Hi Alan.

On Fri, 22 Jun 2001, Alan Knowles wrote:

> From a general overview standpoint each client runs one apache server
> in a chroot'ed enviroment with all libraries etc.

Exactly.


> Is it / or has this been done with the same IP virtual hosts - looking
> at the concept I could not see that this would be possible.. as 2
> apache processes from two different chroot enviroments could not both
> be listening on the same port..

If you have mutliple chroot's they have to listen to different IP
addresses if they want to listen to the same Port number. Perhaps the
really correct term would be: "One chroot Environment per IP" rather then
"per server".

The whole concept behind this HOWTO is to provide an environment where you
can host multiple Web-Servers on one physical machine, one server per
customer to be more preceise. This way you can more safly allow the usage
of PHP and CGI without having a large impacat on inter-customer-security.
Of course, to make this possible, each customer has to have his own IP on
the Server.


> or is the idea just to run 1 apache in the chroot enviroment.. anyway
> removing the posibility of any of the users from doing damage to the
> system, while allowing themselves limited ability to damage each
> other...

The would be possible also.


> If not does anybody know of any way that each virtual host could be
> run chroot in any other way....

It isn't possible to bind to applications on the same IP _and_ Port
number. This is not Apache problem, but a general specification out of the
Networking theory where you define the "adress" of an application as pair
of IP and Port Number.


Live long and prosper!
Torben Nehmer

-- 
ICQ-ID : 14148813 --- E-Mail : [EMAIL PROTECTED]
WWW    : http://www.nathan-syntronics.de --- http://www.nehmer.net


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to