Bugzilla installation problem (Permission denied: exec of 'testagent.cgi' failed)
Adhiraj Joshi
I dont know if this is the right place to ask a query regarding bugzilla
installation problem. If its not could you please point me to the correct
place?
Please bear with me. Its a long long email...
These are the details of my problem:
1. I have installed the bugzilla in /usr/local/bugzilla directory.
2. Running ./checksetup.pl says that bugzilla is installed:
"Now that you have installed Bugzilla, you should visit the
'Parameters' page (linked in the footer of the Administrator
account) to ensure it is set up as you wish - this includes
setting the 'urlbase' option to the correct url."
3. When I run ./testserver.pl it fails.
I run it as: ./testserver.pl http://neo
where neo is the name of my machine.
The failure message is:
--------------------------------------------------------------------
TEST-OK Webserver is running under group id in $webservergroup.
TEST-OK Got front picture.
Use of uninitialized value in pattern match (m//) at ./testserver.pl line
110, <SOCK> line 237.
Use of uninitialized value in pattern match (m//) at ./testserver.pl line
110, <SOCK> line 237.
TEST-FAILED Webserver is not executing CGI files.
TEST-FAILED Webserver is permitting fetch of http://localhost/localconfig.
This is a serious security problem.
Check your webserver configuration.
--------------------------------------------------------------------
During this I see this error message in /var/log/httpd/error_log:
[Mon Jul 30 19:52:43 2007] [error] [client 192.168.1.29] (13)Permission
denied: exec of '/usr/local/bugzilla-3.0/testagent.cgi' failed
[Mon Jul 30 19:52:43 2007] [error] [client 192.168.1.29] Premature end of
script headers: testagent.cgi
4. Through the browser when i try http://neo/ I get this:
--------------------------------------------------------------------
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>500 Internal Server Error</title>
</head><body>
<h1>Internal Server Error</h1>
<p>The server encountered an internal error or
misconfiguration and was unable to complete
your request.</p>
<p>Please contact the server administrator,
root@localhost and inform them of the time the error occurred,
and anything you might have done that may have
caused the error.</p>
<p>More information about this error may be available
in the server error log.</p>
<hr>
<address>Apache/2.2.3 (Fedora) Server at neo Port 80</address>
</body></html>
--------------------------------------------------------------------
This time I get this error in /var/log:
[Mon Jul 30 19:53:40 2007] [error] [client ::1] (13)Permission denied: exec
of '/usr/local/bugzilla-3.0/index.cgi' failed
[Mon Jul 30 19:53:40 2007] [error] [client ::1] Premature end of script
headers: index.cgi
5. I tried many solutions from the internet but none of them worked.
-I have disabled SELinux.
-I added following lines to .htaccess:
---------------------------
AddHandler cgi-script cgi
Options +ExecCGI
<FilesMatch ^(.*\.cgi)$>
+ExecCGI
</FilesMatch>
---------------------------
-A snapshot of my httpd.conf is as follows:
--------------------------------------------------
DocumentRoot "/usr/local/bugzilla-3.0"
Options +Indexes +ExecCGI
AddHandler cgi-script .cgi
.
.
.
<Directory "/usr/local/bugzilla-3.0">
AddHandler cgi-script .cgi
Options +Indexes +ExecCGI
DirectoryIndex index.cgi
AllowOverride Limit
</Directory>
.
.
.
#
# This should be changed to whatever you set DocumentRoot to.
#
<Directory "/usr/local/bugzilla-3.0">
.
.
.
ScriptAlias /cgi-bin/ "/usr/local/bugzilla-3.0"
.
.
.
#
# "/var/www/cgi-bin" should be changed to whatever your ScriptAliased
# CGI directory exists, if you have that configured.
#
<Directory "/usr/local/bugzilla-3.0">
AddHandler cgi-script .cgi
DirectoryIndex index.cgi
AllowOverride None
Options +Indexes +ExecCGI
Order allow,deny
Allow from all
</Directory>
--------------------------------------------------
The permissions of index.cgi and testagent.cgi and their owner grp info is
as follows:
-rwxr-xr-x 1 root apache 2571 Jul 30 19:32 index.cgi
-rwxr-xr-x 1 root apache 876 Jul 30 18:01 testagent.cgi
The permissions of bugzilla dir are:
drwxr-xr-x 14 root apache 4096 Jul 30 19:56 bugzilla-3.0
Both of these scripts run when in the same directory and as a root.
(/usr/local/bugzilla-3.0)
When run as a normal user outside this directoy, testagent runs bux
index.cgi reports this prob:
----------------------------------------------------------------------------------------
Can't locate Bugzilla/Config.pm in @INC (@INC contains: .
