Go Back   HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials > Linux Forums > Technical

Do you like HowtoForge? Please consider supporting us by becoming a subscriber.
Reply
 
Thread Tools Display Modes
  #1  
Old 2nd March 2006, 01:30
guybrush guybrush is offline
Junior Member
 
Join Date: Nov 2005
Posts: 25
Thanks: 0
Thanked 0 Times in 0 Posts
Default wwwrun failure in ispconfig?

hi,

i´ve got a question:
many of you know about the wwwrun-failure. if you start a php-script, all files created by the script are owned by wwwrun or wwwdata... (depends on the distribution of linux). if you connect via ftp, you cannot delete the files, because you are not the owner.

how does ispconfig handle this? is there a solution integrated in ispconfig?

i have no time to test this out in the next some days (studies take a lot of time! ), but i can´t wait to know about the behaviour of ispconfig in this question...

thanks in advance
guybrush
Reply With Quote
Sponsored Links
  #2  
Old 2nd March 2006, 08:21
till till is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 35,703
Thanks: 819
Thanked 5,320 Times in 4,173 Posts
Default

Quote:
Originally Posted by guybrush
many of you know about the wwwrun-failure. if you start a php-script, all files created by the script are owned by wwwrun or wwwdata... (depends on the distribution of linux). if you connect via ftp, you cannot delete the files, because you are not the owner.

how does ispconfig handle this? is there a solution integrated in ispconfig?

i have no time to test this out in the next some days (studies take a lot of time! ), but i can´t wait to know about the behaviour of ispconfig in this question...
This is more a question of your server configuration then ISPConfig.

To run scripts under the owner of the website and not wwwrun, you have at least 2 solutions:

1) Use a php wrapper like SuPHP.
2) Use PHP as CGI or fastcgi instead of mod_php and enable SuEXEC in ISPConfig.
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
  #3  
Old 2nd March 2006, 11:17
st2xo st2xo is offline
Member
 
Join Date: Jan 2006
Location: Wiesloch [DE]
Posts: 47
Thanks: 3
Thanked 0 Times in 0 Posts
Default

edit the /etc/groups file and add the user wwwrun to that groups you want to give the access.

edit the /etc/proftpd_ispconfig.conf and/or /etc/proftpd/proftpd.conf and change the umask so that all ftp-uploaded files are 775 (or 770)

this works fine on my system - everybody (wwwrun/ftp-User) can modify the files!

But be carefull with shell users!
__________________
regards,
Stefan.
Reply With Quote
  #4  
Old 2nd March 2006, 16:35
guybrush guybrush is offline
Junior Member
 
Join Date: Nov 2005
Posts: 25
Thanks: 0
Thanked 0 Times in 0 Posts
Default

@till:
my base system (deb 3.1) is like the one from "the perfect setup".
i thought, maybe ispconfig comes with an solution out of the box.

@st2xo:
thanks for your solution.
i will try your solution first, (its the easier one *g*) and then, when
i have a little free time, i´ll try tills.

thanks anyway, i´ll post here how my research ended

guybrush
Reply With Quote
  #5  
Old 3rd March 2006, 11:51
till till is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 35,703
Thanks: 819
Thanked 5,320 Times in 4,173 Posts
Default

Quote:
Originally Posted by guybrush
my base system (deb 3.1) is like the one from "the perfect setup".
i thought, maybe ispconfig comes with an solution out of the box.
This can't be solved / configured completely by ISPConfig, beacuse ISPConfig uses the software from your linux distribution. When you start it is a bit more configuration, but on the long term you will be glad that you can simply use apt-get to update your system :-)
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
  #6  
Old 3rd March 2006, 23:15
guybrush guybrush is offline
Junior Member
 
Join Date: Nov 2005
Posts: 25
Thanks: 0
Thanked 0 Times in 0 Posts
Default

@till

yes, you´re right. i´m using apt-get on both deb and ubuntu and i´m loving ist ;-)
i´m very glad that someone wrote this perfect tool

i don´t know when i have time so try your tips. do you have any links or tutorials for me for your 2 solutions?

