Re: Apache virtualhosts with different user

[Berthold Cogel <cogel@rrz.uni-koeln.de>]

Gabor Gludovatz wrote:
> 
> Hello,
> 
> if I define 'user' in virtualhost section of apache's httpd.conf, then my
> cgi scripts will be running as 'user' if suexec has been set up correctly.
> It's okay. But how can I tell apache to run the whole virtualhost as
> 'user'? Including accessing html files, and especially php.
> 
> Is it possible somehow? Having read the apache docs, I haven't found
> anything useful, but there must be a solution if I don't want my users to
> run php scripts as www-data.
> 
> thx in advance
> 
> --
>  Gabor Gludovatz <ggabor@sopron.hu>  -  Phone: +36 (20) 9 109 129
>          http://www.sopron.hu/~ggabor/  -  ICQ# 861 404
> 
> --
> To UNSUBSCRIBE, email to debian-user-request@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org

Simply use 'User' and 'Group' directive in the 'Virtual Host' container. If your
virtual host setup is correct, then this will work. Oh, and each user needs his
own directory for his CGIs, which is writable only for him (see suexec docs).

We did this for several projects:

CGIs in separate directorys in /var/www/cgi/<projectname>
Data and HTML in separate directorys in /var/www/<projectname>
Set the permissions for those directorys.

The resulting vitual host in the apache configuration:

<VirtualHost www.xxx.yyy.zzz>
  ServerName <projectname>.test.de
  DocumentRoot /var/www/<projectname>/docs

  User <projectname>
  Group <projectname>

  ScriptAlias /cgi-bin/ /var/www/cgi/<projectname>/

  <Directory /var/www/<projectname>/docs>
    AllowOverride None
    Order allow,deny  
    Allow from all
  </Directory>

  <Directory /var/www/cgi/<projectname>/>
    AllowOverride None
    Options ExecCGI
    Order allow,deny  
    Allow from all
  </Directory>

</VirtualHost>



Berthold Cogel