/usr/lib/perl5/site_perl/5.8.8/i386-linux-thread-multi
/usr/lib/perl5/site_perl/5.8.7/i386-linux-thread-multi
/usr/lib/perl5/site_perl/5.8.6/i386-linux-thread-multi
/usr/lib/perl5/site_perl/5.8.5/i386-linux-thread-multi
/usr/lib/perl5/site_perl/5.8.8 /usr/lib/perl5/site_perl/5.8.7
/usr/lib/perl5/site_perl/5.8.6 /usr/lib/perl5/site_perl/5.8.5
/usr/lib/perl5/site_perl
/usr/lib/perl5/vendor_perl/5.8.8/i386-linux-thread-multi
/usr/lib/perl5/vendor_perl/5.8.7/i386-linux-thread-multi
/usr/lib/perl5/vendor_perl/5.8.6/i386-linux-thread-multi
/usr/lib/perl5/vendor_perl/5.8.5/i386-linux-thread-multi
/usr/lib/perl5/vendor_perl/5.8.8 /usr/lib/perl5/vendor_perl/5.8.7
/usr/lib/perl5/vendor_perl/5.8.6 /usr/lib/perl5/vendor_perl/5.8.5
/usr/lib/perl5/vendor_perl /usr/lib/perl5/5.8.8/i386-linux-thread-multi
/usr/lib/perl5/5.8.8) at
/usr/lib/perl5/site_perl/5.8.8/i386-linux-thread-multi/Bugzilla.pm line 29.
BEGIN failed--compilation aborted at
/usr/lib/perl5/site_perl/5.8.8/i386-linux-thread-multi/Bugzilla.pm line 29.
Compilation failed in require at /usr/local/bugzilla-3.0/index.cgi line 34.
----------------------------------------------------------------------------------------
Also I could not add bugzilla's path using this command:
"perl -I /usr/local/bugzilla-3.0"
The command stucks up and doesnt return unless I press Ctrl+C.
Any solution to this problem?
Does my httpd.conf and .htacess looks ok?
Are the permissions for index.cgi and testagent.cgi all right?
Are the permissions of bugzilla dir ok?
Are the user/group for these files/dir ok?
Why cant I successfully run "perl -I /usr/local/bugzilla-3.0"?
How do I get accross these errors reported in /var/log/httpd/error_log:
Permission denied: exec of '/usr/local/bugzilla-3.0/testagent.cgi' failed
Premature end of script headers: testagent.cgi
Permission denied: exec of '/usr/local/bugzilla-3.0/index.cgi' failed
Premature end of script headers: index.cgi
I know its a big email with too many questions but I already spent 3 full
days getting this work and I still dont have any clue.
Thanks in Advance,
Adhiraj.
Max Kanat-Alexander
<adh...@linsyssoft.com> wrote:
> -I added following lines to .htaccess:
You probably don't want to modify the .htaccess of Bugzilla.
Also, your modifications won't work because your AllowOverride
statement won't permit them.
In general, delete your .htaccess and let ./checksetup.pl
create it for you.
> -A snapshot of my httpd.conf is as follows:
> [snip]
It looks like you've modified that file a lot by hand. You
didn't happen to change the group that Apache runs as, did you?
> --------------------------------------------------
> DocumentRoot "/usr/local/bugzilla-3.0"
Why did you install it there instead of into /var/www/html?
SELinux will definitely have to be off in order to access it
in /usr/local. (I know you said you already turned it off, I just
wanted to let you know.)
> ScriptAlias /cgi-bin/ "/usr/local/bugzilla-3.0"
Definitely don't do that. The Bugzilla directory should never
be ScriptAlias'ed.
> <Directory "/usr/local/bugzilla-3.0">
You don't need to have this block twice.
> When run as a normal user outside this directoy, testagent runs bux
> index.cgi reports this prob:
Yes, you can never run Bugzilla scripts from outside their
directory.
> Also I could not add bugzilla's path using this command:
> "perl -I /usr/local/bugzilla-3.0"
>
> The command stucks up and doesnt return unless I press Ctrl+C.
It didn't stick, that's just what happens if you run perl and
don't give it a file to run. It's waiting for you to write some Perl.
-Max
--
http://www.everythingsolved.com/
Competent, Friendly Bugzilla Services. And Everything Else, too.
Adhiraj Joshi
Thanks a lot for reply!
I still face the same problem.
When I try http://localhost/ through the browser I get this message:
Forbidden
You don't have permission to access /index.cgi on this server.
The /var/log/httpd/error_log reports:
Options ExecCGI is off in this directory: /usr/local/bugzilla-3.0/index.cgi
File does not exist: /usr/local/bugzilla-3.0/favicon.ico
This file is really not there in that dir.
I have removed .htacess and ran checksetup to create a new one.
Also only change in the httpd.conf is now:
------------------------------------------------------------------------
DocumentRoot "/usr/local/bugzilla-3.0"
ServerName localhost
.
.
.<Directory "/usr/local/bugzilla-3.0">
AddHandler cgi-script .cgi
Options +Indexes +ExecCGI
DirectoryIndex index.cgi
AllowOverride Limit
</Directory>
.
