suPHP + suEXEC

Discussion in 'Installation/Configuration' started by u4david, Sep 21, 2010.

  1. u4david

    u4david New Member

    I noticed that fastcgi is default in the last version of ISPC3.

    That brings me to question.

    What is good practice to enable" run as user" security and keep compatibility (joomla, wordpress.....)

    I was thinkig that suPHP and su-exec enabled bout at the same time should work well.Or is that duplicate afford?

    Also would like to custom suPHP directives under each website.

    Thank you.
    I'm hosting low traffic sites planing to grow up to 50 sites max.
  2. till

    till Super Moderator Staff Member ISPConfig Developer

    Suphp + suexec is a dupliacet effort. If you want to use suphp, then suexec is not needed.
    If you use cgi-php or fcgi-php, then you have to activate suexec.

    Starting with ISPConfig 3.0.3 Beta you will have a inpit field for custom php.ini settings in ispconfig which works also for php-cgi and php-fcgi.
  3. u4david

    u4david New Member

    what do you recomend ?


    I just installed new version of ispconfig3 on ubu 10.04 LTS

    What is the best steps to have well rounded set up with broad compatibility regarding this options in ispconfig3?
    The settings are a site specific so i could have one site with one set up and another with different setup.
    I do like the security of run as user options and the sites are low trafic so there is no deed to keep stuf in rum constantly just load it when requested.

    One thing I know that i would like to use custom directives using suPHP_ConfigPath.

    All sites I host are personal or low traffic sites.

    Or any guidelines when to select suphp suexec fast-cgi others rae very apreciated?

    Thank you for direction on this.
    Last edited: Sep 21, 2010
  4. till

    till Super Moderator Staff Member ISPConfig Developer

    Which exact version? The new stable version or the new beta version?

    If you installed the 3.0.3 beta, then you can set individual php settings for every website.

    Such internal are completely handled by ispconfig, you dont have to care how it is implemented. for suphp the suPHP_ConfigPath directive is used while for fcgo and cgi php different settings in the starter scripts are used.

    for low traffic sites, use either:

    suphp or cgi-php + suexec

    for high traffic sites, use php-fcgi + suexec
  5. u4david

    u4david New Member

    ispconfig3 beta -yes or no

    Can i give it a go or should i expect to have issues?

    I have the latest stable installed.
    Wonder if i would benefit going beta?

    Also if beta is ok where to get it from SVN?
  6. u4david

    u4david New Member

    got the location but....

    got the beta location install info.

    Still wonder what is proven to work/fail.
    And if i plane to stick with ispconfig3 for looong time would i be better off having stable version that i upgrade or go ahead and use the beta?

    PS:so glad for all your help it really makes my "geeky like" life better.
  7. falko

    falko Super Moderator ISPConfig Developer

    On production systems, always use stable versions!
  8. u4david

    u4david New Member

    Somethink is up

    Something happened with su-php enabled on all my sites.
    The webmail returned error 404.
    even just local access does the same.

    I gonna try to start fresh and see if i can recreate the problem.

    It hink it happend ufter update.
    May be it was me but if someone knows anything about this I may need some light on that.

    Should i expect issues with SU-php enabled and web mail access?
    latest ISPC3 stable installed+ubuntu 10.04
  9. u4david

    u4david New Member

    any recomendation on su-php vs CGI+suexec

    What one is better?
    low traffic sites.
    Joomla,wordpress,round cube,custom php.ini per site.

    What would be better choice in the long run.Save resources and get things done.

    I fallowed the ubuntu 10.04 PS.did i missed hwre su-PHP gets installed or is that some sort of module for php?

    Thank you
  10. till

    till Super Moderator Staff Member ISPConfig Developer

    You can not access webmail trogh the domain of a website as webmail is installed outside of the website root directory and suexec denies access for security reasons then. Additionally, the files ahve to be owned by the website user if they shall be accessible by suphp.

    The solution is to create a dedicated wenbsite for webmail, e.g. with the domain and wccess webmail trough this website only.

Share This Page