The tag has no wiki summary.

learn more… | top users | synonyms

2
votes
1answer
3k views

Access Denied for PHP Files Only

Apache HTTP Server 2.2.21 with VirtualHosts under SuExec PHP 5.3.8 via fcgid Arch Linux 2011.08.19 I am getting 403 Access Denied errors from Apache any time I try to access a PHP file. HTML files ...
3
votes
1answer
8k views

NameVirtualHost 12.345.67.89:443 has no VirtualHosts after enabling and disabling suexec module

In the process of trying to enable suexec module I starting getting these warnings (when I restarted apache). I get them when suexec is enabled & disabled: * Restarting web server apache2 [Wed ...
0
votes
1answer
641 views

How do I utilize suexec to allow a php script to run a linux command?

I would like to execute a php script in a browser that will in turn execute a single linux command and return its output. When I first decided to test this out I created this: <?php $command = ...
5
votes
4answers
3k views

PHP fopen always fails with permission denied

I am in the process of migrating a couple of Wordpress blogs over to AWS and have run into an issue with file permissions that has successfully foiled me for the last couple of hours. The simplest ...
1
vote
2answers
915 views

django + wsgi + suexec + userdir + apache?

I've got a django 1.1 website I want to run in wsgi (as that seems to be the recommended deployment on apache). I want it to run as the www user (apache is running as www-data). I would ideally like ...
0
votes
1answer
398 views

suEXEC before Apache dead

One of our Apache server went down. After the web server restarts, there is a red light on the server panel and we are contacting hardware vendor to investigate any potential hardware issue. The ...
0
votes
1answer
792 views

Debian, Plesk and Nagios problems

I have a Debian 5 + Plesk 9.5.4 installation on my server, and just installed Nagios3 via apt-get. I have set up a subdomain on my virtualhost, with cgi support in Plesk, and then copied any nagios ...
0
votes
1answer
399 views

Apache w/ fcgid and suexec: second vhost returning 'Forbidden'

I have an Apache install set up with suExec and vhosts.. The original ("primary") vhost works fine, but I'm having some issues with a second one I've added; returning a 403 response. Considering this ...
2
votes
1answer
372 views

Secure Apache PHP vhost configuration

I'm looking to secure some websites running under apache using suexec. At the moment php is executed with the user/group of the file being executed. This seems to me, not secure enough. It stops ...
3
votes
1answer
2k views

How do I run a PHP web application as a particular user and group on CentOS 5 with Apache?

I'm aware there are various different ways to do this but I'm not sure that the "best" way would be for my particular situation: Each site should have its own user account (site user) Virtual Hosts ...
1
vote
1answer
245 views

ApacheHTTPD mod_suexec, safe_mode, open_basedir

as the Debian developers consider safe_mode (which will not make it into PHP6) and open_basedir inherently broken security measures, I wonder if they can be considered replaceable by mod_suexec ...
1
vote
2answers
1k views

I need clarification on Apache2, MPM-Worker, FastCGI, PHP5-fpm, suEXEC?

My current configuration is: Apache2 + MPM-Worker AND FastCGI + PHP5-fpm (PHP 5.3.2) ON Ubuntu 10.04 LTS I have a single pool of 2-5 processes running as a different user from that of the default ...
1
vote
1answer
869 views

suexec error configuring mod_fastcgi with apache2.2.3 on centos

I've been following this blog post so that I can share APC opcode cache between PHP processes using FastCGI. Unfortunately I'm getting the following error when starting httpd: Starting httpd: Syntax ...
1
vote
1answer
252 views

Need advice in setting up server. fastCGI, suExec, speed, security, etc

I am running my own dedicated server with centOS 5 and WHM/cPanel. I would like to configure my server to meet my needs but I need a little help. It will only be my own websites being run on this ...
2
votes
1answer
149 views

Why restricting Apache users from executing scripts?

