Comments on: Your own Apache proxy without root http://jrwren.wrenfam.com/blog/2007/01/04/your-own-apache-proxy-without-root/ babblings of a computer loving fool Mon, 21 Nov 2016 19:37:12 +0000 hourly 1 https://wordpress.org/?v=4.7.2 By: jrwren http://jrwren.wrenfam.com/blog/2007/01/04/your-own-apache-proxy-without-root/comment-page-1/#comment-29859 Thu, 04 Oct 2007 16:21:07 +0000 http://little.xmtp.net/blog/2007/01/04/your-own-apache-proxy-without-root/#comment-29859 JFYI as a note to others and myself.
to proxy IM and other protocols, you must enable mod_proxy_connect
and use the AllowCONNECT directive

For ssl, y!im, aim, msn, and google, use this line:
AllowCONNECT 443 5050 5190 1863 5222

]]> By: jrwren http://jrwren.wrenfam.com/blog/2007/01/04/your-own-apache-proxy-without-root/comment-page-1/#comment-29857 Thu, 04 Oct 2007 15:44:56 +0000 http://little.xmtp.net/blog/2007/01/04/your-own-apache-proxy-without-root/#comment-29857 Greg:

your tinyproxy, or SOMETHING is allowing a regular user to change users, this might be done using SUID bit.

I’m assuming that you have no permission on a server to run anything as root and that there are no suid helper programs.

]]> By: Greg Cunneen http://jrwren.wrenfam.com/blog/2007/01/04/your-own-apache-proxy-without-root/comment-page-1/#comment-29629 Sat, 18 Aug 2007 04:27:13 +0000 http://little.xmtp.net/blog/2007/01/04/your-own-apache-proxy-without-root/#comment-29629 I have a proxy (tinyproxy) running that appears to start an apache process with ownership www-data. When tinyproxy stops, it appears to be leaving that process hanging. I was wondering if that was because the proxy starts it running as nobody in nogroup. I guess what I am asking is the purpose of the change you made from www-data to jrwren?
Regards.

]]> By: jrwren http://jrwren.wrenfam.com/blog/2007/01/04/your-own-apache-proxy-without-root/comment-page-1/#comment-29624 Fri, 17 Aug 2007 14:57:38 +0000 http://little.xmtp.net/blog/2007/01/04/your-own-apache-proxy-without-root/#comment-29624 Greg,

Well, NO. As a regular non-root user, you CAN’T start processes as another user. It just isn’t allowed. Do you have some other solution in mind?

]]> By: Greg Cunneen http://jrwren.wrenfam.com/blog/2007/01/04/your-own-apache-proxy-without-root/comment-page-1/#comment-29621 Fri, 17 Aug 2007 06:06:54 +0000 http://little.xmtp.net/blog/2007/01/04/your-own-apache-proxy-without-root/#comment-29621 I read “Your Own Apache Proxy Without Root”
http://jrwren.wrenfam.com/blog/2007/01/04/your-own-apache-proxy-without-root/

and I see that you change group and user to jrwren. Does that change the ownership of the Apache process? If you don’t change these entries and leave them as www-data and www-data, would you lose ownership of the Apache process, and thereby not be able to “kill” it if need be.

]]>