Access Errors w/FastCgiSuexec and FastCGI dynamic dir

J.A.G. <[email protected]>
Newsgroups gmane.comp.web.fastcgi.devel
Message-ID <[email protected]>
Greetings,

I'm having some accessibility issues with fastcgi. Unable to resolve them
myself, I was hoping someone might be able to set me straight.


Error starting apache:

FastCgiSuexec: "/usr/sbin/suexec" execute access for server (uid -1,
gid -1) failed: execute not allowed

Permissions are set as follows:
-rws--x--- 1 root apache 9980 Aug 23 04:41 /usr/sbin/suexec*

It appears as though suexec is setuid running as the owner rather than the
user that invoked it-- perhaps this is the problem?

Log files also reported the following errors:

FastCGI: can't create dynamic directory "/var/run/fastcgi/dynamic":
access for server (uid -1, gid -1) failed: read not allowed

Permissions are set as follows:
drws--x--- 1 apache apache 4096 Aug 26 18:20 fastcgi/
drws--x--- 1 apache apache 4096 Aug 26 18:20 dynamic/

Mandriva Linux 2006
- apache v2.0.54
- php-fcgi v5.0.4
- apache-mod_fastcgi (dso) v2.4.2
- apache-mod_suexec (dso) v4.1

Vhost.conf
-----------------------------------------------------------------------------------
<VirtualHost *:80>
SuexecUserGroup ciphex ciphex
ServerName ciphex.net
ServerAlias www.ciphex.net
DocumentRoot /home/ciphex/public_html
ErrorLog /home/ciphex/logs/error_log
CustomLog /home/ciphex/logs/access_log common
ScriptAlias /cgi-bin/ /home/ciphex/cgi-bin/
<Directory /home/ciphex/public_html>
Options Indexes IncludesNOEXEC FollowSymLinks
allow from all
AllowOverride All
</Directory>
<Directory /home/ciphex/cgi-bin>
allow from all
</Directory>
</VirtualHost>
-----------------------------------------------------------------------------------

httpd.conf
-----------------------------------------------------------------------------------
<IfModule mod_fastcgi.c>
        #FastCgiIpcDir /var/run/fastcgi/
        AddHandler fastcgi-script .fcgi
        FastCgiSuexec /usr/sbin/suexec
        FastCgiConfig -singleThreshold 100 -killInterval 300 -autoUpdate
-idle-timeout 240 -pass-header HTTP_AUTHORIZATION
      </IfModule>
      <Location /fcgi-bin/>
        Options ExecCGI
        SetHandler fastcgi-script
      </Location>
-----------------------------------------------------------------------------------

In an attempt to resolve these issues, I did a few internet queries. Some
suggested that setting FastCgiIpcDir would resolve the issue but I'm
uncertain where to point her, perhaps /tmp would suffice. I'm also curious
about the new cgi-bin the fastcgi RPM spawned /fcgi-bin/ , is this reserved
for fastcgi enabled scripts and cgi-bin/ for the genaric or non-fastcgi
enabled progs?

Thanks in advance!!!
Ciphex

___________________________________
fastcgi-developers mailing list
http://fastcgi.com/fastcgi-developers/
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.