PHP with suexec/fcgidApache2 Permission denied: access to / deniedmod_fcgid, perl script output going to apache error_logfcgid, suexec, and userdirApache w/ fcgid and suexec: second vhost returning 'Forbidden'Why the php-cgi wrapper script for php-fpm? (Using virtualhost and suexec.)Apache mass virtual hosting & suexec & fcgidphpinfo.php is not showing extra folder for additional PHP configuration filesconfiguring awstats with suexecApache process seems to die every hourapache suexec + php + fcgid does not log errors

Adding strings in lists together

When a current flow in an inductor is interrupted, what limits the voltage rise?

Possible nonclassical ion from a bicyclic system

Can't connect to Internet in bash using Mac OS

If a massive object like Jupiter flew past the Earth how close would it need to come to pull people off of the surface?

Understanding STM32 datasheet regarding decoupling capacitors

Points within polygons in different projections

What are the problems in teaching guitar via Skype?

Intuition behind eigenvalues of an adjacency matrix

What does the 0>&1 shell redirection mean?

Why does the UK have more political parties than the US?

Can a wire having a 610-670 THz (frequency of blue light) AC frequency supply, generate blue light?

How can a single Member of the House block a Congressional bill?

How to make the POV character sit on the sidelines without the reader getting bored

Why the lack of hesitance to wear pads on the sabbath?

Smart people send dumb people to a new planet on a space craft that crashes into a body of water

Draw a checker pattern with a black X in the center

Is it possible to kill all life on Earth?

Why would Lupin kill Pettigrew?

How should I push back against my job assigning "homework"?

Modern approach to radio buttons

Tic-Tac-Toe for the terminal

How to properly maintain eye contact with people that have distinctive facial features?

Humans meet a distant alien species. How do they standardize? - Units of Measure



PHP with suexec/fcgid


Apache2 Permission denied: access to / deniedmod_fcgid, perl script output going to apache error_logfcgid, suexec, and userdirApache w/ fcgid and suexec: second vhost returning 'Forbidden'Why the php-cgi wrapper script for php-fpm? (Using virtualhost and suexec.)Apache mass virtual hosting & suexec & fcgidphpinfo.php is not showing extra folder for additional PHP configuration filesconfiguring awstats with suexecApache process seems to die every hourapache suexec + php + fcgid does not log errors






.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty height:90px;width:728px;box-sizing:border-box;








1















httpd.conf file:



LoadModule fcgid_module modules/mod_fcgid.so
AddHandler fcgid-script .php
FCGIWrapper /usr/local/php5 .php

# manual
MaxRequestsPerProcess 1000
FcgidMaxProcesses 200
FcgidProcessLifeTime 7200
MaxProcessCount 500
FcgidIOTimeout 400
FcgidIdleTimeout 600
FcgidIdleScanInterval 90
FcgidBusyTimeout 300
FcgidBusyScanInterval 80
ErrorScanInterval 3
ZombieScanInterval 3
DefaultMinClassProcessCount 0
DefaultMaxClassProcessCount 3
MaxRequestLen 20468982

<VirtualHost *>
ServerName hostname
DocumentRoot /home/web
ServerAdmin web@web.com
<IfModule mod_suphp.c>
suPHP_UserGroup web web
</IfModule>
SuexecUserGroup web web
UserDir disable
</VirtualHost>


and this is my wrapper:



#!/bin/sh
exec /usr/local/bin/php


my error is:



/usr/local/apache2/logs/suexec_log



[2019-09-03 06:55:28]: user mismatch (daemon instead of www)


/usr/local/apache2/logs/error_log



suexec policy violation: see suexec log for more details
[Tue Sep 03 06:55:28 2019] [warn] [client 127.0.0.1] (104)Connection reset by peer: mod_fcgid: error reading data from FastCGI server
[Tue Sep 03 06:55:28 2019] [error] [client 127.0.0.1] Premature end of script headers: phpinfo.php


UPDATES:



I've edited:



 /usr/local/apache2/bin/suexec -V
-D AP_DOC_ROOT="/"
-D AP_GID_MIN=100
-D AP_HTTPD_USER="www"
-D AP_LOG_EXEC="/usr/local/apache2/logs/suexec_log"
-D AP_SAFE_PATH="/usr/local/bin:/usr/bin:/bin"
-D AP_UID_MIN=100
-D AP_USERDIR_SUFFIX="www"


but no I get no errors and nothing found...










share|improve this question
























  • It's not an answer but an advice. You should consider apache2-mpm-itk instead of suexec and fcgid. It allows you to run each of your vhost under a separate uid and gid. It's far more easy to use than fcgi and suexec.

