[rt-users] Permissions and FastCGI

[josh]

I am asking for help with FastCGI permissions and what is needed to
restart the server cleanly. I read the FAQ and I can't seem to see
what the right settings are. The webserver runs with user httpd, and
group httpd. uid fro httpd is 15, gid for httpd is 11. gid for rt is
500 and uid is 156.

I'm still trying to get RT to work on a Sun Cobalt RaQ XTR. Frankly it
has become an interesting challenge. I was not able to get suidperl to
behave quite as expected. I did notice that a prepared package for the
server installed a wrapsuid.pl which I borrowed. This made is so that
I could execute a test program with the suidbit turned on.

I tried to test with just the command line interface but that was just
too difficult, at least given my familiarity with it. I am able to
creat a user and list a user. I tried to create a queue and send a
test email message but I configured the server so a message in error
with a recipient will come my way anyhow, so I would have to create
fake test users. This is another reason to simply get the webface
working.

I am not sure if I have mod_perl, an altered mod_perl, or no
mod_perl. I suspect I have a somewhat modified mod_perl. It looks like
FastCGI may be a better choice. (Then again I may be making a big
mistake). I would include even more data, but I will wait and see if I
get sent to a FastCGI FAQ first.

In any case I suspect I simply have some permission problems or some
typos in my httpd.conf or config.pm or maybe even in the
Makefile. Since the RaQ XTR is designed to support multiple sites for
multiple users with multiple domains it makes the mix interesting.

As soon as I try to use FastCGI the error log start spewing:

[Wed May 29 14:50:31 2002] [crit] (13)Permission denied: FastCGI: can't create s
erver "/home/opt/rt2/bin/mason_handler.fcgi": bind() failed [/tmp/fcgi/9132a2593
ef52fdcdb75f4288a4a6f1e]

every few seconds.

-- 
Josh Kuperman                       
josh at saratoga.lib.ny.us


Some output from my httpd's error log:
====================================================================
[Wed May 29 14:50:22 2002] [notice] caught SIGTERM, shutting down
[Wed May 29 14:50:25 2002] [error] (2)No such file or directory: FastCGI: access
 for server (uid 15, gid 0) failed: read not allowed by group
[Wed May 29 14:50:25 2002] [error] (2)No such file or directory: FastCGI: can't
create dynamic directory "/tmp/fcgi/dynamic": access for server (uid 15, gid 0)
failed: read not allowed by group
Site home has invalid certificate: 4999 Certificate files do not exist.
Site site1 has invalid certificate: 4999 Certificate files do not exist.
Site site2 has invalid certificate: 4999 Certificate files do not exist.
Site site3 has invalid certificate: 4999 Certificate files do not exist.
[Wed May 29 14:50:26 2002] [error] (2)No such file or directory: FastCGI: access
 for server (uid 15, gid 0) failed: read not allowed by group
[Wed May 29 14:50:26 2002] [error] (2)No such file or directory: FastCGI: can't
create dynamic directory "/tmp/fcgi/dynamic": access for server (uid 15, gid 0)
failed: read not allowed by group
[Wed May 29 14:50:26 2002] [notice] Apache/1.3.20 Sun Cobalt (Unix) mod_ssl/2.8.
4 OpenSSL/0.9.6b PHP/4.0.6 mod_auth_pam_external/0.1 mod_fastcgi/2.2.8 FrontPage
/4.0.4.3 mod_perl/1.25 configured -- resuming normal operations
[Wed May 29 14:50:26 2002] [notice] FastCGI: process manager initialized (pid 21
786)
[Wed May 29 14:50:26 2002] [crit] (13)Permission denied: FastCGI: can't create s
erver "/home/opt/rt2/bin/mason_handler.fcgi": bind() failed [/tmp/fcgi/9132a2593
ef52fdcdb75f4288a4a6f1e]