Re: State of perchild MPM

2007-02-05 Thread Ivan Ristic
[Let's continue the discussion privately from now on as it's becoming less relevant for the httpd project...] On 2/2/07, Arnold Daniels [EMAIL PROTECTED] wrote: ... You do not need a secret, but the users who may changed are specified. In our setup user 'www-data', which has no privileges

Re: State of perchild MPM

2007-02-05 Thread devkit1
This is similar to the route I was pondering. But I believe it would add a greater degree of security to have the kernel module read a config file in the /etc directory which limits which uid's may switch to precisely which uid's. That way the parent process can fork a child and setuid for

Re: State of perchild MPM

2007-02-05 Thread devkit1
On Wed, 31 Jan 2007 11:15:23 +0100, Arnold Daniels [EMAIL PROTECTED] wrote: Hi, We run a shared hosting company as well and taken upon the route to patch the linux kernel to allow switching of user of the current process. An apache module allows you to switch the process based on the

Re: State of perchild MPM

2007-02-02 Thread Ivan Ristic
Comments below. On 1/31/07, Arnold Daniels [EMAIL PROTECTED] wrote: Hi, I can't answer all your questions, since I'm not the developer of the patch and module. I've forwarded this message to Rik Arends. But let me answer the onces I can. We've looked at running PHP as CGI, but we've noticed a

Re: State of perchild MPM

2007-02-02 Thread Arnold Daniels
Hi, Comments below. Arnold Ivan Ristic schreef: Comments below. On 1/31/07, Arnold Daniels [EMAIL PROTECTED] wrote: Hi, I can't answer all your questions, since I'm not the developer of the patch and module. I've forwarded this message to Rik Arends. But let me answer the onces I can.

Re: State of perchild MPM

2007-02-01 Thread Enrico Weigelt
* Nick Kew [EMAIL PROTECTED] wrote: On Mon, 29 Jan 2007 20:31:40 -0600 [EMAIL PROTECTED] wrote: I have gotten the impression this may be a sore subject for the list based on searching through the archives, but I do not intend to work anyone up. I have been trying to find a solution

Re: State of perchild MPM

2007-01-31 Thread Arnold Daniels
Hi, We run a shared hosting company as well and taken upon the route to patch the linux kernel to allow switching of user of the current process. An apache module allows you to switch the process based on the virtual host. Our current module also implements mass virtual hosting, but any open

Re: State of perchild MPM

2007-01-31 Thread Ivan Ristic
Hi Arnold, You have obviously spent a great deal of time implementing your solution. Personally I have always felt complete separation (e.g. what is done with FastCGI) is a more robust approach. But I don't think the issues surrounding the choices have been discussed enough in the public. If you

Re: State of perchild MPM

2007-01-31 Thread Arnold Daniels
Hi, I can't answer all your questions, since I'm not the developer of the patch and module. I've forwarded this message to Rik Arends. But let me answer the onces I can. We've looked at running PHP as CGI, but we've noticed a performance drop compared to running PHP as module, effectively

Re: State of perchild MPM

2007-01-30 Thread Nick Kew
On Mon, 29 Jan 2007 20:31:40 -0600 [EMAIL PROTECTED] wrote: I have gotten the impression this may be a sore subject for the list based on searching through the archives, but I do not intend to work anyone up. I have been trying to find a solution to the problem of shared hosting with a

State of perchild MPM

2007-01-29 Thread devkit1
I have gotten the impression this may be a sore subject for the list based on searching through the archives, but I do not intend to work anyone up. I have been trying to find a solution to the problem of shared hosting with a dynamic language such as PHP. I found the old perchild MPM and it

Re: State of perchild MPM

2007-01-29 Thread William A. Rowe, Jr.
[EMAIL PROTECTED] wrote: 2. If there is, do the developers need help with it? I can write C and I am willing to help out with this. If there is not, Would anyone from the Apache team be interested in working with me so I may write such functionality, maybe for a future version of

Re: State of perchild MPM

2007-01-29 Thread William A. Rowe, Jr.
William A. Rowe, Jr. wrote: [EMAIL PROTECTED] wrote: 2. If there is, do the developers need help with it? I can write C and I am willing to help out with this. If there is not, Would anyone from the Apache team be interested in working with me so I may write such functionality, maybe for