scgiwrap: Caller must be uid 99

jenlepp

Well-Known Member
Jul 4, 2005
116
2
168
Liberty Hill, TX
cPanel Access Level
DataCenter Provider
I upgraded to Apache 2.2 this past weekend, and everything looked to be going ok until a client emailed in getting this error on their script.

scgiwrap: Caller must be uid 99

When I had Apache 1.3, the suexec_log looked like this:

[2008-01-19 05:13:56]: info: (target/actual) uid: (blah/blah) gid: (blah/blah) cmd: guestbook.cgi
[2008-01-19 05:13:56]: info: (target/actual) uid: (blah/blah) gid: (blah/blah) cmd: guestbook.cgi
[2008-01-19 05:13:57]: info: (target/actual) uid: (blah2/blah2) gid: (blah2/blah2) cmd: guestbook.cgi
[2008-01-19 05:14:32]: info: (target/actual) uid: (blah2/blah2) gid: (blah2/blah2) cmd: agora.cgi

Now with 2.2 after recompile, they look like this.

[2008-01-20 14:37:20]: uid: (32307/blahblah) gid: (32309/32309) cmd: Count.cgi
[2008-01-20 14:37:23]: uid: (32427/blah) gid: (32429/32429) cmd: randomvideo.pl
[2008-01-20 14:37:23]: uid: (32427/blah) gid: (32429/32429) cmd: currentupdatex.pl
[2008-01-20 14:37:23]: uid: (32427/blah) gid: (32429/32429) cmd: allusers2.pl

and they get the errors above. I've recompiled, and still the same thing - is there some step that I missed somewhere that I should have done but didn't do? This is happening on all servers. Also getting an occasional error in the log of:

[2008-01-20 14:38:43]: cannot stat program: (date --utc)
 
Last edited:

jdlightsey

Perl Developer III
Staff member
Mar 6, 2007
126
2
243
Houston Texas
cPanel Access Level
Root Administrator
If you update to the latest release of cPanel/WHM, go into the "Configure PHP and Suexec" page on the WHM, change the Suexec setting and save, then change it back and save, does it fix the problem?

We recently made some changes to the way the suexec binary is managed. If that doesn't sort out your problems I'd be very interested in seeing exactly what is going wrong. Submit a ticket "Attn: JD" if you can.
 

jenlepp

Well-Known Member
Jul 4, 2005
116
2
168
Liberty Hill, TX
cPanel Access Level
DataCenter Provider
I did try turning it off, and then turning it back on again in the way you suggested, but the script still had the error. I wound up just turning it off completely until I could figure out what was going on.

I get cpanel from my NOC and so they have to submit the ticket - I'll point them to this response and see if we can't figure out what's up.
 

cPanelNick

Administrator
Staff member
Mar 9, 2015
3,488
35
158
cPanel Access Level
DataCenter Provider
I did try turning it off, and then turning it back on again in the way you suggested, but the script still had the error. I wound up just turning it off completely until I could figure out what was going on.

I get cpanel from my NOC and so they have to submit the ticket - I'll point them to this response and see if we can't figure out what's up.
You can still submit a ticket at https://tickets.cpanel.net/submit/ The complimentary queue is pretty small right now so it should get sent to jd quickly (he won't be back till tomorrow morning though most likely)
 

s.a.

Active Member
PartnerNOC
Aug 16, 2007
35
0
56
Toronto, Canada
Here's the reply I got from support regarding this issue:

"It would appear that scgi has been deprecated in newer cPanel versions. I recommend you move these scripts to the cgi-bin."
 

cPanelKenneth

cPanel Development
Staff member
Apr 7, 2006
4,608
77
308
cPanel Access Level
Root Administrator
Here's the reply I got from support regarding this issue:

"It would appear that scgi has been deprecated in newer cPanel versions. I recommend you move these scripts to the cgi-bin."
Open a ticket in our complimentary queue, please.
 

s.a.

