The tag has no wiki summary.

learn more… | top users | synonyms

13
votes
1answer
5k views

Multiple php versions simultaneously on Ubuntu

I want to be able to run multiple php versions on my development box running Ubuntu 12.04. What I want to accomplish is that when I use localhost as domain a default is used (let's say php 5.3.17). ...
10
votes
1answer
2k views

Apache, suexec, PHP, suPHP

While I'm quite comfortable as a Linux user, my Linux Admin-fu is a bit weak. Thus, I'm here looking for guidance with a CentOS server I'm about to build. I need to setup an Apache2 web server for a ...
5
votes
4answers
2k views

PHP fopen always fails with permission denied

I am in the process of migrating a couple of Wordpress blogs over to AWS and have run into an issue with file permissions that has successfully foiled me for the last couple of hours. The simplest ...
4
votes
4answers
6k views

How to change suexec root directory from “/var/www” to “/home”?

Hi I've installed suexec using on ubuntu 12.04: apt-get install apache2 apache2-suexec libapache2-mod-fcgid php5-cgi However when I run the following command: sudo /usr/lib/apache2/suexec -V I ...
4
votes
2answers
209 views

Configuring Apache for multiple clients

Last week I had a question here about suexec / suphp but I tried to accomplish too much. I'm going to narrow the scope a bit and try again. I'd like to configure a LAMP server to host multiple ...
3
votes
1answer
8k views

NameVirtualHost 12.345.67.89:443 has no VirtualHosts after enabling and disabling suexec module

In the process of trying to enable suexec module I starting getting these warnings (when I restarted apache). I get them when suexec is enabled & disabled: * Restarting web server apache2 [Wed ...
3
votes
1answer
2k views

How do I run a PHP web application as a particular user and group on CentOS 5 with Apache?

I'm aware there are various different ways to do this but I'm not sure that the "best" way would be for my particular situation: Each site should have its own user account (site user) Virtual Hosts ...
3
votes
1answer
458 views

Apache mass virtual hosting & suexec & fcgid

I followed Falco's tutorial and everything now works as expected for 2 users (e.g. john and alice) with their relevant directories (/var/www/john and /var/ww/alice). Now, I want to go to the next ...
3
votes
1answer
580 views

Confusion on SUEXEC and DOCROOT

I keep running into an issue with suexec where it says the cgi script is not in the docroot. I get this error: "[2012-05-21 04:53:02]: command not in docroot (/apps/dctools/www/cgi-bin/test.cgi)" ...
2
votes
5answers
181 views

How to run each site under a different user?

Let's say I have a server and a bunch of developers working on different sites(php and django) and I don't want the different developers to access each other's sites. How should I go about ...
2
votes
1answer
148 views

Why restricting Apache users from executing scripts?

When Apache users are allowed to executes bash scripts via PHP - why it's considered dangerous? I understand that the users can traverse the whole file system and even see which additional users are ...
2
votes
3answers
1k views

fcgid, suexec, and userdir

I'm trying to set up per-user trac instances, using fcgid. The problem is that trac requires rw access to the trac instance, so I need the fcgi process to run under the respective user. I have the ...
2
votes
3answers
962 views

Security issues of running PHP scripts as the owner of the PHP file with suexec

I'm using suexec to ensure that PHP scripts (and other CGI/FastCGI apps) are run as the account holder associated with the relevant virtual host. This allows for securing each users' scripts from ...
2
votes
3answers
907 views

multiple mounts of same NFS share on one client?

I'm moving webspace content to NFSv3 shares. Because of suexec restrictions I have different paths to different subsets of the content on the client. I wonder if I can still have all of the content in ...
2
votes
4answers
4k views

SuExec: “command not in docroot” Even Though It Is?

Arch Linux 2011.08.19 (Linux 3.4.2 i686) Apache 2.2.22 with SuExec PHP 5.4.4 (cli) via FastCGI My sites were all working fine earlier… I’m not sure when it happened because I noticed it over a week ...
2
votes
1answer
3k views

Access Denied for PHP Files Only

Apache HTTP Server 2.2.21 with VirtualHosts under SuExec PHP 5.3.8 via fcgid Arch Linux 2011.08.19 I am getting 403 Access Denied errors from Apache any time I try to access a PHP file. HTML files ...
2
votes
1answer
4k views

suexec and docroot problem

I've got a problem with running a FastCgiServer under apache2. When I define a virtual host with a static fcgi server configured, I get an error from suexec: command not in docroot ...
2
votes
2answers
277 views

SuExec for Tomcat?

