From lists at euca.us Tue Jun 1 15:06:45 2010 From: lists at euca.us (Donovan Brooke) Date: Tue, 01 Jun 2010 14:06:45 -0500 Subject: [FASTCGI] FastCGI app with unique uid:gid Message-ID: <4C055A45.9080604@euca.us> Hello.. signed up a few days ago and I am not clear if this is the right place to post this question or not.. however, I'll give it a shot. Ubuntu 9.04 Apache Apache/2.2.11 and mod_fcgid So, I'm working with a company that is working on a fastCGI version of their product. It is similar to a php in that it is a scripting language. a little background before I ask the question... I want to get a fastCGI app running as a specific user:group. I've set up a (Local) Name Based virtual host that has these characteristics: ------- ServerName fastcgitest.com ServerAlias www.fastcgitest.com ServerAdmin webmaster at localhost DocumentRoot /home/fastcgitest/www ScriptAlias /cgi-bin/ /home/fastcgitest/cgi-bin/ Options FollowSymLinks AllowOverride All Options +ExecCGI SetHandler fcgi-script [snip] -------- Everything from /home/fastcgitest and down has a user:group of fastcgitest:fastcgitest I've put my fastCGI app inside the /home/fastcgitest/cgi-bin/ directory. Then, I have a .htaccess file in the /home/fastcgitest/www directory as so: -------- AddType text/html .dono Options +ExecCGI AddHandler fcgid-script .dono FCGIWrapper /home/fastcgitest/cgi-bin/WebCatalogEngine/WebDNA.fcgi .dono -------- DNS is set up in my LAN. O.K., so when I access my test file through a browser: http://fastcgitest.com/test.dono It parses just fine other than the WebDNA.fcgi cannot write to the directories owned by the unique user for that virtual host (fastcgitest:fastcgitest)... which is something I need it to do. I realized that it's because WebDNA.fcgi is still running as 'www-data' (which is the default user for apache on Ubuntu), even though the executable is owned:grouped by fastcgitest:fastcgitest So, finally I come to the question: What's the best way to get my WebDNA.fcgi app to run as user:group fastcgitest:fastcgitest? btw, I posted this question to the apache users group, and I received: http://www.itech7.com/Linux/Apache2-PHP-FastCGI-SuExec back from the site owner... looking at that now. Thanks! Donovan -- D Brooke From unique at idempot.net Tue Jun 1 16:02:46 2010 From: unique at idempot.net (Matthew Weigel) Date: Tue, 01 Jun 2010 15:02:46 -0500 Subject: [FASTCGI] FastCGI app with unique uid:gid In-Reply-To: <4C055A45.9080604@euca.us> References: <4C055A45.9080604@euca.us> Message-ID: <529d1c425970c4d1b05c3a081a70953f@patience.idempot.net> On Tue, 01 Jun 2010 14:06:45 -0500, Donovan Brooke wrote: > So, finally I come to the question: > > What's the best way to get my WebDNA.fcgi app to run as user:group > fastcgitest:fastcgitest? Take a look at mod_proxy_fcgi (http://httpd.apache.org/docs/trunk/en/mod/mod_proxy_fcgi.html) and fcgistarter (http://httpd.apache.org/docs/trunk/en/programs/fcgistarter.html) to start up your FastCGI application separately (and as a separate user:group), and have Apache talk to it. In particular, in your Apache start/stop scripts, you'll want to run something like: su -l fastcgitest -c "fcgistarter -c /path/to/WebDNA.fcgi -p 9999 -i lo -N 1" and then kill that process in the shutdown. > btw, I posted this question to the apache users group, and I received: > http://www.itech7.com/Linux/Apache2-PHP-FastCGI-SuExec back from > the site owner... looking at that now. I would recommend the approach I outline above instead to more stringently separate the privileges required to perform the separate tasks of 1- running a web service and 2- running an application that happens to make itself available through the web service. -- Matthew Weigel hacker unique & idempot . ent From lists at euca.us Fri Jun 4 15:12:38 2010 From: lists at euca.us (Donovan Brooke) Date: Fri, 04 Jun 2010 14:12:38 -0500 Subject: [FASTCGI] FastCGI app with unique uid:gid In-Reply-To: <529d1c425970c4d1b05c3a081a70953f@patience.idempot.net> References: <4C055A45.9080604@euca.us> <529d1c425970c4d1b05c3a081a70953f@patience.idempot.net> Message-ID: <4C095026.3080004@euca.us> Matthew Weigel wrote: > On Tue, 01 Jun 2010 14:06:45 -0500, Donovan Brooke wrote: > >> So, finally I come to the question: >> >> What's the best way to get my WebDNA.fcgi app to run as user:group >> fastcgitest:fastcgitest? > > Take a look at mod_proxy_fcgi > (http://httpd.apache.org/docs/trunk/en/mod/mod_proxy_fcgi.html) and > fcgistarter > (http://httpd.apache.org/docs/trunk/en/programs/fcgistarter.html) to start > up your FastCGI application separately (and as a separate user:group), and > have Apache talk to it. In particular, in your Apache start/stop scripts, > you'll want to run something like: > su -l fastcgitest -c "fcgistarter -c /path/to/WebDNA.fcgi -p 9999 -i lo > -N 1" > and then kill that process in the shutdown. > >> btw, I posted this question to the apache users group, and I received: >> http://www.itech7.com/Linux/Apache2-PHP-FastCGI-SuExec back from >> the site owner... looking at that now. > > I would recommend the approach I outline above instead to more stringently > separate the privileges required to perform the separate tasks of 1- > running a web service and 2- running an application that happens to make > itself available through the web service. Matthew, Thanks!, I will study this and let the list know it goes. I was able to get mod_suexec to work, but since I'll be writing the INSTALL.txt for this thing, I will be looking for 1.) options, and 2.) the best option. Donovan -- D Brooke From unique at idempot.net Fri Jun 4 17:06:51 2010 From: unique at idempot.net (Matthew Weigel) Date: Fri, 04 Jun 2010 16:06:51 -0500 Subject: [FASTCGI] FastCGI app with unique uid:gid In-Reply-To: <4C095026.3080004@euca.us> References: <4C055A45.9080604@euca.us> <529d1c425970c4d1b05c3a081a70953f@patience.idempot.net> <4C095026.3080004@euca.us> Message-ID: <19931f4369676739c7c0cb1e92d090cc@patience.idempot.net> On Fri, 04 Jun 2010 14:12:38 -0500, Donovan Brooke wrote: > Thanks!, I will study this and let the list know it goes. I hope it helps. I don't run Apache, so there may be Apache-specific gotchas to that general approach I'm not familiar with from looking at the documentation. -- Matthew Weigel hacker unique & idempot . ent From belstudent at gmail.com Fri Jun 11 12:58:12 2010 From: belstudent at gmail.com (BelStudent@gmail.com) Date: Fri, 11 Jun 2010 19:58:12 +0300 Subject: [FASTCGI] fastCGI for python Message-ID: <248083696.20100611195812@gmail.com> There is a version script under mod_apache, I need to remake under FastCGI, but could not get to make a "single window" for fastcgi, but works well for mod_python. Code mod_python: DocumentRoot "/var/www/z ServerName z.world.com:80 AddDefaultCharset utf-8 Options FollowSymLinks AllowOverride None Order deny,allow Deny from all Allow from all SetHandler mod_python PythonHandler util.publisher PythonDebug on PythonPath "sys.path + ['/var/www/z']" PythonOption basedir "/var/www/z" PythonOption baseurl "/" PythonAutoReload on PythonOption mod_python.session.session_type "FileSession" PythonOption mod_python.file_session.database_directory "/var/www/z/run/sessions" -------------------------- My attempt to do for FastCGI: ServerAdmin a at b.c DocumentRoot /var/www/z2 ServerName z2.world.com:80 ErrorLog /var/www/log/error.log # # SetHandler fastcgi-script # Options FollowSymLinks +ExecCGI AllowOverride All SetHandler fastcgi-script PythonHandler util.publisher PythonDebug on p.s. If I uncomment the next block: # # SetHandler fastcgi-script # then this script will work, that says that FastCGI is working, but I can not set up everything to be like mod_python ("single window") p.p.s FastCGI installed according to this article: http://www.electricmonk.nl/docs/apache_fastcgi_python/apache_fastcgi_python.html#_setup_a_fastcgi_script From headset001 at yahoo.com Sat Jun 12 06:08:54 2010 From: headset001 at yahoo.com (Doru Georgescu) Date: Sat, 12 Jun 2010 03:08:54 -0700 (PDT) Subject: [FASTCGI] undefined reference to `FCGX_GetParam' Message-ID: <943775.18323.qm@web52301.mail.re2.yahoo.com> Can't edit links on Ubuntu server 8.04 LTS. Apache