suexec and Apache 2.0.52 ?

[Alexander Dalloz]

Am Di, den 14.12.2004 schrieb Timothy Ha um 21:59:

> I am using Apache 2 with suexec enabled at my web server. OS is RHEL 3, 
> but I hope Fedora people also knows the solution.

It is though not the right list to ask this.

> I compiled the stuff by downloading httpd-2.0.52.tar.gz from 
> httpd.apache.org and putting it into /usr/src/redhat/SOURCES
> rpmbuild -bb SPECS/httpd.spec (the spec from the tar.gz) gave me rpms in 
> RPMS/i386
> 
> Normal websites run OK with old httpd.conf. I added a new virtual host 
> with parameter for suexec:
> 
> SuexecUserGroup Uname Gname
> 
> But the server ran only as usual user of httpd - in my configuration it 
> is apache. SuexecUserGroup did not change anything, even though 
> /var/log/httpd/error_log says httpd started with suexec enabled, as 
> manual says. /usr/sbin/suexec seem to have right permissions.
> 
> What might be the problem?

Probably a misconception about what suEXEC does. Please read

http://httpd.apache.org/docs-2.0/suexec.html

carefully. suEXEC does _not_ cause the vhost to run as different
user/group. I guess you would want

http://httpd.apache.org/docs-2.0/mod/perchild.html

but as the site clearly says, this module isn't stable/usable yet.

> Timothy

Alexander


-- 
Alexander Dalloz | Enger, Germany | new address - new key: 0xB366A773
legal statement: http://www.uni-x.org/legal.html
Fedora GNU/Linux Core 2 (Tettnang) on Athlon kernel 2.6.9-1.6_FC2smp 
Serendipity 22:17:04 up 4 days, 16:57, load average: 1.16, 0.91, 0.90 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: Dies ist ein digital signierter Nachrichtenteil
URL: <http://listman.redhat.com/archives/fedora-list/attachments/20041214/762fe68f/attachment-0001.sig>