RE: vQregister not same as vadduser

Sorry for the delayed response - I read that: "centos does not allow apache
to use perl's setuid/setgid commands" from the main www root.

So I reinstalled as a virtual domain.  Unfortunately, it didn't fix the
problem.

 

Here's the log entries after adding a user with qmailadmin:

 

# tail emailrd_error_log

[Fri Jun 17 22:11:28 2011] [error] [client 71.83.80.18] cp: , referer:
http://ms1.emailrd.com/cgi-bin/qmailadmin/com/addusernow?user=postmaster&dom
=emailrd.com&time=1308343112&

[Fri Jun 17 22:11:28 2011] [error] [client 71.83.80.18] accessing `setuid',
referer:
http://ms1.emailrd.com/cgi-bin/qmailadmin/com/addusernow?user=postmaster&dom
=emailrd.com&time=1308343112&

[Fri Jun 17 22:11:28 2011] [error] [client 71.83.80.18] : Permission denied,
referer:
http://ms1.emailrd.com/cgi-bin/qmailadmin/com/addusernow?user=postmaster&dom
=emailrd.com&time=1308343112&

[Fri Jun 17 22:11:28 2011] [error] [client 71.83.80.18] , referer:
http://ms1.emailrd.com/cgi-bin/qmailadmin/com/addusernow?user=postmaster&dom
=emailrd.com&time=1308343112&

[Fri Jun 17 22:11:28 2011] [error] [client 71.83.80.18] cp: accessing
`setuid': Permission denied, referer:
http://ms1.emailrd.com/cgi-bin/qmailadmin/com/addusernow?user=postmaster&dom
=emailrd.com&time=1308343112&

[Fri Jun 17 22:11:28 2011] [error] [client 71.83.80.18] cp: accessing
`setuid': Permission denied, referer:
http://ms1.emailrd.com/cgi-bin/qmailadmin/com/addusernow?user=postmaster&dom
=emailrd.com&time=1308343112&

 

 

# tail emailrd_access_log

71.83.80.18 - - [17/Jun/2011:22:10:45 +0000] "GET
/cgi-bin/qmailadmin/com/adduser?user=postmaster&dom=emailrd.com&time=1308343
112& HTTP/1.1" 200 1089

71.83.80.18 - - [17/Jun/2011:22:11:08 +0000] "POST
/cgi-bin/qmailadmin/com/addusernow?user=postmaster&dom=emailrd.com&time=1308
343112& HTTP/1.1" 200 1103

71.83.80.18 - - [17/Jun/2011:22:11:28 +0000] "POST
/cgi-bin/qmailadmin/com/addusernow?user=postmaster&dom=emailrd.com&time=1308
343112& HTTP/1.1" 200 1659

71.83.80.18 - - [17/Jun/2011:22:11:28 +0000] "GET /images/modify.png
HTTP/1.1" 200 703

71.83.80.18 - - [17/Jun/2011:22:11:28 +0000] "GET /images/trash.png
HTTP/1.1" 200 1225

71.83.80.18 - - [17/Jun/2011:22:11:28 +0000] "GET /images/radio-off.png
HTTP/1.1" 200 1218

 

# tail emailrd_referer_log

http://ms1.emailrd.com/cgi-bin/qmailadmin/com/addusernow?user=postmaster&dom
=emailrd.com&time=1308343112& -> /cgi-bin/qmailadmin/com/adduser

http://ms1.emailrd.com/cgi-bin/qmailadmin/com/adduser?user=postmaster&dom=em
ailrd.com&time=1308343112& -> /cgi-bin/qmailadmin/com/addusernow

http://ms1.emailrd.com/cgi-bin/qmailadmin/com/addusernow?user=postmaster&dom
=emailrd.com&time=1308343112& -> /cgi-bin/qmailadmin/com/addusernow

http://ms1.emailrd.com/cgi-bin/qmailadmin/com/addusernow?user=postmaster&dom
=emailrd.com&time=1308343112& -> /images/modify.png

http://ms1.emailrd.com/cgi-bin/qmailadmin/com/addusernow?user=postmaster&dom
=emailrd.com&time=1308343112& -> /images/trash.png

http://ms1.emailrd.com/cgi-bin/qmailadmin/com/addusernow?user=postmaster&dom
=emailrd.com&time=1308343112& -> /images/radio-off.png

 

 

 

One more thing: I added this line to the onchange script:

echo $1 > /tmp/onchange.txt

Here's the result after adding a user with qmailadmin: 

-rw------- 1 apache   apache    9 Jun 17 22:11 onchange.txt

 

Vadduser creates the file with root.root ownership.

 

And before anyone asks:

-r-s--x--- 1 root apache 14264 May  4 10:54 /usr/sbin/suexec

 

Thanks

Mark

 

From: Salman Riaz [mailto:[email protected]] 
Sent: Tuesday, June 14, 2011 9:15 PM
To: [email protected]
Subject: RE: [vchkpw] vQregister not same as vadduser

 

Can you please share the apache, audit and messages logs...

Regards,
Salman...





  _____  

From: [email protected]
To: [email protected]
Date: Tue, 14 Jun 2011 08:51:22 -0700
Subject: RE: [vchkpw] vQregister not same as vadduser

It certainly sounds like a selinux issue, but all this testing has been done
with it disabled:

/etc/selinux/config: SELINUX=disabled

/selinux/enforce: 0

 

Mark

 

From: Salman Riaz [mailto:[email protected]] 
Sent: Monday, June 13, 2011 9:43 PM
To: [email protected]
Subject: RE: [vchkpw] vQregister not same as vadduser

 

Kindly disable the selinux.... I think it will resolve the problem... I also
get the same error with vqadmin....

Kindly check it through /etc/selinux or using setup command. You can also
disable via the following command...

echo 0 >/selinux/enforce

Hope your problem will be solved after this....

Regards,
Salman...






 



!DSPAM:4dfbdd6232711288044243!