switching from mod_fastcgi to mod_fcgid

--------------060801020702090601030301
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit

Hello,

I would like to switch from mod_fastcgi to mod_fcgid.
In my current configuration I have something like:

-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-

jcigar@bebif cgi-bin % pwd
/usr/local/www/apache22/cgi-bin
jcigar@bebif cgi-bin % cat tapir-php-wrapper.fcgi
#!/bin/sh

PHPRC="/usr/local/etc/php.ini"
export PHPRC

PHP_FCGI_CHILDREN=3
export PHP_FCGI_CHILDREN

PHP_FCGI_MAX_REQUESTS=10000
export PHP_FCGI_MAX_REQUESTS

exec /usr/local/bin/php-cgi -b 127.0.0.1:5000

-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-

Every webapp runs under a dedicated user, so I'm using sudo -u ... to
launch the PHP "wrapper", and then I'm using the FastCgiExternalServer
directive of mod_fastcgi to "link" the php-cgi processes to Apache. I
have something like this in my Apache configuration file:

-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-

FastCgiExternalServer
/usr/local/www/apache22/cgi-bin/tapir-php-wrapper.fcgi -host
127.0.0.1:5000 -idle-timeout 1800

Action php-fastcgi /cgi-bin/tapir-php-wrapper.fcgi

AddHandler php-fastcgi .php

-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-

The advantage of this configuration is that I can launch the process
under a dedicated user without using mod_suexec (which has more
constraints).

I wondered if there is a FastCgiExternalServer equivalent in mod_fcgid
and also if mod_suexec is the only way in mod_fcgid to launch a PHP
webapp under a dedicated user?

Thanks,
Julien

--
No trees were killed in the creation of this message.
However, many electrons were terribly inconvenienced.

--------------060801020702090601030301
Content-Type: text/x-vcard; charset=utf-8;
name="jcigar.vcf"
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment;
filename="jcigar.vcf"

begin:vcard
fn:Julien Cigar
n:Cigar;Julien
org;quoted-printable:Belgian Biodiversity Platform;ULB (Université Libre de Bruxelles)
adr:;;;Brussels;;;Belgium
email;internet:jcigar@ulb.ac.be
tel;work:+32(0)26505752
x-mozilla-html:FALSE
url:http://www.biodiversity.be
version:2.1
end:vcard



--------------060801020702090601030301
Content-Type: text/plain; charset=us-ascii


------------------------------------------------------------ ---------
The official User-To-User support forum of the Apache HTTP Server Project.
See for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
--------------060801020702090601030301--

Re: switching from mod_fastcgi to mod_fcgid

On Thu, Oct 7, 2010 at 6:42 AM, Julien Cigar wrote:
> Hello,
>
> I would like to switch from mod_fastcgi to mod_fcgid.
> In my current configuration I have something like:
>
> -%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-
>
> jcigar@bebif cgi-bin % pwd
> /usr/local/www/apache22/cgi-bin
> jcigar@bebif cgi-bin % cat tapir-php-wrapper.fcgi
> #!/bin/sh
>
> PHPRC="/usr/local/etc/php.ini"
> export PHPRC
>
> PHP_FCGI_CHILDREN=3
> export PHP_FCGI_CHILDREN
>
> PHP_FCGI_MAX_REQUESTS=10000
> export PHP_FCGI_MAX_REQUESTS
>
> exec /usr/local/bin/php-cgi -b 127.0.0.1:5000
>
> -%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-
>
> Every webapp runs under a dedicated user, so I'm using sudo -u ... to launch
> the PHP "wrapper", and then I'm using the FastCgiExternalServer directive of
> mod_fastcgi to "link" the php-cgi processes to Apache. I have something like
> this in my Apache configuration file:
>
> -%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-
>
> FastCgiExternalServer /usr/local/www/apache22/cgi-bin/tapir-php-wrapper.fcgi
> -host 127.0.0.1:5000 -idle-timeout 1800
>
> Action php-fastcgi /cgi-bin/tapir-php-wrapper.fcgi
>
> AddHandler php-fastcgi .php
>
> -%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-
>
> The advantage of this configuration is that I can launch the process under a
> dedicated user without using mod_suexec (which has more constraints).
>
> I wondered if there is a FastCgiExternalServer equivalent in mod_fcgid and

no

long-term solution for externally managed FastCGI applications is
mod_proxy_fcgi in future Apache 2.4

