suPHP mailing list

headers Brian Marshall | 8 Sep 2009 22:28

_______________________________________________
suPHP mailing list
suPHP@...
https://lists.marsching.com/mailman/listinfo/suphp

El Martes 08 Septiembre 2009, Brian Marshall escribió:
> Hi All,
>
> I can't get suPHP to compile with a stock CentOS 5.2 system. If I
> donwload the current these are my results. I get the same results
> using the most current build 0.7.1. Any help would be greatly
> appreciated.
>
> Here's my packages
>
> [root <at> smizbiz suphp-0.7.0]# yum list | grep http
> httpd.x86_64                             2.2.3-22.el5.centos.2
> installed
> httpd-devel.x86_64                       2.2.3-22.el5.centos.2
> installed
> httpd-devel.i386                         2.2.3-22.el5.centos.2
> installed
> httpd-manual.x86_64                      2.2.3-22.el5.centos.2
> installed
> [root <at> smizbiz suphp-0.7.0]# yum list | grep php
> php.x86_64                               5.1.6-23.2.el5_3
> installed
> php-cli.x86_64                           5.1.6-23.2.el5_3
> installed
>
>
> Here's my apache deps
>
> [root <at> smizbiz ~]# which apxs
> /usr/sbin/apxs
> [root <at> smizbiz ~]# which apr-1-config
> /usr/bin/apr-1-config
>
> Here's my configure string
> ./configure --prefix=/usr --sysconfdir=/etc --with-apr=/usr/bin/apr-1-
> config --with-apxs=/usr/sbin/apxs --with-apache-user=apache --with-

I looks like you're using apxs from apache 1.x?

Check "rpm -ql httpd | grep apxs2" to find out apache 2.x's version and 
maybe "rpm -qf /usr/sbin/apxs" to find where apxs comes from.

Cheers,
--

-- 
Ricardo J. Barberis 
Senior SysAdmin - I+D 
Dattatec.com :: Soluciones de Web Hosting 
Su Hosting hecho Simple..! 

_______________________________________________
suPHP mailing list
suPHP <at> lists.marsching.com
https://lists.marsching.com/mailman/listinfo/suphp

hi, I need to execute a command under an account different from that  
which runs my web server.  perhaps I'm failing to understand what  
mod_suphp is meant to do but I can't seem to figure out proper usage.   
this is what I generally would do to execute a shell command:

<? echo exec("whoami"); ?>

if I wanted it to run under user "rpm", how would I do it?  I've read  
the docs but am no brighter for them.

thx - e

Hello Eric,

this depends with what options you did compile the suPHP.

--with-setid-mode=MODE

There are 3 possibilities:

"owner":    Run scripts with owner UID/GID, so your .php script must be
owned by "rpm"

"force":    Run scripts with UID/GID specified in Apache configuration,
not recommended.

"paranoid": Same as "owner", but you have to also specify the "allowed"
users/groups in the Apache configuration

So you .php script has to be owned by "rpm" AND in the apache
config you have to specify

suPHP_UserGroup rpm andrpmgroup

Todays "paranoid" is recommended.

André

> > -----Original Message-----
> > From: Erick Calder [mailto:e <at> arix.com]
> > Sent: Thursday, September 17, 2009 1:24 AM
> > To: suphp@...
> > Subject: [suPHP] how to execute a command?
> >
> > hi, I need to execute a command under an account different from that
> > which runs my web server.  perhaps I'm failing to understand what
> > mod_suphp is meant to do but I can't seem to figure out proper 
usage.
> > this is what I generally would do to execute a shell command:
> >
> > <? echo exec("whoami"); ?>
> >
> > if I wanted it to run under user "rpm", how would I do it?  I've 
read
> > the docs but am no brighter for them.
> >
> > thx - e
> >
> > _______________________________________________
> > suPHP mailing list
> > suPHP@...
> > https://lists.marsching.com/mailman/listinfo/suphp

duh!  suggestion: add that small fact to your FAQ for nitwits like me :)

ok, so in /etc/suphp.conf I have the following section:

