From owner-freebsd-questions@FreeBSD.ORG Tue Apr 27 01:53:50 2004 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id E7C8916A4CE for ; Tue, 27 Apr 2004 01:53:50 -0700 (PDT) Received: from dyer.circlesquared.com (host217-45-219-83.in-addr.btopenworld.com [217.45.219.83]) by mx1.FreeBSD.org (Postfix) with ESMTP id 82E6043D2F for ; Tue, 27 Apr 2004 01:53:45 -0700 (PDT) (envelope-from peter@circlesquared.com) Received: from circlesquared.com (localhost.petanna.net [127.0.0.1]) i3R8tpFP020782; Tue, 27 Apr 2004 09:55:51 +0100 (BST) (envelope-from peter@circlesquared.com) Message-ID: <408E2017.1060307@circlesquared.com> Date: Tue, 27 Apr 2004 09:55:51 +0100 From: Peter Risdon User-Agent: Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.7b) Gecko/20040327 X-Accept-Language: en-us, en MIME-Version: 1.0 To: Mikkel Christensen References: <200404262126.36157.mikkel@talkactive.net> <6.0.0.22.0.20040426173644.03b10d50@pop.face2interface.com> <200404262211.08437.mikkel@talkactive.net> In-Reply-To: <200404262211.08437.mikkel@talkactive.net> Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit cc: freebsd-questions@freebsd.org Subject: Re: Suexec with Apache 1.3.29 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 27 Apr 2004 08:53:51 -0000 Mikkel Christensen wrote: >On Monday 26 April 2004 21:49, Marty Landman wrote: > > >>At 05:26 PM 4/26/2004, Mikkel Christensen wrote: >> >> >>>But it just never works. >>>Execution of CGI works perfectly. But it keeps running as the www-user. >>> >>> >>Sounds like suexec didn't get compiled into Apache, at least the one you're >>running. >> >> >> > >But in that case apache would complain the the User and Group keyword didn't exits. Just like it does with a non suexec installation. >A webserver without suexec refuses to start if it encounters User or Group in the configuration. > > One thing occurs to me - you are obviously using php. php scripts under apache do not by default run as cgi under mod_php and so even with suexec compiled successfully into your apache, these will still run as the default apache user. To alter this behaviour, you need to compile php to provide the cgi version of the interpreter. I posted a mail here a couple of months ago discussing this, because there is then a problem if users, especially on a multi-homed system, are using the non-cgi version of php. It is possible to have both, and also the command line interpreter, but only with a little bit of fiddling about. http://lists.freebsd.org/pipermail/freebsd-questions/2004-February/037878.html PWR.