    – Stone
    Feb 1 '12 at 20:30











  • One suggestion PHP fpm can run as user specified in its conf. Fpm can work with nginx or Apache as proxy server

    – kalyan
    Jan 15 '17 at 9:57











  • Why are you using suphp with a single uid/guid? Why are you trying to run both fcgi and suphp?

    – symcbean
    Mar 21 '17 at 20:09

















1















httpd.conf file:



LoadModule fcgid_module modules/mod_fcgid.so
AddHandler fcgid-script .php
FCGIWrapper /usr/local/php5 .php

# manual
MaxRequestsPerProcess 1000
FcgidMaxProcesses 200
FcgidProcessLifeTime 7200
MaxProcessCount 500
FcgidIOTimeout 400
FcgidIdleTimeout 600
FcgidIdleScanInterval 90
FcgidBusyTimeout 300
FcgidBusyScanInterval 80
ErrorScanInterval 3
ZombieScanInterval 3
DefaultMinClassProcessCount 0
DefaultMaxClassProcessCount 3
MaxRequestLen 20468982

<VirtualHost *>
ServerName hostname
DocumentRoot /home/web
ServerAdmin web@web.com
<IfModule mod_suphp.c>
suPHP_UserGroup web web
</IfModule>
SuexecUserGroup web web
UserDir disable
</VirtualHost>


and this is my wrapper:



#!/bin/sh
exec /usr/local/bin/php


my error is:



/usr/local/apache2/logs/suexec_log



[2019-09-03 06:55:28]: user mismatch (daemon instead of www)


/usr/local/apache2/logs/error_log



suexec policy violation: see suexec log for more details
[Tue Sep 03 06:55:28 2019] [warn] [client 127.0.0.1] (104)Connection reset by peer: mod_fcgid: error reading data from FastCGI server
[Tue Sep 03 06:55:28 2019] [error] [client 127.0.0.1] Premature end of script headers: phpinfo.php


UPDATES:



I've edited:



 /usr/local/apache2/bin/suexec -V
-D AP_DOC_ROOT="/"
-D AP_GID_MIN=100
-D AP_HTTPD_USER="www"
-D AP_LOG_EXEC="/usr/local/apache2/logs/suexec_log"
-D AP_SAFE_PATH="/usr/local/bin:/usr/bin:/bin"
-D AP_UID_MIN=100
-D AP_USERDIR_SUFFIX="www"


but no I get no errors and nothing found...










share|improve this question
























  • It's not an answer but an advice. You should consider apache2-mpm-itk instead of suexec and fcgid. It allows you to run each of your vhost under a separate uid and gid. It's far more easy to use than fcgi and suexec.

    – Stone
    Feb 1 '12 at 20:30











  • One suggestion PHP fpm can run as user specified in its conf. Fpm can work with nginx or Apache as proxy server

    – kalyan
    Jan 15 '17 at 9:57











  • Why are you using suphp with a single uid/guid? Why are you trying to run both fcgi and suphp?

