From owner-freebsd-questions@FreeBSD.ORG Tue Apr 27 02:16:49 2004 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id C010E16A4CE for ; Tue, 27 Apr 2004 02:16:49 -0700 (PDT) Received: from mail03.talkactive.net (mail03.talkactive.net [81.19.252.192]) by mx1.FreeBSD.org (Postfix) with SMTP id BB16D43D39 for ; Tue, 27 Apr 2004 02:16:48 -0700 (PDT) (envelope-from mikkel@talkactive.net) Received: (qmail 12359 invoked from network); 27 Apr 2004 09:16:32 -0000 Received: from unknown (HELO ?192.168.1.145?) (80.164.16.222) by mail03.talkactive.net with SMTP; 27 Apr 2004 09:16:32 -0000 From: Mikkel Christensen Organization: Talk|Active To: freebsd-questions@freebsd.org Date: Tue, 27 Apr 2004 09:16:42 +0000 User-Agent: KMail/1.6.1 References: <200404262126.36157.mikkel@talkactive.net> <200404262211.08437.mikkel@talkactive.net> <408E2017.1060307@circlesquared.com> In-Reply-To: <408E2017.1060307@circlesquared.com> MIME-Version: 1.0 Content-Disposition: inline Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <200404270916.42738.mikkel@talkactive.net> Subject: Re: Suexec with Apache 1.3.29 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 27 Apr 2004 09:16:49 -0000 On Tuesday 27 April 2004 08:55, Peter Risdon wrote: > Mikkel Christensen wrote: > >On Monday 26 April 2004 21:49, Marty Landman wrote: > >>At 05:26 PM 4/26/2004, Mikkel Christensen wrote: > >>Sounds like suexec didn't get compiled into Apache, at least the one you're > >>running. > >> > >But in that case apache would complain the the User and Group keyword didn't exits. Just like it does with a non suexec installation. > >A webserver without suexec refuses to start if it encounters User or Group in the configuration. > > > One thing occurs to me - you are obviously using php. php scripts under > apache do not by default run as cgi under mod_php and so even with > suexec compiled successfully into your apache, these will still run as > the default apache user. > > To alter this behaviour, you need to compile php to provide the cgi > version of the interpreter. > > I posted a mail here a couple of months ago discussing this, because > there is then a problem if users, especially on a multi-homed system, > are using the non-cgi version of php. It is possible to have both, and > also the command line interpreter, but only with a little bit of > fiddling about. > > http://lists.freebsd.org/pipermail/freebsd-questions/2004-February/037878.html > Thanks for your input. I'm not interested in running php as CGI at the moment though. The princip of asking all users to add the #!/usr/local/bin/php is something I predict would give great problems in a production enviroment. Apparently this path makes php run under suexec though it doen't run as a usual cli cgi-script.: http://www.localhost.nl/patches/ This I might look into latter. For now if I can just get suexec to work it will be the foundation for any latter configuration. /Mikkel