PHP with suexec/fcgidApache2 Permission denied: access to / deniedmod_fcgid, perl script output going to apache error_logfcgid, suexec, and userdirApache w/ fcgid and suexec: second vhost returning 'Forbidden'Why the php-cgi wrapper script for php-fpm? (Using virtualhost and suexec.)Apache mass virtual hosting & suexec & fcgidphpinfo.php is not showing extra folder for additional PHP configuration filesconfiguring awstats with suexecApache process seems to die every hourapache suexec + php + fcgid does not log errors

Adding strings in lists together

When a current flow in an inductor is interrupted, what limits the voltage rise?

Possible nonclassical ion from a bicyclic system

Can't connect to Internet in bash using Mac OS

If a massive object like Jupiter flew past the Earth how close would it need to come to pull people off of the surface?

Understanding STM32 datasheet regarding decoupling capacitors

Points within polygons in different projections

What are the problems in teaching guitar via Skype?

Intuition behind eigenvalues of an adjacency matrix

What does the 0>&1 shell redirection mean?

Why does the UK have more political parties than the US?

Can a wire having a 610-670 THz (frequency of blue light) AC frequency supply, generate blue light?

How can a single Member of the House block a Congressional bill?

How to make the POV character sit on the sidelines without the reader getting bored

Why the lack of hesitance to wear pads on the sabbath?

Smart people send dumb people to a new planet on a space craft that crashes into a body of water

Draw a checker pattern with a black X in the center

Is it possible to kill all life on Earth?

Why would Lupin kill Pettigrew?

How should I push back against my job assigning "homework"?

Modern approach to radio buttons

Tic-Tac-Toe for the terminal

How to properly maintain eye contact with people that have distinctive facial features?

Humans meet a distant alien species. How do they standardize? - Units of Measure



PHP with suexec/fcgid


Apache2 Permission denied: access to / deniedmod_fcgid, perl script output going to apache error_logfcgid, suexec, and userdirApache w/ fcgid and suexec: second vhost returning 'Forbidden'Why the php-cgi wrapper script for php-fpm? (Using virtualhost and suexec.)Apache mass virtual hosting & suexec & fcgidphpinfo.php is not showing extra folder for additional PHP configuration filesconfiguring awstats with suexecApache process seems to die every hourapache suexec + php + fcgid does not log errors






.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty height:90px;width:728px;box-sizing:border-box;








1















httpd.conf file:



LoadModule fcgid_module modules/mod_fcgid.so
AddHandler fcgid-script .php
FCGIWrapper /usr/local/php5 .php

# manual
MaxRequestsPerProcess 1000
FcgidMaxProcesses 200
FcgidProcessLifeTime 7200
MaxProcessCount 500
FcgidIOTimeout 400
FcgidIdleTimeout 600
FcgidIdleScanInterval 90
FcgidBusyTimeout 300
FcgidBusyScanInterval 80
ErrorScanInterval 3
ZombieScanInterval 3
DefaultMinClassProcessCount 0
DefaultMaxClassProcessCount 3
MaxRequestLen 20468982

<VirtualHost *>
ServerName hostname
DocumentRoot /home/web
ServerAdmin web@web.com
<IfModule mod_suphp.c>
suPHP_UserGroup web web
</IfModule>
SuexecUserGroup web web
UserDir disable
</VirtualHost>


and this is my wrapper:



#!/bin/sh
exec /usr/local/bin/php


my error is:



/usr/local/apache2/logs/suexec_log



[2019-09-03 06:55:28]: user mismatch (daemon instead of www)


/usr/local/apache2/logs/error_log



suexec policy violation: see suexec log for more details
[Tue Sep 03 06:55:28 2019] [warn] [client 127.0.0.1] (104)Connection reset by peer: mod_fcgid: error reading data from FastCGI server
[Tue Sep 03 06:55:28 2019] [error] [client 127.0.0.1] Premature end of script headers: phpinfo.php


UPDATES:



I've edited:



 /usr/local/apache2/bin/suexec -V
-D AP_DOC_ROOT="/"
-D AP_GID_MIN=100
-D AP_HTTPD_USER="www"
-D AP_LOG_EXEC="/usr/local/apache2/logs/suexec_log"
-D AP_SAFE_PATH="/usr/local/bin:/usr/bin:/bin"
-D AP_UID_MIN=100
-D AP_USERDIR_SUFFIX="www"


but no I get no errors and nothing found...










share|improve this question
























  • It's not an answer but an advice. You should consider apache2-mpm-itk instead of suexec and fcgid. It allows you to run each of your vhost under a separate uid and gid. It's far more easy to use than fcgi and suexec.