thanks in advance
Reply With Quote
  #7  
Old 4th March 2006, 00:00
falko falko is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 41,701
Thanks: 1,900
Thanked 2,739 Times in 2,574 Posts
Default

If you want to run PHP as CGI, you can find some directions in this tutorial: http://www.howtoforge.com/apache2_with_php5_and_php4
__________________
Falko
--
Download the ISPConfig 3 Manual! | Check out the ISPConfig 3 Billing Module!

FB: http://www.facebook.com/howtoforge

nginx-Webhosting: Timme Hosting | Follow me on:
Reply With Quote
  #8  
Old 4th March 2006, 01:01
guybrush guybrush is offline
Junior Member
 
Join Date: Nov 2005
Posts: 25
Thanks: 0
Thanked 0 Times in 0 Posts
Default

if i use suphp, only php-scripts are run under another users uid? cgi-scripts (like perl or anything else) are not affected, or am i wrong?

i read an article on http://apache-server.com/tutorials/LPsuexec.html
somewhere in under prerequisites they say:
Quote:
As you can see, the requirements for execution are pretty stringent. The sheer number of things that can go wrong argues for the use of the wrapper only when it's really necessary.
that makes me a little worried about suexec. if something goes wrong, does suexec isnt just working or are there any serious securityrelated threads if configured unproperly?
Reply With Quote
  #9  
Old 4th March 2006, 12:03
falko falko is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 41,701
Thanks: 1,900
Thanked 2,739 Times in 2,574 Posts
Default

Quote:
Originally Posted by guybrush
if i use suphp, only php-scripts are run under another users uid?
Yes, PHP scripts run under a different uid than that of the Apache user.

Quote:
Originally Posted by guybrush
i read an article on http://apache-server.com/tutorials/LPsuexec.html
somewhere in under prerequisites they say:


that makes me a little worried about suexec. if something goes wrong, does suexec isnt just working or are there any serious securityrelated threads if configured unproperly?
If you run scripts with suExec or suPHP, the scripts must belong to the user and group they run under, otherwise you'll get a "500 Internal Server Error". That's the most common pitfall, but if you do it right it works like a charm.
__________________
Falko
--
Download the ISPConfig 3 Manual! | Check out the ISPConfig 3 Billing Module!

FB: http://www.facebook.com/howtoforge

nginx-Webhosting: Timme Hosting | Follow me on:
Reply With Quote
  #10  
Old 9th May 2006, 00:39
mattbrown mattbrown is offline
Junior Member
 
Join Date: May 2006
Posts: 8
Thanks: 0
Thanked 0 Times in 0 Posts
 
Default

hi
can anybody help me out with mod_suphp

ive tried installing this for about a day now and it just wont work.

Im running fc4 with apache 2.0 i originally saw it listed in yum so gave

yum install mod_suphp a go which seemed to load the module but do little else

so ive tried following the steps from the projects website several times but again to no avail

i have added the settings to my httpd.conf file and when i restart apache it seems to recognise them but all my php files in the virtual hos are still being run as apache

also i dont seem to be able to find the /etc/suphp.conf
or any directory in .etc called suphp

however i got no errors etc when running make, make install
Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
cannot access ispconfig site Nu2Linux Installation/Configuration 13 3rd January 2009 15:29
Users and websites aren't created Glorfindel Installation/Configuration 9 23rd February 2006 04:20
ISPConfig Failure on SuSe 9.3 gimhan90 Installation/Configuration 13 2nd February 2006 10:29
Remote access to ispconfig failure: fedora core 4 (64 bit) dchowdhu Installation/Configuration 6 27th January 2006 10:42
42goISP vs. ISPConfig nveid General 1 16th January 2006 09:07


All times are GMT +2. The time now is 20:50.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.