We're running a (cPanel/WHM based) server which contains mainly PHP applications. They are executed with the permissions of their owner with the suExec component of Apache. We're looking into moving ...
2
votes
1answer
209 views

Suexec, group-writeable files

I am running an Apache server with Suexec. However, I get an internal server error if I try to execute a CGI script that is group-writeable (if I chmod g-w , the script runs fine) However, I want the ...
2
votes
1answer
616 views

issue with with suexec command when i try to initialise virtualmin on a pc with webmin installed and working

I am trying to initialise Virtualmin. After installing it via Webmin->Module->new module installation screen. This is the message that I am getting in Webmin: The Suexec command on your system is ...
2
votes
1answer
361 views

Secure Apache PHP vhost configuration

I'm looking to secure some websites running under apache using suexec. At the moment php is executed with the user/group of the file being executed. This seems to me, not secure enough. It stops ...
2
votes
2answers
348 views

Apache setup for multiple sites with common files

Just realised i posted this on stack overflow by mistake, so here it is in the correct place! I have approx 50 sites that all use the exact same files other than CSS and IMAGES, i currently ...
1
vote
2answers
9k views

Apache + SuExec + php-fpm - how to set them up?

I wonder if there is a good guide on how to setup Apache + SuExec + php-fpm? I have a server which I am going to use several separate website. So, I need php to be run as site-owner user. As I can ...
1
vote
1answer
4k views

Setting up Apache 2.2 + FastCGI + SuExec + PHP-FPM on Centos 6

I'm trying to follow this very detailed instruction here, I simply changed from www-data user to apache user, and is using /var/www/hosts/sitename/public_html instead of /home/user/public_html ...
1
vote
2answers
488 views

PHP Include Always Fails

Apache HTTP Server 2.2.21 with VirtualHosts under SuExec PHP 5.3.8 via fcgid Arch Linux 2011.08.19 I am in the process of migrating from shared hosting to VPS. The code I had ran fine before the ...
1
vote
2answers
1k views

I need clarification on Apache2, MPM-Worker, FastCGI, PHP5-fpm, suEXEC?

My current configuration is: Apache2 + MPM-Worker AND FastCGI + PHP5-fpm (PHP 5.3.2) ON Ubuntu 10.04 LTS I have a single pool of 2-5 processes running as a different user from that of the default ...
1
vote
2answers
800 views

Can't Get New Instance Of RT To Start

I am trying to transplant an instance of RT 4.0.1 (with local code customization) from a CentOS 4 server to a CentOS 6 server. My problem appears to be that I can't get the fastcgi script to start. ...
1
vote
1answer
294 views

Mechanism behind user forwarding in ScriptAliasMatch

I am following this tutorial to setup gitolite and at some point the following ScriptAliasMatch is used: ScriptAliasMatch \ "(?x)^/(.*/(HEAD | \ info/refs | \ objects/(info/[^/]+ | \ ...
1
vote
2answers
1k views

mod_vhost_alias + suEXEC: auto selecting uid/gid

I'm trying to configure Debian 6.0.4 for massive shared hosting with PHP5. Packages apache2-mpm-worker libapache2-mod-fcgid apache2-suexec are installed. I successfully loaded mod_vhost_alias and ...
1
vote
1answer
714 views

Safest way to run bash script using PHP-FPM

I currently running a websever with Nginx+PHP-Fpm and each sites on its own username/GID. Then I have a bash script that I use to create new user along with other necessary stuffs. I know I can call a ...
1
vote
2answers
994 views

Why the php-cgi wrapper script for php-fpm? (Using virtualhost and suexec.)

I just setup my server with Apache, FastCGI, and PHP-FPM. My question is regarding the /cgi-bin/ folder: is it really necessary to have a /cgi-bin/php-fpm wrapper for every single virtualhost that ...
1
vote
1answer
845 views

suexec error configuring mod_fastcgi with apache2.2.3 on centos

I've been following this blog post so that I can share APC opcode cache between PHP processes using FastCGI. Unfortunately I'm getting the following error when starting httpd: Starting httpd: Syntax ...
1
vote
2answers
691 views

Running APC with suEXEC

Our servers are currently setup to run PHP as DSO with suEXEC enabled. Is it possible for us to install APC in this setup? Servers are CentOS 5.2 running with WHM/cPanel
1
vote
1answer
223 views

trac: “Internal server error (500)” with mod_fcgid and mod_suexec

I try to setup Trac on a shared server with shell access, SW is Trac 1.0.1, Python 2.6.6, Apache 2.2.15 with mod_fcgid and mod_suexec. I've set it up following the instructions from the wiki of my ...
1
vote
1answer
177 views

suexec failing scriptalias without logs

I am trying to install gitolite 3 on a apache2 server. So I need to run a CGI script owned by git:git. My configuration for achieving this (based mainly on this) is: <VirtualHost myserver.com> ...
1
vote
0answers
112 views

suexec executes world writable php files and files ownd by root. why?

I've configured my server to use suexec for php this weekend. Now I've recognized that suexec also serves files owned by root or that are world writable. But this seems to me not like the standard ...
1
vote
1answer
620 views

fcgid / suExec + phpMyAdmin

I recently installed mod_fcgid and suExEc on my Ubuntu server following these instructions: http://www.howtoforge.com/Fhow-to-set-up-apache2-with-mod_fcgid-and-php5-on-ubuntu-10.04 Since suExec does ...
1
vote
1answer
437 views

Configuring Apache2/mpm-worker not to eat up all the server's RAM

Th server is running around 40 WordPress sites. Originally I'd set the server up using mod_php and mpm-prefork back when the server had 2GB of memory, and it was running comfortably well. Recently, ...
1
vote
1answer
227 views

Apache: change PHP suexec user/group per SSL client

I've got a server running several vhost sites, and was wondering if there could be a way to get some vhost PHPs executed under a different user/group depending on the client connecting to them. I ...
1
vote
2answers
887 views

django + wsgi + suexec + userdir + apache?

I've got a django 1.1 website I want to run in wsgi (as that seems to be the recommended deployment on apache). I want it to run as the www user (apache is running as www-data). I would ideally like ...
1
vote
1answer
242 views

ApacheHTTPD mod_suexec, safe_mode, open_basedir

as the Debian developers consider safe_mode (which will not make it into PHP6) and open_basedir inherently broken security measures, I wonder if they can be considered replaceable by mod_suexec ...
1
vote
1answer
250 views

Need advice in setting up server. fastCGI, suExec, speed, security, etc

I am running my own dedicated server with centOS 5 and WHM/cPanel. I would like to configure my server to meet my needs but I need a little help. It will only be my own websites being run on this ...
1
vote
2answers
2k views

Single fastcgi/php-cgi server for multiple virtualhosts?

I'm currently hosting sites for clients using the following setup: Apache 2.2.16 mod_fastcgi 2.4.7 php 5.3.3 Apache uses the worker MPM and serves PHP through a dynamic FastCGI config: ...
1
vote
2answers
748 views

Apache error with suEXEC only

When I enable suEXEC by following the tutorial here, I am able to get PHP to run over Apache in cgi mode, but when I start trying to use suEXEC I get a 403, and the following error appears in the ...
0
votes
1answer
192 views

Files uploaded with php scripts are owned by apache on Directadmin

Uploaded files are owned by apache, I have DirectAdmin installed and also mod_suexec is loaded into Apache. So is there anyway to upload file with account owner under mod_php(php5_module)?
0
votes
2answers
74 views

Modules to protect PHP and Perl from accessing other users file/data? [closed]

I've use to use a combination of suPHP with suExec in order to try to protect the users and limiting the PHP/Perl from running out of their allowed space (i.e.: user/tmp folders). Its been a while ...
0
votes
1answer
163 views

PHP Permissions (chmod vs. suEXEC)

I have an application that claims to require chmod 777 permissions for two of its directories (and their subdirectories). Instead of doing that, would suEXEC be a more secure alternative?
0
votes
1answer
86 views

Creating users/groups via PHP

I'm creating an internal tool that needs a bit of cpanel/webmin type functionality, but this isn't a situation where I could use one of those Right now I need to be able to create linux users, ...
0
votes
2answers
183 views

Forcing scripts on apache to run under different accounts to enhance security?

My client's website was recently defaced and they are seeking was to mitigate this risk. They have a dedicated server running apache and mod_php. The website consists of three separate php ...
0
votes
1answer
302 views

Centos6 Apache configure SUEXEC wrapper

On a Centos 6 trying to upgrade to a specific apache version (from 2.2.24 to 2.2.25) from source since yum doesn't have the right version I need (or the very least I can't find the repo for it) and I ...