    – Stone
    Feb 1 '12 at 20:30











  • One suggestion PHP fpm can run as user specified in its conf. Fpm can work with nginx or Apache as proxy server

    – kalyan
    Jan 15 '17 at 9:57











  • Why are you using suphp with a single uid/guid? Why are you trying to run both fcgi and suphp?

    – symcbean
    Mar 21 '17 at 20:09

















1















httpd.conf file:



LoadModule fcgid_module modules/mod_fcgid.so
AddHandler fcgid-script .php
FCGIWrapper /usr/local/php5 .php

# manual
MaxRequestsPerProcess 1000
FcgidMaxProcesses 200
FcgidProcessLifeTime 7200
MaxProcessCount 500
FcgidIOTimeout 400
FcgidIdleTimeout 600
FcgidIdleScanInterval 90
FcgidBusyTimeout 300
FcgidBusyScanInterval 80
ErrorScanInterval 3
ZombieScanInterval 3
DefaultMinClassProcessCount 0
DefaultMaxClassProcessCount 3
MaxRequestLen 20468982

<VirtualHost *>
ServerName hostname
DocumentRoot /home/web
ServerAdmin web@web.com
<IfModule mod_suphp.c>
suPHP_UserGroup web web
</IfModule>
SuexecUserGroup web web
UserDir disable
</VirtualHost>


and this is my wrapper:



#!/bin/sh
exec /usr/local/bin/php


my error is:



/usr/local/apache2/logs/suexec_log



[2019-09-03 06:55:28]: user mismatch (daemon instead of www)


/usr/local/apache2/logs/error_log



suexec policy violation: see suexec log for more details
[Tue Sep 03 06:55:28 2019] [warn] [client 127.0.0.1] (104)Connection reset by peer: mod_fcgid: error reading data from FastCGI server
[Tue Sep 03 06:55:28 2019] [error] [client 127.0.0.1] Premature end of script headers: phpinfo.php


UPDATES:



I've edited:



 /usr/local/apache2/bin/suexec -V
-D AP_DOC_ROOT="/"
-D AP_GID_MIN=100
-D AP_HTTPD_USER="www"
-D AP_LOG_EXEC="/usr/local/apache2/logs/suexec_log"
-D AP_SAFE_PATH="/usr/local/bin:/usr/bin:/bin"
-D AP_UID_MIN=100
-D AP_USERDIR_SUFFIX="www"


but no I get no errors and nothing found...










share|improve this question
























  • It's not an answer but an advice. You should consider apache2-mpm-itk instead of suexec and fcgid. It allows you to run each of your vhost under a separate uid and gid. It's far more easy to use than fcgi and suexec.

    – Stone
    Feb 1 '12 at 20:30











  • One suggestion PHP fpm can run as user specified in its conf. Fpm can work with nginx or Apache as proxy server

    – kalyan
    Jan 15 '17 at 9:57











  • Why are you using suphp with a single uid/guid? Why are you trying to run both fcgi and suphp?

    – symcbean
    Mar 21 '17 at 20:09













1












1








1








httpd.conf file:



LoadModule fcgid_module modules/mod_fcgid.so
AddHandler fcgid-script .php
FCGIWrapper /usr/local/php5 .php

# manual
MaxRequestsPerProcess 1000
FcgidMaxProcesses 200
FcgidProcessLifeTime 7200
MaxProcessCount 500
FcgidIOTimeout 400
FcgidIdleTimeout 600
FcgidIdleScanInterval 90
FcgidBusyTimeout 300
FcgidBusyScanInterval 80
ErrorScanInterval 3
ZombieScanInterval 3
DefaultMinClassProcessCount 0
DefaultMaxClassProcessCount 3
MaxRequestLen 20468982

