AW: [horde] failing to log in to horde cvs HEAD using imap] -> chown

Udo Schubert news4dadirtyluk at gmx.de
Mon Apr 7 05:03:36 PDT 2003


>btw, one other thing that fouled me up is I was working as root and
>when I checked the files out of cvs the dirs and files were all owned
>by root and when it went to actually write the conf.php, it couldn't
>and said to copy the code it generated into conf.php... that didn't work
>for me and when I finally got around to chown the dirs and files to
>apache:apache, and then it was able to write the conf.php and then
>I could login, not sure why that was, but it was a stoopid mistake on
>my part anyway, so just to warn you.

ha!at last i know why it ain't working for me,too!
thanks alot for this. how stupid must i be,not to think
of some simple thing like this...too bad.
but i think for security reasons you should only change the owner
where the webserver really needs to write something...in this 
case the config directories...otherwise the apache would have
rights to change all the other files too.and with the right exploit
(i heard ;) it can be easy to change the code...

best regards udo




More information about the horde mailing list