Hi, I was wondering if anyone is using : CGIWRAP SUEXEC Some other cgi security wrapper with OTRS. Please reply offlist, and then I'll summarize. Thanks, Tuc
Works fine with cgiwrap. No changes necessary. On Nov 4, 2007, at 9:45 AM, Tuc at T-B-O-H.NET wrote:
I was wondering if anyone is using :
CGIWRAP SUEXEC Some other cgi security wrapper
with OTRS. Please reply offlist, and then I'll summarize.
Thanks, Tuc _______________________________________________ OTRS mailing list: otrs - Webpage: http://otrs.org/ Archive: http://lists.otrs.org/pipermail/otrs To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/otrs Support or consulting for your OTRS system? => http://www.otrs.com/
-- Jo Rhett senior geek Silicon Valley Colocation Support Phone: 408-400-0550
Hi, Actually, yea, there is a change necessary. (Well, not for you, since you probably compiled with --without-redirect-stderr while thats not our default) Once I did, the application works fine. If you don't, then atleast on the 2.2.3 version, when you went to add an admin user it should have died. The developers made a fix today to stop that from happening which will make 2.2.5 (Since 2.2.4 is already released) or you can pull the http://cvs.otrs.org/viewvc.cgi/*checkout*/otrs/Kernel/Output/HTML/Preference... for the fix.. Tuc
Works fine with cgiwrap. No changes necessary.
On Nov 4, 2007, at 9:45 AM, Tuc at T-B-O-H.NET wrote:
I was wondering if anyone is using :
CGIWRAP SUEXEC Some other cgi security wrapper
with OTRS. Please reply offlist, and then I'll summarize.
Thanks, Tuc
On Nov 7, 2007, at 1:47 PM, Tuc at T-B-O-H.NET wrote:
(Well, not for you, since you probably compiled with --without-redirect-stderr while thats not our default)
Of course not. That's a huge security risk. In a lot of places you could put in bogus input and get back things like database passwords and stuff from the output when the query fails. You should never, ever do that. -- Jo Rhett senior geek Silicon Valley Colocation Support Phone: 408-400-0550
participants (2)
-
Jo Rhett -
Tuc at T-B-O-H.NET