> If I am not mistaken, it is the script itself (calendar or cgi or perl) that
> must be owned by a user other than admin or root.  I have run into
> the similar problem with scripts (cgi) and changing the ownership of
> the script(s) to a user that has cgi permission generally fixes it.
>
>    

Ok - I chown'ed the files to my username, leaving group as site3 and it 
seems to work. I haven't had the user try to edit the calendar yet - but 
it displays. Not sure what could have changed. Is there a better user I 
should use - like maybe make one up for the calendar that has regular 
non-admin rights? Or just leave it as me?

thanks much for responses!  Jim