Client login to apache as root???

[skyy]

Hi... i am trying to do some CGI with apache http server.

I would like to do some simple things such as creating a folder in the server when i login. However.. i found out that when i login i am not a root user. So i wont be able to create any folder due to permission.

Anybody know how to login as root when i login to the server?

[Motoma]

Hi... i am trying to do some CGI with apache http server.

I would like to do some simple things such as creating a folder in the server when i login. However.. i found out that when i login i am not a root user. So i wont be able to create any folder due to permission.

Anybody know how to login as root when i login to the server?

THIS SHOULD NOT BE DONE!

Instead, change the permissions on the folder you wish to have Apache access.

[skyy]

Hi... i need the client to act as root to run some command such as changing the ip address. This require root access..

any idea?

[Motoma]

Hi... i need the client to act as root to run some command such as changing the ip address. This require root access..

any idea?

Change IP Addresses? You won't be able to access the server afterwards!
Create a shell script that does the work for you. Make this script have the SUID property.

PLEASE READ THE FOLLOWING. I need you to understand the security implications this could have if done improperly.
Dangers of SUID Shell Scripts

[skyy]

Change IP Addresses? You won't be able to access the server afterwards!
Create a shell script that does the work for you. Make this script have the SUID property.

PLEASE READ THE FOLLOWING. I need you to understand the security implications this could have if done improperly.
Dangers of SUID Shell Scripts

Hi thanks.. i managed to do it with SUID...

[Motoma]

Glad you have found your solution. If you are still worried about security I have devised another way which is likely to be more secure:
Have apache write the desired IP information to a file.
Have a cron script run every minute to check for the file. If it exists, read it and perform the change then delete it.

[skyy]

Glad you have found your solution. If you are still worried about security I have devised another way which is likely to be more secure:
Have apache write the desired IP information to a file.
Have a cron script run every minute to check for the file. If it exists, read it and perform the change then delete it.

Hi.. this seems to be a good solution..

Can show me how to write the script?

[Motoma]

Hi.. this seems to be a good solution..

Can show me how to write the script?

Haven't tested it, but it would be something like this:

#!/bin/bash
VAR=`cat /var/www/html/ipchange.txt`
ifconfig eth0 down
ifconfig eth0 $VAR
ifconfig eth0 up
 

[skyy]

Haven't tested it, but it would be something like this:

#!/bin/bash
VAR=`cat /var/www/html/ipchange.txt`
ifconfig eth0 down
ifconfig eth0 $VAR
ifconfig eth0 up
 

Hi thanks.. i meant how to write the cron script to let it check for a file every minute?

[Motoma]

Hi thanks.. i meant how to write the cron script to let it check for a file every minute?

Yeah, that was the cron script. Take a look at man crontab to see how to set the script to run.