You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by Jaysen Johnson <ja...@jaysenjohnson.com> on 2007/09/05 03:22:45 UTC
[users@httpd] Help: running apache virtualhosts as regular users and groups
Hello,
I am running Apache 2.2.4 on Fedora Core 6. This is an RPM install. I host several sites and I would like to setup each virtualhost to run as the user and group I am hosting for. How do I configure apache to do this?
Example: user joe has domain joesite.com configured in home directory /home/joe How do I make his virtualhost run as user joe and group joe?
Any help would be appreciated
Kind Regards,
--
Jaysen B. Johnson
Re: [users@httpd] Help: running apache virtualhosts as regular users and groups
Posted by Joshua Slive <jo...@slive.ca>.
On 9/5/07, Jaysen Johnson <ja...@jaysenjohnson.com> wrote:
> So 10 years of working with UNIX is not enough experience? Thanks for
> belittling me like that. I know how to patch software, just not RPMS. I
> could easily compile apache myself and patch it. I just prefer to use RPMS
> because I can update my server automatically with YUM.
>
> Now, is there anyone out there that can assist me without talking about to
> me or assuming that I do not have enough UNIX experience?
Common fella. I obviously wasn't trying to insult you. You said
yourself: "Sorry I am a newbie when it comes to this." But you didn't
seem to read the statements in the document that said "None of these
modules are apparently production-ready." and "At the present time,
you should only attempt to use one of these MPMs if you fully
understand the security and performance trade-offs involved."
Anyway, I already gave you my recommendation for you to solve the problem.
Joshua.
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] Help: running apache virtualhosts as regular users and groups
Posted by Krist van Besien <kr...@gmail.com>.
On 9/5/07, Jaysen Johnson <ja...@jaysenjohnson.com> wrote:
> So 10 years of working with UNIX is not enough experience? Thanks for
> belittling me like that. I know how to patch software, just not RPMS. I
> could easily compile apache myself and patch it. I just prefer to use RPMS
> because I can update my server automatically with YUM.
>
> Now, is there anyone out there that can assist me without talking about to
> me or assuming that I do not have enough UNIX experience?
Well, I've got 15 years of Unix experience (12 years of Linux), always
compile my own apache, and still I wouldn't attempt to solve this
problem by patching apache.
My suggestion is to follow the recipe outlined here:
http://wiki.apache.org/httpd/DifferentUserIDsUsingReverseProxy
It's simple, and you get the possibility to restart individual user's
servers without affecting others thrown in for free...
Krist
--
krist.vanbesien@gmail.com
Bremgarten b. Bern, Switzerland
--
A: It reverses the normal flow of conversation.
Q: What's wrong with top-posting?
A: Top-posting.
Q: What's the biggest scourge on plain text email discussions?
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] Help: running apache virtualhosts as regular users and groups
Posted by Jaysen Johnson <ja...@jaysenjohnson.com>.
So 10 years of working with UNIX is not enough experience? Thanks for
belittling me like that. I know how to patch software, just not RPMS. I
could easily compile apache myself and patch it. I just prefer to use RPMS
because I can update my server automatically with YUM.
Now, is there anyone out there that can assist me without talking about to
me or assuming that I do not have enough UNIX experience?
Thank You
Jaysen
----- Original Message -----
From: "Joshua Slive" <jo...@slive.ca>
To: <us...@httpd.apache.org>
Sent: Wednesday, September 05, 2007 6:21 AM
Subject: Re: [users@httpd] Help: running apache virtualhosts as regular
users and groups
> On 9/4/07, Jaysen Johnson <ja...@jaysenjohnson.com> wrote:
>> I read that and it looks like Peruser MPM and MPM-ITK would do what I
>> need.
>> However. These are patches and I am not familiar with how to patch an
>> RPM
>> install of apache. Sorry I am a newbie when it comes to this. Isn't
>> there
>> a module that I can install that would take care of this for me?
>
> Hmmm... When I wrote that document, I explicitly tried to discourage
> people from using those mpms -- especially inexperienced users like
> you. Did you really get the impression that that is a recommended
> solution.
>
> Anyway, do NOT use those mpms. If you are not familiar with patching
> then you don't have enough unix experience to understand the
> implications of running those mpms. Try one of the other solutions in
> that document instead.
>
> If you only have a few sites, by far the simplest and most performant
> solution would be simply to devote an IP address to each site and
> start an independent instance of httpd for each IP address.
>
> Joshua.
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> " from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] Help: running apache virtualhosts as regular users and groups
Posted by Joshua Slive <jo...@slive.ca>.
On 9/4/07, Jaysen Johnson <ja...@jaysenjohnson.com> wrote:
> I read that and it looks like Peruser MPM and MPM-ITK would do what I need.
> However. These are patches and I am not familiar with how to patch an RPM
> install of apache. Sorry I am a newbie when it comes to this. Isn't there
> a module that I can install that would take care of this for me?
Hmmm... When I wrote that document, I explicitly tried to discourage
people from using those mpms -- especially inexperienced users like
you. Did you really get the impression that that is a recommended
solution.
Anyway, do NOT use those mpms. If you are not familiar with patching
then you don't have enough unix experience to understand the
implications of running those mpms. Try one of the other solutions in
that document instead.
If you only have a few sites, by far the simplest and most performant
solution would be simply to devote an IP address to each site and
start an independent instance of httpd for each IP address.
Joshua.
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] Help: running apache virtualhosts as regular users and groups
Posted by Jaysen Johnson <ja...@jaysenjohnson.com>.
I read that and it looks like Peruser MPM and MPM-ITK would do what I need.
However. These are patches and I am not familiar with how to patch an RPM
install of apache. Sorry I am a newbie when it comes to this. Isn't there
a module that I can install that would take care of this for me?
Thanks
Jaysen
----- Original Message -----
From: "Joshua Slive" <jo...@slive.ca>
To: <us...@httpd.apache.org>
Sent: Tuesday, September 04, 2007 6:53 PM
Subject: Re: [users@httpd] Help: running apache virtualhosts as regular
users and groups
> On 9/4/07, Jaysen Johnson <ja...@jaysenjohnson.com> wrote:
>>
>>
>> Hello,
>>
>> I am running Apache 2.2.4 on Fedora Core 6. This is an RPM install. I
>> host
>> several sites and I would like to setup each virtualhost to run as the
>> user
>> and group I am hosting for. How do I configure apache to do this?
>>
>> Example: user joe has domain joesite.com configured in home directory
>> /home/joe How do I make his virtualhost run as user joe and group joe?
>>
>> Any help would be appreciated
>
> You should probably start by reading this:
> http://wiki.apache.org/httpd/PrivilegeSeparation
>
> Joshua.
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> " from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] Help: running apache virtualhosts as regular users and groups
Posted by Joshua Slive <jo...@slive.ca>.
On 9/4/07, Jaysen Johnson <ja...@jaysenjohnson.com> wrote:
>
>
> Hello,
>
> I am running Apache 2.2.4 on Fedora Core 6. This is an RPM install. I host
> several sites and I would like to setup each virtualhost to run as the user
> and group I am hosting for. How do I configure apache to do this?
>
> Example: user joe has domain joesite.com configured in home directory
> /home/joe How do I make his virtualhost run as user joe and group joe?
>
> Any help would be appreciated
You should probably start by reading this:
http://wiki.apache.org/httpd/PrivilegeSeparation
Joshua.
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org