Are you sure the ownership of the wrapper and the application files are the user? I'm not even aware that I set up suexec. Thanks for you help! [Date Prev][Date Next] [Thread Prev][Thread Next] [Thread Index] [Date Index] [Author Index] Suexec: cannot run as forbidden guid From: Ryan Golhar To: news
It is owned by the user and is executable and not writable by g/o. Problems with php5-fcgi-starter and suexec - Printable Version +- ispCP - Board - Support (http://www.isp-control.net/forum) +-- Forum: ispCP Omega Support Area (/forum-30.html) +--- Forum: System Setup & Installation (/forum-32.html) +--- Thread: This looks like maybe you have incorrect permissions somewhere (too much, not too little). Oh well currently there's no more sarge but etch out there.
Is all this different with etch?Click to expand... I don't know if it works with standard suexec, I would guess it doesn't because apache runs as www-data and the fcgi-starter is owned by root. Thanks, Paul Log in or register to post comments #36 Fri, 02/20/2009 - 06:51 (Reply to #35) andreychek It looks like that issue had come up here in the past: http://www.virtualmin.com/index.php?option=com_flyspray&Itemid=82&am... Thanks!
My php scripts still don't work. Top time-walker Posts: 48 Joined: 2006-02-15 14:17 Location: Osna Contact: Contact time-walker ICQ Website Re: APACHE2 + PHP5 + FASTCGID letzer post von TM Quote Post by time-walker » 2007-12-10 18:41 Log in or register to post comments #2 Mon, 10/06/2008 - 16:19 andreychek Howdy, To enable it for all future sites, go into System Settings -> Server Templates -> Default Settings I need desperate help, since all my sites are down now Last edited: Feb 27, 2008 TauTau, Feb 27, 2008 #39 meemu ISPConfig Developer ISPConfig Developer it says it cant
You also need to copy php.ini into the etc/php5 directory within the users home. THanks fror your reply Andreas andreas.stoeffer, Dec 7, 2007 #30 meemu ISPConfig Developer ISPConfig Developer not really. seems to me that the present tutorial completely ignores the fact that one should set SuexecUserGroup in vhost config. !?Click to expand... I'm not sure that you're able to automate that using the GPL version -- the Pro version comes with some command line tools that can do that.
meemu, Dec 7, 2007 #31 andreas.stoeffer New Member Suexec.log ? https://forum.ubuntuusers.de/topic/apache2-mod-fcgid-php5-3-3-suexec-verbietet-mi/ so, I think you need some corrctions in your apache config apache2 -M apache2 -S and check the SuexecUserGroup vu2000 vu2000 /J RE: Problems with php5-fcgi-starter and suexec below, but if there would be patch to transform certain thing, that will help me more easily, if you see what I want to say., thank you for your assistance.... but you know it better - right?
Thanks for any help, Paul Log in or register to post comments #27 Sun, 06/07/2009 - 07:40 pixel_paul Pro Licensee Hi, I'm running into an 'head bang against the wall' problem navigate to this website I'm not sure that you're able to automate that using the GPL version -- the Pro version comes with some command line tools that can do that. I can toggle between a 403 error and it "working" of sorts (but not as a running process of the user): 403 error: [code:1]... Options -Indexes IncludesNOEXEC FollowSymLinks allow But for now im good as php is running back as part of apache.
Thanks for any help, Paul Log in or register to post comments #28 Thu, 02/19/2009 - 05:16 andreychek Do you see an suexec log in /var/log/httpd/? AP_HTTPD_USER, which is for example mentioned here: http://www.howtoforge.com/forums/showthread.php?t=4606 jmroth, Oct 6, 2007 #21 jmroth ISPConfig Developer ISPConfig Developer Ehm... I get 403 errors on them, although they have the correct user and group and have exec permissions. http://fortecrm.net/cannot-run/cannot-run-as-forbidden-uid-33-php-fcgi.html What would I have additionally to do?
It is owned by the user and is executable and not writable by g/o. We were looking for better security. Unfortunately, I have some problems.
