Allow apache to use the ' useradd' command

Moozzie · 06-06-2007, 03:03 AM

Hi all,

I have a Unix server (RedHat), I can create new users with the useradd command (as root), but apache cann't. How can I tell the programm useradd to allow apache/nobody to create new users?

Thank you

ZAMO · 06-06-2007, 03:34 AM

hello Moozzie,
The useradd comand can be run/execute only by root user and not by anyone. If you elaborate your problem or where/why you need this, i can do my best.

Moozzie · 06-06-2007, 03:55 AM

hello ZAMO
I want to create new users on my server, But... I don't want to do it myself. PHP needs to do that. I have a form and that I will send a the 'useradd' command. But PHP is not allowed to do that...

scoban · 06-06-2007, 04:01 AM

You can setuid useradd but this is too risky...

Try webmin maybe..

ZAMO · 06-06-2007, 04:13 AM

yes ,
as scoban stated it is too risky to make apache as a user who can be able to add a user.because the PHP script is own by apache. As most hackers in this world use php script for hacking, it is risky to do this.

Moozzie · 06-06-2007, 04:16 AM

oke but how does webmin do it? If he can do it save why can't I?
Of course i don't want that much as webmin, the only thing i want is creating users

Is it posible (and a good idee) to write a C script who is waiting on some empty port. and if i want to create a new user, i'll tell that to that port. So a C script can create it for me (with useradd)

Ty