From alex.hha at gmail.com  Tue Apr  4 12:41:50 2017
From: alex.hha at gmail.com (Alex Domoradov)
Date: Tue, 4 Apr 2017 13:41:50 +0300
Subject: [mpm-itk] php5-cgi with ITK
In-Reply-To: <0e244a33-3c02-d112-bae8-b98684af7320@bachsau.net>
References: <e5409208-6a74-7135-69bb-efc0df79868e@a4a.de>
 <CABnmVq7tZZCH=L=ieGA8Uq_5jCDAj37tMRo+aLk68KBhESMbWA@mail.gmail.com>
 <0e244a33-3c02-d112-bae8-b98684af7320@bachsau.net>
Message-ID: <CAK90gp4rAES44Cxt1ineQxibrLe-bt49vDVuBxn71qptedYUSg@mail.gmail.com>

> Does anyone know if this is possible, or whether I need to resort to
suexec?
sure you can. I have been using such configuration for the last 5 years
without any problems.

# yum install mod_fcgid

# cat /etc/httpd/conf.d/fcgid.confLoadModule fcgid_module
modules/mod_fcgid.soFcgidIPCDir
/var/run/mod_fcgidFcgidProcessTableFile
/var/run/mod_fcgid/fcgid_shmFcgidFixPathinfo 1

<VirtualHost *:80>    ServerAdmin webmaster at example.net    ServerName
php-cgi.example.net    DocumentRoot /vhosts/php-cgi    <FilesMatch
\.php52$>        FcgidWrapper /opt/php-5.2.17/bin/php-cgi .php52
 AddHandler fcgid-script .php52    </FilesMatch>    <FilesMatch
\.php53$>        FcgidWrapper /opt/php-5.3.28/bin/php-cgi .php53
 AddHandler fcgid-script .php53    </FilesMatch>        <FilesMatch
\.php54$>        FcgidWrapper /opt/php-5.4.28/bin/php-cgi .php54
 AddHandler fcgid-script .php54    </FilesMatch>    <Directory
/vhosts/php-cgi>        Options -Indexes +ExecCGI        AllowOverride
all        Order allow,deny        allow from all
</Directory></VirtualHost>


On Sat, Mar 25, 2017 at 5:16 PM, Bachsau Network <info at bachsau.net> wrote:

> Am 24.03.2017 um 19:30 schrieb Tino Didriksen:
>
>> You really don't want plain CGI
>>
>
> If he's not running a really busy site there's not problem in using plain
> cgi. It is the easiest way as it does not need any kind of addition
> configuration. As Jean Weisbuch already said, it will work ootb, no need
> for suexec or su_php.
>
>
> _______________________________________________
> mpm-itk mailing list
> mpm-itk at err.no
> http://lists.err.no/mailman/listinfo/mpm-itk
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.err.no/pipermail/mpm-itk/attachments/20170404/108085e6/attachment.htm>

From info at bachsau.net  Tue Apr  4 15:44:10 2017
From: info at bachsau.net (Bachsau Network)
Date: Tue, 4 Apr 2017 15:44:10 +0200
Subject: [mpm-itk] php5-cgi with ITK
In-Reply-To: <CAK90gp4rAES44Cxt1ineQxibrLe-bt49vDVuBxn71qptedYUSg@mail.gmail.com>
References: <e5409208-6a74-7135-69bb-efc0df79868e@a4a.de>
 <CABnmVq7tZZCH=L=ieGA8Uq_5jCDAj37tMRo+aLk68KBhESMbWA@mail.gmail.com>
 <0e244a33-3c02-d112-bae8-b98684af7320@bachsau.net>
 <CAK90gp4rAES44Cxt1ineQxibrLe-bt49vDVuBxn71qptedYUSg@mail.gmail.com>
Message-ID: <4780e0bc-123a-04ba-7eb7-ae2c80f58259@bachsau.net>

Am 04.04.2017 um 12:41 schrieb Alex Domoradov:
> <FilesMatch \.php52$>
> FcgidWrapper /opt/php-5.2.17/bin/php-cgi .php52
> AddHandler fcgid-script .php52
> </FilesMatch>

Those "FilesMatch" containers are useless extra workt for your server. 
Both of the directives your're using inside it already only apply to the 
file extensions defined in them.