Andreas andreas.stoeffer, Dec 7, 2007 #34 misterm Member HowtoForge Supporter Hello with all, I seek good Doc., for me to transform the configuration which I have in suphp in fastcgi
And they aren't group/world writable? Thanks for any suggestions Andreas andreas.stoeffer, Dec 6, 2007 #27 meemu ISPConfig Developer ISPConfig Developer You need an administrator user for the site. With additional patch you can assign uid/gid dynamically. I think there must be something more wrong, because I have no suexec.log How I can apply your patch because I have the patch from "jmroth" and is ti for 2.2.18?
Here's my example setting: [code:1]PHPRC = /home/user1/conf export PHPRC PHP_CGI=/usr/bin/php-cgi PHP_FCGI_CHILDREN=4 PHP_FCGI_MAX_REQUESTS=1000 ### no editing below ### export PHP_FCGI_CHILDREN export PHP_FCGI_MAX_REQUESTS exec $PHP_CGI[/code:1] Log in or register to post comments #13 i think my brain has decided to stop working. There is also a similar commercial version of Suexec from 1H Ltd, but this isn't open source and I think that's a GPL infringement. http://fortecrm.net/cannot-run/cannot-run-as-forbidden-uid-fcgi.html Log in or register to post comments #15 Thu, 11/12/2009 - 18:39 (Reply to #14) hescominsoon In my gpl i don't see "Default PHP execution mode" just an add suexec option.
MM Last edited: Jan 13, 2008 misterm, Jan 13, 2008 #35 meemu ISPConfig Developer ISPConfig Developer You're right it's missing in the walkthrough. meemu, Dec 7, 2007 #33 andreas.stoeffer New Member Wrong interpretation of your tutotial - my Fault Hello meemo, my Fault. This allows you to run several different web sites on a single server without worrying that they will be able to read each others' files. This incident will be reported Hyper Derivative definition.
Packages apache2-mpm-worker libapache2-mod-fcgid apache2-suexec are installed. after setting the dministrator nobody is blown away But no I cannot access any site on the webspace. Does anyone have any hints to solve this problem? www.copiatek.nl Log in or register to post comments #9 Fri, 10/10/2008 - 00:51 (Reply to #8) HostHoboGuy Here is what I added to my httpd.conf file:
AddHandler fcgid-script .php
Did you say that the suexec module is definitely being loaded in Apache? So if I could edit the post I would :) Any other ideas, as I'm stumped as to why this isn't working. I guess he patches it because php-fcgi-starter is owned by root, and we want this to be executed by suexec but not modifiable by the user. This is my virtual host file: SuexecUserGroup "#1001" "#1002" ServerName robertgrab.com ServerAlias www.robertgrab.com webmail.robertgrab.com admin.robertgrab.com lists.robertgrab.com server3.robertgrab.com DocumentRoot /home/grab/public_html ErrorLog /var/log/virtualmin/robertgrab.com_error_log CustomLog /var/log/virtualmin/robertgrab.com_access_log combined ScriptAlias /cgi-bin/ /home/grab/cgi-bin/ ScriptAlias /awstats
Thanks Eric for your patience on this, crazy newlines - I used windows to generate the php5.fcgi script and I used Notepad++ to do so and evidently neglected to select 'Convert Any suggestions? Is all this different with etch?Click to expand... The user required to execute the php via suexec is the main administrative user for the virtual host (in my test case, "admin39").Anyone have any ideas on where to start?Thanks !-=dave
it is not unimportant to know that Suexec should simply be enabled in ISPConfig... (and in Apache) BTW I have created the previously mentioned diff (with context), could someone check that Page 2 of 3 < Prev 1 2 3 Next > jmroth ISPConfig Developer ISPConfig Developer tom said: Why do you patch sussec, does'nt it work like for apache2 from its Thnaks, Log in or register to post comments #8 Thu, 10/09/2008 - 07:24 (Reply to #7) ronald hosthoboguy, you'll need to add an /etc/php5 folder containing the php.ini in the /home/domain