[EMAIL PROTECTED] Problem with Suexec in (Debian) Apache2.2.3 mod_userdir + PHP 5.2.0-8
Hello All. Is there anybody who can send a link how to make suexec work on Debian 4.0 'etch' I spend 2 days from morning to night and I give up. Suexec does not work in any case neighter with userdirs or just in virtualhost PHP scripts keep running in www-data user group. I tried all possible combinations :( I haven't compiled it I just used the deb package. I can see the -D SUEXEC_BIN=/usr/lib/apache2/suexec option in the /server-info but the scripts keep running in www-data user group :S please help. I just want to make users to run php scripts without seeing one another file's. Thank you. - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [EMAIL PROTECTED] Problem with Suexec in (Debian) Apache2.2.3 mod_userdir + PHP 5.2.0-8
On 1/24/07, Puskás Zsolt (errotan) [EMAIL PROTECTED] wrote: Hello All. Is there anybody who can send a link how to make suexec work on Debian 4.0 'etch' I spend 2 days from morning to night and I give up. Suexec does not work in any case neighter with userdirs or just in virtualhost PHP scripts keep running in www-data user group. I tried all possible combinations :( I haven't compiled it I just used the deb package. I can see the -D SUEXEC_BIN=/usr/lib/apache2/suexec option in the /server-info but the scripts keep running in www-data user group :S please help. I just want to make users to run php scripts without seeing one another file's. Are you running php as a module or as a CGI script? In the former case, suexec cannot be used. Joshua. - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [EMAIL PROTECTED] Problem with Suexec in (Debian) Apache2.2.3 mod_userdir + PHP 5.2.0-8
Thanks for the reply Joshua, I tried to run php as cgi but the php scripts are not parsed. Maybe I'am stupid but I tried everything this is my config : http://pastebin.com/866568 There are no error entrys in the log files ( disabled suexec and mod_userdir ) I don't understand why php aren't parsing the scripts located in /var/www/ permissions are right. 2007. január 24. 20.49 dátummal Joshua Slive ezt írta: On 1/24/07, Puskás Zsolt (errotan) [EMAIL PROTECTED] wrote: Hello All. Is there anybody who can send a link how to make suexec work on Debian 4.0 'etch' I spend 2 days from morning to night and I give up. Suexec does not work in any case neighter with userdirs or just in virtualhost PHP scripts keep running in www-data user group. I tried all possible combinations :( I haven't compiled it I just used the deb package. I can see the -D SUEXEC_BIN=/usr/lib/apache2/suexec option in the /server-info but the scripts keep running in www-data user group :S please help. I just want to make users to run php scripts without seeing one another file's. Are you running php as a module or as a CGI script? In the former case, suexec cannot be used. Joshua. - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
[EMAIL PROTECTED] Problem with SUEXEC
Dear, I have problem with apache installation at my machine, i compile apache with suexec support [quote] [EMAIL PROTECTED] apache_1.3.37]# ./configure --prefix=/usr/local/apache --enable-suexec --suexec-caller=nobody --suexec-uidmin=99 --suexec-gidmin=99 --suexec-safepath=/usr/local/bin:/usr/bin:/bin --suexec-userdir=public_html --enable-module=ssl --enable-shared=ssl --disable-rule=SSL_COMPAT [/quote] Installation process was succesfull, and this is the PHP configuration : [quote] [EMAIL PROTECTED] php-4.4.4]# ./configure --with-apxs=/usr/local/apache/bin/apxs --with-mysql --with-curl --with-gd --with-freetext=/usr/local/freetype --with-gettext --enable-mbstring --enable-mbregex --enable-magic-quotes --with-xml --with-jpeg-dir=/usr/lib --with-ftp --with-zlib --enable-track-vars --enable-versioning --enable-memory-limit --with-pear --with-mcrypt --with-mhash [/quote] Both of that process was succesfully compiled, and i have tested with phpinfo() The problem occur while i add virtualHost at httpd.conf [quote] VirtualHost 192.168.65.128:80 ServerAdmin [EMAIL PROTECTED] DocumentRoot /home/mydomain/public_html/ User mydomain Group mydomain ServerName www.mydomain.net ServerAlias domainku.net www.mydomain.net CustomLog domlogs/mydomain.net-log combined #ScriptAlias /cgi-bin/ /home/mydomain/public_html/cgi-bin/ /VirtualHost [/quote] While i add that virtualHost and i try to access mydomain.com, i get 403 permission error [quote] Forbidden You don't have permission to access / on this server. Apache/1.3.37 Server at www.mydomain.net Port 80 [/quote] i have checked ownership and permission at /home/mydomain/public_html the ownership is mydomain.mydomain and permission is 755. I have try several times and still unsucessfull At apache error_log : [quote] [Fri Dec 29 14:11:45 2006] [error] [client 192.168.65.1] (13)Permission denied: access to / failed because search permissions are missing on a component of the path [/quote] anyone knows how to fix this problem??, i have tried with Apache2 and Apache1, and get same problem Thank's -- Dhika Cikul - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [EMAIL PROTECTED] Problem with SUEXEC
