problems with suexec

[gobokster]

hi,
i'm following this howto on my Centos5.3 with ISPconfig3 ..
http://www.howtoforge.com/perfect-se...ispconfig-2-p7

all the installation working fine, but after i uploaded my site i have problem with my suexec because i always changing the group permission with apache when i'm trying to upload data via FTP and if via browser it always notice that i've wrong permissions.

[root@ns1]# /usr/sbin/suexec -V
-D AP_DOC_ROOT="/var/www"
-D AP_GID_MIN=100
-D AP_HTTPD_USER="apache"
-D AP_LOG_EXEC="/var/log/httpd/suexec.log"
-D AP_SAFE_PATH="/usr/local/bin:/usr/bin:/bin"
-D AP_UID_MIN=500
-D AP_USERDIR_SUFFIX="public_html"
[root@ns1#]

1) is there anyway that i can change it follow my vhost site user ?
2) if there no way to do it, is it safe to remove it and how?

thank you

[till]

You mix up several things here. I guess you use mod_php, mod_php is not affected by suexec in any kind. Suexec affects only cgi scripts.

If you want to run your php scripts with the permissions of the web user, you will have to install suphp and enable it in the ispconfig config.inc.php file.

[gobokster]

thanks till .. i know i've mixed up some of the configuration .. my other server is working fine without permission problems when uploading and creating folder but this one is really mess up .. and from the config.inc.php already enable the suphp

$go_info["server"]["apache2_php"] = 'addtype'; // 'filter' = set PHP filters, 'addtype' = Set PHP addtype or 'both' = Set Filter + Addtype, suphp = SuPHP wrapper enabled, 'addhandler' = Set PHP AddHandler (nescessary for SuSE 10.2)

[till]

No, you have addtype enabled and not suphp.

[gobokster]

btw how do i enable the suphp .. and will it solved the my file permission

this happened the sample of my issues when i edited the files directly from browser in joomla admin panel

-rw-r--r-- 1 apache apache  1491 May  6 17:46 blank.html
drwxr-xr-x 3 apache apache  4096 May  6 17:46 css
drwxr-xr-x 5 apache apache  4096 May  6 17:46 images
-rw-r--r-- 1 apache apache     0 May  6 17:46 index.html
-rwxr-xr-x 1 apache apache  8145 May  7 18:03 index.php
drwxr-xr-x 4 apache apache  4096 May  6 17:46 ja_menus
-rw-r--r-- 1 apache apache 10491 May  6 17:46 ja_templatetools.php
-rw-r--r-- 1 apache apache  2253 May  6 17:46 ja_vars.php
-rwxr-xr-x 1 apache apache    64 May  6 17:50 params.ini
drwxr-xr-x 2 apache apache  4096 May  6 17:46 scripts
-rw-r--r-- 1 apache apache 11758 May  6 17:46 templateDetails.xml
-rw-r--r-- 1 apache apache 12240 May  6 17:46 template_thumbnail.png

meanwhile this is the original file permission on the root

drwxr-xr-x  6 apache web5    4096 Mar 28 08:37 images
drwxr-xr-x  8 apache web5    4096 Mar 28 08:37 includes
-rw-r--r--  1 apache web5     591 Mar 28 08:34 index2.php
-rw-rw-r--  1 apache web5    1211 May  6 17:43 index.html
-rw-r--r--  1 apache web5    2052 Mar 28 08:34 index.php
drwxr-xr-x  4 apache web5    4096 Mar 28 08:36 language
drwxr-xr-x 16 apache web5    4096 Mar 28 08:37 libraries
-rw-r--r--  1 apache web5   17816 Mar 28 08:35 LICENSE.php
-rw-r--r--  1 apache web5   30746 Mar 28 08:35 LICENSES.php
drwxr-xr-x  2 apache web5    4096 Mar 28 08:36 logs
drwxr-xr-x  3 apache web5    4096 Mar 28 08:37 media
drwxr-xr-x 27 apache web5    4096 May  7 15:26 modules
drwxr-xr-x 11 apache web5    4096 Mar 28 08:37 plugins
-rw-r--r--  1 apache web5     304 Mar 28 08:36 robots.txt
drwxr-xr-x  2 apache web5    4096 May  7 04:01 stats
drwxr-xr-x  7 apache web5    4096 May  6 17:46 templates
drwxr-xr-x  4 apache web5    4096 May  7 17:43 tmp
drwxr-xr-x  4 apache web5    4096 Mar 28 08:37 xmlrpc

and i have to reenable the Limit SITE_CHMOD for "FTP users can use the chmod command" or it will chown all files inside the folder to the ftp username

i'm really screw up and don't know where to dig

[till]

btw how do i enable the suphp .. and will it solved the my file permission

you posted this information already in the line from the config file that you quoted in #3. Please red the decription of the line. It is ...... suphp = SuPHP wrapper enabled .....
so what do you think you have to set as parameter to enable SuPHP instead of addtype? Its suphp. So change the line:

$go_info["server"]["apache2_php"] = 'addtype'; // 'filter' = set PHP filters, 'addtype' = Set PHP addtype or 'both' = Set Filter + Addtype, suphp = SuPHP wrapper enabled, 'addhandler' = Set PHP AddHandler (nescessary for SuSE 10.2)

to

$go_info["server"]["apache2_php"] = 'suphp'; // 'filter' = set PHP filters, 'addtype' = Set PHP addtype or 'both' = Set Filter + Addtype, suphp = SuPHP wrapper enabled, 'addhandler' = Set PHP AddHandler (nescessary for SuSE 10.2)

or see the manual / tutorial for details:

http://www.howtoforge.com/install-su...2.20-and-above