Date: Wed, 23 Jan 2002 08:52:58 +0100 (CET) From: sj@datanet.hu To: Robert Herrold <bobber@intense.net> Cc: Buliwyf McGraw <buliwyf@libertad.univalle.edu.co>, <freebsd-security@FreeBSD.ORG> Subject: Re: Creating users from the web Message-ID: <Pine.LNX.4.44.0201230841020.1875-100000@thorium.datanet.hu> In-Reply-To: <001701c1a3c3$19ab6e20$6c01a8c0@mpcsecurity.com>
next in thread | previous in thread | raw e-mail | index | archive | help
You may try another approach: Build a simple cgi script that will put data about the new user to a file or database. Then make an entry in root's crontab to script regularly to process the file or database mentioned above. This way you don't need setu(g)id programs. Of course, you need strong authentication and carefully designed cgi script and a bullet-proof command involved from cron SJ. On Tue, 22 Jan 2002, Robert Herrold wrote: > Commercially, you can take a look at billmax (1st 100 users free). An oldie > I used to use was called URIBS from n2h2 > > > ----- Original Message ----- > From: "Buliwyf McGraw" <buliwyf@libertad.univalle.edu.co> > To: <freebsd-security@FreeBSD.ORG> > Sent: Tuesday, January 22, 2002 8:39 PM > Subject: Creating users from the web > > > > > > Hello, i want to build a system to create users from a web interface. > > I tried to use the su_exec function of apache but it doesn't support > > run programs "as root" or execute setuid programs. > > I really need that the system work by the web... i know that it could > > be insecure, but anyway, i have to do it. > > Any sugestions? > > Thanks for any help. > > > > ======================================================================= > > Buliwyf McGraw > > Administrador del Servidor Libertad > > Centro de Servicios de Informacion > > Universidad del Valle > > ======================================================================= > > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > > with "unsubscribe freebsd-security" in the body of the message > > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-security" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.LNX.4.44.0201230841020.1875-100000>