Richard Lynch wrote:
Apache starts up as "root" process to do some god-like things and then immediately changes its user-ness to the setting in httpd.conf and spawns off its children after that.
Not under Win32 it doesn't.
How that interacts with the goofy Windows "Services" and settings in those interminible dialogs about which user runs which Service is beyond me... I can only guess that the Services User starts Apache initially, which then changes itself to the httpd.conf User before PHP enters into the picture. So whatever you choose for the Services User only matters for the first few nano-seconds of Apache's life, and httpd.conf User is what matters after that... But that's just a GUESS not really using Windows all that much, and certainly not understanding the various Windows "security" (cough cough) models over the years.
Apache does no user switching under Windows. Whatever user the service is configured to run as is the user it stays running as. The user/group settings in httpd.conf are ignored under Windows.
Where I think the OP is falling down is that by default services *do not have access to network resources*. So all (s)he needs to do is change the user that the service runs as to a real user instead of LOCALSYSTEM which is the default. However, the user should be aware that this is considered a fairly major security hole unless you create a user specifically for this purpose and lock it down so it can only get at what it needs.
All of which is beyond the scope of this list and should probably be directed at an Apache list, or my billing email address!!
-Stut -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
