[suPHP] Best configuration for virtual users

[Wouter de Jong]

On Thu, May 01, 2008 at 12:14:31PM +0100, Jorge Bastos wrote:

Jorge,

The patch is in suPHP since version 0.5.2, as I mentioned in me previous
reply to you. So I can't send it again :)

> I searched for for mailling list and found this:
> 
> http://lists.marsching.com/pipermail/suphp/2004-February/000288.html

Very old ;)
 
> but the fact is that I compiled suphp with:
> 
> sh configure --with-apxs=/usr/bin/apxs2 --with-min-uid=5000
> --with-min-gid=4901 --with-apache-user=www-data
> --with-logfile=/var/log/suphp/suphp.log CPPFLAGS=-I/usr/include/apr-0
> --sysconfdir=/etc/suphp --disable-checkuid --disable-checkgid
> --with-setid-mode=paranoid --disable-checkpath
> 
> so checkuid and checkguid is there, unless the "suPHP_UserGroup" has to be
> inside a ifmodule tag?

checkuid and checkgid are no longer used.
Sebastian : --disable-check{uid,gid} are still mentioned in doc/INSTALL, 
but no longer used since version 0.6 ... you might want to remove it.


So as I told you before ... the feature should work since it's
built-in. However, my setup runs on FreeBSD and not on Linux.
Since I see an API.cpp and API_Linux.cpp, there is a very tiny
possibility it's broken on Linux but I couldn't find any reason for it
in a glance when looking at the 0.6.3 sources.

I'm not able to test it on Linux right now either (packing for a tiny vacation), 
so maybe someone else on this list could do this to see if it's something 
wrong on Jorge's box or it's really broken on Linux ?

It's as simple as specifying an unused uid in httpd.conf for
suPHP_UserGroup, like :

suPHP_UserGroup #12345 users

(You can ofcourse, also specify an (unused) gid)

And then ofcourse set correct permissions + uid-owner on the dir's +
script.

Regards,

-- 
WideXS                          http://www.widexs.nl
Wouter de Jong                  Jr. Hosting Architect
Tel +31 (0)20 7570700           Fax +31 (0)20 7570799
Zekeringstraat 43,		1014 BV Amsterdam, NL