.
#
# This should be changed to whatever you set DocumentRoot to.
#
<Directory "/usr/local/bugzilla-3.0">
.
.
User apache
Group apache (both these were the default)
----------------------------------------------------------------------------------------------
Do i need to change User/Group?
and yes SELinux is disabled.
I am not sure what is that "Options ExecCGI is off is the directory"
problem. how do i turn it on?
I already have specified ExecCGI in httpd.conf.
Also is it ok if I copy the bugxilla installation directory as it is to
/var/www/html and try with default httpd.conf?
Any idea what is happening?
Regards,
Adhiraj.
> _______________________________________________
> support-bugzilla mailing list
> support-...@lists.mozilla.org
> https://lists.mozilla.org/listinfo/support-bugzilla
> PLEASE put support-...@lists.mozilla.org in the To: field when you
> reply.
>
Max Kanat-Alexander
<adh...@linsyssoft.com> wrote:
> Also is it ok if I copy the bugxilla installation directory as it is
> to /var/www/html
Yes, try that.
> and try with default httpd.conf?
You will still need the <Directory> block. But don't go hacking
up the rest of your httpd.conf, that's not necessary.
Adhiraj Joshi
>
> On Tue, 31 Jul 2007 13:07:45 +0530 "Adhiraj Joshi"
> <adh...@linsyssoft.com> wrote:
> > Also is it ok if I copy the bugxilla installation directory as it is
> > to /var/www/html
>
> Yes, try that.
>
> > and try with default httpd.conf?
>
> You will still need the <Directory> block. But don't go hacking
> up the rest of your httpd.conf, that's not necessary.
Ok.
Now I have copied bugzilla installation directory to /var/www/html/
and these are the only changes to httpd.conf:
------------------------------------------------------------------------------
DocumentRoot "/var/www/html/bugzilla-3.0"
.
.
#Adhiraj: My Entry.
<Directory "/var/www/html/bugzilla-3.0">
AddHandler cgi-script .cgi
Options +Indexes +ExecCGI
DirectoryIndex index.cgi
AllowOverride Limit
</Directory>
.
.
#
# This should be changed to whatever you set DocumentRoot to.
#
<Directory "/var/www/html/bugzilla-3.0">
.
.
ServerName localhost
------------------------------------------------------------------------------
I didnt touch .htaccess.
I still get:
"You don't have permission to access /index.cgi on this server."
from the browser.
and
"Options ExecCGI is off in this directory: /var/www/html/bugzilla-3.0
/index.cgi"
in /var/log/httpd/error_log.
Am I missing something very basic? Because I am looping around the same
error since last few days...
Regards,
Adhiraj.
-Max
> --
> http://www.everythingsolved.com/
> Competent, Friendly Bugzilla Services. And Everything Else, too.
Steve Wendt
> "Options ExecCGI is off in this directory: /var/www/html/bugzilla-3.0
> /index.cgi"
> in /var/log/httpd/error_log.
>
> Am I missing something very basic? Because I am looping around the same
> error since last few days...
Look for "AllowOverride" in your httpd.conf, and change its value to
"All" - that should fix you up.
Max Kanat-Alexander
<adh...@linsyssoft.com> wrote:
> Am I missing something very basic? Because I am looping around the
> same error since last few days...
Show me the output of:
ps -Af | grep httpd
Adhiraj Joshi
"AllowOverride All" also did not work :-(
This is the output of ps -Af:
[adhiraaz@neo ~]$ ps -Af | grep httpd
root 2972 1 0 12:29 ? 00:00:00 /usr/sbin/httpd
apache 2974 2972 0 12:29 ? 00:00:00 /usr/sbin/httpd
apache 2975 2972 0 12:29 ? 00:00:00 /usr/sbin/httpd
apache 2976 2972 0 12:29 ? 00:00:00 /usr/sbin/httpd
apache 2977 2972 0 12:29 ? 00:00:00 /usr/sbin/httpd
apache 2978 2972 0 12:29 ? 00:00:00 /usr/sbin/httpd
apache 2979 2972 0 12:29 ? 00:00:00 /usr/sbin/httpd
apache 2980 2972 0 12:29 ? 00:00:00 /usr/sbin/httpd
apache 2981 2972 0 12:29 ? 00:00:00 /usr/sbin/httpd
Regards,
Adhiraj.
Max Kanat-Alexander
consultant to look at your system directly. Your situation shouldn't be
complicated, but you are doing something strange with your system that
is impossible to figure out from a distance, and needs somebody to look
at it directly.
Adhiraj Joshi
Yel I will have someone look into my system.
Thanks anyways for all your help. Will keep you informed if when this gets
solved.
Thanks,
Adhiraj.
On 8/1/07, Max Kanat-Alexander <mka...@bugzilla.org> wrote:
>