and apache fastcgi module installed as packages. I installed fastcgi for c from here: http://www.fastcgi.com/dist/fcgi.tar.gz with: ./configure make make install as it says in the ~/fcgi-2.4.0/README file. I redone these with sudo because make install didn't work otherwise. I got errors when compiling an example: g++ echo-cpp.cpp /tmp/cc45IwvI.o: In function `gstdin(FCGX_Request*, char**)': echo-cpp.cpp:(.text+0x1f9): undefined reference to `FCGX_GetParam' echo-cpp.cpp:(.text+0x24b): undefined reference to `FCGX_GetParam' /tmp/cc45IwvI.o: In function `main': echo-cpp.cpp:(.text+0x36e): undefined reference to `FCGX_Init' echo-cpp.cpp:(.text+0x38c): undefined reference to `FCGX_InitRequest' [...] I tried to specify the libraries on g++ command line, but it said it can't find the file. There might be other configs, but they are not mentioned here: http://gcc.gnu.org/onlinedocs/gcc-4.5.0/gcc/Link-Options.html#Link-Options and they should not take precedence over command line parameters. I even copied libraries from ~/fcgi-2.4.0/libfcgi/.libs/ and /usr/local/lib/ in /usr/lib/, where I found cgi libraries, still the file was not found. I tried to Makefile again but I discovered that the script is not compatible with bash, it has blanks before and after = in variable assignments, and there may be other differences. Of course, the libraries have not been tested on Linux (http://www.fastcgi.com/devkit/doc/fcgi-devel-kit.htm#S2). I came to the conclusion that the libraries may be badly compiled during install. If you have any idea please let me know. Maybe I can compile a few basic libraries by hand, if you show me the options for gcc. I apologize for the fact that I'm new at c under Linux, but I hope that I can use fastcgi on such a widespread distribution even if I'm not a developer of fastcgi. Doru From jcxxr at yahoo.com Sat Jun 12 23:58:13 2010 From: jcxxr at yahoo.com (Jean-Christophe Roux) Date: Sat, 12 Jun 2010 20:58:13 -0700 (PDT) Subject: [FASTCGI] fastcgi, iostream, vector Message-ID: <102784.10428.qm@web35303.mail.mud.yahoo.com> Hello, I am using fastcgi on a Centos 5 box with nginx. The following program compiles (g++) and runs properly from the command line but it fails when run through a browser: The error in the logs is something like: upstream closed prematurely FastCGI stdout while reading response header from upstream If, instead of , I include the failure is the same. I don't quite understand what the problem is. Could someone explain me the problem or points me to a good reference on it. Thank you 1 #include "/usr/local/include/fcgi_stdio.h" 2 #include 3 #include 4 5 int main(void) 6 { 7 while (FCGI_Accept() >= 0) 8 { 9 printf("Content-type: text/html\n\n"); 10 printf("hello"); 11 } 12 return EXIT_SUCCESS; 13 } -------------- next part -------------- An HTML attachment was scrubbed... URL: From roger at bufferoverflow.ch Wed Jun 16 07:27:38 2010 From: roger at bufferoverflow.ch (roger at bufferoverflow.ch) Date: Wed, 16 Jun 2010 13:27:38 +0200 Subject: [FASTCGI] License Issue: Request to change License Message-ID: <20100616132738.mo97r1fe8o44owws@www.bufferoverflow.ch> Dear Bill Snapper, Dear fastcgi-maintainer & developers As already mentioned on Debian Bug report #466117 [1] the fcgi-2.4.0 library contains tree files (libfcgi/os_win32.c, libfcgi/os_unic.c, include/fcgios.h) with the following license condition: ------------------------------------------------------------------ * Copyright (c) 1996 Open Market, Inc. * All rights reserved. * * This file contains proprietary and confidential information and * remains the unpublished property of Open Market, Inc. Use, * disclosure, or reproduction is prohibited except as permitted by * express written license agreement with Open Market, Inc. * * Bill Snapper * snapper at openmarket.com ------------------------------------------------------------------ I currently do not believe, that most of the users of that library have "written license agreement with Open Market, Inc." for using the library. Therefore it is forbidden to use that library from a legal