> Order allow,deny
> allow from all

These directives are outdated and should be replaced by "Require all 
granted".

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4205 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://lists.err.no/pipermail/mpm-itk/attachments/20170404/cb043b58/attachment.bin>

From alex.hha at gmail.com  Tue Apr  4 15:54:43 2017
From: alex.hha at gmail.com (Alex Domoradov)
Date: Tue, 4 Apr 2017 16:54:43 +0300
Subject: [mpm-itk] php5-cgi with ITK
In-Reply-To: <4780e0bc-123a-04ba-7eb7-ae2c80f58259@bachsau.net>
References: <e5409208-6a74-7135-69bb-efc0df79868e@a4a.de>
 <CABnmVq7tZZCH=L=ieGA8Uq_5jCDAj37tMRo+aLk68KBhESMbWA@mail.gmail.com>
 <0e244a33-3c02-d112-bae8-b98684af7320@bachsau.net>
 <CAK90gp4rAES44Cxt1ineQxibrLe-bt49vDVuBxn71qptedYUSg@mail.gmail.com>
 <4780e0bc-123a-04ba-7eb7-ae2c80f58259@bachsau.net>
Message-ID: <CAK90gp6kQYj-wJvF1-SXj6RKHD9rnqmewBLC8h9UGvQuvZw8ww@mail.gmail.com>

> These directives are outdated and should be replaced by "Require all
granted".
You are wrong. Actually you are partially wrong ;)

It depends on apache version. For example - CentOS 6 ships with apache
2.2.x so my example will work fine. For apache 2.4.x you have to use
"Require all granted" syntax.


On Tue, Apr 4, 2017 at 4:44 PM, Bachsau Network <info at bachsau.net> wrote:

> Am 04.04.2017 um 12:41 schrieb Alex Domoradov:
>
>> <FilesMatch \.php52$>
>> FcgidWrapper /opt/php-5.2.17/bin/php-cgi .php52
>> AddHandler fcgid-script .php52
>> </FilesMatch>
>>
>
> Those "FilesMatch" containers are useless extra workt for your server.
> Both of the directives your're using inside it already only apply to the
> file extensions defined in them.
>
> Order allow,deny
>> allow from all
>>
>
> These directives are outdated and should be replaced by "Require all
> granted".
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.err.no/pipermail/mpm-itk/attachments/20170404/1a0fd081/attachment.htm>

From jean at phpnet.org  Wed Apr 26 19:37:11 2017
From: jean at phpnet.org (Jean Weisbuch)
Date: Wed, 26 Apr 2017 19:37:11 +0200
Subject: [mpm-itk] Why is MaxClientsVhost set globally?
Message-ID: <b77f48af-2d31-29ba-2eb0-07c0f6d780e3@phpnet.org>

The MaxClientsVhost setting is set globally and not per directory/VHost 
while the documentation states : "A separate MaxClients for the vhost", 
meaning only one limit applies to every VHosts while all other ITK 
parameters can also be set per directory/VHost.


 From a quick look i havent found a possible drawback to move the 
"max_client_vhost" variable from "itk_server_conf" to "itk_per_dir_conf" 
but i might have overlooked something, is there any reason not to do so?




From sgunderson at bigfoot.com  Wed Apr 26 19:45:36 2017
From: sgunderson at bigfoot.com (Steinar H. Gunderson)
Date: Wed, 26 Apr 2017 19:45:36 +0200
Subject: [mpm-itk] Why is MaxClientsVhost set globally?
In-Reply-To: <b77f48af-2d31-29ba-2eb0-07c0f6d780e3@phpnet.org>
References: <b77f48af-2d31-29ba-2eb0-07c0f6d780e3@phpnet.org>
Message-ID: <20170426174536.GA4804@sesse.net>

On Wed, Apr 26, 2017 at 07:37:11PM +0200, Jean Weisbuch wrote:
> From a quick look i havent found a possible drawback to move the
> "max_client_vhost" variable from "itk_server_conf" to "itk_per_dir_conf" but
> i might have overlooked something, is there any reason not to do so?

Yes; the check is based going through the scoreboard for other vhosts with
the same hostname. You'd have to change the scoreboard format if you wanted
to do it per-section.

/* Steinar */
-- 
Homepage: https://www.sesse.net/