mod_fcgid and mpm-itk

[AZ 9901]

Hello all,

I run into troubles using mod_fcgid (for PHP) and mpm-itk together.

As soon as I add the ITK directive "AssignUserID" to my vhost, specifying a different user than the global Apache one, mod_fcgid fails returning the following error :
[Sun Jul 28 15:09:37 2013] [emerg] [client x.x.x.x] (13)Permission denied: mod_fcgid: can't lock process table in pid 1973

I noted that the socket file is created with permissions 700.
So, as a test, I tried the following, in fcgid_proc_unix.c, I replaced :
rv = apr_file_perms_set(unix_addr.sun_path,
APR_FPROT_UREAD|APR_FPROT_UWRITE|APR_FPROT_UEXECUTE);
by :
rv = apr_file_perms_set(unix_addr.sun_path,
APR_FPROT_UREAD|APR_FPROT_UWRITE|APR_FPROT_UEXECUTE|APR_FPROT_GREAD|APR_FPROT_GWRITE|APR_FPROT_GEXECUTE|APR_FPROT_WREAD|APR_FPROT_WWRITE|APR_FPROT_WEXECUTE);

The socket is then created with 777 permissions, but I does not solve the issue.

Certainly that the issue is somewhere else, perhaps Apache tries to instance mod_fcgid with global Apache user instead of ITK defined user.

Could you help me with that ?
Perhaps a patch already exists ?

Thank you very much !

Best regards,

Ben

[William A. Rowe Jr.]

On Sun, 28 Jul 2013 15:17:41 +0200

Post by AZ 9901
Hello all,
I run into troubles using mod_fcgid (for PHP) and mpm-itk together.
As soon as I add the ITK directive "AssignUserID" to my vhost,
specifying a different user than the global Apache one, mod_fcgid
fails returning the following error : [Sun Jul 28 15:09:37 2013]
[emerg] [client x.x.x.x] (13)Permission denied: mod_fcgid: can't lock
process table in pid 1973
I noted that the socket file is created with permissions 700.
So, as a test, I tried the following, in fcgid_proc_unix.c, I
replaced : rv = apr_file_perms_set(unix_addr.sun_path,
APR_FPROT_UREAD|APR_FPROT_UWRITE|APR_FPROT_UEXECUTE);
rv = apr_file_perms_set(unix_addr.sun_path,
APR_FPROT_UREAD|APR_FPROT_UWRITE|APR_FPROT_UEXECUTE|APR_FPROT_GREAD|APR_FPROT_GWRITE|APR_FPROT_GEXECUTE|APR_FPROT_WREAD|APR_FPROT_WWRITE|APR_FPROT_WEXECUTE);
The socket is then created with 777 permissions, but I does not solve the issue.
Certainly that the issue is somewhere else, perhaps Apache tries to
instance mod_fcgid with global Apache user instead of ITK defined
user.
Could you help me with that ?

You might also try any mpm-itk user list since the behavior is going
to be mpm-specific. And please, fill us in if you learn more!