perspective. As long as I read on Wikipedia website [2], the company Open Market Inc. does not longer exists and so from my perspective it is unclear who to copyright holder of the mentioned files is. I would encourage you to release these files under the license provided within LICENSE.TERMS file which is part of the distribution and also available on the fastcgi.com website [3]. If there is no written license agreement, the alternatives for users might be using another library (e.g. http://www.nongnu.org/fastcgipp/). Could you please release these files under other license conditions? Thank you & Best Regards Roger [1] http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=466117 [2] http://en.wikipedia.org/wiki/OpenMarket [3] http://www.fastcgi.com/drupal/node/6?q=node/14 From roger at bufferoverflow.ch Fri Jun 18 09:24:04 2010 From: roger at bufferoverflow.ch (roger at bufferoverflow.ch) Date: Fri, 18 Jun 2010 15:24:04 +0200 Subject: [FASTCGI] License Issue: Request to change License In-Reply-To: References: <20100616132738.mo97r1fe8o44owws@www.bufferoverflow.ch> Message-ID: <20100618152404.0b43xlpabocws8o0@www.bufferoverflow.ch> Hi Olexiy Ok, you think the following sentence from LICENSE.TERMS file will override the License Terms written in the other files. "The following terms apply to all files associated with the Software and Documentation unless explicitly disclaimed in individual files." That sound feasible, I will check that with a Lawyer to verify. by the way, Bill Snapper is not reachable: (reason: 554 5.7.1 : Recipient address rejected: Access denied) Thanks Roger Quoting Olexiy Buyanskyy : > Hi, > > I see opposite information in LICENSE.TERMS. > I think that this file covers the entire package and it does not > mention getting > written permission. > > -- > Olexiy > > On Wed, Jun 16, 2010 at 7:27 AM, wrote: >> Dear Bill Snapper, Dear fastcgi-maintainer & developers >> >> As already mentioned on Debian Bug report #466117 [1] the fcgi-2.4.0 >> library contains tree files (libfcgi/os_win32.c, libfcgi/os_unic.c, >> include/fcgios.h) with the following license condition: >> >> ------------------------------------------------------------------ >> *  Copyright (c) 1996 Open Market, Inc. >> *  All rights reserved. >> * >> *  This file contains proprietary and confidential information and >> *  remains the unpublished property of Open Market, Inc. Use, >> *  disclosure, or reproduction is prohibited except as permitted by >> *  express written license agreement with Open Market, Inc. >> * >> *  Bill Snapper >> *  snapper at openmarket.com >> ------------------------------------------------------------------ >> >> I currently do not believe, that most of the users of that library have >> "written license agreement with Open Market, Inc." for using the library. >> Therefore it is forbidden to use that library from a legal perspective. >> >> As long as I read on Wikipedia website [2], the company Open Market Inc. >> does not longer exists and so from my perspective it is unclear who to >> copyright holder of the mentioned files is. >> >> I would encourage you to release these files under the license provided >> within LICENSE.TERMS file which is part of the distribution and also >> available on the fastcgi.com website [3]. >> >> If there is no written license agreement, the alternatives for users >> might be using another library (e.g. http://www.nongnu.org/fastcgipp/). >> >> Could you please release these files under other license conditions? >> >> Thank you & Best Regards >> >> Roger >> >> >> [1] http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=466117 >> [2] http://en.wikipedia.org/wiki/OpenMarket >> [3] http://www.fastcgi.com/drupal/node/6?q=node/14 >> >> >> >> _______________________________________________ >> FastCGI-developers mailing list >> FastCGI-developers at mailman.fastcgi.com >> http://mailman.pins.net/mailman/listinfo.cgi/fastcgi-developers >> > > > From lists.drrngrvy at gmail.com Fri Jun 18 09:40:38 2010 From: lists.drrngrvy at gmail.com (Darren Garvey) Date: Fri, 18 Jun 2010 14:40:38 +0100 Subject: [FASTCGI] License Issue: Request to change License In-Reply-To: <20100618152404.0b43xlpabocws8o0@www.bufferoverflow.ch> References: <20100616132738.mo97r1fe8o44owws@www.bufferoverflow.ch> <20100618152404.0b43xlpabocws8o0@www.bufferoverflow.ch> Message-ID: On 18 June 2010 14:24, wrote: > > by the way, Bill Snapper is not reachable: > (reason: 554 5.7.1 : Recipient address rejected: > Access denied) > Recently I tried to contact Bill Snapper and the other people listed variously on the site or the headers but with no luck. Is any copyright holder still contactable? Regards, Darren -------------- next part -------------- An HTML attachment was scrubbed... URL: From fastcgi-developers at wilber.pointclark.net Fri Jun 18 10:18:33 2010 From: fastcgi-developers at wilber.pointclark.net (Matt) Date: Sat, 19 Jun 2010 00:18:33 +1000 Subject: [FASTCGI] License Issue: Request to change License References: <20100616132738.mo97r1fe8o44owws@www.bufferoverflow.ch> <20100618152404.0b43xlpabocws8o0@www.bufferoverflow.ch> Message-ID: <004a01cb0ef1$2283eed0$e701a8c0@cu> Roger writes... ["by the way, Bill Snapper is not reachable: (reason: 554 5.7.1 : Recipient address rejected: Access denied)"] I'd address issues like this to the mailing list owner: David Birnbaum as well as the guy still maintaining the code: Rob Saccoccio They would have a better idea and might have other people for you to contact. From preston at bannister.us Fri Jun 18 12:08:39 2010 From: preston at bannister.us (Preston L. Bannister) Date: Fri, 18 Jun 2010 09:08:39 -0700 Subject: [FASTCGI] License Issue: Request to change License In-Reply-To: <004a01cb0ef1$2283eed0$e701a8c0@cu> References: <20100616132738.mo97r1fe8o44owws@www.bufferoverflow.ch> <20100618152404.0b43xlpabocws8o0@www.bufferoverflow.ch> <004a01cb0ef1$2283eed0$e701a8c0@cu> Message-ID: As to who (if anyone) holds the copyright, that would seem an open question. As to reaching Bill Snapper ... there is this thing called Google, which yields: http://www.linkedin.com/pub/bill-snapper/0/28/ab4 http://www.facebook.com/billsnapper No public emails that I can see, but both sites have in-site messaging. On Fri, Jun 18, 2010 at 7:18 AM, Matt < fastcgi-developers at wilber.pointclark.net> wrote: > Roger writes... > ["by the way, Bill Snapper is not reachable: > (reason: 554 5.7.1 : Recipient address > rejected: Access denied)"] > > I'd address issues like this to the mailing list owner: > David Birnbaum > > as well as the guy still maintaining the code: > Rob Saccoccio > > They would have a better idea and might have other people for you to > contact. > _______________________________________________ > FastCGI-developers mailing list > FastCGI-developers at mailman.fastcgi.com > http://mailman.pins.net/mailman/listinfo.cgi/fastcgi-developers > -------------- next part -------------- An HTML attachment was scrubbed... URL: From ninive at gmx.at Sat Jun 19 08:15:34 2010 From: ninive at gmx.at (double) Date: Sat, 19 Jun 2010 14:15:34 +0200 Subject: [FASTCGI] Compile Message-ID: <4C1CB4E6.1000604@gmx.at> Hello, fcgi-2.4.1-SNAP-0910052249 does not compile on GCC 4.4, because libfcgi/fcgio.cpp misses Thanks Marcus From roger at bufferoverflow.ch Tue Jun 22 07:18:21 2010 From: roger at bufferoverflow.ch (roger at bufferoverflow.ch) Date: Tue, 22 Jun 2010 13:18:21 +0200 Subject: [FASTCGI] License Issue: Request to change License In-Reply-To: <20100618152404.0b43xlpabocws8o0@www.bufferoverflow.ch> References: <20100616132738.mo97r1fe8o44owws@www.bufferoverflow.ch> <20100618152404.0b43xlpabocws8o0@www.bufferoverflow.ch> Message-ID: <20100622131821.xglelws0qoo44w44@www.bufferoverflow.ch> Hi all I have discussed that with a Lawyer and got the following answer: The component is an associated file to the FastCGI Application library source code and the license terms (that allow the use copy etc. for any purpose) of FastCGI state that the same terms apply to all associated files "unless explicitly disclaimed in individual files". The terms in the files (libfcgi/os_win32.c, libfcgi/os_unic.c, include/fcgios.h) state