Running apache using user other than nobody prevents access to cpanel and whm

[BP Steven]

When I run apache as a user other than 'nobody', users cannot access cpanel or whm using the scriptaliases domainname.com/cpanel and domainname.com/whm. They can however access the control panels using port numbers instead.

The permissions in /usr/local/cpanel/base are set correctly (755), but it still doesn't work. I checked the error log and it said Premature end of script headers: /usr/local/cpanel/base/redirect.cgi

Has anyone else come across this problem and know how to fix it?

cPanel.net Support Ticket Number:

cPanel.net Support Ticket Number:

[BP Steven]

Additional information from suexec_log. centurio is the username of the account I was trying to access.

[2003-06-12 13:30:10]: crit: calling user mismatch (apache instead of nobody)
[2003-06-12 13:31:14]: crit: calling user mismatch (apache instead of nobody)
[2003-06-12 13:38:13]: crit: calling user mismatch (apache instead of nobody)
[2003-06-12 13:38:16]: crit: calling user mismatch (apache instead of nobody)
[2003-06-12 13:39:17]: info: (target/actual) uid: (centurio/centurio) gid: (cent
urio/centurio) cmd: redirect.cgi

cPanel.net Support Ticket Number:

cPanel.net Support Ticket Number:

[tAzMaNiAc]

Originally posted by BP Steven
Additional information from suexec_log. centurio is the username of the account I was trying to access.

[2003-06-12 13:30:10]: crit: calling user mismatch (apache instead of nobody)
[2003-06-12 13:31:14]: crit: calling user mismatch (apache instead of nobody)
[2003-06-12 13:38:13]: crit: calling user mismatch (apache instead of nobody)
[2003-06-12 13:38:16]: crit: calling user mismatch (apache instead of nobody)
[2003-06-12 13:39:17]: info: (target/actual) uid: (centurio/centurio) gid: (cent
urio/centurio) cmd: redirect.cgi

cPanel.net Support Ticket Number:

cPanel.net Support Ticket Number:

One question.. Why are you running it as apache and not nobody?
Purpose of that?

cPanel.net Support Ticket Number:

[BP Steven]

Security. I like to setup the directories holding the websites so that only the apache user and file owner can access the files, by changing the directory group to apache, and then chmod to 710.

cPanel.net Support Ticket Number:

[BP Steven]

I've found solution to the problem just in case anyone else was interested (pretty obvious, should have thought of it sooner). suexec needs to be recompiled to use the apache user rather than nobody. That, or turn off suexec.

cPanel.net Support Ticket Number:

[janglin]

Originally posted by BP Steven
I've found solution to the problem just in case anyone else was interested (pretty obvious, should have thought of it sooner). suexec needs to be recompiled to use the apache user rather than nobody. That, or turn off suexec.

cPanel.net Support Ticket Number:

Can you by any chance describe how you did this? I am unsure of the commands to run. Thanks.