<VirtualHost *>
ServerName hostname
DocumentRoot /home/web
ServerAdmin web@web.com
<IfModule mod_suphp.c>
suPHP_UserGroup web web
</IfModule>
SuexecUserGroup web web
UserDir disable
</VirtualHost>


and this is my wrapper:



#!/bin/sh
exec /usr/local/bin/php


my error is:



/usr/local/apache2/logs/suexec_log



[2019-09-03 06:55:28]: user mismatch (daemon instead of www)


/usr/local/apache2/logs/error_log



suexec policy violation: see suexec log for more details
[Tue Sep 03 06:55:28 2019] [warn] [client 127.0.0.1] (104)Connection reset by peer: mod_fcgid: error reading data from FastCGI server
[Tue Sep 03 06:55:28 2019] [error] [client 127.0.0.1] Premature end of script headers: phpinfo.php


UPDATES:



I've edited:



 /usr/local/apache2/bin/suexec -V
-D AP_DOC_ROOT="/"
-D AP_GID_MIN=100
-D AP_HTTPD_USER="www"
-D AP_LOG_EXEC="/usr/local/apache2/logs/suexec_log"
-D AP_SAFE_PATH="/usr/local/bin:/usr/bin:/bin"
-D AP_UID_MIN=100
-D AP_USERDIR_SUFFIX="www"


but no I get no errors and nothing found...










share|improve this question
















httpd.conf file:



LoadModule fcgid_module modules/mod_fcgid.so
AddHandler fcgid-script .php
FCGIWrapper /usr/local/php5 .php

# manual
MaxRequestsPerProcess 1000
FcgidMaxProcesses 200
FcgidProcessLifeTime 7200
MaxProcessCount 500
FcgidIOTimeout 400
FcgidIdleTimeout 600
FcgidIdleScanInterval 90
FcgidBusyTimeout 300
FcgidBusyScanInterval 80
ErrorScanInterval 3
ZombieScanInterval 3
DefaultMinClassProcessCount 0
DefaultMaxClassProcessCount 3
MaxRequestLen 20468982

<VirtualHost *>
ServerName hostname
DocumentRoot /home/web
ServerAdmin web@web.com
<IfModule mod_suphp.c>
suPHP_UserGroup web web
</IfModule>
SuexecUserGroup web web
UserDir disable
</VirtualHost>


and this is my wrapper:



#!/bin/sh
exec /usr/local/bin/php


my error is:



/usr/local/apache2/logs/suexec_log



[2019-09-03 06:55:28]: user mismatch (daemon instead of www)


/usr/local/apache2/logs/error_log



suexec policy violation: see suexec log for more details
[Tue Sep 03 06:55:28 2019] [warn] [client 127.0.0.1] (104)Connection reset by peer: mod_fcgid: error reading data from FastCGI server
[Tue Sep 03 06:55:28 2019] [error] [client 127.0.0.1] Premature end of script headers: phpinfo.php


UPDATES:



I've edited:



 /usr/local/apache2/bin/suexec -V
-D AP_DOC_ROOT="/"
-D AP_GID_MIN=100
-D AP_HTTPD_USER="www"
-D AP_LOG_EXEC="/usr/local/apache2/logs/suexec_log"
-D AP_SAFE_PATH="/usr/local/bin:/usr/bin:/bin"
-D AP_UID_MIN=100
-D AP_USERDIR_SUFFIX="www"


but no I get no errors and nothing found...







apache-2.2 php mod-fcgid suexec






share|improve this question















share|improve this question













share|improve this question




share|improve this question








edited Feb 1 '12 at 19:05







Jane

















asked Feb 1 '12 at 16:32









JaneJane

63




63












  • It's not an answer but an advice. You should consider apache2-mpm-itk instead of suexec and fcgid. It allows you to run each of your vhost under a separate uid and gid. It's far more easy to use than fcgi and suexec.

    – Stone
    Feb 1 '12 at 20:30











  • One suggestion PHP fpm can run as user specified in its conf. Fpm can work with nginx or Apache as proxy server

    – kalyan
    Jan 15 '17 at 9:57











  • Why are you using suphp with a single uid/guid? Why are you trying to run both fcgi and suphp?

