Solved issues with users on FCGID and UNIXD on apache24

[hhmatt]

I have 2 virtualhosts, one for dev0 and one for dev1.

Suexec changes the fcgid process user but it changes the dev0 virtualhost to the dev1 user. Everything but the root process appears to be the dev1 user since it seems to be read last in the configuration.

If I remove the dev1 virtualhost then everything runs under dev0. Except for the root process of course.

I don't really see any other way of configuring this other than:
Suexec on
User dev0
Group dev0

Suexec seems to be working since it does change the process user.

Please help and thanks in advance!

 

[SirDice]

How exactly did you define the virtualhosts, and where?

User dev0
Group dev0

Those set the user and group the Apache process runs on, leave them on www:www.

You need to use SuexecUserGroup

 

[hhmatt]

unixd says that I can't define the User or Group inside the actual virtualhost so they are defined first in the file.

when I try to use SuexecUserGroup it says syntax error:
Invalid command 'SuexecUserGroup', perhaps misspelled or defined by a module not included in the server configuration

I do want to use SuexecUserGroup but the mod_suexec module appears to be replaced for apache24 on fbsd? I can't find the site I saw this information on now.

 

[SirDice]

Invalid command 'SuexecUserGroup', perhaps misspelled or defined by a module not included in the server configuration

mod_suexec isn't loaded.

I do want to use SuexecUserGroup but the mod_suexec module appears to be replaced for apache24 on fbsd? I can't find the site I saw this information on now.

It's off by default.

SUEXEC=off: Set uid and gid for spawned processes

 

[hhmatt]

Please excuse my ignorance.

SUEXEC=off: Set uid and gid for spawned processes

So I think this goes into the httpd.conf?

I appear to have made a mistake building apache with ports to include suexec:
httpd: Syntax error on line 68 of /usr/local/apache/conf/httpd.conf: Cannot load /usr/local/libexec/apache24/mod_suexec.so into server: Cannot open "/usr/local/libexec/apache24/mod_suexec.so"

The mod_suexec.so file isn't there.

 

[SirDice]

So I think this goes into the httpd.conf?

No, that's a port option. It's off by default, so no mod_suexec gets built. Because it's off by default the package doesn't have it either. Build www/apache24 from ports and enable the option.

 

[hhmatt]

It was me missing the compile time option, all works as expected now.

Thank you SirDice! You've helped me many more times than it appears. ;D