Diff for "DOC/Apache+Suexec"

Differences between revisions 1 and 4 (spanning 3 versions)

6.17. Apache+Suexec

When your Apache is configured with suexec enabled, you have to choose either the correct location when installing Mailman (under suexec_docroot) or recompile Apache to suit your installation needs.

I chose a compromise:

1. Recompile Apache with --suexec-docroot=/home 2. Install Mailman under /home/mailman

When configuring Mailman, choose --with-cgi-gid=mailman (not the usual group 'www' for virtual hosts)

After installation of Mailman, some permissions have to be altered:

 - $prefix/cgi-bin* should be owned by mailman:mailman
 - $prefix/cgi-bin shouldn't have group-write-access (suexec doesn't like that)
 - disable cgi-scripts' setgid-bit (suexec doesn't like that)

 # chown mailman:mailman $prefix/cgi-bin*
 # chmod g-w $prefix/cgi-bin
 # chmod g-s $prefix/cgi-bin/*

Ok, then you can add specific virtual hosts for list administration:

 <VirtualHost YOUR_IP>
 ServerName      list.somehost.de
 ServerAlias     list.somehost.de
 ...

 SuexecUserGroup mailman mailman <-- this one is important

 #
 # Mailman Section
 #
 ScriptAlias     /mailman/       /home/mailman/cgi-bin/
 Alias           /pipermail/     /home/mailman/archives/public/

 <Directory "/home/mailman/archives/public/">
  AddDefaultCharset off
 </Directory>

 </VirtualHost>

It worked fine for me, and I hope it will for others

Note: the above describes a way to make Mailman work withe suEXEC with a single domain. Due to fundamental differences between Mailman's security model and that of suEXEC it is very difficult and kludgy to make it it work with multiple Mailman domains.

This is one of many Frequently Asked Questions.

-  ⇤ ← Revision 1 as of 2008-05-27 13:28:51 → 
  Size: 1745
  Editor: terri
  Comment:
+   ← Revision 4 as of 2010-01-24 08:03:19 → ⇥
  Size: 1876
  Editor: msapiro
  Comment: Migrated to Confluence 4.0
-Deletions are marked like this.
+Additions are marked like this.
 Line 1:
-#pragma page-filename DOC/versions/4292620
+#pragma page-filename DOC/versions/4030646
 Line 3:
-When your Apache is configured with suexec enabled, you have to choose either the correct location when installing Mailman (under suexec_docroot) or recompile Apache so suit your installation needs.
-Line 5:
+Line 4:
-I choosed a compromiss:
+When your Apache is configured with suexec enabled, you have to choose either the correct location when installing Mailman (under suexec_docroot) or recompile Apache to suit your installation needs.

I chose a compromise:
-Line 19:
+Line 20:
 Line 29:
- &lt;VirtualHost YOUR_IP&gt;
+ <VirtualHost YOUR_IP>
 Line 33:
-}}}
-Line 35:
+Line 34:
+ SuexecUserGroup mailman mailman <-- this one is important
 Line 36:
-{{{
 SuexecUserGroup mailman mailman &lt;-- this one is important
}}}


{{{
-Line 43:
+Line 37:
- # Mailman Sektion
+ # Mailman Section
-Line 47:
+Line 41:
+ <Directory "/home/mailman/archives/public/">
  AddDefaultCharset off
 </Directory>

 </VirtualHost>
 Line 49:
+It worked fine for me, and I hope it will for others
-Line 50:
+Line 51:
-{{{
 &lt;Directory "/home/mailman/archives/public/"&gt;
  AddDefaultCharset off
 &lt;/Directory&gt;
}}}
+Note: the above describes a way to make Mailman work withe suEXEC with a single domain. Due to fundamental differences between [[http://wiki.list.org/x/tYA9|Mailman's security model]] and that of [[http://httpd.apache.org/docs/2.2/suexec.html|suEXEC]] it is very difficult and kludgy to make it it work with multiple Mailman domains.
-Line 56:
+Line 53:
-{{{
 &lt;/VirtualHost&gt;
}}}

It worked fine for me, and I hope it will for others :)

''Last changed on Fri Aug 5 12:13:45 2005 by'' Robert Schulze
<<Color2(Converted from the Mailman FAQ Wizard, col=darkgreen)>>This is one of many [[../Frequently Asked Questions|Frequently Asked Questions]].
+This is one of many [[../Frequently Asked Questions|Frequently Asked Questions]].