On 07/06/2010 08:28, Richard Hector wrote:
Hi all, I'm getting really confused - the docs on FastCGI seem a little skimpy, and other resources are how various people may have made it work, and I haven't managed to get a configuration that works yet. My objective is to run a particular PHP site as a particular user, for security reasons. My understanding is that I can't use SuExec for mod_php, so I have to use CGI or FastCGI, of which FastCGI is faster :-) It seems that FastCgiExternalServer keeps everything nicely separated, so that's the choice I'm going with at the moment. Now is the point at which I get lost, because there are so many different configs thrown up by google. Some use Alias directives, some use AddType and Action directives; some use real-looking paths for the first argument to FastCgiExternalServer and others don't. I'm pretty sure I got to a point where everything worked, except that a url with no path didn't return index.php - the DirectoryIndex directive appeared to have no effect, and php tried to run with no content. Unfortunately I don't have that config working at the moment; I've hacked around a bit aimlessly and lost track - and anyway, I should really replicate it without client details before posting a config on here. So what I guess I'm asking for is a simple config that works, of which I can ask explanations of the bits I don't understand - I think that's the real problem with all the bits I've found, is that there are minimal explanations of _why_ a particular directive is used, and why. I'll try to get an experimental config up a bit later (hometime here now). Oh - the other thing is I need to support this in a Name based VirtualHost - and only one. The other sites should continue to work on mod_php, if that's possible. I'm running Debian Lenny (Apache 2.2.9, PHP 5.2.6). That's probably a big fail for 'Asking smart questions' - sorry :-( Hopefully I'll be more coherent tomorrow, but I figured I'd take advantage of my timezone difference from most of the world by getting this out there now :-) Thanks, Richard
I answered something like this on the fbsd mailing list a year ago: http://lists.freebsd.org/pipermail/freebsd-questions/2009-July/202133.html
hope it helps ..
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See<URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
" from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
-- No trees were killed in the creation of this message. However, many electrons were terribly inconvenienced.
begin:vcard fn:Julien Cigar n:Cigar;Julien org;quoted-printable:Belgian Biodiversity Platform;ULB (Universit=C3=A9 Libre de Bruxelles) adr:;;;Brussels;;;Belgium email;internet:jcigar@xxxxxxxxx tel;work:+32(0)26505752 x-mozilla-html:FALSE url:http://www.biodiversity.be version:2.1 end:vcard
--------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
|