    – symcbean
    Mar 21 '17 at 20:09













1












1








1








httpd.conf file:



LoadModule fcgid_module modules/mod_fcgid.so
AddHandler fcgid-script .php
FCGIWrapper /usr/local/php5 .php

# manual
MaxRequestsPerProcess 1000
FcgidMaxProcesses 200
FcgidProcessLifeTime 7200
MaxProcessCount 500
FcgidIOTimeout 400
FcgidIdleTimeout 600
FcgidIdleScanInterval 90
FcgidBusyTimeout 300
FcgidBusyScanInterval 80
ErrorScanInterval 3
ZombieScanInterval 3
DefaultMinClassProcessCount 0
DefaultMaxClassProcessCount 3
MaxRequestLen 20468982

<VirtualHost *>
ServerName hostname
DocumentRoot /home/web
ServerAdmin web@web.com
<IfModule mod_suphp.c>
suPHP_UserGroup web web
</IfModule>
SuexecUserGroup web web
UserDir disable
</VirtualHost>


and this is my wrapper:



#!/bin/sh
exec /usr/local/bin/php


my error is:



/usr/local/apache2/logs/suexec_log



[2019-09-03 06:55:28]: user mismatch (daemon instead of www)


/usr/local/apache2/logs/error_log



suexec policy violation: see suexec log for more details
[Tue Sep 03 06:55:28 2019] [warn] [client 127.0.0.1] (104)Connection reset by peer: mod_fcgid: error reading data from FastCGI server
[Tue Sep 03 06:55:28 2019] [error] [client 127.0.0.1] Premature end of script headers: phpinfo.php


UPDATES:



I've edited:



 /usr/local/apache2/bin/suexec -V
-D AP_DOC_ROOT="/"
-D AP_GID_MIN=100
-D AP_HTTPD_USER="www"
-D AP_LOG_EXEC="/usr/local/apache2/logs/suexec_log"
-D AP_SAFE_PATH="/usr/local/bin:/usr/bin:/bin"
-D AP_UID_MIN=100
-D AP_USERDIR_SUFFIX="www"


but no I get no errors and nothing found...










share|improve this question
















httpd.conf file:



LoadModule fcgid_module modules/mod_fcgid.so
AddHandler fcgid-script .php
FCGIWrapper /usr/local/php5 .php

# manual
MaxRequestsPerProcess 1000
FcgidMaxProcesses 200
FcgidProcessLifeTime 7200
MaxProcessCount 500
FcgidIOTimeout 400
FcgidIdleTimeout 600
FcgidIdleScanInterval 90
FcgidBusyTimeout 300
FcgidBusyScanInterval 80
ErrorScanInterval 3
ZombieScanInterval 3
DefaultMinClassProcessCount 0
DefaultMaxClassProcessCount 3
MaxRequestLen 20468982

<VirtualHost *>
ServerName hostname
DocumentRoot /home/web
ServerAdmin web@web.com
<IfModule mod_suphp.c>
suPHP_UserGroup web web
</IfModule>
SuexecUserGroup web web
UserDir disable
</VirtualHost>


and this is my wrapper:



#!/bin/sh
exec /usr/local/bin/php


my error is:



/usr/local/apache2/logs/suexec_log



[2019-09-03 06:55:28]: user mismatch (daemon instead of www)


/usr/local/apache2/logs/error_log



suexec policy violation: see suexec log for more details
[Tue Sep 03 06:55:28 2019] [warn] [client 127.0.0.1] (104)Connection reset by peer: mod_fcgid: error reading data from FastCGI server
[Tue Sep 03 06:55:28 2019] [error] [client 127.0.0.1] Premature end of script headers: phpinfo.php


UPDATES:



I've edited:



 /usr/local/apache2/bin/suexec -V
-D AP_DOC_ROOT="/"
-D AP_GID_MIN=100
-D AP_HTTPD_USER="www"
-D AP_LOG_EXEC="/usr/local/apache2/logs/suexec_log"
-D AP_SAFE_PATH="/usr/local/bin:/usr/bin:/bin"
-D AP_UID_MIN=100
-D AP_USERDIR_SUFFIX="www"


but no I get no errors and nothing found...







apache-2.2 php mod-fcgid suexec






share|improve this question















share|improve this question













share|improve this question




share|improve this question








edited Feb 1 '12 at 19:05







Jane

















asked Feb 1 '12 at 16:32









JaneJane

63




63












  • It's not an answer but an advice. You should consider apache2-mpm-itk instead of suexec and fcgid. It allows you to run each of your vhost under a separate uid and gid. It's far more easy to use than fcgi and suexec.

