[pkg-lighttpd] Bug#345554: lighttpd: Cgi-bin executables in /usr/lib/cgi-bin/ are not accessible via http://localhost/cgi-bin/

[Stefan Borggraefe]

Package: lighttpd
Version: 1.4.8-2
Severity: important
Tags: patch


According to the Debian Policy Manual section 11.5...

"Cgi-bin executable files are installed in the directory 
     /usr/lib/cgi-bin/cgi-bin-name

 and should be referred to as 
     http://localhost/cgi-bin/cgi-bin-name"

The latter does not work when you installed lighttpd.

The following two lines added to lighttpd.conf did the trick for me:

$HTTP["url"] =~ "/cgi-bin/" { cgi.assign = ( "" => "" ) }
alias.url = ( "/cgi-bin/" => "/usr/lib/cgi-bin/" )

Of course the cgi and alias modules need to be enabled, too.

-- System Information:
Debian Release: testing/unstable
  APT prefers unstable
  APT policy: (500, 'unstable'), (9, 'experimental')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/dash
Kernel: Linux 2.6.14-2-k7
Locale: LANG=de_DE at euro, LC_CTYPE=de_DE at euro (charmap=ISO-8859-15)

Versions of packages lighttpd depends on:
ii  libbz2-1.0                    1.0.2-11   high-quality block-sorting file co
ii  libc6                         2.3.5-9    GNU C Library: Shared libraries an
ii  libldap2                      2.1.30-12  OpenLDAP libraries
ii  libpcre3                      6.4-1.1    Perl 5 Compatible Regular Expressi
ii  libssl0.9.8                   0.9.8a-5   SSL shared libraries
ii  lsb-base                      3.0-13     Linux Standard Base 3.0 init scrip
ii  mime-support                  3.35-1     MIME files 'mime.types' & 'mailcap
ii  zlib1g                        1:1.2.3-9  compression library - runtime

Versions of packages lighttpd recommends:
pn  php4-cgi                      <none>     (no description available)
ii  php5-cgi                      5.0.5-3    server-side, HTML-embedded scripti

-- no debconf information