iw_cgi_wrapper error.cgi is throwing an error when ran...

TS 6.7.2
Unix
TS upgraded from 6.5

We are still in our upgrade process from TS 6.5 to 6.7.2 and I'm getting an error when you attempt to start a workflow or make a call to any other cgi. The error states that it is from the Wrapper and says Error: Installation problem: "iw_cgi_wrapper.cgi" needs to be run as root.

iw_cgi_wrapper.cgi is owned by root so I'm not understanding this issue. In comparing the iw_cgi_wrapper.cgi file from the 6.5 box to the one in 6.7.2 I notice they are differnet in size. Otherwise I'd try pulling the one from the older box to replace this one. Is there something we are missing or has anyone expierenced this issue before? Thanks.

Find more posts tagged with

Comments

Crsb


Error: Installation problem: "iw_cgi_wrapper.cgi" needs to be run as root.

was TeamSite installed by root? is it running as root?

dchristie

Yes, TeamSite was installed as root and is run as root.

ISCBorisB

Yes, TeamSite was installed as root and is run as root.

Does wrapper have setuid Flag set?

dchristie

Does wrapper have setuid Flag set?

From my knowledge I can't view the source code for iw_cgi_wrapper.cgi, it is compiled. I believe this is a native Team Site file.

ISCBorisB

From my knowledge I can't view the source code for iw_cgi_wrapper.cgi, it is compiled. I believe this is a native Team Site file.

What does that have to do to the source code? Type the following verbatim in the command prompt, note backticks

ls -al `iwgethome`/httpd/iw-bin/iw_cgi_wrapper.cgi

What does it show? Is the result identical in 6.5 and 6.7?

dchristie

What does that have to do to the source code? Type the following verbatim in the command prompt, note backticks

ls -al `iwgethome`/httpd/iw-bin/iw_cgi_wrapper.cgi

What does it show? Is the result identical in 6.5 and 6.7?

Working 6.5 production:
-rwsrwxr-t 1 root daemon 3672004 Mar 16 2005 /usr/iw-home/httpd/iw-bin/iw_cgi_wrapper.cgi

6.7.2 not working:
-rwxrwxrwx 1 root daemon 5233840 Aug 20 2008 /usr/iw-home/httpd/iw-bin/iw_cgi_wrapper.cgi

ISCBorisB

Working 6.5 production:
-rwsrwxr-t 1 root daemon 3672004 Mar 16 2005 /usr/iw-home/httpd/iw-bin/iw_cgi_wrapper.cgi

6.7.2 not working:
-rwxrwxrwx 1 root daemon 5233840 Aug 20 2008 /usr/iw-home/httpd/iw-bin/iw_cgi_wrapper.cgi

6.5 working
-rwsrwxr-x - That is correct! setuid Flag is set, Wrapper operational.

6.7.2 not working:
-rwxrwxrwx - That's wrong! setuid is off, Wrapper fails issuing priviliged "Set effective UID" command, etc

Talk to your Unix Sysadmin, explain that you need setuid Flag on this File. if you have 'root' priviliges you can do
it yourself ( man chmod ) but talk to sysadmin regardless - somebody (or some process) incorrectly modified this CGI mode
after install.

Concatenate.zip

dchristie

6.5 working
-rwsrwxr-x - That is correct! setuid Flag is set, Wrapper operational.

6.7.2 not working:
-rwxrwxrwx - That's wrong! setuid is off, Wrapper fails issuing priviliged "Set effective UID" command, etc

Talk to your Unix Sysadmin, explain that you need setuid Flag on this File. if you have 'root' priviliges you can do
it yourself ( man chmod ) but talk to sysadmin regardless - somebody (or some process) incorrectly modified this CGI mode
after install.

That was it! Thanks, appreciate it. I wasn't familar with the setuid or how it affected the file. I had done a chmod 777 on the whole directory prior. Duh.

ISCBorisB

That was it! Thanks, appreciate it. I wasn't familar with the setuid or how it affected the file. I had done a chmod 777 on the whole directory prior. Duh.

Duh indeed... I'm not at all sure this CGI is (was?) the only File with setuid/setgid Flags.
You may perhaps want to compare to 6.5 Version - or cross your fingers and see how it goes.

nipper

Duh indeed... I'm not at all sure this CGI is (was?) the only File with setuid/setgid Flags.
You may perhaps want to compare to 6.5 Version - or cross your fingers and see how it goes.

Find out if your IT dept has a script that looks for setuid files. Many companies do and then remove them. You can get a list of the files to be setuid from support (good luck getting someone to reply)

haider

Please set the permission 4775 of this "iw_cgi_wrapper" file using chmod command. Owner of this file must be root in UNIX environment. 777 will make executable for everyone Smiley Happy