    – symcbean
    Mar 21 '17 at 20:09

















  • It's not an answer but an advice. You should consider apache2-mpm-itk instead of suexec and fcgid. It allows you to run each of your vhost under a separate uid and gid. It's far more easy to use than fcgi and suexec.

    – Stone
    Feb 1 '12 at 20:30











  • One suggestion PHP fpm can run as user specified in its conf. Fpm can work with nginx or Apache as proxy server

    – kalyan
    Jan 15 '17 at 9:57











  • Why are you using suphp with a single uid/guid? Why are you trying to run both fcgi and suphp?

    – symcbean
    Mar 21 '17 at 20:09
















It's not an answer but an advice. You should consider apache2-mpm-itk instead of suexec and fcgid. It allows you to run each of your vhost under a separate uid and gid. It's far more easy to use than fcgi and suexec.

– Stone
Feb 1 '12 at 20:30





It's not an answer but an advice. You should consider apache2-mpm-itk instead of suexec and fcgid. It allows you to run each of your vhost under a separate uid and gid. It's far more easy to use than fcgi and suexec.

– Stone
Feb 1 '12 at 20:30













One suggestion PHP fpm can run as user specified in its conf. Fpm can work with nginx or Apache as proxy server

– kalyan
Jan 15 '17 at 9:57





One suggestion PHP fpm can run as user specified in its conf. Fpm can work with nginx or Apache as proxy server

– kalyan
Jan 15 '17 at 9:57













Why are you using suphp with a single uid/guid? Why are you trying to run both fcgi and suphp?

– symcbean
Mar 21 '17 at 20:09





Why are you using suphp with a single uid/guid? Why are you trying to run both fcgi and suphp?

– symcbean
Mar 21 '17 at 20:09










1 Answer
1






active

oldest

votes


















0














The suexec file indicates that it will only function if the underlying user is www. It appears that the website is running as daemon. You can change this by putting in
user www
in the httpd.conf file. BTW, that httpd.conf file looks pretty empty, there are probably other files being included or attached elsewhere in the directory you found it in. This might be the place where a user directive has already been placed.



Your wrapper shell will definitely return an error as all it does it start the php program. Which I am not sure what it would do without a program to run. Apache expects the output from any program, to contain the proper HTTP headers, these will not be generated automatically.






share|improve this answer























    Your Answer








    StackExchange.ready(function()
    var channelOptions =
    tags: "".split(" "),
    id: "2"
    ;
    initTagRenderer("".split(" "), "".split(" "), channelOptions);

    StackExchange.using("externalEditor", function()
    // Have to fire editor after snippets, if snippets enabled
    if (StackExchange.settings.snippets.snippetsEnabled)
    StackExchange.using("snippets", function()
    createEditor();
    );

    else
    createEditor();

    );

    function createEditor()
    StackExchange.prepareEditor(
    heartbeatType: 'answer',
    autoActivateHeartbeat: false,
    convertImagesToLinks: true,
    noModals: true,
    showLowRepImageUploadWarning: true,
    reputationToPostImages: 10,
    bindNavPrevention: true,
    postfix: "",
    imageUploader:
    brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
    contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
    allowUrls: true
    ,
    onDemand: true,
    discardSelector: ".discard-answer"
    ,immediatelyShowMarkdownHelp:true
    );



    );













    draft saved

    draft discarded


















    StackExchange.ready(
    function ()
    StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f355858%2fphp-with-suexec-fcgid%23new-answer', 'question_page');

    );

    Post as a guest















    Required, but never shown

























    1 Answer
    1






    active

    oldest

    votes








    1 Answer
    1






    active

    oldest

    votes









    active

    oldest

    votes






    active

    oldest

    votes









    0














    The suexec file indicates that it will only function if the underlying user is www. It appears that the website is running as daemon. You can change this by putting in
    user www
    in the httpd.conf file. BTW, that httpd.conf file looks pretty empty, there are probably other files being included or attached elsewhere in the directory you found it in. This might be the place where a user directive has already been placed.



