Re: Named user & fgci-xyz.sock

I added this to my fastcgi.conf:
IpcPublic *RWX

It works! Thank you



-----Original Message-----
From: Gang Tian [mailto:silencer018@xxxxxxxxx]
Sent: Sunday, July 29, 2018 9:56 PM
To: Web Enabling the IBM i (AS/400 and iSeries) <web400@xxxxxxxxxxxx>
Subject: Re: [WEB400] Named user & fgci-xyz.sock

Hi Justin,

You can refer to
ftp://public.dhe.ibm.com/systems/support/i/http/systems_i_software_http_docs_pase_config.pdf

NNew FastCGI directives
If HTTP server is set up to use basic user authentication and enabled to process requests using client's authority by specifying directive UserID %%CLIENT %%, after a valid user login, the http server will swap to the client's user profile and use the authority of that profile to process requests. User may receive an Internal Server Error when using FastCGI if the client's user profile does not have *ALLOBJ special authority. This is because when the fastCGI socket file is created, by default user *PUBLIC is excluded, and only user QTMHHTTP is given the needed *RWX permissions, so any user other than QTMHHTTP who does not have *ALLOBJ is excluded from using the socket file.
To solve that problem, we introduce three new directives (IpcPublic, IpcGroup, IpcOwner) to be used in the fastcgi.conf file. We allow the administrator to set the public, group, owner privileges for the FastCGI socket(s) files.

For example:
; Authorizations of socket files (*R-read, *W-write, *X-execute) ; IpcPublic *RWX -- set *PUBLIC access value ; IpcGroup profile *RWX -- set *GROUP profile access value ; IpcOwner profile *RWX -- set *OWNER profile access value ; IpcOwner qttmhttp *RWX -- default *OWNER access values (no action
default)
IpcPublic *RWX



2018-07-28 3:35 GMT+08:00 Justin Taylor <JUSTIN@xxxxxxxxxxxxx>:

I'm still trying to get PHP working. I don't know if this problem is
PHP specific, or related to FastCGI that PHP uses.

I'm using an existing Apache server that runs under a named user. When
I start my Apache server, one or more of the following files are created:
/www/myApache/logs/fcgi-gddigon.sock

I get authority failures running PHP because my named user isn't
authorized to those files. If I specifically grant authority, PHP
works but the problem reappears when Apache is restarted.

Here's the dir authority (/www/myApache/logs):
*PUBLIC *X
QSECOFR *RWX X X X X
QTMHHTP1 *RWX
QTMHHTTP *RWX
MY_USER *RWX

Here's the file authority:
*PUBLIC *EXCLUDE
QTMHHTTP *RWX X X X X


I've posted this to the Zend forum, but I haven't gotten a response.
Anyone here have any ideas?
--
This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400)
mailing list To post a message email: WEB400@xxxxxxxxxxxx To
subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/web400
or email: WEB400-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives at
https://archive.midrange.com/web400.