[handlers]
x-httpd-suphp=php:/usr/bin/php-cgi

and in /etc/httpd/conf.d/mod_suphp.conf I have:

LoadModule suphp_module modules/mod_suphp.so
suPHP_Engine on
suPHP_AddHandler x-httpd-suphp
AddHandler x-httpd-suphp .suphp

I then put a script in some directory (/var/www/arix.com/tst.suphp,  
chowned as rpm:rpm)... put it appears that the directory where I place  
it must also be owned by rpm... so I [mkdir /var/www/arix.com/rpm;  
chown rpm:rpm ...] and moved the script there, but the parent  
directory needs to be owned by rpm too...

so I put the following directive in my httpd.conf and moved the script  
there:

<directory /home/rpm>
order allow,deny
allow from all
</directory>

alias /rpm /home/rpm

but then I get: "File "/home/rpm/tst.suphp" is not in document root of  
Vhost "/var/www/arix.com"... ok.  I found and set  
check_vhost_docroot=false within the config file and then I get:  
"Directory "/home/rpm" is writeable by group".  grr... so I create / 
home/rpm/tst and chmod g-w, move the script there but it complains  
about the parent... I found allow_directory_group_writeable and set it  
to true. so now it works.  yikes!

I would really like to just have the script in my /var/www/arix.com  
directory but it and its parents cannot be owned by rpm... I don't see  
a directive to turn that need for ownership.

so what's the typical setup?  where do you guys put things?

(sorry for the lengthy message)

- e

On Sep 16, 2009, at 5:06 PM, Dave D wrote:

> Hi,
>
> To run it as the user RPM chown the file to the rpm user
>
> suPHP runs the PHP script as whoever has ownership on the file.
>
> Regards,
> --Matt
>
>
> On 17/09/2009, at 9:23 AM, Erick Calder wrote:
>
>> hi, I need to execute a command under an account different from that
>> which runs my web server.  perhaps I'm failing to understand what
>> mod_suphp is meant to do but I can't seem to figure out proper usage.
>> this is what I generally would do to execute a shell command:
>>
>> <? echo exec("whoami"); ?>
>>
>> if I wanted it to run under user "rpm", how would I do it?  I've read
>> the docs but am no brighter for them.
>>
>> thx - e
>>
>> _______________________________________________
>> suPHP mailing list
>> suPHP@...
>> https://lists.marsching.com/mailman/listinfo/suphp
>

On Sep 16, 2009, at 10:38 PM, Andre Schild wrote:

> this depends with what options you did compile the suPHP.

well... it's an RPM (someone else compiled it) and the docs don't say  
how it was compiled... but I've got it to work, I'm now just trying to  
figure out how to make it more to my liking (see the other reply).

one other question: when I run my script, $HOME isn't defined... this  
means that rpm cannot find ~/.rpmmacros and stuff breaks.  I gather I  
can just define it when I system() my commands but how come it's not  
there?

On Sep 16, 2009, at 10:38 PM, Andre Schild wrote:

> Hello Eric,
>
> this depends with what options you did compile the suPHP.
>
> --with-setid-mode=MODE
>
> There are 3 possibilities:
>
> "owner":    Run scripts with owner UID/GID, so your .php script must  
> be
> owned by "rpm"
>
> "force":    Run scripts with UID/GID specified in Apache  
> configuration,
> not recommended.
>
> "paranoid": Same as "owner", but you have to also specify the  
> "allowed"
> users/groups in the Apache configuration
>
> So you .php script has to be owned by "rpm" AND in the apache
> config you have to specify
>
> suPHP_UserGroup rpm andrpmgroup
>
>
>
> Todays "paranoid" is recommended.
>
>
> André
>
>
>>> -----Original Message-----
>>> From: Erick Calder [mailto:e <at> arix.com]
>>> Sent: Thursday, September 17, 2009 1:24 AM
>>> To: suphp@...
>>> Subject: [suPHP] how to execute a command?
>>>
>>> hi, I need to execute a command under an account different from that
>>> which runs my web server.  perhaps I'm failing to understand what
>>> mod_suphp is meant to do but I can't seem to figure out proper
> usage.
>>> this is what I generally would do to execute a shell command:
>>>
>>> <? echo exec("whoami"); ?>
>>>
>>> if I wanted it to run under user "rpm", how would I do it?  I've
> read
>>> the docs but am no brighter for them.
>>>
>>> thx - e
>>>
>>> _______________________________________________
>>> suPHP mailing list
>>> suPHP@...
>>> https://lists.marsching.com/mailman/listinfo/suphp
>
>
> _______________________________________________
> suPHP mailing list
> suPHP@...
> https://lists.marsching.com/mailman/listinfo/suphp

