On 07/06/2010 08:28, Richard Hector wrote:
Hi all,

I'm getting really confused - the docs on FastCGI seem a little skimpy,
and other resources are how various people may have made it work, and I
haven't managed to get a configuration that works yet.

My objective is to run a particular PHP site as a particular user, for
security reasons. My understanding is that I can't use SuExec for
mod_php, so I have to use CGI or FastCGI, of which FastCGI is faster :-)

It seems that FastCgiExternalServer keeps everything nicely separated,
so that's the choice I'm going with at the moment.

Now is the point at which I get lost, because there are so many
different configs thrown up by google.

Some use Alias directives, some use AddType and Action directives; some
use real-looking paths for the first argument to FastCgiExternalServer
and others don't.

I'm pretty sure I got to a point where everything worked, except that a
url with no path didn't return index.php - the DirectoryIndex directive
appeared to have no effect, and php tried to run with no content.

Unfortunately I don't have that config working at the moment; I've
hacked around a bit aimlessly and lost track - and anyway, I should
really replicate it without client details before posting a config on
here.

So what I guess I'm asking for is a simple config that works, of which I
can ask explanations of the bits I don't understand - I think that's the
real problem with all the bits I've found, is that there are minimal
explanations of _why_ a particular directive is used, and why.

I'll try to get an experimental config up a bit later (hometime here
now).

Oh - the other thing is I need to support this in a Name based
VirtualHost - and only one. The other sites should continue to work on
mod_php, if that's possible.

I'm running Debian Lenny (Apache 2.2.9, PHP 5.2.6).

That's probably a big fail for 'Asking smart questions' -
sorry :-( Hopefully I'll be more coherent tomorrow, but I figured I'd
take advantage of my timezone difference from most of the world by
getting this out there now :-)

Thanks,

Richard


I answered something like this on the fbsd mailing list a year ago: http://lists.freebsd.org/pipermail/freebsd-questions/2009-July/202133.html

hope it helps ..



---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See<URL:http://httpd.apache.org/userslist.html>  for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
    "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



--
No trees were killed in the creation of this message.
However, many electrons were terribly inconvenienced.

<<attachment: jcigar.vcf>>

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
   "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org

Reply via email to