Re: mod_fcgid and mpm-itk

[William A. Rowe Jr.]

On Sun, 28 Jul 2013 15:17:41 +0200
AZ 9901 az9...@gmail.com wrote:

 Hello all,
 
 I run into troubles using mod_fcgid (for PHP) and mpm-itk together.
 
 As soon as I add the ITK directive AssignUserID to my vhost,
 specifying a different user than the global Apache one, mod_fcgid
 fails returning the following error : [Sun Jul 28 15:09:37 2013]
 [emerg] [client x.x.x.x] (13)Permission denied: mod_fcgid: can't lock
 process table in pid 1973
 
 I noted that the socket file is created with permissions 700.
 So, as a test, I tried the following, in fcgid_proc_unix.c, I
 replaced : rv = apr_file_perms_set(unix_addr.sun_path,
 
 APR_FPROT_UREAD|APR_FPROT_UWRITE|APR_FPROT_UEXECUTE);
 by :
 rv = apr_file_perms_set(unix_addr.sun_path,
 
 APR_FPROT_UREAD|APR_FPROT_UWRITE|APR_FPROT_UEXECUTE|APR_FPROT_GREAD|APR_FPROT_GWRITE|APR_FPROT_GEXECUTE|APR_FPROT_WREAD|APR_FPROT_WWRITE|APR_FPROT_WEXECUTE);
 
 The socket is then created with 777 permissions, but I does not solve
 the issue.
 
 Certainly that the issue is somewhere else, perhaps Apache tries to
 instance mod_fcgid with global Apache user instead of ITK defined
 user.
 
 Could you help me with that ?

You might also try any mpm-itk user list since the behavior is going
to be mpm-specific.  And please, fill us in if you learn more!

mod_fcgid and mpm-itk

[AZ 9901]

Hello all,

I run into troubles using mod_fcgid (for PHP) and mpm-itk together.

As soon as I add the ITK directive AssignUserID to my vhost, specifying a 
different user than the global Apache one, mod_fcgid fails returning the 
following error :
[Sun Jul 28 15:09:37 2013] [emerg] [client x.x.x.x] (13)Permission denied: 
mod_fcgid: can't lock process table in pid 1973

I noted that the socket file is created with permissions 700.
So, as a test, I tried the following, in fcgid_proc_unix.c, I replaced :
rv = apr_file_perms_set(unix_addr.sun_path,

APR_FPROT_UREAD|APR_FPROT_UWRITE|APR_FPROT_UEXECUTE);
by :
rv = apr_file_perms_set(unix_addr.sun_path,

APR_FPROT_UREAD|APR_FPROT_UWRITE|APR_FPROT_UEXECUTE|APR_FPROT_GREAD|APR_FPROT_GWRITE|APR_FPROT_GEXECUTE|APR_FPROT_WREAD|APR_FPROT_WWRITE|APR_FPROT_WEXECUTE);

The socket is then created with 777 permissions, but I does not solve the issue.

Certainly that the issue is somewhere else, perhaps Apache tries to instance 
mod_fcgid with global Apache user instead of ITK defined user.

Could you help me with that ?
Perhaps a patch already exists ?

Thank you very much !

Best regards,

Ben