Re: [users@httpd] Apache 2.2.3 - Virtual Host

[Joshua Slive <jo...@slive.ca>]

On 8/31/06, Evaggelos Balaskas <eb...@ebalaskas.gr> wrote:
> Hi to all,
>
> i want only for a specific virtual host to give the authority
> to one user - group .
>
> in apache 1.3.x was User - Group Directive [0]
> in apache 2.0.x wan't support User-Group in VH [1]
> and was (is) the AssignUserId [2]
>
> Is there something like this (User - Group, or alike) in
> apache 2.2.x. I use the SuExecUserGroup directive [3] but
> i want the user to write file without executing cgi scripts.

This never really did what you want in any version of Apache httpd.
User/Group in 1.3 have exactly the same effect as SuExecUserGroup in
2.x.  It was renamed to avoid the confusion that you seem to have (ie,
that User/Group has any effect beyond CGI scripts).  The perchild mpm
and AssignUserId did try to do what you want, but they never really
worked and there is no active development to make them work at the
moment.

The reason this isn't supported in any version of apache httpd is
because it is extremely difficult to accomplish without severe
compromises given the unix permissions model.  One alternative is to
run each vhost as a separate apache httpd instance and then use a
reverse proxy in front of them to forward requests.

Joshua.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

Re: [users@httpd] Re: Apache 2.2.3 - Virtual Host

[Joshua Slive <jo...@slive.ca>]

On 8/31/06, Evaggelos Balaskas <eb...@ebalaskas.gr> wrote:
> Joshua Slive wrote:
>
> > The reason this isn't supported in any version of apache httpd is
> > because it is extremely difficult to accomplish without severe
> > compromises given the unix permissions model.  One alternative is to
> > run each vhost as a separate apache httpd instance and then use a
> > reverse proxy in front of them to forward requests.
> >
> > Joshua.
>
> thanks for your anwser Joshua,
> the reverse proxy is a good solution.
>
> qa: If i use a cgi script to write files in my folder
>     isn't better?

It's certainly much easier to do with cgi scripts and suexec.  The
only reason to consider the multi-apache-with-proxy approach is if you
have very specific needs, like very high performance.

Joshua.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

[users@httpd] Re: Apache 2.2.3 - Virtual Host

[Evaggelos Balaskas <eb...@ebalaskas.gr>]

Joshua Slive wrote:

> The reason this isn't supported in any version of apache httpd is
> because it is extremely difficult to accomplish without severe
> compromises given the unix permissions model.  One alternative is to
> run each vhost as a separate apache httpd instance and then use a
> reverse proxy in front of them to forward requests.
> 
> Joshua.

thanks for your anwser Joshua,
the reverse proxy is a good solution.

qa: If i use a cgi script to write files in my folder
    isn't better?

-ebal


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org