Re: [GENERAL] problem connecting to postgres via apache

2014-01-24 Thread John R Pierce
On 1/24/2014 12:19 PM, Bret Stern wrote: SELINUX is a bunch of settings to control security. If you are able to find it, I was suggesting you disable it only to see if the Apache problem goes away. do NOT disable it. set the selinux policy to 'permissive'.this causes it to log exceptions

Re: [GENERAL] problem connecting to postgres via apache

2014-01-24 Thread Bret Stern
SELINUX is a bunch of settings to control security. If you are able to find it, I was suggesting you disable it only to see if the Apache problem goes away. Then to turn it back on. If it stops working, then there is a setting which is preventing Apache from being accessed. Locating the specific

Re: [GENERAL] problem connecting to postgres via apache

2014-01-24 Thread John R Pierce
On 1/24/2014 11:55 AM, Susan Cassidy wrote: I don't actually know what SELinux is. What else will happen if I (find out how to) disable it? your system will be less secure. -- john r pierce 37N 122W somewhere on the middle of the left coast -- Sent vi

Re: [GENERAL] problem connecting to postgres via apache

2014-01-24 Thread Daniel Verite
Susan Cassidy wrote: > Cannot set persistent booleans without managed policy. > Could not change policy booleans > > I don't know what that means. It probably means you're not root when issuing that command. Become root or use sudo. Best regards, -- Daniel PostgreSQL-powered mail user

Re: [GENERAL] problem connecting to postgres via apache

2014-01-24 Thread Susan Cassidy
I tried: setsebool -P httpd_can_network_connect 1 But I get: Cannot set persistent booleans without managed policy. Could not change policy booleans I don't know what that means. Susan On Fri, Jan 24, 2014 at 9:38 AM, Adrian Klaver wrote: > On 01/24/2014 09:35 AM, Susan Cassidy wrote: > >>

Re: [GENERAL] problem connecting to postgres via apache

2014-01-24 Thread Daniel Verite
Susan Cassidy wrote: > [scassidy@jacensolo ~]$ /usr/sbin/sestatus | grep SELinux > SELinux status: enabled > SELinuxfs mount:/selinux > > I have yet to find what to do to enable webserver connections. setsebool -P httpd_can_network_connect_db 1 Best rega

Re: [GENERAL] problem connecting to postgres via apache

2014-01-24 Thread Susan Cassidy
I don't actually know what SELinux is. What else will happen if I (find out how to) disable it? Susan On Fri, Jan 24, 2014 at 9:47 AM, Bret Stern < bret_st...@machinemanagement.com> wrote: > Are you calling the perl from apache (assuming yes)..? Does the web > user have the rights to execute t

Re: [GENERAL] problem connecting to postgres via apache

2014-01-24 Thread Susan Cassidy
[scassidy@jacensolo ~]$ /usr/sbin/sestatus | grep SELinux SELinux status: enabled SELinuxfs mount:/selinux I have yet to find what to do to enable webserver connections. Susan On Fri, Jan 24, 2014 at 9:38 AM, Adrian Klaver wrote: > On 01/24/2014 09:35 AM, Susan

Re: [GENERAL] problem connecting to postgres via apache

2014-01-24 Thread Bret Stern
Are you calling the perl from apache (assuming yes)..? Does the web user have the rights to execute the perl code? Try disabling SELinux.. You'll get it.. On Fri, 2014-01-24 at 09:35 -0800, Susan Cassidy wrote: > I've already checked that. It is enabled. I am running Scientific > Linux. > > >

Re: [GENERAL] problem connecting to postgres via apache

2014-01-24 Thread Susan Cassidy
I've already checked that. It is enabled. I am running Scientific Linux. On Fri, Jan 24, 2014 at 8:28 AM, Tom Lane wrote: > Susan Cassidy writes: > > $dbh = > DBI->connect("dbi:Pg:dbname=$dbname;host=${dbserver};port=$dbport;", > > $dbuser, $dbpasswd) or > > errexit( "Unable to connect to d

Re: [GENERAL] problem connecting to postgres via apache

2014-01-24 Thread Adrian Klaver
On 01/24/2014 09:35 AM, Susan Cassidy wrote: I've already checked that. It is enabled. I am running Scientific Linux. SELinux is enabled? The database connection value is enabled to allow or disallow webserver connections? On Fri, Jan 24, 2014 at 8:28 AM, Tom Lane mailto:t...@sss.pgh.pa

Re: [GENERAL] problem connecting to postgres via apache

2014-01-24 Thread Tom Lane
Susan Cassidy writes: > $dbh = DBI->connect("dbi:Pg:dbname=$dbname;host=${dbserver};port=$dbport;", > $dbuser, $dbpasswd) or > errexit( "Unable to connect to dbname $dbname, err: $DBI::errstr"); > The exact same connection string works fine in a standalone perl program. Given the permissions er

Re: [GENERAL] problem connecting to postgres via apache

2014-01-24 Thread Susan Cassidy
$dbh = DBI->connect("dbi:Pg:dbname=$dbname;host=${dbserver};port=$dbport;", $dbuser, $dbpasswd) or errexit( "Unable to connect to dbname $dbname, err: $DBI::errstr"); The exact same connection string works fine in a standalone perl program. Susan On Thu, Jan 23, 2014 at 3:08 PM, Adrian Klaver

Re: [GENERAL] problem connecting to postgres via apache

2014-01-23 Thread Sameer Kumar
On Fri, Jan 24, 2014 at 7:08 AM, Adrian Klaver wrote: > On 01/23/2014 02:55 PM, Susan Cassidy wrote: > >> I'm having a problem connecting to postgres via a CGI program. I can >> connect just fine using the same connect string in a non-cgi perl >> program as in the perl cgi program. The error I g

Re: [GENERAL] problem connecting to postgres via apache

2014-01-23 Thread Adrian Klaver
On 01/23/2014 02:55 PM, Susan Cassidy wrote: I'm having a problem connecting to postgres via a CGI program. I can connect just fine using the same connect string in a non-cgi perl program as in the perl cgi program. The error I get is this: ERROR: Unable to connect to dbname testdb2,

[GENERAL] problem connecting to postgres via apache

2014-01-23 Thread Susan Cassidy
I'm having a problem connecting to postgres via a CGI program. I can connect just fine using the same connect string in a non-cgi perl program as in the perl cgi program. The error I get is this: ERROR: Unable to connect to dbname testdb2, err: could not connect to server: Permission denied Is t