Active Member
PartnerNOC
Aug 16, 2007
35
0
56
Toronto, Canada
Sorry I just don't get it.
Do you mean I might get a different reply than I got from priority support few hours before?
 

cPanelKenneth

cPanel Development
Staff member
Apr 7, 2006
4,608
77
308
cPanel Access Level
Root Administrator
Check the ownership/permissions on the scgi wrapper script/binary. The full path is in httpd.conf.
 

jenlepp

Well-Known Member
Jul 4, 2005
116
2
168
Liberty Hill, TX
cPanel Access Level
DataCenter Provider
I have done all that. Also worked on it with my NOC. They caught what we didn't.

I'm downgrading back to apache 1.3 - I have way too many broken sites, once got hacked today thanks to turning off suexec, and I'm outta patience.

Thanks.
 

jenlepp

Well-Known Member
Jul 4, 2005
116
2
168
Liberty Hill, TX
cPanel Access Level
DataCenter Provider
Well, I have fixed it - I downgraded, and the correction in the suexec log was immediate. As much as I'd love to help out while it gets looked at, I can't leave a production server with multiple sites broken for days on end - these are hundreds of clients, not my personal fun sites that can sit there broken while everyone says "hmmmm".

Since it happened on all four servers at the same time when I did the same thing, I'm sure it's not just me, but I think I'll wait for someone else to be the guinea pig before jumping in like that again.
 

dflteche

Member
Dec 30, 2007
13
0
51
Caller must be uid 99

Hello,


Add following entry in httpd.conf file on the server :

AddHandler cgi-script .cgi .pl

It works for me :)
 

ManojB

Well-Known Member
Mar 25, 2005
80
0
156
pune
Hello

I have already added "AddHandler cgi-script .cgi .pl" in the httpd.conf but still same problem ...

Anyone or its a bug ?
 
Last edited:

gkgcpanel

Well-Known Member
Jun 6, 2007
214
1
166
cPanel Access Level
DataCenter Provider
Yes. Happening now with hundreds of sites after recompiling Apache 2.2 using Easy Apache 3

I have moved one of the sites over to using cgi-bin (instead of scgi-bin) and it started working, but I moved another site and it is not working...

I have hundreds of sites that are having issues like this. Most have not yet noticed the errors, but when they do, the phone will start ringing...

Anyone else have a solution? I already tried adding the AddHandler (it was already there).
 

gkgcpanel

Well-Known Member
Jun 6, 2007
214
1
166
cPanel Access Level
DataCenter Provider
Yes. Happening now with hundreds of sites after recompiling Apache 2.2 using Easy Apache 3

I have moved one of the sites over to using cgi-bin (instead of scgi-bin) and it started working, but I moved another site and it is not working...

I have hundreds of sites that are having issues like this. Most have not yet noticed the errors, but when they do, the phone will start ringing...

Anyone else have a solution? I already tried adding the AddHandler (it was already there).
UPDATE!! I FOUND A SOLUTION THAT SEEMS TO WORK, but it will take a long time.

I edited httpd.conf and found the site that was having the issue and added another ScriptAlias line below the original...

ORIGINAL: ScriptAlias /cgi-bin/ /home/XXXXXX/public_html/cgi-bin/
ADDED: ScriptAlias /scgi-bin/ /home/XXXXXX/public_html/scgi-bin/

Then restarted httpd and the scripts now work for that user. But it's going to be a pain in the a** to do this for every site...
 

4u123

Well-Known Member
PartnerNOC
Jan 2, 2006
933
21
168
Has anyone logged a ticket for this? It must be a bug.

Whats the point in using scgi anyway ? Cant the customers just use normal cgi ? How did this scgi folder appear in the customers account? Did they create it themselves? Can I disable it and force them to use standard cgi ?
 

cPanelKenneth

cPanel Development
Staff member
Apr 7, 2006
4,608
77
308
cPanel Access Level
Root Administrator