EasyApache with mpm-itk

[WebJIVE]

@cPanelTristan, thanks for the update. Please keep posting to this thread with information on adding this to EasyApache.

[cPanelTristan]

You can easily add it to EasyApache using the guide I linked in my last response. I wouldn't want to re-iterate the full guide here. If you do have questions on the instructions, though, please let me know. Thanks!

[WebJIVE]

Sorry, meant to keep us updated on if cPanel will include this as part of a future build I would rather wait on your guys expertise to make sure this is baked and ready for production.

[swany]

I followed the guide and have mpm-itk working with mod_php

but all the processes are running as nobody.

mkdir -p /usr/local/apache/conf/userdata/std/2/username
echo "AssignUserID username username" >> /usr/local/apache/conf/userdata/std/2/username
/scripts/ensure_vhost_includes --user=username

This doesn't work properly as it says

-bash: /usr/local/apache/conf/userdata/std/2/username: Is a directory

if i just create a file with the name username with AssignUserID username username in it
and then run ensure_vhost_includes.

it restarts the apache process and everything is works but the process is still called nobody.

what am i doing wrong?

[cPanelTristan]

You are correct. Revised the guide to change to having /usr/local/apache/conf/userdata/std/2/username/mpm.conf for the name of the file, since this is a configuration file for the include.

[swany]

perfect its running now.

is php supposed to run as the user? as i am getting problems when using a php upload script, it returns an empty response.

This happens even when the folder is owned by nobody:nobody, username:nobody and username:username.
and when permissions are 777

here's the script i wrote to add every user

#!/bin/bash
for user in `ls /var/cpanel/users`; do
mkdir -p /usr/local/apache/conf/userdata/std/2/${user}
echo "AssignUserID ${user} ${user}" >> /usr/local/apache/conf/userdata/std/2/${user}/mpm.conf
/scripts/ensure_vhost_includes --user=${user}
done

[cPanelTristan]

Try running the scripts as the user, since they do run that way now rather than nobody. That's the point of MPM ITK.

[swany]

Try running the scripts as the user, since they do run that way now rather than nobody. That's the point of MPM ITK.

yeah i tried to do that by changing the filename / folder owners / groups to the username / username but it still wouldn't work.

I've moved on to trying to get php-fpm working as that is the recommended way by php.net

[britsenigma]

[Tue Jan 03 05:20:39 2012] [error] [client 94.15.87.216] Premature end of script headers: index.php
[Tue Jan 03 05:20:44 2012] [error] [client 66.249.72.187] SecurityException in Application.cpp:182: Calling user is not webserver user!

Doesn't work with suphp selected, someone said it would in one of these forum posts.

[britsenigma]

Also getting a lot of segfaults and apache crashing out, first time I've had this out of any configuration I've tried. Shame, because my sites are massively quicker with this setup.

[britsenigma]

Doesn't work with ModSecurity out of the box either.

[cPanelTristan]

[Tue Jan 03 05:20:39 2012] [error] [client 94.15.87.216] Premature end of script headers: index.php
[Tue Jan 03 05:20:44 2012] [error] [client 66.249.72.187] SecurityException in Application.cpp:182: Calling user is not webserver user!

Doesn't work with suphp selected, someone said it would in one of these forum posts.

There wouldn't be a reason to use MPM ITK with suPHP, since you would actually have suPHP running even slower. MPM ITK should only be used with DSO.