Re: fastCGI

Rafnews <raf.news@xxxxxxxxx> · Fri, 14 Jun 2013 14:33:48 +0200



    On 14.06.2013 13:29, Reindl Harald
      wrote:

    
Am 14.06.2013 13:21, schrieb Rafnews:

      
        On 14.06.2013 13:18, Reindl Harald wrote:

        
          Am 14.06.2013 12:35, schrieb Rafnews:

          
            however using my standard fedora user account, Ii still can not edit/remove/move
files/folders owned by apache user account. while searching on internet i discovered
that fastCGI should allow me (using my fedora user account) to do such thing, even
if files/folders are owned by apache user account

          
          this has *nothing* to with mod_php oder fastcgi
the permissions are how they are

* man setfacl
* man chown
* man chgrp
* man chmod

and by the way - the apache user should *not* own the files because
typically a webserver should not be able to rewrite his content
files in case of a security breach


        2 of our webserver hosting companies told us that if we want to have files own 
by some other user account than apache, it is needed to have fastCGI..if not, 
than we need suPHP or suExec.

      
      fire the company if they said this really in this way

CGI is needed instead mod_php to have own processes which is
the base for suPHP and suExec but that has *nothing* to do with
your problem above on your local test-setup which would be solved
with the right permissions / ACL's


        However it has been told that FastCGI provide also a performance 
increase so, we would like to reach it also :)

      
      ok, fire them really

it is impossible that the webserver speaking via CGI/FCGI with a standalone PHP
binary is faster than having PHP inside the httpd process and this sounds like
a typical "webserver hosting company" knowing zero to nothing


    So to clear the statement:

    
    Goal:

    i'm trying to create at home a webserver for testing purposes,
    having the same behavior as webhosting companies offers.

    the purpose behind that it's to have a representative environment
    when testing to not have particular "surprises" with web application
    i developed when migrating them to production servers.

    
    Situation:

    i installed on Fedora 18 a webserver where i need:

    - FastCGI

    - to use my standard fedora user account (let's say "rafnews") to
    edit/move/delete files/folder in my webroot /var/www/html folders,
    where files have 644 as permissions and folders : 705.

    
    for now, all files/folders have correct permissions but owner is
    apache:apache

    
    1. FastCGI settings:

    my webserver was running (on PHP 5.4, not php-fpm) correctly
    using the standard Apache 2.4 handler, now i'm trying to make use of
    FastCGI bit without success.

    Here is my php.conf file setting from apache 2.4.4:

    DirectoryIndex index.php

      
      php_value session.save_handler "files"

      php_value session.save_path    "/var/lib/php/session"

    
    i removed the addtype and handler as suggested on internet. I added
    in myvhosts.conf the following thing (withing <VirtualHost
    *:80> tag):

    <IfModule proxy_module>

       ProxyPassMatch ^/(.*\.php(/.*)?)$
    fcgi://127.0.0.1/var/www/html/info/$1

      </IfModule>

    
    where info is 1 subdirectoy of my webroot.

    
    Apache starts, however when i want to access to webpage i get the
    following error (in vhost log dedicated to my website):

    [Fri Jun 14 14:16:07.827425 2013] [proxy:error] [pid 24500]
    (111)Connection refused: AH00957: FCGI: attempt to connect to
    127.0.0.1:8000 (*) failed

    [Fri Jun 14 14:16:07.827539 2013] [proxy_fcgi:error] [pid 24500]
    [client 127.0.0.1:40982] AH01079: failed to make connection to
    backend: 127.0.0.1

    
    Q1: my webserver (even if it is a local webserver for testing) has a
    fixe IP address. Should i use it in <ifModule proxy_module>
    tag instead of 127.0.0.1 ?

    Q2: port in error log is 8000, where can i set it ? is it possible
    to tell fastCGI to use standard 80 and to not conflict with standard
    http ? if yes how ?

    
    2. suExec:

    While checking httpd logs i discovered that:

    [suexec:notice] [pid 24705] AH01232: suEXEC mechanism enabled
    (wrapper: /usr/sbin/suexec)

    
    so it mean suExec is running on server.

    if i change all files/folders owner to "rafnews:rafnews"
    (files/folders in /var/www/html) apache do not work and no webpage
    is displayed.

    
    so where is my mistake ?

    
    thx.

    
    Al.

    
-- 
users mailing list
users@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org