Can't get suexec to work

[geekraver]

Hi all

I recently installed dspam and am trying to get the dspam cgi to work. This requires suexec. The cgi is executing but doesn't appear to actually run setuid.

I have a vanilla Gentoo Apache 1.3.29-r1 install, which includes suexec. Apache is running as user apache, group nobody. I added a user dspam, uid = 1003. My virtual host specifies "User dspam" and "Group users" (=100), which exceeds the required minima of uid=1000 and gid=100.

The Apache log shows suexec as being enabled (found in /usr/sbin). However, the cgi fails to open mbox files owned by dspam:users, with a permission denied. The weird thing is that nothing gets logged in /var/log/apache/suexec_log, which makes it seem like Apache is not even trying to use suexec at all. If I just run suexec from a command line then it logs okay ("too few arguments"). The vhost directory and script is owned by dspam:users; the only includes in the cgi are in the same directory (with same ownership).

My hosted directories are all under /var/www/localhost, which is below the required root of /var/www. Apart from this issue, I have plenty of other cgi's and virtual hosts working, so I'm baffled by this. Any ideas will be appreciated.