In order for apache to access /home/mydomain/public_html/ (and presumably something like index.html inside that directory) then the userid or group that apache is running under needs both r and x access to each directory /home /home/mydomain and /home/mydomain/public_html I've never understood why it works this way, but I've found out the hard way that it does. Depending on your system there may be other access restrictions in force, but the error message describes my suggestion rather nicely. On 02/01/07, Dhika Cikul [EMAIL PROTECTED] wrote: Dear, I have problem with apache installation at my machine, i compile apache with suexec support [quote] [EMAIL PROTECTED] apache_1.3.37]# ./configure --prefix=/usr/local/apache --enable-suexec --suexec-caller=nobody --suexec-uidmin=99 --suexec-gidmin=99 --suexec-safepath=/usr/local/bin:/usr/bin:/bin --suexec-userdir=public_html --enable-module=ssl --enable-shared=ssl --disable-rule=SSL_COMPAT [/quote] Installation process was succesfull, and this is the PHP configuration : [quote] [EMAIL PROTECTED] php-4.4.4]# ./configure --with-apxs=/usr/local/apache/bin/apxs --with-mysql --with-curl --with-gd --with-freetext=/usr/local/freetype --with-gettext --enable-mbstring --enable-mbregex --enable-magic-quotes --with-xml --with-jpeg-dir=/usr/lib --with-ftp --with-zlib --enable-track-vars --enable-versioning --enable-memory-limit --with-pear --with-mcrypt --with-mhash [/quote] Both of that process was succesfully compiled, and i have tested with phpinfo() The problem occur while i add virtualHost at httpd.conf [quote] VirtualHost 192.168.65.128:80 ServerAdmin [EMAIL PROTECTED] DocumentRoot /home/mydomain/public_html/ User mydomain Group mydomain ServerName www.mydomain.net ServerAlias domainku.net www.mydomain.net CustomLog domlogs/mydomain.net-log combined #ScriptAlias /cgi-bin/ /home/mydomain/public_html/cgi-bin/ /VirtualHost [/quote] While i add that virtualHost and i try to access mydomain.com, i get 403 permission error [quote] Forbidden You don't have permission to access / on this server. Apache/1.3.37 Server at www.mydomain.net Port 80 [/quote] i have checked ownership and permission at /home/mydomain/public_html the ownership is mydomain.mydomain and permission is 755. I have try several times and still unsucessfull At apache error_log : [quote] [Fri Dec 29 14:11:45 2006] [error] [client 192.168.65.1] (13)Permission denied: access to / failed because search permissions are missing on a component of the path [/quote] anyone knows how to fix this problem??, i have tried with Apache2 and Apache1, and get same problem Thank's -- Dhika Cikul - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] -- Steve Swift http://www.swiftys.org.uk
Re: [EMAIL PROTECTED] Problem with SUEXEC
2007/1/3, Steve Swift [EMAIL PROTECTED]: In order for apache to access /home/mydomain/public_html/ (and presumably something like index.html inside that directory) then the userid or group that apache is running under needs both r and x access to each directory /home /home/mydomain and /home/mydomain/public_html I have chmoded /home/mydomain and /home/mydomain/public_html to 755, but still get 403 permission denied I've never understood why it works this way, but I've found out the hard way that it does. Depending on your system there may be other access restrictions in force, but the error message describes my suggestion rather nicely. i didn't understood about the error message. [quote] [Fri Dec 29 14:11:45 2006] [error] [client 192.168.65.1] (13)Permission denied: access to / failed because search permissions are missing on a component of the path [/quote] what is the mean search permission are missing on a component of the path? On 02/01/07, Dhika Cikul [EMAIL PROTECTED] wrote: Dear, I have problem with apache installation at my machine, i compile apache with suexec support [quote] [EMAIL PROTECTED] apache_1.3.37]# ./configure --prefix=/usr/local/apache --enable-suexec --suexec-caller=nobody --suexec-uidmin=99 --suexec-gidmin=99 --suexec-safepath=/usr/local/bin:/usr/bin:/bin --suexec-userdir=public_html --enable-module=ssl --enable-shared=ssl --disable-rule=SSL_COMPAT [/quote] Installation process was succesfull, and this is the PHP configuration : [quote] [EMAIL PROTECTED] php-4.4.4]# ./configure --with-apxs=/usr/local/apache/bin/apxs --with-mysql --with-curl --with-gd --with-freetext=/usr/local/freetype --with-gettext --enable-mbstring --enable-mbregex --enable-magic-quotes --with-xml --with-jpeg-dir=/usr/lib --with-ftp --with-zlib --enable-track-vars --enable-versioning --enable-memory-limit --with-pear --with-mcrypt --with-mhash [/quote] Both of that process was succesfully compiled, and i have tested with phpinfo() The problem occur while i add virtualHost at httpd.conf [quote] VirtualHost 192.168.65.128:80 ServerAdmin [EMAIL PROTECTED] DocumentRoot /home/mydomain/public_html/ User mydomain Group mydomain ServerName www.mydomain.net