[SOLVED] CGI-Shell Script runs ok in command prompt but not through the webpage

rajib_145 · 05-18-2012, 02:07 AM

Hi Linux Gods,
I am a newbie and need your kind help.
On my Linux machine i have installed apache and was successfull in completing the initial steps like, managed to run it as different user with administrative rights(adding the user to Wheel group), also with the help of this forum i was able to create the webpage and call cgi scripts.
Now the problem is:

The cgi shell script seems to be ok according to my best knowledge as it runs perfectly alright while running fron my shell, but it doesnot work from the website.

By the way:

The Script goes like this:

#!/bin/bash
#Taking the arguments from a html page
host=`echo $QUERY_STRING | awk -F'=' '{ print $3 }'`
user=`echo $QUERY_STRING | awk -F'[= &]' '{ print $2 }'`

echo 'Content-type: text/html'
echo ''
echo '<html>'

entry="$user $host=ALL"

if `sudo ssh "$hostname" "echo "$entry" >> /etc/sudoers"`
then
echo "Sudo permission Given for $user on $host" > /path
else
echo "Sudo permission for $user on $host is not Successfull" > /path
fi

echo '</body>'
echo '</html>'

I am really getting confused where i am getting wrong.

rajib_145 · 05-18-2012, 02:09 AM

Kindly let me know for any other information, I really need to know this as i have gone a long distance and just because of this problem, i am stuck in the middle of sea. Please help me!!!!

pan64 · 05-18-2012, 02:37 AM

have you got any error messages?

rajib_145 · 05-18-2012, 02:45 AM

Thanks for the reply.

There is no error msg displayed on webpage.

And in the below path:
/var/www/error
there are many files with .var extension.
Iam sorry im really new to this, kindly accept my appology if i am not able to provide you any information which is very simple for others.

pan64 · 05-18-2012, 02:49 AM

you can put some logging into that script:

Code:

#!/bin/bash
set -xv
exec 2>/tmp/logfile.txt
...

and after test you can check that logfile. Without any error message we cannot give you a solution.

rajib_145 · 05-18-2012, 02:51 AM

I checked the below file:

/var/log/httpd

and found these below three lines:

[Fri May 18 01:43:13 2012] [error] [client IP-address] sudo: , referer: http://ip-address/webpage.html
[Fri May 18 01:43:13 2012] [error] [client IP-address] sorry, you must have a tty to run sudo, referer: http://ip-address/webpage.html
[Fri May 18 01:43:13 2012] [error] [client IP-address] , referer: http://ip-address/webpage.html

Kindly let me know if this is ok..

pan64 · 05-18-2012, 02:57 AM

see this
http://www.question-defense.com/2009...ty-to-run-sudo

rajib_145 · 05-18-2012, 02:58 AM

Hi All, this is the o/p that i got:

$ cat /tmp/logfile1.txt

entry="$user $host=ALL"
+ entry='user wipwab59=ALL'

if `sudo ssh wipwab59 "echo "$entry" >> /etc/sudoers"`
then
echo "Sudo permission Given for $user on $host" > /local/administrativescripts/reports/sudo
else
echo "Sudo permission for $user on $host is not Successfull" > /local/administrativescripts/reports/sudo
fi
sudo ssh wipwab59 "echo "$entry" >> /etc/sudoers"
++ sudo ssh wipwab59 'echo user' 'wipwab59=ALL >> /etc/sudoers'
sudo: sorry, you must have a tty to run sudo
+ echo 'Sudo permission for user on wipwab59 is not Successfull'

#sudo /local/administrativescripts/sudopermission_apache.sh wipwab59 rahul
#/local/administrativescripts/sudopermission_apache.sh $host $user
#sudo /local/administrativescripts/sudopermission_apache.sh $host $user

cat /local/administrativescripts/reports/sudo
+ cat /local/administrativescripts/reports/sudo

echo '</body>'
+ echo '</body>'
echo '</html>'
+ echo '</html>'

rajib_145 · 05-18-2012, 03:00 AM

Thanks i will read this and get back to you... Thanks you again..

rajib_145 · 05-18-2012, 03:03 AM

Thank you so much sir, thank you thank you thank you...Its working smoothly... Thanks for your help sir..

pan64 · 05-18-2012, 03:46 AM

great, I'm glad it helped

_________________________________
Happy with solution ... mark as SOLVED
If someone helps you, or you approve of what's posted, click the "Add to Reputation" button, on the left of the post.