    – Stone
    Feb 1 '12 at 20:30











  • One suggestion PHP fpm can run as user specified in its conf. Fpm can work with nginx or Apache as proxy server

    – kalyan
    Jan 15 '17 at 9:57











  • Why are you using suphp with a single uid/guid? Why are you trying to run both fcgi and suphp?

    – symcbean
    Mar 21 '17 at 20:09

















  • It's not an answer but an advice. You should consider apache2-mpm-itk instead of suexec and fcgid. It allows you to run each of your vhost under a separate uid and gid. It's far more easy to use than fcgi and suexec.

    – Stone
    Feb 1 '12 at 20:30











  • One suggestion PHP fpm can run as user specified in its conf. Fpm can work with nginx or Apache as proxy server

    – kalyan
    Jan 15 '17 at 9:57











  • Why are you using suphp with a single uid/guid? Why are you trying to run both fcgi and suphp?

    – symcbean
    Mar 21 '17 at 20:09
















It's not an answer but an advice. You should consider apache2-mpm-itk instead of suexec and fcgid. It allows you to run each of your vhost under a separate uid and gid. It's far more easy to use than fcgi and suexec.

– Stone
Feb 1 '12 at 20:30





It's not an answer but an advice. You should consider apache2-mpm-itk instead of suexec and fcgid. It allows you to run each of your vhost under a separate uid and gid. It's far more easy to use than fcgi and suexec.

– Stone
Feb 1 '12 at 20:30













One suggestion PHP fpm can run as user specified in its conf. Fpm can work with nginx or Apache as proxy server

– kalyan
Jan 15 '17 at 9:57





One suggestion PHP fpm can run as user specified in its conf. Fpm can work with nginx or Apache as proxy server

– kalyan
Jan 15 '17 at 9:57













Why are you using suphp with a single uid/guid? Why are you trying to run both fcgi and suphp?

– symcbean
Mar 21 '17 at 20:09





Why are you using suphp with a single uid/guid? Why are you trying to run both fcgi and suphp?

– symcbean
Mar 21 '17 at 20:09










1 Answer
1






active

oldest

votes


















0














The suexec file indicates that it will only function if the underlying user is www. It appears that the website is running as daemon. You can change this by putting in
user www
in the httpd.conf file. BTW, that httpd.conf file looks pretty empty, there are probably other files being included or attached elsewhere in the directory you found it in. This might be the place where a user directive has already been placed.



Your wrapper shell will definitely return an error as all it does it start the php program. Which I am not sure what it would do without a program to run. Apache expects the output from any program, to contain the proper HTTP headers, these will not be generated automatically.






share|improve this answer























    Your Answer








    StackExchange.ready(function()
    var channelOptions =
    tags: "".split(" "),
    id: "2"
    ;
    initTagRenderer("".split(" "), "".split(" "), channelOptions);

    StackExchange.using("externalEditor", function()
    // Have to fire editor after snippets, if snippets enabled
    if (StackExchange.settings.snippets.snippetsEnabled)
    StackExchange.using("snippets", function()
    createEditor();
    );

    else
    createEditor();

    );

    function createEditor()
    StackExchange.prepareEditor(
    heartbeatType: 'answer',
    autoActivateHeartbeat: false,
    convertImagesToLinks: true,
    noModals: true,
    showLowRepImageUploadWarning: true,
    reputationToPostImages: 10,
    bindNavPrevention: true,
    postfix: "",
    imageUploader:
    brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
    contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
    allowUrls: true
    ,
    onDemand: true,
    discardSelector: ".discard-answer"
    ,immediatelyShowMarkdownHelp:true
    );



    );













    draft saved

    draft discarded


















    StackExchange.ready(
    function ()
    StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f355858%2fphp-with-suexec-fcgid%23new-answer', 'question_page');

    );

    Post as a guest















    Required, but never shown

























    1 Answer
    1






    active

    oldest

    votes








    1 Answer
    1






    active

    oldest

    votes









    active

    oldest

    votes






    active

    oldest

    votes









    0














    The suexec file indicates that it will only function if the underlying user is www. It appears that the website is running as daemon. You can change this by putting in
    user www
    in the httpd.conf file. BTW, that httpd.conf file looks pretty empty, there are probably other files being included or attached elsewhere in the directory you found it in. This might be the place where a user directive has already been placed.



