suPHP on apache, howto?

2005-09-07 Thread Birger Krägelin
Hi,

does anybody use suPHP on apache? I want to secure my server, which currently 
hosts about 600 users.

When I build apache with mod_suphp, everything goes well. In apache.base there 
is a minimal configuration for suphp but I cannot find an example for 
openpkg-setup. I read the docs for suphp and they tell, to have suphp.conf and 
to look into the logs. When I try to find the strings in the suphp binary, the 
pathnames are unusual for openpkg: /var/log/suphp.log and 
opkg/etc/suphp.conf. And I have no log.

My platform is Solaris 10 on SPARC. My apache includes mod_suphp and mod_php. 
Usual php scripts are running with mod_php.

Any help will be appreciated.

Birger
--
[EMAIL PROTECTED], Network Operations Center, Karlsruhe  
__
The OpenPKG Projectwww.openpkg.org
User Communication List  openpkg-users@openpkg.org


Re: suPHP on apache, howto?

2005-09-07 Thread Ralf S. Engelschall
On Wed, Sep 07, 2005, Birger Krägelin wrote:

 does anybody use suPHP on apache? I want to secure my server, which
 currently hosts about 600 users.

 When I build apache with mod_suphp, everything goes well. In
 apache.base there is a minimal configuration for suphp but I cannot
 find an example for openpkg-setup. I read the docs for suphp and they
 tell, to have suphp.conf and to look into the logs. When I try to find
 the strings in the suphp binary, the pathnames are unusual for openpkg:
 /var/log/suphp.log and opkg/etc/suphp.conf. And I have no log.

 My platform is Solaris 10 on SPARC. My apache includes mod_suphp and
 mod_php. Usual php scripts are running with mod_php.

Well, an investigation now showed that the suPHP code is partly broken
when it comes to those configuration parameters like paths. I've now
fixed the code, paths to both config and log files, and also let the
package install a pre-adjusted suphp.conf now. The changes you can see
under http://cvs.openpkg.org/chngview?cn=24956 and the results are
available with CURRENT's apache-1.3.33-20050907 and higher. Please give
us feedback whether the fixed fully solved your problem. I'll then MFC
them to OpenPKG 2.4 soon, too.
   Ralf S. Engelschall
   [EMAIL PROTECTED]
   www.engelschall.com

__
The OpenPKG Projectwww.openpkg.org
User Communication List  openpkg-users@openpkg.org