(or keep using mod_fastcgi)

> also if mod_suexec is the only way in mod_fcgid to launch a PHP webapp under
> a dedicated user?

yes

------------------------------------------------------------ ---------
The official User-To-User support forum of the Apache HTTP Server Project.
See for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

Re: switching from mod_fastcgi to mod_fcgid

--------------010101090105040002070606
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit

On 10/07/2010 13:34, Jeff Trawick wrote:
> On Thu, Oct 7, 2010 at 6:42 AM, Julien Cigar wrote:
>> Hello,
>>
>> I would like to switch from mod_fastcgi to mod_fcgid.
>> In my current configuration I have something like:
>>
>> -%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-
>>
>> jcigar@bebif cgi-bin % pwd
>> /usr/local/www/apache22/cgi-bin
>> jcigar@bebif cgi-bin % cat tapir-php-wrapper.fcgi
>> #!/bin/sh
>>
>> PHPRC="/usr/local/etc/php.ini"
>> export PHPRC
>>
>> PHP_FCGI_CHILDREN=3
>> export PHP_FCGI_CHILDREN
>>
>> PHP_FCGI_MAX_REQUESTS=10000
>> export PHP_FCGI_MAX_REQUESTS
>>
>> exec /usr/local/bin/php-cgi -b 127.0.0.1:5000
>>
>> -%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-
>>
>> Every webapp runs under a dedicated user, so I'm using sudo -u ... to launch
>> the PHP "wrapper", and then I'm using the FastCgiExternalServer directive of
>> mod_fastcgi to "link" the php-cgi processes to Apache. I have something like
>> this in my Apache configuration file:
>>
>> -%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-
>>
>> FastCgiExternalServer /usr/local/www/apache22/cgi-bin/tapir-php-wrapper.fcgi
>> -host 127.0.0.1:5000 -idle-timeout 1800
>>
>> Action php-fastcgi /cgi-bin/tapir-php-wrapper.fcgi
>>
>> AddHandler php-fastcgi .php
>>
>> -%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-%-
>>
>> The advantage of this configuration is that I can launch the process under a
>> dedicated user without using mod_suexec (which has more constraints).
>>
>> I wondered if there is a FastCgiExternalServer equivalent in mod_fcgid and
>
> no
>
> long-term solution for externally managed FastCGI applications is
> mod_proxy_fcgi in future Apache 2.4

Yes, I plan to switch to mod_proxy_fcgi once Apache 2.4 is out (as I did
with mod_jk -> mod_proxy_ajp)

>
> (or keep using mod_fastcgi)
>

I'm happy with mod_fastcgi in fact, but ~once a month I have to restart
Apache because it doesn't respond to requests anymore (I get a "The
connection was reset" in my browser) ... and I suspect that mod_fastcgi
*could* be the cause of this (or mod_passenger)

>> also if mod_suexec is the only way in mod_fcgid to launch a PHP webapp under
>> a dedicated user?
>
> yes
>

That's what I thought ..

Thanks for your answer,
Julien

> ------------------------------------------------------------ ---------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> " from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>


--
No trees were killed in the creation of this message.
However, many electrons were terribly inconvenienced.

--------------010101090105040002070606
Content-Type: text/x-vcard; charset=utf-8;
name="jcigar.vcf"
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment;
filename="jcigar.vcf"

begin:vcard
fn:Julien Cigar
n:Cigar;Julien
org;quoted-printable:Belgian Biodiversity Platform;ULB (Université Libre de Bruxelles)
adr:;;;Brussels;;;Belgium
email;internet:jcigar@ulb.ac.be
tel;work:+32(0)26505752
x-mozilla-html:FALSE
url:http://www.biodiversity.be
version:2.1
end:vcard



--------------010101090105040002070606
Content-Type: text/plain; charset=us-ascii


------------------------------------------------------------ ---------
The official User-To-User support forum of the Apache HTTP Server Project.
See for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
--------------010101090105040002070606--