    Your wrapper shell will definitely return an error as all it does it start the php program. Which I am not sure what it would do without a program to run. Apache expects the output from any program, to contain the proper HTTP headers, these will not be generated automatically.






    share|improve this answer



























      0














      The suexec file indicates that it will only function if the underlying user is www. It appears that the website is running as daemon. You can change this by putting in
      user www
      in the httpd.conf file. BTW, that httpd.conf file looks pretty empty, there are probably other files being included or attached elsewhere in the directory you found it in. This might be the place where a user directive has already been placed.



      Your wrapper shell will definitely return an error as all it does it start the php program. Which I am not sure what it would do without a program to run. Apache expects the output from any program, to contain the proper HTTP headers, these will not be generated automatically.






      share|improve this answer

























        0












        0








        0







        The suexec file indicates that it will only function if the underlying user is www. It appears that the website is running as daemon. You can change this by putting in
        user www
        in the httpd.conf file. BTW, that httpd.conf file looks pretty empty, there are probably other files being included or attached elsewhere in the directory you found it in. This might be the place where a user directive has already been placed.



        Your wrapper shell will definitely return an error as all it does it start the php program. Which I am not sure what it would do without a program to run. Apache expects the output from any program, to contain the proper HTTP headers, these will not be generated automatically.






        share|improve this answer













        The suexec file indicates that it will only function if the underlying user is www. It appears that the website is running as daemon. You can change this by putting in
        user www
        in the httpd.conf file. BTW, that httpd.conf file looks pretty empty, there are probably other files being included or attached elsewhere in the directory you found it in. This might be the place where a user directive has already been placed.



        Your wrapper shell will definitely return an error as all it does it start the php program. Which I am not sure what it would do without a program to run. Apache expects the output from any program, to contain the proper HTTP headers, these will not be generated automatically.







        share|improve this answer












        share|improve this answer



        share|improve this answer










        answered Feb 1 '12 at 20:07









        mdpcmdpc

        10.3k84660




        10.3k84660



























            draft saved

            draft discarded
















































            Thanks for contributing an answer to Server Fault!


            • Please be sure to answer the question. Provide details and share your research!

            But avoid


            • Asking for help, clarification, or responding to other answers.

            • Making statements based on opinion; back them up with references or personal experience.

            To learn more, see our tips on writing great answers.




            draft saved


            draft discarded














            StackExchange.ready(
            function ()
            StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f355858%2fphp-with-suexec-fcgid%23new-answer', 'question_page');

            );