ServerAlias domainku.net www.mydomain.net CustomLog domlogs/mydomain.net-log combined #ScriptAlias /cgi-bin/ /home/mydomain/public_html/cgi-bin/ /VirtualHost [/quote] While i add that virtualHost and i try to access mydomain.com, i get 403 permission error [quote] Forbidden You don't have permission to access / on this server. Apache/1.3.37 Server at www.mydomain.net Port 80 [/quote] i have checked ownership and permission at /home/mydomain/public_html the ownership is mydomain.mydomain and permission is 755. I have try several times and still unsucessfull At apache error_log : [quote] [Fri Dec 29 14:11:45 2006] [error] [client 192.168.65.1] (13)Permission denied: access to / failed because search permissions are missing on a component of the path [/quote] anyone knows how to fix this problem??, i have tried with Apache2 and Apache1, and get same problem Thank's -- Dhika Cikul -- Steve Swift http://www.swiftys.org.uk -- Dhika Cikul - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [EMAIL PROTECTED] Problem with SUEXEC
I would interpret search permission are missing on a component of the path to mean that some component of the directory path containing the file that apache is trying to access does not contain an x permission that applies to the apache userid or group. However, that doesn't work for you (and I've never seen such an explicit message from apache itself, so this may be coming from something else) On 03/01/07, Dhika Cikul [EMAIL PROTECTED] wrote: 2007/1/3, Steve Swift [EMAIL PROTECTED]: In order for apache to access /home/mydomain/public_html/ (and presumably something like index.html inside that directory) then the userid or group that apache is running under needs both r and x access to each directory /home /home/mydomain and /home/mydomain/public_html I have chmoded /home/mydomain and /home/mydomain/public_html to 755, but still get 403 permission denied I've never understood why it works this way, but I've found out the hard way that it does. Depending on your system there may be other access restrictions in force, but the error message describes my suggestion rather nicely. i didn't understood about the error message. [quote] [Fri Dec 29 14:11:45 2006] [error] [client 192.168.65.1] (13)Permission denied: access to / failed because search permissions are missing on a component of the path [/quote] what is the mean search permission are missing on a component of the path? On 02/01/07, Dhika Cikul [EMAIL PROTECTED] wrote: Dear, I have problem with apache installation at my machine, i compile apache with suexec support [quote] [EMAIL PROTECTED] apache_1.3.37]# ./configure --prefix=/usr/local/apache --enable-suexec --suexec-caller=nobody --suexec-uidmin=99 --suexec-gidmin=99 --suexec-safepath=/usr/local/bin:/usr/bin:/bin --suexec-userdir=public_html --enable-module=ssl --enable-shared=ssl --disable-rule=SSL_COMPAT [/quote] Installation process was succesfull, and this is the PHP configuration : [quote] [EMAIL PROTECTED] php-4.4.4]# ./configure --with-apxs=/usr/local/apache/bin/apxs --with-mysql --with-curl --with-gd --with-freetext=/usr/local/freetype --with-gettext --enable-mbstring --enable-mbregex --enable-magic-quotes --with-xml --with-jpeg-dir=/usr/lib --with-ftp --with-zlib --enable-track-vars --enable-versioning --enable-memory-limit --with-pear --with-mcrypt --with-mhash [/quote] Both of that process was succesfully compiled, and i have tested with phpinfo() The problem occur while i add virtualHost at httpd.conf [quote] VirtualHost 192.168.65.128:80 ServerAdmin [EMAIL PROTECTED] DocumentRoot /home/mydomain/public_html/ User mydomain Group mydomain ServerName www.mydomain.net ServerAlias domainku.net www.mydomain.net CustomLog domlogs/mydomain.net-log combined #ScriptAlias /cgi-bin/ /home/mydomain/public_html/cgi-bin/ /VirtualHost [/quote] While i add that virtualHost and i try to access mydomain.com, i get 403 permission error [quote] Forbidden You don't have permission to access / on this server. Apache/1.3.37 Server at www.mydomain.net Port 80 [/quote] i have checked ownership and permission at /home/mydomain/public_html the ownership is mydomain.mydomain and permission is 755. I have try several times and still unsucessfull At apache error_log : [quote] [Fri Dec 29 14:11:45 2006] [error] [client 192.168.65.1] (13)Permission denied: access to / failed because search permissions are missing on a component of the path [/quote] anyone knows how to fix this problem??, i have tried with Apache2 and Apache1, and get same problem Thank's -- Dhika Cikul -- Steve Swift http://www.swiftys.org.uk -- Dhika Cikul - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] -- Steve Swift http://www.swiftys.org.uk
Re: [EMAIL PROTECTED] Problem with SUEXEC
I've just noticed the SUEXEC in the subject. I don't think this is anything to do with SUEXEC, but if it is, then step (13) of the SUEXEC process determines that the CGI which is being accessed lies within the Doc_Root as defined by suexec -V -- Steve Swift http://www.swiftys.org.uk