    Your wrapper shell will definitely return an error as all it does it start the php program. Which I am not sure what it would do without a program to run. Apache expects the output from any program, to contain the proper HTTP headers, these will not be generated automatically.






    share|improve this answer



























      0














      The suexec file indicates that it will only function if the underlying user is www. It appears that the website is running as daemon. You can change this by putting in
      user www
      in the httpd.conf file. BTW, that httpd.conf file looks pretty empty, there are probably other files being included or attached elsewhere in the directory you found it in. This might be the place where a user directive has already been placed.



      Your wrapper shell will definitely return an error as all it does it start the php program. Which I am not sure what it would do without a program to run. Apache expects the output from any program, to contain the proper HTTP headers, these will not be generated automatically.






      share|improve this answer

























        0












        0








        0







        The suexec file indicates that it will only function if the underlying user is www. It appears that the website is running as daemon. You can change this by putting in
        user www
        in the httpd.conf file. BTW, that httpd.conf file looks pretty empty, there are probably other files being included or attached elsewhere in the directory you found it in. This might be the place where a user directive has already been placed.



        Your wrapper shell will definitely return an error as all it does it start the php program. Which I am not sure what it would do without a program to run. Apache expects the output from any program, to contain the proper HTTP headers, these will not be generated automatically.






        share|improve this answer













        The suexec file indicates that it will only function if the underlying user is www. It appears that the website is running as daemon. You can change this by putting in
        user www
        in the httpd.conf file. BTW, that httpd.conf file looks pretty empty, there are probably other files being included or attached elsewhere in the directory you found it in. This might be the place where a user directive has already been placed.



        Your wrapper shell will definitely return an error as all it does it start the php program. Which I am not sure what it would do without a program to run. Apache expects the output from any program, to contain the proper HTTP headers, these will not be generated automatically.







        share|improve this answer












        share|improve this answer



        share|improve this answer










        answered Feb 1 '12 at 20:07









        mdpcmdpc

        10.3k84660




        10.3k84660



























            draft saved

            draft discarded
















































            Thanks for contributing an answer to Server Fault!


            • Please be sure to answer the question. Provide details and share your research!

            But avoid


            • Asking for help, clarification, or responding to other answers.

            • Making statements based on opinion; back them up with references or personal experience.

            To learn more, see our tips on writing great answers.




            draft saved


            draft discarded














            StackExchange.ready(
            function ()
            StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f355858%2fphp-with-suexec-fcgid%23new-answer', 'question_page');

            );

            Post as a guest















            Required, but never shown





















































            Required, but never shown














            Required, but never shown












            Required, but never shown







            Required, but never shown

































            Required, but never shown














            Required, but never shown












            Required, but never shown







            Required, but never shown







            Popular posts from this blog

            Wikipedia:Vital articles Мазмуну Biography - Өмүр баян Philosophy and psychology - Философия жана психология Religion - Дин Social sciences - Коомдук илимдер Language and literature - Тил жана адабият Science - Илим Technology - Технология Arts and recreation - Искусство жана эс алуу History and geography - Тарых жана география Навигация менюсу

            Bruxelas-Capital Índice Historia | Composición | Situación lingüística | Clima | Cidades irmandadas | Notas | Véxase tamén | Menú de navegacióneO uso das linguas en Bruxelas e a situación do neerlandés"Rexión de Bruxelas Capital"o orixinalSitio da rexiónPáxina de Bruselas no sitio da Oficina de Promoción Turística de Valonia e BruxelasMapa Interactivo da Rexión de Bruxelas-CapitaleeWorldCat332144929079854441105155190212ID28008674080552-90000 0001 0666 3698n94104302ID540940339365017018237

            What should I write in an apology letter, since I have decided not to join a company after accepting an offer letterShould I keep looking after accepting a job offer?What should I do when I've been verbally told I would get an offer letter, but still haven't gotten one after 4 weeks?Do I accept an offer from a company that I am not likely to join?New job hasn't confirmed starting date and I want to give current employer as much notice as possibleHow should I address my manager in my resignation letter?HR delayed background verification, now jobless as resignedNo email communication after accepting a formal written offer. How should I phrase the call?What should I do if after receiving a verbal offer letter I am informed that my written job offer is put on hold due to some internal issues?Should I inform the current employer that I am about to resign within 1-2 weeks since I have signed the offer letter and waiting for visa?What company will do, if I send their offer letter to another company