other license terms, however, they do not explicitly disclaim the contradicting license terms of the FastCGI Application. Therefore, the terms of these files are not valid from a legal perspective. => good news! just the license available on LICENSE.TERMS is valid! Thanks & Best Regards Roger Quoting roger at bufferoverflow.ch: > Hi Olexiy > > Ok, you think the following sentence from LICENSE.TERMS file will > override the License Terms written in the other files. > > "The following terms apply to all files associated with the Software > and Documentation unless explicitly disclaimed in individual files." > > That sound feasible, I will check that with a Lawyer to verify. > > by the way, Bill Snapper is not reachable: > (reason: 554 5.7.1 : Recipient address > rejected: Access denied) > > Thanks > > Roger > > > Quoting Olexiy Buyanskyy : > >> Hi, >> >> I see opposite information in LICENSE.TERMS. >> I think that this file covers the entire package and it does not >> mention getting >> written permission. >> >> -- >> Olexiy >> >> On Wed, Jun 16, 2010 at 7:27 AM, wrote: >>> Dear Bill Snapper, Dear fastcgi-maintainer & developers >>> >>> As already mentioned on Debian Bug report #466117 [1] the fcgi-2.4.0 >>> library contains tree files (libfcgi/os_win32.c, libfcgi/os_unic.c, >>> include/fcgios.h) with the following license condition: >>> >>> ------------------------------------------------------------------ >>> *  Copyright (c) 1996 Open Market, Inc. >>> *  All rights reserved. >>> * >>> *  This file contains proprietary and confidential information and >>> *  remains the unpublished property of Open Market, Inc. Use, >>> *  disclosure, or reproduction is prohibited except as permitted by >>> *  express written license agreement with Open Market, Inc. >>> * >>> *  Bill Snapper >>> *  snapper at openmarket.com >>> ------------------------------------------------------------------ >>> >>> I currently do not believe, that most of the users of that library have >>> "written license agreement with Open Market, Inc." for using the library. >>> Therefore it is forbidden to use that library from a legal perspective. >>> >>> As long as I read on Wikipedia website [2], the company Open Market Inc. >>> does not longer exists and so from my perspective it is unclear who to >>> copyright holder of the mentioned files is. >>> >>> I would encourage you to release these files under the license provided >>> within LICENSE.TERMS file which is part of the distribution and also >>> available on the fastcgi.com website [3]. >>> >>> If there is no written license agreement, the alternatives for users >>> might be using another library (e.g. http://www.nongnu.org/fastcgipp/). >>> >>> Could you please release these files under other license conditions? >>> >>> Thank you & Best Regards >>> >>> Roger >>> >>> >>> [1] http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=466117 >>> [2] http://en.wikipedia.org/wiki/OpenMarket >>> [3] http://www.fastcgi.com/drupal/node/6?q=node/14 >>> >>> >>> >>> _______________________________________________ >>> FastCGI-developers mailing list >>> FastCGI-developers at mailman.fastcgi.com >>> http://mailman.pins.net/mailman/listinfo.cgi/fastcgi-developers >>> >> >> >> > > > > > _______________________________________________ > FastCGI-developers mailing list > FastCGI-developers at mailman.fastcgi.com > http://mailman.pins.net/mailman/listinfo.cgi/fastcgi-developers From headset001 at yahoo.com Thu Jun 24 04:30:08 2010 From: headset001 at yahoo.com (Doru Georgescu) Date: Thu, 24 Jun 2010 01:30:08 -0700 (PDT) Subject: [FASTCGI] undefined reference to `FCGX_GetParam' Message-ID: <444557.37821.qm@web52304.mail.re2.yahoo.com> Some FastCGI developers please send to me the compile command they use to compile the FastCGI library, together with the current directory where they run it in the fastcgi directory tree and the version of the operating system they use. It might help me to compile FastCGI on Ubuntu. If anyone knows about compiling FastCGI on Linux/Ubuntu, whether is works or not, please let me know. Doru