When Apache users are allowed to executes bash scripts via PHP - why it's considered dangerous? I understand that the users can traverse the whole file system and even see which additional users are ...
2
votes
3answers
1k views

fcgid, suexec, and userdir

I'm trying to set up per-user trac instances, using fcgid. The problem is that trac requires rw access to the trac instance, so I need the fcgi process to run under the respective user. I have the ...
0
votes
2answers
375 views

How to debug a leeching apache process?

I am running apache2 with mod-fcgid, suexec and SysCP. From time to time, the apache process gets stuck using 100% CPU on one core on my server. The apache is also unable to handle any additional ...
0
votes
1answer
86 views

Creating users/groups via PHP

I'm creating an internal tool that needs a bit of cpanel/webmin type functionality, but this isn't a situation where I could use one of those Right now I need to be able to create linux users, ...
1
vote
2answers
2k views

Single fastcgi/php-cgi server for multiple virtualhosts?

I'm currently hosting sites for clients using the following setup: Apache 2.2.16 mod_fastcgi 2.4.7 php 5.3.3 Apache uses the worker MPM and serves PHP through a dynamic FastCGI config: ...
1
vote
2answers
704 views

Running APC with suEXEC

Our servers are currently setup to run PHP as DSO with suEXEC enabled. Is it possible for us to install APC in this setup? Servers are CentOS 5.2 running with WHM/cPanel
0
votes
2answers
183 views

Forcing scripts on apache to run under different accounts to enhance security?

My client's website was recently defaced and they are seeking was to mitigate this risk. They have a dedicated server running apache and mod_php. The website consists of three separate php ...
1
vote
1answer
1k views

How to enable suexec for VPS using Plesk Panel?

I have tested on Plesk 9 and 10(preview version), but I couldn't find a way to enable suexec. The apache has loaded the suexec module, but it was not enabled. The OS is Centos 5.4. Any help will be ...
0
votes
1answer
841 views

Setting up Suexec on apache on Godaddy Virtual private hosting

I have recently purchased Godaddy VPS (Virtual Private Server) with their custom control panel and CentOS 5.4 From their control panel I am able to add domains to the server with their own user and ...
2
votes
2answers
281 views

SuExec for Tomcat?

We're running a (cPanel/WHM based) server which contains mainly PHP applications. They are executed with the permissions of their owner with the suExec component of Apache. We're looking into moving ...
2
votes
3answers
981 views

Security issues of running PHP scripts as the owner of the PHP file with suexec

I'm using suexec to ensure that PHP scripts (and other CGI/FastCGI apps) are run as the account holder associated with the relevant virtual host. This allows for securing each users' scripts from ...
1
vote
2answers
10k views

Apache + SuExec + php-fpm - how to set them up?

I wonder if there is a good guide on how to setup Apache + SuExec + php-fpm? I have a server which I am going to use several separate website. So, I need php to be run as site-owner user. As I can ...
4
votes
2answers
210 views

Configuring Apache for multiple clients

Last week I had a question here about suexec / suphp but I tried to accomplish too much. I'm going to narrow the scope a bit and try again. I'd like to configure a LAMP server to host multiple ...
10
votes
1answer
2k views

Apache, suexec, PHP, suPHP

While I'm quite comfortable as a Linux user, my Linux Admin-fu is a bit weak. Thus, I'm here looking for guidance with a CentOS server I'm about to build. I need to setup an Apache2 web server for a ...
1
vote
2answers
776 views

Apache error with suEXEC only

When I enable suEXEC by following the tutorial here, I am able to get PHP to run over Apache in cgi mode, but when I start trying to use suEXEC I get a 403, and the following error appears in the ...
2
votes
1answer
4k views

suexec and docroot problem

I've got a problem with running a FastCgiServer under apache2. When I define a virtual host with a static fcgi server configured, I get an error from suexec: command not in docroot ...
2
votes
5answers
181 views

How to run each site under a different user?

Let's say I have a server and a bunch of developers working on different sites(php and django) and I don't want the different developers to access each other's sites. How should I go about ...
2
votes
2answers
348 views

Apache setup for multiple sites with common files

Just realised i posted this on stack overflow by mistake, so here it is in the correct place! I have approx 50 sites that all use the exact same files other than CSS and IMAGES, i currently ...