            Post as a guest















            Required, but never shown





















































            Required, but never shown














            Required, but never shown












            Required, but never shown







            Required, but never shown

































            Required, but never shown














            Required, but never shown












            Required, but never shown







            Required, but never shown







            Popular posts from this blog

            Club Baloncesto Breogán Índice Historia | Pavillón | Nome | O Breogán na cultura popular | Xogadores | Adestradores | Presidentes | Palmarés | Historial | Líderes | Notas | Véxase tamén | Menú de navegacióncbbreogan.galCadroGuía oficial da ACB 2009-10, páxina 201Guía oficial ACB 1992, páxina 183. Editorial DB.É de 6.500 espectadores sentados axeitándose á última normativa"Estudiantes Junior, entre as mellores canteiras"o orixinalHemeroteca El Mundo Deportivo, 16 setembro de 1970, páxina 12Historia do BreogánAlfredo Pérez, o último canoneiroHistoria C.B. BreogánHemeroteca de El Mundo DeportivoJimmy Wright, norteamericano do Breogán deixará Lugo por ameazas de morteResultados de Breogán en 1986-87Resultados de Breogán en 1990-91Ficha de Velimir Perasović en acb.comResultados de Breogán en 1994-95Breogán arrasa al Barça. "El Mundo Deportivo", 27 de setembro de 1999, páxina 58CB Breogán - FC BarcelonaA FEB invita a participar nunha nova Liga EuropeaCharlie Bell na prensa estatalMáximos anotadores 2005Tempada 2005-06 : Tódolos Xogadores da Xornada""Non quero pensar nunha man negra, mais pregúntome que está a pasar""o orixinalRaúl López, orgulloso dos xogadores, presume da boa saúde económica do BreogánJulio González confirma que cesa como presidente del BreogánHomenaxe a Lisardo GómezA tempada do rexurdimento celesteEntrevista a Lisardo GómezEl COB dinamita el Pazo para forzar el quinto (69-73)Cafés Candelas, patrocinador del CB Breogán"Suso Lázare, novo presidente do Breogán"o orixinalCafés Candelas Breogán firma el mayor triunfo de la historiaEl Breogán realizará 17 homenajes por su cincuenta aniversario"O Breogán honra ao seu fundador e primeiro presidente"o orixinalMiguel Giao recibiu a homenaxe do PazoHomenaxe aos primeiros gladiadores celestesO home que nos amosa como ver o Breo co corazónTita Franco será homenaxeada polos #50anosdeBreoJulio Vila recibirá unha homenaxe in memoriam polos #50anosdeBreo"O Breogán homenaxeará aos seus aboados máis veteráns"Pechada ovación a «Capi» Sanmartín e Ricardo «Corazón de González»Homenaxe por décadas de informaciónPaco García volve ao Pazo con motivo do 50 aniversario"Resultados y clasificaciones""O Cafés Candelas Breogán, campión da Copa Princesa""O Cafés Candelas Breogán, equipo ACB"C.B. Breogán"Proxecto social"o orixinal"Centros asociados"o orixinalFicha en imdb.comMario Camus trata la recuperación del amor en 'La vieja música', su última película"Páxina web oficial""Club Baloncesto Breogán""C. B. Breogán S.A.D."eehttp://www.fegaba.com

            Vilaño, A Laracha Índice Patrimonio | Lugares e parroquias | Véxase tamén | Menú de navegación43°14′52″N 8°36′03″O / 43.24775, -8.60070

            Cegueira Índice Epidemioloxía | Deficiencia visual | Tipos de cegueira | Principais causas de cegueira | Tratamento | Técnicas de adaptación e axudas | Vida dos cegos | Primeiros auxilios | Crenzas respecto das persoas cegas | Crenzas das persoas cegas | O neno deficiente visual | Aspectos psicolóxicos da cegueira | Notas | Véxase tamén | Menú de navegación54.054.154.436928256blindnessDicionario da Real Academia GalegaPortal das Palabras"International Standards: Visual Standards — Aspects and Ranges of Vision Loss with Emphasis on Population Surveys.""Visual impairment and blindness""Presentan un plan para previr a cegueira"o orixinalACCDV Associació Catalana de Cecs i Disminuïts Visuals - PMFTrachoma"Effect of gene therapy on visual function in Leber's congenital amaurosis"1844137110.1056/NEJMoa0802268Cans guía - os mellores amigos dos cegosArquivadoEscola de cans guía para cegos en Mortágua, PortugalArquivado"Tecnología para ciegos y deficientes visuales. Recopilación de recursos gratuitos en la Red""Colorino""‘COL.diesis’, escuchar los sonidos del color""COL.diesis: Transforming Colour into Melody and Implementing the Result in a Colour Sensor Device"o orixinal"Sistema de desarrollo de sinestesia color-sonido para invidentes utilizando un protocolo de audio""Enseñanza táctil - geometría y color. Juegos didácticos para niños ciegos y videntes""Sistema Constanz"L'ocupació laboral dels cecs a l'Estat espanyol està pràcticament equiparada a la de les persones amb visió, entrevista amb Pedro ZuritaONCE (Organización Nacional de Cegos de España)Prevención da cegueiraDescrición de deficiencias visuais (Disc@pnet)Braillín, un boneco atractivo para calquera neno, con ou sen discapacidade, que permite familiarizarse co sistema de escritura e lectura brailleAxudas Técnicas36838ID00897494007150-90057129528256DOID:1432HP:0000618D001766C10.597.751.941.162C97109C0155020