Re: Shell account cgi script

2005-09-11 Thread John Kintaro Tate
I don't run my apache in a chroot. On 9/8/05, L. V. Lammert <[EMAIL PROTECTED]> wrote: > At 10:03 PM 9/7/2005 +1000, you wrote: > >Hello, > > > >I want to put a cgi-script on my OpenBSD server for shell account > >creation. Basically that allows users to sign up accounts via the web. > >I however

Re: Shell account cgi script

2005-09-07 Thread Mike Hernandez
On 9/7/05, Adam <[EMAIL PROTECTED]> wrote: > > It's a useful idea in some scenarios, in others it's not. > > Right, and "providing shell accounts" is in the not category. > > Adam > OK I have to concede here. I didn't realize how powerful user classes were. After doing some research I see that

Re: Shell account cgi script

2005-09-07 Thread Adam
Mike Hernandez <[EMAIL PROTECTED]> wrote: > Work with means using various programs like vim or emacs or sed, etc > to manipulate the files. And yes you need the binaries and their > associated libraries for each program you want a jailed user to be > able to run. You don't need an entire OS made av

Re: Shell account cgi script

2005-09-07 Thread Mike Hernandez
On 9/7/05, Adam <[EMAIL PROTECTED]> wrote: > And "web hosting" is not "shell hosting" is it? What does "work with" > mean anyways? You need all the binaries to "work with", and they > need all their libs to function. Sure, you could copy all the binaries > and libraries of the entire OS into th

Re: Shell account cgi script

2005-09-07 Thread Will H. Backman
> -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of > Mike Hernandez > Sent: Wednesday, September 07, 2005 2:47 PM > To: Adam; misc@openbsd.org > Subject: Re: Shell account cgi script > > On 9/7/05, Adam <[EMAIL PROTECTED]>

Re: Shell account cgi script

2005-09-07 Thread Adam
Mike Hernandez <[EMAIL PROTECTED]> wrote: > On the contrary, they can do anything that the administrator makes it > possible for them to do. Many of the web hosting accounts I've signed > up for came with a jailed shell that I could use to work with the > files on the server but nothing more. And

Re: Shell account cgi script

2005-09-07 Thread Mike Hernandez
On 9/7/05, Adam <[EMAIL PROTECTED]> wrote: > On Wed, 7 Sep 2005 13:37:45 -0400 Mike Hernandez <[EMAIL PROTECTED]> > wrote: > If someone is wanting to give people "shell accounts", then they > generally want people to be able to access more than just the shell > itself. The whole point is to let th

Re: Shell account cgi script

2005-09-07 Thread Adam
On Wed, 7 Sep 2005 13:37:45 -0400 Mike Hernandez <[EMAIL PROTECTED]> wrote: > On 9/7/05, Will H. Backman <[EMAIL PROTECTED]> wrote: > > Perhaps the OpenBSD community can at least come up with some general > > hints for people who wish to use OpenBSD for hosting shell accounts. > > IMHO a good met

Re: Shell account cgi script

2005-09-07 Thread Mike Hernandez
On 9/7/05, Will H. Backman <[EMAIL PROTECTED]> wrote: > Perhaps the OpenBSD community can at least come up with some general > hints for people who wish to use OpenBSD for hosting shell accounts. IMHO a good method of this is by setting up a chroot for user shells, whereby a user can log in and a

Re: Shell account cgi script

2005-09-07 Thread Will H. Backman
> -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of > Stuart Henderson > Sent: Wednesday, September 07, 2005 12:13 PM > To: Misc OpenBSD > Subject: Re: Shell account cgi script > > --On 07 September 2005 10:40 -0500, L. V. Lammert

Re: Shell account cgi script

2005-09-07 Thread Stuart Henderson
--On 07 September 2005 10:40 -0500, L. V. Lammert wrote: There are always ways, .. but I would not consider recommending such sophisticated solutions for the basic user level of this poster. If it's necessary to ask questions of this nature, perhaps running a server automatically handing out

Re: Shell account cgi script

2005-09-07 Thread L. V. Lammert
At 08:16 AM 9/7/2005 -0700, Darrin Chandler wrote: There's always a way. You could put the info somewhere within the chroot and have a cron job check it every minute and add the user. Just one idea, and it has drawbacks in a couple of areas... There are always ways, .. but I would not consider

Re: Shell account cgi script

2005-09-07 Thread Bryan Irvine
[snip cut whack] > >I want to put a cgi-script on my OpenBSD server for shell account > >creation. Basically that allows users to sign up accounts via the web. [chainsaw noises cut cut] > You can't add a user via cgi with a normal OBSD installation, since Apache > is running chroot'd. Not directl

Re: Shell account cgi script

2005-09-07 Thread Darrin Chandler
There's always a way. You could put the info somewhere within the chroot and have a cron job check it every minute and add the user. Just one idea, and it has drawbacks in a couple of areas... L. V. Lammert wrote: At 10:03 PM 9/7/2005 +1000, you wrote: Hello, I want to put a cgi-script on

Re: Shell account cgi script

2005-09-07 Thread L. V. Lammert
At 10:03 PM 9/7/2005 +1000, you wrote: Hello, I want to put a cgi-script on my OpenBSD server for shell account creation. Basically that allows users to sign up accounts via the web. I however know very little about cgi, I could probably write one if I looked into it but I thought I would ask fi