Re: Named user & fgci-xyz.sock

Hi Justin,

You can refer to
ftp://public.dhe.ibm.com/systems/support/i/http/systems_i_software_http_docs_pase_config.pdf

NNew FastCGI directives
If HTTP server is set up to use basic user authentication and enabled to
process requests using client's
authority by specifying directive UserID %%CLIENT %%, after a valid user
login, the http server will
swap to the client's user profile and use the authority of that profile to
process requests. User may
receive an Internal Server Error when using FastCGI if the client's user
profile does not have
*ALLOBJ special authority. This is because when the fastCGI socket file is
created, by default user
*PUBLIC is excluded, and only user QTMHHTTP is given the needed *RWX
permissions, so any user
other than QTMHHTTP who does not have *ALLOBJ is excluded from using the
socket file.
To solve that problem, we introduce three new directives (IpcPublic,
IpcGroup, IpcOwner) to be used
in the fastcgi.conf file. We allow the administrator to set the public,
group, owner privileges for the
FastCGI socket(s) files.

For example:
; Authorizations of socket files (*R-read, *W-write, *X-execute)
; IpcPublic *RWX -- set *PUBLIC access value
; IpcGroup profile *RWX -- set *GROUP profile access value
; IpcOwner profile *RWX -- set *OWNER profile access value
; IpcOwner qttmhttp *RWX -- default *OWNER access values (no action
default)
IpcPublic *RWX



2018-07-28 3:35 GMT+08:00 Justin Taylor <JUSTIN@xxxxxxxxxxxxx>:

I'm still trying to get PHP working. I don't know if this problem is PHP
specific, or related to FastCGI that PHP uses.

I'm using an existing Apache server that runs under a named user. When I
start my Apache server, one or more of the following files are created:
/www/myApache/logs/fcgi-gddigon.sock

I get authority failures running PHP because my named user isn't
authorized to those files. If I specifically grant authority, PHP works but
the problem reappears when Apache is restarted.

Here's the dir authority (/www/myApache/logs):
*PUBLIC *X
QSECOFR *RWX X X X X
QTMHHTP1 *RWX
QTMHHTTP *RWX
MY_USER *RWX

Here's the file authority:
*PUBLIC *EXCLUDE
QTMHHTTP *RWX X X X X


I've posted this to the Zend forum, but I haven't gotten a response.
Anyone here have any ideas?
--
This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing
list
To post a message email: WEB400@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/web400
or email: WEB400-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/web400.