You could launch a shell which has those variables

---
//Alex

On Thu, Sep 17, 2009 at 9:59 AM, Erick Calder <e <at> arix.com> wrote:
> one other question: when I run my script, $HOME isn't defined... this
> means that rpm cannot find ~/.rpmmacros and stuff breaks.  I gather I
> can just define it when I system() my commands but how come it's not
> there?
>
> On Sep 16, 2009, at 10:38 PM, Andre Schild wrote:
>
>> Hello Eric,
>>
>> this depends with what options you did compile the suPHP.
>>
>> --with-setid-mode=MODE
>>
>> There are 3 possibilities:
>>
>> "owner":    Run scripts with owner UID/GID, so your .php script must
>> be
>> owned by "rpm"
>>
>> "force":    Run scripts with UID/GID specified in Apache
>> configuration,
>> not recommended.
>>
>> "paranoid": Same as "owner", but you have to also specify the
>> "allowed"
>> users/groups in the Apache configuration
>>
>> So you .php script has to be owned by "rpm" AND in the apache
>> config you have to specify
>>
>> suPHP_UserGroup rpm andrpmgroup
>>
>>
>>
>> Todays "paranoid" is recommended.
>>
>>
>> André
>>
>>
>>>> -----Original Message-----
>>>> From: Erick Calder [mailto:e <at> arix.com]
>>>> Sent: Thursday, September 17, 2009 1:24 AM
>>>> To: suphp@...
>>>> Subject: [suPHP] how to execute a command?
>>>>
>>>> hi, I need to execute a command under an account different from that
>>>> which runs my web server.  perhaps I'm failing to understand what
>>>> mod_suphp is meant to do but I can't seem to figure out proper
>> usage.
>>>> this is what I generally would do to execute a shell command:
>>>>
>>>> <? echo exec("whoami"); ?>
>>>>
>>>> if I wanted it to run under user "rpm", how would I do it?  I've
>> read
>>>> the docs but am no brighter for them.
>>>>
>>>> thx - e
>>>>
>>>> _______________________________________________
>>>> suPHP mailing list
>>>> suPHP@...
>>>> https://lists.marsching.com/mailman/listinfo/suphp
>>
>>
>> _______________________________________________
>> suPHP mailing list
>> suPHP@...
>> https://lists.marsching.com/mailman/listinfo/suphp
>
>
> _______________________________________________
> suPHP mailing list
> suPHP@...
> https://lists.marsching.com/mailman/listinfo/suphp
>

On Wed, Sep 16, 2009 at 04:23:43PM -0700, Erick Calder wrote:
> hi, I need to execute a command under an account different from that  
> which runs my web server.  perhaps I'm failing to understand what  
> mod_suphp is meant to do but I can't seem to figure out proper usage.   
> this is what I generally would do to execute a shell command:
> 
> <? echo exec("whoami"); ?>
> 
> if I wanted it to run under user "rpm", how would I do it?  I've read  
> the docs but am no brighter for them.
suPHP will execute the script as whatever user specified in the virtual host configuration, or if you're
using mod_userdir then it will execute things in ~/public_html as the user whose home directory it is. So
you have one of two options:

1. Enable mod_userdir and put your script in ~rpm/public_html directory.

2. Create a  <Directory>, <Location> or <VirtualHost> block with suPHP_UserGroup rpm rpm and place your
php file there. ( This assumes "force" or "paranoid" was used in configure, with mode "owner" you can just
chown rpm:rpm your script and it should work ).
> 
> thx - e
> 
> _______________________________________________
> suPHP mailing list
> suPHP@...
> https://lists.marsching.com/mailman/listinfo/suphp

thanks Richard.  I've gone with option #2 though I had to fiddle with  
a number of options in the config to get it all right.  great module  
though!

On Sep 16, 2009, at 6:36 PM, Richard James Salts wrote:

> On Wed, Sep 16, 2009 at 04:23:43PM -0700, Erick Calder wrote:
>> hi, I need to execute a command under an account different from that
>> which runs my web server.  perhaps I'm failing to understand what
>> mod_suphp is meant to do but I can't seem to figure out proper usage.
>> this is what I generally would do to execute a shell command:
>>
>> <? echo exec("whoami"); ?>
>>
>> if I wanted it to run under user "rpm", how would I do it?  I've read
>> the docs but am no brighter for them.
> suPHP will execute the script as whatever user specified in the  
> virtual host configuration, or if you're using mod_userdir then it  
> will execute things in ~/public_html as the user whose home  
> directory it is. So you have one of two options:
>
> 1. Enable mod_userdir and put your script in ~rpm/public_html  
> directory.
>
> 2. Create a  <Directory>, <Location> or <VirtualHost> block with  
> suPHP_UserGroup rpm rpm and place your php file there. ( This  
> assumes "force" or "paranoid" was used in configure, with mode  
> "owner" you can just chown rpm:rpm your script and it should work ).
>>
>> thx - e
>>
>> _______________________________________________
>> suPHP mailing list
>> suPHP@...
>> https://lists.marsching.com/mailman/listinfo/suphp
>
> _______________________________________________
> suPHP mailing list
> suPHP@...
> https://lists.marsching.com/mailman/listinfo/suphp

Mon	Tue	Wed	Thu	Fri	Sat	Sun

	1	2	3	4	5	6
7	8	9	10	11	12	13
14	15	16	17	18	19	20
21	22	23	24	25	26	27
28	29	30

2	May 2013
1	April 2013
1	March 2013
1	January 2013
2	December 2012
1	October 2012
3	September 2012
2	August 2012
2	July 2012
10	June 2012
7	May 2012
19	March 2012
8	February 2012
3	January 2012
9	December 2011
4	November 2011
3	October 2011
1	August 2011
11	July 2011
3	June 2011
10	May 2011
2	April 2011
5	March 2011
12	February 2011
20	January 2011
5	December 2010
16	November 2010
3	October 2010
11	September 2010
8	August 2010
9	July 2010
7	June 2010
7	April 2010
40	March 2010
13	February 2010
4	January 2010
22	December 2009
20	November 2009
35	October 2009
16	September 2009
5	August 2009
10	July 2009
9	June 2009
35	May 2009
6	April 2009
14	March 2009
2	February 2009
24	January 2009
21	December 2008
9	November 2008
11	October 2008
21	September 2008
9	August 2008
21	July 2008
43	June 2008
63	May 2008
128	April 2008
25	March 2008
31	February 2008
30	January 2008
21	December 2007
22	November 2007
4	October 2007
25	September 2007
26	August 2007
19	July 2007
30	June 2007
10	May 2007
12	April 2007
22	March 2007
23	February 2007
34	January 2007
17	December 2006
5	November 2006

Re: Can't compile on CentOS 5.2

Re: Can't compile on CentOS 5.2

how to execute a command?

Re: how to execute a command?

Re: how to execute a command?

Re: how to execute a command?

Re: how to execute a command?

Re: how to execute a command?

Re: how to execute a command?

Re: how to execute a command?