Welcome! Log In Create A New Profile

Advanced

Pass uid/gid to php-fpm

Posted by Nikolas Hagelstein 
Re: Pass uid/gid to php-fpm
November 02, 2009 10:00PM
On Mon, Nov 2, 2009 at 6:57 PM, Hugo Monteiro <monteiro.hugo@gmail.com> wrote:

> AND bandwidth limitation per user.

Using what? Don't say cpanel or some other garbage. It would have to
be something that tracks packets by user ID in a database.
Hugo Monteiro
Re: Pass uid/gid to php-fpm
November 02, 2009 10:06PM
On Nov 3, 2:58 am, Michael Shadle <mike...@gmail.com> wrote:
> On Mon, Nov 2, 2009 at 6:57 PM, Hugo Monteiro <monteiro.h...@gmail.com> wrote:
> > AND bandwidth limitation per user.
>
> Using what? Don't say cpanel or some other garbage. It would have to
> be something that tracks packets by user ID in a database.

An example using iptables, tc and the system uid.

http://www.linuxquestions.org/questions/linux-server-73/iptables-and-tc-for-limiting-bandwidth-per-linux-user-744365/

But this is really OT. The discussion is about the most secure and
flexible way to execute php dinamically setting the executing user uid/
gid, in a large environments.

R's

Hugo Monteiro.

(Off to bed now, but i'll be reading in the morning =))
Re: Pass uid/gid to php-fpm
November 03, 2009 06:02AM
On Tue, Nov 3, 2009 at 3:05 AM, Hugo Monteiro <monteiro.hugo@gmail.com> wrote:
> But this is really OT. The discussion is about the most secure and
> flexible way to execute php dinamically setting the executing user uid/
> gid, in a large environments.
>
> R's
>
> Hugo Monteiro.
>
> (Off to bed now, but i'll be reading in the morning =))
>

Hi !
Do you mean SuExec ?

http://www.perfectacumen.com/docs/HowTo_QA.html#qa_suexec
http://litespeedtech.com/support/forum/showthread.php?t=2915

Perhaps i am mistaken, but these features are lacking from php-fpm.
It would be worthwhile to write the appropriate nginx lsapi module.


Best regards

dreamcat4
dreamcat4@gmail.com
Hugo Monteiro
Re: Pass uid/gid to php-fpm
November 03, 2009 08:08AM
dreamcat four wrote:
> On Tue, Nov 3, 2009 at 3:05 AM, Hugo Monteiro <monteiro.hugo@gmail.com> wrote:
>
>> But this is really OT. The discussion is about the most secure and
>> flexible way to execute php dinamically setting the executing user uid/
>> gid, in a large environments.
>>
>> R's
>>
>> Hugo Monteiro.
>>
>> (Off to bed now, but i'll be reading in the morning =))
>>
>>
>
> Hi !
> Do you mean SuExec ?
>
> http://www.perfectacumen.com/docs/HowTo_QA.html#qa_suexec
> http://litespeedtech.com/support/forum/showthread.php?t=2915
>
> Perhaps i am mistaken, but these features are lacking from php-fpm.
> It would be worthwhile to write the appropriate nginx lsapi module.
>
>
> Best regards
>
> dreamcat4
> dreamcat4@gmail.com
>

Hi dreamcat,

From my understanding, SuExec, appart from the security stuff, works in
regular CGI mode, which is not what we are discussing here.
Please read the thread and not just the last messages.

R's,

Hugo Monteiro.
Jason Giedymin
Re: Pass uid/gid to php-fpm
November 03, 2009 08:16AM
This thread is already all over the place.

FPM could use the features of suexe, would be nice to have someday.

-Jason

On Nov 3, 2009, at 8:07 AM, Hugo Monteiro <monteiro.hugo@gmail.com>
wrote:

>
> dreamcat four wrote:
>> On Tue, Nov 3, 2009 at 3:05 AM, Hugo Monteiro <monteiro.hugo@gmail.com
>> > wrote:
>>
>>> But this is really OT. The discussion is about the most secure and
>>> flexible way to execute php dinamically setting the executing user
>>> uid/
>>> gid, in a large environments.
>>>
>>> R's
>>>
>>> Hugo Monteiro.
>>>
>>> (Off to bed now, but i'll be reading in the morning =))
>>>
>>>
>>
>> Hi !
>> Do you mean SuExec ?
>>
>> http://www.perfectacumen.com/docs/HowTo_QA.html#qa_suexec
>> http://litespeedtech.com/support/forum/showthread.php?t=2915
>>
>> Perhaps i am mistaken, but these features are lacking from php-fpm.
>> It would be worthwhile to write the appropriate nginx lsapi module.
>>
>>
>> Best regards
>>
>> dreamcat4
>> dreamcat4@gmail.com
>>
>
> Hi dreamcat,
>
> From my understanding, SuExec, appart from the security stuff, works
> in regular CGI mode, which is not what we are discussing here.
> Please read the thread and not just the last messages.
>
> R's,
>
> Hugo Monteiro.
Jools
Re: Pass uid/gid to php-fpm
November 03, 2009 11:56AM
similar to some stuff already mentioned, my perfect solution, would be
being able to configure say 20 phps in one pool, and have the
webserver send the uid/gid, and when a request is made, a fastcgi php
suid's to the chosen user and then runs the code. with additional
configuration to limit the number per user that can be run.

This way for say 50 users, I could still have 20 php processes. Just
as an example.
Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 48
Record Number of Users: 6 on February 13, 2018
Record Number of Guests: 421 on December 02, 2018
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready