The tag has no wiki summary.

learn more… | top users | synonyms

13
votes
1answer
7k views

Multiple php versions simultaneously on Ubuntu

I want to be able to run multiple php versions on my development box running Ubuntu 12.04. What I want to accomplish is that when I use localhost as domain a default is used (let's say php 5.3.17). ...
10
votes
1answer
2k views

Apache, suexec, PHP, suPHP

While I'm quite comfortable as a Linux user, my Linux Admin-fu is a bit weak. Thus, I'm here looking for guidance with a CentOS server I'm about to build. I need to setup an Apache2 web server for a ...
6
votes
4answers
4k views

PHP fopen always fails with permission denied

I am in the process of migrating a couple of Wordpress blogs over to AWS and have run into an issue with file permissions that has successfully foiled me for the last couple of hours. The simplest ...
5
votes
4answers
8k views

How to change suexec root directory from “/var/www” to “/home”?

Hi I've installed suexec using on ubuntu 12.04: apt-get install apache2 apache2-suexec libapache2-mod-fcgid php5-cgi However when I run the following command: sudo /usr/lib/apache2/suexec -V I ...
4
votes
1answer
586 views

Apache mass virtual hosting & suexec & fcgid

I followed Falco's tutorial and everything now works as expected for 2 users (e.g. john and alice) with their relevant directories (/var/www/john and /var/ww/alice). Now, I want to go to the next ...
4
votes
2answers
214 views

Configuring Apache for multiple clients

Last week I had a question here about suexec / suphp but I tried to accomplish too much. I'm going to narrow the scope a bit and try again. I'd like to configure a LAMP server to host multiple ...
3
votes
1answer
9k views

NameVirtualHost 12.345.67.89:443 has no VirtualHosts after enabling and disabling suexec module

In the process of trying to enable suexec module I starting getting these warnings (when I restarted apache). I get them when suexec is enabled & disabled: * Restarting web server apache2 [Wed ...
3
votes
3answers
2k views

multiple mounts of same NFS share on one client?

I'm moving webspace content to NFSv3 shares. Because of suexec restrictions I have different paths to different subsets of the content on the client. I wonder if I can still have all of the content in ...
3
votes
1answer
2k views

How do I run a PHP web application as a particular user and group on CentOS 5 with Apache?

I'm aware there are various different ways to do this but I'm not sure that the "best" way would be for my particular situation: Each site should have its own user account (site user) Virtual Hosts ...
3
votes
1answer
781 views

Confusion on SUEXEC and DOCROOT

I keep running into an issue with suexec where it says the cgi script is not in the docroot. I get this error: "[2012-05-21 04:53:02]: command not in docroot (/apps/dctools/www/cgi-bin/test.cgi)" ...
2
votes
5answers
185 views

How to run each site under a different user?

Let's say I have a server and a bunch of developers working on different sites(php and django) and I don't want the different developers to access each other's sites. How should I go about ...
2
votes
1answer
151 views

Why restricting Apache users from executing scripts?

When Apache users are allowed to executes bash scripts via PHP - why it's considered dangerous? I understand that the users can traverse the whole file system and even see which additional users are ...
2
votes
3answers
1k views

fcgid, suexec, and userdir

I'm trying to set up per-user trac instances, using fcgid. The problem is that trac requires rw access to the trac instance, so I need the fcgi process to run under the respective user. I have the ...
2
votes
3answers
1k views

Security issues of running PHP scripts as the owner of the PHP file with suexec

I'm using suexec to ensure that PHP scripts (and other CGI/FastCGI apps) are run as the account holder associated with the relevant virtual host. This allows for securing each users' scripts from ...
2
votes
4answers
5k views

SuExec: “command not in docroot” Even Though It Is?

Arch Linux 2011.08.19 (Linux 3.4.2 i686) Apache 2.2.22 with SuExec PHP 5.4.4 (cli) via FastCGI My sites were all working fine earlier… I’m not sure when it happened because I noticed it over a week ...
2
votes
1answer
4k views

Access Denied for PHP Files Only

Apache HTTP Server 2.2.21 with VirtualHosts under SuExec PHP 5.3.8 via fcgid Arch Linux 2011.08.19 I am getting 403 Access Denied errors from Apache any time I try to access a PHP file. HTML files ...
2
votes
1answer
4k views

suexec and docroot problem

I've got a problem with running a FastCgiServer under apache2. When I define a virtual host with a static fcgi server configured, I get an error from suexec: command not in docroot ...
2
votes
2answers
303 views

SuExec for Tomcat?

We're running a (cPanel/WHM based) server which contains mainly PHP applications. They are executed with the permissions of their owner with the suExec component of Apache. We're looking into moving ...
2
votes
1answer
289 views

Suexec, group-writeable files

I am running an Apache server with Suexec. However, I get an internal server error if I try to execute a CGI script that is group-writeable (if I chmod g-w , the script runs fine) However, I want the ...
2
votes
1answer
977 views

issue with with suexec command when i try to initialise virtualmin on a pc with webmin installed and working

I am trying to initialise Virtualmin. After installing it via Webmin->Module->new module installation screen. This is the message that I am getting in Webmin: The Suexec command on your system is ...
2
votes
1answer
410 views

Secure Apache PHP vhost configuration

I'm looking to secure some websites running under apache using suexec. At the moment php is executed with the user/group of the file being executed. This seems to me, not secure enough. It stops ...
2
votes
2answers
354 views

Apache setup for multiple sites with common files

Just realised i posted this on stack overflow by mistake, so here it is in the correct place! I have approx 50 sites that all use the exact same files other than CSS and IMAGES, i currently ...
2
votes
0answers
60 views

Suexec PHP does not load php.ini

I'm using FastCGI with suEXEC for PHP on CentOS 7. My wrapper script looks as follows: #!/bin/sh PHPRC=/home/ben/etc/ export PHPRC export TMPDIR=/home/ben/tmp/ exec /usr/bin/php-cgi -c ...
2
votes
2answers
1k views

django + wsgi + suexec + userdir + apache?

I've got a django 1.1 website I want to run in wsgi (as that seems to be the recommended deployment on apache). I want it to run as the www user (apache is running as www-data). I would ideally like ...
1
vote
2answers
10k views

Apache + SuExec + php-fpm - how to set them up?

I wonder if there is a good guide on how to setup Apache + SuExec + php-fpm? I have a server which I am going to use several separate website. So, I need php to be run as site-owner user. As I can ...
1
vote
1answer
8k views

Setting up Apache 2.2 + FastCGI + SuExec + PHP-FPM on Centos 6

I'm trying to follow this very detailed instruction here, I simply changed from www-data user to apache user, and is using /var/www/hosts/sitename/public_html instead of /home/user/public_html ...
1
vote
1answer
950 views

Safest way to run bash script using PHP-FPM

I currently running a websever with Nginx+PHP-Fpm and each sites on its own username/GID. Then I have a bash script that I use to create new user along with other necessary stuffs. I know I can call a ...
1
vote
2answers
589 views

PHP Include Always Fails

Apache HTTP Server 2.2.21 with VirtualHosts under SuExec PHP 5.3.8 via fcgid Arch Linux 2011.08.19 I am in the process of migrating from shared hosting to VPS. The code I had ran fine before the ...
1
vote
2answers
1k views

I need clarification on Apache2, MPM-Worker, FastCGI, PHP5-fpm, suEXEC?

My current configuration is: Apache2 + MPM-Worker AND FastCGI + PHP5-fpm (PHP 5.3.2) ON Ubuntu 10.04 LTS I have a single pool of 2-5 processes running as a different user from that of the default ...
1
vote
1answer
519 views

trac: “Internal server error (500)” with mod_fcgid and mod_suexec

I try to setup Trac on a shared server with shell access, SW is Trac 1.0.1, Python 2.6.6, Apache 2.2.15 with mod_fcgid and mod_suexec. I've set it up following the instructions from the wiki of my ...
1
vote
1answer
180 views

How to enable group-writable suexec-capable CGI scripts?

I have been asked to set up a shared webspace on our department webserver that may be accessed by multiple people and which might be running CGI or PHP scripts. The people maintaining the webspace ...
1
vote
2answers
1k views

Can't Get New Instance Of RT To Start

I am trying to transplant an instance of RT 4.0.1 (with local code customization) from a CentOS 4 server to a CentOS 6 server. My problem appears to be that I can't get the fastcgi script to start. ...
1
vote
1answer
370 views

Mechanism behind user forwarding in ScriptAliasMatch

I am following this tutorial to setup gitolite and at some point the following ScriptAliasMatch is used: ScriptAliasMatch \ "(?x)^/(.*/(HEAD | \ info/refs | \ objects/(info/[^/]+ | \ ...
1
vote
2answers
1k views

mod_vhost_alias + suEXEC: auto selecting uid/gid

I'm trying to configure Debian 6.0.4 for massive shared hosting with PHP5. Packages apache2-mpm-worker libapache2-mod-fcgid apache2-suexec are installed. I successfully loaded mod_vhost_alias and ...
1
vote
2answers
1k views

Why the php-cgi wrapper script for php-fpm? (Using virtualhost and suexec.)

I just setup my server with Apache, FastCGI, and PHP-FPM. My question is regarding the /cgi-bin/ folder: is it really necessary to have a /cgi-bin/php-fpm wrapper for every single virtualhost that ...
1
vote
1answer
971 views

suexec error configuring mod_fastcgi with apache2.2.3 on centos

I've been following this blog post so that I can share APC opcode cache between PHP processes using FastCGI. Unfortunately I'm getting the following error when starting httpd: Starting httpd: Syntax ...
1
vote
2answers
743 views

Running APC with suEXEC

Our servers are currently setup to run PHP as DSO with suEXEC enabled. Is it possible for us to install APC in this setup? Servers are CentOS 5.2 running with WHM/cPanel
1
vote
1answer
2k views

How to enable suexec for VPS using Plesk Panel?

I have tested on Plesk 9 and 10(preview version), but I couldn't find a way to enable suexec. The apache has loaded the suexec module, but it was not enabled. The OS is Centos 5.4. Any help will be ...
1
vote
1answer
219 views

suexec failing scriptalias without logs

I am trying to install gitolite 3 on a apache2 server. So I need to run a CGI script owned by git:git. My configuration for achieving this (based mainly on this) is: <VirtualHost myserver.com> ...
1
vote
0answers
124 views

suexec executes world writable php files and files owned by root. why?

I've configured my server to use suexec for php this weekend. Now I've recognized that suexec also serves files owned by root or that are world writable. But this seems to me not like the standard ...
1
vote
1answer
489 views

Configuring Apache2/mpm-worker not to eat up all the server's RAM

Th server is running around 40 WordPress sites. Originally I'd set the server up using mod_php and mpm-prefork back when the server had 2GB of memory, and it was running comfortably well. Recently, ...
1
vote
1answer
250 views

Apache: change PHP suexec user/group per SSL client

I've got a server running several vhost sites, and was wondering if there could be a way to get some vhost PHPs executed under a different user/group depending on the client connecting to them. I ...
1
vote
1answer
253 views

ApacheHTTPD mod_suexec, safe_mode, open_basedir

as the Debian developers consider safe_mode (which will not make it into PHP6) and open_basedir inherently broken security measures, I wonder if they can be considered replaceable by mod_suexec ...
1
vote
1answer
259 views

Need advice in setting up server. fastCGI, suExec, speed, security, etc

I am running my own dedicated server with centOS 5 and WHM/cPanel. I would like to configure my server to meet my needs but I need a little help. It will only be my own websites being run on this ...
1
vote
2answers
2k views

Single fastcgi/php-cgi server for multiple virtualhosts?

I'm currently hosting sites for clients using the following setup: Apache 2.2.16 mod_fastcgi 2.4.7 php 5.3.3 Apache uses the worker MPM and serves PHP through a dynamic FastCGI config: ...
1
vote
2answers
865 views

Apache error with suEXEC only

When I enable suEXEC by following the tutorial here, I am able to get PHP to run over Apache in cgi mode, but when I start trying to use suEXEC I get a 403, and the following error appears in the ...
0
votes
2answers
76 views

Modules to protect PHP and Perl from accessing other users file/data? [closed]

I've use to use a combination of suPHP with suExec in order to try to protect the users and limiting the PHP/Perl from running out of their allowed space (i.e.: user/tmp folders). Its been a while ...
0
votes
1answer
196 views

PHP Permissions (chmod vs. suEXEC)

I have an application that claims to require chmod 777 permissions for two of its directories (and their subdirectories). Instead of doing that, would suEXEC be a more secure alternative?
0
votes
1answer
2k views

suexec policy violation: What were these guys up to?

Have just assumed responsibility for a new client's site. OS is Linux. They had a cgi-bin directory below document root. I was looking at my error.log for an issue with a script and found a number ...
0
votes
1answer
89 views

Creating users/groups via PHP

I'm creating an internal tool that needs a bit of cpanel/webmin type functionality, but this isn't a situation where I could use one of those Right now I need to be able to create linux users, ...